skysight-inc/HackerNews huggingface dataset:
The problem is that plain pip does not resolve incompatible dependencies. Pipenv (and better: Poetry) do. Here's an example:

You project depends on packages Spam and Eggs. Both of them depend on another package, Foo. The problem is, maybe that don't depend on the same version:

Spam 1 depends on Foo 2 or newer.
Spam 2 depends on Foo major version 2, but it's known to be broken with Foo 3.

Eggs 1 depends on Foo 2 or newer.
Eggs 2 requires some of the new features in Foo3.

If you run "pip install spam eggs", it will do something like this:

- Spam version 2 is the newest, so I'll install that.

- Spam 2 depends on Foo 2, so I'll also install Foo 2.

- Eggs 2 is the newest, so grab it!

- Oh no! Eggs 2 depends on Foo 3, but we've already installed Foo 2, so I'll warn you that I couldn't install Foo 3 and then keep on going.

Now you're in a state where "import eggs" will fail because its dependency on Foo 3 wasn't satisfied.

Suppose you use Pipenv (or better: Poetry) instead. It will do something like this:

- What's the newest version of Foo that can satisfy requirements for both Spam and Eggs?

- What's the newest version of Spam and Eggs that can use the version of Foo we identified in the previous step?

- Install Foo 2, Spam 2, and Eggs 1.

Now you have Eggs 1 instead of Eggs 2, but all the versions play nicely together. And if you say "but I really want Eggs 2!", it would give you an error message like "well, that requires Foo 3, but that means you'll have to roll back to Spam 1. Are you OK with that?" The point is that it figures all this stuff out for you and gives you the information to make smart decisions.

This is "dependency resolution". Poetry is great at it. Pipenv is decent at it. Pip doesn't do it at all. That's the real reason these tools are becoming popular.
USB thumb driver big.

Perhaps it was on a laptop?
Nothing to worry about. Mark will offer everyone 1 year of free credit monitoring.
Book of Beasts: The Bestiary in the Medieval World
Excel supports encryption[1], as does whatever operating system was used to prepare these drives.

The question is, why was someone moving a physical storage device with sensitive data on it without being smart or careful enough to encrypt it?

1. https://support.office.com/en-us/article/protect-an-excel-fi...
It's pretty demotivating to have "leaders" who ignore every technical expert in their organization jumping up and down, waving their arms, shouting "Don't buy that!"

Happens all the time, though.
I use this workflow with poetry 1.0.0 just fine
Add 'issuing date' to the token, revoke all before a given issue date by a single date field in your auth table. Effectively clears all tokens. Would that work, if done up front?
Airplane safety is/must be regulated by laws, not by companies cultures and values.

In the case of boeing/uber the problem is the regulators are getting more and more relaxed and/or corrupt.
I’ve been consistently impressed with the quality of Amazon productions. Granted I don’t watch much tv or movies. So I can’t comment on the size of their library, maybe I’ve only watched the “good” ones and haven’t made it to the back catalogue.
That’s not an indication of compromise: just you increasing the odds of people creating predictable passwords. If you’re concerned about dumps, setup one of the services which checks against HIBP for known-leaked passwords and then put all of your effort into MFA (especially FIDO) because that will stop the kind of attacks which are common in this century: immediate use of compromised credentials, high-skill phishing, etc.
I am not a fan of AT&T, but it appears what they didn't want included was their ADSL1 speeds, which are probably utter rubbish for obvious reasons. The problem here is that there are people still on those plans.
Is it your opinion that understanding the meaning of "two primes" is simpler than understanding the meaning of even, odd, tripling, halving, and adding on3?
Since whatever his actual work was is still covered by NDAs, we can’t actually say whether or not he had any involvement with price fixing. I don’t really think we should take him (or any other politician) at their word on this kind of stuff.
Coming from a culture without this obsession, it took me a very long time to learn the concept of generations. And I'm quite upset that I did; it's fairly deeply embedded in my mind, now, as I tied it to so many other concepts in a desperate attempt to make it make any sense. (Is a generation twenty years, or fifty? I still don't know.) It takes some effort to make that realisation now, but I remember thinking exactly those arguments when I was younger, trying to reject the concept.
OpenCyc hasn't been a thing for something like a decade, so even if "last time" was yesterday, it'd still be on outdated information (because Cycorp keeps things proprietary, hidden and unauditable). Do you know when they last pushed it out? It's been a while.
They are just following the Digg roadmap. We all know how that turned out.
That would be an interesting twist on purchasing "cosmetic skins" IRL-ish (or more likely, monthly subscription. "For $5/mo more, you get our no gray-hair add-on"
https://web.archive.org/web/20191212221610/https://harpers.o...

https://outline.com/y7DM9v

http://archive.is/DHAg6
Each one shows what they represent when you hover.
It's an interesting puzzle, but is there any significance to it?

Are there an infinite number of sequences like this, but with different numbers or different operations? Is there any value proving things about them? Seems like a shot in the dark looking at an arbitrary sequence and proving things about it.
Every time you have to revoke a user's access, the entire organization has to log in again?
I worry that eventually they're going to force everyone onto the new design, though.
old.reddit.com, my account is even set up to redirect me to it automatically.

It still wasn't enough to make me stick around. The popups on my phone to use the app on every page load are infuriating. Especially when I use Firefox on my phone, and it tells me to "Continue with Safari." I guess because Google started doing that bullshit on their apps, it's okay for everybody else to copy it.
I don't like the phrasing the article used. The domain of the Collatz function is the set of positive natural numbers, which is countably infinite. Unless I'm misunderstanding the quote, it doesn't make sense to refer to percentages of infinite quantities.

In the formal sense of the term, "almost always" means that a property applies to all elements of an infinite set, with all
exceptions comprising a subset with a smaller cardinality than the original set.

I usually see this term applied in the sense of measure theory, where the sets under study are uncountably infinite (or greater). Being that the naturals are countably infinite, the only way I can interpret this statement is that Tao has proven all but finitely many elements do not have an orbit terminating in 1 under the Collatz map.

Is that correct? If not, would someone mind clarifying the use of percentages here?
Until recently my HN password was all zeroes. It was accepted. That's fine. I don't care too much if I lose my account.
A related question that I would argue is equally relevant: how hard is it to become productive on a Rust code base if you're good at other languages? And how much does it vary by language?
> limit what's available by raising the barriers to entry

But that’s what you would have to do youself anyway. You can’t use all fresh upstream version of everything, since they don’t all work together. So some versions you’ll have to hold off on, some other versions might require minor patching. But this is exactly what distro maintainers do.
Another option is to use Linux and try your best to run essential Windows software using Wine or in a VM, that way you can play in the Windows-world without being committed to it. It "Works For Me"...
Do you know examples of these services? What can you search for that does this?
On the other hand, the United States was created by people who preferred the former.

The tree root, branch, leaf, metaphor is nice. It could just be that institutions, whether economic or civic, go through a lifecycle, and that notions of 'progress' are just a cell's perception of advancements towards the next step of the cycle.

Being a solid root or branch is no bad thing. But neither is being a seed. Not all seeds will sprout. Not all have too.

Nature forces an economy of energy. Problems are 'solved' by mutants as they become adaptive in a certain ecology. This also implies a crowding out of the less adaptive.

Go, and be a happy root. But do not despair over the happy leaves on the wind, nor the happy seedlings.
Funny you mentioned this. A friend's girlfriend revealed that that's how she uses Twitter the other day. I'd imagine it's more common than we think.
I'm actually quite experienced with web scraping, mostly using PHP and XPath, but also with Javascript as well as a custom approach written in Rust. I know in detail what an inconsistent mess everything is.

That's why I'm so uncomfortable handling things like bank transfers over such inconsistent, buggy systems, which is what Plaid does. It's not read-only: https://plaid.com/use-cases/consumer-payments/

Not to say I don't trust Plaid, I'm sure they're aware of all this and very careful about how they do things.
Per user field.
I was not replying to you, but rather to https://news.ycombinator.com/item?id=21776078. Probably you were confused by that comment being [dead], and assumed that I was replying to your adjacent one instead.

This happens from time to time, and I'm not sure how best to eliminate the confusion.
Unmasking+The+Gentiles:+The+Role+of+Europeans+In+Bible+Prophecy
I have a Node service where I get tens of thousands requests a second and I still thought Node was single threaded. Where can I read about this?
This is only true if A) the thief knows that the vehicle they looted belonged to an FB employee (which is possible) and B) they didn’t already inspect the contents of the hard drives themselves and C) they read this article and did the math.

Seeing as this theft occurred weeks ago, it’s hard to see this story compromising any kind of security. It’s foolish to assume that this announcement somehow makes things worse when an unencrypted hard drive walked off the premises and was stolen.
For me, and perhaps others, there is a desire to see this project explicitly move aside (vs slowly die), so that poetry and other projects can take the reins.

A lot of people say “just fork it” or “choose something else”, but the problem is that python is a finite community with a finite amount of energy, and a lot of this energy has been absorbed by the star power Kenneth acquired from his prior successes (namely, requests... which btw now has an even better replacement called httpx).

It’s almost like Kent needs to come out and say “I’m sorry I screwed up, here’s my towel; good night.”, so that people can move on.
I spent about 10 years as a key member at AS220’s fab lab. Since I’m an engineer by training I figured I could help enable art by helping Artists on the tech side at the lab. I taught classes, developed curriculum, designed projects, helped with machine maintenance. It was fun and I ended up “making my own art”. Now I make Wordclocks in my basement based on some of the projects I developed for them.
Cyc itself probably won't be: proprietary information is something that modern scientists tend to know better than to invest time in. Symbolic AI, though, hasn't really died.
It has indeed been a while, unfortunately. I don't know the exact date. Some of us here are trying to push for a revival of OpenCyc or something similar, to democratize things and get third-party developers playing with the system, but for now OpenCyc is not really supported.
People want to share and be social. It's inherent to our nature. People are now realizing they don't want a down to the bit extremely searchable archive of what they've shared. They see it ruining lives and they do not want to be a part of it. Talk to any kid. Facebook is "old", "creepy", "dead", but they will use tiktok/snap because it's fun and seemingly ephemeral.
You've given up the benefits of a stateless token if you're looking in the database to check it's state all the time.
Previous (lack of) discussion

https://news.ycombinator.com/item?id=21783626
Dota 2 with Large Scale Deep Reinforcement Learning [pdf]
We made these projects based on work that we did in companies and day-to-day software engineering work. The idea is to inspire engineers to learn real skills by getting their hands dirty.
Geocities was first platform that was successful due to this community moderation model - they did however give payout to moderators when they IPO's; I think it was $1,000 USD?
Yeah, it's called polyfills. It's bloat when not needed.
I'm mainly a desktop user, so for me the new design is, how shall I put it politely, utter shite?

One of the things the new design has made much harder is the discovery of new subs; in the old reddit you could generally speaking find a list of related subreddits on the right side of the screen. Not anymore (sometimes they're buried in the wiki, but not always). It's a shame, because discovering new and interesting (and weird) topics was one of the best things about it. Also, to echo many users here, my usage of the site has dropped right down after the redesign. It's a shame because it was for many years one of my favourite places on the Internet.
JWT were aiming to be stateless, yet they cannot be stateless if you need them to be revocable. If you keep using plain sessions you got a SPOF, but you are immune, for a whole lot of consistency and cred management problems.

http://cryto.net/~joepie91/blog/2016/06/19/stop-using-jwt-fo...
I feel like you've asked this in an unnecessarily adversarial tone, but the question is a great one whose answer is valuable for understanding this type of thing.

I don't know what the answer is, I'm just saying it's a good question.
I think there are two great options:

- https://paseto.io

- http://macaroons.io

I use simple http only cookies with the following setup:

"cookie_name=cookie_value; Domain=sub.domain.com; Path=/; Secure; HttpOnly; SameSite=Strict; Max-Age=31557600"

This is valid for a year when you can decide if you want to renew it. Everything else stays on our end and we controll sessions, permissions, etc. Javascript (in theory) cannot access these cookies.
Sounds awesome, looking forward to your future post!

Are you using an existing smartwatch or building something yourself there too?
So to "change a lightbulb", so to speak, the system decides something like "turn off the lamp first". But then the evaluation above says that the human would not dislike touching the bulb, but, in reality, it's still too hot.

So you could incorporate some kind of cooling rate, then change the above to "When an incandescent bulb has been on x of the last y minutes it is too hot to touch".

This all seems just impossibly complicated (not that I can think of something simpler!) - am I missing anything?
Yea, that makes sense. It's hard to think of a one-liner to accurately describe what Real Dev is about.
Is anybody else actually seeing this? I'm looking at Reddit right now and see comments just fine.
The recommended installation method still doesn't work without manual intervention. For the reference, I use WSL with the latest Ubuntu LTS version.

- I tried using the recommended installation method of

curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python

Didn't work. I don't have python installed, just python3. Fair enough.

- Using the above method, but replacing `| python` with `| python3`: The installation works. But trying to invoke poetry gives this error:

/usr/bin/env: ‘python’: No such file or directory

Turns out poetry executable is calling python in the shebang.

- Manually changed shebang in `$HOME/.poetry/bin/poetry` to `#!/usr/bin/env python3`: Now poetry runs successfully.

I mean, it works, but it is fragile (shebang probably needs to be manually reset at every update), not beginner-friendly, and not ergonomic. Installing using pip3 has the same issue. In comparison, pipenv is much easier to install. I was hoping this issue would not be present for poetry v1.0, but unfortunately it is.
Good luck! That's a really genuinely exciting prospect. I hope you succeed!
FIRST Robotics! Most fun volunteering you'll ever do plus the time to reward is pretty short as you watch the students grow and get excited by engineering and business.
Yes, it was a $$ grab by the investment firm that took over in Sept. Transdev, their previous parent co, gave Blackstreet Capital Holdings somewhere around $20ml to take ownership of SuperShuttle. From what I understand Transdev had tax credits coming due from losses they took in previous years and this was an easier out. There were others who were interested and in the game who were going to take less and actually keep it running but they were not considered. Not sure why Transdev didn't take either of those offers. Also, Transdev filed a suit last month in Delaware over a $7ml dispute in working capital adjustments with Blackstreet. Side note, person heading up the takeover from Blackstreet was not nice at all, to be polite.
That’s a GREAT idea!
- Principles by Ray Dalio

- Why We Sleep

- Seeking Wisdom, from Darwin to Munger.
You can technically achieve all of that even in an obscure language like Brainfuck but it doesn’t mean it’s a good idea.

Why would you duct tape hacks on top of hacks to achieve the result you want instead of using a language that has already all of the functionality built-in?
On the Philosophy of News
I've heard great things about Ovio https://ovio.org/ - they help coordinate open-source project development for social-impact organizations using volunteers like yourself
Introducing: Prefect Universal Deploy
Ok, I read the article. I guess this is more educational exploration rather than practical advice. So conclusion is that deterministic grid or adaptive deterministic grid (not directly discussed) beats random sampling.
The information in the example story could have been communicated much more succinctly via some type of (generated) infographic. Or, heck, just a table.

IMO, paragraphs of text are the worst way to communicate this type of data.
Probably the result of years of social engineering played upon the protesters. They fail to see Google is not their friend. But also fail to see that the part they play as Google employees is not that important either.
What tripped me up for a second is that primes don't have to be distinct. So 4 is sum of 2 + 2 and 6 is sum of 3 + 3.
I empathize greatly with these complaints - honestly, this is one of those threads I'm kind of happy to see appear on HN since I know some of the feedback might actually make it back to people who can make an impact. I also feel like Google Maps has spent the last few years in a backslide from a really incredible example of the promise of the web to surprisingly frustrating and not useful. I'm somewhat mystified that while the "discover around you" section of the app has been iterated on nothing has been done to improve the actual experience of searching for places on the map. I really hope someone builds an alternative like you suggest - I want to be able to look for bars near a music venue and see the walking distance within the results, for example. Why can't I search for a lunch spot within 5 blocks of the office I'm meeting in and without any steep hills on the way?
Sure it's anecdotal, I just heard it from my parents as a kid.

And obviously it's not exact, just look at how close I-94/I-90 are around North Dakota and compare it to I-90/I-80 or I-80/I-70. And a lot of the "East-West" interstates go diagonally or even North-South in places.

But I doubt they made the roads by laying rulers across the map (except maybe in Kansas or Oklahoma), and it does seem like they generally increment from 0-100 in each direction with odd/evenness decided by the primary axis.

Wikipedia has a lot to say on the matter, but I got bored reading all the special cases like how they number loops that connect two highways: https://en.wikipedia.org/wiki/Interstate_Highway_System#Numb...
Understanding BERT and Search Relevance
Current Cycorp employee here.

1) One-off contracts, sometimes with ongoing licenses, from various large organizations who have use cases for inference. We did a lot of government contracting for a while; now we mostly stay in the private sector.

2) An in-house dialect of Common Lisp that compiles to Java (it predates Clojure). Deployment is still fairly ad-hoc, but we build Containers.
> Let's say it is $2k/mo. I also run a small business.

Your server bill should be $100/mo - $200/mo max for a "small" business. I've ran a multi-tenant SaaS platform on a $200/mo DigitalOcean budget (server for Postgres, server for Redis, server for node.js apps) that brought in $30k/mo. If you're spending that much a month on cloud hosting, consider yourself got by the marketing of "serverless".
If he's using an up-to-date browser and a firewall it feels like the practical risk is relatively low.

What remote exploits are you concerned about in that scenario? Where it would affect 10.9, but not 10.16.

I'm not doubting they exist, but I'm really curious the threat scenario that would apply here, and how likely you think that might be.
Click Here to Kill: The Dark World of Online Murder Markets
Second that - Hyper-V is my preferred way to run a Linux dev machine on a Windows machine. Killer feature: dynamic memory (a VMs memory footprint grows and shrinks with its needs).
on second pass, I'm thinking they mean the mobile app now requires you to login, not the website. Thats a slightly different scenario.
We use encrypted JWT tokens. I'm not sure it was the best choice, but it was the simplest for our needs.

Basically the developer is responsible for generating & distributing auth tokens for each device that they want to use our service.

This service is designed to fit into games and AR apps, so we didn't want to force our own oauth flow on the end user. This way, the developer can generate a token on behalf of the end user, and distribute it how they see fit. (assuming one token per user, but it don;t overly matter, it's still tied to their account.)
That reminded me of a project where person leading it estimated that it will be cheaper and faster to use AWS, they only forgot all the hidden fees that AWS adds, most commonly the network fees (which are charged between AZs) or EBS etc.

On top of that an instance that claims to have specific parameters won't deliver the same performance as supposedly equivalent physical machine, so you will need to use bigger instances etc.

Ultimately the project did not have resources to set up DR version which was originally planned and still went way over the budget.
I'd think emulators would make short work of those, especially the DOS ones.
I don't think that was a nice comparison.

It just says that he doesn't like the pipenv cli, and some decisions made, but doesn't say why or how poetry is different.

The only thing it goes into detail with is a bug in pipenvs dependency resolution, and how their resolver avoids that bug.