skysight-inc/HackerNews huggingface dataset:
They had participants carry a folder between two points, one contained papers and one contained money that they were told to conceal and hand off to a person wearing a hoodie and sunglasses. They compared the way the participant walked.
Das Reboot: Uni forces 38k show papers 4 password reset following 'cyber attack'
Show HN: Tfidf.Viz, a Visualization Tool for TF-IDF
But it doesn't work in Hebrew.
Good point, but other than Whatsapp/Instagram, I haven’t seen many big ones in the scale of FB/GOOG which create tons of “zillionaire”.
Sensationalist title, as Ohio is larger than many countries.
I've been thinking about wood CNC myself. What kinds of tools are used these days?

I have seen basically X-Y stages hooked up to a hand router, but I wonder if there are other approaches.
So because email is better, we should abandon the USPS? That's a ridiculous argument. Email accounts practically at the whim of big corporations. You know, the ones who ban people from their entire Google account because they posted emojis in a chat?[0] Yeah, that'll be good.

The private sector may be more efficient than the government, but that's because of bureaucracy imposed by the politicians themselves.

Tell me, how long does it take UPS or FedEx to ship a package across the US? At least 5 business days for the cheapest. USPS gets it there in 3.

Here's some more facts you may not know (that show why the USPS is good):

* The USPS, unlike UPS and FedEx, have a legal mandate to attempt to deliver every letter and parcel if it's in the US.

* Your mail sent through USPS is protected from searches without a warrant by law. You can't say the same about UPS and FedEx.

* I can send a small letter through USPS for $.55. How much does a private courier charge?

[0]: https://twitter.com/markiplier/status/1193015864364126208
This is a very good observation, though I'd make one nitpick... The tooling used for the airframes then isn't much different than the tooling used to build them now. The industry has only just started to embrace robotic composite construction, otherwise it's the same rivet guns and squeezers that they've always used more or less. If you know of any liquidation sales giving away 100s of clecos or dies for nothing, let me know...
This is a super interesting problem! It applies to basically all desktop autoupdaters. Note that App Stores are in a better place -- as far as I know they don't make it possible to target users with malicious updates, you'd have to push the malicious update to everyone at once.

Some anonymity wins for desktop apps are downloading updates over Tor (to prevent the update server knowing who you are by your IP) or Bittorrent (to prevent the ability to offer an update to someone without offering it to everyone), and checking that you're being offered a binary whose hash is published publicly (e.g. to a blockchain). But then you start hitting increased code surface problems and those systems not working on some networks.

I think Tor's Firefox browser does the anonymous Tor update thing; that's probably the best in class here.
> I don't want to require that juniors and student developers waste their time curating their history

Uhm, one of just the most important skills for junior developers to learn is to tackle a larger change through a succession of individually logical, atomic changes.
There should be something like ReCAPTCHA for suspicious calls on the caller and a Spam flagging option for the receiver
https://www.theverge.com/2019/8/23/20830120/apple-contractor...

The end result of this was, Apple brought the operation in-house and it's also now opt-in.
I have a few of this on my vintage vacuum-tube shortwave radios. They're used to indicate how strong the signal is for tuning.
Sorry, but if the way forward really is that every desktop application of the future has to ship with a full copy of Chrome, come with all the bloat and baggage of the web platform and continue its questionable UI conventions - all just because companies are too cheap to offer some training - then I really don't see how that is a desirable future.
Well, IRC sorta as it does group chats. But email? Is there an XEP for that? XMPP can probably gateway to/from email, but XMPP can gateway to pretty much everything in the known universe...
Its a mutually beneficial transaction between the business and the customer.
I'd suggest removing your front door and letting anyone walk in and live with you.

Tell me how that works out for your family.
There's no one fsctor to it. Instead, I'd say it's a mix of these factors:

1. Luck, probably split down into:

A: Genetic talent/skill
B: Family/personal connections
C: Timing/environmental circumstances

2. Determination, and the willingness not to give up early (may have a genetic component)

3. Hard work, and the skills developed from such

With no particular factor being able to guarantee someone is successful, but all of them potentially being able to tip the balance that way. It basically seems to be a bunch of factors that'll either click into place or not depending on your current situation and that of the world around you.
I hope it is as solid as you say, because an overturned conviction will pretty much guarantee Trump 2020.

A bunch of testimonies sounds convincing, but that depends on whom the people are and what they exactly observed. E.g. why would the ambassador to the UK know what Trump said to Ukraine? I personally am still not getting a solid feeling from all this.
It probably isn't "smart" headlights that are flashing you on bumps, those are normal and perfectly "dumb" lights. The problem is that modern headlights are designed to direct much more light downwards, so that you can see the road, and less light upwards, so you don't blind oncoming drivers or waste light directing it into empty space (you need some to see vehicles and obstacles straight ahead of course, but you need more pointed downwards).

When the car hits a bump, or crests a hill, then "downwards" becomes pointed directly at oncoming traffic. If anything, quick-reacting "smart" lights would be more helpful here.

Generally, when people like you complain about this stuff, what you're really asking for is for everyone to go back to extremely low-output headlights where you couldn't see almost anything at night. I don't see how that's an improvement.
Or he made a mistake.

Is your argument that the programmer in the FA was tired after a long day and accidentally concocted a scheme to defraud his client of $40,000?
Color charge. Nothing to do with color. Quarks: up/down, top/bottom, and...charm/strange? Mediating particles are gluons, photons, and...Z Boson and W Boson. I personally dislike composite category names like 'hadron' and 'baryon', although they aren't as bad as the others.

It's a dumpster fire of names that makes learning the stuff far harder than it should be.
After, I don't know, maybe one ten of hours, wouldn't it make sense to check online and see what the situation with the T2 chip is?
At home I have a Hyper-V-based Ubuntu VM on a Windows workstation that runs almost all my LAN services. Not having bridged networking would be a complete deal breaker.
What makes this possible is Cargo's "workspace" feature, which is relatively new enough that it's not hard to imagine that some older projects may simply predate it.
Anyone driving a manual transmission can tell you that an automatic makes you feel bored and less “connected” to the car and road, now you don’t need even to pay attention to oncoming traffic to lower your lights or even brake. Who’s gonna pay less attention?
> They were also acquired at a price which would value each employee at ~350M.

That’s a pointless calculation. The acquisition wasn’t for the employees. As with all network-effects products, the acquisition was for the active user base. They could have acquired WhatsApp, fired the engineering team, rewrote it with an architecture that required 100x the servers and still been happy.
Yes, when Rudolph turns away from us the light goes out, and when he turns toward us, the light abruptly appears.
They're marketing this as a "mini-cloud". If it can only network through NAT, that eliminates all use cases where the VM instances would act as a server.

I'm a sysadmin, so I like tools like this to test out provisioning of servers with configuration management such as Ansible or Puppet.

Running tests at the end where I actually test the endpoints of the deployed services would be really nice to have, but impossible to do through NAT.

I guess that's a niche use case for this because Vagrant had the same issue for a long time, where setting up a bridged network was not possible or required some hacks.
It's a dangerous path when you force intermediaries to intervene and apply censorship. The path to having ML algorithms analyze every single call you make and receive is paved with intellectual laziness. Would you make the same arguments about end to end encryption? Quick, let's put backdoors in everything so we can feel safer.
Tesla Proved the Haters Wrong
The United Nations is cancer. I'd suggest you look into Localism.
In casino terminology they are called "whales". One whale, at a casino, can spend (i.e. lose) the equivalent of 100s of penny-slot grandmas and so the casinos spend a lot of time catering the whales
Completely agree. I do not see any advantage here.

To add: Virtualbox is supported on Windows/Mac/Linux, is trivial to install, and is the default Vagrant provider. If I want top performance, I can choose other options. Vagrant+Parallels on Mac is nice. So is Vagrant+KVM on Linux.

A Vagrantfile is 4 lines for a basic config, and vagrant will create one for you, and your config is saved should you need to edit it. It's trivially easy. Multipass has the same needs the moment you need anything beyond the defaults. So I'd call that a wash.

How is "vagrant up" harder than "multipass launch"?

What does "vagrant-specific provisioning" means exactly? Vagrant provisions with the same toolchain you are probably using for your production servers. It supports ansible, chef, and puppet. How is that "vagrant-specific"?

When I want to launch a development vm, I want it provisioned in specific ways that match the production instances I will eventually be launching. Vagrant+Ansible gives me that in spades, and it's easy.

The Hashicorp toolchain and ecosystem also provides other advantages: Packer for easily building my own base images, and targeting them at multiple hypervisors, including EC2. Not to mention that all distros are supported. Packer also answers the GP's provisioning complaint. Provision a VM, and use it as the basis for a new box in Packer. Problem solved.

This reminds me of people who like MySQL "because it's easier than Postgres." Not easier. Just not the same.
Jira might fit well with all its "issues" and such, (sorry being cheeky :)

Another, more light weight platform would probably make the family like it better.
This depends entirely on what your instances are doing. For ardour.org (AWS), we're running a simple PHP/Drupal/Discourse/Mantis web service. Since it's up 24/7 (it's a WEB SERVER!), we have a reserved instance which saves a fair amount on the CPU/compute cost. But even without this saving, data transfer in/out (downloads - customers getting our software; uploads: nightly builds) vastly outweigh the CPU/compute/instance charges.

We picked AWS mostly because they are close to the backbone and because you really get something close to bare metal access. At the time this decision was made, similar access from various other providers was either more expensive or non-existent.
==The comparison to other countries, many of which have little to no petroleum industry, is the sleight of hand I'm addressing.==

My point is that failing to mention that they are comparing 20 days of leakage to an entire year, is also a slight of hand.

20 days is about 5% of a year, so the comparison still works for any country producing even 5% of the amount of oil & gas as Ohio. Ohio drills about 88k barrels/day [1]. 5% of that is 4.4k.

European countries that produce more than 4.4k barrels/day, according to your Wikipedia link, are: Croatia, Hungary, France, Netherlands, Ukraine, Romania, Denmark, Poland, Serbia, Austria, Albania and Belarus (along with Norway, UK, Germany and Italy already mentioned).

[1] https://www.eia.gov/dnav/pet/hist/LeafHandler.ashx?n=PET&s=M...
We Turned $20 into a $100K/Month Company Making Elastic Apple Watch Bands
The begging of his rant was was very much all over the place but towards the end he very much honed in on the loss of keyboard efficiency. I'm sure everyone who has experienced keyboard efficiency can agree.

I think the part you quoted is an interesting problem. I agree with his statement that UIs are not necessarily intuitive, however I do believe they are easier to pick up than keyboard inputs. Seeing older people try to navigate websites shows me how much "intuitiveness" I take for granted and is actually just experience. I think the focus though was that the "intuitiveness of a GUIs" is not worth the loss in efficiency, especially when we have the capabilities to combine the two interfaces into one system.

One thing he said stood out to me, which was that including a mouse interface on a primarily keyboard-based system is much better than trying to add keyboard functionality in a primarily mouse-based based interface.
Thanks! It's especially nice to hear from someone who's worked running the infrastructure involved.

Can you speak to the general question of whether it might be possible/practical to have a useful diagnostic suite that runs from the customer end of a connection? I'm sure that my ability to use traceroute is limited (I know what a TTL is, but I expect I don't have much beyond a pretty vague idea for how that interacts with typical device configurations along a typical route), but the fact that scripted conversations with support often seem to end with a request for some traceroute output makes me think someone at the ISP does find that information useful in troubleshooting (unless that's also an unconnected crosswalk button), and it makes me wonder if automating that among other things and frontloading its use could save time on both ends of the support call, which would seem to provide the right incentives.

Also... do you have any insights about the incentives regarding informing customers about already discovered problems? I suppose this touches on my assumption that the ISP doesn't already know about my problem vs the plausible reality that internal monitoring is already going on. I've noticed on a few occasions (primarily back when I was with Comcast, I think?) that when I've called in for interrupted service that they've said "your issue is related to one we're aware of, you can look at this URL to follow our efforts to address it, or sign up for automated updates." That's not the reward that an instant fix is, but it seems to feel pretty good. But it's also apparently rare, which nudges my default perception towards "most of the time the ISP does not already know." Is there a dynamic which means an ISP might reasonably believe it's better off not telegraphing known issues?
FWIW personally i prefer the C code. It is explicit at what it does, whereas the C++ one is harder to follow exactly what it does - and also very ugly (i never liked C++'s iterators).

The double indirect pointer is hairy but at least everything you need to know to "parse" the code is right there.
My physical mailbox is the only *mail I have that isn't overrun. I ignore spims, spams, scams 50% based on just the fact that if the Social Security Administration, IRS, or Sheriff wanted to contact me, I know they would send a letter.
Android docs feel the same way, with a side of "eh, just make the interns do it".
The Phoenix Project – eBook FREE for next 24 hours
Why You Can’t Buy a Thermapen on Amazon (2016)
Some things that are drastically faster: email, copying files, booting a disk OS and/or waking instantly from sleep (though some 1983 laptops were instant-on), printing, GUIs (try using a Lisa from 1983), any kind of complex computer graphics, software downloads and installation.
Is the difference that one is your opinion, and the other isn't?
There is a reason they’re complex. Being able to see where you’re going is literally the most important safety system in your car. It’s all pointless if it’s blinding the person coming at you.

I’d argue that non-luxury car makers have been dragged kicking and screaming into modernity by the NIHS which has started dinging automakers safety ratings for including substandard lights in their base cars and making you pay for modern lights.

If you haven’t driven a car with auto high beams it’s hard to explain what a difference they make.
This is very similar to a design Apple announced for iCloud Keychain several years ago at Black Hat.

iCloud Keychain synchronizes keychains across iOS devices, storing their contents encrypted under the user's passphrase on Apple's cloud servers. In theory, Apple has no access to this data, since they don't know the relevant passphrase. In practice, however, passphrases are weak, even under PBKDF2. An attacker that got access to Apple's cloud environment would simply dictionary attack the encrypted blobs, and would probably succeed a lot of the time.

So instead of the obvious naive design, Apple stores enough secret data in an HSM so that you can't attempt a decryption without the involvement of the HSM. At the same time, the HSM enforces an attempt counter, preventing brute force attacks. To scale the design, Apple partitions customers into "clubs" of HSMs, with the attempt counter synchronized among the HSMs of the club using a distributed commit algorithm.

(Somewhat infamously, Ivan Krstic detailed how they protected the HSMs themselves from malicious attacks by putting their software update signing keys through a "physical hash function" called "Vitamix blender".)

What Signal is doing here is essentially what Apple did, but using SGX instead of an HSM, and RAFT as the consensus algorithm to synchronize the counters. You might reasonably prefer the Apple approach to SGX, but at the same time, the data that Signal is storing is a lot less sensitive than the data Apple stores.

Probably the biggest end-user takeaway from this announcement is that it's the start of a process where Signal is able to durably and securely store social graph information for its users (without revealing the social graphs directly to Signal itself, unlike virtually every other secure messaging system). Once they can do that, they'll have ended most of their dependence on phone numbers.
It'd be great if there was a simple way to flag spam calls and sms, assign originating phone networks a score based on their spam flags, and disconnect bad players from the network entirely if their scores drop below a certain range.
>There were reasons the Founders at first hoped that senators might be more independent-minded. It wasn't until the 17th Amendment was ratified in 1913 that senators were directly elected by the people.

>Now, in a hyperpartisan environment, reelection could often be the motivating factor, with little incentive to cross sides.

Oh no, thanks to democratic elections of senators, senators risk their voting decisions being scrutinized by their constituents...yikes!
Hmm. There's something to this, but I think he gets a couple of things wrong.

* Firstly, it's totally possible to tank morale by over-criticising. Making sure your feedback is heard is only half the problem

* Second, the exact wording you need to use depends on culture. Some of the phrases he doesn't like would be clearly understood as a reprimand in other cultures. The famous 'British translation table' is a good example (although it's an exaggeration): https://samalenglishlanguageservices.wordpress.com/translati...

(I'd paste that latter, but tables don't work that well in HN)
Finra Fines Robinhood Financial, LLC $1.25M for Best Execution Violations
I want a reliable exosuit instead of a cane/walker/wheelchair as I age. Who do I need to invest in?
> I was guilty of this in 2019 and got burned on my review (appropriately).

??? So you basically didn't fight during your review. And now : "hoping to have corrected things". What's your plan ?

I hope you did find the previous sentence offending. It's exactly what my toxic boss is doing with me every day.

That's not feedback, that's throwing one in the water to see if he swims and finding that if he drowns then, bah, he was not cut for the job.
> The Equal Employment Opportunity Commission “found reasonable cause to believe that Uber permitted a culture of sexual harassment and retaliation against individuals who complained about such harassment.”

> Uber agreed to a settlement by establishing a $4.4 million fund to pay current and former employees who were sexually harassed at work.

Wow, a $4M fine for a $50B company with a corrosively toxic culture. That'll teach 'em a lesson! /s
Tried it out a week ago, but the docs weren't too helpful and the build templates I found were buggy.
That's not at all the same comparison. An equal comparison would be where the president's vote counts at 1 trillion votes. In that case I wouldn't bother voting because even if everybody in the country votes for candidate A it'll mean nothing if the president votes for president B. The president's vote will always overpower everyone else's vote.
I agree. It’s a golden age to be a developer. We can be truly agile with system architecture. The last big system I wrote went through at least three complete architecture overhauls, but all that means is a fun few afternoons on the AWS console. Earlier systems I worked on had to have architecture locked down three months into the project.
Rerouted to a backup, I'd guess?
That's why I've specifically wrote "most", of course it's not all BGP, BGP routing algorithms do not need 30 minutes to change routes.
In this case, I believe the parent post also means that you run the simulated co-processors (graphics/sound/etc) for a frame's worth of cycles, too. Essentially, they're just saying that when you've got a frame ready, wait for a vsync before carrying on.
That won't work.

The problem with polarized glass is that, by its very nature, it's filtering out ~half the light. This is why cameras don't normally come with polarizing lenses: it'll make them perform worse in low-light situations. So you won't be able to see quite as much, with half the light blocked.

Of course, our eyes are logarithmic, so this might not be that big a deal, and it might be worth it, but you'll never get the US government safety agencies to agree to this. They already forbid anything which reduces light transmission through the windshield below the "AS400" line (the optional tint strip near the top).

They already won't allow aspheric side mirrors because those "confuse" drivers (even though cars in Europe have them).
To most businesses, the cost difference between AWS and barebones services like OVH is negligible. It is a rounding error compared to other operational costs.
But it is also very dangerous to do what telco's did, they connected circuit network that was designed as a network of trusted peers to the untrusted network of public internet without implementing proper gateways and/or enforcing certain rules. So slapping them with fines is more of a reap what you sow thing than punishment.
Especially since virtually every other secure messaging system simply stores the information Signal is discussing here in plaintext, indexed in SQL databases running in their cloud environments.
Looks like it supports launching custom images, but you'd need to build up your own library of images.

https://multipass.run/docs/launch-command
Elias Fano Encoding: Algorithm in Rust