skysight-inc/HackerNews huggingface dataset:
The truth is, (and this applies to games like MTG, Hearthstone, Poker, etc.) piloting the deck you have correctly matters more than people really like admitting. If you copy a 'known-good' strategy, you can crush with it at every level except the very top of the game. This applies even if your known good strategy is off-meta.

The main issue at the middle level is that people don't push to the next level of thinking, despite often thinking that they do. The reality is that most people have the thoughts but not consistently. Or, they have the thought, but don't apply it (well) to their decision making.

(I'm going to butcher this concept for this example)

Level one - You play your cards. You look at what you've got; you do stuff that has a big effect based on what you have in your hand. Your opponent's counter-play options aren't considered.

Level two - You now consider that your opponent might counter the cards you play in some fashion, and you adjust accordingly. This is the level most people are at. ('If I play BIG CARD and he just kills it with EASY COUNTER that would be bad...let's hold off on it until there's a lower chance of that happening...')

Level three - You now consider that your opponent is making the same kind of decisions you are. The game becomes more about information. You know that when X card is played, it indicates certain other possibilities. And, you are aware that your opponent might be making the same considerations about you, so you consider the plays you make in the context of how they might be perceived. (A lot of this becomes near-autopilot because of the sheer volume of games put in - often thousands -> tens of thousands).

This is the short version of the concept, but it applies to all games that have incomplete information, MOBAs, Card Games, RTS, and so forth.
"And here’s Ranjan Roy:

The moment Lambda started selling off the contracts, their incentives completely flipped. Their income was then derived from generating ISAs, meaning, the more, the better. Enroll as many students as possible. Of course, if no one ends up getting jobs, investors will eventually stop buying the Lambda ISAs, but that would all happen a long ways down the road.

People are right to be angry that Lambda was selling off the ISAs. It broke their core promise.

I am less offended. Lambda isn’t selling the equity in the students, it is borrowing against it. In the language of securitization, it is selling the senior tranche to investors, but keeping the equity. (Well, 60% of the equity.) Lots of businesses borrow money to fund their operations, and pay back the loan out of the profits of their operations; that is just the normal way to do business, and is functionally what is going on here. Investors advance Lambda some money so it can pay for its programs, it collects money from students if they get good jobs, it uses the money it collects to pay back the loan, and if there’s money left over—if Lambda does a good job—then it makes a profit."

https://themargins.substack.com/p/the-risk-of-distributing-r...
I cannot believe people are still saying this. It's literally 1-2 orders of magnitude more deadly than the flu, and 5% of the survivors walk away with permanent lung damage.
> Plenty of food and water to last at least seven days

I'm always a little bemused to see food and water given equal weight in preparedness recommendations like this. If you have no food at all for seven days, that won't really cause problems. If you're only planning for a seven-day emergency, there's no reason to store any amount of food.

If you have water for 7 days and food for 3 months, the lack of water will cause a lot of problems.
The fact that it can be trivially blocked by anyone on the network path does not make it "much better".

Of course anyone on the "network path" can block almost any protocol; DoT isn’t unique in that regard.

The concern is many large businesses block port 853 but that's because prior to the development of DoT, there was no reason for IT departments to configure firewalls to enable it. Most organizations only have a handful of ports available, including 443, which is what HTTPS uses and therefore DoH works as a result.

I've been running DNS over TLS using the Unbound [1] resolver for my home LAN on a spare laptop for a few weeks now and it’s been great.

Given the privacy trade-offs between privacy and security, many IT departments would opt to make port 853 available for DoT rather than increasing the ability for their users to be tracked.

As I mentioned elsewhere in this thread, the article Centralised DoH is bad for Privacy, in 2019 and beyond [2] clearly describes the issues with DoH:

DNS over HTTPS opens up DNS to all the tracking possibilities present in HTTPS and TLS. As it stands, DNS over UDP almost always gets some free privacy by mixing all devices on a network together – an outside snooper sees a stream of queries coming from a household, a coffeeshop or even an entire office building, with no way to tie a query to any specific device or user. Such mixing of queries provides an imperfect but useful modicum of privacy.

DNS over HTTPS however neatly separates out each device (and even each individual application on that device) to a separate query stream. This alone is worrying, as we now have individual users’ queries, but the TLS that underlies HTTPS also typically uses TLS Resumption which offers even further tracking capabilities.

[1]: https://www.ctrl.blog/entry/unbound-tls-forwarding.html

[2]: https://labs.ripe.net/Members/bert_hubert/centralised-doh-is...
China has 3000+ infected healthcare workers. Can all but guarantee their healthcare system will collapse in the coming weeks. The US's healthcare system won't collapse. Can guarantee that Iran is going to have a much higher death rate than the US. It's going to be insanely different for everyone, depending on how reliant they are on different regions. The task is essentially to nurse pnemonia patients through the infection, providing constant oxygen and other assistance.. Each country will have different capacities to do that. Tons of other factors and the same principle applies.
Normal DNS over UDP can also contain arbitrary data, which completely hypothetcally could be used to send identifying data about the client. E.g. https://unit42.paloaltonetworks.com/dns-tunneling-how-dns-ca... But that's not really a strike against the protocol, that would be a fault of the implementation.
The risk of distributing risk Lambda School and Bowie Bonds
Your choice to avoid crowds helps everyone, because the crowds are one person smaller.

Hoarding canned food from your local store hurts everyone, because now they have less food.
no open ports with arbitrary access, required authentication for the builtin distributed primitives:

https://erlang.org/doc/apps/ssl/ssl_distribution.html#specif...
I don't exactly disagree with you. I've been on many projects where unit tests failed to justify the time spent writing them (including mocks) and dealing with spurious failures. I believe they can be beneficial, but only if people understand their limitations and play to their strengths. I'll gladly use them to vet code that implements a completely self-contained data structure or algorithm with no dependencies, and I've done so to good effect many times. Otherwise, I'd rather write a proper stub/simulator that can be used in integration tests to exercise multiple components at once than waste time with single-purpose mocks.

> I'd rather spend my limited cognitive currency and time in the system itself, not in mastering the art of unit tests

That's not quite an either/or. Over an entire career you'll probably work on many systems each requiring their own specific knowledge. Knowing one system is great as long as you're working on that system, and mostly useless thereafter. Knowledge of how to write good tests (unit or otherwise) is much more transferable. Every team can use somebody with those skills.
Surely you could combine a cheating chip with a legitimate device like a network card so to the OS it looks just like a network card.
The Creation of Beachwood Canyon's Theosophist “Dreamland”
You can try https://www.mybos.com/
love this. nice idea.
Yeah, 22 months is close enough to the end of his contract that nobody would blink an eye if he just came out and said he's tired of work and wants to retire a year early or something.

Stepping down effective immediately seems almost like it's designed to raise suspicion.
Straw man. 'even the jails'
Startup Funding Fizzles, Shutdowns and Layoffs Spread
You place a file you _may_ be able to get from support (called SMC.bin) onto a FAT32 USB drive, and then:

1. Power off.

2. Hold the Windows, Up arrow and Down arrow keys all at the same time. Only then hit the power button to start.

3. Release all buttons and press F10.

4. You should see something about "SMC Command" starting.

5. Press File, press "Reset BIOS security defaults" or similar.

The only way to get the SMC.bin file, that I know of, is directly from HP Business Support.
Okay fair but they are two sides of the same coin. Blocking is active snooping. If an ISP knows what site you are visiting they can block the connection. In both cases the way to prevent it is to extinguish privacy leaks.
Katherine Johnson: NASA mathematician and much-needed role model
What about kids? Are kids with their parents just not going to be let into the store since they don't have credit cards? Or will they be associated with their parents somehow.

What if the credit card info is fake or stolen? Are new accounts with temp emails and stolen cards just not going to be let into the store? I've bought digital goods off amazon with prepaid credit cards that had a few dollars on them, and the purchase only got rescinded hours later.
I think that’s a fair expectation of government. It may be that the market can deliver care at the lowest cost but what if the market delivers that lower cost by limiting supply? Say they don’t offer service in some areas or limit some procedures?
> Android is a great example of this. I don't know how things are done now, but for its first few years, they had screen size classifiers; ldpi (low dpi), mdpi, hdpi, etc.

This example doesn't really work. Those buckets have always been primarily for image asset selection, not UI declaration/layout. It's comparable to the 1x, 2x, 3x that exists in iOS land.

Nothing has ever actually replaced those. In any UI toolkit. Vector assets finally took a chunk out of their usage, but there's still plenty of assets that are not vectors.

The density support in Android largely remains the gold standard. The only UI toolkit that actually achieved robust density independence. There's plenty broken about Android's UI toolkit, just this isn't one of them.
>Does it have to be sophisticated and impressive to be advanced?

Yes. I think this is where our opinions differ. It is always a joke to be reading a blog post about an advanced attacker and the exploit is, as you say, the user clicked a jar with a pdf icon.

I agree completely about things that add value to corporations. This is why I am not working corporate security at a startup. I do not care so much about implementing U2F policies or server authentication methods, even though these are much more impactful for the business. I work for a small company, work on less impactful things (in regards to corporate security), and enjoy myself considerably more. If I could stomach the other stuff I would make more money, but I prefer to enjoy my work and hack on obscure things.

Your namesake with eternalblue is quite advanced (even though it was n-day). That stuff is interesting. Reverse engineering that stuff is interesting. I think these things prepare people to do that sort of work.
This is correct but being downvoted. All CCs from 0-31 are 14 bit.
Indeed, and that's exactly the model much of the world uses for adult education. Except that better early-years schooling has at least as large and probably much bigger effect on the future productivity and health of society.
I don't get it. Is file system branding that important?
I'm sorry, I don't at all follow your last sentence. The flu IS more dangerous. Upwards of 45 million people get the flu every single year, hundreds of thousands of those are hospitalized, and tens of thousands of those are killed by Influenza. I'm not at all seeing the "deliberate and dangerous misinformation."
https://en.wikipedia.org/wiki/Fundamental_theorem_of_softwar...

"We can solve any problem by introducing an extra level of indirection."

I'm extremely skeptical that this solves any particular problem other than for Amazon building devices, silicon vendors who want to be in Amazon devices. Which is fine, but the scope of this seems to be broader. It just doesn't sound like the right idea to me.

The biggest issue is the "common" part. You want to produce an api or abi common across OSs? How many chances do you have to get it right and not run into a web of api version bugs & issues? Who has made this successful in the past? UDI? (nope) And then you want a common api across an RTOS and Linux? Good luck.

Oh and by the way, where's the source code for this middleware?

I don't know why you wouldn't take the approach of making the underlying OS's easier to work with. If FreeRTOS is missing something, enhance it. If embedded Linux(s) are hard to integrate with, start an open source project to work on that problem.
I ordered a p1 before Christmas. At the start of February, they no longer had a shipping date estimate. It took almost two weeks to get a confirmation of the cancellation and a refund, despite them being required by law to cancel it at that time and me requesting cancellation explicitly. How anyone can do business with such a shitty company is beyond my comprehension.
For carbon specifically, isn't the price correct by definition if they reached carbon neutrality?

To decrease congestion (as well as localized pollution like smog), my ideal solution would be a floating per-minute rate (based on congestion levels at that instant) for square feet of road uses. (I'd probably do the same for street parking.) Since that sounds challenging and involves possibly dystopian levels of surveillance, I'd settle for more traditional congestion pricing .
It keeps the one on the right. They explain it in the PEP: https://www.python.org/dev/peps/pep-0584/
Of course, but my comment was in response to the claims of the comment I responded to. It was not a claim that pharmacists are not involved.
Opportunistic security that can be disabled by attackers is not really security.
You're right - for specialists and some GPs but not all. About half of the GPs are paid by their roster size, so-called "capitated payment". The idea being a doctors pay should be based on how healthy they keeps their patients rather than how many services they administer.

I only point that out for our American friends who might counter with "well isn't that a system ripe for abuse"
The Guide to design-projects. Part 1: Concept creation
That’s due to bayes theorem. If you test people who aren’t like to have caught the disease, and say the test has 1% chance to misdiagnose, you’ll almost certainly create wild amounts of false positives and spark a wider panic.
Max Weber Invented the Crisis of the Humanities
No reason? How many days have you gone without food before? No, you won’t die, but it won’t be comfortable.
I don't think "very normal" is what we should accept. In an emergency, flight attendants need strength and speed. They should look like decathlon winners.
I do believe it varies by state. I used to live in Indiana where the minimum premium was also $115/year.
We have, but I work in banking (basically), and we have a group solely dedicated to testing. So they're consistently maintaining them.
I’ll take a little more pollution over attending a drunk driving funeral
I recently finished going through MIT OCW's linear algebra class from Gilbert Strang. Without the struggle of doing the assignments, reading the text, and watching the lectures, I don't think I would have ever learned the content. While content like this and that from 3blue1brown are commendable and useful, it simply would not have lodged the ideas into my head.

Now that the ideas of things like vector spaces, norms, orthogonality, rank, basis, etc are nearly second nature, the concepts are useful as I study other branches of math which would feel impenetrable otherwise.

YMMV, and if you can learn from condensed materials go for it, but I might be too dumb for it work lol. I think the real benefit accrues to the author who had to work out how to teach these concepts to others.
I will attempt this. But is the app served by nginex or Apache proxy Or flask directly?
Unless your download is really so big it really takes 15 seconds, you sound like you are in cloud hell.

One way to get out is to store the static web pages in an object store and serve them through a CDN. That is dead easy and will perform well.
They even replicated the 10x zoom easter egg (draw something and click the line below 8x zoom).
Dave Chiney tweeted a benchmark last night.
There's an IoT candle that has a real flame running on liquid paraffin - https://ludela.com/
Decathlon winners usually have other jobs. You may have to expand your search, lest you prefer having no flight attendant at all.
This sounds like a driver bug / misconfiguration. Once the IOMMU is set up, there isn’t any host side management to be done (other than managing the IOMMU TLB, but unless it’s thrashing, that’s a no-op on the fast path).

At most, each kernel driver has to do an extra addition to map its physical I/O offset to the one exposed to the bus by the IOMMU. With huge pages, there’s approximately one offset per driver, so it lives in cache, probably next to other driver state.
An emergency bag with documents, first aid, and basic supplies, clothes, etc can be a good idea for the earthquake plan. Not so useful for epidemic emergency though.
Encylopedia Astronautica
>Consequently the whole war on drugs is the perfect example of unintended side-effects.

It was anything but unintended.
Ideally it would be a solid hedge against the government going nowhere with improving the cost of healthcare. If it makes people get checked up more often, it could reduce overall healthcare costs because more issues get caught early.

Combine it with an app that offers specific recommendations and reminders based on your health profile, and you'd have an interesting startup. (this probably won't happen due to HIPAA/privacy issues and not being in Walmart's general wheelhouse).
"People are taking the piss out of you everyday. They butt into your life, take a cheap shot at you and then disappear. They leer at you from tall buildings and make you feel small. They make flippant comments from buses that imply you're not sexy enough and that all the fun is happening somewhere else. They are on TV making your girlfriend feel inadequate. They have access to the most sophisticated technology the world has ever seen and they bully you with it. They are The Advertisers and they are laughing at you. You, however, are forbidden to touch them. Trademarks, intellectual property rights and copyright law mean advertisers can say what they like wherever they like with total impunity. Fuck that. Any advert in a public space that gives you no choice whether you see it or not is yours. It's yours to take, re-arrange and re-use. You can do whatever you like with it. Asking for permission is like asking to keep a rock someone just threw at your head. You owe the companies nothing. Less than nothing, you especially don't owe them any courtesy. They owe you. They have re-arranged the world to put themselves in front of you. They never asked for your permission, don't even start asking for theirs." - Banksy
I believe you, but intent unfortunately doesn't communicate itself well in internet forums, so the burden is on the commenter to disambiguate.

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

In this case the phrase was one that commonly communicates dismissiveness, which is why I interpreted you the way I did. If you read the guidelines it's clear that (to take your example) such a reply can be shortened to "Oranges do not have a blue inside".

However: no harm done! I appreciate your reply and your intention.
You might be interested in Paintbrush [0]. It's a free open source native app that's extremely close to MS Paint in functionality.

[0] - https://paintbrush.sourceforge.io
Whether or not this turns into a real pandemic I'm really curious how the world survives a real one in the sense of all the disruption.

Sure some desk based jobs can be done at home but it seems like nearly every restaurant, bar, and store would likely go out of business. As would airlines, trains, maybe hotels. Grocery stores would have to go 100% delivery only? Maybe be open 24/7 so people can spread out? Or would I need to wear a hazmat suit to get food? Note: there was a family riding the bullet train in cheap hazmat suits a few days ago.

I really have no idea. I suppose you can look at cities in China and see a full response.

I see lots of people saying "prepare" but then list having a week of supplies. Seem more like you'd need 6 to 12 months of supplies. Unlike an earthquake a pandemic would hopefully not stop the water flow or electricity like say an earthquake might but conversely it will be much longer before it's declared safe to return to any normal routine.
I don't think you understand the job of flight attendants.
>The fact that health insurance isn’t portable [...]

Agreed.

>This is in contrast with other countries that employ private insurance, like the Netherlands and Switzerland, where insurance is tied to the individual, not the employer.

It's worth mentioning that in both countries, there's heavy government regulation. According to wikipeida, in the Netherlands 50% of premiums goes to some sort of government agency that redistributes money to private insurance companies depending on their claims, which makes it a quasi-public payer scheme. In Switzerland the premium is capped at a percentage of a person's income with the government making up the shortfall, and insurance companies can't make a profit.

>The lack of price transparency logically follows from the fact that patients never really care how much their treatments cost, since employer sponsored insurance covers everything anyway.

Doesn't this argument apply to insurance schemes in general, both public and private?

>Large corporations are less price sensitive than individuals, which exacerbates the price inflation over decades.

I'm skeptical about this claim. Sure, they have more money sloshing about than individuals, but insurance premiums across the entire workforce adds up.

>Certificate of need laws, where local hospitals get to decide if a new, competing hospital can open, and the residency system requiring 10+ years of schooling to practice resulted in inevitable supply constraints.

Agree, although I'm weary of assigning significant blame due to this factor. Are doctors making record wages? Are hospitals making record profits?

>Medicare, which provides healthcare for free for the elderly, removed the most engaged buyers from the market. Not only that, the elderly tend to be the richest people in the country - those above the age of 55 account for 73% of wealth in America. Boomers are rich, and they also enjoy some of the most generous welfare on top of that.

I'm skeptical how big of an effect this can be. Wikipedia has a chart that shows medicare spending as percent of GDP[1]. If you combine that with total US healthcare spending by GDP[2], you see that it accounts for less than a fifth of total US healthcare spending.

[1] https://upload.wikimedia.org/wikipedia/commons/2/2c/Medicare...

[2] https://data.worldbank.org/indicator/SH.XPD.CHEX.GD.ZS?end=2...