skysight-inc/HackerNews huggingface dataset:
Hi, thanks for sharing your experience!

So firstly, I agree about how it's only as secure as the recovery process, in which case we give each website/app the freedom to decide for themselves, what level of security they want, compared to user experience.

Regarding Android's storage not being very secure: we are improving security mostly in the scope of social engineering. The type of users we are catering to are mostly people in developing countries who have a phone, no email, no laptop, and their problem is:
1) They either make bad passwords, or they don't remember passwords
2) If they don't remember the password, it will fall back to SMS OTP (because they don't use emails)
3) They are not going to download Authy/Google Auth or Duo.
Because of this, most apps in these countries have made the authentication method to be super simple: Phone Number + SMS OTP, no passwords. Unfortunately, this type of user is also easily scammed to share their SMS OTP. So the biggest problem that we see here is social engineering and SIM swapping, and not as much on technical security concerns.

Knowing this problem, our aim is to provide what Authy/DUO does from within the client's app, so users don't have to download a separate app. Also, we are not really providing 2FA. We are trying to make the first factor of phone number login more secure (by not using SMS OTP).

I'm not sure if I cover all of the concerns you pointed out, but this is definitely a great discussion.
How on earth can you possibly compare a new Tesla to a used cheap electric go-kart?
Show HN: Share cancelled conference posters virtually
Not every night the whole quarantine, but perhaps long enough to so that they all get sick.

Surely this, along with general hot-potato risk management, is what MIT's administration had in mind.
Categorically disagree with that. The most valuable aspect of an elite engineering education IMO is getting to participate in a culture of elite professional academics. The spirit and energy which you learn to tackle REALLY ABSURDLY HARD problems is the most important thing I learned from my Rice EE education. Being able to find folks who were putting probes on Mars and Titan and being able to work with them to help build algorithms and visualisations to show insights from the data collected from these foreign worlds... that was the most valuable thing about my elite education... Honestly, most people don't even look at the school or even recognise it when I apply for jobs... The experience and participating with really smart people tackling really hard problems remains the most valuable thing for me 15 years after the fact.
Cotter as in cotter pin? :)
I can go out and buy Schwab equity tomorrow. Will they turn over their data to me?

I recognise that's reductio ad absurdum, and I'm not saying it's impossible that data is misused. But the idea that equity holders of regulated financial institutions can just get whatever data they want out of that institution is... not true.
It’s not trolling, it is an incredibly entitled statement and the type of attitude that gives the tech industry a bad name.
I don't know. I'd be very squicked out to expose a C++ HTTP client to the big bad world, i.e. as a web crawler. For private use, technically speaking gRPC contains an HTTP client.

More likely I'd fork a process in a safer language and direct it to make HTTP calls.
In the US the median vehicle price is $36K. So few $1M supercars are sold that they have no impact on the median.
I'm not sure I'll ever properly get my head around this case. On one hand, it's certainly possible to make an intellectually sound argument that APIs are eligible for copyright. On the other hand, such an argument seems to imply that IBM PC clones, MS-DOS, and Linux have all been infringing from the start and it's just that everybody has been too timid to actually enforce their API copyrights over the course of decades where there were plenty of affiliated deep pockets to raid. And that seems really hard to swallow.
Yeah and so is every other company on earth. At least they're doing something about it.
If you reduce the amount of sweetener slowly, you will likely eventually get used to just drinking coffee black.

I've suggested this to 5 different people over the course of my life and it worked for 100% of them.

Feel free to ignore this suggestion, but I can't see any downsides ;-) Worst case scenario is you're still drinking the same amount of sweetener a few months from now
> I wish it was easier to monetize free software.

Well, you might ponder over this line from the policy:

> In some cases, we may have alternative licenses available for AGPL licensed code.
Different states have different statues, many (maybe most?) exclude communicable diseases. Even in states without that restriction you’d be burdened by showing the disease came from someone at work. On the other hand if you could show negligence on behalf of an employer facilitating the spread of COVID19 massive lawsuits would mediate the shutdown of the U.S. economy.
that just reflects that actual engineers and not actual engineers frequent hn
Fully Interactive Covid-19 Tracker and Analysis Dashboard
Yes, this is also the case with FIDO. The private key is stored in the device's secure storage, and only the public key is shared to our server. So the private key is never shared anywhere and not kept by any service.

(This is also very interesting to me when I read about FIDO)
stop using json is the message
> What I wish companies like Tesla would do is define some standard form factors for things like batteries

The Fiat Centoventi (aka the electric Panda) is closest to what you want for batteries. It has a battery system with modules which are easy to install and remove. The idea is you can buy the battery capacity that suits your needs and then you can buy or rent extra capacity as needed:

https://www.drivingelectric.com/fiat/933/fiat-centoventi-con...

Being able to rent some extra battery capacity for the occasional road trip is an interesting idea. And the modular system makes it easy to replace modules that fail over time.
Pretty sure it's a conscious decision not to cannibalize sales and to sell just enough to meet manufacturer emissions standards.
Open Source Machine Learning on Quantum Computers with Xanadu AI
'Don't be alone with other people' is not exactly radical advice. I've had plenty of managers who said things very similar to that, or acted in ways that seemed informed by advice like that (for instance, making a point of holding one-on-one meetings in rooms with glass doors or walls.) The proliferation of glass-walls in workplaces is probably more than just a in-vogue aesthetic. I think a lot of people see value in having third party witnesses when in potentially confrontational scenarios.
Amazon Fresh will deliver groceries from Whole Foods within 2 hours, there's Uber-eats, DoorDash, Grubhub etc. There are a ton of inexpensive bars and restaurants all around Kendall and Central Squares (and yes, certainly some expensive ones!).
> resulted in a lot less allocations too

Especially if you use the MessagePack-CSharp library. That dude knows his high-perf .Net.
Yes, coming to the conclusion that they're screwing the students out of money, accusing them of crony capitalism, and hoping there are lawsuits all based on your own conclusion with no supporting information is definitely jumping to conclusions.

You're being disingenuous now, so there's no point in paying any further attention to you.
So we wanted the name Otter, but we can't get the domain, so we settled for C-Otter (sea otter). :D
I can't think of a single thing in the C or C++ standard library that is state of the art. Often they are actually quite terrible. Some of them just can't be fixed because of ABI compatibility issues. That's why, just as an example, C++'s std::unordered_map is an embarrassment compared to all recent hash tables.
White House to meet large tech co to discuss ways to control coronavirus
What is the docker-engine package for then? https://github.com/bottlerocket-os/bottlerocket/tree/develop...
Apropos of this -- summer brings more UV light, which breaks a fair variety of molecular bonds. But I've yet to come across any data on whether UV deactivates coronavirus. Anyone?
You're adorable :)
Shouldn't std::from_chars be included in the benchmarks?
I'll bite, and try nicely to point out the elephant in the room that a large portion of US citizens have not given a fuck about this, or were not properly aware of the danger of a health crisis until a week ago.
Video ads
Bemused and nonplussed seem to have changed in meaning.
YC W20 Online Demo Day moved up due to investor interest
Always. I just wanted to do it before msw :)
> Just because you can breed fragile animals for narrow purposes does not mean you can breed a better human.

Note that your whole argument hinges purely on the meaning of the word "better". Once you rephrase the issue in terms of "can we bread a human that's more like X or less like Y", the answer is "obviously, yes". Your whole argument is based on some subjective judgement as to whether these are "better", but it is completely irrelevant insofar as answering the question whether artificial selection in humans is possible, and whether it could significantly affect trait distributions -- the answers to these questions are yes, and yes.

By the way, we are already breeding humans more fragile, precisely due to increase in medical state of art. If medicine technology helps significant number of humans to survive and reproduce that otherwise wouldn't have, and it clearly and obviously does so, it will result in observable increase in traits that would significantly decrease the fitness in the context outside of human civilization, just the same as farm animals. I don't think that this complex issue of not just letting those people die without reproducing can be neatly wrapped up in a single word "better", but make no mistake: selection for more fragile humans is very much happening, right now.
NBCUniversal Sold $500M Stake in Snapchat
We have a Java + Mongo stack and recently we had an issue in prod where code was deployed with a @Indexed annotation. When deployed this will create an index on startup and can lock up the DB. We had this issue years ago, but it slipped pass code review and we had a 10 minute downtime because of this. Can this be prevented using custom rules in Datree?
Their March-April visualization shows Italy as being outside of the predicted at-risk zone.

It's March 10th and Italy just announced a nation-wide quarantine, how does this square with the model as predicted? Is it just too early to see? Will we know by April if this model is useless if Italy continues to have covid-19 spreading?
This conversion was a profiler-verified bottleneck in my projects twice. Nothing silly about it.
How are you suggesting to write shaders in the browser if they are expected to be in a binary form?

WebGPU community group is open to anyone interested: https://www.w3.org/community/gpu/
Howdy,
as the founder of the Serval Mesh adhoc networking protocols and hardware, what I would look for in a new radio is:
1. True packet radio mode, that doesn't hide the radioness of the link etc, but lets the programmer use it's strengths.
2. UART link, ideally using 3DR/RFD900 compatible connector (then we can include it directly in our existing systems, and so can others).
3. Field-flashable, but with robust protections on the boot loader, as it is not uncommon for a radio to be on the boot serial interface, on hardware that has only one serial port.
4. Support 434, 868 and 905-935MHz ISM bands.
5. Use advanced interference tolerant wave-forms, like Chirped Spread Spectrum or even something better.
6. Fully open chipset/firmware design, so that it can be truted.
Anyway, poke me at paul@servalproject.org if you would like to talk further about it.
Paul.
Because you lack a coffee machine you "have to" travel a mile for a starbucks? You've got to be kidding me. That's a preference, not a problem. Making very decent coffee requires exactly four things: 1. a small pot or kettle of nearly any kind 2. water 3. ground coffee (it can be bought ground and prepackaged by the way) 4. a source of high heat, usually found along the surface of a stove, I assume you have one of these. No offense man, but what an absurd thing to describe as a problem.

People have been making coffee like this for centuries and continue to do so without a problem. It's a no-cost fixable situation you're in.
Drafter
Looking for a full-time salary or contract drafter, have experience in designing homes from ground up, start A.S.A.P. please provide Website if you have one

Requirements: living in los Angeles county or surrendering

Please provide:

1. A sample of a complete latest home design drawing.
2. Resume with your email and phone number
3. Optional: Renderings done in past year sample

thank you for considering this position
MATLAB has "export to C" capability:

https://www.mathworks.com/help/dsp/ug/generate-c-code-from-m...

Build your website however you wish, then call the C code (e.g. C# P/Invoke interop if you use .NET, Python CFFI, FastCGI, etc.)
It's pretty pathetic that Chestek wasn't able (or allowed) to even mention who was the "subscriber" that was banned in that email.

Mind you, I disagree with Raymond on quite a few things, but he's clearly far worthier of being read (at least on OSS matters) than these Chestek and Berkus persons.
HN (and a lot of other places, really) has a large population of web or otherwise "web-heritage" developers, as well as those whose ventures into computing started beside/before the web. I suspect the JSON promotion comes mostly from the former group, while the latter, of which I am a member, laments it roughly as much as we did the "XML craze" of the late 90s and early 2000s.
I have a feeling that many of the students aren't paying anywhere near that $50/year.
Instead, once your product grows popular enough, they'll just offer a managed, hosted service with a compatible API.
Here is an article that seems to break down the costs, let me know in your infinite wisdom which part is missing.

https://www.kelleybees.com/blog/kelley-beekeeping/thinking-k...
This is a really good article, and the contrast in the outcomes between Philadelphia and St. Louis is such a clear example why aggressive social distancing is so crucial right now. Thanks for sharing!
Thank you. This is a full circuitboard with GPS+battery+lora+CPU+oled screen for $30. So I'm not trying to compete with a $15 radio devboard that someone has to solder into their project, but more something that 'just works'. And open source, for fun, so not selling it at all ;-)
> Why are we passing around binary data re-encoded to only use 6 bits per transmitted byte?

We're not. We're gzipping the json when we transmit it.
From what I understand the mitigation strategy has moved from "containing the virus" to reducing peak transmission rate — spreading out.

In your scenarios:

1. "keep it contained at the university" would probably look like: thousands of students, staff, businesses get the coronavirus rapidly over the course of the next two months (possibly overwhelming local hospitals), proceed to spread across the other densely populated area universities, Boston, NY, Spring Break, summer internships, travel everywhere happens post-mass-infection phase. Many deaths attributable to the campus being open likely.

2. Single person brings it to where they're from - same effects of a single sick person traveling we're seeing in the US every day (including what brought it to Boston). Unless they're going to another densely populated university or conference, which if more measures like this take place they should not be, the impact will be far less.

At this point they aren't aware of any students who have it, so a likely scenario if nothing is done is that the student population GETS it from the Biogen outbreak in Cambridge, AND spreads it at a much higher rate across the local area, country, world.
The US is relatively short on staffing (we don't try very hard to train doctors, nursing is a reasonably well compensated but unpleasant job, etc).

And then Medicare has a wild model where they work to centralize care at regional hospitals. The local hospital here gets paid more per Medicare procedure by not staffing rooms that it does have (this is basically universal among rural US hospitals that were built more than 10 years ago).
For myself, WFH is hit and miss in terms of productivity. Some days I'm super productive and might even stay logged on for extra hours. Other days, I'm hardly productive at all. My home "office" is a desk in my living room, so there can be a lot of distractions between wife watching TV and pets. I can usually get by listening to music with headphones on. Contrasting with work in the office, there are far more distractions. People walking by, drive bys from the boss, etc. And I dont even work in an open office, just low cube walls that I can see over while seated.
I disagree vehemently with this moronic opinion, but am strongly opposed to any attempts to ban you for holding or expressing it.
This comment. All this nonsense about elite universities being just about the degree and signalling is absolute rubbish. Elite universities are elite because they are made of some of the most influential thinkers, scientists, engineers, and professors in the world. Getting to participate in problem solving with these people is what makes these educations valuable in my opinion. I learned more from watching my professors tackle hard problems and reason themselves through them than I did from the actual material they were attempting to tackle. There is something to be said about the techniques and culture of the worlds best academics.
No. I know the personalities involved. It was not a cover story.
I think if you're a little more generous and say "you rarely need" rather than "nobody really needs", there's no contradiction. Most of the time, you're not using much CPU in total or your server is doing something much heavier than parsing and serialization. Either way, JSON is fine. Improving its performance is nice but not worth a ton of effort. Once in a while, it's significant, and you switch to a binary format if you can.

And like anything, it depends on what you're doing. If you're doing lots of server-to-server RPCs on big distributed systems like within Google, it's much more reasonable to start with protobuf or the like than with JSON. And not just for performance reasons; having the generated code helps a lot with maintainability. (Some JSON libraries have something similar; some don't.)
Would love to see my rent payments suspended. Am I elligible to join the protected class?
Yes, realistically the world will be playing whack-a-mole over the coming months as city after city experiences an outbreak that saturates its health care facilities and has to lock down. It will seem endless.

But with each outbreak more people will acquire immunity, and eventually the peaks will be lower than capacity.

But it's going to be a rough road to get there, and we'll all suffer on some level. This isn't going to be "over" for quite some time.
Hospital beds are healthcare infrastructure.

Public health isn't quite healthcare.

(they overlap, but they are not the same thing)
Recently-ex-sell-side here: retail investors generally don't need to worry about this at all. There's a lot of protection. Your assets are held separately from the firm's assets, you have SIPC insurance, and there are enormous amounts of regulation in place to try to prevent you from even needing to rely on those two mechanics. Really the worst that could happen is it might be a headache to get to your stuff for a small period of time while something is figured out as to where your assets are going if your brokerage just up and poofs.

That aside, I generally trust the discount brokerages a bit more than people like BofA/Merril and Wells Fargo and JP Morgan, just because I feel like the discount brokerages are a bit more content to just sit on deposits and earn interest (interest accounted for > 50% of schwab's revenue last year) rather than get up to highly leveraged hi-jinks or open fraudulent advisor accounts.
On Superhuman
>Reich brings up evidence for selection for taller height in northern Europeans in his book: what was "extremely strong selective pressure" there? Or, for that matter, what was the extremely strong selective pressure to select for short height in various Pygmy populations?

Just because we couldn't isolate it doesn't mean it's not there (or wasn't there in the past). Also, Pygmies and Northern Europeans are very niche populations with little extant diversity compared to the rest of mankind.

>The above is bunch of falsehoods, and anyone who has any familiarity with recent (and not so recent) results in genetics and heritability is perfectly aware of that.

Idk what to tell you. It's literally my job to work in this kind of stuff. As in, I get paid for working in this, I clock in, have coffee with, have lunch with, clock out and sometimes binge drink with people who get paid for doing this as well. Feel free not to believe me but at this point it's just useless to fling "no you're the one who's wrong" one more time.

>Common conception of race matches the ancestry extremely well.

Common conception of race isn't well-defined and changes depending on culture and whatever the researcher had in mind when they wrote their paper, I'm not surprised it fits whatever they think it is.

>Price equation simply doesn't care about what causes the generation-to-generation selection, for example.

Models have evolved a little bit since the 19th century. In practice you don't model artificial selection the same way you do with natural selection, the latter is much messier.

>Of course I addressed that. For example, she received input from Reich, who trashes her argument. I also mentioned that some people in the field are also twisting science to further their political causes, and this has been true at least since Lewontin and Gould, and probably much earlier.

You conveniently ignored Birney and Coop's approval. Also the fact that you're bringing up Gould and Lewontin for no apparent reason, just to trash them, as well as the useless snark when pretending to not know, not even google the term HBD, leads me to think you just want to rehash the old wars of the 1990s and aren't in fact debating in good faith. So much for 'obsfuscating science' indeed.
The WHO estimates that the 2009 H1N1 "swine flu" killed ~250,000. [1]

Reported case mortality of H1N1 during the pandemic was similarly upwards of ~5% in some countries, [2] although later retrospective studies found that H1N1 was actually less lethal than a typical flu season (0.01-0.08%). [3]

ICU utilization was very significant in some countries, e.g. 30 people per million admitted to the ICU [4]. (Italy is currently at 14 per million.)

Hospitals definitely had to adopt "surge management" although in 2009 it often had as much to due with managing fear and panic as it did with getting people access to ventilators. [5]

[1] - https://en.wikipedia.org/wiki/2009_flu_pandemic

[2] - https://en.wikipedia.org/wiki/2009_flu_pandemic_in_India

[3] - https://www.cdc.gov/flu/pandemic-resources/2009-h1n1-pandemi...

[4] - https://www.nejm.org/doi/full/10.1056/NEJMoa0908481

[5] -https://www.reliasmedia.com/articles/136827-the-next-pandemi...
Code blocks for quotes do not display well on mobile. I had to scroll horizontally a dozen times to read that quote.
It’s “incomplete” because JS doesn’t natively have the concept of bytes or the other things you mention. JSON is JavaScript Object Notation, so there’s no reason it would support features beyond what JavaScript itself can. Of course JSON is now commonly used by other languages and platforms, but its origins in JavaScript are the source of its limitations.
Eeehhhhhh, if the overall company doesn’t have a good culture or vision etc, there only so much management can paper over
Epidemic will reveal the 'digital divide'