skysight-inc/HackerNews huggingface dataset:
Agreed (except you probably mean 3.7 V cells and not 12 V). Your cells should be as similar as possible to prevent uneven wear.
Yet Another Yet Another Markup Language?
Snowden is "Exhibit A" for how the US is hypocritical about opposition to surveillance states. Any time the US wants to try to shame Russia at the UN Security Council, Putin can just put a picture of their newest Moscovite up on the projector.
Attacks like this make me think there's a real ($1+ billion opportunity) business in making an tech-first insurance company for security incidents.

Write insurance policies to major companies. But as a pre-condition for getting under-written you have to submit to periodic security review by legit security pros. Failure to adhere to security recommendations means your policy gets dropped.
#3. Most people are browsing on mobile and Chrome is the default browser on Android and Safari (or at least the engine) is the only one allowed on iOS devices.
You're probably right, but if it takes two orwellian actors exposing the orwellian nature of one another to mitigate how much orwell we experience in the US and russians experience in Russia, I'd consider that a net win for civil liberties in both countries.
I think this is an important piece that is often overlooked when discussing search. I wonder if all the ads magically disappeared one day if people would view it as a positive or negative change in what they perceive as relevant?
The gods help those who help themselves.
For some diseases and conditions it is actually healthy. You of course have to be careful with it.
To me the only thing surprising about it is that it's only 2.25X less efficient than a sedan haha :)
> Ideally they would run some kind of CA and users would generate keys local to the device with some kind of alternate authentication when setting up the device initially.

This presents a bit of a chicken and egg problem for how to secure the initial signup. Most services now use "control of email address" which has its own issues.

> Generating keys is cheap and the fact that your key could be tracked across services is a problem you'd want to avoid upfront. This is already an issue with things like SSH where you can finger-print devices when they present their public keys.

There are concerns about tracking, but that can be done without a private key. There are pros and cons for both singular and multiple keys one of the pros for a single keypair being your keypair does identify you as you. That's bad for tracking but it's good for more trustworthy authentication. Ideally, for some uses you could as a person get a signed personal cert and it'd be as good as government ID.

> When signing up the user could be given the option to enable alternate authentication via FIDO2, Password, or Passwordless (email). Otherwise authenticating another device works by approving a new device from an existing one.

A good first step for reused or unique-per-service or even unique-per-service-and-device keypairs would be to allow a user authenticated by password or whatever to upload a public cert (possibly via web form) and enable access to the account (or portions of the account) going forward only to sessions initiated with that client cert and key.

S/MIME handles some issues of key propagation pretty simply in that a sender, A, signing a message is sufficient for the recipient, B, to then send encrypted email to B. The initial S/MIME installation of the user's own S/MIME certificate is still more involved. However, it might be as simple with web apps and other apps that use a web or web-like remote API to have an option to auto-trust certs going forward that are used to log in to the account by other means (like password and Yubikey).
The short answer is no, we don't have it 100% figured out yet. But we have learned a few things:

- The cost per sale of paid marketing targeting CUSTOMERS is just a little too high to be sustainable right now. Part of that, I think, is because the searching/tagging/categorization of VSUAL isn't great. We can create an ad with interesting art that causes a clickthrough, but if that piece isn't quite compelling enough to sell, we don't do a good job showing similar pieces. We're working on improved tagging and categorization right now to make finding curated, related artworks easier.

- Many of our best selling artists do quite well attracting their own traffic to their store. They already have IG/FB followings significantly greater than our own. So, we're investing in tools to help those artists with marketing (such as markup generators) and to help tools specifically for artists with distribution. For example, those artists who already have distribution want to link people to their shop, not to an entire platform. We're working on building whitelabeled shop pages without the platform nav bar for those partners in particular.

- Finally, I believe that with the amount of UGC on the site, we're currently not taking full advantage of the power of SEO. Creating landing pages specific to art styles and techniques is high on my to-do list after our upcoming tagging improvements are launched. I'm hopeful that moderate SEO improvements can drive our traffic up significantly.
The answer is seen in the corrupt Freudian slip seen in institutions after scandals when they state as a goal "restoring a sense of trust" - not restoring trustworthiness, or "addressing <root scandal>".

If you actually want to improve trustworthiness you need reforms and a purge all management who would resist or interfere.
Does append only work if you have access to the raw disk bytes? Sure, the file system could enforce creation and appending only, but I can easily counter that with:

dd if=/dev/random of=/dev/sda

(Using /dev/random to give the illusion of encryption)
Would you consider volontarily contribution instead?
If nothing else, it pushed Google to close the security hole the UK was using to harvest inter-datacenter data.
I had to go and find a file to see what keys my fingers have been pressing all these years.
> The more unfaltering facts uncovered about US the better for Russia.

In this sense, the move could be seen as an investment in future whistleblowers— "If you see something, say something. Then come here if need be."
is the opposite the case too?
Community contribution is definitely one of the goals.

And I mean, it got open sourced 2 days ago...so 100 stars is not that I bad I think...

And the trend is pretty positive https://porter.io/github.com/finos/legend

Would love to hear your feedback
that kind of trolling is called diplomacy. US will refrain from talking officially in international venues about freedom of speech in russia, for fear of being embarassed by this story.
> I do not believe in guilt based on your birth circumstances

Nither do I.

Its not about birth but the action you take or not take.

> You dont want to judge people on their actions, you want to build enemies to make it easy to judge people. I am not interested in that. You dont care about what who believed, actually tried to push for and why the old system malfunctioned or was impossible to reform.

You completely mischarectarise what I say. You use formulations that put words into my mouth

> You dont care about

> You dont want to

This is the definition of building straw-man argument that YOU accuse me of. So maybe read what I write and critique what I wrote and not what you think that I think.

> I also think that you are building flippant strawman in "shouldn't be judged based on how nice she was to people and how great her writing skills were".

This is the definition of judging person by their actions. Just because she was polite and smiling and wrote a tearful letters, it does not make her a good person. I dont care if you believe in Jesus and go to church 3 time a week. If you stab someone to death on the street for giving you 'the look' you should rot in prison.
Maybe that looks like a gross "argument from final consequences"...

...but if we could get this police state going and everyone would shut up about it we'd all be 100% safe right?
I think this assumes an organization has proper data backup strategies in place. If you have daily snapshots and full weekly backups, then ransomware should just be a nuisance and cause some people to work weekends / after hours.
With "containing" I didn't mean just delivered together as in shipping emacs together with your product, but making the GPL code part of it, especially linking with GPL code or even compiling together with the GPL code.
As a business owner, when taxes are low, I see that as an incentive to pocket profits. But when taxes are high, I see that as an incentive to hide the profits by investing in the future.

I know this isn't always the case with everyone. And especially investors have a case that higher corporate taxes reduce the value of their investments, possibly to the point of not making them.

But this incentive is so blatantly obvious in other cases and so rarely understood. I can only assume that the vast majority of people think businesses are taxed like people. You pay taxes on all of your income. But businesses only pay taxes on their profit. It's a big, big difference that changes the incentives.
The feature that has kept me from switching to Firefox is history archiving. I like to keep a record of my browsing history using Chromium's “History Trends Unlimited” extension to easily find articles previously read. However, Firefox appears to only record the most recent site access date and there's no similar extension. Does anyone know of an alternative?
> Gwern has covered a subject it is as good or better than having a wikipedia entry on the subject.

I wish that Gwern were superhuman and could write his own entire Wikipedia. Imagine what an incredible reference that would be!
Im not sure I understand your comment?
I havent down voted this...

And a good question: "What do you do?" I guess I do accounting, recruiting, legal, product, design.
And to your advice: "Maybe learn a skill and have a functional product before selling". Learning a skill, sure, I can learn a lot of skills, python to start with, but how long time before I am as a good as a CTO should be? And "have a functional product before selling" I fundamentally disagree with that point. Rather launch mvp after mvp, iteration after iteration.

Great feedback, thanks, good karma, good energy, good luck!
"What's good for the duck is good for the dander."
With strict and timely reporting requirements to the FBI.
acting in an inexploitable way is a nash equilibrium or do we think the aliens don’t understand game theory or evolved without a survival instinct?
Huawei Mate 40 phones launch despite chip freeze
> Russia can come off like the benevolent country protecting freedom.

Not even the most devoted partisan can claim this was a straight face. Russia kills journalists that speak against Putin, poison political opposition, and paint with microwave radiation any diplomat misguided enough to attempt a dialogue.

It's a mafia state, pure and simple.
Well, doctors are very well versed in these matters. Maybe not in long fasting but they can tell if something is going wrong with you.

I felt I had the obligation to post it.

Anyway, I wouldn't do anything extreme by the sake of doing it.
Publicly Russia treated Snowden just as any (high-level) refugee, there is no value in keeping him in the country, and he himself didn't reveal any discomfort staying there. So there is no reason to believe they would interfere with his decisions.

In fact, if they granted him citizenship, then they might prevent him from traveling because he would become their responsibility in case he gets arrested abroad.
See also: https://news.ycombinator.com/item?id=24737171

Apple requested to shut down 3 Telegram channels used by the people of Belarus to expose the identities of their oppressors.
This is about as insightful as saying that media catering to the not-wealthy are quick to tell you wealth taxes are a great idea.

This organization is not living up to it's name if it's only taking the easiest potshots imaginable at one side of the issue.
Yes. There are worker-owned media outlets.
There are two points

1. It's held up that it would disenfrancbise voters

2. Tradition (essentially) something being unconstitutional in the US has morphed into an extremely radical idea in the minds of most Americans - the electoral college is established in the constitution, but the US has revised that a bunch of times over it's history including the "undo" amendment (the 21st)
From Businesses - small and large. Using the WhatsApp API. That alone is a multi-billion dollar opportunity.

For example, people like my startup (https://www.zoko.io) provides software that enable folks to run any business on (only) WhatsApp.

WhatsApp would make money by
- charging for certain types of messages sent via the API (already doing it)
- from ads on the WhatsApp, Facebook and Instagram Platform that click directly to WhatsApp.(already doing it)
- enabling payments via WhatsApp Pay and then take a cut of the payments. (coming soon)

I am amazed by the things that my customers do with WhatsApp - like Fintech companies who provide loans to Uber drivers via WhatsApp, OR Fertility Clinics that dole out professional advice on how to make babies, via WhatsApp.

WhatsApp is just getting started! Remember when the internet was free, Google showed up and became a toll collector for doing anything on the internet? Just like that, WhatsApp is the internet of the #nextbillion people. WhatsApp, if they play their cards right, could become the "toll collector of the internet for the #nextbillion". I am literally all in, that it will.
The problem with Brexit is not necessarily just whether or not Brexit had happened, but the fact that after the referendum, there was a supposed "popular mandate" of implementing Brexit, but nobody could say what exactly that mandate was since the people didn't vote on a particular proposal, but only on a vague idea. This led to the downfall of not one, but two governments, and it would have nearly triggered a constitutional crisis.

By contrast, if there hadn't been a referendum, either the MPs would have agreed on a specific Brexit proposal, with everyone exactly knowing what they were getting into, or they wouldn't have been able to reach any consensus and would have remained in the EU (similar to how the Trump administration couldn't repeal Obamacare because nobody could agree on the alternative), both of which to me seem preferable than the mess which Brain had to endure for years after the referendum.

Also, it's not necessarily just the fact that MPs are intellectually superior than the rest of the population (although I do think that, generally, the dumbest of the dumbest make it into parliaments somewhat more rarely), but the fact that parliamentarism and the associated procedures, laws and standards has some checks and balances built-in that pure mob rule (in the most extreme of versions) doesn't.

(and as a final remark: I'm not generally opposed to any sort of plebiscite. I'm just saying that there are definitive drawbacks to direct democracy - you can see that even in Switzerland, where the system is generally much better thought out and established than in the case of the rushed Brexit referendum - that you need to prepare for, and you shouldn't just say "the will of the people counts" because there are huge pitfalls in trying to figure out what "the will of the people" even is (see: basically every populist government, and/or politician in world history, there are even examples of this dating as far back as the Roman Republic)).
The document has (section 12) "Developer Portal" which is good, but I'd suggest to make this a more prominent item, perhaps even break it up into "Documentation", "Examples", Primary Support Channel (Github/SO), etc.

I recently tried every single K8s IC, one by one, painfully. The biggest challenge was documentation, even something as simple as an example was missing for many of them. They would have examples for one use case, but not per use case. It was incredibly frustrating.
Same here, I had to actually do it to check the keys :)
The EU must set the standards for regulating online platforms, say MEPs
The IC does their job keeping us safe precisely so we don't have to concern ourselves with things such as:

* Which servers in China we are hacking

* Foreign surveillance

* Joint CIA/NSA programs

Damage is ongoing. Relationship with foreign leaders, for instance, has suffered irreparable damage.

Snowden's very existence as a propaganda mouthpiece does align with Putin's long term active measures. His greatest value is in undermining internal confidence in our institutions that protect our freedom.
I think those already exist. I’ve heard claims of insurance companies refusing to pay out for ransomware because they should’ve had backups (they’ll pay for recovery from backups, but not ransom).
Yes, but you wouldn't know it by how Google ranks news websites.
> You still charge the pack in series

I understand that's how it's done, but can we charge faster if we DECIDE NOT to charge in series? I take it the answer is no?

Imagine a series of 14 cells. I could charge them as a whole, but there is normally some limit on how much power I can pump into it. Now suppose that I disassembled the series and now I have 14 cells that I can charge independently before re-assembling them back. If I did that, would I gain anything? If nothing else this should prevent unbalanced charging, reducing overall heat of the pack and allowing higher current overall?

I can see that some packs advertise 5a charge current and other packs of the same capacity offer 10a or even 15a. Wonder why is there such difference.
Fair, but I doubt that Biden would have anything to gain politically from discussing it— anyone with a strongly held opinion on this probably knows who they support already, and anyone who doesn't would be best reached via other issues.
Why? (I mostly agree but it's not a strong opinion)
The US's treatment of Manning has sent the very clear signal that the next person who wants to leak classified documents had better have a speedboat to Vladivostok waiting for them.
Show HN: FsKube – A full stack Kubernetes enabler
HN contrarians don't wanna hear that - they routinely gobble up the narrative that the US is less free than Russia and other autocracies.
Email your congressman/woman: Paying extortion fees cybercriminals should be illegal - and severely so. With the stroke of a pen, a law making the practice illegal would immediately allow every institution and corporation in America to say, "We cannot pay your fee no matter how hard you press us, as we would face jail time if we did so."

Would gangs still try to extort people? Of course. But large institutions would no longer be a target, because their internal controls would prevent the payment of extortion fees. Small organizations might still pay fees, but the potential take for gangs would be reduced remarkably.
Stop Police from Using AI to Track and ID You
Show HN: Recently deployed our beta version of our consumer photography app, trix.co.

High-level, Trix uses adversarial AI tech to manipulate your photos (before you upload them to Instagram, Facebook, and the like) in such a way that when Clearview.ai and others go to scrape your data, it is impossible for them to train facial recognition models off your content.

Updates:

1) Our mobile application and back-end code are now open source. See here to examine: https://github.com/trix-co/trix-app

2) We are temporarily using the Fawkes algorithm under BSD license, while we work to validate our novel approach and publish test results

3) We have updated our ToS & Privacy Policy to be more user-friendly and more consistent with our values (we used a boilerplate version previously)

WE ARE HOPING TO PROMOTE OUR PROJECT AHEAD OF THE US ELECTION IN CASE OF THE NEED FOR PROTECTION OF CITIZEN IDENTITY IN MASS PROTESTS. We know that this version of our app no longer provides novel protection vs the Fawkes binary, but we do believe that our app will allow this technology to be used 10x more easily and by 10x more people during an important time.

Links to privacy policy & ToS: https://www.trix.co/privacy https://www.trix.co/terms
Halide's UI for things like setting exposure is faster for people who want to learn how to use it, versus Apple's stock camera being made for mass markets. And you can set more things, like shutter speed, instead of having it all be automatic.

You also get features like a live histogram and focus peaking that can help when shooting even if you aren't going to edit it afterward.

Can't try the new version yet because of an update bug, but I like the old version a lot.
Yes. You would have backup agents that authenticate to a backup server. The server would only allow a specific method of sending data and the backup server would have policies about backup anti-tampering and retention. All workstations and live servers should be considered ephemeral and disposable.

Specifically for an institution like a medical facility or financial institutions, there are hardened appliances; sometimes referred to as vaulting appliances, that enforce anti-tampering to the point that the system administrators can't even delete data. You set a policy that requires multiple specific people using MFA to authenticate and authorize the deletion transaction. These are not cheap, but it's a lot cheaper than paying out a ransom and the down-time of rebuilding everything and the loss of reputation and loss of trust by board members and investors. These appliances have the bonus of enforcing many of your audit requirements around data retention and destruction.

To your example though, yes, it's not fun to manage fleet-wide, but you can boot up both Windows and Linux into ram and have network filesystem overlays that patient data could be written to. The SAN/NAS/Ceph clusters can then do backups locally and have anti-tampering in place. This is non trivial to set up correctly. That would be more resilient than depending on backups, but is much more work up front. For Windows, look into Windows 10 LTSC [1]. It can operate in a Kiosk mode and boot into memory or have hardened security options to minimize attack surface. Most Linux distributions can do this as well. Ceph can do both transport and filesystem encryption now. I will leave out the Linux examples as I doubt this is where these institutions are getting into trouble.

[1] - https://docs.microsoft.com/en-us/windows/whats-new/ltsc/what...
I think they're orthogonal. You could have spaced repetition without active recall and you could have active recall without ongoing spaced repetition.

I think active recall is the more important fundamental mechanism for learning and the focus on spaced repetition tools detracts from that.
Not really. This is the core problem with a lot of issues these days.
Yup, for some people apparently, you might still be in the running.
> Or is it at the OS layer instead of the assembly layer, with an OS syscall that defers to the GPU?

Yes. Modern OSes don’t allow userspace code to directly access peripheral devices, GPUs included. Due to the enormous complexity of modern GPUs (GPUs typically have more transistors, consume more electricity, and have comparable amount of memory), the API surface is huge.

On Windows, the native API surface is Direct3D. It has two large pieces, user-mode and kernel mode. The vendor-provided GPU driver is similarly split in two.

User-mode parts implement HLSL compiler (Microsoft), another downstream compiler to compile DXBC into proprietary byte code GPUs actually run (vendors), implement other higher-level stuff like mipmap generation (vendors, at least for nVidia), and expose user-facing APIs, i.e. multiple versions of D3D (Microsoft).

Kernel mode driver interfaces with actual hardware, the Microsoft’s vendor-agnostic part of that is in dxgkrnl.sys.

Various GPU drivers often expose extra user-facing APIs in addition to Direct3D (CUDA, Vulkan, OpenGL, OpenCL), but all of them are optional.
> What's good for the duck is good for the dander

Did you have a stroke just now? It's "What's good for the goose is good for the gander"