skysight-inc/HackerNews huggingface dataset:
Because so many renters in Boston are college students, it drives the market. Also because all the Boston colleges know about the September 1st moving date, all of the Boston colleges start classes just after September 1st. (In other parts of the country, college classes may start before September 1st.)

The two reinforce each other.
Since this kind of scam "murder for hire" site has been around the dark web for a while and apparently, there are people dumb enough to pay them something, one would hope that various law enforcement agencies have set up fake sites and are harvesting erstwhile 'clients'.

However, based on the article, there's an apparent lack of law enforcement interest due to jurisdictional challenges. Perhaps it's also harder to get govt funding for something as 'routine' as attempted murder vs headline fodder like pedos.

I imagine there might be an opportunity for a reality TV producer to create a "To Catch a Murderer" show along the lines of "To Catch a Predator." Once they have a real 'client', they could let the client know a date and time for which they'll need an alibi and then suggest a nearby location that has video surveillance by which the would-be client can establish their presence.

That creates an oppty for the host of the show to approach the client at the alibi location, ostensibly to return the client's money because there are 'problems' with the hit. The ensuing conversation would likely lead to some high ratings as well as broadcast-quality, multi-angle indictment evidence.
A headline designed to make me not want to.. click on it. Luckily reading the comments here got me much of the sense.
I would be grateful if anyone could point to a "how to build a PKI based (client and server certificate based) ecosystem"
Watch-and-phone location sharing is a bit superfluous, since the phone will do it fine by itself.

I could see a future hypothetical standalone Apple Watching serving well in this role as a 'cheap' alternative to a smartphone, since it can already do audio Facetime calls over cellular, do basic SMS stuff, stream music, etc, while being nigh-useless for games (a factor that some parents would probably value pretty highly). The only reason one can't use it for that purpose already is the required phone tethering.
Smart phones have become so integral to life for most people that I can see many deciding its worth spending a lot.

I’m not even sure I would describe it as a luxury good, $40 per month over two years is less than a daily coffee habit.
Primitive Technology: Pot Made of Wood Ash [video]
Hmm, couldn't you also rotate encryption keys once a day/week, and keep the last one or two available, and if decrypting with the current one fails, try a prior one? Eventually, that token will no longer be readable. It should only ever matter in the weird case where your expire time is screwy, but you've put a bound on how long a token can survive no matter what.
I haven't bought this game but I watched a 12 minute speedrun of it with two devs commentating and got the feeling that QA didn't perform as well as they could have on this project.

First of all the fact that the game could be finished in 12 minutes was a surprise to both devs.

And at several points during the video dev#1 expressed surprise over a shortcut the player was taking, while dev#2 said he did that in testing all the time.

Seems like a lack of both QA and communication.

Projects are often rushed to completion for shipping, and open world games can't be the easiest thing to test. You're balancing player freedom and bug hunting. It's a challenge I can only imagine.
even better: it's airgapped
You see the same thing with travel lodging. In the past, you'd maybe have a few hotel/B&B names. Maybe some recommendations from friends or Lonely Planet. (Or, maybe going back a little further, just tell your travel agent to just book something.)

Today, it's really easy to go down a rabbit hole finding the best/best value/etc. place complete with lots of squinting at reviews to see if they're for real and/or have the same criteria you do.

I mostly don't sweat it too much but it's easy to do so.
Honestly that’s a pretty good sign they’re probably not thinking through all the implications of what they’re doing and all they have is yet another incompatible package manager when what everyone wanted was an audited repository for one of the existing package managers.
Ah, yes. This is the better comparison.
"I suspect most people done have the privilege of paying $300-1000 to have their contracts reviewed / red lined"

I mean, I've never had a six-figure job, but I could pay that much to have a contract reviewed, if there was a point. But I don't think there is a point, because unless I literally had a bidding war going on for my services, I'd have zero leverage.

A few years back, I thought I'd figured out how to negotiate, because I tried a method when buying a car that worked very well. But it completely failed when negotiating a salary, because tying someone in knots and exposing their BS, no matter how politely, has no value whatsoever when you don't have an immediate alternative. If you're trying to buy a new car and there are several dealers in town with the same one, that's completely different from having a single job offer outstanding.

I've learned in my personal life too, it doesn't matter how inescapable your logic is, if you don't have any leverage and the other person is willing to jettison logic, it's irrelevant.
Hopefully newer services such as SpaceX's StarLink will break the geographic monopolies or duopolies that have allowed these companies to profit so greatly off of such poor quality service.
You’re acting like there’s some extremely clear difference, but there isn’t. The only real difference is that email has kind of a bad UX. The comparison is not apples and oranges, it is grapefruit and oranges.
What do you think most compels these people to force thru their buying/highlvl decisions despite strong technical pushback?

Ego defense? Desire to participate in the actual work to seem they know what they're leading? Tunnel visioning that they are the CXO in charge of biz and devaluing engineer input in biz-connected decisions?
As Rumelt (Good Strategy/Bad Strategy) would say, a slogan is not a strategy.
For all the flak people usually give the telemetry systems, this bug sounds like it could be made trivial if devs could push custom reporting to users. "When the companion dies, send me last few events and a minimal world-state". Having ready data collection/reporting when things go weird is super helpful, whether it's an own, server side software, or a remote client.
Looks like it might be this package in the AUR? https://aur.archlinux.org/packages/unicode/

Given that it's been around for 10 years though, it probably won't be promoted to the main repos
Apple’s margin is still high in all its categories. I suspect this is what drives their pricing.
Security isn't black and white. SMS doesn't neutralize the value of 2FA since the effort required to compromise it are still considerable, such that the highest risk methods outlined by NIST require physical proximity to the phone.

While SMS is inappropriate for high value targets such as employees with infrastructure access or people with government security clearances, it remains an excellent option for general consumer security.

By contrast, the vast majority of people who use login.gov likely don't understand nor will they ever install an authenticator app. It makes sense to deprecate support for this vector if, presumably, few people are using it.
I watched the entire interview with Dr. Peter Carter. At about 19:50 in the interview, he talks about a "Massive! Massive increase in methane." He talks about an incredible eruption of methane, almost in apocalyptic terms, he says he knows of no other source it could be other than methane hydrates, and he is shocked that it hasn't received more media attention.

He then kind of vacillates a bit when asked to quantify it. He talks about historic methane concentrations from ice core samples and then compares that to current methane concentrations in Barrow, AK, the site of the methane eruption.

This was intriguing to me, so I tried to find the original report he's talking about. What it shows is absolutely nothing like he represents. Indeed, there has been large and rapid increase in methane concentrations in Barrow, Alaska over the past few years. But it's a change of about 5-10% [1]. And there were similar-scale eruptions in years past, such as in 2003.

The change is certainly more rapid than the trend. It's probably noteworthy. Clearly something is happening in that area. But this sort of silly exaggeration is one of the reasons why so many dismiss climate science.

If you want people to believe you, don't exaggerate the science.

[1] https://eandt.theiet.org/content/articles/2019/09/arctic-met...
>It’s gotten to the point where I trust eBay more.

Absolutely! I recently bought a simple item, a roll of wiring loom tape. It was on Amazon and had a few reviews that stated that the received tape was old and didn't stick very well anymore.

Same item on eBay for cheaper has the seller specifically mentioning that they only sell fresh tape from the running production, not old stock. Even better, the seller specialized in these (and other) tapes.

It seems that eBay has just cultivated a much higher quality base of vendors. Many of them seem specialized.
Most life insurance policies actually do cover suicide.
They thought all even numbers are powers 2
I can’t understand, in succinct plain terms, what the desired outcome is here.

What would it look like if the ads were not biased, or discriminating, in any bad way.
I was a Vegan for five years in my twenties ("London's only fat vegan"). And one of the things I liked was that I did not have to think hard about eating out at lunchtime. I could have a jacket potato with beans or I could get all sophisticated and have a jacket potato with hummus.

Lack of choice sucks. Limited sufficient choice makes a simple happy life.
That is a hypothesis, not something we know. Having three children of my own all very different to each other in thinking makes me doubt culture has much influence on how people think.
A Self-Driving Freight Truck Just Drove Across the Country to Deliver Butter
90 days here, 300 would be nice.
Spoiler: it's not about polar bears. Their numbers are through the roof.
Shopping for physical goods in B&M stores sucks.

After the last few decades of recessions, stores have gradually dropped their inventory of goods for anybody outside the meat of the bell curve. I will shop for things for months just to buy local and end up buying online because nobody will carry what I want or will fit.
The ethics and regulation of in vitro fertility add-ons
Magic Leap 2 Planned for Launch in 2021, Targeting Enterprise and Prosumers
Probably very few. Admittedly I don't worry too much about Google or Microsoft falling over although there's probably always a possibility that you lose access to your account because of some edge case.
On the other hand, if you watch speedrun records on YouTube or watch the Summoning Salt documentaries about them, expert speedruns (especially those that allow glitches) are often 10% or less the time that an ordinarily skilled player might take to finish the game. For example, the Super Mario Bros. record is under five minutes, while the Castlevania record is under 11.5 minutes.

I don't think the fact that developers are surprised by speedrun times means that a game is necessarily bad! (And even many of the most extraordinarily beloved games have glitches, often because realistic physics simulation is hard.)

I think I saw a video of Bennett Foddy in which he noted that other people could complete "Getting Over It with Bennett Foddy" considerably faster than he could, and maybe faster than he imagined anyone would be able to.
Ask HN: Crawling from the Web Pdfs
Can we crawl image graphs from online pdfs ? like https://hai.stanford.edu/sites/g/files/sbiybj10986/f/ai_index_2019_report.pdf

Because google can't do it, I tested.
And (I'm looking at you Shopify), VR/AR is not going to solve this.
Iterations of that copypasta have existed for like two decades.
It’s the overwhelming choice yes, but it’s also the fact that companies sell junk online that looks good in a photo and then of course you receive it and it’s useless. The reviews are all rigged and the brands are unknown to you, so there’s no way of knowing until you’ve purchased it, and then in many cases there’s no way or it’s very difficult to return the dud.
I would suggest there are some good language research programs at some other schools that might not be quite as selective. Might be worth applying to, for example, Brown, Northeastern, Indiana University.

If you were to follow a typical bachelor's degree curriculum, you would have to take a bunch of other courses, both CS and non-CS, that have nothing to do with programming languages. So regardless of what school you go to, you might not end up with a lot of PL-specific coursework as an undergraduate. Thus, even a generally good school without a PL research group could still be worth considering, as it may still be a good stepping stone into a more desirable graduate program.

You might even find that you enjoy some other branch of CS just as much as languages and type theory!
You need to find the top 10 people in your field send them your admissions info. Explain your situation and ask for advice. On where to go and how to get into the field. I would have to assume one of them will be impressed and help you get in. And you'll need those relationships anyway.

A lot of places all so have undergrad research projects classes. which would allow you to put some more time in on what you interested in.
And yet everything from Vagrant images to npm packages can run arbitrary scripts at install time. So not much different.
But that requires demonstrating an actual casual relationship, not just a correlation.
I thought this might be about a viral facebook post that said something like "click here and a <something> will die" and how many people clicked.
I haven't looked into how instagram hosts the images (had to look in source of the page to find the link, as it doesn't allow to just direct link to it normally), so please let me know in the comments if the link expired/not working anymore. As of now, it works, and I checked that it works in a private chrome tab as well, no login needed.

https://scontent-sea1-1.cdninstagram.com/v/t51.2885-15/e35/3...

P.S. Interestingly enough, if you remove the query string from that URL, the link refuses to work and displays a "bad timestamp" error. Which is what made me guess they employ some expiring timestamp hash in query strings for image URLs.
Firefox for iOS has night mode built in.
Do you think it is in this case?
Yes, I probably can't talk about them though. There are companies that use Cyc as part of processes for avoiding certain kinds of risks and the financial impact (by the company's estimation, not Cycorp's) is an unfathomably large amount of money.
The thing I'm thinking of seems like something Cyc (or something Cyc-like) is relatively uniquely suited for. But for large scale systems, which thing is more easy in the long term is really hard to estimate with any confidence.

Really when it comes to practical applications using Cyc, there are three alternatives to consider and only two of them actually exist.

1. There are custom domain specific solutions, involving tailored (limited) inference engines and various kinds of smart databases.

2. There's Cyc.

3. There's a hypothetical future Cyc-like inference system that isn't burdened by 30 years of technical debt.

I personally suspect that some of Cycorp's clients would do better with domain-specific solutions because they don't realize how much of their problem could be solved that way and how much of the analysis coming from Cyc is actually the result of subject matter experts effectively building domain-specific solutions the hard way inside of Cyc. With a lot of Cycorp projects, it's hard to point your finger at exactly where the "AI" is happening.

There are some domains where you just need more inferential power and to leverage the years and years of background knowledge that's already in Cyc. Even then I sometimes used to wonder about the cost/effort effectiveness of using something as powerful and complicated as Cyc when a domain-specific solution might do 90% as well with half the effort.

If someone made a streamlined inference engine using modern engineering practices with a few years of concentrated work on making it usable by people who don't have graduate degrees in formal logic, and ported the most useful subset of the Cyc knowledge base over, that math would change dramatically.
What do you mean when you say "all the data"?

The full planet takes "a while", even on a huge computer:

https://wiki.openstreetmap.org/wiki/Osm2pgsql/benchmarks
Speed runs frequently rely on glitches. There was one for Oblivion where you could glitch through some geometry in the starting area and end up on the other side of the wall that was supposed to be inaccessible until the ending cut scene. The game was 'over' in like 5 minutes
Ptpython, a Better Python REPL
Google maps is only profitable on the basis of advertising syndication & data collection. If you're not pumping google information about how people are using your map service or directing people to the sites of google's ads customers, they are probably losing money by serving you.

The issue is similar to the one that ruined their custom search offering: it doesn't make them enough money to justify its existence as anything more than a public service. Unless charity is what Google had in mind when they launched the api, their behavior makes business sense.
NFL's Baltimore Ravens unveil spectacular mixed reality experience [video]
They're not Genius' efforts to begin with. Lyrics are transcribed by users or given to them by the artists themselves and then Genius adds the watermarks mentioned in the lawsuit. Worst case scenario, Genius is saying "you can't benefit off the efforts of our users, only we can".

It seems that the only thing giving Genius any footing is their Terms of Service, which ToS tend to be unenforceable. Also consider the case involving LinkedIn which set precedence in being able to scrape public information.

Then again, IANAL so they may have more footing than I realize and/or they may do some transcription themselves, but it is largely their users.
"People who have this video," is a reasonable security challenge in some cases/threat models.

It reminds me that I've been very slowly experimenting with an idea I've been calling "avatar auth" for a Secure Scuttlebutt-like P2P social media (or possibly just directly with SSB). The idea is that the raw original image file used to build an avatar acts as the hash/input to a key derivation function so that the raw avatar image itself is the "password" to the account. You force a lossy series of steps between the raw image and the final avatar (crop, shrink, corner rounding, maybe some simple filters) so someone can't just copy an avatar as they see it on the service itself to log in. You can't entirely eliminate "copy-cat" avatars (but they'd have different keys/account numbers), and you have some difficulties with avatar migration, but overall it's a really simple login system idea (choose your avatar image file and go).
At Sam's Club today, eyeing a watch.
Waiting for associate to let me see it.
Open Amazon, read reviews.
Over $20 less on Amazon.
Asked if Sam's price matches.

> No.

In two taps, right in front of her, ordered it.

Said she understood.
Thanked her for showing it to me.
There's a service where you pay to have money put onto a "gift card" that has a QR code. Scan the QR code and the funds get sent to your Kraken account.
Direct link to Intel’s announcement with a video.

https://newsroom.intel.com/news/intel-realsense-lidar-camera...

The camera is the size of a tennis ball.

There are probably lots of industrial uses.
You can speedrun Ocarina in Time in under half an hour. That doesn’t mean it’s a bad game…
I used to use a major local bank which had (and still has) a 6 character limit on password length. For real. Also, no symbols allowed.
Because they bought NeXT. The actual question is why did NeXT choose to use Objective C? The answer is C++.
Everyone seems to be posting the "stop using JWT" article from 2016. It has a lot of merit, but I think there is small logic hole in it. When the second part attempts to address the issues of token revocation, its only argument is "what if your blacklist is down?". But that is silly. Blacklist is part of your authentication process, if it is down you don't authenticate. Its like asking how would you serve your API if your API server is down. You won't, your server is down.

Otherwise, blacklisting tokens as a way of revocation process seems just fine to me. Set reasonable expiration to the key, allow users to refresh keys, then when you need to revoke a key, add it to blacklist together with the expiration timestamp and expire it out of the blacklist at the same time the key itself would expire. You can do all of this by magic by using Redis for your blacklist storage and setting expiration on your blacklisted keys. Yes, you would need to check your blacklist on every request, but a) blacklist is going to be smaller than a list of every issued token (like you would with normal sessions) b) you don't even have to store the whole token, just calculate some hash and store that, now you only need to read a few bytes on every request instead of reading the whole session.

The author does make a some good points though.
And there was a Ted Talk on this Topic

https://www.youtube.com/watch?v=th3KE_H27bs
Less parking can mean more housing. Here’s how
Barry Schwartz, "The Paradox of Choice"

https://www.ted.com/talks/barry_schwartz_the_paradox_of_choi...

https://en.wikipedia.org/wiki/The_Paradox_of_Choice

There are also:

1. The issues with online misrepresentation and fraud.

2. The limited amount of information (far from perfect as TFA asserts) of online shopping. Heck, half the time you cannot even limit a results set to the product you're interested in, rather than a slew of vaguely associated items). Fit, finish, and quality can often only be assessed directly in person.
> "To Catch a Murderer"

Scene: a quiet house in the middle of suburbia of Nowhere, MO. The house is dark.

From the inside, someone hears a tapping at the window. The killer quietly slides the window up and through the frame.

Suddenly, all the lights come on and Rick Astley's "Never Gonna Give You Up" starts blaring through a Logitech Z906 5.1 Surround Sound Speaker System. The killer immediately tries to jump back through the window, but – smack! – the window is shut. It's bulletproof glass, and has been remotely locked.

The song mutes. "Take a seat."

https://www.youtube.com/watch?v=6c1vWnF9bS4
Yeah, that's kinda how it works.

If you're lucky you publish 2 - 3 papers in your PhD career along a similar topic. Stick those in and coheretize them with an introduction and a conclusion.

Those whose fields are less productive or who are in groups which don't publish very much will have a harder time getting their final bit written...but it isn't exactly supposed to be easy.
Deleting the code or putting a restrictive license in place doesn't change the terms of the employment contract if it has terms stating that they have IP to work done while working there.