skysight-inc/HackerNews huggingface dataset:
> Thorpe is epitome of the best of humanity: creative, fearless, and tenacious.

I guess we see what we want to see.

There are a lot of little red flags littered throughout the book. One thing that rankled me was his assertion that he independently discovered Black-Scholes before Merton/Black/Scholes and offered as evidence a chart that post-dated the original paper. There's a lot of stuff like that in the book.

Don't get me wrong, this is a person with many admirable characteristics. Just don't drink the Kool-Aid.
I would argue that even teaching math is somewhat political. Examples:

1. What is the teacher's take on students making errors - Do they immediately correct them? Do they give the student the time to come to a contradiction themselves, but possibly confuse them and other students? Something else?

2. What is the teacher's take on mathematical knowledge - is it there to be discovered, or to be created? How much of math is already known by academics and how much is still in the future? Do they teach concepts as fully given, or as challenges for the students?

Each of these and many other aspects of teaching could influence the student's view of authority and their own agency.
The importance of choosing the right game engine for your project
Also loaded very quickly for me. Static sites FTW!
> I don't care if you can explain SQLi to me

Huh interesting. I work in infosec (but not a hiring person). I would normally rank this as an important skill. Not because i actually care about getting an explanation but because half the job is getting non security devs to care about security issues/fix them/not make them in the future. In my experience it is really difficult to do that if you can't explain the vulnerability to them.
Ask HN: If you had a bookstore, what would be the three books you would sell?
Thanks in advance for your answers.
> The only thing that “saves” you from paying the ransom is good backups. But if a group is fairly competent, they’ll encrypt your backups too. So it needs to be offline.

This is the part I’ve never understood. Surely you should be backing up in an append only fashion initiated from the backup server?

My best guess is that this gets managed from AD as well, so they find it and take over?
> Be careful here. This is bordering on elitism.

Be careful about the soft bigotry of low expectations.

A generation has grown up thinking that skill/knowledge elitism is a real thing and that it's oppressive. Instead we should learn to identify people who do difficult things, recognise how they do difficult things well, systematically emulate their methods as we attempt difficult things, and constantly work at the edge of our ability.

The only thing that happens if we don't do difficult things is that we become people who can't do difficult/valuable things.
This goes places that probably aren't going to be much appreciated on HN. This is a hard problem to solve and it's complicated.
I'm in the same place as you are, not FAANG salary but my wife has a FAANG job and we have enough savings to both retire now (early 30s) if we wanted to. I'm trying to figure out what I'd do if I "retired". Tentatively full-time parent part-time tinkerer, maybe put some of my back burner projects on the front burner and see if I can get a bit of passive income out of them. Mostly I'm feeling the lack of time and energy to build things (material and immaterial) for myself.

But, while work isn't a source of joy for me, it is a source of structure. I'm still trying to figure out if my life would be better without it.
It took a second but I'm assuming this is some MRA bullshit? If you don't wanna pay for a date be up front about it and split the cost.
> you could treat 64 or 80 bits as secure

You're confusing statistically uniform with cryptanalytically secure. By that logic you can 'debunk' plain old hash tables because someone might feed you keys that all hash to the same slot.
https://news.ycombinator.com/item?id=23859489

https://news.ycombinator.com/item?id=23565192

https://news.ycombinator.com/item?id=23929490
That's mischaracterizing what happened. They were always winning, but hugely over-leveraged (they practically dictated the terms of their credit), and couldn't weather a regime change (LB).
I use Dart for my Flutter ios/android app and Typescript for my backend for the app. I don't think I'd even consider reversing that.

Why? Libraries.
Well now I feel bad! So this is an actual prediction of war or just politics being dramatised?
Their bricks are almost more like a tile. I can't seem to find anything good about why this was done. It must change the concrete to brick ratio significantly and something has made their buildings last a fair while.
Both actually. Employers are stingy with PPE and you're constantly surrounded by dust, fumes and potentially harmful chemicals. Keep in mind this wasn't some tiny shop that made fences, I was working on military prototypes and aerospace projects.

I switch to the industry during the Obama administration, but after 2016 people were feeling a little too comfortable with their misogeny and racism.

To final straw was my direct supervisor becoming more radicalized into the far right. Not a comfortable feeling when they guy you report too leaves a 9mm with hollow points on top of his toolbox every day. The guy hadn't read a book except for the bible in 20 years, got all his news from Facebook and Fox.
It's not often that I see things that are stupid but smart at the same time, so cool!
No because Pr(Infected) << Pr(Not Infected) even in the places with the most spread right now.
Where’s the demo?

Anyone can put up a page with a few quotes and a signup form.
It really depends what age people are--as well as family etc.

I do know people who have either done the FAANG thing, the investment bank thing, or beat the odds and won the startup lottery thing who have retired genuinely early because they weren't doing what they actually wanted to be doing--which could include traveling and kicking back.

But retiring 5-10 years earlier than the norm doesn't require much more than having had a string of reasonably well-paying jobs, being sensible with money, and being fortunate enough to avoid financial disasters.
> In the world of deep fakes and stuff like GPT-3 (which can be used for what amounts to deep fakes for text)

Exactly what is GPT-3 doing in the example? You can already write whatever you want, better than GPT-3 can. You can attribute it however you like. People have been attributing undesirable positions to their political opponents and personal enemies for thousands of years. Where does GPT-3 come into it?
See my comment below. I'm familiar with developments in welding, some of my welds are in equipment that are national security related.
it seems that it is viable up to a specific scale, and we're already past that scale.

Honestly, my imagination fails to come up with a remotely plausible math model of containment, say in CA, of further spread from the current 400K (4M after the CDC 10x multiplier with the most being unaware of being a carrier) cases in 40M population.
> I'm afraid that might be asking for too much subtlety from the law. :)

No I'm not asking for the law to be subtle. I'm asking for the law to not put its nose into things it has no business doing so.
It is not intrinsically difficult, it's made difficult by the fact that the companies themselves specifically want to have their infrastructure in the mix to have access to valuable user data. There's no particularly difficult challenge to sync the phone and watch directly, offline. A good chunk of revenue comes from services which rely on the data being in the cloud.
Ah, I suppose it seems that way, thanks.

I really had not heard of this; which was why I asked for a source, so that I could learn of it. The request was stupidly lazy, I admit; but I think asking (if done properly) for a source is one of the things that never should be met with disapproval.
Zero-knowledge proofs solve this problem. Hell, even simple private key cryptography solves this problem. Distribute private keys to anonymous individuals who somehow prove their eligibility and only allow key holders to participate in the community. Easy peasy.
And before fees, like 80-100%. But PNP came before RenTec and Medallion.
That method didn't work for me (if I am thinking of the same thing you are describing, not sure). I would soon routinely unblock Reddit, so the block would become useless in achieving its purpose and become just an annoying extra layer.

So what I did then was blocking specific subs (well, one actually, my national sub) in which I felt compelled to correct people all the time. On each browser on each computer I use, I installed an extension like "Silent Block" which allows to blacklist the URL you want with a regex (".* reddit.com/r/yourmostlovedandhatedsub.* "). Unlike /etc/hosts and similar methods, you don't have to block a whole domain, the control is finer.

So I can still freely view technical or whatever subs with which I don't feel engaged, and follow links to Reddit from search engine or other sites.

It's been over 1 year that I set up this system, and I never bypassed it. It's working fine for me.

Or perhaps Ublock blacklist allows this kind of 'fine grain' blocking too?
That's the first time I've ever heard anyone say that "MobX and React are conceptually similar".

MobX is technically based on an "observable" paradigm, but it's a completely different API and mental approach than RxJS is.

Also, while MobX is commonly used with React, it's really a UI-agnostic state management library (same as Redux).

I really wouldn't compare MobX and Angular at all. To me they look like completely different tools.
According to this TC article, it's basically illegal for a company to pay the ransom:

https://techcrunch.com/2020/07/25/garmin-outage-ransomware-s...

I sort of agree with that since if companies start paying up then suddenly that thing will be more and more widespread.
It is absolutely unreasonable and sad.
In my opinion, a great place to define that boundary is when you have to move to a completely separate app; unless something's majorly changed recently, you can't access the majority of Facebook or Instagram from the other app unless you end up in a WebView and login that way. At that point, you aren't using a native experience where they have the same level of access that they do from the actual app and the main issue about having the camera open isn't even relevant anymore, haha.

That isn't to say that Facebook Inc. (the parent company) doesn't have their hands in the Instagram pot, because they obviously do and it only seems natural based on their past behavior they'll integrate heavily and push way past bounds they should be allowed to. All of that said, it doesn't mean the other poster is wrong about making it known this is a problem inside of Instagram rather than in Messenger or Facebook (the app).

I understand where you're coming from; being able to deflect their transgressions on a child company and then toss it aside and rebrand when it gets too much heat isn't a way they should be able to operate; heck, I'm just as skeptical as anyone that this is just a "bug" and have personally disliked FB's practices for a while; however, it doesn't make sense to start treating all products from large companies as if they're all just one single thing. In my mind, I akin it to Google having a pretty gnarly bug in GMail, but then everyone not being able to separate it from Search; it feels like an apt comparison to me, especially since Google is just a few steps down from the nefariousness of FB in some people's minds.
I watched one of the first Spanish football games of the new season last week on TV, the audience was digital. It was very surreal, and felt like a combination of a video game and reality. Even the singing and cheering was added. I wonder, if they did that at the stadium too to help the players along. Very strange experience.
> dip a Bible in liquid LSD

How’s /that/ for a religious experience?
Love it!

I have seen people doing fun things with GitHub Actions for the new GitHub profile readme feature as well.

This community chess game is one of my favorites https://github.com/timburgan/timburgan

It uses the creation GitHub issues on the repo as the input method/trgger which is a pretty clever hack.
Yeah, the the comment does sound mean. Not to blame you, since you indicate that you understand this.
The digikam devs can be court at times, but that's mostly because many people show up with great expectations; mostly expectations of having someone else implement this or that. I shouldn't throw stones here really, I was one of those people a few years back.

The project is huge and the core dev team quite small [1], essentially just two people and the occasional drive-by. This is one of those projects that I'd really like to see someone figure out a stable revenue stream. I'd guess that a lot of this is not "interesting" programming, but rather tedious "clocking in, clocking out" footwork.

[1]: https://github.com/KDE/digikam/graphs/contributors
>I've never had the exact same effect even from two doses of LSD from the same sheet...

As a retired neurosurgical anesthesiologist (38 years) who has never taken LSD or any psychedelic/psychoactive substance, I found your observation very thought provoking.

More likely than not, the LSD on each unit on a given sheet is chemically identical.

Therefore, the only variables are 1) the amounts in each dose, and 2) the substrate on which the drug will act (i.e., your brain at a given instant is — on the whole — the same, but functionally totally different from second to second as pathways activate and connect).

I would therefore hypothesize that, more likely than not, most if not all individuals who have a strong response to a given dose of LSD will have different responses to repeated doses from the same sheet.

I'm hoping people who've taken LSD will school me.
Enabling automated "could be real" spam/noise
About 12 years I believe.
16 is hardly a child. 10pm? That’s insane and psychologically damaging to kids.
Is it any better to use images for styling buttons instead of CSS?
> NZ is in a similar situation as VN where a local transmission appeared today without known infection chain. It only takes one error and you're back to square 1.

Could you clarify this? I wasn't aware of any local transmission for months but I suspect an 'if' is missing from your sentence.

I think that a full breakout takes a lot more than one error and it requires a whole chain of them and a lot of systems to fail. We have had errors like this.

The battle now seems to be keeping those quarantine contained. There are near daily escape attempts and some are going to public places or covering significant distances.
But there already exist authentic videos of Joe Biden sniffing children without their consent. Doesn't seem to harm him any.

I guess we'll see if this is even an issue. Lying by making shit up is not as effective as lying by omission, and the mainstream press are _experts_ at the latter.
Google is extremely political. Search results are not trustworthy on anything political.
That's part of what makes life interesting, the amazing power of the imagination (often indistinguishable from reality), but no way of knowing what will actually come to be, except sometimes the passage of time.
How Games Have Driven Two Schools of AI Research
...and its hosted on an f1-micro instance! (https://devopsdirective.com/posts/2020/03/load-testing-f1-mi...)

Almost all of the load is handled by CloudFlare though.
> the marginal cost of distributing astroturfed propaganda online has firmly hit zero.

This is just not true. GPT-3 costs money to train, use, customize, and maintain. I would guess that paying people is still the more cost effective way to astroturf.

Also, if the argument is we have to ban anonymity, I strongly disagree. Obviously people shouldn't carelessly trust anonymous sources, but that's just common sense. Banning anonymity would prevent people anonymously sharing insight into companies, whistleblowing, talking freely without threatening their employment (e.g. SSC), etc. It would increase the chances of physical threat due to online action, and it would provide the people in power with far to much sway over speech.
A child seems more likely to harm themselves with a kitchen knife than a blot paper lying around. But sure, I would support laws that makes you legally responsible for safe handling of the substance, like not giving it or making it accessible to minors.
It’s not the physical locations that are making a difference. It’s the people and policies working together that make social distancing and contract tracing etc effective or not.
Right, computers do have loads of RAM. So just spin up a chromium fork for the UI, and a handful of http servers for the different background tasks, pull in a bazillion of dependencies, and... it's gone. The RAM, that is.
SARS is both much more deadly than COVID-19 and less infectious (in particular, people didn't seem to spread it prior to developing symptoms). Both of those things make contact tracing far more viable - the high hospitalization and death rate means that outbreaks could be detected really promptly and reliably because people turned up in hospitals with symptoms, and the fact it spread less effectively made it easy to track down the other people in the outbreak and quarantine them. On the other hand, COVID-19 is similar enough to the flu that contact tracing it should be even more futile than trying to contain the flu via contact tracing.

Also, if the things that worked successfully to stop SARS from doing what COVID-19 has done worked for it as well, then it would have been stopped just like SARS. All the western countries like the US, UK, Italy (I think), etc did SARS-style contact tracing starting really early on. It just didn't work this time around. There's not a huge amount of media coverage of this because it doesn't fit the narrative, but you should be able to find some.
Crypto/security is cool and amazing, but it's also one the least flashy parts of Computer Science. Purely in terms of overall reputation I don't think people view crypto as "magic..." a more accurate analogy is "plumbing."

The Magic comes more from things like games and computer graphics and deep learning.
This is completely missing what is likely the primary obstacle to adoption, at least in the US. Apple and Google require an entire state to commit exclusively to using a single app. Even though they use a protocol that would easily interoperate across jurisdictions and apps effectively.

City governments which could move much faster are unable to do anything. States are on fire dealing with others things. They also all want some smaller scale trial to happen first, but no one can do that according to Apple/Google policies. So they are all stuck in a chicken and egg problem...

(This is all according my sources working directly on such apps which were ready to deploy 3 months ago — but were completely stopped by the policy; I'm interested to hear if anyone is aware of reasons why this might not be accurate).
They don’t need to be involved at all. Getting coffee with a friend at 10pm on a Friday when you are 16 is not “parental neglect”. Anyone who thinks that the law should get involved with that has so much wrong with their worldview it is almost impossible to unpack. It is not a healthy outlook. And it hurts kids.
Haha of course I should have said "tables" not "rows".
Just to challenge the easy part (or is this a challenge to peasy), can you please expand on "somehow"?

What is your strategy here to ensure that only "real" people can get access to the private keys (and not real people proxying for an automaton)? How do you maintain this assurance for a long running period of time?
Kurds fear forced demographic shift in Afrin (2018)
Bill Gates hasn't made himself any poorer.
Most quant shops are not turning over thousands of positions everyday, the trading costs alone would be ridiculous.

But regardless, HFT usually means latency arb, not just trading a lot. There's a misperception that quant funds are making money on slight mispricings, but while I can't speak for all funds of course, this isn't generally true. Quant funds are much closer to buy and hold long term investors than they are to HFT firms.
Is it [1] https://en.wikipedia.org/wiki/Metabolism_(architecture) ?
It‘s so sad to watch, but compared to any other developed and affluent nation (and with equal time to prepare), the US is a complete shitshow at this point.

The complete lack of leadership and resulting power vacuum resulted in valuable time lost bickering, blaming and thumb twiddling that could have gone towards preventing the second wave. This is a community spread at this stage and another hundred thousand people are all but guaranteed to die. It‘s mindblowing.

Here in Germany, I‘m getting my test results within 3 days via SMS (usually same-day for positive results) and can enter it into an app to warn others.

Everybody wears a mask indoors and nobody but a very small minority complains. Social distancing is enforced by usually friendly police which the people mostly trusts to do its job.

It‘s just so sad to see how personal „freedom to choose“ turned into the achilles heel of one of the formerly greatest nations on Earth.
So this article is not what i expected.

I agree that hands on skills are important. And i agree that candidates often lack them.

But im not sure that the skills in the article are really hands-on skills.

For example, the article talks about picking up a book on tcp/ip. That's not hands-on, that is theory. I also question what type of cybersecurity degree program this is, where you don't learn how the internet works?

All the things in the article sound like stuff i would expect a "cybersecurity" degree to cover. They don't sound like things that need to be taught practically.
Minor nitpick, but "three years ago" the crypto world still did "worry" about Spectre and general transient execution attacks [1][2][3][4].

To me, the biggest thing about Spectre et al. wasn't the proof that CPU uArch can negatively impact security. Rather, it's the proof of information leakage from other processes and privilege modes, which is a drastically heightened vector than cryptography.

[1] https://ts.data61.csiro.au/projects/TS/cachebleed/ https://ts.data61.csiro.au/projects/TS/cachebleed/

[2] On Subnormal Floating Point and Abnormal Timing https://cseweb.ucsd.edu/~dkohlbre/papers/subnormal.pdf

[3] Predicting Secret Keys via Branch Prediction https://eprint.iacr.org/2006/288.pdf

[4] Exploiting I-Cache https://eprint.iacr.org/2007/164.pdf
All I meant was they're a bit similar in how one often centralizes logic into services based on observables which also cause globally visible mutable state changes.
New thread, post-team announcement: https://forum.manjaro.org/t/discussion-about-the-change-in-m...
The "Holiday Reminder" could actually send a somewhat puzzling notification about you needing to check out the GitHub pipeline for a production failure. I would for sure forget about even setting it up and would shit my pants on New Year's Eve... and then have a good laugh on myself.