skysight-inc/HackerNews huggingface dataset:
Can someone ELI5 what are the differences between the different libraries are? The article uses a lot of jargon, an something that frustrates me about getting into machine learning is that teaching material will either abstract away what the internals do or assume that you already know how the internals work.

Some specific questions:

> They provide ways of specifying and building computational graphs

Is the article talking about neural networks? As in, arrays of arrays of weights, where input values go through successive layers, and for each layer the same instruction is applied to some values with the respective weight?

Or is it talking about a graph as in, a functional graph, where manually written functions call other manually written functions? (hence why a later paragraph talks about if-else statements and for loops)

> Almost all tensor computation libraries support autodifferentiation in some capacity (either forward-mode, backward-mode, or both).

What are those?

From the wikipedia article, it sounds like autodifferentiation basically means running f(x+dx)-f(x), but if there are entire frameworks handling it, then there's probably something fancier going on.

> According to the JAX quickstart, JAX bills itself as “NumPy on the CPU, GPU, and TPU, with great automatic differentiation for high-performance machine learning research”. Hence, its focus is heavily on autodifferentiation.

The earlier description makes it sound like JAX does some cutting-edge compilation stuff to transform semi-arbitrary functions (with ifs and else and loops and stuff) into a function that returns it derivative.

So how can that stuff run on the GPU? It sounds like there would be a lot of branching code.

And how is that related to machine learning / neural networks?
I don't mind that my ads are targeted based on my location, content of my messages, etc.

... What I mind is that nobody can assure who the buyers of my data are, or what they're really using it for. Facebook says "small businesses", but there are no guarantees it's not your government, a foreign government, your employer, your insurance company, a scammer, etc.
I try very hard (and still often fail) to put myself in the shoes of people who are meaningfully not like me, and one thing that's come from that is understanding how motivation doesn't always track equally for everyone (and trying to come to terms with the fact that this might be okay).

Finding things that give enjoyment and deliberately distract from the things going on in a person's life has potentially immense value, depending on what those things going on in their life are.

The implicit agreement made here is that both parties know what you're saying, and both parties agree to not talk about it -- for the seller, because it's an ethical quandary, for the buyer because they don't want to have to confront the things in their life they're trying to ignore.

It doesn't always have to be so sinister of course (maybe I just want to relax and am otherwise keeping my responsibilities), but it can be sinister, which I think is what you're getting at. My argument is that both parties know this, and it may be the whole point.
It’s coming up on a year since I got wheeled into the operating room as my Christmas present for 2019. I’m obviously still here to tell the tale, but the thought did cross my mind: “how much of a hurry are you to get home, Dr. Takiyama?” But according to TFA, a Christmas Day surgery was about equal in risk to one on the surgeon’s birthday. Which means my worries weren’t entirely unfounded.
How long will that persist? Any such company has no chance of being included in e.g. S&P 500 so there's clearly strong pressure in the opposite direction...
> It’s the same for most services. You’re not competing against the other players in your industry. You’re fighting for attention with Minecraft and Mario. There are only 24 hours in the day – who does the customer choose to spend it with?

I went to PAX 2012 and they had a panel literally called, "Free-to-Play Games: Brilliant, Evil, or Brilliantly Evil?". I directly asked the question of how they were going to deal with attention being the currency and competing with each other. Especially given that there was a limited amount of attention, while money can be easily spent in parallel.

I don't remember receiving any kind of satisfactory answer.
> I feel like I'm in the minority in that I prefer to NOT learn things by just "diving in". I am much more successful when I start from the absolute fundamentals.

A bit more off-topic, but this resonated with me. I too feel more comfortable when I start with the absolute fundamentals. When something does not work, knowing the fundamentals helps me to reason about why it does not work from the first principles. On similar lines, I did a relevant "Show HN" post here today:

Emacs4CL: https://github.com/susam/emacs4cl (35 lines of ~/.emacs to turn Emacs into Common Lisp dev environment)

It bothers me a little when someone new to Common Lisp or Emacs is encouraged to start off with Portacle or Spacemacs directly without appreciating the extensibility of Emacs and how SLIME fits in the environment. The Show HN post on Emacs4CL I have linked to above is an attempt to promote a more DIY approach to setting up one's development environment for Common Lisp without having to spend a lot of time.
Agreed. The claim is "The reason behind it is that EFI variables are stored on UFS, while firmware and OS cannot share the UFS device."

Ok, but why can't it use the EFI runtime services to write to the efi vars, like Windows' bcdedit does? After all, bypassing the firmware to write the vars should actually be riskier, as to my knowledge UEFI does not mandate any specific format for them in NVRAM, so a vendor very much could use a custom format if they wanted, even though almost everybody just uses a modified version of the reference implementation.
>When secure boot started to go mainstream there was a lot of FUD that it was really just a mechanism to lock out alternative OSes.

It wasn't just FUD. Microsoft has changed their tune on this over the years, but it used to be that their certification requirements mandated that users could not disable secure boot on ARM devices: https://arstechnica.com/information-technology/2012/01/micro...

If that were still their policy today, it would make projects like this nearly impossible.
> Going public also means loosing parts or all of your control over the company

only if all shares have equal voting rights.
Yeah, Clojure is one of those languages where functional purity at all costs isn't really the goal. Like others have said its more about being careful how you set state and Clojure gives you loads of great functions for doing everything in a pure way. Its standard library is its greatest asset as far as I'm concerned
Clearly that tools webpage hasn't been updated in the intervening 11 years.
There is no additional mechanism, You just open text files as many times as you want with any program. (Unless I misunderstand the parent comments)
[edit] UK situation regarding GDPR might be a bit different though as, if I understood correctly, they implemented GDPR as separate national law (instead of it just being EU regulation). https://www.legislation.gov.uk/ukpga/2018/12/introduction/en...

GDPR is not an EU directive. Directives are the ones that member states will need to adopt to their own laws. One example would be consumer rights directive. It gives a list of goals, but member states can decide how to archive them.

Regulations, like GDPR, come in effect automatically on the whole EU. One example of these, in addition to GDPR, would be various economic sanctions.

If someone leaves EU, they would still keep all those laws they implemented before but are free to change if they wish by following their own law making procedures. However, they would no longer need to care about any of the regulations (they may need to follow some if they wish to trade with EU). They are free to still adhere to them if they wish. They may need to adopt some laws for them if their national regulation bodies don't have necessary rights to enforce such regulation (as earlier EU regulation would have triumphed national law).
This seems like a positive outcome to me - thicker plastic bags are more durable, can be reused for longer etc., so while there may still be the same amount of plastic "being used", more of it is presumably plastic that has been used before, and so less ending up in landfill?
Yes. Every time rich people displace poor people, it's a problem.

There are a lot of things that rich people can do besides displace poor people. Maybe you can think of some.
Motional and Lyft target 2023 to deploy driverless robotaxi in major US cities
Someone worked hard to create that technology, though, some times with the environment in mind. It's not like technology picks sides.
How to Build and Install Cabinets
Yeah, the interesting attack vectors for side channel signals are ones that don't require malware. Reading data emitted by knowing the target machine's hardware and software is a little more realistic, but still difficult. I remember seeing a demo of someone using an SDR (AM band or close to it) to read emissions from Word's spell check on a laptop in the same room.

If I remember correctly, AWS identified a side channel vulnerabily a year or so ago and had to make some updates. I forget the mechanism, but I think it had to do with VMs on the same hardware being able to access statistics (voltages or power consumption) on the hardware usage that would allow an attacker to access sensitive data, or leak data between the VMs. I don't think any attack actuallly used that mechanism before they patched it though.
Well it's a business model most artist used for centuries before recording and mass production was possible. Busking is still using it to this day.

I find nothing gross in it, it's actually better in many ways because you have immediate feedback so you can develop quicker (whether you want to develop in a particular direction your current audience wants is another matter).
I mean, this is capitalism and its relentless. If she wasn't doing this, with so many others, then she might not be able to pay her bills. Its hard to argue ethical life when capitalism is so demanding of us. I imagine if we looked at your financial life, and mine too, we'd see us doing or at least being part of some things that seem unethical to others. No need to pick just on her. We're all guilty of this unfortunately.
I think for any commercial site, it's likely cheaper to use a platform like next or nuxt and a CDN rather than choking your build pipeline with static generation. You still get static performance and just offload it to an edge network and CDN costs are racing downwards.
This is a bit tangential but what helped me most in picking up Lisp was writing my own. Until I worked through Make A Lisp [0] I don't think I really "got" Lisp. You can work in whatever language you're familiar with. You build a Lisp similar to Clojure and learn a lot of important concepts by implementing them.

[0] https://github.com/kanaka/mal
So 2 months of Netflix?
> What is its primary function?

Inflation hedge.

If you look at the amound of USD that has been issued in the last year alone, that's a fairly attractive proposition.
This is egregious, for sure, but it doesn't explain how a DLL signed with their certificate ended up in the wild.

Have SolarWinds' handling practices for their code signing certificate come to light? It's sounding more and more like we're going to find out it was a "PFX file w/ the password 'password' saved on a network share" kind of situation.
"Nacho server" (not your server) also works.
That's not surprising - lots of the time you want to write what he impact is up front.

It was pretty easy to just click "Documentation" and see more:
https://vercel.com/docs

> Vercel is a cloud platform for static sites and Serverless Functions that fits perfectly with your workflow. It enables developers to host Jamstack websites and web services that deploy instantly, scale automatically, and requires no supervision, all with no configuration.

Seems fairly clear what it does.
Big datasets matching health outcomes to blood sample spectroscopy seems like a good candidate for identifying chemicals which detrimentally affect human health by small amounts.

Obviously you won't be able to separate cause and effect, but in my view if "X chemical in people's blood leads to a higher likelihood of dropping out of school", thats a good enough reason to restrict the use of X, even if it sometimes turns out there is no causal effect.
I love using Vercel. It’s impressive what they’ve built in Open Source and their own product with a relatively small team.

Microsoft/GitHub could be a good landing spot for them if they are to sell.
A book about cancel culture gets canceled?
High housing prices are mostly explained by lack of housing. Here's one good article on the subject, specifically written to address the arguments of people who are skeptical of this claim:

https://furmancenter.org/research/publication/supply-skeptic....
I love the word "since" in the title.
Note added after HN editing hour closed: The reason I created these Procedure Cards is that when I was really tired — for example at 1 a.m. after I'd been on call and working 18 hours since 7 a.m. the previous day, with six more hours to go till I was relieved at 7 a.m. — I invariably forgot something I needed and had to wait or make do because of this fatigue-induced lapse. With my list, I was able to do what I knew how to do without having to try and remember a zillion specific things.
If you read the reports, rather than second or third hand coverage, note how the attacker concealed their activities after they got in. That’s what sophisticated refers to - breaches are common but avoiding detection for so long on so many networks is not.
https://bitcointreasuries.org/ - the demand created by public companies buying Bitcoin wholesale.
This Stanford professor is confronting tech’s billionaire philosophers
The Freddo was - https://fullfact.org/online/freddos-vs-inflation/

I used Mars Bar in the title because I'm writing for an international audience. And I don't think Freddo travels as widely.
Marketing is responsible for communicating value to their users and buyers, not the entire population. Consider the possibility that if you can't wrap your mind around a product even after several explanations, maybe you're not the target audience.

I don't mean this in a negative way, and concede that Marketing often fails to even get their users and buyers to understand.
If you want a bunch of Lispers to recommend a Lisp, then it's hard not get the most traditional one recommended. If you think the value proposition of Clojure sounds interesting, then just go with Clojure. If you think Racket sounds interesting, just go with Racket. They're all Lisps, but serve different niches.
1) You need to do something when many windows are open. Making windows small is predictable and lets the user position the windows "correctly".

Possible "correct" positions I can think of is: move a window to a different workspace (so not all are visible at the same time). Make a window floating (I often have a small terminal open that I shove into deadspace of another window).

2) It can serve as a selection pane. Half of the screen is devoted to the current window, While the other half (possibly sized to take up less than half the screen) is storing a bunch of windows to be swapped in for the current one.
I would imagine the audience for these full page ads isn't the general public - it's regulators and lobbyists. The ad highlights that Apple has the ability to unilaterally make decisions that can damage revenues for millions of businesses overnight.

Even if the decisions are made in the name of noble causes like privacy, this raises huge antitrust flags.
Working with matrices is similar in Julia. In fact, the syntax was partly influenced by the desire to make it easy for MATLAB users to pick up.
Does that mean it's effectively easier to fund a startup nowadays?
They missed one other thing. Having a "$" in front of every line that makes it impossible to directly copy/paste the commands.
You'll get used to it. It's like black coffee.
of course it s a huge player but not crucial. there are even many smaller players who will certainly take over if FB is ever restricted
It has currency fundamentals. Those are 1) limited supply/no one can print it 2) widely recognized 3) easily transferred and stored 4) difficult to steal or forge

The strength of those properties in Bitcoin are fairly unique and unprecedented. It makes it an ideal means of storing value in the long term. I think the main downside is the amount of speculation that’s been going on and the volatility that results from that speculation. That’s likely to change as it becomes more and more mainstream and more people use it as an emergency savings account protected from fiat devaluation rather than an investment.

I agree that the unlimited upside some people are touting doesn’t make any sense, but I think it does have the potential to grow further. I don’t know how much, but it’s still a niche area. Would be interested to see what the world looks like where most people have 5% of their savings in bitcoin.
Anecdotally - I've mostly stopped using plastic bin liners in the smaller bins where I could previously have reused carrier bags from shops. Rubbish goes in the bin directly & that gets tipped into wheelie bin periodically. Slightly limits what I put in these smaller bins (essentially, dry stuff only - anything wet goes in larger bin that always required a purchased bin liner anyway), but otherwise impact is minimal.
I've been using i3 for about six months or so now, and the biggest thing I've realized is that Alt+Tab as a way to switch between windows is such a frustrating approach to window management. Once you have more than two windows I need to switch between, I am constantly losing track of which one is next in the queue.

i3 (and other tiling managers) let you more easily navigate between windows by using their location. I can switch to the window to the left, or to the right, or use i3's tabbed interface to navigate windows similar to a browser, or switch between workspaces. But the point is, the windows are always in the same order, in the same location (unless I move them), so I find it so much easier to quickly switch between them.
25-29p, I seem to remember the larger Mars bars were 35p or 40p around 1996
This is the most frustrating pattern in online discussion of science. A post title presents a conclusion, then the top comment proposes some alternative cause of the conclusion or some hypothesized methodological weakness in the research, then readers assume that the research is bad. Often, the exact specific criticism appears directly in the paper because the researchers thought of that too.
Isn't that the essential essence of all live entertainment events? Tossing money at people to entertain you? What's the difference between that and a concert: that you prepaid the concert ahead of time?
They might ask if password complexity/rotation is enforced. They probably don't ask if any accounts (service accounts, etc..) are excluded from rotation. People are also taught to not volunteer anything to an auditor. ... and this does not even get into the subject of ssh keys and ssh CA's, which most auditors don't even ask about at all.

I personally put less value in audits and more value in Red Teams being given full immunity to penetrate every nook and cranny. I would like to see more companies incentivize and reward in-depth penetration testing in all environments, including production. For the corporate leaders reading this, there is risk, but the reward is uncovering many future landmines your operations, code deployment teams and internet user base would have stepped on.
This isn't really a mundane detail though. The fact they have non secure (not even SFTP or FTP over SSL) FTP access open to their main downloads page with a ridiculously insecure password is pretty startling. I can't even understand why they had FTP running like that.
New Backup System
When a project you rely on dies, what then? Also it sets the culture of a company before it becomes large, which can help with recruiting (the people you want to work for you might be the type to be driven by said altruism and it could be a pipeline to talent). Also those who donate get better support and recognition by the community. Also when asking the developer of the project for something they would be more likely to listen.
A streaming marathon vs an actual marathon...
> lots of the time you want to write what he impact is up front.

This one is better than most zero information PR lines. For what it is worth the statement can't be written by GPT-3.
The easy answer to your second point and some integrated experience is the unix philosophy of 'do one thing but do it right'. I was also frustrated at the beginning, but I dealt with it and now I have i3 mappings to do most of what I used to do through GUIs. I can also do much more through scripting because I know which commands to use to handle clipboard, screens, etc.

If you use your computer once a week to check your emails I understand that it's just a waste of time. If you do more, long-term investments such as these might be worth it.

Now I agree that a more integrated experience out of the box would make the learning curve more gentle. Some have mentioned Regolith, it looks like it would be better for you than plain i3 (I haven't tried it personally so I can't judge): https://regolith-linux.org/
Wait, FTP as in actual goddamn FTP, or actually SFTP but we call it FTP?

I could make fun, except in 2018, I moved a company off of FTP and onto S3. To be fair to the company, no developer had worked there since 2016, so they were just running on autopilot. Still, anyone even vaguely concerned with security should have stopped using FTP since sometime in the early 00s.
Exactly. It's impressive when the computer is untouched and air gapped. If you can load malware on the PC, you might as well just extract/copy the data while you're in there.
>> So it's not correct to suggest that economics is just stories and we should ignore incentives and prices or anything argued using economic principals

Straw man argument. It's not correct to suggest that incentives, prices & economic principles capture sufficient information to give us rational cause to bestow absolute faith in them.

>> the general principal holds that make something more expensive people consume less of it

Again it's not an absolute, there comes a point where it no longer holds. E.g. if you price water, consumption surely drops until the point where there's only essential usage. Increase price all you want then because instead society will break, as in people will circumvent laws or agreed methods of exchange.

>> What's the alternative?

That we're more cautious about calling out the parts we're uncertain about.