skysight-inc/HackerNews huggingface dataset:
About ten years ago, I wrote an IE/win7 plugin that broke the security model of IE to allow the browser to communicate with a USB device (in this case, a remote control).

It was a nasty, nasty hack, and things like this shouldn't be allowed. Management insisted that our product have a web-interface because they had information that our competitor was going from desktop apps to web apps. Ironically, our competitor was never able to get its web interface working.
This sounds like it's about the problem of: I have a column filled with the last names of lots of people and I want a text search that will find these names, but, which takes into account all the various ways people end up writing that name. So, a search for 'mueller' should also find 'Müller'.

However, that problem sounds nearly intractable to me.

In basis it sounds like you just 'canonicalize' everything. You store, alongside 'Müller', also the string 'mueller' (the rule being: first transform all characters into their asciification, with the asciification of ü being defined as 'ue', then lowercase that.

The problem is, of course.. that searching for 'MULLER' should also find this person. And now we're more into trying to get this done by first deconstructing the unicode into ascii + accent marks and then just wiping out the accent marks.

But once we state that 'mueller', 'muller', and 'müller' need all be 'equal' to each other, where does it end? A last name can be from any of a thousand languages, each with their own unique conventions on how these things are asciified, and any given asciification must match any other. Sounds like a combinatorial explosion.

One could disregard this notion and say that 'muller' does not match 'müller'. However, note that generally, Sjögren's syndrome tends to be asciified as 'Sjogren's syndrome', probably because Sjögren was norwegian and I assume that the norwegian asciification of ö, is o. The german asciification of ö is oe however; and I can't tell from a last name if it is germanic in origin, norwegian in origin, or from the land of fairytales and flying pandas, such as Haägen-Dazs.

Just by thinking about this for a while I have concluded that it's hopeless, but perhaps I'm missing some fancy trick to at least try to make this problem dealable. So far my attempts to look for solutions tend to come down to advice to use unicode normalization and then get rid of all accents, then lowercase it, which obviously doesn't work at all (with that strategy, mueller would not find müller), or heuristic solutions (if a lot matches, good enough), which are their own can of worms.

Is there a solution to this to me seemingly impossible problem?
It's interesting that Angry Joe got taken down; AFAIK, RedLetterMedia's review didn't get taken down, and it featured decent chunks of non-trailer footage (not sure if any of them were 10+ seconds consecutively) [0]. And, like AJ's, it was a very negative review. I don't doubt AJ was the victim of manual review, I'm just surprised RLM wouldn't be on CBS's shit list as well.

(and tangentially: both are right; the "Picard" show is depressingly bad and derivative. I've only watched the first ep, but it had more gratuitous (and cheap looking) martial arts action than several seasons of TNG.)

[0] https://www.youtube.com/watch?v=hfQdf93e63I
Location: Currently France/Hungary

Remote: Ideally -- but not necessarily -- with a team that is mostly located between US Central and India (i.e. Europe compatible).

Willing to relocate: Depends on the opportunity.

Technologies: Management, Marketing, Sales, Finance, Python (mostly Scrapy, a bit of TensorFlow), Ruby (mostly scripting), PHP (~10 years), JS (~10 years), CSS (~10 years), MySQL (~10 years), Postgres (~10 years, among the top StackOverflow users), Network Engineering.

Résumé/CV: upon request

Email: ddebernardy@gmail.com
Ask HN: What paid news outlets do you recommend/use?
News is one area of my life that I don't pay for (directly). For a long time I assumed it would be just as bad ad/tracking-wise verses I did pay and that accessing news across my devices would be a huge PITA.

For example, John Gruber [0] has called out the WSJ multiple times on his podcast because it would force him to re-login-in all the time.

I don't want to pay for something that I won't use because it's so hostile to the user. That said, there are more and more articles that I see (some posted here on HN) that I would like to read but are paywalled. I'm ok with having a handful of subscriptions. So, how do you approach this issue? What do you subscribe to? Do you read mainly online/rss(is even still available for news?)/app?

Also is anyone using Apple News+? It seems more like a news feed than access via a real subscription (for example WSJ is in Apple News+ but only back 3 days[1]) and I've heard the Mac App is trash.

[0] https://daringfireball.net/

[1] https://www.cultofmac.com/614802/what-apple-news-means-for-wall-street-journal/
YouTube can do whatever it wants, but it doesn't change the fact that Picard is DOA.

I can't wait for them to completely destroy every franchise so they are forced to be creative and come up with something new.
Justice Department meeting state AG offices Tuesday to discuss Google: sources
HyperCube | Software Engineer | New York, NY (NYC) & San Francisco Bay Area, CA (SF) & Tel Aviv, Israel | Full-time | https://www.hypercube.ai

Do you want to work on challenging machine learning and distributed systems problems? HyperCube is a real-time serving engine for deep learning retrieval applications.

We are looking for a software engineer with at least 2 years of experience.

Our current tech stack: AWS, Kubernetes, Python, C++.

Required experience

- At least one scripting language, such as Python, Scala, etc.

- At least one compiled language, such as C++, Go, Java, etc.

Preferred experience, 2 or more of the following:

- At least one deep learning framework, such as Tensorflow, PyTorch, MXNet, etc.

- Building web-scale services and/or distributed systems

- Productionizing machine learning models and applications

- Embeddings and nearest-neighbor search algorithms

- Information retrieval (i.e. Lucene, Elasticsearch, database internals, etc.)

- Hardware acceleration (CPU, GPU, TPU, FPGA, etc.)

HyperCube is a distributed team with offices in New York, NY, San Mateo, CA, and Tel Aviv, Israel. Our team includes world-class scientists and engineers who built large scale ML applications and platforms (including Amazon SageMaker) at leading companies and cloud providers. We are passionate about building great solutions by pushing the boundaries of science and technology.

amir [ at ] hypercube.ai, subject line "Hacker News February 2020", to apply or learn more.
Google themselves just made it possible to flash Android devices from within the browser, by using WebUSB: https://android-developers.googleblog.com/2020/01/flashing-a...

I interpret the definition of "dead" here to be:

No other implementation than the one in Chrome

Rather than:

No implementation or spec work at all
I'm talking about vanilla JS, no build tools.

Totally different than server-side coding.
Sorry, I was a bit hyperbolic - let me clarify. I didn't mean that educational experience is a critical portion - more that working in the security field is a lot more theoretical than most and requires a much higher investment of time to start to comprehend. People without degrees absolutely can be security experts, and people with degrees can be utterly clueless - but if you're working on a webapp and given a week to write a login system then it almost certainly will be vulnerable.

So it's less specifically required that people have PhDs and more... this stuff takes time to fully understand, I know a lot of pitfalls on the topic but I wouldn't say I'm an expert - I just know enough to know that I don't know.
I like to check for ranges and limits
I've heard it's pretty bad, or at least the snes version is, but it's one of those games with kind of a cult following. I have no idea about the steam version, though it says it has some improvements. As far as I know this is one of the only non-horrific/grotesque games made on the doom engine.
Parody in particular has lots of precedence backing it up as Fair Use.

Fair Use is not a law, it's a legal defense that you may use during copyright litigation. It does not prevent the litigation from going forward.

And it's generally considered very, very hard to prove Fair Use if the defendant is making money directly off of whatever was made with the borrowed material. So, whereas a teacher who makes copies whole-clothe of newspaper articles doesn't make money directly off of sharing articles with students, a YouTuber putting up videos for ad revenue is.
> move your standups to a meeting room

Please don't do that. People should participate using their own PC (or phone, in a pinch). Meeting rooms make it worse for everyone.
Content ID is essentially just Youtube moderation, whereas the other process is governed by the DMCA. Is that fair or proper...? IMO no but I don't think I know enough about it to say definitively.
> Don't you think he deserves a billion from that $700bn rise in market cap?

No, nobody deserves a billion dollars, I don't care what they do.
There's a research dedicated to ambiguous decision in swarms.
Cryptography is the goto libary for Python crypto

https://cryptography.io/
Linux is on Windows. A few people might have did a little chuckle, but I don't think anyone would be angry :) I'd bet the Chromium choice was more about Electron than Edge.
Time. The more time i have control over the less i can blame others for my misfortunes.

I wouldn't fret over happiness etc. these are all neurochemicals and people that game them consistently arent universally acknowledged as leading a better life
>Tesla requires to report earnings in the next two quarters to become eligible to be part of the S&P 500 before 2020.

Literally the only sentence of value in this article and it's not even grammatically sound and misses the important point. It needs 4 profitable quarters basically.
> In NYC, where I live now, the de facto rule seems to be if you hesitate at all then the other person just goes, rules be damned.

This has been my experience pretty much everywhere I've driven, which includes a half dozen or so European countries and about as many U.S. states. Notably though I've never driven in New York, state or city.

My experience is that in larger cities, and cities with a lot of tourists, this "aggressiveness" seems to be the norm. I put that in scare quotes because I'm not sure I'd call it aggressive, I just feel it's the pragmatic way to break the tie.

Maybe that's why this is my experience everywhere – I'm that guy! (My apologies to all my fellow drivers out there!)
...unless you somehow manage to piss off the mechanics who will be servicing your vehicle.
The same people who benefit from encryption if govts are to be believed. If cash keeps being as unwieldy as it has become, a $100 note today is worth about what a $10 note was worth in 1920, people will just stop using govt back cash and use gold or art instead. Monero looks like it's the first large scale crypto to get inflation and anonymity at least partly right.
Sure, distribute your own root CA, but then how do people get signed certificates? I tend to work with large companies, where getting a signed certificate involves opening a ticket and waiting for someone on the other side to respond.

ACME would be ideal, but the official response of Let's Encrypt is that ACME is overkill for corporate environments and you should roll your own certificate automation.
Money, location, excitement for spycraft, their sense of patriotism.
Off topic but does AF pay a licensing fee to Disney to use terms like "Kessel Run" & images of Star Wars ships? I always thought them so tight-fisted with IP I didn't think they'd let .mil use e.g. outlines of the millennium falcon or x-wings.
Based on your location, but I know that there's stories about location not being accurate, remember seeing a report that some Pizza app and ride sharing apps can be more accurate. Someone told me on their cell phone 911 went to state's highway patrol instead of the city police, not sure if true or not since haven't had to dial 911 from a cell phone.

However if you have VOIP, not all VOIP providers support 911 but the ones that do want you to set a 911 address on your account itself, phone number or for a specific Analog telephone adapter - ATA Device from my understanding. I know our cable company provides phone service and the old modem had a sticker warning about VOIP and E911, not sure if the new one does or not since haven't looked at it too much.
Thank you so much for your interest in my FOSDEM talk!

Slides link: https://fosdem.org/2020/schedule/event/postgresql_the_state_...

Slideshare: https://www.slideshare.net/vyruss000/the-state-of-full-text-...

Video will appear under these URLs after mirrors are synced:

MP4: https://video.fosdem.org/2020/H.2214/postgresql_the_state_of...

WebM: https://video.fosdem.org/2020/H.2214/postgresql_the_state_of...
I think the first might just look difficult to avoid because if the lack of peripheral view in the video- a driver would have seen the other car much earlier than the video suggests.

As for the second one, looks like the other car just passed in front of it.
Force page refresh? I've seen some interesting behavior with uMatrix before regarding browser caching.
For those expecting bigger numbers, keep in mind, total TV ad revenue in 2018 was around $70B.

We're so used to seeing obscene numbers that $15B may appear small, but it's a huge chunk of the overall ad spend which is $150 billion per year in total.
You mean the text in smaller face "disclaimer text" buried under the fold, well under the price and the "Prices are likely to increase in the future" ("BUY NOW!"), and below things like:

> Summon: your parked car will come find you anywhere in a parking lot. Really.

(It may plow into a street to do so, but hey. And you should really have "full attention" on the car. Unless you're reading our marketing copy which says to feel free to "attend to a fussy child")

and so on. Ninety per cent of the length of that page is selling promises that aren't there yet, and the fine print at the bottom is taking most of it away, for some indeterminate period of time.
Hey I really like that! I often feel awkward at these where it is ambiguous who among 3 people actually stopped first. Not to mention people who roll right through without stopping (when other cars are present.)
+1 for A Baltimore based AI company! I have to drive to Northern VA from Baltimore in order to do my AI work!
Check and cashier's check are different things.

A cashier's check is like a domestic SWIFT.
This site is a treasure box :3
woulding aligning holidays with flu season exacerbate the spread of the flu as everyone travels?
It's probably not possible in most of EU because there is a limit for cash transaction which is I think 15 000 Euro (not sure if EU wide, but definitely here in Slovakia), over that you need to do a bank-wire transfer. All new cars are paid this way - or you purchase it with a loan / lease and don't need to put down this amount of money at once. Most new car dealers don't even have a cash register and would not take such an amount of money from you in cash. This is due to prevent money-laundering.
My guess would be radar data overlaid onto the cameras, but not 100% sure
Thanks for the feedback! Yes, the threshold is too sensitive, but we didn't catch it when testing on my device. My colleague is fixing it and we'll have another version out very soon.
I'm pretty surprised, and a little disappointed by, this addition. The FB board is already a who's who of "Silicon Valley Standard Perspectives".

As Facebook's biggest challenges continue to be about the unexpected consequences of the breadth of its technology, Drew doesn't seem to add any perspective that I'd expect the board to be missing right now.
Williamson County Jail Inmate Account and Commissary – Texas
It works on Edge.
I worked at IBM Research (Yorktown Hieghts, Last century, assisting infrastructure for research).

They spent 6 Billion Dollars on research that year (late 90s)

But Its true, IBM Values patents quite heavily. You can see some of them they printed as wall paper in the lobby (Along with mechanical calculators and models of some of daVinci's machines.)

But they also have "Trade Secrets" which are things they think they're competitors won't figure out and if you don't patent it you aren't telling the world how its done. I think some of the chip chemicals and processes for working with silicon wafers were to be classified as such.

They seemed always to be pushing the researchers to make something they could sell..

As an aside, IBM Yorktown is an oddly round building..

https://www.google.com/maps/place/IBM+Thomas+J.+Watson+Resea...
The reason why $1m/yr isn't enough isn't because the pharma companies are just too greedy. It's because conducting the clinical trial required to get them through regulation is so massively expensive that they can't make anything at all at those revenue levels.

Maybe it's time we back up and rethink what we really want here. It seems like the root cause is the highly risk-adverse regulation environment. The Government could take a bigger role in drug/vaccine development, but it seems unlikely that getting the Government more involved will result in a faster-moving and less risk-adverse development system that can rapidly apply sufficient resources to address a sudden threat, and then follow through with the development even after the immediate threat has already abated. It seems like the solution is to make the regulatory/approval environment less strict and expensive instead. That will allow anyone who develops drugs, whether large or small private companies or Government agencies, to get them to the public more rapidly.
I get paper copies of "The Economist" and "Bloomberg Business Week", I could read online too, but the login process is less than friction-less so I don't regularly read them online.
And by letting smallstep/certificates [1] handle ACME, it's just as easy as using LetsEncrypt for public certificates.

[1] https://github.com/smallstep/certificates
If they don't hire you because you decided to take a year off then they're not worth working for. It's easy to be in the corporate mindset when you interview someone that this person must be somehow not a "team-player" or "go-getter" because he actually values life above working like a slave robot. Work for someone who understands the human element of life and doesn't treat another human being like an object or projects the reliability and uptime of computers to the human element.

There is a huge lack of empathy in corporate environments today which is incredibly dangerous, I think that's why work satisfaction is at an all-time low.
Buy Wolfram and integrate alpha into the Watson knowledge base.
In the 1940s and 1950s. Not now, at least for large US banks.
And I do mean insights and not a potential solution.
I think it's an issue related to the handling of the spatial discontinuities introduced by the conversion of an effectively continuous reality into a representation consisting of a large number of discrete elements.

I think a more in depth understanding of how to navigate organically introduced discontinuities could provide a baseline against which we can look to combat the maliciously introduced ones.

It most likely won't be enough - since the problem source is an adaptive and intelligent adversary.
While China's actions are reprehensible, it takes two to Tango. American selfishness and greed allows this to happen.
Did you read this? https://wicg.github.io/webusb/#security-and-privacy

Maybe give feedback here? https://github.com/WICG/webusb/issues/
> I'm speculating but I think the reasons it veers to the right are some combination of the following: 1) There is water on the left hand side of the lane. I was going back and forth on the video and you can see "Raining" along the left edge turn green. So, it has detected the water and is avoiding it? At the same time it has turned green "Wet road". 2) There is a vehicle on the right side of the lane - it has been identified with an upside down green triangle / crosshairs and a square (is that block the license plate?) and the Tesla is "following" it.

"May potentially swerve into other lanes to avoid puddle"?

And yeah, it literally runs a stop sign. In their own marketing video.
I'd like to add that tech salaries are somewhat unique compared to other industries because, given the nature of software development, the marginal contribution of a single developer can be substantially greater than an additional expert in most other industries. Software development in general lends to resource accumulation because useful code is written once and then potentially sold/downloaded indefinitely.
Who buys this other than their legacy customers?
Memory can be relatively cheap (at least up to the 1TB point), but you still need to account for hard software development problems - such as populating that large blob of data into memory from across the network, in a fault tolerant fashion.
Deactivate javascript: Done
I just ran the first page of results for Obama site:tass.com OR site:rt.com OR site:sputnik.com through NLTK and the propaganda (your word) is both 20% less neutral and 20% more polarizing than the same for Trump (Trump result is the same as Manning OR Snowden too).

So I think you missed my point.
I have never seen a check in my life :-) (EU), they are not used or supported (maybe in some special cases, but 99% of people never used a check here). Larger sums are always paid with bank-wire transfer which is free and usually fast (instant or 24 hour), smaller payments are done with debit (or credit) cards, and then small payments can be done with cash.
Location: Central Ohio
Remote: Yes
Willing to relocate: Yes
Technologies: Plant transformation, basic biological research.
Résumé/CV: http://KyleBenzle.com
Email: kbe@mm.st
> I would think at this point they would be their own major certificate authority and maybe domain registrar.

From experience this probably wouldn't fix things.

What often happens is that somebody creates a system that uses a certificate, doesn’t automate renewal, and then the person responsible for renewing it changes teams or leaves the company. Email reminders only go so far—they not only need to go into the right inbox, but the person watching that inbox has to care.
I wouldn't want to work for a company that frowned upon a gap in work experience based on a medical issue. If the topic comes up, tell the truth. If they balk, you should run fast and hard from that company.
No need to do acme when you can establish user identity and associated policies via internally deployed authn/z service
How does it work in the snow/heavy rain?
> plus autopilot still has a warning that it's only meant for highways

And Summon has a warning that you need to "pay full attention to the vehicle".

Unless you look at their marketing, in which case it also tells you that you car will come "as you are being distracted by a fussy child".
There's no denomination larger than £50 in England, right? Scotland and NI have £100 which probably adds to the confusion.