skysight-inc/HackerNews huggingface dataset:
It's a chicken and egg problem. Gas purchases are on the of the most common purchases in the US. Removing the ability to pay using a credit card would a) piss of owners of the new credit cards, b) likely cause people to use their old credit cards for longer and still wouldn't push gas stations to switch over quickly as most have atms and gas stations could insist on cash payments. Keep in mind that at least some of these gas pumps can't be upgraded but have to be replaced in order to support the new chip cards.
What should have been done is a combination of good incentives for upgrading early (maybe reduced fees?) and penalties for not upgrading within a time frame (fraud payments are owners responsibility after n amount of time, increased fees for dealing with fraud)
Ben insulted xQc and his community. He called them racists, low-IQ, etc. https://m.livestreamfails.com/post/82089

He seems to have streamed yesterday and the day before, so he was probably unbanned after 24 hours with a warning.
I don't think they are talking about memory management here, but simple API design.

In C++ you can write:

template <typename Animal>
void roar(Animal animal) { ... }

and call it like this:

roar(airplane); // How do Airplanes roar?

You can try to fix that with an "Animal" concept, but it turns out that if someone adds a roar method to a Vehicle, you can still:

roar(truck); // Trucks can roar... but roar expected Animal

In Rust, these things just cannot happen. If you write:

fn roar(animal: impl Animal);

then trying to call it with anything that's not an animal will fail to compile.

That's a good thing, but maybe somebody did wanted to call roar with a truck, and now you have to invest time into more precisely thinking which types should roar actually take, which types constraints make sense defining, how you categorize types, etc.

In Rust thinking about these things costs time. In C++ it also costs time, usually more than Rust, because you have to go way out of your way to prevent mistakes like the above. In Go you don't have to think about these issues at all because the language does not allow you to do most of this (except for interfaces, but that's another story).
I seem to recall my macbook (2011) being 16:9, but it turns out 1280x800 is actually 16:10!

It seems you're right for the retinas and upwards too, that's heartening[0]

[0] https://www.theverge.com/circuitbreaker/2018/4/19/17027286/l...
I'm skeptical too.

Unfortunately for folks who are good actors in other non free countries countries... I find any sort of development or real world controls that are in a seriously non free country... automatically suspicious.

Even good individual developers who have the best of intentions in those places could be subject to pressure and the likelihood we'd ever hear about it is near zero in many of those places.

Granted that 'could' happen in more free countries, but I'll hedge my bets there as there's a great deal more likelihood I would hear about it.
Hm strange, A bit unlike Bountysource. It would make more sense if it was before 2018 and there has been no activity on the bounty/issue and even then they should offer redeploy or refund
Agreed. You can only verify E2EE for the traffic you inspect, not for traffic you don't. If they open-sourced the client it'd help a lot, but I'd also like to point out that you probably have stuff in your current device that has DMA and network access that is not open source either (PSP, IME, 4G modem, and so on) and that could break that encryption too.

If you are under serious investigation I wouldn't trust anything "smart" manufactured in a country under that investigations jurisdiction.
Then time will prove me wrong. I would greet it with pleasure.
woops posted that from a different account, this is my main one :p
Someone points out in that thread the current screenshot of Apple Leadership page [0]

https://i.imgur.com/vPswdwv.png

https://www.apple.com/leadership/
Is there any research into making attacks like these less feasible? I think it's rather disconcerting that given a large enough botnet, anyone could take anyone offline that doesn't have the money and resources to fight it.
> Multiple monitors are slightly different: the physical gap means it’s not a seamless switch and not every task benefits.

Probably why ultrawides are gaining popularity.
I'm with you. I think this is really cool but I have a hard time finding a use case for it.

The use case for the other Snow products (Snowball, Snowmobile) are clearer, as they are for transferring petabytes of data to/from AWS without having to use slow internet connections. Snowcone could be used for this indeed, but at only 8 TB, the value proposition seems a lot less. Personally, I'd probably just suffer through having to spend a week doing a slow internet upload/download rather than paying for Snowcone.

Also, the articles talks multiple times about using Snowcone to upload the data for you, over your own internet connection. Why would I pay for Snowcone to do that when I could just upload directly to S3, without using Snowcone as the middle layer, and get the same speeds?

The compute aspect of it seems cool from a "im a tech enthusiast and this is cool" perspective, similar to how a Raspberry Pi is cool, but I don't see the real-world use case for hosting compute workloads on a rented Raspberry Pi. I would just buy a Raspberry Pi instead for cheaper.

What this does make me interested in is something like this, but purchaseable outright without renting, a la AWS Outposts but the size of the Snowcone. It would be cool to have a swarm of Raspberry Pi sized devices that I controlled entirely through the AWS console with AWS services, and it would open up some niche use cases like having a tiny server cluster in places where I otherwise wouldn't have infrastructure, like a remote research camp or rural community.
Didn't Zoom block a US based activist on the request of the Chinese government? I'm not arguing that there is complete subservience to the CCP but this censorship seems like a line was crossed.

https://www.nytimes.com/2020/06/11/technology/zoom-china-tia...

Edit: Let me also state that I'm not entirely sure what OP's argument was, considering the comment was deleted. I'm merely stating that there seems to be some cooperation with the CCP and Zoom.
yikes, if they ended up murdering Keybase and still ship crap, I will never forgive them.
As a web developer, I have Eizo ev2785 with 125% scaling and it worked fine so far.

From code maintenance perspective, I noticed that if you feel that there isn't enough space on your screen, it might be the right time to refactor and split it to the smaller chunks: extract another view partial, class etc.
Have you used a 4K display, for at least a few days? If you have, I still disagree with you, but if not, I’m going to completely ignore your opinion, because I find the difference in how pleasant it is to use a good screen just so vast. Sure, you can do things on a lousy monitor, but it’s terrible and you’ll hate it. :)

(My first laptop was a second-hand HP 6710b at 1680×1050 for 15″, and that set me to never accepting 1366×768. So my next laptop was 15″ 1920×1080, and now I use a 13″ (though I’d rather have had 15″) 3000×2000 Surface Book, and it’s great. Not everyone will be able to justify the expense of 4K or similar (though I do think that anyone that’s getting their living by it should very strongly consider it worthwhile), but I honestly believe that it would be better if laptop makers all agreed to manufacture no more 15″ laptops with 1366×768 displays, and take 1920×1080 as a minimum acceptable quality. As it is, some people understandably want a cheap laptop and although the 1920×1080 panel is not much dearer than the 1366×768 panel, you commonly just can’t buy properly cheap laptops with 1920×1080 panels.)
It's 2020. Which framework for SPA (chat/community/website) to use?
I can't figure out which SPA framework to use (React, Angular, Vue, etc...). Something that will stick around for few years at least. Something that will be best option for webapp.
I only have it installed on a spare laptop that I leave off unless I'm doing a meeting.

100% do not trust.
In C++ comparing them is unspecified, and theoretically can even change from invocation to invocation. But it's not UB.

http://eel.is/c++draft/expr.rel#4.3.sentence-1

std::less is blessed by the standard to work with any two pointers, so relational containers work with pointers.
Note that in both cases your undefined behavior can be defined if the set of valid pointers is contiguous and can be represented by the integers. In that case, the return value of ptr2 - ptr1 is the difference between the two integer representations, and ptr1 < ptr2 is true when ptr1 has a smaller integer representation than ptr2, and false otherwise.

So undefined behavior is not necessarily to be avoided. It needs to be evaluated on a platform-by-platform basis. It's not defined in the standard, because the standard is describing an abstract "computer" which supports the operations. However in the real world, with concrete computers such as x86 or ARM pointers have an integer representation and arithmetic and logical tests can reasonably expected to work, even if they have no standard definition in the abstract "C machine."

And it's tremendously unfair and probably a bug for any "optimizing compiler" to use that undefined behavior to do anything other than subtract the two pointers and return true or false when they're logically compared.
This allows for surfing and exploring the web in a non-structured way. If you're not explicitly searching for a site or a site doesn't comes up in a feed you subscribe to, then you'll never discover any of this stuff. Web rings help to decentralize the web and make it more discoverable again.
So yea, pretty much. I had to do this with a project from a couple years ago where we were moving a ton of images from a legacy colo'd server to S3. I can't remember how much data it was but it was enough to where it didn't make sense and would've taken for-fucking-ever to move it to S3 over public internet.

When we did it, we bought a drive, went to the colo, offloaded the files, and you have to do some stuff to kick off a job to let them know you're sending a drive and what kind and all that sort of thing. Then you mail it to them and they run an import into an bucket.

My guess with these drives is controlling the hardware makes the process significantly more efficient for them, and for the enterprise customers they're trying to move off colo and onto AWS.
Because the license is in 2020. I don't expect Apple copies full arch without grant. The license is for patent but not for arch, isn't it?
As a user, I am generally in favor of Apple requiring the option to purchase items and subscriptions through the App Store. I would never subscribe to, for example, HBO NOW if I thought I’d have to go through HBO (owned by AT&T) in order to unsubscribe. I want the guarantee of easy cancellation.

I am also fine with Apple collecting a modest fee for providing that service. That fee should probably be somewhere in the 2-3% range. Demanding what amounts to a 30% “introducer fee” is beyond absurd.

I also do not approve of how inconsistently Apple enforces their own rules.
When IT leadership talks a big game about security, as a skilled practitioner on the ground I still see plenty of opportunities. When you delve into details, a lot of that “serious business regulated entity with compliance auditing requirements” stuff is brain dead. Like, running vulnerability scanners that don’t even speak the same wire protocols as a the applications under test. Enforcing strict ACLs on UIs while it’s trivial to SSH and curl the backend APIs.

I sometimes wonder whether accounting is like this too. Is financial audit just as much of a fig leaf? Can a skilled accountant also spot dozens of ways to embezzle?
Coming back to C after several years, I now think one of the hard things about pointers in C is the C syntax for pointers, not just the idea of pointers in general. Eg, sometimes the type declaration wraps around both sides of the variable name:

int a[2];
int (*ap)[2] = &a; // pointer to array of int

It makes it harder to see what’s what.
No, in this case (inflation) it's an actual fetish and many "non-obvious" fetishes post their stuff on youtube instead of normal porn avenues. These videos are created and distributed with the intent of causing arousal
The speed is questionable in many countries where consumer internet connections already have 500mbit upload speed. But in the US I think bandwidth can be quite limited if you're not in a major city with fiber.

The other big part is pricing. AWS charges $ 0.09 per GB for outbound transfer, so getting 8 TB of data out of AWS via the internet costs over $ 700. Doing it through Snowcone costs around $ 300 + shipping.

Reasonable use-case would be transferring video material or high resolution sensor data.
The whitepaper is fine, it's the comments from Alex Stemos that make me think they are abusing the term.

https://twitter.com/alexstamos/status/1268061792527241216

He did not say they can't monitor calls.

https://twitter.com/alexstamos/status/1268061795572314113

If they can enter the meeting, either they have to get confirmation from the host who would send the keys to the person entering the meeting or they already have the keys and can enter the meeting and decrypt the stream.
Huh? Presumably the suggestion is to make the market freer.
I will say I just looked at my macbook air, haven't touched that setting myself and it is disabled by default in new catalina macs at least.
I am a long-term polyphasic sleeper. I've just always been this way. I have been told stories that as an infant I drove my family nuts with my lack of a need to sleep.

Now, I am 43 (in a few days), and polyphasic sleep has become a bit harder on me. Now, I am averaging between 2.5-3.5 hours each day but the real issue is if I get woken up. Example: a smoke detector goes off in the middle of the night. I can't go back to sleep because I will oversleep now. I am somewhat foggy for several hours after something like this.

Also, the opposite has been happening. I am on HRT and taking estrogen injections. On the day of my injection until about 2 days after I can not sleep. My body just won't allow it. Estrogen dominance has taken over. I am routinely up for 42-46 hours before my body gives in and demands sleep. I sleep 2-3 hours and I am awake. Not feeling replenished as I should and sometimes I feel like I need to be left alone for a long period of time so I don't inadvertently snap at my wife or children.

I'm happy to talk about whatever, AMA.
A classic example would be SICP, Structure and Interpretation of Computer Programs, by Abelson and Sussman. It is often discussed here.

It does present a series of case studies that (I recall)
are around 500 lines, but it's not so easy to count because the code is interleaved with explanation.

Although the code in each study is mostly self contained, the presentation is not -- the later studies depend on ideas and techniques introduced in the earlier ones, so it works best of you go through the book from beginning to end.

The code is very bare bones - it's all in the Scheme language, with no user interface except the Scheme REPL.
https://otr.cypherpunks.ca/

https://en.wikipedia.org/wiki/Off-the-Record_Messaging
They're 6 months away from becoming a case study in squandering momentum.
jsoftware.com

- GPL license
- Extremely well-documented
- General purpose
- Runs on any platform
- 64-bit
- C-like performance for many operators
- Interpreted, interactive development environment
- Package manager
- Near-zero boilerplate

https://www.jsoftware.com/books/pdf/easyj.pdf

"Array language" describes a pretty generic syntax format wherein an operator acts on multiple inputs. Functional programming is a style that nests nicely with arrange languages. If you know "R," just think of lapply. It's like lapply everywhere, but without the lapply syntax. Every function is vectorized.

People who aren't formally trained on loops or object-oriented programming tend to pick this up more easily. That said, you can do OOP and loops in J if you want to.
I've done the program twice and was one of the grant winners. I found the program super valuable, particularly the groups sessions. I really like the new continuous format and excited to keep participating. Nice work Kyle and team!
>And apple was late(!) to hires screens and to hidpi

Are you sure about that? It doesn't seem to mesh with my recollection.
Probably something to do with the fact that macOS has handled high-dpi perfectly since 2012 and Windows is still struggling.
Some expiry yes but 2 years sounds to aggressive. Either 3 years or only for bounties where there has been really no activity at all after 2 years.
This seems mostly aimed at SaaS/Uber4X type of startups where you can bootstrap an MVP in a weekend and have a customer by the next one.
Where's the content for startups doing innovative stuff in the long run?
You mean to imply that a business would just lie to customers?

Come on, the market wouldn't permit that to happen! They'd lose all their customers!

/s

Edit: on a less sarcastic note, I'd be less critical of Zoom if their software were open source.
If Apple gets attacked for this around the world, the change will come to the US.

I’m looking forward to it because Apple is one of the most petty companies I’ve ever had the displeasure of being forced to deal with as a mobile software dev in the US where they have a huge market share.
Openssl changes black list to block list.

Interestingly, there is no consensus on what terms are the best to replace master/slave.

Django uses follower/leader.
Drupal uses primary/replica.
Openssl uses parent/child.
Is there a separate Go pgrok, or was that a typo?

The reason for asking is I'd like to find a self-hosted ngrok solution for development.
It's definitely not cheap. As always with AWS.
We made a platform for adding a voice assistant to your existing application
When talking about petabytes of data is definitely faster to physically offload the data, ship it, and physically load it on an edge location.

Regarding the size of the data. Well, yes. There are companies with petabytes of data. Banking is one example that comes to my mind when thinking about petabytes scale data.
The interest rate is low because, as you correctly say, Fed uses infinite money from printing press to make it so. In other words, foreign and domestic actors already don't want to buy those bonds at the current rate, which is precisely the early stages of the process I've tried to describe in the previous message. It's just that they haven't started actively selling assets nominated in $. Yet. (Well, apart from Russia, which has significantly reduced amount of US bonds in its reserves)

Normally, printing money in such fashion (I hope we agree that Fed + government does essentially that today? MMT proponents just propose to make this process honest and transparent) would increase inflation, but in 08 this inflation got mostly "exported" into foreign countries and today, as I've said, it's compensated by low money velocity (see the Fisher equation). Money velocity was steadily dropping for many years and it's another serious indicator of structural problems of modern economy (one can view it as one of the consequences of the rising wealth inequality). But the main problem in my opinion is that I doubt that Fed will be able to drain liquidity fast enough when velocity starts to rise, which may launch all the described positive feedback forces, thus making situation geometrically worse.

A free lunch can not be infinite, one day you will have to pay. The scenario which I've described is just one possibility of how the current system may crumble.
Lichess is the best 'web app' I've used, bar none.
I use i3 but I'm sure there are Nvidia settings to control the x display somehow
Sort of EC2/EBS in a local NAS device? Interesting.
wow. maybe there are basic bio differences, and one shouldn't try to force oneself into this pattern... (WRT my comment elsewhere here.)
Previously, organizations only allowed creating public repositories, so they were limited to open source projects unless you paid $9/user/month. Now they enable free private repo creation for organizations, although many "business" features like protected branches still require the Team plan (now $4/user/month) https://github.com/pricing.
For upload it doesn't make much sense. For download it's less than half the cost compared to AWS outbound bandwidth to the internet.
Every state does this. It’s called escheatment.
Yup fair point. Circling back to Zoom, I think the trust part of this has been violated enough that such an inspector tool ought to be considered strictly necessary to use it if you are security minded. So in the end, there's not much of a point to the announcement imo.
You can audit the client either through source code or through very painful binary analysis.
Ah, so your hate speech label is one of those "depends on whom it is against" thing. Yeah. That's why I never take that kind of thing seriously.
I may be getting this wrong, but doesn't that slide show the PCA being done on multiple images? Each image is 321 x 261, which concats to a 83781 vector. Then they're repeating that for 32 images producing a 83781 x 32 matrix, which they then apply the PCA on to get 32 principle components.

When you have only one image, what's making up the columns of the matrix (assuming rows = 1D image vector)?
Guide to Outlining an Audio Course
Well it's working and a lot of people already have a PHP server they can use to host it.

I don't even know how to run a Go server.
this is why you should use scrypt vs bcrypt or some other memory intensive algo to generate hashes.
At $6/day it's fairly expensive for non-temporary workloads.
Is the generation instant? Behind the scene to generate its banners? I'm curious
GitHub was never fun for me, it's useful.

I'd be happy to see the entirely useless "Trending" page go away, along with a lot of the social features. They take up so much screen space.
> All Zoom users will continue to use AES 256 GCM transport encryption as the default encryption, one of the strongest encryption standards in use today.

I’m glad that Zoom is finally implementing E2E encryption, but I hate that they have been (and still are) advertising “full encryption” and using jargon like “AES 256 GCM” to deceive users into thinking they’re using anything more than SSL.
There are plenty of HN users who won't (or wouldn't, in an ideal world) use any US-based software because of NSA interference.

The issue is national origin, not ethnicity. Japanese Americans were thrown into camps for the same reason, but we're not talking about jailing anyone here. We're talking about avoiding a specific product.

Another difference is that Japanese Americans were put into camps regardless of how many generations removed from being Japanese they were. No one is arguing that CCP has control over Chinese Americans whose ancestors immigrated here in the 1800s. It's about people who literally grew up in China and/or still have close family there for CCP to threaten.
I would assume that this would be for gathering information from remote data collection nodes or from computers that don't access networks. Instead of hooking up with a laptop and some kind of portable NAS, you could connect a snow product to slurp up the data and then mail it to Amazon to upload. I think their selling point is the reliability of the snow family, and not having to worry about the data after the initial upload which can be super critical for some business models.
It's encrypted all the way from one end to the other end, we just also happen to have a copy of the key and can dencrypt it in the middle.

Technically, the exact packets of the data you send is E2E encrypted... but the copies they make for themselves aren't.
many eu countries have gigabit per second connections, so thats like 2300 infected hosts at least. not many at an internet scale.