skysight-inc/HackerNews huggingface dataset:
I addressed this elsewhere in this thread. Even this study finds benefits for heart disease and the all in mortality is affected by accidents, which doesn't apply to a moderate drinker who doesn't drink and drive. Also, this study inexplicably includes tuberculosis as the leading cause of death caused by alcohol. Perhaps this is the case in some countries, but seems irrelevant for those of us moderate drinkers who live in the developed world.
Right? I found it immensely disappointing.
Nope, no linux. https://github.com/nanovms/nanos is a new kernel designed to run a single (linux) application as a virtual machine.
It is interesting how no one has made a (successful) startup that combines the retailer's version of the receipt with their accounting software automatically. Instead of printing it, it just makes a GL entry for that sale. I feel like most people pass on taking the receipt, and most retailers aren't printing a second copy, it's all the internal stuff. Some combination of automated GL entries combined with AI cameras for internal controls should do it, right? It's just so you can make sure the cash is controlled. There's no legal requirement for your own sake.
It's not just than new ones are pumped out, it's that people lose interest and move on. Taylor Swift will do better than someone less popular, but people still listen to "Blank Space" more than "Love Story." Going back further, kids these days are less likely to know the Beatles.
Show HN: New free invoice generator – Invoicy.io
Digesting the Elephant (Rendering the Moana Island Scene)
https://en.wikipedia.org/wiki/Scunthorpe_problem

the scunthorpe problem will never die.
I'm glad this made the front page. I and other of my friends have tried a few times now with varying degrees of success.

For those of us pining for the days of darcs or wanting to escape the git monoculture, Pijul is really great.
I’ve seen bars of metal affixed to the inside of many electronic devices to give the device the proper “heft.”
When I was growing up, it was not uncommon for urine to be added to watering the plants as a fertilizer, but not feces; I believe the latter creates a significant problem of bacterial contamination.
The only author of BLAKE3 that spoke there was JP (@veorq). The day matches but the title of his talk is "Too Much Crypto". Is that where it was announced? (Quick link to program: https://rwc.iacr.org/2020/program.html#day-2020-01-09)
There is a comparison of Blake3 to various hash functions (including SHA-2 and SHA-3 families) on AWS c5.metal; see the chart here: https://github.com/BLAKE3-team/BLAKE3
I work in a tiny team (basically 2 people), but we have to work on multiple small projects (around 200k LoC total) including few shared libraries on Java. We used different repositories before with all releasing rituals, etc. But I tried monorepo and "all use latest" and it worked surprisingly awesome for us. Changes across repositories are much easier to do than before.
>I find it hard to imagine that it's the drivers calling themselves Dick Cummings out of immaturity. So what does it really matter what the customers call themselves?

That was my thought too. It's one thing if you're using obscenity in an anonymous online alias, as a great many Redditors seem to love doing, but I'm struggling to believe that it's something people do in signing up for real-life ride-sharing apps, either as a driver or rider.

Obviously there must be some amount of people doing it, otherwise Lyft wouldn't bother with this at all, but it's just so... unexpected.
> I wish desktop OSes could be more simple, i.e. without multi-user and file access rights.

Have a look into Oberon and its successor A2/Bluebottle.

http://ignorethecode.net/blog/2009/04/22/oberon/

https://liam-on-linux.livejournal.com/46523.html
imo as someone who does ds & analytics and has deployed prod models: meets business-defined specs, is maintainable, requires little to no support. everything else falls underneath

tbh i dont think this is something you learn in school, or is expected of new grads
Your PM can make you good looking charts and do basic summary statistics (mean, median, percentiles, etc.) I would call that business analyst work. It's probably good enough in a lot of situations. But if you actually need statistical analysis, there's no substitute for a statistician. Even working scientists in the hard sciences routinely screw up their stats and should be (but mostly aren't) consulting with a staff statistician for their papers.
Getting Tensorflow set up on the Jetson Nano was harder than I expected. Do you, by any chance, have Docker working with GPU support?
A ten year old Ford Focus with one mile on the odometer isn’t realistic. Download real data from cars.com by scraping the HTML and build a linear regression.
When we know so little, is it really ethical for a psychiatrist to prescribe these drugs to make people slightly more like the opposite gender, rather than teaching them to accept who they are and deal with the disorder like any other incurable condition?
Only if it's the same people complaining about each. Also most people don't care so much about ads as they do the malware and tracking that often comes with them. It's possible to do ads right, there's just zero economic incentive to do so at present.
Neither is especially good for storing passwords.

Better use specialized password hashing functions like Argon2 or bcrypt.
SHA-256 is absolutely not recommended for storing passwords, and it was never designed for that purpose. If you are storing passwords with SHA-256 you should immediately migrate them to a password hashing algorithm. See “Upgrading Legacy Hashes” in the link below.

https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...

Recommended algorithms:

- Argon2

- PBKDF2

- Bcrypt
Tech companies will never learn.

How many times must we go through "real names" idiocies before these supposed geniuses stop being imbeciles
It is about explaining what makes the headline clickbaity. TESS is designed to find planets, so someone poring over the data is expected to find one eventually. I.e. it's far less unexpected than the headline suggests. And thus far less newsworthy apart from the people interest aspect.
"An attacker then used those credentials to breach the network and siphoned several hundred thousand dollars from the financial system (wiring money to himself)."

You're telling me the CEO was unfazed when they learned this was the reason you were locking down the system due to the doctor's own ineptitude and breaking company policy looking at porn and exposing them to direct financial loss and liability (lawsuits from PII data being breached and exfiltrated, etc)?

The doctor put the whole hospital at risk and could have cost them millions and got that cryptolocker attack holding their data hostage indefinitely.

The CEO should be thanking you guys for catching these huge security ($$$) breaches.
It’s crazy.

- They’re beholden to the extension stores for distribution.

- They probably hijack affiliate links which I personally think is a type of fraud. Regardless of the ethics, it’s detrimental to retailers that allow it because the real people driving traffic will give up.

- They collect data that would otherwise be exclusive to the retailer. Why buy data from Amazon if Honey will sell you the same thing plus a bunch of other related data?

There is ZERO upside for successful retailers like Amazon and a bunch of downside.
Drugs like propranolol, clonidine, nitrates etc that are commonly prescribed for their effects on blood pressure, also exert action on the peripheral and central nervous system.
Real name policies are not a good analogy here, as being on Lyft requires in-person interaction.
I agree a lot with both of you, and add that after seeing things through the lens of software I went back and started looking at the details of people building things and found that for some reason unknown to me, even those professions are constantly changing. New materials, companies vying to be the “one true solution”, governments changing codes for various reasons.. I wouldn’t be surprised if building a basic staircase was more than 50% different than 50 years ago.
Besides the humor of how Lyft's filter flagged traditionally Caucasian names like "Cummings" – in addition to the usual issues with non-Western names, e.g. Pimpong and Poon – I'm fascinated/confused how this made it into production? The user database already exists and was currently being used by the live application. Before deploying this new filter onto the production database, wouldn't you do a dry run to get not only the count of users who will be flagged and notified, but a listing of frequently flagged names? Which you could easily manually eyeball to make sure there weren't obvious false positives?

With a userbase as big as Lyft's, I'm sure there were a ton of obvious true positives (anyone named "Fuck", ostensibly). I just can't believe they didn't notice a surname as relatively common as Cumming/Cummings. Yes, the apparent naivety of the regex is an issue, but this seems like a system for which a lot of testing on actual data would be easy and natural to do as part of the QA process.
I think you're reading that into it a little. There's a distinction between serious criticism and haters. Serious criticism entails understanding that people are imperfect and complicated and criticizing some of their actions while admitting that other actions might be good or at least neutral. Haters will hate everything someone does because of who they are.

A good example of this might be politics. Let's talk about the previous President. If you think the JPCOA was a bad deal, you're skeptical of drone strikes, or you disagree with the Affordable Care Act, you might be some form of reasonable Obama critic. If you think Obama is a secret Muslim who was actually born in Kenya and that it's disgraceful and un-American for him to wear a tan suit or ask for dijon mustard on a hamburger, you're probably a hater. That sounds deranged, but there are some deranged people out there and you should ignore them.

In other words, only take criticism seriously if it's serious criticism. (I think I stole that line from mechanical_fish.)
That exact attitude the doctors have is so common in other occupations, I’ve experienced it with lawyers.
Actually, audio DSP might be a bit better on them, too. They have the best power/instruction ratio on the entire planet, and given each chip has 144 entire computers on it, audio DSP should be no problem for them.
Exceptionally cynical take follows.

Teenagers who get prestigious internships often come from rich families with connections. If they're particularly affluent/connected, the intern has a problem setup for them so they can "discover" a new discovery or solution to a problem.

Not saying this is frequent, but it's frequent enough that when you see an affluent/connected gifted youngster achieve it's reasonable to be circumspect about them.
Consider that the tone of the article, as you're experiencing it, may have more to do with your own attitude and preconceptions, and what meanings you're choosing to read between the lines.

Where you wrote:

"Entertaining the idea that..."
"... is revealing ..."
"The tone of the article sounds like..."
"It almost sounds like..."

These are all places where one could interpret things very differently.

I read the whole article also, and drew none of the conclusions you did.
Indeed, maintaining the greenness of the build in a giant monorepo is extremely expensive.

It isn't clear to me that it is worth the investment, even for Google -- though it clearly world's "well enough"
ER cases might also not serve as a proper control - the types of injuries and accidents over the weekend will likely be different from those during the week days
The trailer did not really show me any game play. So I can not judge it and see if I want to buy.
Me too. My mind switched back and forth between these:

... Teamwork Repairs a Collapsed Freeway ...

... Teamwork Repairs Collapsed a Freeway ...
First genomic study of puberty gives insights into development and cancer
What does an in-person interaction have to do with the idiocy of building software to decide what names people are allowed to have?
Actually spam classifiers are not easy at all.

First, the data is very unbalanced.

Second, you would need to retrain the model often. So you would need to understand statistical methods for comparing text level/word level distributions. This is not a college-level stat.

Third, you would need deep knowledge in NLP, feature engineering and algorithm selection.
This was amazing! I did not know Tom Sachs had a youtube channel, or that he still collaborated with Van Neistat. Now I'm making my way through his channel and all the videos I have watched so far have been incredible.
If the it's neoliberal journalism surely the market, rather than ideology, should decide how it should be paid for?

Currently, the market seems more keen on ads.

Personally, I'd be happy to pay for investigative journalism (e.g. https://www.buzzfeednews.com/investigations)... but not the kind of journalism which cites "tweets" as research and doesn't think enough of its journalists to give them a byline.
GitHub – Git-FTP/Git-FTP: Uses Git to upload only changed files to FTP servers
I remember that day. I was on my way from up north to catch a flight from Oakland that morning.
My understanding is that >99% of internal-only projects are in the main repo. If you think I'm missing something, perhaps write me internally (same username) and if I'm wrong I'll post here saying so?
Transport Fever 2 now available on Linux
Exactly. There is so much money to be made from healthcare service, it is a market & revenue stream totally separate from advertising, and it can provide great value to many people.

There are things one could be critical of regarding their acquisition of data, etc. but I don't think it is in Google's best interest to use the data for advertising.
Well first of all using a password manager should be the last resort recovery strategy. Unlike device based 2FA a password manager allows you to make an unlimited number of backups.

After that 2FA should always be device specific. If you want to do 2FA with your phone then the 2FA challenge should not get sent via an identifier like a phone number that may change owners. Instead you should download a 2FA app that generates a private/public key pair where the public key is linked to your account. That way the only thing you need to do is wipe your phone remotely if it gets lost.
"insecure" means that it fails any of the security tests.

SHA2NI and many other hashes fail most of those unless they are hardened, e.g. by support for adding random seeds, being insensitive to added \0 and such. No crypto hash supports random seeds out of the box btw.
https://en.wikipedia.org/wiki/Array_programming might be starting point.
Not disagreeing with that.

Although, in re-reading the above, I have made a grave mistake above, contrasting most used with most loved. SO's "most loved" is measured by "of those professional using this language, how many responded that they love using it", so in the case of Rust it's 83.5% of the 3% using it professionally.

In retrospect I think my point would be better made by pointing at the difference between the technologies being used professionally and the technologies "most wanted", where Go and Rust are in the top 20% of wanted but the bottom 40% for Go and bottom 20% for Rust.

I'll leave the original intact for posterity but what's cited is done so erroneously.
Too much detail in relation what? Our current computers in 2020?

What if the humans that made the simulation are from the year 3020 or 10020?
> If you wish to not get stuck, seek to perceive what you have not yet perceived.

Amen to that.
> you should always run a timed process a second time

I should hope that anyone doing benchmarks does them multiple times to avoid crap like popcon or adobe reader update randomly keeping the system busy during one of the two algorithms' benchmarks. I don't expect that the author ran this only once and decided to make a blog post based on that, even if the post doesn't show multiple runs.
Tell me again why anybody cares? Is it because the Church is so central to our lives? We're masters of rationality and technology, who believe in a retributive super-ape in the sky?

Is it because we're medieval scribes and we really want to use the Latin faeces to indicate our scholarly intentions, instead of the Anglo-Saxon shit that everyone around us uses?

There is no reason I can think of that comports with a technological or innovative worldview.

Including cybersecurity. ("Shit" is just an identifier or a guessable string with 13 bits of "chaos" completely equivalent to "Dave" or "Phil.")

Edit: Well I see small-minded superstitious dunderheads have shown up to downvote me, so FUCK CUNT SHIT ASS
We often use 'hash' as a sort-hand way of saying 'Key Derivation Function' when talking about secrets like passwords.
https://en.wikipedia.org/wiki/Key_derivation_function

These functions usually use hashes as a primitive, but there is more to them than that. Using a plain hash to store passwords is usually a red flag that the storage is insecure. I see it when doing source code audits: some legacy software using md5 without a salt.

To be precise I think security community should make an effort to separate the two terms more often. I've been trying to be more precise when writing and reviewing assessment reports.
>Not to mention Google Authenticator deliberately prevents these stored tokens to be backed up and transferred to a different device, which makes upgrading devices troublesome.

If that were possible then you would face the same problems that reused SMS numbers suffer from.
DARPA's 'Glide Breaker': A Hypersonic Missile Killer
The profanity filter in the Apple App Store was [0] amusingly wrong, but fortunately also a soft filter rather than a hard filter.

What happened was, the German localisation of the app description included the word “Knopf”. Knopf is not a rude word, according to any German I’ve discussed this with — it is one translation of “knob” in the sense of “button”, but Apple’s naughty word detector clearly thought it was “knob” in the sense of the euphemism for a body part.

It didn’t stop the app passing review, but the automatic warning was still a regular part of updates for that particular app.

[0] Back in 2012
You need people who are technical who have power to push back on the business. To have such people the business side has to want them. It’s the CTO and managers job to do both push back upwards. If a coder has a concern they should be heard out, although the decision might always be to do the technically wrong thing because of a business reason. And that’s ok as long as reasonable requests are heard and acted on enough. Not all teams and companies treat coders like infants, so moving on can solve the problem for you. Solving the problem in general is probably impossible as it’s human nature to end up with unfair power dynamics.
I'm not sure I'm following you. I'm also not arguing for or against the results here. I'm just giving you the background to understand the author's point; it's not something they just came up with, it's been under study for quite a while in constructivist mathematics.

I also don't really think you're using the right definition of computable here. You make it sound as though we're estimating, or truncating uncomputable numbers to make them computable when you say:

> From that definition, it's quite obvious that everything you compute has to be continuous, because you are never sure of what other decimals may be coming up, so whatever you compute has to be close enough.

It's not about being close enough or estimating, they're categorically different things. You can't obtain an uncomputable number, even by estimating, to any meaningful precision with a finite amount of time. So what are you saying here?
"Sane" is imprecise in the way you're using it.

People who share your morals probably wouldn't destroy the world.
But there are absolutely scenarios where logical people would do so.

"Insane" has the same problem.

Logically inconsistent people cannot be relied upon to do anything with certainty. But sociopaths can.
I can’t believe Google Cloud has no Serverless graph db... would be perfect for health applications
Very interesting, thank you! This may actually be useful for a project I had in mind given that it can be used on more problems :)
FromSoft has a similar problem with totally inane censorship of names in online play in the Dark Souls series. E.G. you would think they'd whitelist the word "knight" in a game about knights, but it's always censored to k*ht. There's some other wacky stuff going on but in this case I don't quite blame them because the devs probably don't speak English natively or at all, and you can tell they had a tight budget/schedule.
Adding Paul Graham to the list of people whose detractors are just haters and losers who will never amount to anything, it's becoming quite the club.
The outcome kinda depends on how you want to count the Linux kernel.
Dedicated platform for small streamers to make collabs
As a small streamer on the twitch platform, I realized how difficult it was to increase the number of viewers, so I created an online app that connects people based on the games you play which allows you to discover people with the same interests as you and also to be able to make your streams together in order to mix your communities. The site is currently only accessible to the holder of a twitch account and has an instant messaging system and friends The app was released yesterday, updates are planned, all your feedback is welcome. So I'm waiting for you on www.korde.io to make new friends.
It's great PR. And it worked as evidenced by the amount of times I've seen this story pop up
How do they avoided leaks?
- surely having a giant mono repo poses an access risk
Having a simple encrypted file means you can stuff it on an online backup though. The point is to have the keys stashed in several places so the loss of any one or two devices doesn't lock you out of your life.

I prefer keeping it as simple as possible since the consequences of screwing it up are a whole lot of hassle and possibly being locked out of some accounts forever. One downside is when you add or change a code you have to update all of your backups. A second script that syncs all of the backup files is also helpful to have.
Why I Quit Using Google
This. There are hash functions that are faster than MD5, so it's not the fastest, and everyone knows (since 1996, actually[1]) that MD5 is insecure.

If you want transmission error checking, use CRC32 or Siphash or whatever. If you want an actual, cryptographic hash function, then BLAKE3 is one of the options, though it's a very young one so unless you really know what you're doing, you should probably not use this for another few years. Heck, if anything in this comment is new to you, you'll want to steer clear of such low-level decisions and just use a library that makes the decision for you.

[1] https://en.wikipedia.org/wiki/MD5 "In 1996, Dobbertin announced a collision of the compression function of MD5 (Dobbertin, 1996). While this was not an attack on the full MD5 hash function, it was close enough for cryptographers to recommend switching to a replacement, such as SHA-1 or RIPEMD-160."