skysight-inc/HackerNews huggingface dataset:
> What I'm interested in is to see who actually bought into this scam?

/r/wallstreetbets - As usual some big winners and big losers on both sides on the way up and the way down.

Its not quite "Pin the suicide hotline to the top of the sub" levels yet (bitcoin 2017) but there are some people losing their shirts over this.
A couple of friends and I built a website that helps plan recurring virtual hangouts. Hopefully, it helps people stay in touch with their friends and extended family in these times, although, honestly, the original purpose was to plan our own video game nights :)

To use it, make a group (all you need is a group name) and you'll get a link that people use to join the group and select a contact method. Every month (or however often you choose), everyone receives a text or email asking their availability for the coming week.Based on the responses, it suggests a good time to meet.

I'd be happy to hear any feedback. Hopefully other people find this useful!
Glad to see this. I saw your talks on YouTube when I was going over serverless and those were a joy to watch.
During my time at Boeing, they had the "Chairmans Innovation Initiative"

A program where employees could apply for. Ideas that were selected were given funding, and either spun out into separate companies, or spun internally to an existing division.

To me, that creates an aligned incentive for both the company, and the individual.

To your specific point, you beat the odds, you will not only get profit sharing, but likely ascend the ladder quickly, opening up doors to the US government that you would never get if you went at it privately from the outside.
That would increase the time:hands ratio.
If true, it means he is just another cog in a propaganda machine, which is against the principles he claims to operate under.
V8 Release v8.6
Anomaly detection belongs to unsupervised learning while in time series analysis we normally think about future and future values are viewed as labels. One approach to think in terms of anomaly detection is to train a normal forecasting model. An anomaly is then viewed as large deviation from predicted values. Another approach to train an autoencoder on segments of the time series. Then anomaly is defined by the degree of deviation of the decoded segment from the real segment.
For every 30 seconds the average person saves on misc. Tasks, there are whole minutes spent doom scrolling on social media apps.
Screw the EU and their powers!

Decentralize everything and fire all those useless eaters!
I mentioned this in another response, but I'll refine my argument here.

Security by obscurity's negative connotation comes from the ratio of effort on the part of the system implementer to the effort on the part of the attacker. While it may take time to break into an "obscured" system, it also takes a lot of effort to build the system in the first place. Worse, if the security is broken, you have to re-implement from scratch.

Better approaches decouple the implementation/methods for enforcing security from the random components of the system that need to be kept secret. Whether or not this increases the effort for the attacker, it drastically reduces the effort for the defender. If an RSA key is cracked, a new one can be generated in less than a second, and once deployed the attacker is back to square one. Having SSH on a different port adds the cost of a full port-scan to any attempt to break in, vs the cost of changing one line in a config file.

That all being said, there is a major difference between changing your port number and changing your RSA key: The attacker/defender effort ratio scales linearly (vs exponentially). Every time you change your port number (a fixed cost), the attacker has to run another port scan (another fixed cost) to get past this layer. By contrast, the amount of effort needed to crack an RSA key is exponentially higher than the cost required to create a new one. However, adding a fixed port-scanning cost to each attack does actually correspond to a very high overhead for a non-targeted attack (their costs go up by ~2^16).
Once committed to a company (as the "apply to company, do orientation, team-match" onboarding pattern forces), it is considered bad form or indicative of failure to move on quickly. You're additionally now engaged where you are and have sunk cost and social commitment having probably bragged or at least told people you care about where you're going to work. Still you haven't even really figured out what you'll be doing with your life/time. The sell is "big name" as a end unto itself not an thoughtful evaluation of your predicted experience in what your days will be spent obsessing over.
> an obscenely large pseudo-object-oriented codebase

It shocks me, just how often OOP is just not nearly the best approach to something. I certainly still lack in experience though. But why use OOP for something like putting data from a sensor onto a bus? And stuff like that.
That's of course assuming that you are already skilled and equipped enough to do the job yourself. If you're starting from scratch, you'll end up saving below minimum wage by doing it yourself.

Besides, if you're already working 40 hours a week, the remaining time is much more valuable, because it's relatively scarce. Not everyone is comfortable spending their evenings doing extra work.
> This response is missing the author's point. There's a distinction between obscuring the methods and obscuring a parameter to those methods.

But that's exactly the distinction I'm saying the author is getting wrong.

Moving away from the default SSH port is obscuring the method, because it's no longer a single step to check whether the server even has SSH or not. It might not at all, so the port number doesn't serve primarily as a parameter -- it serves primarily to obscure its existence in the first place.

To use the article's presidential motorcade analogy, it's not like knowing there's a motorcade but not knowing which car the president it's in. Instead, it's like not knowing if there's a motorcade at all, and having to check every car in the city to see if the president is even out in public in the first place.
I think SSH security is similar to that of a VPN (except for large installations where key management/revokation may be better handled by VPN tools), so for many people there's no need to use a VPN.
decent amount of history indicates CIA had been partnering with academics and private industry for decades. Seems like this is an attempt to broaden the funnel of participants, away from key strategic efforts into DARPA-style R&D land?
Serious question... have we just given up on modern anti-trust?

We're going to have the US as one large corporation now? No competition?
You still take a risk because if your project fails for whatever reason, you're stuck on a CIA salary, rather than a SV salary where you'd probably be making twice as much even if your project fails there too.
This is a good question. Coverage of this trial has been hard to come by. Craig Murray is posting details to his blog but he's also not the most objective witness. Still, he wrote the following[0]:

"Magistrate Baraitser then made a statement about access to the court by remote hearing, by which she meant online. She stated that a number of access details had been sent out by mistake by the court without her agreement. She had therefore revoked their access permissions."

When I read this, I thought that only certain people had their remove access revoked, for instance Amnesty International. But then he goes on...

"Baraitser went on to say that it was important that the hearing was public, but she should only agree remote access where it was 'in the interests of justice', and having considered it she had decided it was not. She explained this by stating that the public could normally observe from within the courtroom, where she could control their behaviour. But if they had remote access, she could not control their behaviour and this was not in the 'interests of justice'."

That sounds to me like _everyone's_ remote access had been revoked.

[0]: https://www.craigmurray.org.uk/archives/2020/09/your-man-in-...
Exactly. I've never heard any of his podcasts and now I went to watch his video with Snowden.
Here is the same conversion happening other the side between woodworkers:
https://thewoodwhisperer.com/articles/why-i-dont-offer-woodw...

The lesson: things are not much greener on the other side, work is not fun, it is not a hobby, and adult life is not easy :)
Why? At this point, why not just use raw HTML and CSS?
This is an area in which I’m very interested. I think it should be possible to build some tooling that would make it easier to construct such articles.

One dimension could be an abstraction layer over common datasets; if I could just pick and choose data sources that would make it easier to plug together. Currently data sourcing and cleaning is a bit opaque. This seems quite hard to solve in general, but if you could get a critical mass on a far interchange format, maybe public datasets would start using it. Otherwise someone in the community needs to curate wrapper layers on top of those public datasets.

Another aspect is the graph tooling/authoring; for this to really take off we’d need a “Wordpress for interactive articles”, basically some GUI tool or plugin to let non-technical users build these visualizations easily. I actually think this is pretty tractable.

The biggest hurdle i can see is more sociological; most people don’t think in terms of models. But at the margin perhaps better tooling could make “model curious” people better at this mode of thinking.
Haiku is BeOS derived opetating system.

https://en.m.wikipedia.org/wiki/Haiku_(operating_system)
Fail2Ban is fantastic tool.

But as soon as you found that "PermitRootLogin" can be set with no then all brute forces become useless since they can't match combination of user/password.
That’s like saying parents should be arrested for their children’s crimes. The only systems in place that can notify CEOs or parents of all illegal events in their organizations exist only in fantasyland.

And ignorance of the law should be an excuse, when the US has so many laws on the books that nearly every adult is guilty of committing at least one felony unknowingly.
What if the buyer of the technology is the US govt? Will those Officers have to give it to them for free?
I'm curious what he said. Any links or recollection? How could GE not have done this simple due diligence? Even seeing the HTML5 quote at the top comment here is startling.
This is what Chibber calls the "pluralist theory" which he argues is not entirely false but rather incomplete. I hope this will be of interest to you : https://youtu.be/R5R-9X_BtP4
> The tie-up sent Nikola’s shares surging by 51% and GM’s by 10%. Credit Suisse called it “a crucial validation datapoint on the GM EV strategy.”

That's 4bn of share price return for a 10 yea, 2bn partnership.

Presumably they'll now parachute there own execs in there to try and salvage something.
I wish I could go back in time to when I didn't need to tense up before opening up the news each day.

How does this policy help the country? It's just so blatantly designed to hurt people.

The whole point seems to be to rile up Trump's base at the cost of people who are just trying to go about their lives during a pandemic.
I wouldn't write off Godot, it may not have the hype or big names but it is seeing swelling support from the indie and garage developer side of things
> If I ever saw anyone I worked with trying to do something like "setting a global variable to different things in different threads", I would have very strong words for them.

Because global variables aren't used the same between the two types of languages. In lexically-scoped languages, it's bad practice overall to use global variables for anything except constants. In dynamically-scoped languages, they're used as an environment just like how environment variables are used among processes.

You asked why not use "normal" (statically-scoped) global variables, and I replied on the difference. That doesn't mean that I support using them like that in such languages.

Imagine environment variables didn't exist. A `su` command that modified the home directory in /etc/passwd for the duration of its subprocess to change it back when it dies would also seem pretty ugly for me. Indeed, if a language lacks dynamic scoping or environment variables didn't exist, the proper practice would be to pass the whole environment explicitly as arguments. That's what's typically done in statically-scoped languages, but it has the caveats I mentioned in this other comment:

https://news.ycombinator.com/item?id=24545180

> I'm having trouble making sense of your first paragraph.

Here's an example using Elisp:

; Turning off static-scoping
(setq lexical-binding nil)

;; Bad practice

(defun foo ()
bar)

(foo)
;=> Debugger entered--Lisp error: (void-variable bar)

(let ((bar 3))
(foo))
;=> 3

;; Good practice

(defvar bar 2)

(foo)
;=> 2

(let ((bar 3))
(foo))
;=> 3
While you are right in that you shouldn't stay on the same place forever, there is definitely very huge and important lessons in staying at a place long enough that you don't only have to deliver something, but also get to maintain it over time.
Following from alternate stores on consoles, we're not far away from Valve's SteamBox, i.e. prebuilt PCs marketed for living room play. I'm disappointed the idea never took off.

I would love the game industry to fully embrace Linux. If cloud gaming gains more traction, the industry might just do that. Why develop games to run on custom-built blades in a data center when generic blades exist?
I'm so tired of React being thrown into every single web stack as of late. You don't need some large React boilerplate mess, that could've been done with some simple PHP+Jquery stack. It's caused this SPA nightmare also, where you have a large delay in page loading, when it's a site with basic functionality.
There's a story that an academic was telling the world that heavier-than-air flight was impossible at the same time that the Wright brothers flew the first plane. Not all engineering advances are based on science, often the engineering comes first.

Physics has been stuck in a quagmire for 50+ years. The "foundational research" hasn't moved, possibly since Einstein (who only became an academic after publishing his important work). Meanwhile the engineers have done awesome things.

The impact on civilisation from string theory: zip

The impact on civilisation from the internet: huge

I'm not sure what foundational advances you mean, but the impact is definitely on the engineering side for the last 100 years.
This is why I used the first person, as in specifically me and not everyone.
It was, but it was also much, much simpler. You couldn't shoot yourself in the foot as easy as you can now.
Well I for one sincerely hope it succeeds in
It may be a weak rhetorical device, but it’s also informational.

I have complex views of Assange.

1. I think the extradition hearings are bizarre and it’s hard to consider them a fair trial.

2. I support Assanges long term goal of western democracies being open and accountable, rather than being based on secrets and lies.

3. I don’t know whether Assange’s tactics are moving us towards or away from that goal.

It seems like he has taken an anti-American stance and acted intentionally to undermine the US, presumably because he sees the US as the most hypocritical geopolitical actor.

He may be accurate in his assessment, but the adversaries of the US who will exploit the power vacuum are Russia and China, who are either worse or at least as bad as the US when it comes to secrets and lies, and so it’s not at all obvious that his tactics support his goal. I’d like to hope that they ultimately do cause some kind of positive realignment, but that is not a foregone conclusion.

Forcing someone to betray their principles in perceived self defense and then acting surprised is akin to gaslighting. Again, it’s not clear that this is a helpful move, but maybe it is.

I think it’s reasonable to say he has drawn attention to insecurities of both the US and the UK, but they seem like predicable and well founded insecurities.

Calling Assange a journalist is like calling Rupert Murdoch a journalist.

Assange is not a journalist, nor is he a reporter. Bear with me - this is a ‘pro Assange’ point.

He is a publisher with an intelligence gathering network.

Recognizing this doesn’t mean it’s right that he should be prosecuted.

In fact it sheds light on something more sinister - actual journalists don’t report the things that Assange published, because their publishers don’t want them to.

Publishers in general are self-censoring in order to stay on good terms with governments and other powerful interests.

Organizations calling Assange a ‘journalist’, especially any mainstream publishers, are actually colluding to deflect attention from this fact, and co-opting support for Assange, when in fact they are collaborating with governments and are the very reason Wikileaks was necessary in the first place.

Reducing what’s going on to ‘Assange as martyr’, ‘look at this kangaroo court’, ‘This is about silencing journalists’, does nothing to advance Assange’s actual goal.
Sublingually used NMN specifically.
> I appreciate some Bethesda fans have a weird agenda, but you are wrong

> small minority of rabid fans that keep on harping about their imagined deficiencies of the creation engine

You post comes across a bit aggressive and insulting.
Web forms?
First day of intro to programming at my university and the professor was introducing himself and his background and how his first job was writing cobol at a Paper Mill. He said COBOL was a revelation at the time and that we would never need to learn or use it.

Enter stage left my first job as a developer in 2016 and I'm tasked with learning cobol to support customizations to their 25 year old Lawson Implementation.

I'll probably never use it again but reading and writing cobol code opened my eyes to different design patterns not often seen in more modern languages. Seeing clever implementations of features that come out of the box in modern languages was really neat.
I agree with others that the fast changing story on modularization (first everything comes as one package with .Net framework, then it's different packages, then it's all together again with .Net core 3), standardization (.Net framework -> .Net standard -> .Net core), makes it hard to feel like this is a stable platform, in the sense that you can understand the basic architecture of the platform and it will stay that way for some time, decades even...

I personally felt .Net standard was a great investment in making a standard platform that the community could contribute to, that would, of course, move slower than the giant monolith controlled by Microsoft... but nothing about .Net standard didn't mean you couldn't choose to use the giant monolith instead, it just guaranteed some semblance of stability if that was your preference.
This hasn't been the case since 2018 https://www.imore.com/how-homekits-software-authentication-w...
Would SSH over Tor Onion Service be security by obscurity?
Dr. Fauci takes 6000 IU of Vitamin D (10x recommended daily dose)
Surprises me how few people understand/mention the "programmers doubling"
Does this mean that future versiona of Fallout will showcase Pip-Boys runnig Microsoft Windows?
VS code will remain free, open source and be improved for as long as it has competition.

If other IDEs (e.g. pycharm) go out of business they'll probably slowly de-open source and start to charge.

Right now it's the only way they have to get a lot of people using open source into the Microsoft ecosystem. Still in embrace stage.
I see. Thanks for replying.
You can with some hoop jumping in the current release (e.g. using 1.14 you need to define the model and optimizer in Python - https://github.com/oracle/tribuo/blob/main/Interop/Tensorflo...). With the upcoming alpha release from the TF Java group you can train purely from Java without invoking any Python - https://github.com/tensorflow/java-models/blob/master/tensor...
Learning about (Deep) Learning [audio]
With enough money, I'm like 99% sure I could put some fraud to bed in my conscience. From what I can tell, success tends to help people justify their actions in hindsight. So maybe there's something psychological there to help me forget, anyway.

If nothing else, as a billionaire, I could afford to do extremely good works to help people forget about how awful I was in the early days (remember when Bill Gates was the devil? I do).
Playing with legos is delivering value. Reinventing the same wheel over and over again is not.
I saw an ad for some VPN provider on a YouTube video. My eyes rolled so far I ended up looking at my own brain.
Supreme Court Nominee Robert Bork’s Proud Legacy and the Senate’s Shameful One
Unfortunately, it's broadly not possible to buy quality anymore unless you have the money to have products custom built.

It used to be possible to pay somewhat more to buy good quality products that would last for years or decades (obviously not for electronics) but today the manufacturers of these goods charge the same prices but their products are no better than Amazon/Walmart-grade junk available for half the price.

The contemporary marketplace is littered with companies that used to produce high quality goods but are now selling away their former reputation to move overpriced garbage. See everything from Cole Haan (shoes) to Sears.

And frankly, I do blame Americans for this. American refusal to enforce anti-monopoly laws, combined with the American legal concept of management fiduciary duty belonging exclusively to shareholders, provides no market incentive for manufacturers to produce quality goods and indeed obligates companies to rip off their customers by selling low-quality goods at inflated prices.
Perfect;
Ahh what is this website!? sfsgate.com is so horrible. GIANT ads everywhere, popups, everything is jumping down as the page loads.

The actual recordings are on Soundcloud here: https://soundcloud.com/user-626311220

Please save yourself the pain of visiting this travesty of a website.
> I just came across another post on Hacker News talking about why you shouldn’t move your SSH port off of 22 because it’s Security by Obscurity.

As greenduck already said, anyone making such an argument doesn't understand the issue of security by obscurity: it's not a problem when it's used as an additional layer of security, but it's a huge problem when it's used as the only layer of security.

Personally I favour IP whitelisting, but I realise this has issues with scalability.
Considering the amounts of flights, I'd say that being able to book your travels without calling elimited the costs of needing phone operators. And allows me, as a user, to also easily book outside of office hours.

I agree that there's a lot of useless tech around. Especially in this startup world where it seems to be all "Uber but for x".

You also haven't answered my question. What would've been a non-useless tech that should've been developed on in the meanwhile?

And just because some commercial companie (travel agencies) spent their profits streaminglining their booking process doesn't mean it's all been useless these last 30 years.
I wasn't speaking primarily about the charges held against him, but rather the OPs assertion that people consider him as either hero or villain, or in some cases, something in the middle due to various faults they find with him.

On the subject of the charges, since you brought it up:

How can the US reasonably charge him with espionage? Has Assange ever even been to the US?

If we can charge a foreign reporter with espionage for the mere publication of something we consider secret, and force their international extradition, how would we feel about a foreign government doing the same to one of our citizens?

For instance, if Australia were to coerce the UK to arrest and extradite the publisher of the New York Times for prosecution under their laws for printing a story they didn't like for some reason.