skysight-inc/HackerNews huggingface dataset:
I understand the main concern is related to security, if code (a team member's secret easter egg) is shipped unbeknownst to the development lifecycle (code review, QA, etc) then a security exploit may have just (accidentally) been included with the product.

I'd imagine if the easter egg was a documented feature (eg, scoped by product managers, went through security review, etc) perhaps it would be fine.
That will be more true as ML gets more reliable, but we aren’t quite there yet. As ML gets more useful, people are going to use it more. As people use it more, people served by it will be more frustrated by unreliable/uncontrollable aspects of it.

A bug species detector that works almost all the time will get commoditized. A bug species detector that fails gracefully won’t get commoditized until later.

An insurance risk predictor will get commoditized. An insurance risk predictor that you’re confident is fair and unbiased won’t get commoditized until later.

A chat bot that gives you customers useful information about your topic will be commoditized. A chat bot that also never will say anything to tarnish your brand (e.g. sexist/racist/wrong) won’t be commoditized until later.

A last example illustrates it perfectly. The majority of automating driving was solved pretty quickly. That last mile of reliability has taken forever.

I’m convinced that knowing what’s going on under the hood will still be valuable for a while yet, because we are just not starting to really face ML failure modes at large scale.
>"You want access to their customers"

Last time i checked, corporations were not allowed to own people, has that changed?

>"So you're going after Bosch for anti-competitively not allowing you to sell software that runs on their washing machines, and not allowing owners to sideload?"

You are not helping your case by making these daft comparisons.
I have a Unifi Dream Machine Pro with cloud access turned off-- the setting for it (since the UDM Pro makes all applications accessible via the cloud, not just Unifi Network) is in the device settings rather than the Unifi Network controller settings.
I hope someone works on recovering UOX (Urate Oxidase)[1] gene resurrection. It disappeared in one of our predessors making us prone to gout and excessive fat deposition[2]. Recovering this gene will treat both at the same time.

[1] https://www.genecards.org/cgi-bin/carddisp.pl?gene=UOX

[2] https://www.nature.com/articles/s41366-019-0487-9
Thank you for writing IceCream! I've used it off and on over the years and it's been a great help.
>This is your answer. No incentive to change. All of the bad engineering decisions have been rewarded by increasing stock price and continued sales.

It'll come around, it just takes waaaaaaaay longer than you'd think for a slump in engineering quality to be reflected in the market. Especially with hardware.

We have a few publicly traded clients that we've worked with for decades (and by "decades" I mean longer than I've been alive). It's cyclical that they want our engineering to build new products when they're doing bad in the market, and once our work is released and gets them some success they'll design transfer back inhouse as aggressively as possible (their engineers aren't all bad, it's just not an engineering culture there). By the time we're out, they're still riding the upswing. Their management's institutional memory either doesn't see the cycle and/or they don't care beyond the next few quarterly reports.

What I'm trying to say is I know hurts to see your baby languish but it catches up to them, eventually.
> 4. Recovery from configuration mess-ups is harder if your control plane has to run on the same network that you've messed up.

That’s a senseless statement in the context of a cloud solution that requires Internet to work.
Student journalist finds photo of Harvard KKK, writes about school’s racist past
I really like how you can figure out the phone number dialed with the representation of the DTMF tones. This was basically an audio coordinate system (or just a 2D array): an X tone and a Y tone played at the same time.

The upper component has three positions representing the columns on a phone keypad.

The lower four positions represent the rows.

For example, zeros are represented by upper tone 2 for the middle column (2,5,8,0) and lower tone 4 for the bottom row (*,0,#).
I'm not sure how you could get international insurance. It sounds insane to be able to even keep track of every country's legal system to provide that coverage.

What do you mean by crime insurance? Usually losses from crimes are covered under home, renter, car, or even more specific insurance.
This is not age. Basically you stopped doing deep work (programming and learning) and move into doing shallow work (emails, meetings ,etc). But this a natural step of promotion.

The problem is that the shallow work now occupy most of your time, and since you are not doing deep work, you deep skills decay. The decay created a gap between what is expected from you, and what you are current level is.

Another issue is the great acceleration of new tools / new tech , which occur both in breath (a lot of new tools) and depth( each tool is more complex). This acceleration contribute to the imposter syndrome, since you do not invested enough time to become expert in the new tech. I.e. you were promoted based on you skills with the old tech.

What you must do, if you want to close the gap, is use your free time to do more deep work.
> it'd be quite easy for them to generate two different versions of the same file

Citation needed. When SHA1 was cracked, it cost $110k worth of cloud computing. And there was some restriction on the two files which matched checksums. IIRC it was like the Birthday Paradox — you don’t pick one and find another sharing the same match, but you generate billions of mutations of similar binaries and statistically two would have the same checksum.

Not exactly easy, fast, cheap, or work with all use cases.
Just donated a non-trivial amount of my stimulus check to this effort. You should too.
Call us back when such companies force sterilizations[1] and force free labor and force indoctrination and confiscate any travel papers, etc.

[1]https://www.theguardian.com/world/2021/jan/10/twitter-remove...
The controller is like $1300 right? Or am I looking at the wrong think.

I'm a network nerd that would love enterprise wifi but that seems way out of my price range.
Socialism is the way.
Lmao who allows privileged accounts without expiring passwords? And why are you idiots using LastPass
This news let me believe that the westerns don't have common sense, brain washed and stupid. According to stats, the Uyghur has 10.17 millions in 2010. And after "genocide", the Uyghur population size has dramatic decreased to 12.71 millions.
I used to believe that the US is the lighthouse of human civilization, now I think the US are full of clowns, they don't like Muslim, they don't like Chinese, but they like Chinese Musilm.
Rasperry Pi is one of the faster SBCs on the market right now. It’s amazing that it’s as cheap as it is.

The sad reality is that the faster ARM cores don’t trickle their way into mainstream ARM SoCs very quickly. The fastest ARM chips go into cellular phones, set top boxes, and other mass produced electronic goods from vendors who can afford to implement them.

I hope this changes in the coming years as more chipmakers embrace mainline Linux and open source drivers instead of relying on the old models.
The purpose of joining a union is to gain better wages, working conditions, and protection from mistreatment by supervisors. Then no one has to give you specific perks to entice you into saying that you like your job. You'll just say it's a good job when asked.

There's a difference.
.NET 5.0 can now create true single file that doesn't need any unpacking on first run (except on Windows where the Jit and GC dlls will live or be unpacked separately; but that should be resolved in .NET 6.0)
This appears to be the case. From the linked article:

> The management of Ultrawide Band compliance and its use of location data is done entirely on the device and Apple is not collecting user location data.
How to tell if someone is lying
> also think you're being a little one-sided there because cloud-hosted configuration has its own risks in terms of security and accidentally cutting off your management access, many of them directly analogous to the ones you mentioned,

But with a cloud-managed system you have a professional, single-purpose organization dealing with those challenges. Which you are getting for the rock-bottom price of your licensing/support plan. Building a good internal IT organization is hard and expensive, and most businesses have other things to do.

> plus you have all the usual concerns about any critical system that depends on Internet connectivity to work properly.

Generally these systems only need internet connectivity to change the configuration and for some monitoring features. In practice, customers are okay with these being unavailable during internet outages as long as both the management platform and the ISP are on a pretty strict SLA.

(Compare, for example, the usual downtime from your 1-4-person IT team not having someone with the right skills on call.)

> and nothing is more flexible for disaster recovery than having someone physically on-site.

Who has the cash for that?

> In the prosumer to small business segment, I would argue that there is still enormous potential value in being able to configure all of the network gear from a single GUI, not least because it doesn't then require a lot of in-house networking expertise to get something going that works and is reasonably secure.

That was my original point: "Generally, halfway decent wireless APs are all targeted at the enterprise market. Consumer hardware is a brutal race to the bottom, as lay consumers aren't qualified to compare options based on anything but price and UI. Ubiquiti was an outlier in trying to bring enterprise features to the consumer market"

I don't know what your standard for a 10-to-50-employee small business is, but "point your browser at this IP address" is usually beyond their in-house technical skills [1]. Small businesses whose core competence is software/networking, or who by coincidence have that expertise in-house, are a tiny niche market. No one [2] cares.

[1] See for example the rise of the Managed Service Provider, which was a large and growing subsegment for Meraki back in 2015 or so. Showing up, installing the hardware, setting up the wireless, and then managing it from your office a few miles away is a big business opportunity, and is a much more efficient use of limited skilled IT labor.

[2] No one with substantial resources and a profit motive.
AWS's (poorly named) SSM Session Manager service already allows that.

https://docs.aws.amazon.com/systems-manager/latest/userguide...
Perl's build system (Metaconfig) is fairly similar to autoconf. I've always been impressed on how many disparate systems, even decidedly non-unixy ones, it handles. You can tell, though, it was a lot of work to get to that state.
Disclosure: I used to work on GCE (and was adjacent to the serial port work).

IIRC, we launched interactive serial port access sometime in late 2014. For example, mbrukman answered a SO question on Jan 2, 2015 with connect-to-serial-port [1]. I don’t recall when we gained fancier IAM controls for it, but we’ve had it forever (and I think getting / view only was there at public launch).

[1] https://stackoverflow.com/questions/27734763/how-do-you-acce...
Why would they need that as insurance? Wouldn't it make more sense to put the premiums into funding for temp replacements? I mean, the "risk" should be evenly distributed between companies, and if it's not, it will be reflected in the risk adjusted cost. Insurance is supposed to be for events that are somewhat rare.
This is a fallacy. Just because these companies have great security teams doesn’t mean that things don’t fall through the cracks. Shit slips past the security team in product meetings all the time.
This was basically an audio coordinate system (or just a 2D array): an X tone and a Y tone played at the same time.

Auditory....Vectors? (Thinking aloud)
Using em and ex is definitely the best way of doing relative font sizing, but the reason is something I don't think people properly understand.

1em is the width of a capital M character. 1ex is the height of the capital X character (of the font currently in use).

If you specify block element dimensions using em and ex values, then the margins and paddings will be relative to the font and it will look really nice (in my opinion).
I maintain a medium scale/complexity service, backed by a postgres database, and this post resonates. While postgres has a great storage engine, the application interface going through the query planner is awful.

We've had outages not just due to a small increase in table size causing 10000x slowdowns when the query planner crosses a threshold, but also similar outages when a small decrease in table size did the same thing! Who would have thought that deleting old/unused data would make your website go down due to 10000x slower database queries?

Performance is a feature, and unpredictable 10000x slowdowns when the database decides to suddenly start doing billion-row table scans in production is just as bad as any other system crash

About a decade ago I interviewed with a (at the time) hot new startup, and during process they told me "we don't do joins here". I thought that was crazy, but here I am a decade later sometimes telling my colleagues "we can't do joins here" as we break up queries, paying the added round trips to help the query planner do the right thing. Oh how the turn tables.
> Nobody is making a career out of being a warehouse associate.

Um.

I worked a warehouse one summer in college.

A whole lot of my coworkers were, in fact, making a career out of it.

It was a crappy career compared to the easy, high-income gig I was working towards in software development, but it was a career, nonetheless.

I currently work with someone who was career warehouse until he caught a lucky break and was able to move into white collar work.

(Interestingly, his last warehouse job before going white collar was with Amazon, after several others, and he said it was by far the best warehouse to work in.)
Eh. The weeks leading up to WWDC are hell due to trying to stabilize the beta releases. The weeks following it are hell due to all the new issues that get found that you have to fix quickly. WWDC itself I found just very tiring (I did a presentation + a help session) but other than that it was kind of fun.
Just as a note, the article specifically lays out that you are only a loser in a pure economic sense, you have not maximized monetary profit and have chosen to prioritize something else. Not an idiot at all :)
You have also just described how the old analog touch tone phones actually generated the tones. Each column of buttons generated a different tone per column, and each row also generated another tone per row. A given button when pressed activated a column and a row to generate the two tones associated with that button.
The problem is science almost always (except maybe in physics??) pretends it has arrived at the ultimate truth this time. It’s easy to detect too: just watch for the phrase “but now we know...”

It would help tremendously if new information was presented with some humility.
Suppose I want to design an IoT device with security in mind. How would I best go about doing that? I've been looking for a good source for best practices, but most of what I've seen so far is hand-wavy or Amazon-centric.
On eBay I've been seeing off-lease and refurbished small-form-factor (SFF) computers for around $100...

Well, it's a Pentium 4 with 2GB DDR2 RAM... You may wish to search around a bit.

https://www.ebay.com/itm/Dell-Optiplex-745-PC-SFF-Desktop-In...

HP T620 workstation ~$45 plus shipping?

https://www.ebay.com/itm/HP-T620-Dual-Core-AMD-Gx217Ga-1-65G...
It probably just regenerated after the firmware updated, to be honest. I think it does it after a factory reset, and it's signed by the local device.
You're welcome, bro.
The fact you are cognizant of the population growth is telling. Let me guess, this population growth is a problem to you.
Can you use this to send D-Mails
Also in answer to sibling comments - you don't need to connect the UI software to the cloud. I have an Edgerouter SFP-X and a few AP lites. I recently added an 8 port Unifi switch for more PoE ports.

Following is to the best of my knowledge! Any ex-Unifi folks or other pros are welcome to correct me:

- The Edgerouter absolutely does not talk to ui.com (except check-for-updates). There's no remote control ability etc etc.

- The Unifi range can be controlled from the cloud, but via your Unifi Cloud Key. You can run this software yourself, without buying extra hardware. When it is not running there is no comms to the cloud. Run the software, configure things, stop the software - I run it in docker on an rpi4.
I agree it is an excellent language from an ergnomics point of view.

One problem I've found for proprietary programs is that C# stored basically your whole source code in the executable. I don't just mean it's easy to disassemble... it's really retained the source code, or at least a lot of metadata. Even the original local variable names are there! I wonder if anyone has any ideas to work around this?
Great question, that might be even better.
> how is this a securities case?

Everything is securities fraud.[0]

[0] https://www.bloomberg.com/opinion/articles/2019-06-26/everyt...
I just skimmed, but I don't see anything novel here (which just might mean the paper is poorly written and they didn't highlight it). But I've used a microwave for the applications they've suggested (which are really all the same application...). I used to do this when I was trying to clean materials that I was sputtering onto (which can also be cheaply built in-house for a few hundred dollars but for something that works pretty well you'll probably spend closer to ~$1k. I have cad files somewhere).

But I think a lot of HN users have stepped foot in a physics lab (not a class, but where the grad students do their experiments) and have seen all the hacked together equipment and home made variants because no one can afford a $10k machine.
State of Deep Learning for Object Detection – You Should Consider CenterNets
And in the offline world - pay for things in cash. Government is lazy and they love being able to search everything. Sending people to actually investigate things with actual leg work is not ideal. Paying in cash, or doing anything physical (pen and paper, in-person talking) breaks everything.
A network controller for local WiFi shouldn’t be reachable from the Internet at all. I’ll take a vulnerability ridden controller on an isolated management VLAN over cloud shit any day.
Teachable NLP – GPT-2 Training as a Service
It says "animal study".
Lab accident theory is not crazy at all.

SARS escaped Beijing lab twice

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7096887/

The diplomats and scientists were worried about the safety of the lab's research on coronaviruses in animals like bats as early as January 2018.

https://www.businessinsider.com/us-officials-raised-alarms-a...

We are living in a strange world where a very plausible theory is considered as conspiracy.
To give an example, in Swift, I can write a hello.swift with:

#!/usr/bin/env swift

print("Hello")

And after a chmod +x, it works. Granted, anyone who I distribute this to will need a swift compiler installed, but that’s to be expected (and similar for Python.)

Golang and other “compiled” languages have similar ways of making this work too.
Very strong whataboutism and claims of moral equivalency.
In actual deployments and support situations I saw at Meraki, connectivity from individual hosts to the internet was usually the most reliable part of the network.
https://en.wikipedia.org/wiki/Dual-tone_multi-frequency_sign...

There was a fourth column (A,B,C,D) meant for menu selection, and for the US military to indicate call precedence. Also used for various kinds of system automation and signaling but not accessible directly.
Sure, but if a global company pulls a stunt like that (pun and all) 2 days before April Fools day, it’s probably related to April Fools day.

Given all of the signals, and the proximity to April 1st, a little bit of sobriety and common sense would have gone a long way. As it is, the news outlets added zero (0) new information on top of what was in the press releases.
Scala 3 kills C# by a large margin, imho. C# is not a good pursuit unless you are stuck with .Net codebase.
Reminds me of Reed Hastings quote about what he learned running his software company before Netflix: if your company insists on always adding policies to fix yesterday’s issues, tomorrow you will only have employees who enjoy to following and creating policies (quote not verbatim).

Also, I took your comment to be satire, but it’s hard to tell that from truth these days.
No. Publishers can disable DRM if they want on Kindle. The reason they stopped accepting Mobi is because it's an ancient format that lacks a lot of features over ePub and Amazon's newer formats. It's like Apple not accepting 64kbps MP3s for iTunes. There's just no benefit, you can always make a just as 64kbps MP3 for your ancient device if you need it but you can't really go the other way around. Same with Mobi and ePub/Amazon's newer formats.
Show HN: Pagereview – Easily add before/after design feedback on any website
Because it was a late entrant to a market with perfectly functional alternatives and had insufficient margin to dominate, unlike nearly every other market it is in.

Neither supply chain, nor delivery, nor IPR was working in its favour. The Amazon substitution products depend on Chinese manufacturers who, inside China, can sell on alibaba or Bangood and Amazon would only have marginal market increases where Amazon outside China is a primary channel for these people.
Trump Is Back Online
The Discovery of Grounded Theory
GDPR has added unsightly boilerplate to our shared web experience. You've only succeeded in expanding our attack surface.
> why bother with the special syntax at all?

It dovetails nicely with interfaces.
No opinion myself, but someone did mention something to this effect in a different thread: https://news.ycombinator.com/item?id=26638671
> But unless you live in Baltimore or similar environments, the US is absolutely safe, statistically, for one to work/play/live in without spending any thought to protecting yourself from gun violence.

Your mileage may vary:

My high school, in a nice safe San Diego suburb, had a mass shooting a few years after I graduated. One of my favorite teachers retired that year because he couldn’t go back to the place where a student had bled out in his arms while he was trying to tourniquet him.

I met the Aurora, CO movie theater killer when he was a UCSD student working on our lab cluster. Good thing I never WONTFIX-ed his support tickets… In what is possibly the most American game of small world, a now-coworker used to go to the late show at that theater often but not that night.

A friend of ours had a close call and lockdown due to a disgruntled employee bringing a gun to his office (past armed guards!), a mile from where I work.

My wife’s school had a full hostage negotiation one afternoon when a student made a threat. They talked him out of it but … it’s not exactly hard to imagine that it could have gone the other way.

Nobody I’ve met from outside of the U.S. has even one story like that, even the ones from countries we look down on.
the solution must be mercilessly strict laws and enforcement. I won't elaborate on it. Some imagination will help.
Here's a way to search and watch Youtube without ads, using fzf, youtube-dl, mpv, and jq:

mpv ytdl://$(youtube-dl -j 'ytsearch30:spider pig' | jq '{id,title,uploader}' --compact-output | fzf | jq -r .id)