skysight-inc/HackerNews huggingface dataset:
Actually you’re probably getting better prices than institutional investors. HFT firms are willing to give better deals to individuals since they’re taking on less risk that the trader will move the market.
More and more popular I hear. Exciting stuff, though JS seems very much disliked on HN.
How to evaluate your Machine learning model like a pro
Me too. Still a superior development experience in many ways.
Yeah, I read this link also - before posting above. There is no 'username' or 'password' term on that page - nor any positive checkmark in any security column for the open-source tier.

'Basic' tier does have 'File and Native Authentication'. But it is far from clear what that means.

More importantly, in several different places that _are_ clear about security in the Elastic documentation, it repeatedly says "there is no security", "assume anyone who can reach elastic is a superuser" ... and more ...

So if that is not true, the documentation should probably change ...
Cool, this looks nice!

I'm currently mentoring new tech leads, and I'm using books heavily as a tool. I usually break a book into two or three parts which we discuss and try to apply to our every-day problems. It works quite well.

However the biggest challenge I had wasn't finding good leadership books, but narrowing my list of books down.

I currently read with my mentees:

- The Managers Path

- Elastic Leadership

- Simply Said: Communicating Better at Work and Beyond

- Nonviolent communication

"Simply Said" is a good example for my struggle: I picked it because I needed a single book that covers written communication, presentations, body language, focus on the needs of the person communicated to etc.

There are surely better books for each topic individually, but picking a single one was tough!
A few days ago, I was learning about evaluating my Machine Learning Model and I have compiled the things that I learned during the period. Do let me know how I did with this.

Also, Let me know, how do you like to evaluate your Machine Learning Model?
(Setting aside the fact that Logstash is JRuby/Java app easily eating said gigabytes of heap)

Do JSON logs take gigabytes?

If they do for you then yes, gigabytes of disk and memory are pretty much guaranteed. Also things tend to pile up with time (even on a few weeks horizon).

In all honesty, I believe a finely crafted native code solution for this problem could achieve x3 less ram usage and x2-3 indexing/search performance. Going beyond that is also possible but will take remarkable engineering.

Update: to expand on the last point, c++ solutions are typically closed sourced.
Rust and Go both have interesting open-source full text engines:
https://github.com/tantivy-search/tantivy
https://github.com/blevesearch/bleve

In near future I totally see someone producing a great open-source distributed search project that is at least on par with today’s ES core feature set.
If you are accessing variables declared outside the http server, and you use any non-thread safe types or code it will panic.

For instance, try and read a map, it will crash your code.

It won't show this as a problem until you have real traffic on your service.. Hitting it in your browser isn't enough to test properly.
Hey! I started with Mechanical turk, and then did fair amount of cold emailing.
The first error is not “handled” but is overwritten
Data Breach Response Planning Guide from the CompTIA IT Security Community [pdf]
Why would they lose the more they trade? I mean yeah they’ll lose some on the spread but not very much. You would expect their returns on average to match the market.
Not scapegoating anything, nor do I think it’s reasonable to expect interviews are not stressful.
Content Marketing Strategies for Choosing Topics and Setting Goals
Users can choose to manually trust expired certs in macOS/iOS, I don't believe that's what is at issue here.
There are quite a few who would answer Commodity, not Currency. Something that will retain value if currencies do not.
> That might be how you “feel”

> The go community has been incredibly welcoming.

Jeez, what a disconnect.
"do I really care if it takes twenty minutes instead of twenty milliseconds?"

No, nobody sensible cares. But the stuff people are suspicious of is supposed to be regulated so that your executions are only improved. If somehow this isn't true, it should be a bright line crossed and a big scandal with people going to jail or at least big fines.

Then again, if you panic over a "flash crash", then I guess you should be concerned about liquidity?
I'm definitely open to learning how to do things better, and I have no doubt that some of what I'm doing is wrong - after all, this whole thing started as a homelab-turned-homeprod learning experience.

I think the proper way to do certs is to have the server (Web, VPN, whatever) create a certificate signing request and private key on the server, send the signing request to the CA to sign it, and then install the resulting signed cert on the server. Is this correct?

What I'm finding in some cases is that there are cases where this just won't work. For example, my QNAP NAS allows me to either create a self-signed certificate (I don't want this, I want it signed by my CA), get one from Let's Encrypt (same issue), or upload certificate, private key, and optional intermediate CA certificate files (and we're back to moving private keys). This is a limitation of QNAP's GUI for sure, but it's not unique to QNAP.

Similarly, I'm not sure how I'd generate the certificate plus private key on an iOS device and submit it for signing (the VPN scenario). This one particularly bothers me because the .mobileconfig file ends up being the key to the castle. Ideally I'd like the client to be authenticated with both a user-specific certificate and EAP, but I don't think iOS supports this. I haven't quite gone very far down this rabbit hole, so it's possible that I'm missing something.

When I finally secure my internal web server (which acts as a reverse proxy for all of my internal services), I'll try the CSR approach for the learning experience. This approach should also work fine on my VPN server.
I doubt all this costs 7 billion dollars
my hypothesis was that as the world has moved forward, Google has accumulated legions of C++/to a lesser extent Java/C experts that they needed to corral into modern software engineering, to include programming languages. Go is exactly that - good enough - in part due to:

- has enough C-like syntax to keep the old "this doesn't look like C/C++" guard muzzled (as opposed to e.g. Java)

- avoids some of the huge C++ productivity land mines (no package management, divining which Boost version to use, build systems, etc.)

- has a 21st century standard library (net/http as a first class citizen as opposed to whatever the C/C++ ecosystem "offers")

- fast enough and memory performant enough, whilst exposing pointers, unsafe ops, and C interop should the need arise

i think most of the above are mind tricks to get the C++ crowd to complain slightly less while increasing productivity multi-fold.
> As someone who’s done a lot of hiring, I often glance at an online portfolio briefly, but I find it to be a low-quality signal for whether I will want to hire the person, and even for the technical ability. If I don’t know you, I can’t tell from your online portfolio whether you’re the sole author and/or how much you’ve contributed to a project. I can’t easily tell if you get a lot of your code from StackOverflow, or write it yourself. I can’t tell what motivates you, whether you love programming or you are hoping for a high salary.

How are performance reviews done where you work? It strikes me that you have to do all the same things to see if the portfolio of work an employee has done _for your company_ is up to snuff. Because i’ve seen a few places that just offload this to some numeric ranking based on the subjective (nay, political) perceptions of one’s peers through a filter of imperfect, variable understanding of how the numbers should even work, and I hated that process just as much as I hate most interview processes. In a way performance reviews are like interviewing to keep your job or get a promotion, so I’d find your approach to hiring to be a warning about how the culture operates there.

Everything about how a person works, in your subsequent paragraph, is true. But parent is talking about their currently existing body of work, vs every stupid take home challenge to do some menial transformation of a data structure wrapped in polished UI. Not as a stand in for their personality or culture fit.
There's an interesting gallery from an exhibition of photos of where the Monobloc is found: http://www.abitare.it/en/gallery/events/chairs-monobloc-vitr...
A neural network picks promising antibiotics out of a library of chemicals
It would be interesting to see how this performs, compared to simpler methods, on hard cases like a missing fundamental. (If you play a sound with power at 200 Hz, 300 Hz, 400 Hz, ..., i.e. all the multiples of 100 Hz but not 100 Hz itself, humans always perceive a pitch of 100 Hz.)
Boot entropy? That is neatly solved by HWRNG.

Bugs/insecurity? These are indeed better with HWRNG. HWRNG are more likely to fail catastrophically (that is easy to detect if you don't use whitening) and easier to physically audit (there are much simpler options than this contrived crystallization device).

Algoritmic RNGs are more likely to fail undetectably and dangerously, and much harder to audit.
But Safari has laid out clear criteria as to under what conditions the certs will be invalid.

If I'm understanding correctly, the GP is saying browsers should be making decisions based on a much wider variety of criteria (for example, who issued the cert, how popular is the website using the cert, etc), which would be much more difficult to troubleshoot.
For sixteen or twenty four hours a day.
> And if the US isn’t in position to bail out equity owners, then it has bigger problems and you should be investing in your network, food and water supplies, and guns.

Sadly enough, it comes down to network and guns. Because both can get you the rest, and with neither, you'll lose the rest.

I have plenty network, but none of us are much into guns. We're all pacifists, more or less. I have a few guns, and maybe others do, but nothing compared to our environment.

And then there's the police and National Guard. They have lots of guns, and know how to use them.
I don’t see how that’s relevant.
nice post! I'm working on tempo detection with deep networks atm and found the synthesis section very helpful. I'm wondering if you read many of the recent publications on pitch detection + deep learning to guide your model building. At least for tempo detection there's an abundance of material there to use as starting points which can help bootstrap the network build.
FWIW if your job offer was recent you wouldn’t have made any money from the acquisition and now you’d be working for intuit.
*Schwifty
Using synthesized audio from midi seems like an atrocious way to train a neural net for pitch detection. It's also not particularly difficult to detect pitch on such sounds, you should mess with it a bit to remove the fundamental, add inharmonic tones, noise, vibrato, etc. Just counting zero crossings is enough for most of that data.

Side note: cepstral processing is going to be a lot more effective than spectrograms, and preprocessing is cheaper than training the ANN.
Chaotic systems are usually described as having "strong sensitivity to initial conditions", but this almost undersells them.

Even incredibly small deviations from the simulation (measurement error, over/undervoltage conditions, floating point errors/rounding, probably even temperature fluctations) would be enough to alter the results. You can see some neat examples of this with double pendulums, which seem like they should be easy to predict/model, but are absolutely not!

While this is popularly known as the "butterfly effect", but I recently learned it was originally called the much less poetic "sea gull effect".
Whoops, this is a dupe of https://news.ycombinator.com/item?id=22372847
I'd rather pay for hardware I own than someone else's. (I accept the 'hardship'.) And that I can unplug should problems arise. (The cloud is okay for public things.)
Nokia N9 & HP-15C.
*Swamps
Climate Emergencies
1966 - Oil gone in 10 years
1967 - Dire famine forecast by 1975
1968 - Overpopulation will spread worldwide
1969 - Everyone will disappear in a Cloud of Blue Steam in 1989
1970 - World will use up its natural resources by 2000
1970 - Urban citizens will require gas mask by 1985
1970 - Nitrogen buildup will make all lands unusable
1970 - Decaying pollution will kill all the fish
1970s - Killer Bees!!!
1970 - Ice Age by 2000
1970 - Americans will be subjected to water rationing by 1975 and food rationing by 1980
1971 - New Ice Age coming by 2020 or 2030
1972 - New Ice Age by 2070
1972 - Oil depleted in 20 years
1974 - Space satellites show New Ice Age coming fast
1974 - Another Ice Age?
1974 - Ozone depletion a great peril to life
1976 - Scientific consensus planet cooling; famines imminent
1977 - Department of Energy says oil will peak in 90s.
1978 - No end in sight to 30-year global cooling
1980 - Acid rain kills life in lakes
1980 - Peak oil in 2000
1988 - Regional drought (that never happened) in 90s.
1988 - Temperatures in DC will hit record high (no records broken)
1988 - Maldive Islands will be underwater by 2018 (nope)
1989 - Rising sea level will obliterate nations if nothing done by 2000.
1989 - New York City Westside Highway underwater by 2018.
1996 - Peak oil in 2020
2000 - Children won’t know what snow is
2002 - Famines if we don’t give up eating fishes, meat, and diary
2002 - Peak oil in 2010
2004 - Britain will be Siberia by 2024
2005 - Manhattan underwater by 2015
2006 - Super Hurricanes!!!
2008 - Arctic will be ice-free by 2018
2008 - Climate genius Al Gore predict ice-free Arctic by 2013
2009 - Climate genius Prince Charles says we have 96 months to save the world
2009 UK Prime Ministers says 50 days to “save planet from catastrophe”
2009 Al Gore moves ice-free Arctic prediction from 2013 to 2014
2013 Arctic ice-free by 2015
2014 Only 500 days before climate chaos
2019 - Hey Greta, we really need you to convince them this time.
2020 - Australian bush fires are caused by climate change.
It’s just a ploy for government to add more taxes.
Yes. It’s a shortsighted company at the reins, with no real understanding of how to take advantage of what they have.

Disney seems to be the only American company that understands the value of storytelling.
If you're building something that already reasonably exists, you better be sure you can do it 3x better (for some economic metric of better, e.g. cheaper, bringing in more revenue).

If not, you're wasting your money in a different way, by not focusing on the things that really bring in revenue or by paying salary to people to maintain it.
I’ll be even for specific. I’ve worked in Atlanta for over 20 years. Changed jobs 7 times (stayed at one job 6 years longer than I should have), dozens of interviews, maybe two outright rejections, over the last 10 years, 5 jobs, I had two coding interviews. One was a simple hands on coding interview where I had to make unit tests pass (something like a bowling score simulator) and the other a merge sort on the board (got offers for both).

I’ve asked around about my coworkers experience over the years because I had never heard of algorithms style interviews until three years ago when I started reading HN and r/cscareerquestions.

I thought all interviews were soft skill, language trivia, diagramming models and architecture, and explaining past projects.
As a native speaker I had no idea there was a proper order.
You wouldn't need AI; just bias the motion detection system to focus on human midriff and not dog head height.
Stochastic Depth Neural Networks Implemented in TensorFlow
It took me a while to finally publish this part. :) If you've waited for a long time for this to happen, thanks for your patience.
Maps are concurrent readonly safe.
>Instead have the browser store the public key first time you visit the site. Then ask the user every time it changes, like with SSH.

The vast majority of users will not understand this. Also let's say you go to a site one day, and you get a prompt that their certificate has changed. Is this legit? How can you know?

>browser should send their public key to the server!

This already exists (HTTPS Client Certificates) but it's a huge pain in the ass so it's barely ever used. When it is used, it's generally within a controlled corporate environment.
Are Rich People Heartless?
Someone should turn this into an email newsletter!
Uh, they don't calculate the mortality rate of the virus by guessing how many people would have died in 1900's care. The mortality rate is that high because that's the percentage of people currently dying.

Mortality rates are easy to compare - they are numbers that take healthcare and disease intensity into account because they are statistics from observation.

If anything, the numbers suggest that had the covid-19 struck in 1918, the mortality rate would have been higher.
>In the past browsers did not scaremonger so much about self-signed certs

That's necessary because people tend to be fixated on whatever task they're doing, and that causes them to click pass any warnings regardless of risk or comprehension.
I don’t know, I assume if USD stops being the safe haven currency, then there has been a change in the world order, which could be due to war. In that case, I would think you’d need to diversity and have multiple passports and assets in those countries. But that’s planning for those with 8+ figures in wealth.

But at the end of the day, your priorities will be access to water, food, heat, and shelter. So for most people, it might not even make sense to worry about which currency to have, as it will be too late to move into it probably.
This. My main credit card offers this as a service (check your credit score every 30 days) and my experience has been that its the same number people who want to check on my credit worthiness get when they inquire (sample set 3 car purchases, two type specific credit card applications)
Lack of abstraction for a one off (or two off) feature is rarely a problem. And if you need to do something 3 or more times, rhen you can probably build the abstraction pretty quickly...
Agreed. Mind games during job interviews signals toxicity, or at the least, an insecure interviewer craving a power-trip.
What you said is more or less reasonable, except perhaps this 'Advanced type system' thing. It is bit of of a circlejerk of people for whom programing is destination and not a means to develop products.
In addition, cgo calls are often reeely slow. I've been using the sqlite bindings to go for projects recently. sqlite doesn't allow you to write your own in-language functions, but instead allows you to write your own callback. I recently did some benchmarks, and the golang callback for a simple function was 20x slower than implementing it in C (1600us vs 80us), presumably due to all the marshaling and reflection required.
Wow. This is incredibly helpful. You can use it to see how someone may have used a function with named parameters:

my_function(label=x, option_1=2)
my_function.*option_1 # search
CFSSL was developed with cloudflare-specific use cases in mind. If you're looking for a general purpose personal CA, checkout smallstep/certificates: https://github.com/smallstep/certificates. Full disclosure, I work for smallstep, but we’re not exactly competitors. Regardless, here’s an external analysis of the two: https://jite.eu/2020/2/17/step-ca/
Do you really want the government stepping in and telling you who you can and can’t sell your business to?
It's not about the quality of the playing, the point is it's completely automatic!
Please don't take HN threads further into ideological warfare. You did that repeatedly here. We're trying for a different sort of discussion, so please don't.

https://news.ycombinator.com/newsguidelines.html

Edit: since we asked you this a few weeks ago (https://news.ycombinator.com/item?id=22124920) and you haven't fixed it, we've banned your account until we get some reason to believe that you want to use HN as intended. If you do want to, please review https://news.ycombinator.com/newsguidelines.html and let us know at hn@ycombinator.com
Golang chooses to avoid feature creep. This seems to annoy some people to no end and so these discussions always devolve into whining about feature X, Y or Z that would have made Golang soooo much better and OH how nasty are [Google or whomever] that blocks all these fantastic ideas from being implemented. If only they listened to all the smart people out there (especially me) it would have made Golang awesome and we'd see a million flowers bloom. Please stop, it's tiresome.
Quit bothering me with this technical jargon! What is this "weight" garbage, just build the bridge!
Well, you are mostly correct.

There are ways to distribute keys safely. You can use key derivation or you can set up transport key (yet another key, just to transport session keys). Both methods are allowed by PCI if done correctly.

Unfortunately that's not what typically happens. Setting up infrastructure to transport keys safely is such a pain in the ass that, for SSL/TLS, I always recommend to just generate the key at the site of its intended use.
I see the Amazon fake products problem as related to the social network fake news problem. In both cases you have a company that wants to both have it's platform cake and eat it's publisher cake at the same time. (Sorry for the bad spin on that phrase there.)

One important part of our solution here has to be that we force these companies to take a position one way or the other. So in Amazon's case it would need to decide - am I a platform for companies to set up there own online shop and provide fulfillment services to? Or am I myself the online shop?

In the later case they become responsible for product, like any business. In the former, they aren't. But in the former they now need to act as just a platform and not provide all the branding that makes it look like you're buying from Amazon. So they'd be more akin to Shopify or something I suppose. Every fly by night shop that wants to set up needs to set up its own branding and that way brand reliability and recognition still works and items are no longer commingled.
I'd recommend to use tinc instead of ssh tunnels.
ZenithOS – a modernized, professional fork of the 64-bit Temple Operating System
I made a more readable version of this at https://legiblenews.com/ (works on mobile, supports dark mode, formatting is more readable, loads in under 200ms w/ 1 request and absolutely no JS) which scrapes Current Events once per day at 8p Pacific Time.

I jokingly say “it’s a news website where if you click on a link, you might accidentally learn something”
" but that isn’t nearly enough to make production worthy code."

That's not the goal. You want code that can be refactored with reasonable effort.

For example if the number 3 signifies some factor that's used several times over the the code, make it a constant with a descriptive name. This makes even the prototyping easier and whoever takes over the code has a much easier life.

Or don't copy the same 5 lines all over the code with some minor changes but make it a function.

This is really not hard and has huge payoff if you don't overthink it.
I wonder how much of this is due to the, as I understand it, constant lawsuits and con-artists that a rich person attracts.
What are you talking about? You could do exactly this in Java or C# or Python or Ruby or JS or etc. Not sure what ”traditional” languages you’re talking about, but this is just reflection and downcasting. It’s a bad idea, but it’s unrelated to OOP.