skysight-inc/HackerNews huggingface dataset:
That's a good idea. I also feed fake data to those "extra-official" enlistments. But never thought about keeping a control to discover the responsible for the occasional leak.

In Brazilian drugstores, there are legitimate situations where they actually need your data, e.g., when you need some injectable medicine. In such cases, they need to send an official notice for government control, BUT they also ask you for an original document.

P.S.: one might argue that government shouldn't have access to data about injectable medicines you take. Personally, given the severe situation regarding drug-abuse of countries like ours, USA and others, I see some valid motivation in such tight controls.
Research fraud gets a lot of attention because it is so black and white. But it is a symptom of larger problems. One issue is that the pace of progress is slowing, and as a result incremental gains are more prominent. This is fertile ground for fraudsters, as they can produce results which are plausible enough while seeming to be an important contribution to the field. All fraud fits into this category. Nobody makes a new grand unified theory of everything which they know is bogus. That would be too much work for a start.

The other issue is the huge expansion in university size. Most of the fraud I've seen or heard about all happens in university research departments. This shows you the importance of their incentive structure. One can make things up and not only succeed, but do better than your competitors in this research setting, AND get a tenured position with life-long security. All competitive fields where achievement recieves external and highly persistent rewards suffer from this problem, whether it be sport and performance enhancing drugs or Ivy league univesrity admissions or even venture captial funding (Theranos).

The natural response is to ask for more regulation and structural change in how research is conducted eg pre-registration, different statistical standards etc. But this has the major disadvantage of making life harder for the honest people. It also requires the creation of some parallel work force to handle all the checking. Research is already so difficult. Paradoxical effects, where such measures increase fraud, are definitely possible.

There will never be zero fraud. The aim should be to change how research is done to make the experience more humane, train and mentor young scientists carefully and avoid perverse incentives. As far as I can tell, nobody has any idea how to do this. Instead they want to create investigatory bodies which will siphon off money that could be used for research, and then ruin lives pursuing some key performance indicator like N successful fraud cases per quarter. This experiment was already run in the USA with the Office of Research Integrity, and it failed. Malcolm Gladwell, who I am not a fan of in general, has a good podcast about it [1].

[1] http://revisionisthistory.com/episodes/28-the-imaginary-crim...
> now it's completely gone.

...From newer versions. Old JDK versions have been kept the same, and Java 7 & 8 are still in heavy use.

> you can now only get support for JWS if you pay or if you go through a third-party.

Not everyone needs enterprise support.
Bluntly put, peer review is an overwhelming, unpaid, unsatisfying, time-expensive task. The only step forward is to force the release of both data and implementation, at least for the highest ranked journals, this possibly opening more unpredictable cans of worms. It is the elitist academy model on one side, not working any more, against the democratisation of research, still and just a torrential flow of noise.
> all the noise

I'm sure it takes some getting used to, if you're used to something more minimalistic, but it isn't noise to me. It's a persistent indicator of where you are, and is usually easily ignored.

The benefit of it for me is that I always have "where am I, where are files in relation to here" in the back of my mind. While switching terminals, if what's in my mind doesn't match the prompt it's really jarring and hard stops me from doing something stupid on the wrong system or directory or as the wrong user.
I agree that business isn't really the right model for academics but the problems imho is that what an "outstanding academic track record is" has become so ambiguous that it's practically meaningless -- and I say this as a former tenured prof at an R1 institution.

I could write a book about this stuff. The stories I could tell about what's behind those "outstanding academic track records"...

The problem, if anything, is trying to apply a business model to academics, equating research quality with federal grant dollars, taking away real intellectual freedom protections, and then ignoring all the ponzi scheming and exploitation that occurs. Everyone has their heads in the sand, knows academics (at least biomedical research) is full of BS, and just goes on pretending like it's not because no one knows of a good alternative, or doesn't have the courage or power to change things.

What's funny [sad?] to me is that your description of PMs sounds exactly like the most credentialed, accomplished researchers I know on paper.

It's interesting to me regarding some of the examples in the linked piece. Ghostwriting reviews, for example, is actually seen as a good practice in a lot of circles because it provides experience to grad students with the review process. Those guest authorships? Very grey area between that and collaborative authorships. It's not the grunt work, it's the idea, right? Or is it that ideas are a dime a dozen, and actually doing the work is important? I can't tell which it is anymore -- it seems to depend on what benefits those in power.

Someone else posted something about how 1% of research is fraud, and 80% is bad. I think the percent of fraud is probably higher, the percent bad research is lower, and the difference is much more fuzzy than you'd think initially. The really difficult thing is that tiny incremental contributions is how things actually work. No one wants to admit this though. Bad research is actively incentivized, and there's credit bubbles everywhere.

The worst problem is that this credentialing bubble is everywhere with everything, as another posted noted. The problem isn't the credentialing per se, it's how it's detached from reality, the real demands of the tasks. Having a credential doesn't mean that the person is competent for all the tasks it nominally encompasses; conversely, those tasks don't necessarily require the credential that's often demanded.
Yeah but it still happens, and to people you care about who didn't deserve it.
I have a pair of Bose QC20s which are (or were, when I bought them) state of the art for noise canceling, and have a 3.5mm headphone jack. No app required and they even work as normal wired headphones if the battery goes flat.
A debate about open debate
Jibo, the social robot, is getting a second life
Do you know of any good resources for learning this stuff? I'm interested in being able to do this sort of thing on a small scale, but there seems to be an awful lot that I don't know I don't know.
> Old JDK versions have been kept the same, and Java 7 & 8 are still in heavy use.

But they aren't getting free security updates.

> Not everyone needs enterprise support.

Run it without security patches? That's suicidal for a system like JWS.

Or do you think there's some option that is still support but not specifically enterprise and doesn't cost anything? I would take a look at who historically contributes security patches to OpenJDK and think about if you free vendor really has the expertise you think they do to keep up with security attacks.
from the article...

>Mandatory Android App Bundles for Newly Published Apps in 2021

>The .aab file contains APK files for the base application and all supported architectures (ARM, ARM64, and x86), languages, and layout variants.

>This format requires giving a copy of your app’s signing key to Google so the Google Play Developer Console can generate a bundle with signed versions of each APK in the bundle; the correct APK for a particular device’s architecture, language, and layout are delivered via Google Play Dynamic Delivery....
I don't know if it's high trust as much as it's authoritarian. You do what you're told by the company and that's that.
You are Tim Baldridge and I claim my five parens.
I think you were confusing TinyRSS with Feedbin.

Tiny is hard to install too, but not as complicated as Feedbin that needs Redis
And where did they find a phone with Ethernet? :P
The claim was made that common usage defines meaning (I don't entirely agree), and that the masses had spoken, as it were, and determined that decimate no longer has any notion of 1/10th of something being removed, but rather the word's meaning is now functionally identical to destroy or devastate (I don't agree with this either).

My point is/was that if that claim is true, then the choice of which word to use is purely one of aesthetics rather than exercising any nuance of meaning or intent -- a regrettably poor evolution for a language.
hi i am new form this app or sum but can someone tell me about it come on.-_-
QC35's have a hardware button on the side of the volume buttons that allow you to change ANC. Not sure which model you're using.
I'm not saying it should be replaced with a government contract - just like, don't do it anymore. If you need to send something via the mail you just do it like you would send a package.

I really have a hard time justifying paying for the USPS when 90% of my mail is junk mail that I don't want. the other 10% I can probably live with not getting. I understand your point about the fire department, but I find value in that so I don't care if it turns a profit - but if I'm not getting value from the USPS and the argument is that someone who chooses to live 50 miles from the nearest town isn't able to get mail... it just isn't compelling to me.
> I think this guy is having issues because he is using

> Slack, which is known to kill any machine it is launched on

> (even high-end developer machines) on a lower end, ultra-

> cheap ARM laptop.

Their "apps" are essentially small web browsers, no wonder!

> That said, the PineTab has half the ram and a measurably

> slower CPU[1] (See A64 vs RK3399). It’s basically like a

> PinePhone with a big screen.

This is why I'm working on a lightweight X11 window manager, there's no reason why a UI should take up so many of the CPU horsepower and RAM.
The folks hit didn't have backups (if they did, well anyone can restore them), nor did they secure their db. One is forgivable. Both together get no sympathy from me. Rather disgust that some of them had PII from customers that trusted them.
Just saw the ruling from the judge in this case. Oregon lost and, in particular, was forced to concede that the police were identifiable as such by virtue of the evidence they themselves submitted to the court. See footnote #3 in the ruling:

http://opb-imgserve-production.s3-website-us-west-2.amazonaw...

---

It appears that the State has largely backed away from any argument that the federal agents were not at all identifiable as law enforcement. Mr. Pettibone acknowledges that their uniforms said “Police,” Pettibone Decl. [1-1] ¶ 3, and the video shows agents wearing clothing clearly marked as “Police.”
Decentralized peer to peer internet, powered by a network of cell phones and other devices. For this to work it likely needs to use middle-out compression.
Thanks for the mention! Developer here! :)
I am the developer of HACK for iOS if you want to check it out:

https://apps.apple.com/us/app/hack-for-hacker-news-developer...
Good to know about such clauses in GDPR and CCPA. I didn't take the time yet to read our own law in detail. I've read that it's gotten much inspiration from GDPR, but the articles I've read so far didn't mention such clauses, being more focused instead on aspects regarding data storing and sharing with third-parties.

I'm going to read it thoroughly within the next days.
So your argument is that any random person is in a position to evaluate whether someone else's "data shouldn't exist" and take unilateral action to delete it? And are you suggesting that in this particular case the person launching this attack is taking time to evaluate the nature of the data before taking action?

> I'll just assume that all the "victims" who don't want to go into too much detail about the "lost" data were playing fast and loose with their customers' private information.

Why the scare quotes? It takes some serious amount of chutzpah to advocate that it is a reasonable assumption to assume the data wasn't important and to use the lack of public complaint as evidence that the data wasn't really important. Why do you even think it was "customer" data?
For your last point, check https://toolbox.googleapps.com/apps/checkmx/check. Chances are, google doesn't like your DNS server answers to its ANY requests, regardless for them complying to the RFCs.
Rocks don't have moral agency. And the comment they replied to I think was clearly about the blameworthiness of the bad actor.

So I guess problem I'm having is with the equivocation between cause-and-effect responsibility and moral responsibility, which I think was exploited here to indulge in a fun little switcheroo by talking about something they didn't mean.
Very interesting to get a data point on this. It takes a new employee 18 months to adapt to this work style, and then 25-30% never adapt. I'd imagine that is impossibly impractical for most companies, ignoring even the cost of moving your company to such a system in the first place.

I could also see the much more limited decision space being a factor in this. You're talking about when to put in money, when to take it out, where, and how much. And you can clearly see how well it worked out in the end. I wonder how effectively such a system works when applied to the software space.

I do believe that the principles he talks about as being very valuable, so actively stress testing all of your beliefs, and then collective decision-making (sounds like wisdom of crowds). And I guess you'll never truly reach idealized collective decision-making unless you implement a system like this. So if you decide that's the most important thing, and the majority of the impact of your work is in the decisions that you make (e.g. once you decide to purchase this stock, implementation is trivial), then I guess it makes sense. But I think in software, the ratio of decision-making to implementation is skewed heavily in the opposite direction, lots of decisions are being made in parallel by your thousands of employees, and the impact of each individual decision is much smaller than at his hedge fund. Getting into the habit of pulling multiple to a whiteboard might already get you close enough for such circumstances.

There also seems to be an aspect of judging each other on the company's key values. So then you can get constant feedback from every meeting you're in, how much you live up to the values that your company believes in, and your opinion is then weighted based on how well you match those values. Again, I would question how valuable it is to do this and in what contexts. I personally tend to believe more in the idea of leaders espousing company vision and values, almost like a preacher in a church.
> herwise.. should AWS disable your website because you got posted on hacker news and now have a bill over your $10 limit?

YES!!!!, if you ask them to do so.

$10 is a arbitrary small amount, but what if it's a web app and we are now speaking about $1000? And tbh. for many especially young people just $100 alone is much more then they can afford.

Or better have also a option for a dynamic hard limit based on a multiplier compared to normal traffic.

Even besides private persons there is a good reason to have a hard limit for a lot of businesses (or parts of them). Especially if it's on non-essential things people don't rely on which have a limited budged. (Like a lot of things provided for marketing only.)

Heck even for payed service providers a hard limit can make sense given that it's high enough, as a form of last defense against intentional or accidental DOS like situations (I mean in times of auto-scaling some DOS situations became cost explosion situations instead).

The problem with billing alerts is that (assuming they work and get delivered in time and are set to an sensible value):

- You need to read them in time.

- You need to be able to react to them in time.

Both NOT trivial in for private persons and also small companies which just got started (or do mismanagement or are to tight on budged).

Like what happens if you get it when you are on a party? In the cinema? Asleep? In the hospital? On holiday currently outside of reception?

Somehow the idea that you will react in just a view minutes and then fix the problem, too (or shut the service down). Is a bit to optimistic.

Through yes in the given case he might have ended up with "just" a view $ in the best case or ~600 or so in the worst case. Still I think he would have been happy with service discontinuing once the price reached a view hounded $ (let's just arbitrary say 250).
These issues of research fraud come up often, but the root of the problem is a bit more subtle.

In North America at least, biomedical research labs operate largely as fiefdoms of the individual principal investigators (PIs). The actual research work falls almost entirely on the backs of grad students and postdoctoral fellows. The grad students need to generate "good" data in order to graduate, the postdocs need the same in order to gain real employment (with only about 10% gaining faculty positions themselves after many years of postdoctoral training). The PIs need such "productivity" from their trainees in order to gain the funding that keeps the labs going. The PIs themselves face success rates in grant applications that are often 10% or lower and, particularly early in their careers, their job security depends almost entirely on their ability to secure grant funding.

These competitive pressures create enormous incentives for otherwise conscientious people, all the way along the hierarchy described above, to fudge their research data. Research fraud is thus a direct outcome of a fundamentally-broken approach to the structure of research funding.

There are exceptions to that approach, however. The not-for-profit Howard Hughes Research Institute [1], and to an extent the intramural research programs of the NIH [2], offer funding for PIs to do what they do best, without the pressure of competing for scant funds. Coincidentally, some of the best science comes out of these sites.

1: https://www.hhmi.org/scientists
2: https://irp.nih.gov/about-us/what-is-the-irp
I'm an anxious ls-er. I unconsiously ls while I'm thinking in a directory, so I usually have a pretty good sense of my location.
Quantifying Attention Flow in Transformers (Explained)
Show HN: Listen to BLDG Evelyn – Chapter 9: Bad Blood
What? I don't read Chinese but Google translate tells me that 盲文 is Braille, and individually it breaks down to "Blind text".

The same standard would be if China took the word "Braille" and then in Chinese, it is named after the first Chinese person who read Braille.

If you think English speakers have an easy time saying "Siraitia grosvenorii", the scientific name, named after the "discover" Grosvenor, then you have some serious delusions.
This Weinstein mouse model thing is blown completely out of proportion, and is only so prominent because his own brother Eric put it on The Portal.

The point is that everyone knows mouse models are imperfect, but they are still useful. Pointing out one of the ways they are imperfect is fine. Pretending this is a nobel prize winning earth shattering discovery that is suppressed by the establishment is just annoying. Research about how mouse models are imperfect comes out all the time, eg there was a paper about how the relatively sterile lab environment changes the murine microbiome and immune system. Why aren't these researchers on Joe Rogan's podcast?
Personally, I've been burnt twice by Facebook, and I'm not ever planning on building anything on Facebook. First time, it was being unable to even get access to the jobs API (we had some fortune 500 customers that wanted use to help them do jobs on Facebook the right way) and the second time, it was arbitrary bans of pages, leading to our just shutting down any operations that were dependent of Facebook. Oh, and then there was the night I caught a hacker trying to buy $36,000 in ads via a chat agent's account. I'm still waiting for a call from Facebook support on that one.
The ability to control other's behavior is called power.
OK, but it still looks like N7+ has been shipping for almost a year so I think my main point still stands.
>The credential is almost all that matters, as long as they dont mess up massively.

Maybe the west coast is different but everyone I know (including a fair number of people who went to Harvard) who's in any position of power didn't have "tool around doing whatever and don't F up" as their career summary until that point. They had success upon success. While some of them didn't necessarily choose big grand things to spend that time doing, they were all successful at it. Nobody just went with the flow.

The "not bad but not great either" people who were just lucky enough to have opportunity early on but don't have the skill to keep turning the opportunity into success (or just want to chill and raise a family) tend to seem shoehorned onto career paths that dead end somewhere in middle management.
I've gotten servers from Hivelocity in the past, they like(d) to offer servers with the "enterprise" equivalent of these CPUs, I'm not sure if Intel still sells them, but there used to be a "xeon i3" basically, usually 4 core CPUs clocked to the moon, that supported ECC. They were really good!
> but woah boy their members get decent salaries

That really depends on the denomination.

Sure, there are pastors of evangelical megachurches flying around in private jets.

On the other hand, other religious groups often have quite poorly paid clergy. I remembering hearing about an Eastern Orthodox parish, where after paying for the building, utilities, etc, the parish didn't have any money left to pay the priest. So he is working a full-time secular job, his wife works part-time (as well as looking after the kids), and the priest does all his religious duties after work and on weekends. (The plan was to convert enough people to Eastern Orthodoxy that the parish could fund the priest's salary and he could quit his secular job; hasn't happened yet, who knows if it ever will.)

One of my former work colleagues was a Protestant minister. His church was too poor to pay him anything. He worked for Oracle during the week, and ran church services for free on the weekend.

A lot of religious denominations are struggling with ageing congregations and declining membership. Even if there is sometimes still a lot of money at headquarters, when you get to the periphery of shrinking local congregations things are often very frugal.
It's hard to know that a worthless research paper will always be worthless.
Your wilful ignorance of the differences between Monocypher and Libsodium does not befit someone of your rank. I suggest you read this: https://monocypher.org/why

TLDR: Libsodium is over 10 times bigger than Monocypher, it needs an autotools build system, and most of all, it doesn't support embedded targets. Monocypher is closer to TweetNaCl, except it's much more complete, and an order of magnitude faster.

Also recall that LibHydrogen was released not long after Monocypher. It appears Frank Denis felt the same kind of void I did. If Monocypher is as unneeded as you pretend, so would be LibHydrogen (which by the way is slower across the board than Monocypher).
You're just being personally abusive.