skysight-inc/HackerNews huggingface dataset:
Had hoped an article like this would shed some light on the environmental impacts of the additional compute required to build and maintain a feature backed by AI. My understanding is it takes significantly more compute + data, and therefore electricity, to build and maintain a feature baked by AI. As AI becomes increasingly accessible, particularly through offerings from cloud providers, the power consumption would increase faster than when folks were exclusively writing scripts/uploading binaries to process transactions. My hope is it's negligible. Haven't had the time to crunch numbers to figure this out as it's out of my daily lane.

Maybe I skimmed the article too fast and missed it while enjoying my coffee and bagel sandwich. Let me know if that happened.
>Interesting that none of the rules of journalism include just reporting facts.

Facts are not enough because in order for 'facts' to be useful they have to be embedded in a larger structure - like a theory, or ideology, or narrative, or whatever.

Here's a fact: "Sun rises in the East, and sets in the West". This fact is compatible with heliocentric and geocentric models. The fact on its own doesn't tell you which is which. It doesn't tell you the context, nor the other facts that may have been omitted or superfluously included when reported, and proponents of both theories can use it to justify their position. This is why there can never be such a thing as "journalism that just reports the facts".
Not being able to ask abstract conceptual questions of a book or website or etc.

Personally I'm a more visual learner and often while a book is busy with text syntax or misc details I will think I'm putting together a better understanding of what is happening / how things work....but the book goes on with details and I lose focus / get frustrated.

I so badly want to ask "Wait if a does b does that mean x is acting like this or that!?!?"
Exactly. As a user I've installed the browser add-on Let's Encript and have the "Encrypt All Sites Eligible" option enabled to block all unencrypted pages. On the odd occassion that I encounter a page that isn't available over HTTPS I'm prompted to choose whether I want to make an exception and allow the site to load for that session. I rarely do though.
*backed
That makes sense. I wonder if any web servers have smarter decision making for that. Like give a hard 301 to modern browsers, but let older or nonstandard clients get a standard http response.
have to agree with you. this is conflating real-time and event sourcing. the latter which is simply a recent pattern people like to talk about. or maybe you are right, we are misunderstanding the usage here...
Well, the issue there is that no modern modems at all have open firmware, no matter what your choice is.
The replication crisis may also be a theory crisis (2019)
When Spreadsheets Attack
Often the case and one excuse they provide is so that they can comply with radio regulations - which as many are semi software with DSP's in effect, would make the slightest software bug/change cause issues with the local radio regulators and indeed, the telco's. Not saying that you would need a radio licence from the local area just to compile modem code, but maybe not that far removed in part. Certainly testing, would dictate a sheilded enviroment to avoid legal issues and then at the end of all that, it would have to be certified by whatever local regulator of the country(s) it is used.

So does make open source modems rare, liability exposure of legal fallouts make for some muddy waters.
I don't mean just FreeBSD, being quite a bit smaller than Linux is still a gigantic, 30 year old, codebase. You can not realistically read through the entire openbsd codebase unless you spend a decade at it
I love stories like this. It would be nice to have a site full of them.
atleast she had a good humor about it.
Building Containers Without Docker
Are there other fields like computer science, where some students start university knowing how hashing works and being able to brute force passwords, while others start having barely used a keyboard and mouse?

It seems like most programs people start on relatively level playing fields, but that couldn’t be more untrue for computer science.
I did this in school. Not the exact same way but I was so smugly satisfied with myself. I tortured the IT teacher the last few months. He deserved it, for being stereotypically uninterested in teaching anything beyond the minimum and actively shut off any attempt to learn more about anything.
It's not special (though it does have bigger granules,) my family is just Jewish.
Nice tool. But apart from the great landing page, what's the difference with FakeRest [0]?

0: https://github.com/marmelab/FakeRest
> I rather keep Caps Lock as Esc (else I'd use it as Ctrl).

Why not both? My caps is esc when pressed alone, but it’s ctrl when pressed in combination with other keys. :)
If I wanted to publish a blog post, I'd do that. When I put something on Twitter, it's for a reason. I also dislike Threadreader's assumption that they get to monetize my content for free and without permission. If somebody would like to build a business on my work, they can start by asking.
4th and 3rd millennia BC Italy was home to complex networks of metal exchange
Is the Bertrand's paradox a paradox or a blunder?
Offering HTTP allows MITM attackers to strip HTTPS from visitors who want it. HSTS can help, but the vector still exists.

Optional security is not just an upgrade; it opens up a downgrade path from more secure to less.
> Easy, either implement a decimal type (4 fractional digits) as most programming languages have them implemented by users.

C#, Ruby, Python, and Java, at least, among industrially popular languages all provide a fixed and/or arbitrary precision decimal type in either the core language or stdlib. Lower level languages sometimes don't, and JavaScript, among higher-level popular languages, notably does not.
It depends on how you define the "problem". Is it ideal, nope. But there is really nothing else out there even trying to do this other than librem which has its own problems. Not to mention this is very cheap. You have to start some where.
Ask HN: What are some good resources to learn Marketing?
I’m about to start selling workshops about web development topics and there’s so much that I don’t know that I don’t know on marketing properly.

Do you have any good resources on marketing automation for hackers?

Things like Building an automated email pipeline, good copy practices, landing page optimization, SEO, etc.

Everything that one must know or consider when launching something for the www
Wow! That is cool, and I had no idea that people were making tweaks for existing apps. Very neat!
Bear for macOS.
FWIW, one issue with having the plain HTTP site available is that browsers (without the HTTPS Everywhere extension installed) will default to loading the unencrypted site when someone types your domain into their browser. Google is also giving plain HTTP links to your site when it turns up in results it seems.
Ask HN: Why isn't wireless connection to computer monitors ubiquitous?
There might be solutions in the market (I've seen one that transmits VGA signal using a USB dongle- very low-res for today's screens), but not of them are widespread. Instead, pretty much everyone connects to an external monitor with a cable (and if you're on Mac, add a dongle or two).

Definitely not an EE person, but: probably to transmit UHD data might stretch the limits of the physical layer (although there are some reasonable assumptions that we can make - e.g. very close proximity, clear line-of-sight, etc). But something as basic as casting a Chrome tab to TV works OK and maybe can be improved.

HN readers more hardware-inclined than me, I'd appreciate your responses.
If I were in your shoes I'd use other products/services instead.

The problem with the "billion user audience" products/services is that they do not have enough people (if any) as support when stuff like this happens.

Try other services/products as suggested by other posters here. It sucks but it's the only solution to this problem.

Good luck.
“Let’s encrypt” has pretty much eliminated this problem.
Have you tried let’s encrypt a la certbot? It wasn’t a painless process when I did it but I do have autorenewing “green lock” SSL certs for free.
I didn’t see many challenges, except for a steep learning curve. Got hired as a junior, while having less knowledge in various subjects than uni graduates, I faster learnt and became productive in the tasks that we manage. Some even failed to meet the requirements since they focused too much on the theory and never got to the stage to actually apply it.

It may have been to my advantage that my senior peers quit & went on parental leave for months leaving me alone within the environments that I’m responsible for after only 8 months. Making it even steeper but also forcing me to apply the changes that I saw correct
Are you saying they're hypocrites because you imagined it so?
PracticalAI – ML content discovery platform
Yeah, I'm using that, but I find it does not work well under high load.
I agree the author lost their argument partway through, and I would have made the point a bit differently.

Broadcast TV and radio signals are not secure, and don't need to be. Their information is supposed to be available for everyone. If someone hijacks a radio station, the worst they can do is spread disinformation, and there are easier ways to accomplish that.

Similarly, if all a website does is display text that is designed to be visible to everyone, a secure protocol is unnecessary.

IMO, http pages which lacks input fields and other forms of two-way communication should not receive an insecure warning. By contrast, if there's an input field, there's a good chance the user expects what they're writing to be private.
So my bid just drives up the prices advertisers need to bid to show me ads? Sounds like a win for a company that sells ads.

Asking for your "long term value" is interesting, although for users who run ad blockers and therefore never click an ad, isn't their value super low anyway? Imagine Google asking for $50/yr to not show ads, installing an ad blocker, then a year later seeing Google ask $5/yr as your value plummets.
Those interstitials are horrific. And they are on so many sites now.

Google deserves as much condemnation for introducing those as it does for the recent redesign.

I think most people don’t realize it’s Google’s fault and blame the sites.

Thank you the comment. It explains so much of how the Internet has gotten markedly worse in the last couple months.

These “auto” AdWords are totally overwhelming and awful.
The problem is that on Twitter they’ve become more like activists rather than journalists/reporters.

Maybe one day actual journalists will come to the conclusion that tweeting is antithetical to journalism and may only use it as a tool of discovery rather than engagement.
In some countries, cents are a very insignificant number(they have the additional three zeros for whole numbers) and businesses are allow to round to the nearest hundredth, most small to medium businesses round to an integer.
> That’s in decimal, but since computers use binary

Well, if you tell them to, e.g., by using a binary floating point type instead of a decimal type.
Word Press Theme Detector
Security is about being paranoid in imagining what different actors can do with varying levels of access. In this case, MITM is not always easy, but once they have access they can do bad stuff. As a webmaster, an attacker with this access can break your site by messing with your users.

By taking the simple step of using https, you can successfully reduce your attack surface and increase the difficulty of messing with your site.
Observing oneself without distortion
U.S. Plans to Evacuate Citizens from Epidemic-Stricken Chinese City
For me, it is knowing (or more accurately recognizing) when I'm going down the wrong path. Sometimes this is, of course, part of learning and sometimes it is a waste of time.

One thing great about the Internet and places like S.O. or H.N. or search engines, as well as other subject specific sites is it is much easier to find subject matter experts when you get stuck.
It takes a LOT of bandwidth. Otherwise the quality degrades, and we don't accept 90% quality.

There are options but you start to push towards licensed frequencies and then your 6 feet of cable free cost $30k
The Nexus 5 did not have mainline support while current; it ran a patched kernel like just about every other AOSP/Android build. Mainline support is now being provided by the postmarketOS folks for the Nexus 5, and could be achievable for other devices.
I understood GP post more like "They are afraid of government registry, yet willingly give their sensitive data to corporations."
The exchange between Troy Hunt and Jacob Baytelman is a little aggravating for me--they appear to be talking past each other.

Jacob challenges him to "hack [his] static blog". I don't know what 'hacking a website' means to him, but to you and me it probably means compromising the web server, which is not directly related to HTTPS (although I can think of a lot of ways that the use of HTTP could lead to a web server being compromised).

Troy responds by taking him up on this challenge, accuses Jacob of thinking that his site is immune from transport layer risks, and then performs a man in the middle attack on himself using Jacob's site (when in reality literally any HTTP site could have been used).

It's like these two are having completely separate conversations.
You are 100% correct and it's sad others cant see it.

Tofu, like with ssh, is a valid strategy. Trusting third party providers is decreasing safety compared to only having you and the service.
The Era of the Trident Engine
Structure: figuring out which of dozens to thousands of resources to consume, and in what order. Consistently devoting time to it.
I grew up in the 80s during the era of MacroMaker and QuickKeys, when you could just hit the record button and make macros to play back sequences of mouse and keyboard events. It was especially useful in programs like Photoshop before they added their own macro systems. I'm having trouble finding links about it:

https://en.wikipedia.org/wiki/System_6#MacroMaker

http://basalgangster.macgui.com/RetroMacComputing/The_Long_V...

The frontier was to eventually make everything scriptable and deterministic by getting more apps to have hooks that could be controlled directly (so like a specific command to click the close box of a window for example, rather than sending a click event right and down from the top left corner).

Anyway, this whole concept of how to use computers seems to be all but dead today and I can't help but feel that something of tremendous value has been lost. Please, if you ever write macro tools like Phoenix, add a record feature.
Tinder incorporating panic buttons and authorities access to user’s location
The age restriction is interesting. How is that legal?
I really like the model of open source SASS, I hope users will still pay as I plan my own open source SASS for video edition. I think it is the best compromise between my open source values and the basic requirement to make money in life.
Note: 2018.

Troy talks about a tipping point, which was Jan 2017.
Certbot and LetsEncrypt make this a trivial process these days. Takes 15 minutes to set up and is free. Why not use it?
I have a similar experience, in Central Portugal: we found an undiscovered/undocumented site with neolithic ruins. Nothing major or too well-conserved, but still, it's quite stunning to realise that trekking in the summer in the woods almost in your backyard, and less than 10km from a city of 100,000, you can find such a thing :)
Big fan of pandas as well... but I have to admit there are some things at the beginning were like wtf... some of which are now deprecated thankfully. But more on topic to this post I really can’t see why someone would want to solve speed on small datasets by incorporating numpy into a new form of pandas... both projects are so established, why would you attach your project to some other dev who know has to keep pace with numpy and pandas improvements when you could just import pandas, import numpy and be done with it?
Using s_client makes what’s behind TLS human accessible, and for those of us that grew up in the age of telnet I get that desire. But in this age, we cannot be leaving unprotected web sites around, even static ones. It’s a matter of responsibility. You as an operator don’t know where network attackers will find a way.
Why is it awkward? Because only you recognize the extent of their privacy loss? Enlighten them.
Maybe some foreign language courses, the course itself will be mostly about literature in that language, you can get a mix of people who have learned other languages but not the one being studied and people who are native speakers.

My CS course had everything from a few of us already writing commercial software to people who had never touched a computer.
Ha, I see Julia Evangelism Task Force is grouping up in another thread! I am waiting for the arrival of Commander socialdemocrat soon :)

I am a big fan of Julia as well, and it is quite amusing to see recent growing presence of enthusiasts roaming between topics.
You might get unexpectedly negative financial results if you don't use floored division and modulo properly:

https://stackoverflow.com/questions/4467539/javascript-modul...

>JavaScript % (modulo) gives a negative result for negative numbers

>Question: According to Google Calculator (-13) % 64 is 51. According to Javascript (see this JSBin) it is -13. How do I fix this?

>Solution: ((i % n) + n) % n

The Forth-83 standard word /MOD (or FM/MOD) implemented floored division properly, subtly breaking many old FORTH programs, but it was a step (or rather a truncation) in the right direction, towards negative infinity instead of zero.

https://www.nimblemachines.com/symmetric-division-considered...

>Symmetric division considered harmful

>Since its 1983 standard (Forth-83), Forth has implemented floored division as standard. Interestingly, almost all processor architectures natively implement symmetric division.

>What is the difference between the two types? In floored division, the quotient is truncated toward minus infinity (remember, this is integer division we’re talking about). In symmetric division, the quotient is truncated toward zero, which means that depending on the sign of the dividend, the quotient can be truncated in different directions. This is the source of its evil.

https://forth-standard.org/standard/core/FMDivMOD

>Rationale:

>By introducing the requirement for "floored" division, Forth 83 produced much controversy and concern on the part of those who preferred the more common practice followed in other languages of implementing division according to the behavior of the host CPU, which is most often symmetric (rounded toward zero). In attempting to find a compromise position, this standard provides primitives for both common varieties, floored and symmetric (see SM/REM). FM/MOD is the floored version.

>The committee considered providing two complete sets of explicitly named division operators, and declined to do so on the grounds that this would unduly enlarge and complicate the standard. Instead, implementors may define the normal division words in terms of either FM/MOD or SM/REM providing they document their choice. People wishing to have explicitly named sets of operators are encouraged to do so. FM/MOD may be used, for example, to define:

: /_MOD ( n1 n2 -- n3 n4) >R S>D R> FM/MOD ;

: /_ ( n1 n2 -- n3) /_MOD SWAP DROP ;

: _MOD ( n1 n2 -- n3) /_MOD DROP ;

: */_MOD ( n1 n2 n3 -- n4 n5) >R M* R> FM/MOD ;

: */_ ( n1 n2 n3 -- n4 ) */_MOD SWAP DROP ;
> I know this isn't StackOverflow, but could someone shed some light on to what's happening here? https://ideone.com/1U7rgf

You cannot store 8.95 in a binary float (independent of precision). It is basically the same problem that you cannot store 1/3 as a decimal number.
This is not those companies fault that politics instead of protecting users privacy and freedom of decisions are protecting their own access to user data.

People managed to survive for generations living in a tribe, city whatever you call one place yet now politics want to know everything about them to sustain power they gained using technology they know nothing about.
the military still has issues w/ VSTOL (looking at you Osprey). the thought of uber providing electric ospreys is kind of terrifying
I got told off for typing *H.. on a BBC Master.

It listed all the built in help, basically masses of text scrolling down the screen. I assume the teacher thought I was hacking the computers or something, scared them.

To be fair, I was hacking the computers, but not when they were watching. Turns out the password file used very simple reversible encryption, but we only used our powers for good, and games.

Linux does sound evil, is it from one of those eastern european countries? I hear it's like communism
Could have ended badly like this grim incident that was linked here before https://www.otherhand.org/home-page/search-and-rescue/the-hu...
Short answer: because the password is used to encrypt the user's randomly generated seed, then the resulting ciphertext is stored on the server. If we didn't hash client-side and sent passwords in plaintext to the server, our end-to-end encryption scheme using password-based encryption would be broken (though I know that’s not exactly what you were saying)

Long answer: Based off my understanding, we do implement something analogous to SRP with some minor differences.

We'll have supporting documents explaining our approach complete with diagrams soon. But for right now, this is close to what the architecture looks like for clarity:

https://user-images.githubusercontent.com/26468430/69532862-...

In order to be fully authenticated, the client must first prove they know the password token. The server then sends the client the password encrypted seed, then the client proves they can decrypt that seed (using Diffie-Hellman). So functionally the client is proving it knows both derivatives of the password to the server.

Note there are 2 major differences between that image and what's currently in the code:

1. We also do a single SHA-256 hash of the password token before storing it on the server (prevents someone with access to only the server's data from passing round 1 of our authentication flow)

2. The optionals are not optional anymore, what I described above is how it’s working today.

Disclaimer: there are a lot of missing pieces in the above description. So if it feels like there are gaps, that's why. It's difficult to explain the full scheme in a single comment like this.

Our approach is pretty similar to Firefox's described here: https://hacks.mozilla.org/2018/11/firefox-sync-privacy/