skysight-inc/HackerNews huggingface dataset:
This article rubs me the wrong way, because the number 1 problem I see when people implement crypto is that they don't have a well defined threat model or understand how cryptography can assist them in addressing threats.

The issue is not so much that there might be a flaw in their implementation -- indeed you should use reviewed libraries instead of rolling your own to avoid flaws -- this is not specific to crypto, it's just as much true for IO libraries or memory management libraries as it is for crypto.

But what makes crypto unique is that cryptographic algorithms have very strict, well-defined, limited behaviors and there is generally a big gap between what people want to accomplish "don't let an attacker see this file" and what crypto will actually do for them "encrypt the file" and very often the use of crypto doesn't end up creating much value.

Here, people do think cryptography is some kind of dark magic, where they can "secure" something just by encrypting it, and it's incredibly frustrating to have to implement cargo cult crypto that doesn't add much in the way of real security just because a PO views encryption as an end in itself -- e.g. as a feature.
And you are free to do that to your kids. Leave everyone else alone.
A Neanderthal Sodium Channel Increases Pain Sensitivity in Present-Day Humans
Amazon has powered desks in new buildings as well. It doesn't solve the monitor positioning problem esp with multi-monitors and evening things out.
The concern is that low-quality anonymous sources will become so common that, even if anonymity isn't formally banned, most people will have to proactively filter anonymous writing the same way they filter anonymous phone calls today.
Based on advance512's answer, it sounds that way.
So having a unreasonable fixed guideline, that if consistently applied causes CPS intervention in many totally fine situations, is better?
An important part of any backup strategy is testing your backups on a regular basis. Perhaps it could even be automated...
Given my job has given me pretty decent access to a stat arb fund - this is simply not (universally) true.
Generalization: When "more speech" is too easy, "more speech" prevent "free speech".
Why stop there? It is obvious that poor diet and lack of exercise is much worse. Maybe if your kid can’t run a certain speed or has a bad BMI you get the jackboots at your door threatening to lock both you and your kid up.
Canceled out by the blind acceptance of the headline without reading the article here on HN.
Yeah I have an article about profile README hacks using Actions here: https://simonwillison.net/2020/Jul/10/self-updating-profile-...
I've been advocating for traceability by default. Then if a site wants to strip identity from comments they can. But then we have a clear distinction between places where you're not anonymous and those where you are. People can then choose who they want to interact with and listen to.
Let's say that it was in fact intended as a user experience optimization, as you suggested. If you were Facebook, and you now had access to the camera's feed when it wasn't in use, would you really be able to restrain yourself from violating the user's privacy? I imagine for Facebook it would be like seeing a freshly cooked pie on a window sill.
That doesn’t make it true.
It's like a Socialist version of Halt and Catch Fire.
> I can highly recommend the podcast Blueprint for Armageddon, about WWI as told by Dan Carlin.

I’ve been reading so much english lately, that I’m losing grasp of my native norwegian. (Yet I can’t seem to get my syntax quite right.) This is frightening and also the reason I’m always trying to find norwegian books on whatever subject I’m interested in — which isn’t always easy...
U+200C is ZERO WIDTH NON-JOINER, which doesn't make sense in this context.

Did you mean U+200B ZERO WIDTH SPACE?
dupe: https://news.ycombinator.com/item?id=23950892
It seems like the more common approach among people who use Java is to write the 300 LOC across the 8 files then use the library to generate JSON schema, rather than the other way around. I wrote it myself because I did not want to tell my team that they had been doing things wrong for years before trying their approach once.
How to Pull Images from Satellites in Orbit Using SDR (2017) [video]
Really cool. Would love to see this done with Beat Saber or some similar game (e.g. DDR).
More companies will offer remote work at price of staff job
Give it time (even though your idea isn't real-time enough to work).

Yamaha is already playing around with real-time fan reactions using sound.

https://www.revzilla.com/common-tread/yamaha-builds-remote-c...

I think the idea is pretty damned cool, and there's room for lots of new ideas here. I'll hold out for a virtual Disco Demolition tribute.
Software Engineering Daily and Software Engineering Radio for podcasts.
https://books.google.ru/books?id=V8_Saizq_88C&pg=PA119&lpg=P...

"...Pele had scored an unbelievable six goals while in a kind of trance-like state..."

Pele often played in trance-like state, feeling he can get through his opponents.
Meme warfare is not a new idea, but appears growing ever more sophisticated. Implication being, the value of attention and critical thinking is increasing exponentially as people struggle to navigate the information explosion online and to discern what really matters. Curious how people will evolve.
I've lost count of the amount of times I've been tested, and it never took more than 15 minutes. There are plenty of quick and cheap tests out there.
I guess I must be impervious to this smell, as I've held newborns and they did absolutely nothing for me.

MDMA and other psychedelics, on the other hand... there's no mistaking their effects, which in sufficient doses can be infinitely more powerful than people who've never taken them can imagine.
Nextcloud is self-hosted solution and there is plugin for it that allows you to recognize and cluster faces (to persons) using DLib: https://github.com/matiasdelellis/facerecognition. This might be close to what you need (while Nextcloud is huge software on its own, it is not best photo management app)
1. UK university academic (on sabbatical, consulting and adapting!)

2. Wanted to try something different... last software engineer post was 2010. I became very interested in Evolutionary Computation, so I went for a sponsored PhD position.
Even more funny (or sad?) is people reading an article with a headline saying it's Instagram, clearly quoting Instagram as saying they'll fix the bug, and then claim Apple is at fault, despite nothing in the article suggesting that.
I personally find languages that treat their users as stupid (providing facilities to the language designers but not its users) to be infuriating. Go is pretty much the paragon of this philosophy.
This reply strikes me as an uncharitable interpretation of OP’s statement. It’s also rude.
Did you have a background in research before doing the PhD program?
I didn't read the paper in depth. Is the benefit of dancing from having to remember a series of steps in addition to being physically active?

Just asking because a lot of martial arts forms require remembering dozens or even hundreds of specific movements in a specific order.
Your backups will contain all the backdoors that the attackers managed to deploy - so even ignoring the normal massive effort of restoring all your computers, you can't simply restore backups, you need to carefully audit everything that you're restoring to clean hardware, and you need everyone to change their credentials (and not just by appending "2" at the end) otherwise you'll be owned again immediately afterwards.
Oh nice, I saw that one on the front page the other day.

Didn't realize it was you -- great post!
If it is same software https://github.com/matiasdelellis/facerecognition has been using (DLib, King's face model) - I can say it is very, very good! Yes, there can be lamppost here and there, but it is miles ahead of OpenCV haar cascade
I’m with you on this. Doing something is much easier than resisting something.

That said, I also do something like OP to block out some sites, but that really only is important as I “get the ball rolling”. I noticed myself habitually tabbing to twitter or something whenever I got to a “hard part”
And the usage goes back to at least August 1975 (likely earlier):

http://archive.6502.org/datasheets/mos_6501-6505_mpu_prelimi...

"but including an on-chip clock ... in addition to the on-chip clock"
Wait until this happens to your car...
I presume the comment you're replying to is referring to this case in Vietnam today: https://www.nytimes.com/2020/07/25/world/asia/coronavirus-vi... Elderly guy with no travel history who rarely even left his home and has no ties to any known potential source of infection, only discovered as a result of him being hospitalized - everything about this strongly suggests that containment has already failed and Vietnam just hasn't realized it yet. (Also, they waited a whole week after he was hospitalized and tested positive before publicly admitting that this had happened? Ouch. Most recent public social interaction prior to symptoms was visiting a hospital? Double ouch. I really hope this doesn't say what I suspect it does about what's happening in Vietnam right now.)
Web of trust (or something substantially similar) solves this on an algorithmic level. The problem is that, to the best of my knowledge, we lack friendly and accessible UI tooling to support such a scheme.

Naive web of trust algorithms are likely to threaten anonymity in their own way though. Zero knowledge proofs might be able to facilitate a solution to that.

> and not real people proxying for an automaton

You can't prevent this under any scheme, only detect it after the fact. An authenticated individual will always be able to deliberately take actions on behalf of someone else.
Decent sysadmin should be able to setup automated scanning, know about OWASP, keep systems patched. That should be absolute baseline for sysadmin work. Checking for yesterdays hacks is valuable but that is called auditing and you should have checklist for that.

Pentesting should be focusing on hacking and uncovering stuff that was not in audits like making custom exploits on the spot.

Problem is that running scanners and checking basic stuff should be an audit but that does not sound as cool as "pentest" and "white hat hacker"/"cybersecurity specialists" sounds way cooler than auditor.
I was just trying to be funny. No offense was intended.
> Sweden seems to get it under control now. Cases and deaths are falling quickly.

The death rate has been declining pretty much linearly since April. Restrictions were lighter than pretty much everywhere else in Europe, and have been successively loosened since they were implemented in March.

But your comment implies that Sweden is "doing something" recently, and that there haven't been any results until recently either.

And neither of that is true.

> we will see in a few months when the people get tired and want to return to normal life

Uh, it already is pretty much normal. There are signs everywhere reminding people to keep distance, restaurants have fewer tables than usual, and large gatherings are still banned, same as everywhere else. There never was a "reopen" debate in Sweden, because there wasn't really anything to reopen.

But the media image of Sweden is incredibly distorted right now, it's pretty fascinating to watch what happens when a country goes against a major news narrative.
The one error is the spark that starts the forest fire. Yes, the forest needs to be dry. But we don't want to carry all the water every day to keep it wet.

The case here https://ncov.moh.gov.vn/ on "11:00 25/07/2020" seems to be a local transmission if the google translation is correct. The infection must have happened two weeks ago and they are currently contact tracing. Taking an average of 4 days, we are now on generation 2-3 of follow-up cases (or even more if the infection source/chain is older and has been spreading for a longer time). Let's hope that nobody else got infected and there are no asymptomatic patients running around by now, unaware that they are spreading it all over the country.

Taking an R0 of 3 (since they don't have any hard measures right now), we are currently expect 3 * 3 * 3 cases if this person somehow got it from out of country. Finding those cases could take a bit of time and then we would look at 3 times more cases to find every 4 days. Assuming that some youngster got it and this older person is the first one to go to the doctor we could easily have 3 * 3 * 3 * 3 * 3 * 3 = 729 cases by now and that would probably already be out of control without instating a hard lockdown on all possibly affected regions and testing the whole population like China did.
Wired did a phenomenal article on the Maersk attack https://www.wired.com/story/notpetya-cyberattack-ukraine-rus... company I worked for was affected as we had shipping containers on the water at the time and it was chaos but they recovered.
That solves the anonymity requirement part and I agree. But even if we made sure all account holders are humans, still we don’t have a way to test if the content was truly written by the account holder or created by a bot. Manual human labor requirement creates a rate limiting which is removed by automated content creation in the name of the human.

Worse yet, as long as the bot content drives engagement and bot action on ads can be prevented, platforms would have little objection to this. Reddit would benefit from us thinking we are talking to humans while interacting with bot content if it keeps us on the site.

Even worse yet, being controversial or scandalous tends to generate more engagement than being agreeable, which has been so far only exploited at the recommendation layer, now will poison the content layer itself.

I wonder if we will look back and see that we have witnessed the creation of the nuclear weapons of information warfare.
I have used this quite a bit, really enjoy it, but use it for a very limited use case. Use case is basically saving versioned datasets for supervised ML. Features I would like to be added (or features I don't know exist): Get multiple datasets into one place, i.e. I want datasets A, B, and C in one place for use, rather than downloading them all separately and then combining them, mix and match! Also, some built in meta about the dataset, class distribution/class map, things like that, so I can intelligently pick what datasets I might need at any given time. Combined these two things would be like a model zoo or something, for data.
> This is just not true.

Although you quoted it, I think you missed the word "marginal": https://en.wikipedia.org/wiki/Marginal_cost. Yes, training, customizing, and maintaining GPT-3 for your use is going to be expensive, initially much more expensive than using humans. But the incremental cost for the second million usages is going to be very inexpensive compared to using humans, and as technology progresses, can probably be approximated as "free".

> Also, if the argument is we have to ban anonymity, I strongly disagree.

The author isn't saying that we have to, but that if we do not, the effectiveness of any one individual's free speech is going to greatly diminish. Do you disagree with this as well? If so, it would be good to outline your counterargument. If not, then you need to explain why the preservation of anonymity is worth more than the lost utility of free speech.
On one chip a trace will have a jog that's two 90-degree turns. On the other chip, the same trace will have 45 degree bends.

If the 45 degree one is the newer version, that might be a DFM optimisation - there is common folklore around PCB design that 90 or acute angles can cause various problems, with some hint of truth to it, but I suspect there are similar constraints in photolithography. If the sharp corner was causing yield losses, a newer revision would definitely address that.
One problem is that you want anonymity and not pseudonymity. I.e. when you post A and later B, you don't want that these posts are traceable to the same origin even if the origin remains unknown.
There are a lot of issues I take with their response so far.

Note: I am An admin that administers part of their product suite, that has mostly not been affected to my
Knowledge because we are mostly using heir products on-prem

1. This isn’t a ransomware attack in the traditional sense. They had an intrusion starting in February that they noticed in May because the actor was sending data offsite. They then held that data for ransom. That’s not ransomware, that’s getting hacked.

2. They will not tell people what specific data was exposed. Only “internal systems”. That may include things like customers that have on prem solutions but have to send backups of their DB for support etc. BLackbaud won’t say anything.

3. There is no way to confirm the malicious actors didn’t have copies of their own data that wasn’t deleted. It got out of their control and they lost all chain of custody. They are literally trusting criminals here as a way to say it’s not exposed (and hiring some firm to “monitor the dark web” for data)

4. While some data is encrypted, hows it’s encrypted in at least a few cases I know of isn’t exactly secure. For example in one product the encryption key is stored in a stored procedure packaged into their compiled installer and is placed into an ssis package on any sql instance the product is installed. It’s the same key for all customers (and I’ll just say isn’t randomized or very hard to iterate). If the actors got any access to their installers, all they would have to do is join the database to the installer and boom, encryption is useless.
Anonymous - in what context? For most purposes, a pseudonymous account is anonymous. Not that many people can doxx my account here at HN, but I'm not even trying to be anonymous here.

Anonymity towards a state actor or similar is very different problem and as is shown by TOR, it's a rather hard problem to solve even without considering GPT-3.
Or your pacemaker...
Because the official government policy is "just deal with it" and proper testing isn't compatible with that policy. Essentially the test is a fobbing off measure.
I don't know if you read the comments to that link, but one of them links to a deleted scene where Guggenheim gets fairly sympathetic treatment:

https://www.youtube.com/watch?v=QUrJ_Huk5so

I guess the scene was deleted because 195 minutes of Titanic is plenty.
I disagree here. I think the comment by Silhouette is still very applicable and the context is within the realm of more senior folks. Understanding how to efficiently organize a database and doing the necessary work on a front-end web app to make it responsive, have a coherent SASS/CSS framework, etc., are actually skills I would generally expect much more senior developers to have if they have been doing web development for many years.

Yes, I have seen "senior engineers" who tend to be more biased in doing back-end or front-end work, and in some cases, those same people actually prefer one or the other, too, but to expect them to be ABLE to work efficiently up, down, and around the entire stack vertically and horizontally is not at all unreasonable. And yes, you have to know "a lot" to get there but that's what years and years of experience gives you if you have successfully built working software for a long time.
the garmin data actually is in an open format. i've written software to decode it using publicly available documentation. the software is free to use. you can copy the (.FIT) file off the watch over USB.
Do you have a recommendation for good OCR software? Tesseract had trouble for me reading scanned printed text.
Hi, my company randonauts LLC makes the app randonautica. AMA
That's not GPGPU/compute though and Gen 12+ does have hardware accelerated decoding for AV1:

https://github.com/intel/media-driver/blob/master/README.md#...

"AV1 hardware decoding is supported from Gen12+ platforms."
More speech doesn't prevent anyone from speaking. You're mistaking a negative liberty, the idea of free speech, for a positive liberty, the idea that everyone should have an equal amount of attention.
Demystifying MLsub – Global Type Inference for an ML with Subtypes
> For the last 5 years, we accidentally recorded billions of people's reactions to ads as they scrolled past them, then accidentally fed that data into our ad placement algorithm.

> We're really, reallllllly sorry and promise to do better.

Any day now....
Hey, one of the core architects of Datahike here. As a Clojure company we are also super happy that Nubank made Clojure and Datomic much more credible with this move. While Datomic is obviously much more mature, it is important to understand that we have a different scope in our goals than Datomic. Datomic is mostly built as a more convenient backend database for corporate environments and is highly tailored towards AWS and a business environment where the costs of operating and depending on these cloud services is acceptable, which is only the most profitable, but small, slice of the whole market. Even when Datomic gets open-sourced it will not be automatically built with other than these design goals in mind.

Our goals on the other hand go even beyond thinking about this backend market; we want to use Datalog really as a distributed systems environment and extend Datahike to all endpoints including the browser and IOT development:

https://www.youtube.com/watch?v=A2CZwOHOb6U

Our main intention was never to just build an open-source Datomic. But it made too much sense not to do it as a first step. In fact we also really hope that Datomic will be open-sourced such that we can merge our efforts. But given the current governance model of Clojure and Datomic we do not yet foresee that open-sourcing Datomic alone would address a large section of our plans. We are ahead of Datomic already in a few areas:

We have funded development for ClojureScript support going for instance and in comparison to Datomic all our efforts where from the beginning aimed at this, we in fact provide more a set of libraries and abstractions that can stand on their own and that you can compose in different ways than having a top-down design that we then unbundle into libraries. This made it much easier for us to evolve and reuse our stack despite the pivot we did from replikativ to Datahike.

Regarding maturity we have worked hard during quarantine to address some of our pain points:

1. We significantly improved our write throughput and Datomic performance is in reach (close to release), https://github.com/replikativ/datahike/pull/201
2. We have a first version of our server API available and will extend this in the next months to provide Datomic-style local querying https://github.com/replikativ/datahike-server/
3. We recently provided Java bindings
https://lambdaforge.io/2020/05/25/java-api.html

Over the last year we also built a cooperative that has more than 5 people working on this full-time and we aim to grow even faster next year and really bring Datalog to the community and the masses. If Datomic gets properly open-sourced, we will get there even faster.
seems to be typical in data science...
> the Supreme Court has made decisions which many people think constitute an obvious, willful misinterpretation of the constitution

This is a good point, and one that I hadn't considered before my first reply.

However, we're talking about a single issue here - Congress' "say in how States operate their policing." As such, it's a lot harder to argue "willful misrepresentation" when none of the political persuasions or judicial philosophies that have dominated the court over six decades challenge it.