skysight-inc/HackerNews huggingface dataset:
Interesting Troy went full-on wireless for all this. I'll be building a new home soon and am somewhat inclined to run wires to everywhere that little sensors and activators and other devices will go. Mainly for more peace of mind re security, reduced spectrum noise, reliability (and of course power).

I just wish there were more wired product options out there. Love to hear recommendations.

Also, is Ubiquity generally considered more suitable now than OpenWRT/Tomato/Dd-WRT and the like? At present I have a fleet of off-the-shelf routers deployed at various properties with custom bits added to the firmware (for improved monitoring, history, auditing, even periodically speed testing radio links and whatnot).

I read sometime back Ubiquity killed off some of the programmability features and that lent some wariness to my long term plans to switch over to their gear.
New Version ESPlay Micro V2 – ESP32 Handheld Game Console
BunnyCDN is amazing. But their product isn't a 1:1 replacement for Cloudflare.
I feel like my govs laws over the past decade (one major party of which i know for sure is in bed with a major real estate development company) has allowed housing prices to grow way too quickly in a country where they're already too high and has disproportionately favoured landlords and scummy real estate agencies.

I think this is terrible for society and the younger generations.

If I was offered the option of becoming a landlord or the like and making good bank that way of this whole shitfest I'd gladly and quickly accept and on the other side donate some of the money to campaigning for a party against this mess.
Nobody would to come around and call me a hypocrite for that and expect me to think highly of them.
> This is from 5 minutes ago. I have both glibc-locales and glibc-utf8-locales installed:

> /gnu/store/29jhbbg1hf557x8j53f9sxd9imlmf02a-bash-minimal-5.0.7/bin/bash: warning: setlocale: LC_ALL: cannot change locale (en_US.utf8)

Right. The problem here is that you haven't updated the guix-daemon since you installed Guix. To get the fix rekado mentioned, you need to 'guix pull && guix upgrade' as root and restart the daemon.

(I can tell because you're using bash 5.0.7 from 1+ year ago)

You can also change the systemd service to use guix-daemon from your users Guix instead of 'root'. Arguably the installer could ask whether to do this, although users probably won't understand the security implications.

> And, as I'm testing, I also notice that even for operations which require no changes, a guix pull takes 5 or more minutes over the equivalent nix operation. Why am I building guix-system for 5 minutes with nothing to be done?

That happens when there are no substitutes available for 'guix pull'. Work is ongoing in improving the compiler performance, but this is mostly "bad luck" (because you pulled a commit not yet built by the CI).

Wrt scriptability of the installer, IIUC the problem is that it returns "1" when a previous installation was detected? You can easily account for that in your "dotfiles up" script, no? Similarly, if you add the GPG key to your dotfiles you no longer have to download it every time.
Yes, recommendation should be personalized anyway, so you can get videos from 9 years ago and I don't.
Did you read the top answer? Level 3 compliance doesn't sound trivial at all.
It might not be a hard boundary, but I think the perception of ML vs. optimization is how much of a model you have. If all you have is a black box, then it's ML; if you know how the system you are studying works, it's (parameter) optimization.
I've been trying to figure out what the best way to become a "net zero carbon human". Although there's a clear consensus that reducing emissions is great, but what's next?
What do you do with the emissions you inevitably produce? As an amateur, it's super confusing:
- offsetting is criticised as "paying of your guilt without fixing the problem"
- carbon capture is next to impossible as an individual because there are so few projects to sponsor, besides planting trees which has questionable returns in the long run since who can guarantee these trees will not be burned 50 years from now?

Any ideas or good overviews are welcome.
How to hash passwords using Bcrypt in Node.js
Anyone who also gets debilitating vertigo instead of headaches when having migraines?

I’m suffering from vertigo for 17 years now—from multiple times per week to having it only a few times per month.

When having an attack/phase getting my head into another position triggers really strong vertigo which is strange.

Everything else is ruled out (including bppv).

Often times I also have blurry vision, things just feel out of proportion and I’m having a really tense feeling in my face/jaw. (Which may be associated to migraines).

I almost never have headache.

Someone who feels the same?
I wonder if you could implement adaptive difficulty: Hints gradually becoming more obvious over time; initial hint level for new challenges adaptive to how much you needed them in the past.
On things I've personally worked on, I tend to just use the basic libraries supplied by the vendor, or even just implement everything myself from reading data sheets. This is obviously realistic mainly for very small and simple systems, which is what I've usually worked with.
Count me in the wait list. I would love it if you could share the whole steps to decrypt and SQL query.
Will pay the favour forward.
It is a nice, albeit problematic example. Nonetheless I find many such examples in my daily work as a Data Analyst.

Regarding recommender systems I see many companies trying neural nets and so many other fancy ML stuff for things that - in AB-tests are always outperformed by basic rules.

I understand the fun it is to build stuff and to use the new hot stuff. And at least for many analysts and marketing people as well as shop product owners this is new hot shit.

I also understand, that it is way more easy to get management to hand out the big bucks for something that is the new rage, as they tend to read the respective soundbites in their manager magazines.

But as said - I see it underperforming in tests nearly all the time. Not only, but esp. if you take the costs of development and maintenance into account. These systems cost more to build, more to enhance, more to run and bring in less real business value 70 - 90 percent of all the times I have seen them.

But they are presented to management in shiny presentations from agencies that need to sell the new hot shit to their clients to show that they are relevant. Because, as said, management thinks they need it and are often not open to agencies telling them, that the business value could be better served otherwise. Because in the end for a manager it is often times more valuable to show a fancy state of the art project to his/her higher ups than creating real business value.
Is one not allowed to learn ? I'm not familiar with eth foundation's statements but they have matured a lot since 2015 and i wouldn't say they underdeliver, there are 100s of real world applications that are using eth dapps already today. I believe it's different because i understand the tech. It's feasible. Assuming PoS works, it will scale.

Eth2 is also not hard fork. The old chain will be attached to the new chain
Stablecoins: Potential, Risks and Regulation
China has given almost a million people experimental Covid vaccine, says company
But who has that bias? Is it you? People in academia certainly not. It would be absurd. As if medical doctors and nurses would be against the education of the population for lifesaving techniques and for healthy eating.
Oh I see. Sorry I took "This free money" to mean the money flowing into finance, largely as a result of regulatory changes IIRC, rather than direct govt. spending. But it's possible I've lost the thread of what's being argued here.
Oh boy, you should watch Gaspar Noe’s “Irreversible”.
That doesn't sound like using Arduino in a product, though?
When I was in university, we used Logisim[0] for our intro to digital logic class. I think you could probably simulate such a computer in this tool if you wanted something intuitive. Otherwise you can prepare your design in a high level logic language like Verilog and test it using Verilator [1]. Naturally there is always a risk when going from running in a simulator to the real PCB.

[0] http://www.cburch.com/logisim/
[1] https://www.veripool.org/wiki/verilator
I believe they did something more manual than this in Fahrenheit 451 to find people.
>Yes, just posting on a forum alone puts you in the tiny minority of consumers. There are huge swaths of people that barely like to read content, let alone write.

My stepfather was an idiot, a drunkard, a gambling addict, a drug addict, easily conned by direct marketing and ponzi schemes, with not a large number of friends, and poorly educated.

He read, as far as I have been able to figure out, 1 book in his life and he read that book 75% of the way finished (It was some sort of crime book - pretty thick though so about the 600-800 pages length)

But when the internet came around he got himself an online identity and was out on forums of people who shared his interests all the time posting his views on things.

There are really not very many people out there less capable than my stepfather, percentage wise. I do not believe there are huge swathes of people that he beat.

>Look at how many youtube videos dominate search results with hundreds of thousands of views for “how to” X when X is trivially described in a few lines of text.

given that youtube is owned by the Google, not sure what to take from that other than they put results from one of their properties at the top for purposes of their own.

although I often take a how to X video over text because even though the X is trivially described there are a lot of extra things you can find out from the video really quick - for example if you search for how to do X in Y

and you read a tutorial, it can be that the tutorial is slightly off from your version of Y, and you spend time trying to figure out if it is the tutorial that is wrong, if you have misunderstood their trivial few lines of text because the text might not be clearly written and so on and so forth, but when you look at the video if it shows a menu entry being clicked on that just does not exist then you know they have something different than you do and if you can't immediately figure out what your system change has been try to go find some other solution.

It is the extra information that a video gives that can make the video useful. As to which to choose is dependent on a lot of things.
More accurate title:

You probably don't need a neural network if your model has 5 inputs.
It's even more hilarious that there is typically a disconnect between hardware and software management, so that you could have one dept buying this sort of war-resistant servers and then handing them off to a different, averagely-incompetent dept who will use them to run ancient exploit-ridden software with default passwords.
The price seems reasonable for the kind of effort that compliance requires. Though if you are not bound by this very particular security level, it probably doesn't make sense to use this instead of strong cryptography alone. If the encryption is strong enough, you don't need the fancy intrusion detection.
You could always buy some cheap land somewhere, start a coppice and produce charcoal that you bury.
Also, "It's all on your own terms" on a amazon website begins to sound like a threat. :D
ethereum moving to pos is less important than and obscures their admission of failure at developing a scalable "world computer" as described in original "whitepaper". they've moved on from maintaining essentially a serializable database to some "sharded" contraption with vague description of how cross-shard synchronization should work and how conflicts will be resolved. and most importantly, none of this has been tested in real world, so i'm grabbing some popcorn and getting ready for the show.
I'm not sure what the answerer is trying to imply, but it seems like it's more a question of willingness to pay being very different between government and private individuals than real differences in quality.

Sure, there has to be some sort of hoop to jump through with certification, but it doesn't sound like it actually makes a laptop's worth of price difference.

Businesses do this all the time, they make an item and sell it at different prices to different entities. Put a small wrinkle on the expensive version so it's not too embarassing for the guy who buys the expensive one. That way you get what the cheap guy is willing to pay and the rich guy. Even universities do this with tuition fees. I have friends who write code for the government, and they also raise their prices for the same thing, they've even been told they were too cheap to seem credible.
What I mean is it displays a button to click after I clicked play on video when I use Edge, which is my main drive nowadays. And the comments are not displaying. It cannot be only my experience I hope :S so I get downvoted because my taste not liking old videos :/
Comcast offers unlimited data for $30/month more.
The E-Mail they sent had different wording, only mentioning ring as example for things this works with:

> For example, if your device loses its wifi connection, Sidewalk can simplify reconnecting to your router and help set up new Echo devices. Sidewalk can also extend the coverage for Sidewalk-enabled devices, such as Ring smart lights and pet and object trackers, so they can stay connected and continue to work over longer distances.

> When enabled, Sidewalk uses a small portion of your Internet bandwidth to provide these services to you and your neighbors. This setting will apply to all of your supported Echo and Ring devices that are linked to your Amazon account.

> Sidewalk is coming to your Echo device later this year, but you can disable this feature at any time from the Amazon Alexa app.
It's even worse than that from experience. Most of these financial institutions had terrible practices before and the surface area of their terrible practices is huge and mostly unknown. So when they go and apply some new super secure process or audit they don't actually apply it across their entire estate or the organisation is so thoroughly compartmentalised that it's impossible to get everyone to align with the goals of the audit. The only outcome is what they call a partial success but I call a complete failure.
Nethack - https://www.nethack.org
Well, what should I do in your opinion?
Loved this post, thanks for the detailed write-up. As a solo-SaaS-founder I have a persistent, but very mild anxiety of something like this happening. The attacks we've received have been comparably mild and easy to mitigate.

Boggles my mind who the heck thinks Fathom is valuable enough to target with such a persistent series of attacks.
And probably none of those drivers who killed will spend a single day in prison.
The Marxist position is not about 'equality' or wealth distribution, and there are at lease two pieces of work by Marx criticizing those concepts explicitly. Marxist thought is a critique of the production process of capital, and does not concern the wealth of individuals at all - Marx himself went to pains to distance himself from that interpretation of his work.

So I'm not sure where the presumption that a socialist must give away his wealth or live modestly comes from. Marx and Engels saw the first step of revolutionary activity being to understand and investigate, bit they were also part of various practical organisations such as the IWA, and the Manifesto was itself an on-the-nose propaganda document.

Why doesn't the Queen give away her throne for the good of her country? Because the boost to the economy from the tourism generated around it helps even more. As it turns out, we can imagine that the world would have been very different and the pair of theorists much less consequential had they spent their energies on philanthropy rather than burning the midnight oil at the British Library.
Don't forget this famous joke:
https://www.gnu.org/fun/jokes/ed-msg.en.html
What you are describing is not private property, but personal property.
WLTP "high" is essentially "rural road in the summer with a 70-90km/h speed limit" - achievable, but not commonly the case.
New law unveiled to make UK 5G network safer
I'm going to offer a different opinion:

The difference is that if you encrypt a file with a strong, industry standard algorithm, with proper key derivation, enough entropy on your passphrase, and stick it on a $27 USB key, you can be personally certain (by most reasonable standards) that your data is secure at rest.

However, if you put a file on a $1657 IronKey, you have to trust the certification (the Infineon ROCA snafu has proven beyond a shadow of a doubt that FIPS certification is no guarantee when it comes to the crypto algorithms - and look at stuff like that CVE that affected only the FIPS version of the YubiKey due to extra complexity the certification stuff required!), and have no guarantee that your data is indeed encrypted with your passphrase. Indeed, it's quite common for these "secure" devices to merely encrypt your data with a fixed or variable but not passphrase-derived encryption key, and then merely check the passphrase against a hash (with attempt limits). They are hardened against attacks to bypass this, but they do not offer pure cryptographic protection for your data, unlike the $27 + software solution.

Put another way: use a long enough passphrase, and the $27 solution is superior. Use a short passphrase or PIN, and the $1657 solution is hopefully superior (though you have no true guarantee or way to know for sure).

You are paying >$1k for the convenience of using a short passphrase, and in exchange you have to trust the manufacturer.

Give me a megabuck or two and I bet I have a good chance of getting your files out of an IronKey. Give me a megabuck or two and I can do nothing against software encryption with a 32-character passphrase.

If I'm lucky I might even find an IronKey exploit that can be performed for much cheaper. Finding physical exploits (e.g. power, EMI, or even optical glitching attacks, nevermind stuff like pure firmware exploits) is much easier than breaking proper crypto.

By the way, the same trade-off exists with Android (in old school FDE mode) vs iPhone secure enclave stuff. The iPhone solution has many advantages for many use cases, but if we're talking strictly about security of data at rest (i.e. from
a powered off state) I trust my rooted Android with a long FDE passphrase over any iPhone. The latter only entangles a subset of user data with the lockscreen code, and does not allow you to set a separate longer boot-time passphrase from the normal unlock code (nor does regular Android, but you can do it with root).

(disclaimer: it's been years since I looked at IronKeys and had this thought experiment; at the time they definitely made no claims of deriving the encryption key from your passphrase and I seem to recall reading somewhere that they don't, but I haven't checked their marketing these days)
The cost based on sum-of-parts, does seem to be unreasonable... but few products are measured based on their ingredients alone.

Having been involved in the FIPS-140 certification process I know first hand it is both slow and expensive.

It is fair to say that the general consumer version shouldn't shoulder the burden of this cost, and the market for this product is small.

Therefore, the 'unreasonable' price likely isn't that ridiculous.
I think Arthur Samuel would agree. This approach has a loss function, parameters, and inputs that feed in to a model to optimise the parameters.

The big difference between this and the other approach mentioned in the article is the model is a simple one that's easy to understand instead of a many layered neural network which is rather opaque.

I think the article may be better titled "You might not need neural networks."
It's been an incremental war. For context, I've been posting about this for 20 years; during that time all the devices you say "we already have" were invented.

This has eaten away at the average person's computing freedom, ironically while providing them a ton more computing power and capability.

> They don't threaten the 'ordinary' PC market.

Not directly, but think about this:

* I know people who do not own a PC anymore, they just have tablet, phone, and TV. No need, apparently, but...

* This results in a ton of kids growing up without early exposure to general purpose computing

* This has been an increasing trend for quite some time now, and Pluton is just the next incarnation of Palladium, which tells us that Microsoft really does still see a completely captured market in their future. Linux plays a role, but in the embrace-and-extend sense; while WSL helps squeeze Linux out as a desktop OS down on the ground, Microsoft's ownership of Github cements it in the cloud.

I know, I know, old man yells at cloud, I don't expect this train to stop, I just want people to stop and think once in a while about where it might be going. It's OK to dream up worst-case scenarios and then strategize for how you might fend off that eventuality even if it's unlikely.
Very interesting perspective. Most people who live with bank money can't even imagine a world without it.

There is one thing a centralised digital currency makes far easier, though. It makes it easier to "print" new money and cream that off into bankers' pockets. Most of the richest people in the world are in finance.
They do advocate wealth redistribution: redistributing it to the wealthy.
The top answer writes enthusiastically about how difficult it is, but without providing any real details. The crazy epoxy stuff he writes about is not specified in the FIPS requirements but rather a lazy hack some people do when they want to run non-FIPS certified consumer hardware.

Remarkably he even hypothesizes the solution that they almost certainly are using here, without realizing how trivial it is:

> Guess: maybe there are tiny wires in the casing and an "intrusion detection" chip with its own battery that is never powered off so that it can monitor for breakage of the wires and trigger a wipe?

This is very likely what they are doing. And it's both simple and cheap to manufacture and implement at scale. Basically the inner-side of the metal casing is conductive and etched to be a big wire looping around the device, forming a circuit. Any attempt to drill or decase it will break the circuit and trigger a wipe. The wipe itself is done by a small 16-bit microcontroller powered off a watch battery or large capacitor. All the parts cost less than a dollar, and the case etching machine is something a company like Kingston would have on hand for other purposes.

At my last job we had to roll our own physical security solution for protecting keys because the off-the-shelf FIPS level 3 stuff was so brain-dead stupid and easy to defeat that it didn't meat our security needs.
New Financial Data Blog
The issue is that the device may not be able to go to blogs hosted outside of the Trusted Ecosystem of Fact-Check Verified Not-Fake-News Websites, one day. Who knows?
If this was an open network, it would be very cool indeed. But... I'm assuming it's not.
Another one man-team here, I find it fascinating how our stacks have at least a 90% overlap. Also funny that we both build analytics tools :)

For your front to back integration: I suggest you look into django-graphene and reacts apollo-client. That small addition to my stack has, at least, doubled if not tripled my churn speed. Throw in something like Django-channels and you get a modern full async websocket capable reactive framework :)