skysight-inc/HackerNews huggingface dataset:
Rare earth minerals aren't exactly what you think. They're pretty evenly distributed across the entire earth's crust. The amount in China is equal to the amount in the Brazil and Russia combined. There's a lot in Australia, the US, Greenland and a whole ton in Vietnam [1].

Yes, China produces a lot right now, and yes they're considering it a strategic issue, but it's not because China is the only place that has it -- far from -- many countries have similar quantities. China only has 1/3 of the world's known rare earth supply. The name is misleading, because they're anything but rare.

The reason China produces so much is because they're willing to pay the environmental cost of extracting them, nothing more. There's plenty of those to go around, too.

[1] https://geology.com/articles/rare-earth-elements/
I'm sure Hitchens was against all dogmatic religions and ideologies.
ESA is also the most useless one.
Godwin's Law has also been explicitly suspended by its originator for the duration, not that it applies here.
An echo chamber? I find one of the more compelling reasons for being on HN is the strange cross-over and variety of posters (age, industry, geography, etc).
Memory is really cheap, so I wouldn't base any decision on the current public market for these devices. You can definitely get an FPGA board custom designed, debugged and delivered within two weeks in China.
It's actually a complaint of mine that I can't mostly buy these for $1-2 on Amazon and call it a day. Rather I have to head around the web and find "free" copies that may or may not be legit or buy collections off Amazon (which may be OK). But, yes, it's annoying I can't legit just pay for the whole collection, much of which is pretty old.
I've always wondered about the practical side of how GDPR is supposed to work for companies outside the EU.

If you've got actual stuff in the EU, it's easy. You get fined under GDPR and if you never show up to argue your side in court or an administrative hearing or whatever, they seize your real estate or bank accounts or physical servers or whatever, and sell it to pay your fines.

If you're US-based, how does it work? Hmm, if you're a modern shop you probably have stuff hosted by big companies, like servers on Amazon's AWS or code on Microsoft's Github. Then the EU could presumably tell those companies to stop hosting your stuff, or they'll become liable for fines as an accessory to the violation. Microsoft and Amazon probably have a lot of bank accounts and physical stuff in the EU that could be seized and sold, so they couldn't simply ignore the fine. They'll probably drop you as a customer immediately once Europe starts making them pay fines, and maybe try to sue you in the US court system to try to recover those costs.

I've never heard of this happening though. So maybe this isn't actually a thing.

If all your stuff is on US soil, and you're careful not to use providers with any European presence, how would they do it? Does the EU have some way to order all European ISP's to blackhole traffic from your company's IP ranges? When your executives come to Europe for vacation or conferences or whatever, could they get hauled off the plane in handcuffs and taken to a European jail over your company's GDPR violations?

Again, I haven't heard of this actually happening. But it seems to me that would be how they'd do it, if they really wanted to prevent overseas companies from simply ignoring GDPR.

If there's no threat of enforcement, why bother with GDPR at all, unless you're planning on having seizable stuff like real estate or bank accounts or physical servers in Europe someday?
Ok, we agree that Leninism leads to oppression. My point is that, as far as I can tell, Chomsky doesn't agree, and the same is true of many on the left. And that this is why he took the position he did on Cambodia, and why so many defend him.

Let me say some about where I am coming from. I have been interested in these issues since the late 1950's. At the time the left was split over Stalin and the Soviet Union. Many of them said they were wonderful. Many others said they were terrible, and this was the inevitable result of leninist philosophy.

Later like with Solzinitzen, it became impossible to defend Stalin. So many on the left switched to arguing that leninism could turn out fine, and it had gone badly in this case because the leaders had fallen away from good communist principles. It seems to me that this is Chomsky's position, and many on the left who defend him.

But you seem to be a lot more familiar with Chomsky than I am. So let me ask you, what is his position on leninism?
> For example, you can't do `gpg --decrypt foo.txt.gpg | nano | gpg --encrypt` because keyboard input on the console is handled through stdin.

I actually had a alias at one point that did something along the lines of (IIRC):

| editor | -> | editor -i /dev/fd/3 -o /dev/fd/4 3<&0 4>&1 0<&2 1>&2 |

Since stderr (aka &2 aka /dev/pts/whatever) is opened read-write, you can dup it onto stdin to recover the terminal. Ideally, every editor should just support reading from stdin, interacting via stderr[0], and writing to stdout as a command line option though.

Edit: 0: or /dev/tty as jclulow suggested.
Sure, but you're implying China sources most of its minerals locally, when in fact they do most of their mining in Africa. So they are hoarding a larger than proportional amount of rare minerals in order to benefit themselves.

> The reason China produces so much is because they're willing to pay the environmental cost of extracting them, nothing more.

They're offloading it onto Africa, so they aren't really paying it themselves.
Additionally, a book can't even be updated or patched, which makes it inferior to the npm package manager.
I agree with you but I also think there's a problem with police in unions. I find it unethical, and it's clearly not working, for a government entity approved to inflict violence on a population to organize and ensure the violence can happen without any accountability. The government needs complete and total control over police to fire and discipline them as needed when they're literally murdering people. It is not reasonable to allow a group of citizens the ability the deny basic law enforcement over union disputes.
Maven central will let you sign artifacts with any published key you like, but one thing you can do in theory, is verify that new releases are signed by the same key as a known good release.
I am not aware of anyone actually doing this though.
Thing is, the expected consequences of global warming are very much not uniform. Some regions will become much less habitable, but others will have their agricultural capacity increased. So it really matters which 20%-30% of the populace will be affected and how that relates to the global power balance.

Many of the currently wealthy regions could still say "why would you want colder winters?" because they can still breathe in summer (and would not want colder summers) and the locales becoming uninhabitable are somewhere else inhabited by someone else they don't care about.
I think PredictIt is only available in the U.S., their identity verification requires a U.S. address.
I think one of the big things that you can do is split up the data gathering and data analysis.

Kind of like we don’t trust the companies to audit themselves, instead we have an outside firm.

In this model, a researcher would create a hypothesis and collect the data. Their team would write the background and
methods sections of the paper.

Then the entirety of raw data would be sent off to a third party for data analysis and they would write the results part of the paper.

The original team would then write the discussion part discussing the implications of the study.

All papers would be required to be made public.

The idea is that there would be specialized firms that do the analysis on the raw data for everyone. These would be carefully audited and certified by the government. They have no incentive to play statistical games. If they get caught cheating, then they have to pay for all the analysis on all the papers to be done again by a competitor and if any errors are found in a paper analysis it is automatically retracted. While the this re-analysis is going on, all papers would be quarantined with a note stating the paper is having its analysis redone. This incentivizes the analysis firm to be ethical, as well as incentivizes researchers to pick ethical analysis firms.

Separating data collection from data analysis would help align incentives better.
Slowsort–A Pessimal Sorting Algorithn
Remote work and remote work with people in different time zones is a totally different thing, I'm not sure why they get lumped together. I'm on East coast of United States and don't mind working with people on West coast but further than that would be a problem.I've had jobs where everyone went out to lunch together and it was fun,but I've had jobs where everyone just wants to eat lunch at their desk and go home.
> Quantum magnets are promising platforms for dissipationless current

Does that mean that we can produce long-distance very efficient power lines that don't need superconductors?
You don't find it strange that so many people are homeless ?
Why do people think he's qualified, PayPal?
I'm not the original commenter, but I feel similarly. Perhaps offering some thoughts on sections 3.1 and 3.2 could foster some discussion.

Essentially, the hypothesis is that dreams are some kind of regularization that the brain performs on learning to prevent overfitting. The authors propose a couple of different arguments for why this may be useful (from deep learning) and why dreams in particular is where this regularization might happen (from neuroscience).

I don't think anyone would object that overfitting is bad and regularization is useful. I might even agree with the author that some kind of anti-Hebbian or noise corruption may be happening in the brain to help with this. However, the implied analogies in this paper between the tricks used in deep learning and dreams feels really "just so" to me.

I think their main evidence is that:

1. Dreams facilitate learning
2. The dreams we experience generally reflect the repeated task we experienced during the day
3. We often hallucinate variations of environments, not the exact environment we experienced

I think overall from this, I feel it is fair to say that the brain does something at night to help improve learning. It's not immediately clear that this is analogous to dropout, training augmentation, or generative models used in deep learning. It is even less clear whether dreams are truly needed to perform this. The authors don't really dissociate dreaming from sleeping in most of the literature that they cite. Remember that your experience and the weight changes in your brain may not be that highly correlated. Many neural changes may happen during a dream which are not correlated with your conscious perceptions/recollection of that dream.
They still do collect telemetry, but they've gone to great lengths to implement GDPR for everyone instead of just the EU. I do like that they provide a viewer to see exactly what is getting uploaded and offered easy ways to adjust how much data does get uploaded.

https://www.microsoft.com/en-us/p/diagnostic-data-viewer/9n8...
> "Trading Trump 2020 and other President 2020 contracts is not permitted by residents of the United States, Canada, the European Union, the United Kingdom, Singapore, the UAE, Cambodia, Turkey, mainland China and Hong Kong SAR, and other FTX prohibited jurisdictions."

https://help.ftx.com/hc/en-us/articles/360039118112
That was the case for me few years ago. But I decided to set up mailserver once more recently and Gmail to my surprise accepted my mails. I configured everything mentioned in article.

That said, my outcoming mail traffic is almost non-existent outside of few test emails, LoL.
Right but that is a result of stimulus, and an increasing deficit, giving people (international economic agents) less faith in the value of the dollar. Sure, these things are related to the economic effects of the pandemic, but I was trying to focus on the longer term effects of the economic relief that's being done and less about the semantics of whether we should have done stimulus to deal with the pandemic (which seems like a reasonable thing to have done).
That book is a collection of very short stories. It's fine given that focus but I read through it recently and I don't personally find much in there that I consider to be particularly great.
"The major cities in which rare earths were mined are Shandong, Inner Mongolia, Sichuan, Jiangxi, Guangdong, Fujian, Hunan, and Guangxi." [1]

Africa has relatively little in the way of discovered rare earth deposits. There are 50X as many known rare earth deposits in China as in South Africa, and that's the largest source in Africa. They are very much mining it at home. If they're getting them from abroad they're not "hoarding" them, there's a market, and other countries could just as easily buy.

Lots of articles can back me up here, it's blighted the land. [2, 3, 4]

[1] https://en.wikipedia.org/wiki/Rare_earth_industry_in_China

[2] https://www.theguardian.com/environment/2012/aug/07/china-ra...

[3] https://e360.yale.edu/features/china-wrestles-with-the-toxic...

[4] https://www.bbc.com/future/article/20150402-the-worst-place-...
Yep, natural gas. I feel so mixed about it. I grew up with electric, and the responsiveness of gas is wonderful. But piping an explosive substance into the house such that a leak can destroy this house and the neighboring ones is pretty dodgy!

I think there's something to be said for its energy efficiency (it doesn't suffer the same transmission losses, right?), although of course if you can get electricity from renewables, electric is better. Best would be having a local biogas digester.

I find it a little silly that you say "normal cooking" doesn't burn carbon. Normal cooking is over wood fire, don't you know. :-)
I'd imagine the (apparent) need to process, what, 12ish of these per weekday has something to do with it. How many can you manage in the "pipeline" at that rate? What's their staffing like? I bet they're staffed as if the police would at least kinda cooperate, so if they don't then there aren't enough personnel to follow up on any but the most clear-cut and serious cases with a bunch of public evidence already available so they know it might go somewhere if they put in the hours.
Probably not, no
> We bought a smallish house (1500sqft)

> We don't have offices. We both have to work from the living room/kitchen.

I don't understand this. Are the rooms giant, or does the 1500 square feet include the lawn? That is 140 m^2, basically two family-sized apartments put together.
You can actually use CF cache api in their 'workers' to accomplish this.
Do people really need to continuously see all the noise like .... the working directory...?

I can't imagine using a CLI prompt without knowing what directory I'm in. How would that even work?
Many people who like scheme and functional languages have an averse reaction to more procedural or OOP languages. It's interesting that people don't grok it can go the other way. But this is HN so I guess I'll explain.

A few things (and for context this was 1996).

With the class I disliked they were trying to teach me a language and a complex concept at the same time. In a 4 month semester, half of it was spent just getting basically proficient in the language. So instead of learning one concept I'm learning 2. We were essentially using scheme to build a interpreter for a simplified scheme. I understand why we were implementing scheme, it's one of the simplest languages to implement and maps well to many concepts in CS. this is actually why the game studio I worked at used it, not that it was the right language, in fact it's caused a lot of trouble and they have a lot of c/python like in the language now

Scheme seemed like a pretty useless language as well. The book for it listed (in the forward) out how amazing it was and showed all the amazing projects done with lisp-like languages. That list started with emacs and then the rest was academic things I'd never heard of, which seemed like a joke. If I recall scheme had some pretty weak language library functions at the time as well. Also at the time I cared about drawing triangles on the screen.

[I will lose points for this but it's my POV] I tend to find people who strongly like functional languages a bit insufferable, especially academics. I tend to learn by getting a real world project done, and I like tools that let you build real world things. I don't care anywhere near as much about form of the solution. . Functional languages seem to gel better with people who care about the beauty of a simple proof. I hate proofs. Also in much of the work I've done, the folks who really pushed for functional languages didn't really understand that most of their coworkers were juts not capable of understanding those languages or thinking that logically. There's a reason (imho) that they're not as popular of languages.

I have written stuff in these languages since then. I did work in the (gp reference) scripting language and on its implementation in the engine. This got me real features (like a mission in an AAA game, and features for my mission designers in the engine). This seemed useful to me.

I spent about 3 months trying to use Clojure to do a highly parallel data processing work. It seemed to map well to the problem. However it was insufferably slow, and with required type hinting was essentially complicated java (lost the benefit). I re-wrote it in C++ in about a week and brought the processing time from 15 minutes to 32 seconds by leveraging the deeper parts of the machine (buffers, disk cache, physical cores) which were not as available inside the abstraction.

So it also comes down to I haven't found a problem that maps well to something like scheme that I need to solve. When I do stuff with interpreters I just grab ANTLR and java/go/c++. This is more maintainable for everyone I work with.
That's the approach I use with Linode. Unlike EC2 there's no browser-viewable system-log that shows the public key, but it can be retrieved using a web-based terminal session.

To find the fingerprint in PuTTY's obsolete format, the command I use is equivalent to the one you've given. It was provided in the ServerFault answer I linked:

ssh-keygen -l -E md5 -f /etc/ssh/ssh_host_ed25519_key.pub

I don't like comparing fingerprints by eye, but PuTTY doesn't make it easy to do otherwise. This issue doesn't arise with PowerShell's OpenSSH client, where I can just copy the fingerprint (in the new format) to the clipboard. (It lacks features like mouse support though, so I prefer to use PuTTY.)

To find the fingerprint in the new format for OpenSSH, I believe the command is:

ssh-keygen -l -f /etc/ssh/ssh_host_ed25519_key.pub

> I believe that this method provides as much chain of trust as possible.

Yes, can't do better than that. If your HTTPS session with your VPS provider has been compromised, it's all over anyway.
Basic set of checks-and-balances:

* Preregistration and adoption of open science practices

* Public access to research results, methods, and data, with some exceptions (such as PII)

* Federally-funded universities can't use NDAs or non-disparage agreements

* Federally-funded universities must respond to records requests under terms similar to FOIA (note that FOIA has requestor pay costs)

* Federally-funded universities must adopt transparent governance

* Salary caps at federally-funded universities and affiliated organizations

* Conflict-of-interest laws with hard enforcement

* Federally-funded universities must publicly publish research misconduct and alleged research misconduct. The latter is tricky, since you don't want to smear the researcher without proof, but you also don't want to trust results.

This really needs reform.
It is nice that you are trying to inform me but I am already aware of the information that you bring and your decision to bring it makes it seem to me as if you are uninformed. It is possible to conduct static analysis of a source code file that is not "compilation" in the sense that you would otherwise see with Java or C. Python's not really any different than PHP in this regard.
What would you propose measuring?
In addition, the trap isn't usable safely with shared libraries that because of signals. For example, glibc once it adopts rseq will block all signals during thread-creation making it impossible to use RET_TRAP. That's an issue that Firefox/Chromium has already run into and is one of the reasons why they are interested in switching to the seccomp notifier.
The trap also doesn't allow to continue syscalls nicely and - as Sargun pointed out - will require ptrace() to be used to inspect syscall arguments and so on. The notifier also has built-in protection against pid recycling, is more secure and is way more efficient.

This is somewhat unrelated to the seccomp notifier but since ptrace() came up I want to lose a few words about it. (And this is more a criticism of the interface not the implementation. I love Oleg who maintains it and is one of the few people who understand all its intricacies!)

As a rule of thumb: you can do almost anything with ptrace(). Which is why people not really putting an effort into kernel patch reviews often come up with the argument "Why do you need a separate api for that. You can already do that with ptrace().". To which the correct answer in my book almost always is: "Because it would be a horrible hack." Effectively, when introducing a dedicated api to do something that you can in some shape or form do with ptrace() is the equivalent to moving it from a debugging hack to a (hopefully well-designed) feature.

Hell, the history of CRIU is essentially the history of building apis out of ptrace() hacks (I'm being facetious of course.).

Imho, with ptrace() you're always in non-cooperative mode to some extent, i.e. you force the behavior on the task. The whole kernel code for ptrace() attach is literally "I'm your parent now." whereas features such as the notifier are almost always cooperative since the task itself is doing the work. Specifically for the notifier the nice thing is that all the work is happening in the task itself. This is especially relevant when you e.g. install file descriptors into the task which is a future patchset that is about to be merged.
I did my interpreter/PLT class in OCaml and absolutely loved it. I yearn for things like ADTs and pattern matching in other languages I use now :'(

Another benefit (I guess the primary benefit) was that my interpreter programs written in OCaml ended up looking nearly identical to my proofs/definitions. Doing it imperatively would add a nasty layer of indirection.
You seem to be right - I overestimated the mining efforts of China in Africa and assumed it was related to specific Earth minerals incorrectly.
Facebook users don't see those spam pages unless someone on Facebook sends a Facebook message to another Facebook user linking to them.

That's where the spamming is happening.
Google Play Services (GPS, what a 'we can talk about it at Starbucks' coincidence) is the name given to the collection of core services, plural. Gboard phoning home, core service. Offline Maps limitations, core service. Digital Wellbeing, core service. So on and so forth.

You can say that "core services" is "the important stuff," or you can look at the individual pieces that comprise "core services" and get some insight into Google's business rules for Android. Everything that can't be disabled indicates a GOOG business requirement.