skysight-inc/HackerNews huggingface dataset:
It is interesting to hear this argument in Silicon Valley’s double standards and modern “relative moralism” environment. What exactly are your moral concerns? It is “controversial” because people have so many diff. opinions on what is considered “ethical” these days.

Palantir has a bad rap in SV because liberal media likes to criticize it mainly due to its work with ICE.

There are articles online speculating on the validity of Karp’s claims about his philosophy background, or Palantir’s rumors on helping take down Osama Bin Laden as intentional propaganda. I suspect a lot of these comes as misinformation campaigns to discredit the firm.

I tried to investigate a report by Mijente and stopped early due to its data being mostly baseless personal accusations on Thiel (common tactic when pertinent proof is lacking), which seems primarily motivated by a political agenda

https://notechforice.com/palantir/

Help me if I am wrong, but to me it seems the media is being heavily biased against Palantir because the firm denounced Silicon Valley’s values...

Note: Another analogy of double standards is how Apple and Tesla get all the hype, masqueraded by “user privacy” and “saving the environment” PR, while online communities (HN, Reddit) brush away human right violations such as slave labor or work abuse allegations. The brainwashing is clearly working...
I’ve been trying to do some work with signals among other things and for the first time in my life, I wish I had payed attention to trig and calc.
How did you transition to freelance? Do you have a specialty?

I would love to work as a freelance/ contractor/consultant engineer one day but only when I have enough experience that I can get hired for roughy, interesting projects rather than just CRUD apps
There exist magnetic core materials with Curie points above the temperatures on Venus, there exist insulators and conductors effective at those temperatures as well.

Thus it should be possible to build some form of magnetic logic CPU that could operate in that environment provided a suitable power supply.
We had to delay rolling out one of the more recent Mac OS releases (Catalina, maybe) because it used the more secure “encrypt the data and throw away the key” instead of “write 0 to the sector 5 times” secure delete thing. Microsoft did research on how bad password rotation is, but it’s still the rule. Regs that can’t keep up with the pace of the thing they’re regulating are as bad as none at all, I think.
Yes. Codon optimization is a routine procedure when designing genes and is mentioned in the article. Methionine and tryptophan, however, cannot be optimized since they only have one codon each.
Do you make this comment whenever AWS, GCP, Azure, or Facebook gets downtime?
1. Two-factor authentication enforced on everything.

2. Access control policies which minimize privileges to only those which are needed.

3. Put everything behind corporate SSO instead of per-account passwords and login pages.

4. An authenticating proxy that enforces policies on each individual machine using something like webauthn.

The first recommendation limits the extent to which accounts can be compromised if users mistakenly enter their passwords. The second limits the damage which can be done when accounts are compromised. The third limits the general attack surface of passwords entirely, as does the fourth. In particular: the fourth also allows you to remove your corporate VPN while leveraging SSO. It also makes it easier to enforce the granular access control policies.

These things can be a heavy upfront technical investment, but there are off the shelf solutions and products for each of them. They're also easier than trying to train humans to be superhuman.
And if you make more than a million dollars a year? With a potential wealth tax added? Certainly the highest tax state. It gets stupid.

At least in Idaho everyone is treated equally.
I think it's more apt to say they lack the expertise to second guess the established best practices. There's also the question of indemnity. In case of a breach, they need to prove they followed established best practice in writing.
The product I work on is geared towards big corporate IT environments, and I can confirm that this sort of thing is not unusual at all.

A recent support ticket went along the lines of:

Customer: An audit discovered that JDK version X was installed as part of your software. It has a vulnerability and we demand a way to upgrade to JDK X+1 that has the fix.

Our support team: We're already aware of that and the latest point release of our software bundles JDK X+2, which fixes that vulnerability and 2 others. Please upgrade.

Customer: Our compliance team requires JDK X+1. Please provide a way to install this version.

We eventually solved the problem by having them upgrade to the latest major release of our software, which doesn't use Java at all, but it boggles my mind that they wanted a _less_ secure JDK.
security keys maybe? Seems hard to phish a physical key touch.
Domino’s Pizza drove increase in stock value by acting like a startup
some people run scripts that deliberately kill prod nodes at random to test for resiliency.
Compliance is security, or said differently, non-compliance is a security vulnerability.

In an isolated instance, it may seem obvious that bcrypt is superior to SHA-2 (it sure is to me). But managing security posture at scale, across a massive enterprise with disparate teams is tough. Rogue groups make bad security decisions all the time. Committees are formed, and policies are put into place to guard against this. Auditors are charged to enforce those policies. Changing policy itself presents risk (both organizational and personal/job-related risk). Therefore committees are conservative with adapting to evolving environments.

This is the Occam's Razor explanation for why Things Just Don't Make Sense around many corporate IT security policies.
Help me find a gig worker
Where can i find a person for 100-200hrs gig work (offline work) and how much would it cost per hr?

PS: Not from USA so im kinda clueless.

Thanks a lot
Work for the govt, can confirm.
I work in the Public Safety space where we are subject to a long list of CJIS guidelines. Some of the regulations, particularly like FIPS seem quite outdated and actually require systems to be less secure than they could be.
> it is pretty obvious why monopolies form

The reason is clear: government regulation. Basically every. single. time. See Milton Friedman on this.
wait until you hear about Schoolhouse Rock...
This happened to me. On my phone and on my MacBook, I kept being asked to sign in. I was confused because I didn’t do anything that would require me to sign in again. I assumed that it was some security thing since I had been signed in on both devices for many months. After a while, I decided to sign in on my MacBook and then that changed some setting with iMessage messages syncing between devices.
imho, front end first, then back-end, to be a well-rounded developer. Backend is so deep and so consuming, that knowing how what you do in UX will affect users on the front end is a valuable skill.
Surprised no one suggested AllDup. It's the best tool I've seen for working with duplicates:
http://www.alldup.info/en_download_alldup.php
Here's an earlier article about this: https://spectrum.ieee.org/automaton/robotics/space-robots/jp...

And here's an earlier article about the approach of using high temperature electronics instead -- although note that, as described in the OP, the two approachese seem to have now merged: https://www.sciencemag.org/news/2017/11/armed-tough-computer...

So, for anyone wondering how they're planning to transmit a signal without electronics -- well, given that they are using high-temperature electronics to some extent, they might just go that route. But the article I linked above does mention a proposed mechanical means: You don't actively transmit a signal, rather you just change some visible feature of the rover and have a conventional-electronics orbiter scan for and detect these changes (so, signal isn't emitted from the surface of Venus, just reflected from there).
The Post Arrived in Time (1951)
Secure Boot may be of interest to you. If done correctly, there should be no additional run-time overhead (no AV process).

AV to me is akin to shutting the barn door after the horse has bolted. Secure Boot prevents the horse from bolting in the first place, in theory.
The cheap way how to use Docker to deploy your FastAPI
it's perfectly acceptable to talk scientifically about the difference in races (really, people with shared population history) by genetics and their responses to disease. THe people who are saying "race is social construct" are by and large not the actual scientists making discoveries in this area. REad the NYTimes science section for a few months and you'll see they commonly discuss the difference in medical treatment research and how we could improve health care by being more aware of it.
I have worked with a large healthcare firm at two different agencies now who outsources compliance checks to overseas teams. There is nothing but a lengthy checklist to move through and if you do not meet the standards of the checklist, you fail.

There is no critical thought or evaluation of each step; it’s a simple pass/fail. Example would be “are your drives encrypted at rest?” It doesn’t matter if you’re in a SOC3 facility, located 25 feet below street level in 8 foot thick concrete walls and your files are distributed in pieces across millions of drives throughout the data center. Nope. The drives must be encrypted at rest. Pass. Fail.

Sigh.
“Quantum efficiency” is a specific and long-used term, even though the word “quantum” (like “exponential”) gets abused for clicks: https://en.m.wikipedia.org/wiki/Quantum_efficiency
Cool idea but it seems a tad more practical to use conventions electronics in a well isolated and temperature controlled bubble. In steampunk spirit, why my a low flying airship? Wind speed is apparently very low near the surface.
Good call! I love Tichu. I'd put it just a touch behind the other games I listed.
I would say it is somewhat of a misuse of the standard. That a cryptographic hash makes an ok password function is somewhat accidental.

If they had required PBKDF2 that would have made more sense. That at least confirms you used the pseudorandom function correctly.
One of my favorite piano pieces is Guaraldi's Linus & Lucy. Enough that my kid took to effort at 8 to learn to play it on the piano for me. Took real reach to get his fingers to play it smoothly.
Not him, but the difference to me is that all of those systems are meant to be amenable to debugging - you can't run strace on an iPad.
“Software engineering” in practice is 90% about keeping your stuff organized well enough that you and others can comprehend it, make sure it does what it intends, and use and and extend it. That extends to making project plans to begin with, and any documentation.

That’s hard to teach as a separate thing.
> you need different models where the power cords are different

That should only affec the power brick, and hence the overall SKU, not the notebook itself.

> the writing on the device is printed in different language and with customizations such as Celsius vs Fahrenheit.

What writing is there on notebooks except for keyboard labeling and the product name? The certification label on the back already shows all labels for all countries.

> You can't sell the exact same laptop model in every market because the keyboard layouts are different.

Keyboard layouts are somewhat orthogonal to regions. I'm German, but use US-layout keyboards.
Yeah, I really don't see a case where large amounts of hydrogen are being transported commercially. Anything you don't need on site makes much more sense to convert to synfuel.
update: i wrote a personal google proxy to tweak google results how i want them. managed to get it recognized as a search engine (on my android chrome) via opensearch. not sharing the code for obvious reasons https://twitter.com/swyx/status/1342625544320339969
I don’t think the EFF rep was trying to say AMP is technically integral to the web experience today and can’t be removed (which it definitely can be). Rather that it is a technology that is useful and can be powerful, and we should pursue continued development of it in an open way. As much as I don’t like AMP myself, there are numerous people in regions worldwide who do appreciate it that live in low bandwidth, data limited, bad connection areas.
For games, your best option on an Intel Mac is Windows 10 through Boot Camp.
If you think the project makes sense, I would suggest hold into it.

Bitcoin has a market cap of ~472 billion dollars.
The amount of dollars in circulation is on the magnitude of hundreds of trillions.

Therefore, it's still way too undervalued.

https://howmuch.net/articles/worlds-money-in-perspective-201...

(Note: "Very old chart", but the idea is the same)
Ask HN: Does the company that you work for has a Deep Work culture?
Thanks. Apparently it's no longer cool to ask questions on HN, since I had no idea what a cat bomb was, yet a mod flagged it regardless.
My general practice with macOS has been to wait about 10 months before upgrading to the latest OS. I upgraded to Catalina just a few months ago. I won't be going to BigSur until late summer next year.
Oh, I misunderstood exactly.

I'm a Norwegian in Germany, I even live in the Hauptstadt der Bewegung. The nazi assholes here do (try to) appropriate Norwegian names and the flag, but not Æ or Å, and I've never noticed other non-German letters. Until I hadn't thought about the Æ/Ø/Å discrepancy. Maybe it's because Ø isn't used elsewhere. There almost is an encyclopædia but Ø is of pure blood, if you'll pardon the spelling.
not sure about this one. Viruses dont need a network or internet connection to spread. They used to spread just fine via floppy disks.

EDIT:
Obviously the fact that the cpu cant handle virus scan + pedestrian detection at the same time is shockingly bad.
...
But a self driving car with a virus that could cause it to do potentially anything is even worse.

Why not just run the scans when the car is not in motion, or when charging?
Here's a fun read for anyone interested in government compliance requirements. As a side note, many state government agencies also use this because they have your IRS tax returns.

https://www.irs.gov/pub/irs-pdf/p1075.pdf
I sell B2B security software, which is mainly used for compliance in a niche market.

The software, of used correctly and integrated into processes, really can add a meaningful extra layer of security. However, lots of our customers just want to tick a compliance box that they can point assessors to. Kind of sad :(
Holy shit I think the same thing happened to me. Maybe this is one of those perception quirks rather than a memory quirk.

Listening again, I could see it being a man with a voice like David Sedaris.
How does this differ from https://instant.io/?
quip very slow electron app
Isn't the issue here that the FIPS equivalent of bcrypt is PBKDF2 which uses SHA512 like bcrypt uses Blowfish? (FIPS do not directly certify PBKDF2 only the underlying SHA512, but that is good enough for NIST).
The specific problem on network equipment (i.e. Cisco) is actually that these "default" accounts are really backdoors, since they are not exposed in a list of accounts in the UI or shell interface.

Therefore auditors will look and find nothing, but the accounts are buried there within the system if you know about them (i.e. by exploring a firmware dump and finding the password hash and reversing it).
That seems like a serious engineering ethics problem that needs to be escalated to the highest level possible and if that doesn’t work, then leaked to the media.
Or count to ten and then get up. Works great.
I took a course in Software Engineering as part of my CS degree.

As part of that course, we simulated spec work by having Team A write the specifications for a project and having Team B trying to interpret that as loosely as possible while still being compliant. (Team C would then do that with Team B's spec and so on, so there would be no 'revenge').

That wasn't perfect, but it did teach us a lot about writing down implicit and non-functional requirements, as well as the use of precise language.
Just to add an interesting bit it appears possible there was someone in or in the direct vicinity of the vehicle when it exploded.

https://www.chicagotribune.com/nation-world/ct-nw-nashville-...
Imagine you have no idea of cryptography and someone says to you: "We use foocrypt. It's fast, it's safe."
How do you know?
I doubt they cared as much about security as ticking the compliance checklist.
The author doesn’t really try to identify from the regulator’s perspective, and it weakens their argument.

To the state, one of the most important goals is legibility. The state has an enormous burden of regulation in its various enterprises, and the less variance the easier the job. This certainly isn’t ideal in many, many cases, but in this case a person who likely didn’t make the standards quite rationally trusts a vetted standard over one small trivial test given to them by a company they’re evaluating. FIPs standards are probably much more exhaustive than just a hashing performance test on one piece of hardware.
I know about 10 classmates who got tenure track jobs. I'm not sure what that shows.
n=1 is n=None ;)
Had auditors actually surprised that I wanted to fix the issues they’d found, they were under the impression we were going to shelve the report.
> stupid press not understanding data engineering

Anybody could understand the difference between data engineering and "AI" in 30 mins of research, which is a lot less time than they have to research a story. Whenever a journalist "doesn't understand" something that could be learned with a simple google search, it's not stupidity, it's malicious. In this case the journalist is pretending to write a story about Palantir winning a contract, but really writing a part of the continuing story "Palantir (and the tech industry in general) is evil and powerful and you should be scared."
Gas runs forever without electricity. My folks have a gas generator on a pad at their home because ice storms take down the electric grid every year in their town. This year it ran for ten days straight.

Pressure in natural gas infrastructure is maintained by pumping stations that are fueled by the gas. These are huge and impressive and usually located far from any town.
That’s a bad argument because you need to eat to survive, unless you don’t value human lives. So, yes, eating food has value.
Sure, but living 500 years vs 20 years post-child birth confers no additional advantage to raising the child, so again there is no pressure selecting for this kind of trait.
AVX-512 neural net inference on inexpensive, CPU-only cloud compute instances. GPU cloud compute is almost unbelievably expensive. Even Linode charges $1000 per month, or $1.50 per hour (look at the GPU plans: https://www.linode.com/pricing/#row--compute)

An AVX-512 Skylake-X cloud compute instance costs $10 per CPU-core per month at Vultr (https://www.vultr.com/products/cloud-compute/), and you can do about 18 DenseNet121 inferences per CPU-core per second (in series, not batched) using tools like https://NN-512.com

As AVX-512 becomes better supported by Intel and AMD chips, it becomes more attractive as an alternative to expensive GPU instances for workloads with small amounts of inference mixed with other computation
That's the moment where you have to sue, sabotage the auditors, enable politicians or go to the press. There has to be a line in the sand, and that's when clueless bureaucracy like that endangers life. When (not if) that car kill someone it's not only on the auditor, it's also on you ("you" as in "the people complying").
> AU technicians discovered that the building’s Huawei-provided servers were daily exporting their data to Shanghai, and that the walls of the Chinese-built headquarters were peppered with listening devices.

> Chinese companies—many of which are state-owned, all of which are legally obliged to cooperate with the Chinese Communist Party on intelligence matters—have built at least 186 government buildings in Africa, including presidential residences, ministries of foreign affairs, and parliament buildings. Huawei has built more than 70 percent of the continent’s 4G networks and at least fourteen intra-governmental ICT networks, including a data center in Zambia that houses the entirety of the government’s records.
Yes, I think it's a very exciting technology for sending all kinds of small packeted data around rural areas. Besides messaging, it's also good for having remote stations report their current conditions (e.g. electric fence battery, solar panel status, soil moisture, weather conditions, etc)

There are already several companies producing turn-key agricultural monitoring systems like that. But I also think that a big part of why it works well is the lack of congestion in more remote areas.
I couldn't have even imagined somebody coming to that.

I don't think a company like that can really function.

My advice, leave before it implodes.
M1 vs. Intel's upcoming i7-11370H
The article you linked to was jailed for not listening to the judge. Yes, it was about his refusal to wear a mask in the court. But if someone in court talks while the judge talks and the judge commands them to be silent, the judge can jail that person for refusal to be quiet. Or if they eat in court and refuse to stop eating. Or any number of things that are completely legal outside the courtroom.

So that is a bad example.
The real problem is that security decisions are being made by bureaucrats. Full stop.

Bureaucracy invariably requires compliance, and only compliance. Some problems can be cast in terms of compliance and thus solved in a bureaucracy, but security is not and never will be one them.
If there are more of something, its worth is less? If I gave a trillion dollars to every person in the nation, you think bread would still cost a dollar?

Clearly you would agree that some amount of money printing would cause inflation. At what number of dollars would we cross the threshold? $600 per person? $2000 per person? $10,000 per person? $100,000 per person? etc etc.

When I say “the math must catch up with us”, all I’m saying is that if we kept doing stimulus forever, at some point it will start to matter.
No... come on, I think it’s obvious what they should have said:

“billionaire investor Peter Thiel.”

The man has an identity outside just being a “Trump backer”. Using that descriptor specifically chooses a minor, politically motivated detail about someone and concludes to the rightful reaction of turning away.

Choosing to write a “news” article while also choosing descriptors like that make this an opinion piece, not a news article. I think it’s what is fundamentally wrong with most of the Information passed around today; you can’t escape the opinions buried neatly inside EVERY article, desperately persuading you to think and feel a certain way. Everything’s hostile these days, just constantly attacking your mindset.
The differential (ignoring locking ones) applies the same force (approximately) to both wheels.
If you remember your physics course about lever and force, see the video at 5:00, you can see that the lever is pushed by its center, hence both sides have the same length. So the same force is applied to both wheels. But the speed can be different.

Hence, if one wheel is stuck, it still receives the same force as the other, only speed is lower.

What is more annoying is when one wheel is freely slipping (like on ice), the other will have nearly no force applied to it and the car is stuck.
There are always two sides to the coin. The auditors are just doing their job, telling you that the software you use is not compliant. What could have been done here is to demonstrate the safety of the algorithm to the organization behind FIPS, so that they can approve it.