skysight-inc/HackerNews huggingface dataset:
> As far as I know, nobody ever verifies the signatures in a systematic way.

If you'll forgive a semi-relevant ramble about SSH:

The situation seems similar with SSH. As far as I can tell, just about everyone goes with the approach of trust-blindly-on-first-use. I've made a habit of manually checking the public-key when I SSH into a new EC2 instance using PuTTY. It is not obvious how to do this. Existing tooling just isn't set up with it in mind.

The fingerprint reported on the EC2 system-log uses a different hash function than PuTTY uses. (This is PuTTY's fault. It's behind OpenSSH.) I was able to get an answer on ServerFault, but I was surprised no-one had asked the question before. [0]

With some lesser-known distros it seems to be outright impossible, as the fingerprint is not written to the system-log at all. Presumably the distro maintainers never check SSH fingerprints.

Still less relevantly: the trust-blindly-on-first-use antipattern is known euphemistically as TOFU, for trust on first use. This term can also refer to where the public key is manually verified by the user on first use. [1] Very unhelpful for a term-of-art to be so ambiguous.

[0] https://serverfault.com/q/996828/

[1] https://en.wikipedia.org/wiki/Trust_on_first_use
Fair enough.

Thought then I'm sincerely even more surprised you would say that any fuel tank on fire is a (relatively) equal problem.

As for hydrogen rapidly escaping and going straight up because of its low density, those properties I would only consider positive in scenarios where the hydrogen isn't reacting (being on fire, to be more precise). When on fire, quite the opposite. Buildup of heat on the ground might still be less of a problem than with heavier fuels (which indeed is a very real problem with those), but not much advantage of that once everything within a certain radius is reduced to the size of matchsticks by a powerful explosion.

But if you claim to be (some sort of) an expert, I'll believe you. I certainly am not, that much I admit.

I only based my opinion on what I've been told by chemists that I personally trust. They told me rather invariably that the engineering challenges for storing/operating hydrogen are such a bitch, that they are ultimately only a good for when you want something closely resembling a bomb, without actually being one (or just hoping it won't explode before it served its purpose). Like e.g. rocket engines.
You should be careful over-interpreting this stuff. Double descent is still poorly understood, and some [1] argue it is an artifact caused by wrongly assuming that the model complexity is a linear function of the number of parameters.

I would also argue that "the need for overfitting" is a consequence of broken benchmarks, rather than a feature of deep learning. Why else would adversarial examples arise?

[1] https://deepai.org/publication/rethinking-parameter-counting...
Why not setup budgets?

https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2...

I do this with my startups, so why not do this with your sandbox account?
Jeeze this is cool. It reminds me of some of my early fantasy books. Perhaps they do this in Eragon?

This link is from 2015, but it appears they're still going strong [0]. The business just seems brutal. They're combining long production cycles with a relatively "fad-ish" product group. I'm hopeful they can scale it up!

[0] https://fullgrown.co.uk
I agree, but we're limited by terminal emulators.
Not counting images in terminal (which can be done with a protocol few terminal supports), we don't even have Font Ligatures widely available.

https://github.com/tonsky/FiraCode#editor-compatibility-list
Companies finally figured it out that nobody cares about privacy.
Before the data is processed the data subject is to be informed in a manner (explicit and in plain words) described in Articel 13 of the GDPR, which in (1) lit. d sates:

"where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party;"

The rational behind this:

"The controller should provide the data subject with any further information necessary to ensure fair and transparent processing taking into account the specific circumstances and context in which the personal data are processed." (Recital 60, Sentence 2)

The right to object is Articel 21 of the GDPR. I am not citing the whole Articel here but it is worth reading however Sentence 2 of Recital 69 sates: "It should be for the controller to demonstrate that its compelling legitimate interest overrides the interests or the fundamental rights and freedoms of the data subject."
https://github.com/klange/toaruos

for the curious if the link is still slashdotted
Just because something is announced doesn’t mean that everyone is using it, or even that it should be used. Many projects are created by people interested in the idea of writing languages, so they go off and do it then tell some people. They may be trying to solve a specific problem or just exploring some ideas, and other people might also join in to go along for the ride. It does not mean that they solved all programming language problems, or that it should be used as a general purpose language, and especially should not be pushed into production.

Don’t mistake the number of announcements with people actually using these things. Many will last only a short time and then go away.

There are many other considerations you need to account for before you use a language for real work. The people constantly jumping from one fad to the next are not the ones you should be concerned with following.
It’s hard to say if this data is telling us anything notable. It seems like 11% of the NYPD has had at least one claim against them substantiated. But isn’t that to be expected? Each officer probably has on the order of a thousand interactions with citizens each year on the low end. Over a ten year period, wouldn’t even a high performing nearly perfect officer violate some rule within their complex policing guidelines just because they are imperfect humans, as we all are? Many of those violations are also likely minor and not material as far as constructing an anti police narrative.

The article notes that only 303 of 36000 officers (0.8%) have 5 or more substantiated violations against them. The particulars of those should be examined more closely perhaps, but overall I’m not taking this as a sign of things being irrevocably broken. It even suggests that minor tweaks (reforms) would work, as they have elsewhere like in Seattle.
Nothing is perfect, saying something is atrocious because it is not perfect is irrational.

Also, if you define "merit based" as "capable of improvement through own effort" then both "professional network size and health" and "residential location" fall under that.
Arthur C. Clarke: Childhood's End
The Samsung S10 line is water resistant with a headphone jack just fine.
That depends on what „something“ is and how it is rewarded in comparison to something else. And how you value types of rewards.

In my personal, political opinion it seems that being good at convincing others and being greedy gets rewarded way too much over creating direct value.
Always thought that a great statup idea would be to interact with dedicated server provider and offer on top of those cheap servers AWS like services.

The most common services like S3, Kafka, RDS (pg and mysql), Redis should be enough to cover most use cases.

With k8s and a dedicated smart team, it would be a possible adventure.

Moreover it can work great also on-premises. Several old medium business have their own physical infrastructure and they are not yet ready to move to the cloud.
Captured variables live in an environment, while non-captured variables live on the stack.
I don't understand what "CNAME a specific URL" means. (If you are thinking "can this be done in any reasonable way without GitHub adding the feature", the answer is "no": they would have to provide the feature on their end, to provide the right content given the right hostname, the same way many other companies have over the years, including Medium, which is but one of many possible specific examples I mostly bring up as I hear they recently stopped allowing this and it has correctly made people say others should no longer use the platform due to URL lock-in.)
Not at all. There could be some new vulnerabilities in MySQL that make even password-protected databases vulnerable.

As for us, we give access via an SSH tunnel, which requires public keys from certain IPs.
Match looks exactly how Rust’s match works and it’s one of my favourite parts of the language. Happy to see it elsewhere too.
> There should be a name for this kind of ridiculous hubris

Pseudoscience? To me this paper is no different from astrology.
Local Community Currencies
Don't know if Interwetten is available in North America; it would be my choice as a European. [1] Also, William Hill has a politics market.

PredictIt is a US-based prediction market, which should work in Noth America, but is not available for many jurisdictions in Europe. [2]

[1] https://www.interwetten.com/
[2] https://en.wikipedia.org/wiki/PredictIt
Milewski has the best video lectures on category theory that I know of.

Thanks for your contributions, Bartosz!
If you're arguing for particular significance of a variable (grit), you can't go around controlling for all other variables with the same effect. It's not meaningful to see significance of a variable in a homogeneous cohort and translate that to the the variable being significant in the general population.

It might make sense that West Point students differ largely by grit, especially if all other variables are controlled for. That does not prove that the success of people generally is significantly affected by their grit.
Don’t think this is available on Windows 10 Home.
Yes, according to our current cultural conventions. It's all subject to rules we define as a society.
"In this paper, we consider the implicit bias in a well-known and simple setting, namely learning linear predictors (x->x'w) for binary classification with respect to linearly-separable data"

Hoping that this applies to deep neural networks is a huge leap of faith to be honest.
OT, sorry. Just desperate: Has anyone figured out how to build .msi from VS Code/vscodium, etc?
The only reason? Doesn’t shallow dismissive posting violate comment rules here?

It’s almost as if “every argument I make about frugalness and standards is maybe leading me to ignore other considerations.”

“Pros” continue to make use of their wired kit, and it changes the math of recurring waste problem; I’ve thrown away many fewer pairs of $30 earbuds since iPhone 7. Saved money and generated less consumer waste over the long run. Now scale that up to the iPhone user base.

You seem to believe human agency must be functionally fixed on how we used to do things. Or at least how you have been lead to believe we did. Turns out iterating away through new invention is how we do things. Or do you have your wax cylinders ready?

And for people that want a wire a 2” dongle is available. Given all else they get with a life that affords an iPhone, oofda what a stretch.

Let’s get to the back of the line with our first world sour grapes a bit. I can see how broader utility was enabled in a variety of ways.

Sorry you haven’t been able to cope with, really, such a trivial change in 5 years.
> ask a few people if they'd rather want the MIT degree without having any of the education or the education without the degree

I think at a glance, the degree without the education seems like you get the degree instantly without having to attend MIT, which sounds great. But a more nuanced comparison would be between being completing an MIT education with MIT having no record that you attended, versus paying for and doing all the work to earn an MIT degree, but then instantly forgetting everything related to MIT upon getting your degree. For knowledge workers, I expect a significant proportion would value the education more than the degree, especially since your degree matters less and less as you progress in your career.
The Twitch Streamer Who's Reinventing the Platform
Why should innocent users be punished? Why not just send a pic confirming you have full db access? This is just unnecessary vandalism.
Can a phone reasonably drive such high-impedance headphones anyway?
In the overall big picture of events, the lack of free speech and assembly in China allowed a containable outbreak to become the largest worldwide pandemic in 100 years. That doesn't make authoritarianism something to be celebrated, that makes it something the CCP should be embarrassed of.

Again, because of the lack of free speech and press in China, the only proof of what you allege publicized through CCP approved media.

Doubling down on authoritarianism and suppression of the press after initial authoritarianism allowed an epidemic to become a pandemic just suggests you can't trust the press in China without extensive independent auditing, which the CCP doesn't allow.
The problem is if I look at a population that has an IQ between 115 and 120 and scores 20-25% on conscientious I'll find that grit is far more predictive than IQ or conscientiousness. But this doesn't tell me anything about how important it is in the general population m

But you'd get far different results in the general population.
Everlane’s Promise of ‘Radical Transparency’ Unravels
> they still are, definitionally, thieves.

Depends on whether you assume the background property arrangements are valid. We call them a thief because we call this gasoline owned by this group of people we call a company.

Some other group of people might call everyone who buys gasoline thieves since they profit off of the negative externality they leverage on the rest of society.

It's all a matter of what you view as neutral and objective and what you view as a violation of others rights.
Might use the “SIMPLE” navier stokes algorithm: https://en.m.wikipedia.org/wiki/SIMPLE_algorithm
Cats like knocking stuff off tables.
Like, how does the local mom and pop correctly evaluate a person's IT chops?

Usually by price and unfortunately both mom and pop like a bargain - I've seen this play out more times than I would like.

Also how do you evaluate, say, a landscaper's chops? Or any other kind of contractor's for that matter? By doing research beforehand, checking what kind of reputation that person has etc.

Low-effort or lack of research gives you bad services, for which you pay in losses like these.
On a slight tangent, what if you dropped out similarly, went back some years later, improved your grades at the end, but ended up with an undergraduate GPA of slightly < 3.0? What challenges/possibilities would there be in getting into a masters or PhD program after over a decade working? Assuming for the sake of discussion a good GRE score.
SSH certificates avoid this issue and are used in real life. We make them with hashicorp vault, it works well and is really convenient.
Who is your provider?
Also https://www.usenix.org/sites/default/files/conference/protec... and https://speakerdeck.com/kaushik/tracing-and-profiling-java-a...
What did you think it was?
I think the most interesting thing in this paper is the fact that grit seems to be extremely important in certain circumstances, and much less important in others. It makes sense that getting through a challenge like going through West Point is going to require a sense of the importance of your goals. Most of the time, though, we're not in those circumstances and other factors are more important. Grit, as described, could even lead to a lack of flexibility in some circumstances, which could inhibit success.
Standard warnings: Social Psychology is not a science and should probably be ignored. "Grit" and "Intelligence" are so poorly and inconsistently defined as to be meaningless. This is controversy for controversy's sake
So another words, if the projects progresses (far) beyond it's current state, it will be worth of note. I agree! But I disagree that accepting everything is the best path to get there. As it is, it's burned away any interest I have in following this repo and checking in for inspiration when needed.

> It's much easier to curate when everything is in a single location.

PR requests are ideal for this.
What if it was a small business's inventory data rather than customer data?

Seems to me, there are a lot of things businesses could store in a database which don't necessarily need to be private, or which at worst won't harm anyone other than the database creator if exposed.
Seems like a lost opportunity to have a more nuanced position here. And when you can't think of a single case that could make you feel bad for someone, it's usually a sign that you don't have one.
I'm so torn on this.

I "only" had a bad situational depression but when I was at the bottom it was clear that nothing normal, pep talk etc was connected to my reality. And even long after that it was infuriating to be talked down by people with 'lazy' innuendos.

Yet ... I myself realize that in my brain there's a little 'will' part that you can focus on which kinda resonnated with the self part of depression and how you may (in time) give it a push to move away from the depressive state faster.

Sorry if it annoys you, I'm mostly trying to share my experience. Do the best you can in you context. Best wishes.
This is some great geochemical archaeology and fine instrument work from a well-built team with a strong multidisciplinary operation.

Progress can be achieved like no other when the project leader is the one who not only has outstanding instrumental expertise, but also performs the _experiments_ themselves.

Consistently over half a dozen major projects per year, this is high-performance operation.

If you're not dedicated to taking good care of your instruments, they won't even function the entire year.

For quantitation we've got one of the expensive benchtop models (and a retired one to restore), but they've got a _real_ expensive forklift model in addition, which makes this type of isotope analysis possible.

Only one reason I don't do any geochemistry or archaeology either, just produce boring old invoiceable paperwork.
> Grit" is self-reported on the "Short Grit Scale" which asks participants to rate themselves from 1 to 5 on statements like "I am diligent."

This is a pretty awful way to measure grit and makes me doubt the results
Could be a comfort thing, could be a "don't want to throw away perfectly good hardware" thing.
Good point. The moon is probably most useful as a testbed for Mars (since we can iterate much more quickly).
The sad thing is that many people will think it is Ok to give them this kind of private information, just in exchange for some crappy, useless app. 20 years ago, if somebody said they cared about how many steps they walked, or how many minutes they slept more than last month, or how many minutes they looked at the computer, you would classify them as mentally sick. Except for specialists that do research in these areas, there is no reason to keep tabs on minutiae like this. This whole industry is training people to behave as the mentally retarded, and give away all their private information for nothing.
I've found this useful to get started:

https://github.com/billtrust/terraform-aws-billing-alarm
There's probably still some untapped potential, but Wikipedia says:

> A gum can be produced from the bark which reportedly treats edema, while the dried fruits have been used as a diuretic.
There is no indication in this article that all of the databases had personal data.
What evidence do you have that intelligence is fixed? I believe there is evidence that it is mix of fixed and not fixed attributes, but I don't think there's any evidence that it is strictly fixed.
Out of interest who are your servers with? That seems a good price and might be something I'm interested in...
I am likely misunderstanding something here, but from that study it looks like Coronaviruses are the most sensitive to UV of any virus they found measurements for, however because they also have a much larger genome than most they are only the second easiest to deactivate by sunlight. In table 6 they have minutes to a one log decrease in active virus for Filoviridae that is a bit under double the Coronaviridae deactivation in sunlight value (SnS) in Table 2. I'm guessing that value should be linearly comparable that would leave an estimation of about one hour for a one log reduction under the worst conditions they measure in that table (that are all southern US, although the worst value is in April). If I have understood all that correctly, it sounds like a few hours (not minutes) in sunlight should be considered necessary (I'm guessing that would be a few minutes of UV sterilization).

Additionally, it seems to me that a mask would not all be equally reachable by sunlight and some parts might not be at all.
i don't know about the US, but in europe a ton of these smaller, local parties exist. (usually called something like managed infrastructure or thereabouts).
I'm curious about the Sony App. What information does it get from the phone? The only kind of sensitive permission it asks for is location, and arguably there's a functionality related to that (change the adaptive sound reduction as a function of where you are). The other permission it asked for is Bluetooth, which I guess is expected since it uses that to talk to the headphones. It never asked for anything else.

I didn't allow it to get my location and I can still get firmware updates and can use it to confirm the codec in use (that's the main reason I have it installed).
I opened this website expecting very little, as I know Apple has refused to deploy WebGL 2 (Apple is essentially always the stubborn bottleneck) and particularly as I am still running iOS 12.

It was glorious. It was smooth and responsive and maybe-weirdly fun to play with given how simple of a toy this little demo of a website itself represents. I had this momentary feeing of joy.

And then it popped up a dialog asking me to install an app. I think I want to go cry now about how fucked up the world is and how it is no longer possible to have good things on the web :(.
There's also Witchcraft Logging, which has the concept of "safe" parameters and is available in Go, Rust, and Clojure:

https://docs.rs/witchcraft-log/0.3.0/witchcraft_log/
This. There isn't much more to take away from the paper.

As an aside, there seems to be some sort of snowball effect that might confound a naive interpretation of the role of intelligence. For example, getting a high SAT score (and AP scores) is likelier to lead to Ivy admission. Ivy admission is likely to lead to above average training, as well as more influential social networks. This can lead to interviews with above average firms... etc. You get the picture.

Now, intelligence played a role in the high test scores and admission to an elite undergrad, and still plays a role throughout the journey of a successful (whatever the definition) individual. However, there are many feeback loops and amplifying/compounding first and second order effects as well. Quantifying the effect of grit, intelligence, etc seems very difficult.
> what we need is a large scale industrial use of CO2 that is not hopelessly energy inefficient

Unfortunately this is somewhere between hopelessly improbable and impossible, for two reasons:

First, our CO2 storage needs are in the tens of gigatonnes per year. At the highest practical storage density of pure CO2, one gigatonne is about 10^9 cubic meters - 400 times the volume of the Hoover Dam. There are simply no existing human product streams that are within even a couple orders of magnitude of being able to absorb that.

Second, CO2 is a waste product. Turning it into any other useful product will demand not just the energy gained from burning the fuel, but quite a bit more due to thermodynamic inefficiency.

There absolutely ain't no free lunch with regards to CO2 capture. It's perfectly doable but it's a pure cost that should just be government regulated everywhere ASAP.
Why on EARTH would anyone EVER need to update firmware for a pair of headphones? That's asinine.