skysight-inc/HackerNews huggingface dataset:
The immune system is extremely complicated, but very broadly: CD8+ T-cells (also known as killer T-cells) kill infected cells directly, whereas CD4+ T-cells (also known as helper T-cells) release signals that guide many aspects of immune response, including activating CD8+ cells
Yeah. Engineers fall on a distribution. It's just that simple.
The idea, I think, is that it literally launches a browser to let a human do the whole thing.
On the other hand, I'd far rather hire someone who can explain why TLS works and what the weaknesses and tradeoffs are than someone who can reverse a binary tree on a whiteboard, and I'd far rather work somewhere where that was standard of questioning.
A lot of special-purpose ICs are actually general-purpose processors with a mask ROM (or sometimes EEPROM, with interesting consequences), since writing the "firmware" for different functionality is easier than doing a whole "hard-coded" chip design --- the various USB-to-X adapters are one common example of this.
You're advocating a standard that hurts innocent people in favor of the provably guilty.
> We should also not be quick to blame the individual for perpetuating this

This part at least, I agree with. Whenever I see code like this it is a symptom of a larger product development issue.

- unreasonable deadlines

- overpromising to external clients

- no coding standards (enforced by linter and code review)

- no automated testing

- no code review process

- using new languages/technologies without first gaining some experience about best practices

Early on, a startup definitely needs engineers that are going to work autonomously, cut corners as needed, not be a perfectionist, etc. The technical cofounder/CTO/team leader should still be setting up a culture of high quality code. Coding styles and some automated testing make it easier to move quickly and ramp up new team members or for old team members to circle back to old code.
In Tense Times BodyGaurds Are in High Demand
Does the human brain resemble the Universe?
PyTorch Dynamic Quantization
Its more than that, You can't wipe it at all until you log in with the apple account it was connected to. Rendering a stolen laptop effectively bricked and only useful for parts.
This appears to have had a positive effect on their stock price (after hrs at least).
Paper:

https://www.frontiersin.org/articles/10.3389/fphy.2020.52573...
To add some more enticing detail, the series takes place in a universe where time really is just another dimension, and there's no minus sign in the distance metric (hopefully I'm using that term correctly). Consequently, Egan has to re-invent biology from scratch, among other things. It's a wild trip. My favorite if the series is The Arrows of Time.
Hm. If embedding works maybe my ad-blocking is sufficient; or I just haven't come across any that require it. I mostly just watch woodworkers/machinists/electronics/etc. Sort of conceivable it could be age restricted but would also be surprising.
Curious, what makes these things so hard for westerners? The Didi app (for example) is translated into English, isn’t it? Is it just a matter of incompatible payment systems?
Are there any powerful tools like these from command line(shell)? I prefer to use GUI to quickly navigate or do some advanced ops over remembering multiple commands.

I do use k9s (https://github.com/derailed/k9s), however it still lacks lot of functionality.
Pushed secrets in public repos are automatically archived by third parties so removing commits containing them would not be enough to prevent their use, just rotating the secrets is the way to go here.

https://twitter.com/andrzejdyjak/status/1324360905237372929 https://news.ycombinator.com/item?id=25013756
The opening words of ACM95a my year are seared into my mind:

"I would like to apologize to the students who took this course last year. I always aim for a mean exam score of 50 and a standard deviation of 10. Last year's mean was 29 and I will attempt to not repeat the mistake"
603 prizes*, 934 unique recipients.
Hyperventilation significantly increases the body’s alcohol metabolization rate
> How the heck was Y2K a “media fed panic”?

Because media hyped it up?

> They mostly reported it as “might be a problem the clock is counting and we shall wait and see”.

No they didn't. Why are you lying. They made it sound like a potential end of the world/civilization. It's why everyone remembers Y2K. If they reported it benignly like you claimed, we wouldn't remember Y2K. We wouldn't be talking about it 20 years later. The only reason anyone remembers Y2K was because the media hyped it.
> ”your hotel registers you online so that you don't have to deal with this”

If a hotel can do it, surely there’s no reason why Airbnb can’t figure it out?
The answer you got from lmm and others is wrong (I am a professional mathematician and did research in logic).

The completeness theorem says simply: if T is a first-order theory (list of axioms in first-order logic), any sentence true in every model of T is provable by logical deduction in T.

The first incompleteness theorem says: if T is a consistent recursively enumerable theory that can contains a sufficient amount of Peano arithmetic, then there exists a sentence which is neither true in all models nor false in all models. In other words, there is a sentence which is true in at least one model of T, and false in another.

The second incompleteness theorem says that if T can interpret Peano arithmetic, then we cannot prove the consistency of T within T.

So a tl;dr:

-Completeness: any SENTENCE true in ALL models is PROVABLE - applies to all first order theories

-1st Incompleteness: there EXISTS sentences which are TRUE in some models, FALSE in others. - Applies to theories that contain enough arithmetic

-2nd Incompleteness: if a sufficiently strong system is CONSISTENT, we CANNOT PROVE that CONSISTENCY within the system.

NB: of course, if you have a sufficiently WEAK system, like the axioms of group theory together with "FOR ALL x FOR ALL y (x=y)", then that theory would be COMPLETE and Godel's incompleteness theorem does not apply here.
Pfizer released a press release, but as far as I can tell that isn't as much data. Given the time I'd guess that the mathematicians at Moderna worked all weekend crunching numbers and writing a paper (which is what I'd do if I was a statistician there).

Pfizer is big enough to have/let a PR department do a press release during business hours. Of course given that Pfizer did a press release first Moderna for PR reasons needed to release more data to make a bigger splash.

No matter how you look at it, there is important data that will be in the FDA (and equivalent in other countries) submission that we don't have. There could be a "thats funny" thing burred, though odds are against it.
Russian 'Jupyter' trojan targets U.S. Higher Ed: Steals usernames and passwords
We should still incentivize correcting wrongs over letting them stand.
This kind of hyper-optimization misses the forest for the trees. You need to have some love for your product and if you do, you do not let issues like this fester. Your bean counters can’t capture the full complexity of the world. They can’t capture the general sense of “shittiness” that users feel when your product fails in stupid ways and you don’t fix it. They can’t appreciate how that feeling snowballs into the success of a competitor five or ten years down the line.
> Even more important than finding great engineers is to avoid bad ones.

After reading that sentence, I thought to myself, "How long did I go from the start of my career before meeting someone of whom I genuinely thought, 'this person is so bad they should definitely be fired asap'?". In my case, I think the answer is somewhere around 20 years.

My takeaway from this is that at even with ~18 years of experience, my former self would probably not have appreciated the importance of this advice, as I had rarely or never encountered such a person thus far.
I'm impressed that this sounds like music rather than atmospheric new age jangles--and there's some of that too, if that's your thing.
Google's cloud console does this and it drives me mad. People will be explaining where to go to do something, and I look around madly... only to find out that UI elements are hidden because I don't happen to have permissions.

Knowing what access you need versus what you have is important, but just hiding stuff is not the right solution. There should be some explanatory text like "you need role foo.bar.baz to run this command".

(To be fair to Google, they try to do things like showing what API call or gcloud command you would run to replicate the UI in your own program/script, which is very helpful of them. Every UI should do this. Some good ideas in there, some bad ideas in there.)
Are the following phrases still used - trolling, flicking? how about 3AM runs to Tommy's? and The Ride? finesse vs brute force and ignorance?
Parent (sudosysgen) is correct, I don't know why they're being downvoted.

Another way to look at it is, if you have two setups with different sensor sizes, but the same relative aperture (i.e. f number), same ISO, same sensor resolution, and equivalent focal lengths (i.e. scaled by crop factor), you will have more noise in the image from the smaller sensor. As the parent stated, this is purely due to physics: the lens in the setup with the smaller sensor has a smaller absolute aperture; thus less total light is entering the camera.
My take on that:

Security vulns move waaay faster than algos

Setting your security test labs takes way more effort than opening IDE, LeetCode, checking informatic olympics tasks or maybe some book/pdf/write up/wiki

When developing algos you're in your own world meanwhile security often has to mess with other things like software, standards and stuff

e.g you're interested in web sec/hacking, then except understanding of standards (what it allows and what not, etc.) then you have various implementations to care about like web browser - chromium, gecko, ie, safari and stuff. It's a lot of effort!

Let's say that you want to find vulns in PDF parsers/renderers by checking their code source code - I think it'd take a lot of effort to check and understand (let alone exploit) those implementations in two major browsers (I suppose they're different, but I've never checked that)

>I also don't think ctf's are a good model for security questions during interviews

I didn't meant that, sorry if I made it sound as if I expected people to solve CTF tasks during SE interviews

Just wanted to encourage people to do cool stuff :)
Diversity for Change: Do You Want Invest in Diversity? Join Us Today
How would you map the short URL back to the original?
I tried Strava, but it just wasn't detailed enough for me. I ended up finding smashrun.com. Granted it's only for running, but it's phenomenal. I've been a subscriber for years now, and I can't say enough positive things about it.
That's fair, but the distinction does get blurry. In Auckland over time we have had:

1. Government suggesting that wearing masks on public transport would be good

2. Government asking everyone to wear masks on public transport

3. Government issuing a legally backed health order requiring everyone to wear masks on public transport, but saying police will take an "educative approach", i.e. no actual enforcement

4. Government legally requiring everyone to wear masks and the police actually enforcing it a little bit but mostly not

Theoretically we could have

5. Government enforcing mask usage rigorously.

Apparently some people think that at some point we crossed a line that was really important, but was it #3, #4, or #5, and why?
I've used Didi extensively as an American in China, among other apps, both in local dialects and in English. I don't speak any dialects but rely on coworkers and in region partners to be all "just push this button and enter what mall/hotel/restaurant you're going to." Works with my personal/corporate cards.
And you are puppeting think tank scripts too. Why not calm down and let the facts speak for themselves instead of trying to bully people into silence. That isn't going to work.
That doesn't make any sense whatsoever. You do not hire someone because he knows about a certain technology. You hire people because they will provide long term value to your company and are able to adapt a rapidly changing technology space.

Reversing a binary tree on a whiteboard is certainly a bad question to ask. But I would argue, for all intends and purposes still a miles better indicator about future potential than if someone knows how/why TLS work. Yeah you can read that in a book. I can google it. Useless for interviews.

If you are hiring for a position that requires you to implement TLS, sure go for it. But that is not the rule. And what are you going to do after he has implemented TLS? Will he be able to work on something completely different?
You get the same exposure, not the same amount of light. A larger sensor requires more total light for the same exposure (the light is spread out over more area, after all). This is true equally of film and digital.
Please change the title to the actual paper: "Light Commands: Laser-Based Audio Injection Attacks on Voice-Controllable Systems"

The paper is about sending voice commands using lasers, not sound. There's also no mention of "root access", the paper is just about replaying audio-converted-to-light rather than having any kind of interactive "root" shell prompt. The only feedback to know whether the exploit succeeded would be sending commands (e.g. unlock a door), which the victim might notice.
Go read the best practices for Vault and the "best practices minimum" are even crazier. IME it's all fine to run all these on low-resource single instance in practice, it's just the target audience for the "minimum configuration" isn't really your homelab tinkerer or even SMB/small start-up. Consider that Hashicorp's revenue streams are consulting, enterprise licenses and, since recently, hosted PaaS. If a penny-pinching user comes with replication issues because of resource contention they can just point to those docs. RedHat does the same thing for minimum recommendations for a lot of linux software that in practice will work perfectly fine on much smaller machines.

Your single host mode DO box is most likely perfectly fine. You just won't have the availability benefits during downtime of that instance but, well, duh.

I guess the one practical catch is that if you feel strongly about security and noise neighbor issues, you really should at least separate out Consul Server/Vault Server/Nomad Server into separate machines.

Just whatever you do, make sure to run an odd number of servers (1 is better than 2, 3 is better than 4), or you may run into split-brain grief. Clients are fine to scale as you see fit as they don't partake in raft consensus. So you can have a single instance "client/server", but if you add just a single new instance to schedule jobs on, make it's a pure client.

I have a dozen Nomad clients and about 20 jobs at home. My active Nomad leader is yet to use over 300 MiB RAM, 10% CPU or 0.2 load on RPi-equivalents, even during leader rotation and restarts. It's only when you start to have very high throughput of evaluations and allocations and start to put pressure on raft that you may need to increase your raft_multiplier to make it more relaxed with timeouts.

Tl;dr take the minimum configuration advice with a heap of salt.
> I had been taking very short breath right from my upper chest area. This was actually causing me pain. I learned to breath by expanding my abdomen and after forcefully breathing very slowly like that for 2 days, everything went back to normal. So there's a big tip for anybody reading this. I think it's called diaphragmatic breathing, Google it.

And the moderate version of the other way is called "shallow breathing" or "chest breathing". From what I understand it's actually really common but not very good for us, because it doesn't really expand the bottom of the lungs, so we're not getting as much breath as we should.
> Revenue is taxed at 21% in the US

I hope you're not an accountant.
I'd feel silly working at any office job where I couldn't casually watch a brief YouTube video or share one ith a colleague.

I've only worked at one, (now mostly remote, pre-ncov) maybe I was spoilt, but, perhaps as a result, I wouldn't want to feel that I couldn't. I'm not operating factory machinery.
I think this is one of those cases where everyone actually is arguing in good faith. Nobody is actually in favour of people dying, and nobody is actually in favour of imposing lockdowns just for shits and giggles.
A large number of Realtek products are some form of MIPS core (or at least used to be).
Notably, elsewhere in the thread ‘Sporktacular’ asserts that Sweden really didn’t even have good compliance:

https://news.ycombinator.com/item?id=25119518

Which would imply no lockdown by any definition.
Wow, you're lowballing your chauffeur... Explains why mine loves working with me.
I think you're pointing out the problem already.

Email and associated protocols apply to everyone, public-individual or private. The same technology works whether you're a politician or an ex-girlfriend.

I also agree with your parent, if there is something we need politicians to do, it needs to be a law that makes explicit what the intended outcome is, rather than hold up an unintended consequence of a protocol feature as "good enough", especially when there's potential for collateral damage.
A brief history of logic: Aristotle and deduction
Yes, that's exactly the point. I don't want those people around my codebase. Nobody on a Crusade to get you to adopt ProtoBuffers or Thrift. No codes of conduct. No risk of getting abandoned when priorities shift (like HHVM dropping support for PHP code). Heaven! I love software again :D
That's fair. That's probably a cultural difference between my country and yours.
Very believable that there was institutional inertia for using the chip that they already understood well instead of a brand new chip just appearing on the market. The new chip might be better but you could lose a month or three of development time integrating it, assuming you don't run across an unexpected bug.

But at the same time it's no surprise that later models switched over to the cheaper and more technically capable chip.
How are they going to do that at the place where you're not legally allowed to be staying?

This was reckless and stupid of them and demonstrates what AirBnB often does -- that they put their business above the safety of their guests and hosts.
I guess you did not appreciate any corrections I might have.

More seriously, I think you would be surprised at the variety of human experience that’s not covered by your ideals here.
Depends on what else gets approved. Best case is both of these are approved this year, with a couple others by the end of January. If that best case happens we could see countries opening up starting in March, with full opening up this summer.
> Honestly this seems entirely reasonable

I want to agree with your optimistic view of this, but I can't, because I don't think reason was used in making the decision.

I think the reality is probably closer to this:

Product: "so we can't let users block our own apps. it might break things in weird ways and also they implicitly trust us already because we make their OS".

Engineers on the application firewall team: "ok cool, we'll disable users from blocking Apple apps".

Any freedom you're enjoying with PF isn't there because Apple decided it was a good idea. It's there because Apple decided to build on BSD.

I'm actually surprised MacOS even has PF (apparently since 2015, enhanced from other BSD implementations). I did a minimal amount of searching and found this now-relevant gem: https://manjusri.ucsc.edu/2015/03/10/PF-on-Mac-OS-X/

> If two firewalls, Application Firewall & PF, are both running, you may wonder whose rules take precedence. Let’s find out.

> ...

> So one can conclude that PF rules are applied first, then the rules for Application Firewall.
You don't need to know much about security to write safe programs. Most of the work is done by others. You need to know how to avoid common pitfalls (i.e. yeah, if your service uses 3rd party code to parse customer provided data and your colleague suggests using this awesome C++ library for it, maybe some alarm bells should go off).

Advanced security knowledge is not needed for developing software. What you need is a security team that reviews the work your developers produce. That's it.

> bad algo can almost always be rewritten, leak cannot be reverted.

And while a bad algo can be rewritten, bad software often can not. Bad programmers are a disaster for scalable software projects. A leak can not be reverted, but so can't the product you didn't ship because you hired the wrong people. Or the company who goes bankrupt because you weren't able to ship a product.

Building software with security engineers instead of software engineers is like trying to win a Formula One race with Fighter Jet pilots.
The last time I was in Palermo with my OG Italian father we had Marinara pizzas and beer for lunch, there was nothing unusual about it.

But pizza stuffs was the restaurant's clearly advertised purpose.
Haha. I remember AMA95's first lecture where Prof Cohen said "the course catalog describes this class as introductory. It is, but make no mistake, it is not elementary."

AMA95 had a reputation for being a trial by fire. Doing well in it meant you were going to graduate.

Tough as he was, I liked Prof Cohen. He was a no nonsense kind of guy, and obviously enjoyed his subject. I was sorry to read he passed on recently.
I think you need to do some research before being so flippant. You should have understood that the United States is in the middle of the pack with mask wearing at nearly 80%. That's higher than Britain, Germany and Denmark and just below China and Canada. Furthermore countries with higher compliance are also seeing additional waves (Italy and France).

Perhaps instead of acting like a fool on the internet you research the nonsense you spout. Spreading lies just makes the world more divisive.

Source: https://www.economist.com/graphic-detail/2020/10/06/pandemic...
Two paths forward for the American press
Parameterized types can help here a lot. I didn't want to speak to them too quickly so I blurred a few lines, but it's a good point.

Parametric types help with part (a) by allowing you to specify only part of the structure of your type. That can help enormously, though they also force some amount of concretion in your type which isn't always good. Ultimately, OCaml's module system is pointed in the direction of ad hoc polymorphism where you pass in behavior with your abstracted types.

Subtyping supports this passing of behavior as it lets you specify a whole space of types abstractly. In that way, it's a little more supportive of the pathway to ad hoc polymorphism.
So basically we just need to wait until after the years end to know.

What do you think? A month or two into 2021?

https://i.imgur.com/E1M8eMj.png

The fact the prior "spikes" during April-June, which were way smaller than the current November spike (1678 june peak vs 5764 nov peak) didn't already caused a notable increase is mildly interesting. But really Sweden did great overall until recently when the had the first major spike.

Maybe 1000/day extra covid positive cases really isnt enough to move the fatality needle much compared to the average normal deaths... and in many countries recent spikes (Sept-Nov) have also had much lower fatality rates vs positive rates as well.
Whether or not "10x programmers" exist, I can say for sure that 1/10th programmers exist. I know a few in that category. And it really amounts to the same thing.