skysight-inc/HackerNews huggingface dataset:
> A ‘70s Cessna like Savage flies isn’t the most expensive thing. $40-50,000 will get you a good used model.

That's still 1.5 to 2 times as much as the average person spends on a car (see https://www.cars.com/articles/heres-what-the-average-new-car...). And unlike a car, which you can get a license to operate for under $100, with a plane you'll need to spend ~$10,000 to get a license to operate the thing.

Flying is expensive. I had hoped that the emergence of the Light Sport Aircraft (see https://en.wikipedia.org/wiki/Light-sport_aircraft) back in the '90s would drive the cost down, but that doesn't really seem to have been the case. And LSAs are notoriously crash-prone compared to "real" planes (see https://www.aviationconsumer.com/maintenance/lsa-accident-re...), so in an effort to make flying more accessible we may have instead created a two-tier system where rich people get safe planes and less rich people get dangerous ones.

Sigh.
Jokes apart, the original article describing the algorithm is an excellent reading, you should take a look.

https://web.archive.org/web/20160418004150/http://freespace....
Today I would still use alternatives like PASETO [0] or Branca [1] tokens which the latter is a fernet-like secure alternative to JWTs.

The problem with JWTs is that they are discouraged by many cryptographers due to their "cryptographic agility" and provide a mixture of protocols which includes weak ciphers and configurations to shoot the programmer in the foot. Why include insecure ciphers in the first place? The mentioned alternatives stick to a single cipher for its intended purpose.

JWTs are inefficient for performance and are bloated in their data structure and have a performance hit when you parse the token to extract its properties compared with the same operation in other alternatives (simple session cookie require zero parsing and thus is faster).

And using them for sessions poses it own pitfalls [2] which you are better off with the alternatives or plain old session cookies.

They say that JWTs are "good when used right" but with those above footguns, that's like saying C++ is safe when used right, rather than having safe defaults.

[0] https://paseto.io/

[1] https://branca.io/

[2] http://cryto.net/~joepie91/blog/2016/06/19/stop-using-jwt-fo...
I've worked in a lot of startups and have never had to pay that whole price until we had decent revenue. The AWS Activate program [1] has been pretty solid for my current company.

There's a big joke going around that AWS is basically a VC that invests in startups with free services and then makes their money back on revenue once they've grown.

1. https://aws.amazon.com/activate/
> if I flip a coin, I know exactly the odds of getting heads, but I don't know whether I will get heads unless I can exactly predict the future state of the world.

No, that is a fundamental misunderstanding of what odds are. Odds are not a property of a system, odds are a description of your knowledge about that system. There is no such thing as "odds of the system", the odds for the same system can be vastly different for different observers.

If you know how to control the coin, then the odds for you are almost 1:0 for your intended face. For the person next to you who doesn't know you, it's probably 0.5:0.5. For the person that has watched you for a while, it might be 0.6:0.4, if that's the ratio of the faces that you flip (intentionally). All for the exact same system at the exact same moment.

Also, a binary distinction between "having no clue" and "perfect predictions" is not useful. While perfect predictions are the limit of an ever refined model, there are many steps in between a useless model that gives random predictions and a model that makes no mistakes whatsoever.
Vim for Python
> Even if you did not intended your comment is sounding racist, those poor country companies used the plane wrong.

This is an uncalled for exaggeration, and not based on anything I said. Lion Air lied about testing their angle of attack sensor, per that NYT article. It isn't racist to point out that fact.

And Ethiopian also had issues - for example, the copilot had just 200 hours of experience (https://www.businessinsider.com/ethiopian-airlines-flight-30...). Pilots have commented on how the gap in experience between the pilot and copilot can be confusing in an anomalous situation.

> Still, 200 hours of flying experience is far below the requirement to copilot a plane in countries including the US. In 2013, the FAA upped its copilot (also called first officer) qualification requirement to 1,500 hours from 250 hours, while European airlines often require at least 500 hours.

> And having just 200 hours of experience is especially cumbersome when flying a massive jet like the Boeing 737 Max 8, which was the plane involved in the March 10 crash, said Ross Aimer, the CEO of the airline consulting and legal firm Aero Consulting Experts.

> "Two-hundred hours is extremely low," Aimer told Business Insider. "In an emergency, it becomes a problem. If you have a complicated airplane and you basically put a student pilot in there, that's not a good thing. Even if the guy in the left seat has so much experience, if you have so much imbalance of experience, that can be a problem."

-------

> Maybe you can argue that Boeing has less then 100% blame but it is a lot more then 50%.

Yes I think there is blame on both sides. I don't think Boeing is "a lot more than 50%", personally. And I don't know that their safety culture is "completely broken" as is often claimed. I think there may be room for improvements, but these are highly-complex machines, and highly-complex organizations, that work hard to strike a balance between being economically-efficient and perfectly-safe (since no system is truly perfect). If we pull back the covers, I bet we will find similar tradeoffs and decisions being made regularly in most industries, for most manufacturers, and for most aircraft.
The company i recently started managing it for previously went through some business and personnel changes and so doesnt have a good hold on their IT budget. Ive been discovering and recording bills from only at&t for days now. Highlights:

1300$/month for IT support

800% difference in per month rate vs 1 year contract rate

Different departments cant talk to each other and have separate accounts. I have att.com accounts and businesscenter.att.com accounts. Is AT&T BusinessCenter different than AT&T BusinessDirect? You fuckin tell me

Before i started, we were paying over $10k a month to only AT&T, right now we're <$7k and I'm not done. We have an account manager that i havent talked to. Clearly hes either incompetent or malicious, no desire to loop him in. Never before have i wanted to killdozer a company so badly. I have better things to do than review bills (although clearly not).
That is always the key point it comes back to. Thanks.
It is very complicated, yes. The goal is to be AI's "left brain"; the slower, more methodical (and explainable!) end of the spectrum. We see our place as being complementary to ML's "right brain", fast-but-messy thinking.

I will say also that our focus on "common sense" means we make deliberate choices about where to "bottom out" the granularity with which we represent the world; otherwise we'd find ourselves reasoning about literal atoms in every case. We generally try to target the level at which a human might conceive of a concept; humans can treat a collection of atoms as roughly "a single object", but then still apply formal logical to that object and its properties (and "typical" properties). In one sense it isn't a perfect representation, but in another sense it strikes the right balance between perfect and meaningful.
Machine Learning for Cat Control
Offering software for snooping to governments is a booming business
Dealing with large institutions can be even more difficult than governments!

We recently awarded some grants to people for them to work with an open source scientific package we've been developing.

One of the groups actually gave the money back because it was so hard to get their University to deal with them being awarded money, it wasn't worth it for the amount involved.
https://outline.com/8nJ69A
This was probably in the bay. Which is one of the worst car break in spots in the country. Thieves dump anything they can not sell immediately. If it was drives, they are in a dumpster or a dump.

If it is a laptop, the data can only be accessed now if you pull the drive, or boot it to some kind of guest/safe mode. I'd guess whoever gets this won't know what they have and will wipe it.

That said, if someone figured out this was what it is, the data is probably worth what, millions of dollars? Is there a way the company could create a reward for this? Who would buy this kind of data, or who would pay to have it leaked? Who is it most useful to if held in secret?

The most damaging would probably be if it fell into the hands of The Intercept or Wikileaks, who could drip it out.
> The package which depends on the older version of libfoo is either dead, in which case you should stop using it, or it will soon be updated to use the newer version of libfoo

So you are suggesting that every time libfoo bumps its version I have to update the dependencies on all of my projects to use the latest, find and fix all the incompatibilities, test, release and deploy a new version? Seriously?
I built a successful productized SEO service
The cute dinosaur one you're talking about was Imzy: https://en.wikipedia.org/wiki/Imzy

Victoria never worked at Imzy though (and didn't leave for anything - she was fired). She was at Cake (https://cake.co/) for a while, I think that was between WeWork and LinkedIn.
You can make sense of a percentage of natural numbers with the concept of natural density: https://en.wikipedia.org/wiki/Natural_density

The natural density of a set is the limit as N goes to infinity of the proportion of the numbers up to N which are in the set.

For instance the natural density of primes, squares and cubes is 0 and the natural density of even numbers is 1/2. But all these sets are infinite so the same cardinality.
both of these links are excellent. i love that open color has sass and i can just use the variables in bootstrap. thank you.
The Neural Retrieval Hype, Justified [pdf]
In this thread line regarding small businesses, another critical point is that the $24,000 (and certainly in the $100k premise) also might be part of the remainder compensation or profit calculation for the owner of the business. Sure it pales next to the cost of five engineers and yet it could easily be anywhere from 1/10 to 1/3 of the annual profit for a small business. If you're the owner, that's a big deal over time. You never know how tight a small business has to operate, however typically it's thinner than not.
It isn’t about the result, it’s about the tools that have to be discovered to get that result. It’s likely there’s an as yet unknown branch of number theory required or perhaps a hidden link to something apparently unrelated.
Login Walls Stop Users in Their Tracks (2014)
Anand Giridharadas: “The Elite Charade of Changing the World” – Talks at Google
Holiday Hack Challenge – Elf University
The only thing I can find in my reddit feed is a bunch of annoying ass TripleByte ads.
Optimization if revocation isn't common:
- Keep a last revocation time somewhere that is cheap to frequently poll (Redis) or broadcast it to all your nodes
- Keep a revocation table
- Use iat and exp with your JWTs
- On revocation update the table and the last revocation time.
- On validation, only check the revocation table if iat < last revocation time. If you have to check the table, reissue the JWT with the same claims and exp but updated iat.
Yeah that's one of the reasons I download most content I intend to study from YouTube and watch it with a decent media player. Another major reason is ability to go frame-by-frame forward and back which is implemented in the YouTube player but doesn't work reliably.
Seconded. Apollo is fantastic.
For context, this is the just-released paper from OpenAI about OpenAI Five: https://twitter.com/OpenAI/status/1205541134925099008
My wish of a quantum heater will remain unfulfilled!
For business, dedicated servers are the only thing I am paying for (also mirrored on me on premises). Well there is still some storage fees from Mediafire but I am in a process of moving it to dedicates servers as well. Following few very unpleasant experiences with the cloudy stuff I've develop a simple rule. NOTHING gets done/developed for my businesses until I can run it on premises and rented dedicated servers.
Probably because Pete Buttigieg used to work there.
Generally speaking, yes. But I will qualify that by saying that I've never really found it necessary to have them every day. I've often found that a 3 day a week cadence works well.

I also don't find the need to insist that the participants actually be standing, or even in the same room. I think it's nice if those things are true, but also find value in a "virtual standup" done via email, IM, etc.
Wow! In 1 day you converted about $7500/year of customers. That’s impressive. This implies you’re already at MVP!

How long did it take you get those ~200 free plan users?

If you can repeat that every month, you’re already in “real, viable company/job” land. Perhaps you should consider spending at least a portion of your time on market rather than tech dev now.
What happens if some other process has already created a VM with this name and spec? Under most realistic scenarios I would rather VM creation failed than silently clobber someone else's VM.
I think financial data was where the company started. The first vertical I interacted with was real estate listings. We moved to basketball and then baseball. Aside from the articles, we sold "list" ads that would pick stats and throw players in a list. As we built click data, we were able to tune those lists to popular things.
Rubbish or not, the speeds should be included to give AT&T an incentive to move these customers to something more modern.
Fun fact, before it was re-branded to voat it was called whoaverse and wasn't a giant trove of nationalist and racist posts. It actually had decent discussions. Over time as more and more of the people were banned from posting on Reddit they had to migrate somewhere, and eventually overtook whoaverse at which point putt re-branded it to voat.
This is not correct.

I think your basic mistake here is thinking that sizes of infinite sets has to be measured by cardinality. Yes, that's one way, but usually not the most useful way; it's a very crude measure. Its only real advantage is the fact that it doesn't need any context to work. In most cases, though, more context-dependent measures of size are more appropriate.

For instance, typically, "almost everywhere" doesn't mean "except on a subset of smaller cardinality", it means "on a subset of measure 0".

It's easy to see why you might get these confused. In many of the typical cases of measure theory -- let's say R^n with Lebesgue measure for concreteness -- you're looking at a set of cardinality 2^(aleph_0), and any countable subset will have measure 0. (Indeed, any set of intermediate cardinality will also have measure 0, if such a thing exists, although famously the question of whether it does cannot be resolved.)

But you can also have subsets also of cardinality 2^(aleph_0) which nonetheless have measure 0. E.g., in R, the Cantor set has measure 0, although its cardinality is equal to that of R itself. If a certain statement was true except on the Cantor set, we'd still say it was true "almost everywhere".

(And all this is assuming we're using "almost everywhere" in the measure sense. Sometimes it's instead used to mean, except on a meagre set, which is a different notion; but that's not the usual meaning, so someone using it that way would hopefully say what they mean explicitly.)

In the case of the natural numbers, we frequently measure sizes of subsets by their natural density. The natural density of a subset S of the natural numbers is simply the limit of |S&cap;{1,...,n}|/n as n goes to infinity (this limit is not guaranteed to exist, of course). So when talking about the natural numbers, if we say something holds "almost everywhere", typically this means it holds except on a set of natural density 0.

(Remember, math terms are heavily overloaded!)

I hear there may be some people use "almost everywhere" when talking about the natural numbers to mean "except on a finite set", but I'd consider this use confusing; if that's what you mean, just say that.

Hope that clears things up.

Edit: It turns out that Tao is actually using the logarithmic density here, not the natural density. Oy. The importance of actually reading the paper, I guess...
He shouldn't need to mark it. Maps can tell that its users are spending 20 minutes to get through a single intersection.
This looks wonderful and exactly how I'd like to think about such things. Do you generally end up using your db models as the domain models for your application? Or do you have a separate set of models for that, and if so how do you translate between them?
The axios example is an interesting one, because there are tons of people saying they're willing to help, but how many of those people will actually contribute anything without guidance of any kind? When the current maintainers are too busy to even provide guidance, you need to be a special kind of developer to even have a chance of becoming a real maintainer, and those kinds of developers are few and far between.
Comparing a text edit on a website to becoming a Linux kernel developer is like comparing picking apples to running an industrial agriculture company.
I'm always surprised about workers attitudes on "transparency". Google created a monster, not only internally, but among troves of idealists in corporate America/SV who distrust structure and strategy in the business world, in lieu of free-for-all style of management. To the googlers who whined about Walker's memo: you are a total disgrace to the business of engineering.
Curious to know how it compares to speedcurve (commercial SaaS). Other than being open source obviously :) No affiliation.
Okay whom do you trust in that case ? US Government which actually will use all your data to target and harass you ? Your small company vendor who does not even know what PII stand for ? Or would you rather waste your own time putting together some node + haskel + closure based tool ?
I thought this was it, as well. How about falk? Which is the norse name for falcon...
Uh...isn't an index fund that tracks the S&P 500 basically self-driving money? That with something like Mint is basically all you need to do well financially speaking. It feels like this blog post is massively overcomplicating the problem of personal finance. It really isn't rocket science. If anything, the basics are simple and boring and unsophisticated.
You have to check this date on every request.

I think, on some level, you can make a revocation database scale better than a validity database. You store the revocation in some durable datastore. Then you have some service in front of this that calculates the entire set of revoked tokens, and pushes that to each auth gateway. Then the auth gateway can check if a token is revoked without putting any load on a database. It has to do this for every request, but you can scale the auth gateway horizontally rather easily.

(When an auth gateway starts, it gets a copy of the full revocation table again.)

On some level, you do need the ability to push revocations to your auth server, because when you hit the kill switch on a session, you really want it to close all their open TCP connections (HTTP/2, Websockets, SSH, etc.)

Having said that, starting simple is the best approach. I used MySQL to store sessions at my last job. Every request went from Envoy -> ext_authz -> authentication/authorization service -> MySQL and this whole flow added only 1-3ms of latency per request. Someday you will hit scaling limits of using MySQL for this, but it's a long way in the future. Do the simple and reliable thing first, then make it complicated later.
What type of accessibility information are you getting back from the Places API? OSM seems like a great fit for this since information is tagged in a structured way: https://wiki.openstreetmap.org/wiki/Disabilities

Feel free to email me, this is my area of expertise. For projects like that I can often help pro-bono.
I would speculate that stealing/copying that info and selling it to e.g. Glassdoor would net you some easy money. Specially if you know who carries stuff like that around.
Untangling your secret data architecture
Why is there never any fundamental research whether human intelligence is even computable? All these huge, expensive projects based on an untested premise.
>>Libraries are a beautiful place. They don't discriminate against anyone regardless of social status, race, gender, etc.

This is a great idea! Thanks for doing this. Have you had your first session yet? How did it go?

Do you use the library computers for your coding bootcamp?
That is mostly false to say. That sub gets bad actors all over it all the time. It is a controversial, political sub. There are many who have been working to remove it for years.

They should have never been censored, it was a politically inspired move, and a disgusting one to have made.
The general underlying reason:

Google has shifted from the innovation/growth phase run by engineers to the MBA/marketing/lawyer-managed monetization phase.
* Any company will run into the same pressures as soon as it reaches that size.*

Then size is the problem.
JWT bearer tokens have worked well in my experience, though I haven't used PASETO. The main benefit is being able to use the same authentication mechanism for mobile and web apps.

The biggest drawback is the inability to revoke tokens without giving up statelessness. Keeping a KV blacklist isn't the end of the world, especially if expiration times for tokens are short. But at that point, the cost/benefit vs cookies+sessions gets blurry.

Some general JWT tips:

* Use a sufficiently long secret key if you're using HMAC based signing (https://auth0.com/blog/brute-forcing-hs256-is-possible-the-i...).

* Use bearer tokens to avoid CSRF attack surfaces.

* Avoid long (or non-existant) expiration times.
Related current threads:

https://news.ycombinator.com/item?id=21779191

https://news.ycombinator.com/item?id=21781421
Self driving money is just index funds?
What if general learning is uncomputable?
Fortunately, the quality of Google searches has been declining at such a rate that you will soon be double-checking on DDG, instead.
I have always found AWS support to be pretty fantastic.

We have enterprise support at work with a named TAM who is amazing.

On my personal projects I have standard support and was able to speak to a very very capable tech on a sunday morning within 20 minutes.

Azure are pretty decent too, although they offload a lot of enterprise support to their partner network, but that works well enough.

GCP on the other hand...
From the news article:

> In an email, Facebook encouraged employees to notify their banks and offered them a two-year subscription to an identity theft monitoring service.
I think /r/PoliticalDiscussion is a great example of this. Up until 2016 there was a lot of active debate and ~50k subscribers.
Now there are ~750k subscribers and only ~2 posts allowed per day.
Must be exhausting for the mods.
Is it making real money, or speculative money on the moon shot premise that AGI will rule it all if successful?

I worked at an AI company before, and it was the latter.