skysight-inc/HackerNews huggingface dataset:
> How do you strike a balance?

How about a keepalive from the client side: little bit of JavaScript that somehow tells the server that the session is still alive, so don't blow away the closure or continuation.
I wonder if Orange County will see a bump in another week or so. A lot of people I know from down there were out at the beach last weekend while LA's beaches were still on lockdown.
Thanks for clarifying this. I didn't mean to imply that you'd violated any trust here, I was just curious. And obviously you're being discreet with the use of a throwaway.
I support this learning method. Having a map of the key concepts, as well as visceral feel for them via code, will keep up the motivation.

This would be in contrast to picking up one of the plethora of “ML” textbooks that mostly only describe the math behind all the algorithms. Which is not where you should begin, in my view (years of teaching experience). The use of such textbooks is as a reference to fill in details once your are curious about them.

And more than anything, the best way to learn practical ML is to “apprentice” to some experienced practitioners or team who are willing to act as mentors.
Take the Fear Out of Git Push
They’ve lost their jobs and homes and can’t feed their families. Then they are told there is no help forthcoming from the government as they watch that same government point the money cannon at large corporations.

Why wouldn’t they revolt?
The current lobbyist scheme is mostly shameful.

But just to play devils advocate, politicians spending time in the company of subject matter experts is a good, not a bad thing and AOC could use a bit more of that and a little less wishes and dreams.
Seems the ideal solution would be to trigger push-to-allow for signing requests that come in via agent forwarding, but not for local requests. I’ve been thinking about a reliable & secure way to do this. A modified OpenSSH client could enable this pretty easily by simply indicating to the agent where the request originated. But that’d require changes to both OpenSSH and to the agent protocol.
Rick Schwartz
What company was this? Couldn't you just fake your vendor to them somehow by spoofing your mac address?
I don't have any leads on hiring but you might find this new program interesting for founding companies and finding cofounders: chrysalis.cleocap.com
How much influence does China have over Taiwan? Can they completely decline any malicious orders?
you've been able to download urbit and use it for decentralized chat and forum discussions (in an earlier version) via webui since ~2014. this is the first instantiation of something like a full social software suite, but it's also been basically entirely rewritten since the earliest versions.
I was really hoping this comment was going to be by patrick in that weird synchronicity that is demonstrated on hn :-)
>> If you’re using Zoom for free, if you have a free subscription to Disney+...

What shockingly bad examples to start with. Zoom, in particular — they’re profitable, growing like crazy, and each marginal free plan user represents a trivial cost.

The rest of the piece isn’t terrible, but what a strange way to kick it off.
> While that is a sentiment with which I can wholeheartedly agree, ...

... (since, ya know, I rewrote a Lisp book to make it about Python, so if I said what I really think, there would be no end to the crow I'd have to eat), but anyway ...
There are kernel components of drivers as well as userspace components. But they are all available via package managers, so no need to install them.
The curve has been flattened and I’m past ready for lockdown to end.
Agree — people should do what they want and have fun learning. Its just a suggestion that’s also colored by my own experience. I will argue that if you’re going for a job in data science it is a bit more of a serious suggestion since you need to be able to know how to answer statistical questions and understand your assumptions, and you really do need to understand Bayesian stats for that (nothing state of the art here, don’t worry if you don’t know what a PGM is, I just mean basics).
I get what you are going for but LA has about 10x more people in general than the Bay Area, and to my knowledge most christians celebrate Easter, not just Catholics.
The build quality and hardware compatibility is really great. Strong hinges, good trackpad, nice feeling keyboard. There are a few quirks (e.g. with ghost keys) but the firmware people appear to be working on it (nice that I can subscribe to the issues on github).
Google has been doing this for like a decade, and we've known 5-Eyes has been collecting this data from them for like a decade. So I guess the news is that China is late to the party.
> federated/feudalist network organization, etc.

it turns my gears when people describe urbit as 'feudalist'. feudalism is what we have now, where we're serfs on facebook's manor and can't pack our stuff and leave.
I’m from the area (not living there anymore) and I’m also interested. There’s an “OC vs. Gavin” showdown going on, and I’m not sure which side to be on. Based on what I’ve heard from local authorities, the beachgoers maintained proper distance and the orders from Gavin are solely retaliatory.
To offer a counter, some organizations would rather introduce friction if it limits their liability or reduces risk.
NICE, thanks, something I'll look into
Cool, thanks! The FAQ still says that the cli uses the old parser/definitions...you might want to update that to reflect that you're changing that and it's not intentionally being left behind.
> I would prefer to stay on a Debian based distro so PopOS looks promising.

Have you considered using Debian?

Personally, I prefer to run regular updates often and full-system upgrades rarely/never, but I also want to use software that isn't ancient. The LTS model gives me half of those things.

I don't know if that's what you're hinting at with your comment about newer kernels, but I've found the testing and unstable branches of Debian to be a far more pleasant experience overall than Ubuntu (either the LTS or the full-upgrade-every-six-months variants).

They're both rolling releases. Don't let the names fool you... If you follow a small handful of best-practices (e.g. enabling apt-listbugs) they can be quite stable. The system on my old laptop has been running without major issues for almost a decade.
Perhaps then, for the sake of setting those expectations, the wording "the language that may be most poised to achieve this in the future is Zig" would be preferred?
Walmart demands or strongly encourages that their suppliers not run on AWS, and Amazon is being investigated for spying on FBA data to enrich their own business. Other AWS competitors like B&H don’t host there out of fear of data safety and business continuity.

The worry is not that your provider will hack you, the worry is that your provider will silently steal your trade secrets.

Cryptographic keys that control identity and money are good distilled examples of this.
Neat, could see myself using this.

Couple of things:

- After placing a timeslot I went to drag it up and down. Instead it created another timeslot within the first one. Having used Google calendar a lot I kept subconsciously trying this: http://i.imgur.com/G9SlRAh.png

- Showing timezone is great but the dates are in the US MM/DD format. For everyone else this really throws us, especially when the date is ambiguous. DD/MM really should be the default outside the US. Also perhaps an option for the ISO YYYY-MM-DD format.
Interesting. I was not aware of this particular issue. Is this it?

* https://dev.gnupg.org/T3981

As mentioned in the discussion:

>Actually this is not related to the mentioned CVE because the issue we are talking about has not been tested by them.

So it appears that the EFAIL people could of prevented MDC from thwarting their attack if they had used a really old cypher. So, OK I will concede that EFAIL at least inspired a change in GPG. My original statement that GPG required no changes as a result of EFAIL is still correct as stated though.

We are still quibbling here. I don't think that S/MIME was deficient in any way with respect to EFAIL either. So all this discussion about MDC is still pointless to me.
Newspaper Front Page with More Colors, NYTimes, WSJ, NYPost
Thanks! I'm sure that will give me a really solid look at what a full application looks like in a lisp.
I called the superior court of an out of state ticket I got for underage possession of alcohol (application asked about misdemeanors and felonies) and they said don't bring it up unless I'm applying to the FBI. So if it didn't reach your state's or immediate next door states' databases like for a warrant, I'd say zip.
"Inherently addictive" is not a term I see used. I believe the phrase you're looking for is "chemical dependence".

I also didn't argue that it needs to be "'corrected'". So again, I don't need to prove anything.
You: Can you tell me why this is interesting?

Them: It's not interesting.

You: Idk this vague sentence sounds kind of interesting to me. Can you tell me why this is interesting?

Them: Trust me it's not interesting.
Since this is getting a surprising amount of interest, let me sum up the technique here. It's really not hard to implement it in Javascript using Express.

1. inside of your express endpoint, create a closure that captures some state. For example, the user's IP address.

(This is a dumb example, but the point is that you can capture whatever state you want. Some cases are mentioned here: http://paulgraham.com/road.html and here: http://ep.yimg.com/ty/cdn/paulgraham/bbnexcerpts.txt)

EDIT: I updated this to capture the date + time the original page was loaded, which is slightly more compelling than a mere IP address.

app.get('/', function (req, res) {
let ip = req.headers['x-forwarded-for'] || req.connection.remoteAddress;

let now = new Date();
let date = now.getFullYear()+'-'+(now.getMonth()+1)+'-'+now.getDate();
let time = now.getHours() + ":" + now.getMinutes() + ":" + now.getSeconds();

let fn = (req, res) => {
res.send(`hello ${req.query.name}. On ${date} at {time}, your IP address was ${ip}`)
}
... see below ...
})

2. insert that closure into a global hash table, keyed by a random ID.

g_fnids = {};

app.get('/', function (req, res) {
let fn = ...
let id = <generate random ID>
g_fnids[id] = fn;
res.send(`<a href="/x?fnid=${id}&name=bob">Say hello</a>`);
})

3. create an endpoint called /x which works like `/x?fnid=<function id>&foo=1&bar=2`. Use <function id> to look up the closure. Call the closure, passing the request to it:

app.get('/x', function (req, res) {
let id = req.query.fnid;
let fn = g_fnids[id];
fn(req, res)
}

Done.

Congratulations, your closure is now an express endpoint. Except you didn't have to name it. You can link users to it like `<a href="/x?fnid=<function id>&name=bob">Say hello</a>`.

The reason this is a powerful technique is that you can use it with forms. The form target can be /x, and the query params are whatever the user types into the form fields.

I bet you already see a few interesting use cases. And you might notice that this makes scaling the server a little more difficult, since incoming requests have to be routed to the server containing the actual closure. But in the meantime, you now have "inner functions" in your web framework. It makes implementing password reset functionality completely trivial, and no database required.

If it seems slightly annoying to use – "I thought you said this was a productivity boost. But it's annoying to type all of that!" – lisp macros hide all of this boilerplate code, so there's zero extra typing. You can get lisp macros for Javascript using Lumen lisp: https://github.com/sctb/lumen

Even without macros, though, I bet this technique is shorter. Suppose you had to store the date + time + IP address somewhere. Where would you put it? I assume some sort of nosql database like firebase. But wouldn’t that code be much longer and more annoying to write? So this technique has tremendous value, and I’m amazed no one is using it circa 2020.
Yeah, the test would be something that generated MIDI which gave pleasing results when connected to a good library. This reminds me of the way early DeepDream pictures all looked like a litter of puppies on acid.
Show HN: High quality COVID19 clinical dataset (symptoms/lab results/xrays etc.)
> I haven't seen arc's closure-storing technique used in any other web framework.

Apache Cocoon?

https://cocoon.apache.org/2.2/core-modules/core/2.2/1373_1_1...
Software that provides a service to users.
I don't think most companies have the capacity to handle it well in the first place. I think the outliers like Stripe are different because they have a very hands on CEO who can cut through all the tape, IIRC they also have a fairly learn and very technical organization with strong domain knowledge in areas where the tape is cut. Most orgs are non-engineering orgs, most CEOs are not technical, most large orgs have far too much bureaucracy to cut through it.
VC theses are almost always just pattern matching. Moreover, they aren't the first to ever put forward that thesis.

Is it a good thesis? What's your criteria? By any scientific criteria, of course, the thesis is asinine. However, if the criteria is other VC theses, then it is an adequate thesis.
> That's how I got started with it at least, I had problems trying to contribute BEAM just because of the sheer size of the codebase and lacking the domain specific knowledge.

And the fact that a LOT of BEAM was terribly undocumented. I'm impressed you got anywhere, personally. The last time I looked at BEAM to understand some weird behavior (that eventually did turn out to be a problem in Erlang/BEAM), it was completely impenetrable.

Your implementation is probably useful as documentation, if nothing else.
Windows NT used to have a POSIX subsystem [1] that applications could use instead of the Win32 subsystem. So the Windows NT kernel is designed with the option of POSIX compatibility. Arguably the Subsystem for Linux is the current successor of the POSIX subsystem, providing POSIX compatible access to the kernel along with a POSIX compatible shell and UNIX commands.

Obviously the Win32 subsystem isn't POSIX compatible, but I'm not sure why we would want that.

1: https://en.wikipedia.org/wiki/Microsoft_POSIX_subsystem
Shades of gr[ea]y my friend. If you think of the media as each broadcaster/publisher it might be plural, but in the conspiratorial sense of things the "media" is just the propaganda arm of "them". That makes it a singular thing. QED
Ironically, this is wise advice.
I mean, the Bay Area can read a graph and understand math. It's the dominant industry here, math and data. I don't think the same can be said of the LA region...
Can Genetic Engineering Bring Back the American Chestnut?
Original Ford Mustang designer dies, the last link to celebrated era in history
Not a startup. They don't just go from seed round to IPO on idle. The founders had to invest thousands of hours and immense stress to get it to IPO. Meanwhile a holder of 1000 BTC from 2012 probably continued to work their day job until 2017 when they incidentally became multi-millionaires.
Why are you trying to tackle some small little market of staging servers for the handful of companies that actually care about this?

Take your Hypervisor and sell it to companies that want to efficiently lift-and-shift legacy systems in to the cloud and make your investors super happy.
It's a little sad that it's declined so far. In a way, it's a victim of its own success--it's so easy to write a lisp system that literally dozens, if not hundreds, of variants sprang up. The community was divided, and it never quite came through.

IIRC, our fearless leader PG made his zillions using Lisp.
You can still open the firmware update file in ghidra, cutter or ida pro.

But yeah the trend is troubling. I also believe that it's only a matter of time once the "smart" devices (fridges, TVs, etc) start shipping with 5G modules enabled that send data to the mothership whether you set up WiFi for them or not. Because while you can't buy non-smart TVs, many users don't enable smart features by not connecting them to the network. The 5G module will probably only exist for tracking purposes and maybe firmware updates, but not for the netflix/youtube app.
As long as it doesn't come mandatory with the mark of the beast...
Thank you for taking the time to respond :)

That is an interesting model, it seems to me that Truework would position itself as an identity aggregator of sorts. In that case, it seems a large challenge would be gaining the trust of organizations (which it seems you are succeeding at, congratulations!).

Among my worries are that this establishes a rather large target for data breach as presumably the company would hold identity docs and other documents used for authentication or verification purposes. Out of curiosity, since my experience is more in banking/healthcare, is Truework subject to any regulatory framework?
Do you really give permission/consent, or just accept the fact that you have no choice in the matter. A guy puts a gun in your face and says give me your wallet. You're not giving him permission to take your belongings. You're just doing what you have to do. Yes, I am equating the terms modern financial systems use as a gun in my face.
it's a minimal turing-complete function, built out into a higher-level language and functional, deterministic operating system (arvo) that is virtualized on a host OS. arvo runs an encrypted overlay network that is decentralized and federated. individual instances have combination identities/routing addresses that are finite and cryptographically owned (built on ethereum at the moment, though perhaps not forever).

you could say its first app is a decentralized chat & social software suite. everything built on the OS gets the decentralized network 'for free'; apps become protocols.
Isn't the extreme of this interest only mortgages?
"Online education used to be like online dating: only something losers would do. But now it seems to moving towards the default way of doing business."

As a self-taught developer and proud of it, I like this quote. A lot. It's easy to let yourself fall into a toxic mindset where you (and many employers) unjustifiably feel inferior because you didn't take the traditional 4-year college route.

But in less than a decade, hearing of couples who met on Tinder has gone from a novelty to the norm, reminding us of how quickly societal paradigm shifts can happen (for the better, imo).
There was a Linus Tech Tips video where they water cooled via just running water from a tap through the system and then dumping it back in the sink - no radiator or fans involved. The performance was of course fantastic, but the amount of water you use running a tap constantly is pretty astronomical so it's not actually practical.

https://www.youtube.com/watch?v=CFXyyJyEtVI
https://www.health.gov.au/news/health-alerts/novel-coronavir...

It's a live updated page, so I don't know what stats will be displayed each day, but I'm relatively confident they will support my claim unless things change drastically.

You will find an infographic with breakdowns of positive diagnosis (known cases) and deaths. Both are helpfully split by age groups and gender.
What is Borg written in? C, C++ or Go?
LA has recently made testing available to anyone which is a great move!
https://lacovidprod.service-now.com/rrs
Some tips:

- Customise ~/.ssh/config to suite your needs (be careful with storm - manage ssh like a boss, it helps when scripting or searching hosts but has a outstanding bug converting keywords to lowercase [1])

- Use ed25519 key over RSA

- OpenSSH 8.1 added support for FIDO/U2F (use your YubiKey or equivalent)

- Put `IPQoS lowdelay throughput` in your ~/.ssh/config if you run a rolling release (e.g. Arch, Gentoo) or your openssh rolls via homebrew on macOS. latest openssh client with older version of sshd may produce weird disconnection issues (server reset connection, client side is able to connect but terminal hangs in 5~10s). Spend quite some time digging only to find that it was caused by default change for IPQoS (to IPQoS af21 cs1) introduced in OpenSSH 7.8p1 [3]

- leverage ssh-copy-id

- ssh -vvv | ssh -G (troubleshooting from client side)

- /usr/sbin/sshd -p 2222 -f /path/to/sshd_config -D -ddd (troubleshooting sshd server side)

- Be careful with `UsePAM no`, make sur

- use AllowUsers / DenyUsers vs DenyGroups vs AllowGroups , mind the order

- know how to use ssh-add / ssh-keygen / ssh-agent / ssh-keyscan

- audit SSH config (ssh-audit / lynis), version control ssh_config / sshd_config properly if possible

- openssh + tmux ;-)

Personal favourite tips/tricks:

- ssh -D (used to use this dynamic port forwarding, open a local Socks5 proxy to punch hole in firewall, encrypt traffic, it worked for a while against the infamous GFW, only a little while though)

- ssh -L | -R TCP forwarding

- ssh -X | -Y X11 forwarding (run X11 apps remotely and display it on X Server locally)

- More personal SSH tricks put together over the years, surprise to find that my person OpenSSH notes are 150+ pages in Google Docs, sorry can't put all in a comment... [2]

- RTFM works, OpenSSH is worth the time ;-)

[1]: https://github.com/emre/storm/issues/157

[2]: https://sites.google.com/site/imterry/computer/tools/ssh

[3]: ssh(1)/sshd(8): the default IPQoS used by ssh/sshd has changed. https://www.openssh.com/releasenotes.html
Any individual cost looks justifiable. But they add up. And ultimately, students pay for many of them. With a gym, especially, you can make it optional and charge students who want it. That's the model in many other countries. Similarly, the school newspaper, political clubs, other student activities all get funded from somewhere.
Yeah but a lot of people celebrate Easter with egg hunts and candy. Not everyone celebrates it with mass. Was mass cancelled for Easter?
It depends entirely on the school. Harvard could pretty reasonably jack up their tuition well over $100,000/yr without any real resistance or fall in applications. We wouldn't get cheaper colleges, we'd merely watch as all the 2nd and 3rd tier schools shut down.
Yep at MIT it's also pretty pathetic - most dorms have dining halls instead of kitchens, and living in a dining hall dorm requires you to be on a meal plan. These meals somehow cost around ~$14 per meal. And apparently MIT dining is still millions of dollars in debt... I truly don't understand.
Infection rate is population size insensitive.

Easter also seems to be quite a bit more important to Catholics than most christians (see: Ash Wednesday, fasting, etc.)
makes no difference. oh you don’t have it? stay inside. oh you have it? we have no treatment. stay inside.