skysight-inc/HackerNews huggingface dataset:
I think gp is a bit off - weak passwords will be vulnerable to a dictionary attack - even if reasonably salted. But won't be vulnerable to rainbow attacks in any meaningful sense (assuming sensible salt/hash/iterations).
I'm trying to interpret this statement. Are patients paying for therapy for 5 years before seeing effects, or is a course of treatment valid for 5 years?
Yeah, unfortunately in some cases is easier to sell rewriting to a new language, than just refactoring/rewriting in the current stack.
Nice victim blaming.
Sure, you think the 0.1% are just waiting for their phase to rollout?
Well, it'd be a good way to show you are serious and committed while essentially making them be the ones to say no.
There is an open source tool that randomly terminates EC2 instances in the interest of chaos engineering called "chaos monkey".

What would you think if the tool was called "concentration camp executioner"?

You might think I'm making an extreme example to make a point, and I am - you would have a viscerally emotional reaction and recognize that the accuracy of a word does not offset the negative connotations associated with it.

I use the word "gypped" in my vocabulary. It never occurred to me that it is a derogatory term towards gypsies. Until very recently, "jewed" was a perfectly appropriate term to use in professional contexts with the same meaning.

The definition of a word is not relevant to the reasons why people are asking for terms like master/slave to exit our ubiquitous technical vocabulary.
Aside: The difference in the Citibank case is that the money was actually owed. Citibank was in the process of trying to get out of paying it when they sent payment.

Also, money can be given back, time can't.
Everyone can empathise with wanting life to get back to normal. However the problem with folk wanting to take the individual risk is that the “low” percentage of people needing medical help can still overburden health care systems.

This potentially means that people with other illness / disease can’t / don’t see a doctor in time, and others in a society take the brunt.

Yes, let’s open up; but let’s not throw caution to the wind either.
You just proved my point again?
I would much rather error on the side of releasing someone early, instead of holding people longer.
> Spanish Flu epidemic

Trying to compare now to >100 years ago is full of all kinds of bad assumptions. Life in 1918 hardly resembles life in 2020 in any discernible way.

> China had the mother of all lockdowns and is back to robust economic growth

Believing this means you have to trust information disseminated by the Chinese Communist Party, which would be a foolish thing to do. They are 100% committed to saving face, not to saving lives.
Japan does NOT have strict lockdowns in place. I know, I work for a Japanese company. Heck they've been giving out travel vouchers for free travel around the country. Not a model for pandemic response at all.

Australia is hardly isolated. Tons of flights in and out every day, and a vital part of the world economy. Really, any country can be "isolated" if they just close the borders to non-quarantined (REAL quarantine) travel, which is much more important than lockdowns.
>what do you think profitable companies would do to their ML engineers over a product issue like this if there was no law under which they would be sued?

Nothing. Maybe a reprimand at best, because the consequences of this are fairly minor. If a store erroneously bans you and them unbans you and says that there was a mixup with their policy, then what do you think should be the consequences to the store? If it's effectively a monopoly then I can see there being problems, but if it's just a random store then that doesn't really matter.
I agree with other commenters. And I think another part of the problem is the consumer model of software. In a pen and paper system if there was some reason why a record was special or different from the others, you could just attach a note to it and the next person who picked up the record could read your note. Custom software systems deny that sort of ad-hoc flexibility from the people using them. There’s no way to do anything that wasn’t planned for and programmed in. So office workers who use flows managed by custom software are actively disempowered from authorship over their own workflows.

That’s one of the reasons I think Excel (and tools like Notion) are so popular - the people on the ground can learn to express themselves in the full context of the tools. I think this sort of software is far more important than we give it credit for. (It’s an invisible problem to us, because we can change the software.)
Say the setup was changed so that instead of the copy being deleted, the copy was merged back into the original, merging memories. In this case, I think it's obvious that working together is useful.

Now say that merging differing memories is too hard, or there's too many copies to merge all the unique memories of. What if before the merge, the copies get blackout drunk / have all their memory since the split perfectly erased. (And then it just so happens, when they're merged back into the original, the original is exactly as it was before the merge, because it already had all the memories from before the copying. So it really is just optional whether to actually do the "merge".) Why would losing a few hours of memory remove all motivation to cooperate with your other selves? In real life, I assume in the very rare occasion that I'm blackout drunk (... I swear it's not a thing that happens regularly, it just serves as a very useful comparison here), I still have the impulse to do things that help future me, like cleaning up spilled things. Making an assumption because I wouldn't remember, but I assume that at the time I don't consider post-blackout-me a different person.
One big disadvantage about GraphQL is that, in a microservices architecture, it requires a fat centralized GraphQL gateway that understands your whole application in order to dispatch queries to other microservices. This is much fatter than a reverse proxy with a few URL-based matching rules, and harder to scale as well.
I have more questions, why are you not using silver, around 106% better conductance of electricity, but also a better conductor of heat?

And cooling, lots of big electrical plant uses H2 for a cooling medium as it has about 22 times better heat transfer than air - I can see the peroblems, but you can't light up 100% H2, it's when it gets some air with it is the problem.

I actually have a bucket load more, I am Elec Eng/Func Safety/Systems Integrator/Embedded guy and many years ago did my final engineering project on a software package to design high frequency inductors optimised for weight or efficiency, for space use. So all in all I am super interested to see how you go and what you can squeeze out. Will you run a blog or update of some kind?

May your end copper (silver) be short, if you have any.
How? Seriously interested. This is cross-plattform software. How do you change that from PBKDF2-SHA256 to Argon in a way that still lets you use your desktop PC as well as your 4 year old budget Android device? And then support user configuration on top of that? Same about raising iterations.

The submitted github comment also makes that point, this is actually hard to do.
For the people in this thread who are unfamiliar with the current capital markets:

There is roughly 2.5T dollars in dry powder (uncalled capital). In laymen's terms this means there is currently 2.5T dollars sitting there not being deployed and $830B of this for PE Buyouts alone. It looks like VC is ~$300B. In other words, investors can't spend allocated money (from LPs) fast enough.

https://www.bain.com/globalassets/noindex/2020/bain_report_p... -> Figure 1.12
Why did a newspaper insist Oxford vaccine was inefficacious for older people?
Look into mushroom identification - many little brown mushrooms (LBMs) are differentiated only by careful microscopic analysis of their spores or DNA sequencing. Mushrooms are especially difficult because many of the potentially useful identifying features are only present at certain (short - hours or a day or two) phases of the lifecycle of the fruiting body.
> Germany has dealt with its role in the war in a much more healthy way.

For most of the population, this is probably true. But I think the mixture of shame and pride is feeding the far right in Germany - who then feel the pride without the shame. This is growing as it becomes more politically and socially acceptable to express anything but shame and apologies about the war.
It's touring again. At least outside of the US. I was at the one in Stockholm, Sweden two years ago. It was supposed to come back last year, but you know...
I was really surprised at how fast the heat shield dropped away, and slightly disappointed that we didn't get to see it hit the ground.
I’m not implying anything, I was addressing the GP claim that the pandemic was the primary factor impacting the economy rather than lockdowns. I suspect what what I’m saying I see locally would likely end up the same nationally: eliminate restrictions and economic activity will return to near pre-pandemic levels with only a slight hit from people too worried to go out even with a mask.

My personal feelings are actually simultaneously that we worry way too much about economics rather than human factors but also that personally, I don’t feel that the measures we are taking to counter Covid are worth it for noneconomic reasons, but I can respect that other people feel differently.
These cloud based solutions perform hashing+salting+KDFing locally and then add additional compute cost on the cloud level.

I don't see any issues with that.
Chomsky and most of his students call Everett a charlatan. For example, David Pesetsky, whose doctoral advisor was Chomsky, criticized Everett's work in the June 2009 issue of the Journal of the Linguistic Society of America, Language. Chomsky and Pesetsky may not be the most objective critics, though.

I read Everett's popular book on the Pirahã, "Don't Sleep, There Are Snakes", and found his descriptions believable, but I'm definitely not a professional linguist.

There's a nice interview with Everett in https://www.edge.org/conversation/daniel_l_everett-recursion... which includes details on the controversies with Chomsky's ideas.

Given Chomsky's refusal to admit he was wrong in his political judgments about Cambodia and Sudan, which some observers go so far as to label hypocrisy, I'm tending to cheer for Everett and hope he is correct.
This sounds great but thinking of my system at work, it´s not the language that is the problem. It´s all the moving parts that you need to get to play together nicely before you can even start to develop. Front end, back end, database, nginx proxies, email platforms.
This is interesting because the OP claims that this is exactly the reason they use PBKDF, because there aren't "highly optimized implementations [of other crypto algorithms] for all platforms":

> What is crucial here is that we don't want to have the defender stuck with a slow implementation of something that the attacker will have a highly optimized implementation for.
Then you should be obfuscating the origin of your earned bitcoin just like the criminals

Or is the reality that criminal and non-criminals funds are already being obfuscated regularly because bitcoin is 12 years old and people already thought of this problem a decade ago
From the article:
>> TL;DR: time of use rates are, on net, a Good Thing; markets are great, except when they fail; low risk isn’t the same as no risk; ...

NO, this is not an example of "Free Markets" failing.

This is Free Markets working exactly as designed.

Demand massively increased, due to the cold weather
Supply dramatically shrank due to the same cold weather
The market is dynamically priced
OF COURSE prices went hyperbolic

Why wasn't this tail risk/opportunity anticipated by the various suppliers, so they pre-built their systems to withstand such cold weather, to be able to take advantage of the windfall?

Because literally no one could afford to do so. The general market is a free-for-all low-cost race to the bottom. Invest more and you won't be competitive. Moreover, if enough people follow your strategy, you'll never see the windfall. No one can make the decision to invest in any quarter, so it never gets done.

Yes, intelligent regulation is a pain in the arse, but free markets really do only one thing well - dynamically allocate resources and adjust pricing. Important, for sure.

But a complex society also needs disaster planning and resource allocation, and to prevent Tragedies Of The Commons, both of which Free Markets(TM) will not only fail to solve, but will aggressively screw up.
Well, I think the insight in the article here is that a network (including such “giants” that came before) can boost the creativity of those who come after, even including a new giant such as Newton.

Think about any modern scientist. Has their creativity been boosted by the existence of all the other scientists?

If I’m a physicist, the existence of Newton boosted my creativity because now I can apply calculus to problems. If I’m a biologist, Im leaning on Darwin and all the insights of statisticians and the people who have delineated the methods and findings around which I organize my science.

People have previously innovated the concepts, methods, and foundational understandings, and finding new insight can be a matter of combining these in novel ways.

I don’t think this is completely different than what the author is describing in TikTok. Both the format and ecosystem of tools that the service creates, and the social network of users create an environment where it’s easier to go out and make something.

A similar thing happens in science.
> making the world a better place

For a large segment of the US electorate, anything that inflicts pain on "bad people" is "making the world a better place".

If the software was causing prisoners to be released early, most US voters would be up in arms. But if they're being held too long, the calculus is different. In software terms, for many Americans, a "tough on crime" outcome is a "feature not a bug".
These are some concepts that I believe in for research code.

Research code shouldn't be a monolith. Each hypothesis should be a script that follows a data pipeline pattern. If you have a big research question, think about what the most modular progression of steps would be along the path from raw data to final output, and write small scripts that perform each step (input is the output from the previous step). Glue them all together with the data pipeline, which itself is a standalone, disposable script. If step N has already been run, then running the pipeline script once again shouldn't resubmit step N (as long as the input hasn't changed since the last run).

This "intermediate data" approach is useful because we can check for errors each step on the way and we don't need to redo calculations if a particular step is shared by multiple research questions.

I was taught this by a good mentor and I've been using this approach for many years for various ML projects and couldn't recommend it more highly.
Actually looking at the model setup by the site for contractors to grab questions on a voluntary basis - I sorta doubt anyone would actually take your question.

The site design is pretty opaque so I imagined you had some SMEs out there that a call in would be automatically connected to but the contractors can view a list of questions and pick and choose ones they think they're a good match for.

I think that makes it a valid question to the site designers if there should be either:

1. Some level of payment for the first minute of calls to make sure those dumb questions get answered

2. Some feedback mechanism for contractors to mark specific calls as googleable and for the site to send back a "Did you try googling it buddy?" response via email (though in much more diplomatic terms)

It sounds like this service might actually struggle with questions that are too easy - I'm also really wondering about the unpaid research time potential. Will it be a faux pas on this service to call up the client at the point where you think you know the answer reasonably well but may need to do some on-the-phone research for their specific details or would the expectation be an expert ready to answer your question specifically for the Sun Sparc 8 architecture?
You can even send the code lengths with at worst one bit per symbol, by sending the number of internal nodes at each level of a complete binary tree structure, this can be a concatenation of unary numbers and there's n-1 internal nodes for a complete binary tree of n leaves.

Your example isn't a complete/perfect tree, one of the length 4 symbols could be 3, for level sequence 1,1,1,2. Converted to internal node counts (excluding root) this is 1,1,1 and could be encoded 0,0,0 (commas for illustration only). That's a little boring, another example is:

A = 00
B = 01
C = 10
D = 110
E = 111

level sequence 0,3,2, internal node counts 2,1, encoded as 10,0.

I'm not sure if this is well known, I thought I'd discovered it but there's an equivalent coding in Narimani and Khosravifard 2008, "The supertree of the compact codes."

A. You can avoid encoding the number of leaves by ending the string with impossible sequence 0,11, that is 1 internal node branching into at least 3 at the next level.

B. Or, you can use this as a 1-to-1 mapping between binary strings and canonical trees. If you read 2m-1 1s after a row with m internal nodes, you know this row has 2m so the final 0 isn't needed. (e.g. 2,1 would just be 1,0 instead of 10,0). This can't be combined with A since there are no longer impossible sequences, but at most (on a tree with all symbols the same length) it only saves lg(n) bits, so if you want to save bits you're better off with A.
It's an important metric because earlier indicators aren't as useful. The rate of new cases is tricky because we don't really care if someone gets COVID-19 anymore than we care if they get the common cold, assuming they have only mild symptoms and fully recover. Hospitalizations are the first unambiguous metric we have to know there is a serious problem that may require a dramatic response.
Looks like it's mainly tree/code manipulation. Typing code on the keyboard is probably the least taxing thing when it comes to software development. But I guess it will be nice once it has become a "reflex" rather then a conscious key-combo.
A close issue: I have recently realised that none of the phone operators in the UK are capable of transferring phone numbers across contracts inside the same company without cancelling them first (and you are officially on the hook for the remainder in the contract). Their systems are organised around “cancelling the contract = transferring the number”. Happened to me with Vodafone.
> Is this because for the most part our efforts in producing software are actually doing the opposite? It certainly seems that way reading articles like this.

I think the most likely explanation is just that people didn't see the question or weren't interested in having the discussion. Most people believe the work they're doing is at worst neutral. A less likely candidate for the reason (but still more likely than your guess) is that people didn't want to be subjected to unfounded criticism of their work from people who don't know anything about it.
If they did, this isn't that video.
I'm really worried that will be "locked down" indefinite even when hospitalizations go down. I'm also worried that when an actually deadly virus hits our shores we'll be more hesitate to do lockdowns. So basically governments used their once in a 50 year lockdown on this. It mainly killed people that were fat (why the US had a higher mortality) and old. Except no one every said lose weight, exercise and get fresh air. What happens when Ebola hits us.
The focus on deaths ignores permanent effects that some survivors have. Lung damage, loss of taste/smell, etc.

I don't know the data on how many people have long-lasting effects, but I do know some people have had them.
> Illegal Alien: person.

This is like saying “another word for car is ‘vehicle’”. It’s not the same thing.

Maybe it’s an outdated expression, but it still signifies a person who crossed a country’s border illegally and does not have legal status.

Maybe in some libertarian circles where there ideologically are no such things as borders this would be true, but the world exists, countries exist, laws exist and changing words to suit an ideology instead of facts is kind of silly.

P.S. I got to “Illegal Alien” by entering “Synergy” then following along.
SQL Injection Attacks and Prevention in 2021: A Developer's Guide
This article doesn't appear to have been written by a native English speaker, so it feels like reading a Google Translate version of a news article.

But if you're curious about the technology, here's a 2019 paper that details how it works:

https://www.cell.com/joule/fulltext/S2542-4351(19)30412-X

> We demonstrate a low-cost, modular mechanism of renewably generating meaningful amounts of electricity at night by harnessing the cold darkness of space. We use a passive cooling mechanism known as radiative sky cooling to maintain the cold side of a thermoelectric generator several degrees below ambient. The surrounding air heats the warm side of the thermoelectric generator, with the ensuing temperature difference converted into usable electricity.
The existence of Griddy is unrelated to energy deregulation. I keep seeing that term thrown around but no one using it seems to know what it means.

Griddy is simply an energy provider you can choose to hedge your bets and save money if you are smart. Plenty of people using it shut off their power or switched providers when they were informed of the incoming price surge. That some households ignoring the warnings shouldn't be a reason a service like Griddy can't exist.
No, they are going to run an event with 1500 people as a test, a small dance festival. They also had a football match with two low ranked teams playing for a live crowd. The papers proudly proclaimed that that football match had trouble selling its tickets, as proof of the ‘nobody wants to congregate’ theory. It’s unsurprising though, considering this game wouldn’t quite sell out in a normal situation. To those people it did come as quite a surprise that a dance festival that offered 1500 tickets got over 100000 reservations.

People can’t wait to get together and while most people do follow the measures many would stop the second it was no longer required. But some people have locked themselves in their home for a year now and think everyone is like that. That’s not quite true.
Griddy should have bought calls and passed along the premium cost and protection. I don’t know energy market options pricing, so maybe this is not viable.

> the amount of money they are due as a result of this market design ($50 billion!!!) is truly staggering and disproportionate to the value created

This is a screaming incentive for winterisation and energy storage. The premium is fine. It was mostly paid for by intermediaries.
The nuclear waste problem is drastically overstated and, like almost every other aspect of nuclear power, is generally fear-mongered and cherry-picked as some sort of "gotcha".

https://www.energy.gov/ne/articles/5-fast-facts-about-spent-...

From the article: "the U.S. has produced roughly 83,000 metrics tons of used fuel since the 1950s—and all of it could fit on a single football field at a depth of less than 10 yards."

I'd be more comfortable with a nuclear waste storage facility in my area than I would be with a coal power plant polluting the same given area.