skysight-inc/HackerNews huggingface dataset:
Even in the consumer range, the Ryzen 5-9 parts are crazy value as well when building a reasonably future-proof computer. I am building a 3900x computer now, and with screen and peripherals it will end up sub 3k (this is Swedish prices, so it is quite a bit more expensive than in the US).
Amit Patels site made A* finally click for me. I’ve implemented breadth first search before and it was a nice moment when I realised that Dijkstra’s is a minor change to BFS and A* is just a one line change (plus the heuristic function) to Dijkstas’s. Very well written with nice interactive illustrations.
We have a few of these AMD Daytona X systems (2 socket, 64 cores per socket). They're beasts. It's nice doing -j256 builds.
Ask HN: How do I find the time to read when I always feel compelled to create?
I want to read more books which I think will help my productivity and creativity, but I have more than enough creative projects to focus on. What is the best way to balance this?
Quite a few times, I've made C++ library APIs like this:

struct iface
{
virtual ~iface(){ }
virtual void doSomething() = 0;
static std::unique_ptr<iface> create();
}

I don't know good ways to replace unique_ptr here.

Requiring library users to #include the concrete implementation is not good: inflates compilation time, pollutes namespaces, pollutes IDE's autocompletion DB.

Can go C-style i.e. pass double pointer argument to the factory, or return raw pointer. But then user needs to remember to destroy the object.
Perhaps it’s more clear to say provider agnostic. You can install sandstorm apps on any VM, not just google cloud.
From Twitter's statement:

> People who did not have this setting enabled or do not have a phone number associated with their account were not exposed by this vulnerability.

This is a bit disingenuous, given that you can't really open an account unless you provide a phone number to "verify" it.

Edit for clarification:

As gojomo said below (https://news.ycombinator.com/item?id=22233612) you may not need to provide it during sign-up, but your new account is almost immediately locked for "suspicious activity" and you need to provide a phone to unlock.
My friend, there's a huge difference between family based green cards (FB categories) and employment based (EB). The wait times change from 1-10 years in the former [1] to 100 in the latter [2]. A normal indian cannot go through family, since they're not closely related to a citizen. I have close relatives who gave birth here (they're working on a H1-B). The mom and dad would make it quicker by waiting for the US citizen kid to become 18 and apply, than they applying.
Heck, they can wait for the kid to turn 18, go to Iceland/Sri Lanka, give birth to the grandkid, and that grandkid can apply for the citizenship and that would be faster. :(

[1] - friends and my roommate here in the bay
[2] - my application
TL;DR

Twitter's data collection/friend matching feature used an API endpoint that returned usernames given phone numbers. A security researcher exposed it publicly, Twitter patched it (to just return a token or something). Twitter investigated and just released their findings "out of an abundance of caution and as a matter of principle." that it's clearly been "exploited" many times in the past. Twitter probably charges for the data returned by this "exploit". It doesn't look like the settings offered stop Twitter from selling this "exploit" as a service for "promotional" content.

It's seems strange not care that Twitter sells your username but care they also accidently gave it out for free in the past.
>>The answer is that USA has dumb policies.

Oh well, yeah. That part is true to some extent. But I can only comment on things we have control on. And to some extent a system with some specific rules needs to be used the way it was intended. We can't exactly say, we have a right to do what we like(in this case, cheat) especially when these things work like resources in a common pool. I can absolutely understand if some thing like this happened less than a percent. But the moment you enter double digit percentages of abuse/fraud, you are just hurting every one else. Expecting the other party to just offer an infinite pool of resources to accomodate our doing just adds to the anti-immigrant sentiment that is going around. Please note there are also people from other countries here.

Beyond this. Every system needs to work with a degree of fairness and merit, immigration is same.

On the shorter run, I do see someone putting a fix to these things and making things harder for every one else just to stop this abuse. On the longer I can see there will be increased pressure from economic centers all over the world, because every one is fighting for talent concentration at one place. This will lead to more liberal immigration policies.

And contrary to what our American friends believe it's hard to believe they will be the only country with economic centers attractive to everyone. Paris, London and Berlin have a growing tech scene. Then there's also Singapore and Dubai. Canada is another destination.

Beyond this the Chinese Bay Area(https://en.wikipedia.org/wiki/Guangdong-Hong_Kong-Macau_Grea...) - Guangdong-Hong Kong-Macau Greater Bay Area. Seems to be especially designed to take on Western Economic Centers. They are building state of the art infrastructure. Roads, Railways, affordable housing and top notch Airports. They'll be fighting for the talent pie, and with their demographics on the decline, attracting top notch foreign talent with be a Chinese government priority too. I don't expect them granting them citizenships. But liberal Dubai style 99 year visas on owning a home are possible. And a lot of the world talent will want to work there.

The way I see America will only eventually succumb to the pressure and might have to open up immigration again.
Making Your Mobile App Trustworthy
> For the most part, businesses don't do much if any basic research because there's no clear path to a payoff.

Businesses (and individuals) often contribute to universities monies which are used for basic research. It becomes the university's endowment. A great deal of basic research is funded this way. Often in return the university will name the building after the donor.

The government didn't do much of anything in basic research before WW2, it was privately funded.

http://www.bu.edu/articles/2015/funding-for-scientific-resea...
It is almost not a study about filters, but a study about an ad hoc vaccine by partially inactivating the virus by drying it on a surface with salt and surfactant.
Here's an online calculator[1] for Gini coefficient that I found some time ago. Tinkering around with some numbers there was what finally gave me an proper intuitive understanding of the Gini coefficient and the Lorentz curve.

[1]: http://shlegeris.com/gini
It has a separate dedicated IO die, allowing memory access/latency to all cores. I think threadripper does have less bandwidth than the 64 core Epyc part though.
CPUs keep on getting more memory channels per socket. That trend was already visible 15 years ago, when AMD moved the northbridge onto the CPU. Scaling it depends on scaling pin counts, which are now amazing.
> The intended use of this is "maintaining" internet of things devices.

> So it's not really meant to be a secure system, think of it as a botnet CnC and this makes a lot more sense.

Is there anything to back this up? While the mtls initialization looks less than ideal and there's downright stupid stuff in the README like credentials in URI parameters, this doesn't look any different than the other web terminal gateways we've seen on HN over the last few weeks.

> which most cheap IOT things are based on

Most cheap IoT devices I'm aware of aren't remotely capable of running OpenWRT, do you happen to have examples for this?
How so? Which features are you looking for?
Except for the fact that your US immigration story will fully depend on where you're born. No amount Canada/Mexico/UK citizenship can change that place of birth, and the US will treat this generation of Indians/Chinese the way they always have.
Imagine if cheating rates for each university were somehow measured and published independently so that a cheat rank was as well known as the usual rankings. Then, to avoid a poor ranking, universities would have to pay their staff to actually assess their students instead of taking the shortcuts they are.
Dropbox's favorite bug bounty bugs
How much effective parallelism do you get out of them?
That might be the case now, but twitter didn't always require them.

I wouldn't be surprised if there are 10s of millions of accounts without phone numbers associated with them.
When I was in college, we also followed a "traditional" CS curriculum. The introductory language was Scheme. The language in core courses was C. Advanced courses used whatever was best for the course, usually C or C++. Many of the courses have had the same problem sets since 1985.

At the time, students had problems with it because "how are we supposed to build apps with this knowledge?!" There were even student efforts to "modernize" the curriculum by supplementing it with student run workshops on app building (which actually did really well).

Personally, I really appreciated the curriculum. I was a self taught programmer going into CS, having done lots of web dev and automation stuff with PHP / Python. And I was really cocky about it. But as my adviser told me on my first day, "yes, you're a programmer, but you are not yet a computer scientist." I knew nothing about Computer Science, and had never touched a low level language, because I had no practical reason to. The next four years were valuable for me because they forced me to learn about topics that I will never teach myself.

And you know what? By the time I graduated I was fully proficient with git, python, Javascript, bash, and a whole bunch of other tools and concepts, despite the fact that no class forced me to learn them. I picked them up from working with others, scripting tests for my assignments, and my internships. It also helped to have the foundation of lower level knowledge. It's a lot easier to understand the "magic" of your scripting language when you have an appreciation of what it's actually doing underneath the hood. It's easier to understand bash when you've written a shell in C. Etc.

For me, this approach worked well. School taught me the fundamental concepts that haven't changed since 1985, which means they probably won't change much by 2054, either. Who knows what industry will be using in 2054? I appreciate that the school curriculum prioritized core, fundamental concepts over tooling trends and the language du jour. Yes, it's important to learn those practical skills, but they'll come with practice and experience in industry (especially if you have 3 internships); there's no need to take a class on them. And when the next one comes along, you can learn it in a week. Your knowledge of the fundamentals will help.
Anything with real intrinsic value will do well. For equities, that means value stocks over growth stocks.
7 Ways to Define a Component Template in Vue.js
YARJW - Yet Another Remote Job Website
I just checked the twitter signup form, which does have a phone input. But there's a toggle saying "use email instead".

So, no phone number is required.
I didn't specifically measure that, but most builds are limited by Amdahl's law (./configure kills you) and there will rarely be 256 compiles that can happen in parallel at any one time.
Show HN: All About Machine Learning
> Access your device's terminal from anywhere via the web

Nah, nice try, but I'm good with ssh, key based authentication and few white-listed IPs.
Author here.

I've collected various resources about machine learning in one place including:

- books (with prices, ratings, reviews, first/last edition years)

- podcasts (ratings, number of episodes and date of the last one)

- courses (prices, rating, duration, number of lessons)

- communities (local and online)

- events (conferences and local events - US-only for now)

- articles

It's a good place for those who just starting with ML, but I'm hoping to get the attention of the experienced machine learners. All of the content can be sorted by difficulty level. I'm also working on button that will let you hide all the beginner's content.
How does one even define "Traditional Christian Morality?". It's in no way a monolithic religion. Even within the same denomination you can go from Jesus to Saint Olga for your definition of "moral".

The more I read Nietzsche the more glad I am that I live in a society that does not greatly value philosophy.
I’m interested in this as well. As opposed to CPUs from 15 years ago, the 3990X has 256 MB L3 cache and around 100 GB/s of memory bandwidth, which should help a bit. What kinds of workloads can we expect to be bandwidth-botllenecked still?
The current headline is out of date - The story has been updated since and now reads:

App Used to Tabulate Votes Is Said to Have Been Inadequately Tested

The app was quickly put together in the past two months and was not properly tested at a statewide scale, according to people briefed on the matter.
SEEKING WORK

Location: Mumbai, India

Remote: Yes, Strongly Preferred

Willing to relocate: No

Technologies: Python, Web Application Frameworks (Django, Flask, Tornado), REST APIs (DRF), Postgresql, MySQL, HTML, CSS, Heroku, Vanilla JS, Frontend Frameworks (VueJS), Linux, Docker.

Résumé / CV / Portfolio: Full CV and details of Open Source contributions available on request

Email: black11shadow@gmail.com

I'm a Backend Python Developer with 5 years of experience building web app backends and APIs. I've recently started dabbling in frontend frameworks, Vue & React to be precise. Have been working on Open source applications for 4 out of 5 years of work. I’m looking for a permanent or contract remote position as a backend/fullstack developer.
> I guess this is your tip now. You deserve it!

Found the American. Just as a heads up. We don't tip the cleaner. Or anyone else. And while Finland doesn't have minimum wage, collective agreements specify minimum pay rates so the cleaner will always be paid a liveable wage.
> How does one even define "Traditional Christian Morality?"

Well, you could try reading the books that philosophers write and see how they define terms.

> The more I read Nietzsche the more glad I am that I live in a society that does not greatly value philosophy.

Or not. Ignorance is bliss, after all.
Try to do some system management and you'll often realize the steaming pile of shit under the fancy looking hood.
Sudden changes to SMB configuration after updates bringing issues that differ not by version after the updates but by version of when they were first installed... and all of a sudden there's a bug with NTLMv2 and what have you, etc, etc
An advice: get a decent cooling for 3900X, stock Wraith Prism can't hold it.
> I'll prepare an update to fix this.

Update in https://github.com/phil-opp/blog_os/pull/738 and https://github.com/phil-opp/blog_os/pull/739
The abstraction of FP, which is the same as mathematics, is that all functions can be treated as resolved instantly in time and from a given starting point you'll always get the same answer.

However in the real world things take time and time flows in one direction, and have a nasty habit of being non linear.
FP abstracts away these complications with the notion of 'actions' which are then dealt with by some outside 'runtime system'.

Hence System.Time.getClockTime >>= print
Did anyone save the screenshots? Tweet has gone down.
I've avoided any sort of autofilling stuff, I just use keepassxc and launch it when creating or checking a password. It's still a huge improvement over any past workflows. Even aside from being a password list, it's also an account list, something I think I've always wanted.
I've met people who just have a local spreadsheet they keep passwords in, because they've used Microsoft Office for years but haven't been tempted to try a proper password manager yet. If only they knew how similarly simple it could be.
Which institution is best for machine learning?
Was somewhat disappointed it wasn't a 2020 version of the Darude song, but this is nice as well.
Kenya is a very undervalued country... Lots of highly educated folks. Too bad poverty and a lack of opportunities causes people to aid in cheating
I dislike services that aren't upfront with their prices. Requiring an account to be created AND providing the full job specification before seeing the cost will probably result in a large drop-off of your potential customers.

The value of posting on a brand new job board is about zero, if anything it's net negative when taking into account the time used. So, for a brand new site that lists only 10 jobs, I'd expect this to be free for a while to build up volume and value.
Journals often charge extra publication fees per figure. Any supplementary material also needs to be available decades from now
I have published apps that are primarily a WebView in both iOS and Android recently. Though I'd ensured to put some native components besides a splash screen in both of them. I had created a side menu navigation bar, setup Firebase for notifications and it was accepted on both platforms. Here's a link to the iOS App:

https://apps.apple.com/au/app/aged-care-decisions/id14744800...

Happy to answer your questions.
This google spreadsheet is attempting to gather all of the publicly posted election math worksheets to crowdsource figuring out the results.

https://docs.google.com/spreadsheets/d/1VpPjgfoH-n7Ie8OmIa2e...
By normalizing into multiple tables.

It is hard to model without requirements but you probably need a table for type of desks, another for desk instances with location and another one to many linking table for items/colors.

Why? I like two lamps and no elephants. By normalizing, this new requirement is simple to represent compared to jamming more fields into the desk table.

Or if another person prefers penguins you don’t end up with penguin_color columns.

It is possible the one table design works, but the introduction of nulls is a smell that indicates maybe the design is a problem.
I moved from SF to Canada. Traded a higher salary and basically 0 shot at green card for less money, a PR when I walk in and guaranteed citizenship.

Most importantly, you cannot do anything besides your job on an H1B. No start ups, no side projects. You can't even BE in the US without a job and just bum around for a year. Every interaction with the US border folks makes me feel like a criminal. The visa fundamentally restricts the shape of your life in a way thats hard for residents to really understand.

I already get paid enough to retire comfortably when I'm older and it's no fun retiring young! Retirement costs in Canada are also significantly lower if you can count on free healthcare. Not worth it. I do miss the weather though :)
Some strange assumptions here. For example, the article kind of implicitly assumes that AppAmaGooFaceSoft pays best. I don't think that's the case. If anything, people work for AppAmaGooFaceSoft because of prestige. But this would then contradict the whole article in a way.
Is there an archive of crypto related future predictions?

How long until a specified length preimage attack can break bittorrent blocks?

I remember a paper published a ~decade ago estimating very short (well funded) ASIC sha1 collisons. Anyone have that ref?

EDIT: Should I have not said preimage? My understanding is bittorrent is broken (by DDoS, not infohash(?)) if you can make a bad block that matches the length and sha1 of a target block.
I feel it's safe to assume that any enthusiast building his own system with high end parts won't be using the stock cooler which I feel needlessly increases the cost of the product that's passed on to us for something that will end up in the seller.

Although you can buy the CPUs in TRAY format without the cooler, the prices are almost identical to the BOXED version and your warranty is lower since they're designed to be sold to businesses not consumers.
The CPUs that handle 86% of all credit card transactions for example (in the various mainframes IBM builds). Pretty nice modern architecture still capable of executing 60 year old code.
The Next Big Thing in Agriculture; Hydroponics Farming System
> Well, you could try reading the books that philosophers write and see how they define terms.

And you'll find definitions that are conveniently constructed to support their thesis exactly, and which fall apart under the slightest bit of scrutiny. The question was rhetorical.

> Or not. Ignorance is bliss, after all.

Not all information is useful or correct.
> Only in Finland

More like "only in a corporate environment with CCTV"
Here's one I did as an assignment for a job interview:
https://github.com/ivancuric/hn-scroll

You can see it in action here:
https://hn-scroll.netlify.com/

The task was to build an offline capable site which displayed the latest Hacker News posts, and loaded more lazily when scrolling.
I had to use the official HN API, and I couldn't have any middleware or caching. Everything had to be done client-side.

The app ended up being 1.4kb in total, with support for practically streaming in the items, batching them by network response times and render frames, while keeping the order.

You can see the batched items in this version: https://codesandbox.io/s/hardcore-stonebraker-8m8fx
To put some numbers to this:

In 2005, Opterons used a 940-pin socket and had dual-channel DDR, for 6.4GB/s total bandwidth to feed two cores. In 2009, Xeons the LGA1366 socket to provide triple-channel DDR3, 32GB/s for four (later six) cores.

Now, we're up to 4094 pin sockets providing 8 channels of DDR4 for a total of 204.8GB/s of memory bandwidth for 64 cores, which is exactly the same per-core bandwidth we had in 2005.

(And for comparison, a $200 graphics card will also have around 200GB/s of memory bandwidth.)
SEEKING WORK

Location: Amsterdam, The Netherlands

Remote: Yes

Part time

Technologies and Skills: Java, Spring Boot, Python, PHP, HTML, CSS, JavaScript, Angular, Jenkins, Docker, MongoDB, MySQL, ElasticSearch, Redis, Apache Kafka, Requirements gathering, design, and UX, Consultancy.

Resume / CV / Portfolio: available upon request

Rate: €65/hr

Email: evangelosdaniil[at]pm.me

Since 2014, I run my own development company, and I am helping companies & development teams to build world-class applications, tailored to their needs, using pixel perfect code that is built with love. Would you like to have a chat? Hit me up @ evangelosdaniil[at]pm.me.
Considering that the web platform is also an offline application platform an major operation system vendor (MS, Apple, Google) cannot afford to stay out of that game.
Location: Sioux Falls, South Dakota

Remote: Yes

Willing to relocate: Yes

Technologies: malware analysis using data science (Python, R, Octave), reverse engineering (ROP/OOP w/ Ghidra, IDA, Radare2), incident response and SIEM (LR/Splunk/Kibana), and hardware hacking using JTAG/UART

Resume/CV: shorturl.at/czAGX (PDF)

Email: jobs@micahflack.com

Please send only State or Federal work opportunities
To about the extent that a 64-bit float can ever be said to contain an exact value, this algorithm will compute the exact value. There's no sampling.
All the law does is provide a cause to sue. The plaintiff is the one who chose to pursue the case and demand either a crippling settlement or crippling renovation. This was completely the plaintiff's choice.

If the position is that pre-ADA inaccessible buildings should just all be razed, well, that's a point of view I guess. But the plaintiff doesn't get to deny their culpability for shutting this place down. They are 100% responsible. But for their lawsuit, the place would still be open.

And if their goal was to make the place comply with the law, why did they ask for a $60k settlement? Did they somehow incur $60k in damages because their friend had to go in and pick up the coffee? It seems like if what they wanted was compliance with the law, they would have asked for that or nothing. Unless of course maybe, just maybe an easy payday was the point all along.