skysight-inc/HackerNews huggingface dataset:
I was in this situation, decades ago, and indeed was turned down by CMU. At least back then, CMU like some other elite schools had no MSCS, making it even harder to make the grade coming from Podunk U.

My strategy, which worked out okay, was to "bracket" the field by choosing a couple of schools that looked solid and had very large MS class sizes and to just view my "elite" apps as lottery tickets unlikely to pay off (which they didn't).

Beyond that, and especially today, I'd look seriously at targeting specific future advisors at the schools in question, and worrying far less about the school's reputation. An excellent advisor at Mississippi State will do you far more good than a crappy one at Stanford. And will probably cost a lot less.
Well I just discovered this 11 year old Firefox bug due to that page

https://bugzilla.mozilla.org/show_bug.cgi?id=477157
...Is your default reaction to hearing an opinion you do not agree with or understand to roll your eyes?

Thanks for describing what you would do in the situation. It sounds like you are the type who would accept it given the option of quitting or continuing, is that fair to say based off an incomplete answer? There's no right or wrong, there's simply choice in the matter we all have that power to choose :)
Anything is expensive if you have to scale up beyond your financial ability to do so.
>I really don't understand all the hate these services are getting here.

I'm not hating them at all - in fact, I think I've only used them twice and I really don't have an opinion...In fact, having not used them extensively, I'm looking at them with the eyes of an outsider...

Where I disagree with you above is the question of value vs business model. In each of the examples above, there is value being added and a business model that works. In the case of these delivery services - there is value being added, but the business model seems off and that's what's causing it to not be profitable.
I haven't tested it with Stripe, but according to their docs, yes: https://support.stripe.com/questions/find-the-type-of-card-a...
I didn't know you could do that. Most hotels I visit have key cards for the elevators. Are you meeting them in the lobby? Isn't that awkward?
I suppose it's a matter of acceptable approximations and cost. If only 2% of players have a high quality surround sound system, and only half of those have a good ear, then you really only have 1% of users who can tell the difference between raytraced audio and the heuristic "hacks" that sound engineers have spent decades developing. So I don't know if audio raytracing will become mainstream in games anytime soon. But I also suppose that if one engine does it, others will follow suit.

Same thing with this Unreal 5 demo. Most users would not be able to tell the difference between rendering 16B vs 8B triangles per frame.
> I love that Google is starting to solve this problem

They aren't solving the problem. They are making sure only they can get all the user information.

I would rather give all my information to everyone rather than giving all my information to google.
In all of your examples, the big company provides a service in that it offers better discovery options in a single place. When it comes to restaurants, that's not quite the same.

Maybe if UberGrubCart let users order delivery from famous restaurants in another state that might be a real value add - but in a hyperlocal market like restaurants they have an uphill battle to fight.
Vulnerability in Google's WP Site Kit gives any site user Search Console access
Why are you so insistent that it's absolutely, under no circumstances, the responsibility of the employer?
this is a great source of naming stuff for novel/games purposes!
On Uber Eats you can change the tip up to one hour after delivery, so if they decide based on tip amount, that is vulnerable to bait-and-switch.
People who think you can't be a centrist in SF or Alabama spend too much time on Twitter.
Also, the character model's hands+feet commonly clipped the walls slightly, and sometimes had that odd sliding motion in which the overall limb seems approximately stationary with respect to the surface they're touching, but the actual edge does not, it slides about a little.

I mean... that lighting was really, really good, and I think this is the first triangle-based demo where the surfaces really don't look oddly angular almost anywhere (maybe with exception of the stalactites). But it's a far cry from the hand-tuned look of something prerendered.
The environment looks great, the anime-eyes character with porcelain skin definitely looks UV. The climbing motion is uhhh a little floaty? In any real rock climbing video, you can see that the effort is much more labored.
It sounds dishonest to :

1. not being able to empathize with someone who is economically vulnerable. can't tell if it's on purpose, or just difficult.

2. attach yourself to the definition of vulnerability. I just gave you one : people living paycheck to paycheck. It's a pretty mundane concept, and it's trite or dishonest to have to revisit this.
If there are other civilizations out there, I think we’re more likely to be visited by super-intelligent AI than we are to meet their creators. Think of a small sentient spaceship going the speed of light with a million IQ hive of replicators on board. They wouldn’t have to bother about life preservation or oxygen or any of that noise. Their creator species would stay in their galaxy until their AI finds another ideal planet to colonize, or they could be dead and their legacy lives on in the AI. The existence of extraordinarily compelling virtual worlds wouldn’t have much of an impact in my opinion.
> all you've done

Eh. I sort of disagree with this specific phrasing.

People shouldn't focus only on targeted attacks on the server. Of course if you have an HTTPS proxy in front of an HTTP server, you can be MITMed between those two servers, and that's very bad.

But even with that flaw you're getting benefits. Public networks can't inject malware/ads into that webpage, a MITM attacker between your proxy and the main server will have a harder time correlating a request with a specific person, ISPs will have a harder time scanning the traffic for use with ads/metadata.

This is a similar argument that comes up sometimes about VPNs. I know people who argue that a VPN does nothing because it just moves trust from one party to another. But the reality is that if you search my public IP address, you will get a pretty decent approximation of where I live. In a world without a VPN, I'm not just choosing whether or not I trust my ISP, I'm choosing whether I'm comfortable giving a decent marker of my physical location to literally every single website that I visit.

That doesn't mean the "moving trust" concern isn't valid, it just means it's not the full picture of what a VPN (either privately hosted or through a 3rd-party) protects you from.

In the same way, it is a valid concern that behind the scenes data might not be encrypted between a proxy and a server. But that's not the full picture of what HTTPS protects you from. HTTPS also protects you at the router/network level.
Make an educated guess about the design of youtubes serving infrastructure, and I'm pretty certain you're right.

There's only really one sensible way to do it, and that's the way it's done.
I don't have anything other than to say this is really cool! Congrats to the creator, I love useless, cool shit like this. I prefer seeing this kind of awesome stuff instead of another boring "How we upgraded our server" blog from Slack or Instagram.
A friend of mine described how you need to address a package in India. I say tipping is probably reasonable.
UT2004 was brilliant too.
I have a hard copy of the first edition. The dedication says: "dedicated to the principle of least action"

I have an educational resource for introduction to Hamilton's stationary action. The title is "Least action visualized".

http://www.cleonis.nl/physics/phys256/least_action.php

The diagrams on the page have a slider for active exploration. Moving the slider sweeps out a range of trial trajectories. As you change the trial trajectory the diagram shows how the graphs of the energies come out accordingly.

In this resource Hamilton's stationary action is introduced in a two-stage process.

First stage:
We have the Work-Energy theorem, which we can apply with equal validity in infinitisimal form. The true trajectory has the following obvious property: at every instant in time the rate of change of potential energy matches the rate of change of kinetic energy. Demanding this match as a condition we identify the true trajectory among the range of trial trajectories. That is, this initial stage is already variational approach, but it doesn't yet use the concept of action.

Second stage:
Demonstration of moving in a single step from the first stage to Hamilton's stationary action.

The demonstration is for the simplest case: a uniform force, hence a linear potential. The reasoning generalizes to all cases.
easiest way to jump tiers is networking i.e. person to person conversations with PIs. if you're able to represent yourself well and describe your own research articulately and authoritatively it'll make up for a great deal of the gap between you and students from "elite" schools. unfortunately this networking happens at conferences which less resource-rich schools can't afford to send undergrads to.

my hack: when you're traveling to a city with a brand name school you might be interested in attending, shoot some professors an email asking to drop by and chat about their research. they will usually tell you to come by during their office hours. this has worked for me no less than 3 times and led to 2 admissions.

if you're an undergrad and you've never sold/pitched yourself to someone i strongly suggest you read some salesy stuff about how to approach a sales meeting. you have to keep in mind that PIs are kind of like CEOs of small startups - they do research, publish papers, and win grants. That's their business cycle. when they're evaluating new students they're trying to determine how effectively you'll fit into that cycle. that means if you've done all 3 of those things you're in a good position to be hired (and it is out and out hiring) but if you lack experience in one area (e.g. writing grants) you can make up for it by being strong in another (or giving the impression that you will be). ultimately you need to speak to their needs and goals rather than your own.
I'm tinkering with a single player word game in HTML5. Feedback welcome. :)

https://seanwilson.itch.io/wordoid

I've tried to make it intuitive enough that you don't have to read a page of instructions first but let me know if I've missed the mark. I'm hoping you can learn the gameplay mechanics as you play.

I'm not using any web frameworks for this which was actually fun to do. It gave me a chance to improve my understanding of CSS animations + reflows, and catch up with changes to JavaScript.
(beware, I'm a dog)

Misusing those primitives can kill all guarantees, of course, the amount of kill dependent on the amount of misuse. Using non random keys will kill even more.

It's about ease of correct implementation, use, and what kind of degradation happens if a side-channel leaks a specific item:

It seems that w/AES (within the AES-GCM construction) can leak a key that is useful against all other uses of the original AES key that was used to derive the authentication key.

ChaPoly uses a construction where all crypto operations for a message exchange use a key which if leaked, cannot be reused to attack so many other message exchanges as well, because it incorporates both main key and nonce in the derivation.
What about REFACTOROLOGY https://www.thisworddoesnotexist.com/w/refactorology/eyJ3Ijo...
I need to write a blog post about this :)

A lot of people seem to think of Khan Academy as a bunch of videos. Many have also seen the exercises and articles. Those things are all pretty static (though it gets more complex when you consider how much content there is and how many languages it's localized into).

There's a whole bunch of dynamic behavior around that static content. Keeping track of progress to tell a learner how they're doing, plus to help recommend the next place to go in the content. Reporting on progress to parents and teachers. Letting teachers create assignments and manage their classrooms. Bubbling up information to school districts.

Content pages have discussions and clarifications. There are notifications to tell students about new assignments, for example.

There are connections to tests, like the SAT prep or integration with the MAP test, which involve connecting our accounts with external accounts in order to help students based on those test results.

And a bunch of other stuff that isn't coming to mind right now because I'm just naming things off the top of my head.

Doing all these things across a user base of millions of monthly users can get quite involved.
“Congress” as a body has done no such thing. Some members of Congress have introduced a bill. Congress is a bicameral legislature whose members debate and vote on a variety of proposed bills, many of which are at cross purposes to each other. None of these actions are the actions of Congress as a whole until the bill passes.
yeah, all the economy stuff in games is because you are the only one amassing wealth, stealing and looting from everyone and everything. it is pretty ridiculous.

even that skyrim patch that lets you invest and makes shop owners have more money was still only influenced by you and you alone
Not only is all the VC subsidization questionable, but Doordash, Caviar, Uber Eats, etc. all strike me as just the shallow veneer of a delivery service. It's just about the leakiest abstraction of any major product that I can think of.

You have the restaurant, which is physically optimized for in-person meals. Take-out on its own is already fairly clunky at many sit-down restaurants, there's no waiting area, pick up counter, no easy way to pick up at the curb, etc. Pickup is clearly not the focus of those physical spaces.

Then you have the integration between the app and the restaurant. This is the one thing about the entire flow that is actually integrated in a meaningful way, but still it's only at the single point in time of placing the order. If anything goes wrong, if there's a delay in preparing the food, or anything is sold out, or if they end up giving you the wrong person's order, there's always a runaround of whether you should talk to the delivery support or the restaurant itself. Seeing as at least something goes wrong with probably 1 in every 3 or 4 orders I do, this loss is a probably a really big deal for profitability as I am always getting refunded for something that was missing or went wrong or getting a $10 credit for an unexpected 3 hour delay.

And then you have the delivery handoff itself. I suspect this mostly works well in the suburbs, but living in an apartment building this is yet another opportunity for things to go wrong. I would prefer not to have to come downstairs outside the building to pick it up when I'm paying ~$20 for this delivery to my door, but very often the delivery people complain they can't find the building (it's clearly marked on google maps), or that there's no parking (I live in a very dense area, why are all these apps so car-centered in their delivery crew? Why can't I request someone on a bike that wouldn't have this problem?).

Basically, delivery could be done very efficiently, and profitably if we made some bigger changes. There should clearly be specific restaurants, maybe even some that have no seats at all and are just a pickup kitchen, that are optimized for efficient pick-up and marked as such. Cities need to change their street design to accomodate how many more deliveries are happening today, vs when these streets were designed many years ago (this is not just a problem for food, look how many rideshares drop people off in the middle of the road because there's no space to pull over to a curb, or how many Amazon or UPS trucks block streets and bike lanes because there are no dedicated 5-minute stopping zones).

It reminds me of Marc Andreeson's recent "It's time to build" essay. Our whole world is structured around how things used to work 40 years ago, and nothing significant can ever be changed. So we have to have these crazy, expensive hacks like Doordash to try to shoehorn in new services that people want, instead of making deeper adaptations as residents' needs and preferences change.
Show HN: Pyxis SDK – Create Raspberry Pi GUIs with HTML and JavaScript
Dozens of megabytes?

Pretty sure Hotmail (which at the time was like 20% of all web traffic) was still offering a whopping 2MB of space when Gmail launched. It was only after Gmail came out that they started bumping the quota from where it had been since the mid-90s.

Gmail was a HUGE deal. People were going nuts over the invites.
Facebook moderator details trauma that prompted fight for $52M PTSD settlement
>But a local, profitable delivery service wouldn't need to be a VC-funded business. It could start out very small,

Which might not be sexy, might not make you rich overnight if ever, but gosh darn it might send the next X generations of your family to college debt free and put a pool in the backyard. We spend so much time in this world chasing financial engineering rather than focusing on business fundamentals.
OK, but this always happens. There are always problems with the old stuff (different problems for each) and all we have to do is overcome those problems and everything will work. But identifying what is wrong with something does not let us know what we should do going forward.

So what about the new thing: Matrix? What do we need to do there to make it so it does not fall into obscurity like everything else?
That's not entirelly true, there are for instance Python bindings, and I think some work exists on bindings for other languages. I just think they don't always have a lot of support until a case exists where it ends up being really valuable. Film studios in the case of Python.

https://docs.unrealengine.com/en-US/PythonAPI/introduction.h...
This is solid advice. If you want to get a PhD in computer science, read and understand this advice. It's similar to the advice I would give someone, which is kinda funny, since I only know what you're supposed to do after having done just about all of it wrong.
Your logic does not follow.

There are certainly less cheaters than if there were no anti-cheat methods. To use OP's example, an open source urine testing procedure would be trivial to game. The same thing goes for open-source multiplayer games.
You mean temporarily during the Covid period or for the whole program? As with the sibling poster, I don't think it's a great idea for the whole PhD. But maybe I'm just old fashioned :)
Heh. Believe me I know. I played the Fortran version in high school. Been obsessed with interactive fiction since 1979.
Car brakes are very simple (all brakes really). Anyone can change out a part so long as they understand the basics of assembling things.

Pretty much any part on a car the wears or is part of a system that wears can be swapped out by an amateur.
Show HN: Procedurally Generated Artificial Life
We have recently completed a private beta and opened our software to more folks.

Here’s how it helps build functional and beautiful apps on RPi:
* Boots as a full-screen web browser
* JavaScript APIs to access common interfaces, like UART and GPIO
* Settings app for device and application management (choose which apps to start on boot, upload apps from flash, control screen orientation, etc.)
* Application examples and demos
* Remote debugging from a web browser

I’d love to hear feedback and what features do you guys think would be useful. We’re in active development, and can make it happen fast :)

Thanks!
Godaddy confirmed it was hacked and the data of 28,000 customers was breached
That's what you got out of it? Google doing a good job? They sent an email with no guidance whatsoever.

These guys went above and beyond what most developers would've done, which would have been to contact support until they get a clear answer.

This only alienates the extension ecosystem. And this was the primary reason I switched to Firefox. Google is the new Microsoft. If I remember correctly, they started Chrome exactly so this very thing wouldn't happen.
Food delivery companies should be a lifestyle business, not a megacorp. There's definitely room for a dozen companies of a few dozen people working on delivery apps, and for a few thousand integrators across the country helping businesses install - And that's it. The amount of margin you can squeeze out of these companies, sustainably, is 5-10%. 5-10% of gross restaurant profits is still a very big market. But it's not a winner-take-all

Look to Dominos as a model - I've been following their reinvention as a "tech company". Dominos corporate doesn't own many stores. Local affiliates do that. What Dominos corporate does is half logistics (Getting shipments of pizza products to stores, negotiating bulk rates) and half tech (Running the ordering systems, website, and marketing apparatus).

In some ways, they've long dealt with the "uber" model problems of employee/contractor divide. Stores are mostly owned not by corporate but by small local companies. Those small companies do actually employ their workers, but don't have the same problems that giant business do, because they are "small businesses". In return they are a lot more autonomous than Uber city-managers, and the "corporate" entity takes a smaller cut of the profits than Uber does.
It's difficult, but it gets a lot easier if you can send requests in. If you can force some kind of deterministic (not salted) crypto calculation to happen with a particular piece of key material, over and over again, you can use the same correlation technique that works for extracting GPS signals from hundreds of dB below the noise floor.

People have also done this with analysis of the power consumption of crypto hardware. I believe this was used against Trezor devices.
I have a firewall appliance at home.

One day I noticed that some of the stuff I blacklisted (mostly ads) started showing up again.

Why? Firefox's new DNS over HTTPS was bypassing all my firewall DNS rules.
* Courier wants to get paid as much as possible

* Restaurant wants to get paid as much as possible

* Platform wants to get paid as much as possible

* Customer wants to pay as little as possible

And the customer's baseline is "pay for the cost of the food only, and 100% goes to the restaurant" like an old fashioned, called-in take-out order. This allows (at baseline) $0 for courier or platform, and every dollar increase in price (for courier & platform) seems unfair, i.e. "why does it cost more." So some platforms hide the extra cost & extract it from the restaurant, which upsets the restaurant, and often upsets the customer when they find out.

Really I see no way "food delivered hot to your door from all over the city, selected & ordered with no human interaction" (and lets not forget "with returns, customer service, refunds" etc.!) can be an "inexpensive" service, unless the costs of the courier or the food itself go way down. Restaurants already charge $14 for a hamburger & $7 for fries, that doesn't leave a lot of wiggle room.

I'm very curious to see how it all shakes out, because this covid situation (which changed delivery from "luxury" to "necessity") is going to be going on for the next 12mo at least.
I was going to say something similar. A lot of the drawbacks from flash sites also apply to current SPAs. I know you can get usable and SEO friendly SPAs, but it's so much work compared to plain HTML files or templating in the backend.