skysight-inc/HackerNews huggingface dataset:
Congratulations. It might work for some kids, but my son never likes anything on him, we even cover him when he’s deep asleep and in a minute he’d push it away. And he’s been doing that since very little. Granted, the room temperature is comfortable and he has both diapers and a body on (with legs mostly uncovered). Personally I alwyas need something, even as light as a beed sheed around my torso for comfort.

What’s interesting about this find is that it may be related to the posture/positon of the body while sleeping and the heavy blanket probably relaxes the skeletal musculature and in turn the nervous system. I’m saying this as i noticed when i use the winter blanket, my body feels more aligned and pain free in the morning. One of the plusses of winter imo. Also noticed that when I sleep in a colder room I sleep/rest beter.
>If your org is large enough there is no way outsourcing is cheaper - it may be “easier”, but it inherently must cost more.

I would agree with this if you were talking about a real business, but this is government. An island full of 14 year olds can't be trusted to operate a power plant, even if they outnumber the employees of Pacific Gas & Electric. It's not a choice between outsource vs insource security, it's a choice between security or none at all.
As a (south) Asian immigrant I found this article trite. To answer the title—what happens after the test taking ends? Asians end up as the highest income demographic in the country. Thank you, tiger mom.

I also don’t appreciate the angsty ranting about Asian immigrant culture. Work hard, keep your head down, raise kids, provide for your family, respect your parents, etc. Those are great values and are as much traditional American values as Asian immigrant ones. It’s the American baby boomers and millennials with their fixation on self-gratification that are the outliers.
WeWork never achieving profitability does seem entirely possible, maybe even the most likely outcome. However, I'm not sure that leads to the conclusion that it will crush their landlords. All of those landlords are sophisticated parties who could understand the counterparty risk involved in their choice of tenant. They should be prepared to deal with making money from WeWork for the time being and then finding a new tenant.

With regard to Neumann walking away with $700m, I've got to say if you are going to make a bunch of money off schmuck investors, it would be hard to find a list of investors I have less sympathy for than the Vision fund investors.
Worse: The developer wants to get this checked in before they go on vacation.

And they really want to, because they don't want to have to do a bunch of merges when they come back...
Restoring a backup they already had?

Get outta here
My understanding of automatic differentiation (AD) is that it's only really possible at the compiler level, since you need the ability to interpret and manipulate function definitions themselves. Certainly, no library would be able to offer the same level of guarantees telling you if you've done it wrong, nor the same opportunities for optimisation.
They've been doing that since the early days of the Cydia store and jailbroken mods.
The review should simply be gated on passing the automated bits (tests/lint/warnings/style checkers whatever).
That's fine, because when something breaks the day after you've pushed, it's Friday and everyone's in the office. People are still going to rush the deadline, but putting the deadline earlier means you have time to deal with stuff that breaks after the deadline.
Why anyone would willingly plug an opaque, overly complicated, poorly optimized, externally controlled failure point into their tech stack is beyond me.
A key focus that I always have when mentoring juniors is confining their work scope to something they can refer back to. It is a common mentality to simply allow them to browse around the code and perhaps solve some simple bugs. To allow them to understand the system and how it all works. My thoughts on this is that doing so is akin to giving someone new to a spoken language a novel, suggesting they peruse the book and perhaps find a typo. Understandably this can be a lot to take in.

For me I assign them a fully refined task to create something and go through the full end to end process with them. It will allow them in the future when hitting a road-block at any step of the process to go back to this code, ask themselves "what did I do here which was right" and try to apply it to their current work.
Ask HN: What is the best way into a cybersecurity career in 2019?
As an mechatronics/research-engineer with great interest in pentesting and cybersecurity I'd like to make a career change. Where do I start? - comptia or cissp certs or is a university degree the only way?
Do you think Americans should be free to wire money to ISIS if it's a "ransom" - something as little as unlocking some digital photos?
That's fair. In that case, that explains why you did such an excellent job with especially the sections regarding DOM manipulation. All the visualizations with the accompanying code and the transitions were fun to follow, clear and informative.
My understanding is you don't explicitly handle that. For whichever place you're evaluating, you have some computation graph, and you use the elementary operators on that graph. So, if you have defined ReLU with an `if x >= 0 return x` clause, then if you evaluate the derivative at 0, that's the branch you go down, and you say the answer is 1.
It's interesting that the people being chosen with a kleroterion and black and white dice were called 'dikastes', since the mechanic was literally 'die casting' (as in die rolling, not the manufacturing process).
The part I would criminalize is the money-wiring part.
While the gradients don’t technically exist, you usually use the limiting value from one side (e.g for the commonly used ReLU activation, you can use either 0 or 1). This is justified by the observation that randomly initialized networks are extremely unlikely to encounter these particular values without some kinder of deeper conspiracy happening. You could put this on a mathematical footing by saying the set of non differentiable points has measure zero, for example.
I downloaded the iOS app. It bears minimal features, but does what this post saids. I briefly browsed over the list, it looks appealing to me as a startup founder. I found the searching features of the built-in podcast app was limited for me discover useful channels. Plus that I don’t want spend too much time on searching and verifying individual episodes. Having a list recommended for me is a big life saver. Way too go!
> at least 1000 tests

The threshold for this seems at least a little too high, doesn't it?
I set up Windows 98 on an old Pentium III for vintage gaming. I had forgotten how simple, fast and "you have one job" this is. Definite install on my Windows 10 machines.
Facebook does not commit to releasing any logic or algorithms determined to be competent from this challenge to the general public. This severely limits the value of this research to anyone other than Facebook. We are dependent on individual submitters finding it in the public interest to do so, which as Facebook does not, implies that many others will not either.

> Q: What rights do the participants of the challenge have to the tech they create for the challenge?
> A: They will retain full rights to their models trained on the training dataset.
KerberOS and MotionEyes

https://www.kerberos.io/
https://github.com/ccrisan/motioneyeos/wiki/Installation
Those JavaScript trackers pays for WebAssembly. Right not it's about the closest to the holy grail for cross-platform applications. The (for-profit) companies pushing the state of the art in browser technologies all happen to run on ads.
You can draw bright lines about some of these things. If a change claims to fix some bug, a test must demonstrate that. If I patch just the test into HEAD and run it, it should fail. If this is not the case then the change "needs more tests".

"Not readable" is why Google also has the "readability" process. A person without readability needs the pre-submit approval of someone with readability in that language. After a while, new people become acculturated and gain readability.

"Matter of judgement" is why hiring is absolutely critical to success in software. You must hire people with good judgement, and to the extent that you might intentional or unintentionally hire bozos, do so at a low enough rate that you can indoctrinate them.
My old dad said they banned marijuana after prohibition to give the prohibition enforcement agents something to do.
My pet peeve: sites that require all-numeric PINs when logging in online. Numbers make sense when you're punching buttons on a phone or ATM, but elsewhere, why limit my entropy to 10 possible characters instead of at least 62?

And there's a special place in hell for sites that require entering numeric PINs by clicking on a "keypad" of randomly generated button locations.
An API use case for a single app is pretty hard to justify, especially when it's coupled with other concerns like "but wouldn't this require the app to stay running in the background" or "but what happens if two apps both try to do this".
Hm there should be an example of a “right” password rule flow here

Many of these are so nitpicky that it loses credibility

“oh it doesnt let the user know the max character limit is 30 characters uwaaaah”

cases like these should be part of a checklist that shows this is a minor infractions instead of putting them all on the same level of shame
Why is a backup system so hard for people (especially businesses) to understand????
My local bank made a new website that does something similar, where the input for creating the password is truncated to be shorter than the field for entering the password. I forget the exact length but it is pretty short, like 10 characters. It took me forever to figure out why I couldn't log in to their new site.
Hi, this needs a checklist or ability to see severity of infractions because some of these edge cases are very dumb to elevate alongside the truly broken flows
So basically, we need another exFAT, but for SSDs?
Apple shouldve bought f.lux instead of copying it.
I believe flux even had a patent for warmth values.
Why would you ever need that? If you have administrator access, just perform whatever the local equivalent of `su` is.
Part 1: No, that doesn't follow at all.

Part 2: The reference is to a specific quote from Jefferson. Again, what you're saying just doesn't follow.
> We would still have to solve the politics of applying those technological advances uniformly rather than the benefit of a relatively small percentage of the species.

This is solved already... Capitalism makes it work across time.

(What is discovered now will with most certainty be available specie-wide in a couple of decades... and it's accelerating).
If ever I heard a reason to use C++ templates, this is it.
This is why a lot of projects use version control systems that encourage branching. Develop your feature as you wish in its own private branch, occasionally bringing in the latest changes from whatever your mainline branch may be, then only submit it for review when it's complete enough.
They have a lot of tests :-) Abseil-cpp alone has 2400 tests, at least in the open-source tree.

https://github.com/abseil/abseil-cpp/tree/master/absl/base
The oathtool command line app supports TOTP. It is pretty straightforward to script something if you need it. The package has the same name (oathtool).
I don't think being good bureaucrats is what any intelligent, hardworking people should aim towards. I think asian culture has some great tenets, hard work being the one i like the most. People should take the best things out of the different cultures. Too much deference to authority is not a good thing (in my opinion the weakest part of asian culture).
This is good work. It's amazing how the pressure has to come from outside to get any traction.

I just realized that I set up this Twitter account 10 years ago, this month:
https://twitter.com/passwordfail

Most sites don't email passwords anymore, so I suppose that's something.
Bank of America Discontinues 'ShopSafe' Virtual Credit Card Numbers
When I receive a PR that has actual problems, I usually make a branch from the code in question, and submit a PR to that branch with tests highlighting the problem, or the beginnings of a refactor that I'm asking for. I often don't have time to fully flesh out the problems, but helping to write the software with the requestor makes for much faster and effective feedback than plain text comments.
Hey, could you link that scatter plot extension? I couldnt see anything in your bio.

I've just been adding DC line charts and about to add scatterplots but was considering plotly.js instead. I'll be dealing with probably a couple thousand data points so performance may be critical?
It's certainly not the case that autodiff is only possible at the compiler level. I've implemented forward mode (via dual numbers) and reverse mode (via tapes / wengert nodes) autodiff in libraries before.
If you are interested in following along, the Swift for TensorFlow team has a design meeting every Friday. The meetings are live-streamed and anyone can join. I recommend them if you are curious and want to hear more about the challenges and opportunities! A recent talk had Jeremy Howard (of fasti.ai fame) present the full-featured deep learning API he has designed on top of Swift for TensorFlow.

You can find out more on the mailing list https://groups.google.com/a/tensorflow.org/forum/m/#!forum/s...
Women are shorter than men; some women are 7 feet tall.
Correct. We know this to be true because UPS lacked the capacity to deliver for Amazon a few years ago around the holidays, which is what prompted Amazon to start their own service.
So much negative in here! I mean, anyone who thought these were going to hit the market like an iPhone was always in for a rough surprise. We're talking small companies trying to run in a marketplace almost exclusively occupied by mega multinationals.

I'm really excited to see not just one but potentially two open phones around the corner. I really wish I wasn't about to move overseas so I could buy one (more likely, both), but as soon as I know where I'm living I will!
I mean, as far as I know, most would still implement this the same way.

Surely there could be a GUI framework that'll handle these Win32 Messages and dispatch them to your callbacks in your `Application` object but your application could be dealing with all sorts of messages not covered by your framework like WM_SYSCOMMAND, WM_POWERBROADCAST, WM_DEVICECHANGE, etc. and you'll find yourself with this classic Win32 Message Queue handling switch even in modern C/C++ Win32 GUI codebases.

Whenever you are interfacing with the Win32 API directly to set up and run a GUI application, this pattern will emerge:
https://gist.github.com/nathan-osman/18c2e227ad00a223b61c0b3...
A meteorite older than Earth shows evidence of ancient volcanism
Google and Microsoft are both offering equivalent products for free. I don't think Slack has established that they can maintain their pricing and continue to grow.
It can be hard to review badly formatted code. The reviewer has to put in effort to understand your change, but they have to put in more effort to parse the change if the formatting is bad.

"Why is this function's return value not being checked? Oh, turns out this person used a yoda conditional even though the rest of the code doesn't do that."

"Why is this block of code running even when the condition is false? Oh, turns out the else branch already ended and this part of the code is just indented wrong."

And so on. Even something as minor as `foo ()` vs `foo()` can stand out and act as a constant stream of mental speedbumps.

Claiming your change is high-level / only looking for feedback to the overall design doesn't change that. You're asking for a code review because you want the reviewer to read your code, but reading it is exactly the part that they're finding hard to do.

And it's not excusable, but the reviewer might be insulted that the reviewee is wasting their time and their feedback may be ruder / snappier as a result. After all, the reviewee could easily have put in the effort to run the auto-formatter, follow the existing code's style, etc.
Only other people need it.
Yes there is:

void foo(void* p=0); // has exactly the same ABI as
void bar(void* p);
bar(); // error: missing parameter
foo(); // shorthand for foo(0);
// void(*)(void*) is a different type than void(*)(void*=0)
// but they can be implicitly converted the same as
// eg void* and char*
How Life Became an Endless, Terrible Competition

Meritocracy prizes achievement above all else, making everyone—even the rich—miserable.

https://www.theatlantic.com/magazine/archive/2019/09/meritoc...

Recently on HN:

https://news.ycombinator.com/item?id=20741224
It looks like the Dating profile is separate from your main facebook profile (see the announcement). But that might not give you much comfort since they're still both under the facebook umbrella.
'they built the best computer in the world' yes, but then decided thats it we are done, and kept selling this one and the same computer for 9 years.
For a nice counterexample, check out login.gov, the unified authentication service that seems to be replacing individual approaches at many US government sites.

Their password requirements: “It must be at least 12 characters long and not be a commonly used password. That’s it!” [1]

Oh, and login.gov allows pasting from a password manager.

[1]: https://login.gov/help/creating-an-account/how-to-create-an-...
Thanks, though I don't think that's clear support (interesting research, all the same).

A study of concept/belief fixity and dynamics associated with those would be interesting. If difficult to design.
Using uppercase and lowercase letters and the symbols Chase supports, 0.25% of random 12-character passwords would be rejected by the repeating and consecutive rules.

Re-running the simulation to assume case-insensitivity results in 0.44% of random 12-character passwords failing these rules (assuming Chase treats aBc as an invalid sequence).

Note that Facebook also accepts variations on a password, for example if you have caps lock on, or if the mobile device automatically capitalizes the first character, or if an additional character is added at the end of the password.

More discussion on Facebook's policy here -> https://news.ycombinator.com/item?id=13426544
alive and well with huge strides in the framework, better than ever. that said ember gets much less press than it's peers, partly due to not being backed by a major fang corp and historical perception.

https://blog.emberjs.com/2019/08/15/octane-release-plan.html
I can cherry-pick counter-examples too, imagine Bill Gates or other billionaire paying a a billion dollar ramsom to Isis, but letting them walk away for free because he is "just a victim". A law against paying ramsoms should exist, maybe it should have exceptions for small amounts or something, but letting them legal by default it's way more problematic.
I think one clear distinction is if the review makes you think (1) my code sucks or (2) these people despise me.

It's much harder to power through (2) than (1).
Um... if "they" are system administrators, they do not need to brute-force password. They can just change it to whatever they want.
I think the next generation of AA will be more balanced in how they raise their kids, thus they will break all the stereotypes. Most of the examples used in this article are children of first generation immigrants who were raised in a super chaotic society, enduring poverty (maybe), immigrating to a completely different land. It is normal that they would advise caution and hard work to their children. But make no mistake, i think this tiger parenting stuff is super toxic. No children in America should be raised like a race horse.
Ask HN: How do you negotiate working on open source projects in your free time?
I have a project that I've worked on in my free time that is in the same field as what I do at work. I'm not sure how or if I can open source it without potential issues. Has anyone else delt with this before? There is currently no company policy or precedence for this.
Yeah, compare the very first two on there right now. The first is "can't use '%'". The next one has 7 very specific rules.
The interviewers were very nervous. I spent quite a bit of time calming them down. Once that happened I was able to determine what it would be like to work with them - which worked out quite well.
There is something better than security features: Case Law. Fax signatures are acceptable because judges have consistently ruled that they are. Sure a judge might agree that your emailed signature is also acceptable. But do you want to be the one to take the risk?

Most places now accept e-signatures these days. But there was a time when it was unknown how a judge would rule if one was in question.
That’s not surprising. Ember was forked from SproutCore which was designed to mimic the Cocoa API.

Ember’s model/view binding and event model still closely resembles Cocoa’s, as far as I know.
We had no-deploy Friday which made support & product people feel happy and devs dread the pileup on Monday. It has evolved into "don't deploy higher impact things on Friday" and "try not to deploy at all Friday afternoon". That gives us a half day to hear about issues and fix them before the weekend.
Not sure I follow you?
The action that a business should be punished for is not keeping their customer's information secure. Paying a ransom to recover after they are the victim of a crime should not be what they are punished for. If they were doing everything right but still got hit by ransomware I don't think they should be punished. If you can prove that they wrote their login info on a sticky note and left it in the main lobby then you should punish the bad security practice if it exposes other people's information.

Several parts of the world have kidnapping and piracy issues, and you can buy kidnapping/piracy insurance to pay ransoms in case you are the victim of such a crime. I think most people in the world acknowledge that sometimes bad things happen even when you take reasonable precautions, and you shouldn't be punished just because you were the unlucky one. Most security experts agree that no computer system is un-crackable, there are just varying levels of sophistication and access needed to do so. We've even seen that Stuxnet was capable of jumping air gaps. If a business had such good security that their database and backups were air-gapped but still was hit by ransomware do you think that they should still be fined?
Indeed, and the factor is about 95, which is close to 93, and that is not a coincidence, when you think about it.

If you want to crack my password, and I tell you that my password is L characters long, by skipping all passwords of length < L you've only saved about 1/N of the required effort (where N is the size of the character set you choose from).

In other words, telling someone the length of your password does not help them very much.
> Do social media workers have some kind of strategy for managing their public and private identities?

Got me, I'm a social media refusenik. I have only encountered one third party application for work that was lazy and broken enough to require FB login, and I made up a throwaway account specifically for it. (I also had to remove all the 127.0.0.1 entries for FB names in /etc/hosts, but that's different.)

Does doing that feel disingenuous to you because of Facebook's expectations, or a different reason?

(I personally have zero problems with lying to FB, given that FB routinely and consistently lies to the rest of the world in order to decrease others' ability to not do business with them.)
Does oathtool take stdin? Last time I looked it did not. I keep my TOTP secrets PGP encrypted and pipe them to goathgen.

$ gpg -d encrypted-secret.txt | goathgen

https://github.com/w8rbt/goathgen