skysight-inc/HackerNews huggingface dataset:
Because I don't want to live in an overbearing police state. I find it weird that you would pick the example of looting rather than some sort of very serious (and irreversible/uninsurable) crime like murder. You are surely aware that technological capabilities lead to feature creep, just as you are surely aware that police departments all over the country now operate military-grade armored cars to little apparent public benefit.

Edit: just to expand on this, here's a press conference from earlier today (sorry about the poor sound): https://twitter.com/DarwinBondGraha/status/14001715920642416...

Here, Oakland, California's Chief of Police admits that police claims about molotov cocktails and crowd demographics that were used to justify the deployment of tear gas and rubber bullets against protesters a year ago actually had no basis in fact. The Chief explained that he received information to that effect via the radio, and then went out and repeated it to the public (via the media) without making any effort to vet its accuracy. (For clarity, he has only been police chief since February; at the time last year, he was a acting as a spokesperson for the department). It's arguable that the decision to deploy tear gas escalated the protest into a full-fledged riot; even if you don't think so, it certainly misled the public about the behavior and composition of the protesters, inevitably impacting policy debates and so on.

I feel this is a good example of why the police cannot be trusted with facial recognition tools; false claims can be used to to designate large numbers of people as criminal suspects, and that suspect status can then be leveraged to intrude upon their rights. Were California's interim prohibition on facial recognition not in place, chances are that it would already have been deployed to identify large numbers of legitimate protesters on the basis of initial false allegations (ie, lies) made by individual police officers. 33 officers have since been disciplined and no doubt civil litigation will delve deeper into this, but at present the police officers who were disciplined do not have to be identified, despite the fact that they were quite happy to lie in order to violate the rights of that same public.

https://www.ktvu.com/news/oakland-police-chief-apologizes-is...
I would prefer not to be called any names at all, thank you very much.
What's the point when they can buy the information from private companies?
What really is the difference between a $5 secure certificate from ssls.com, a self-signed cert, a $60 godaddy cert, and a lets encrypt ssl. Just about nothing right? So why not trust self-signed certs.
I am ambivalent, but the reduced fees are nice.
Very true.

If I recall correctly about ketamine, the mind altering effects diminish without sufficient restorative period between dosage. This could further be an issue in two ways. Individuals may associate the effects of ketamine to the mind altering effects only, not realising that it affect the body even if they're not getting the same high ("what I can't perceive can't hurt me"). It could also make individuals try higher dosage more often ("maybe it's bad product, it didn't do anything last night, let's try again").
> the art of it is something discovered and shared

That’s what microtonal harmonic structures feel like to me, in the present day. Exploration and sharing of a new but familiar frontier. Even when done digitally.
Hey, we users built the knowledge-base. Where is our cash? (Only half joking).
They already make money by having a job board (probably one of the best around for hiring devs, so probably costs a bomb) and they sell an internal version of SO for enterprise customers.
Good 2FA (e.g. U2F) can solve most phishing. https://krebsonsecurity.com/2018/07/google-security-keys-neu...
"IRS offered $625,000 bounty to anyone who could 'crack' Monero; no one succeeded"

https://news.ycombinator.com/item?id=25752042
Shut...up. There is no such thing as antifa, and even if there were, being anti fascist IS the correct call.
This is very nice. Gaussian process regression didn't click for me until I thought of the data as a partially observed sample of size one from a stochastic process.

Practically, I have a hard time using Gaussian process regression. I find regression with splines to be reasonable and fast, and I don't have to fret about the nugget parameter or the covariance function structure. But I admit GP regression has a beautiful theory.

But there is an equivalence between (smoothing) splines and certain types of Gaussian process models. [1]

[1] http://pages.stat.wisc.edu/~wahba/ftp1/oldie/kw70bayes.pdf
In school I studied computer music, and I participated in a grad seminar for which the final project was a group concert. Alvin Lucier, one of the progenitors of electronic music, led the seminar as guest faculty.

For the performance I built a software instrument in Max/MSP with some similar principles around free timing to those in this drum machine, but with a digital granular synth voicing.

At the pre-show critique, I performed a piece using this instrument, and explained that the synthesizer had 3 voices because I found that to be a sweet spot between a full-sounding texture and what I could manage live.

Alvin asked me if I had considered 5 voices. Confused, I said I had, but, and I repeated, I found it too much to manage. Cryptically, he replied something to the effect of ‘well, ok, but three is three but five is five.’ This was bizarrely hilarious to me but I kept it to myself.

Later, the student who designed the show poster elected to call it ‘Three is Three but Five is Five’.
NortonLifeLock Unveils Norton Crypto
I just released the "big picture". I am sure that the OpenBSD kernel devs can redo what I did ten times quicker (in terms of development time) and a million times better (in terms of clean integration with the kernel and security) if they want to. They know all of the details of the kernel :-)

That said yes, I would like to be able to turn this into a product.
Most of Worcester county and Bristol county would probably disagree.

Just like when they hit the vehicle inspection system in March, the wealthy hemmed and hawed about how nobody should get away with thumbing their nose at state authority but the little guys were just happy it wasn't them getting the shaft for once.
It's not.

OSS projects aren't people with curable diseases. Most of them are labors of love, run by people in their spare time. Those people have needs that are mostly not met by working on open source projects. Epsilon open source projects are well-enough funded that nobody in the project feels starved for resources.

Bug bounty programs are only useful for these projects if the details of the bug are shared with the project. Zerodium's model relies on keeping developers unaware of the bugs for as long as possible [1].

Nobody developing OSS is grateful for programs like Zerodium.

[1]: https://security.stackexchange.com/questions/199480/what-doe...
The cost to seller is mostly the same. eBay is now taking the cuts (the cut they have always taken plus the cut that used to be taken by PayPal) themselves instead.
Again, businesses are simply legal entities. The individuals running them are still subject to laws. You can't have a company of mercenaries going around killing people because murder is illegal. I mean, you can, but if all your employees go to jail, your company doesn't last very long. Other than anti-trust legislation, can you provide an example where corporations have more restrictions than citizens? Distilleries, arms making, banking, every regulated industry is an industry a private citizen can't partake in.
same here. i would say it was a full 2 years before i was free.

i do not want to go through that again though.
> I don’t really understand your problem as in NixOS it is precisely the easiest to handle some packages from this repo and anothers from another. You can just add a single line of an alternative repo like altNixpkgs = “reference repo either by url or path” in the let in “block” and instead of pkgs.something just use altNixpkgs.pkgs.something.

Yea, i actually do that for a couple of my dependencies. My problem is there are dozens or hundreds in my OS that instantly upgrade if i change my `nixpkgs` ref. And i have no clue what version _any_ of those are at, off hand.

Eg lets say i want to fix my X - because when i updated my `nixpkgs` pointer Xorg was using a lot of CPU for some reason. There's no lockfile that says what version X is at, or what dependencies X is using or associated with. Is it one package? Is it a half dozen? I could open the repo and dig through the configs to locate it and _try_ to infer what the hell version it's at, and what dependencies it has.. and then find what they're at and so forth - but it's convoluted imo. Much easier in Cargo.lock, for example - something i've done dozens of times before.

In short, basically everything in my OS broke when i updated my nixpkgs ref, and it's non-obvious and maybe non-trivial to understand what versions everything is at. To incrementally try to un-screw my system when i change my nixpkgs.

As i move forward, any packages i install i'm tempted to bind them to very specific inputs. So that when i want to upgrade one thing, only that one thing changes. But this workflow seems difficult in NixOS. Despite it being the workflow that i want.

Well, maybe not difficult - but lots of LOC. Adding dozens of inputs just to change versions of stuff without breaking other things seems like a lot of work for a dependency management system.. imo.
> Checkout what opensuse is currently building here

Actually the service is completely open and cross-distro. Everybody can build anything for all major distros. In practice the majority is probably related to OpenSUSE.

I have built packages for OpenSUSE, Ubuntu and Arch. Just for myself if I needed to patch or try out something or I needed something not available in the standard distro repos.
It makes plenty sense. It was meant for the Senate to tame the more erratic decisions of the House of Representatives. However, since the GOP has become what is essentially a fascist party with a Mango Messiah, no amount of balance is currently possible.
CareEvolution (Remote; Ann Arbor, MI) \ Patient Engagement Platform \ Hiring: Technical Documentation and Customer Self-Service Specialist

CareEvolution is looking for enthusiastic self-starters and team players to further build out our industry leading patient engagement platform. The patient engagement team delivers digital clinical research, digital therapeutic solutions and telehealth offerings to our clients, allowing clients to create unprecedented patient data sets and interventions to advance clinical research and preventative care. We work with the world’s brightest and most prestigious clinical research universities, providers, payors, and wearable/device manufacturers across the globe.

Apply at: https://angel.co/company/careevolution-1/jobs/1389744-techni...
>So, the site has 14+ million users with no real activity and the percentile ranking is based on users with 200+ points.

Maybe there more people like me who create an account just to do one thing. And the next time they create a new account?
All of those address the issue from the other side.

If I'm aware of the Semantic Web, agree with their conclusions, and wish to do so, I can make my site Semantic. That's true. And if I wanted to publish data and make sure others could access it, I would.

It's not required however. And if I want to make my data only accessible through my portal, I have a vested interest in making my site as anti-Semantic as possible. Like I don't think Multiple Listing Service (MLS) companies would ever make their sites Semantic. Nor would any company that consumes their data (like Zillow or Realtor). It's the data itself that has value, so they want to put hoops in front of it.

But it's technically publically available data that they're publishing for free. Technically, if you acquire the facts themselves, it doesn't matter how, they can't do anything to you if you redistribute that data. The only thing they can do is make their site as difficult as possible to scrape.

Then there are the sites that don't care either way and making their site Semantic is only additional work. For example: Lego's storefront. All of that information is from their databases. They already have the information and don't care whether or not someone else has access to it. The information provides little to no value. So they have no incentive to invest resources in making that data more easily available to others.

So to get the information from these sites, you have to scrape. It's unfortunate, it's miserable, but those are the facts.
This looks like a great list!
I think VRSC is similar to ARRR and Pirate.
I loved the story telling of the video. To tell the truth, the story telling was even better than most movies that I watch for entertainment.
This is the real answer IMO. For example, if you have a 2TB drive with 50GB available space left and are trying to move 1TB of data, and the move is requiring copying, but all individual files on their own are less than 50GB in size, then I’d be pretty upset if my computer was unable to move the files just because it was wanting to not delete anything until the end.

But ideally I’d want the system to delete at the end if possible, and to otherwise delete as needed, instead of either doing only all at end or only after every single file.
Well, yes and no... As an Apple developer, I used to be able to rely entirely on Inside Macintosh books because Apple’s docs were the best in the business, probably the best ever. Nowadays, even if I wanted to rely on Apple’s own documentation, I can’t, because the docs are just no good any more.

(Their header files are still very informative! But much less so in the Swift era, sadly...)

To use your analogy, I’d really like to walk as much as I used to, but they ripped up all the walkable districts to build highways!

I don’t think things are bad across the board, at least. For example, you can get a very long way in Javascript purely from MDN rather than needing SO.
Popular and trending have long lost their meaning in my mind.

I automatically assume there's some commercial/political/whatever actor manufacturing these things.

Organic popularity is basically dead at this point.
Yeah there is something really special about essentially booting into a basic prompt/interpreter. You get some of that from booting into a bash/zsh/sh/ksh/blah shell, but it's not quite the same.
Another reminder that browsers developed in China are a risk.
Yea, i actually do that now. My problem is the dozens of packages i didn't hand pick all broke. So basically i need to hand pick everything. And in doing so, it feels like a lot more work than simply specifying what versions i want during the package install.
It‘s probably way too late to change the rules now, but even though it‘s totally legal according to the rules on the leaderboards, using a keyboard seems like quite a difference from using a controller, and from the end of the video, sounds like it does make certain moves easier.
Exactly! That is why I always buy things that are organic and fair trade. It costs a bit more, but it is worth the price. I'm not exactly sure how that translates into what you are asking though, but rest assured, I believe it does.
One of the very first companies I worked at was a local exchange carrier, back in the days those were a thing, and there was supposed to be a certain maximum number of days between the time an order was placed for a new line and the time the line was operational. (These were lines like frame relay drops, fractional or full T1s, etc., so fulfilling the order often required coordinating with other providers, colocation facilities, and so on.) But nobody was actually formally measuring this. I created a spreadsheet which actually calculated the metrics by querying a database for recent orders, showing which ones were still open and how long they'd been open for, and what the distributions of placement-to-fulfillment times were, and it turned out we were only hitting our own internal targets about half of the time. They didn't know that. There was a vague sense they weren't hitting all the targets, but there was no sense they were missing half the targets, in some cases by a lot.

Maybe you can make a case that it was a very bad no good horrible thing for me to have done, but I'm going to respond that if you want your company to survive the next two years, you need to be know whether your company is doing the thing it is in business to do.

Sure, it's really easy to use metrics to create negative incentives. That's not an argument against using metrics. It's an argument against using metrics badly.
I'm having a pretty hard time trying to figure out why people are so quick to toss out philosophy without trying to understand it.

The principles of liberal democracy, separation of church and state, and all that feel-good stuff is not something that "really exists". Its a bunch of stuff that a bunch of philosophers spent years observing society to create stuff to try and make a coherent framework for humans to live by.

I still think to this day that my philosophy of science course in college was one of the most defining classes of my life. It really changed how I look at existence and modes of thought
I knew a guy in college who was always angry about something.

One day he gave up twitter and it turns out he was really intelligent and pleasant to be around.
>You can support some uses of facial recognition without wanting it to be used to say ticket people for jaywalking.

Agreed. As xanaxagoras said, this is a political favor to Seattle Antifa.

I presume that any prosecution using facial recognition software is also going to have human beings verifying that video actually matches the face of the accused. In other words, facial recognition software is going to be used as an automated first-pass filter.
"Unfortunately, the code hasn’t really been updated in a while. A long while. The timestamp in the module claims it was last updated on Valentine’s Day 1998"

When I saw this timestamp sometime ago on my PC I thought it was a joke?! C'mon 1998 like WTF!
Is stack overflow even useful anymore? I guess it must be for some.

Personally for me it feels like the content is pretty "stale". E.g. an answer from 5 years ago that uses a deprecated feature in a library that was abandoned 3 years ago etc, a reference to something only working in Chrome v12(we are on v90 now IIRC) etc etc. It seems like a lot of what I come across on there is just so out of date that I personally do not put value on it.

As such I personally avoid it now like I used to avoid experts exchange that was the stack-overflow-before-stack-overflow.

I wonder if I am alone...?
Is it actually more open than a typical SoC? Also asking for the PinePhone. Also, will it ever get firmware updates? Also, I’m not even sure we have source code for the existing firmwares.
This exactly. CSS proponents were badmouthing tables left and right, but tables excelled at the kind of layouts that CSS struggled with. Reactive three column website with tables? Super easy. Reactive three column layout with CSS? Requires a human sacrifice and won't work in half of the browsers of the time. Want the text centered in the column headings? In tables it was a built in feature. With CSS, well, I hope you like pain. These weren't obscure problems either. Many websites were already in a 3 column layout because it was so natural with tables, so converting them over to CSS was an immediate pain point.

That said, if you wanted to do something more complicated then tables could fall apart pretty quickly whereas CSS had a solution. Adding columns to a table when someone expanded their window and reflowing the content into the new columns was basically not possible with tables, but is something CSS can handle for example. Most people only had simple problems though and CSS complicated their life considerably.
Ask HN: What are some valuable niches for early career SWEs to specialize in?
The sophistication of the major ransomware attacks happens at the "done" step of your "blast targets with phishing emails/texts, get them to click, done" description. The initial foothold is often done randomly by various attackers, but the execution after that takes some skill and effort and often is done by a limited number somewhat sophisticated groups who buy the initial footholds from a larger number of random attackers. The lateral movement is not generally done through "file shares with fairly wide-open access", but the attackers often (at least in most of the major attacks) manage to obtain full domain administration privileges to the whole network, so if the backups can be easily disabled or destroyed by your administrators, attackers can do the same.

Zero days are indeed often not required, however, IMHO the initial attack is less preventable than that lateral movement and further exploitation - if attackers are in your systems for a week while they spread everywhere and kill your backups preparing to pull the switch to "ransomcrypt" everything at once, then that was your opportunity to detect it and kick them out, but the victim organizations obviously were not capable of that. This needs to be fixed, perhaps by methods similar as you describe.
There's plenty of fabric innovation going on. Not just in techwear (where you get your high end outdoors stuff), but also in more traditional fashion. Off the top of my head I've seen the Techmerino stuff from Zegna (which fits the bill of your super fabric, including the cost), the nylon/spandex hybrid Seagale uses (don't know who makes that), the technical wool/silk/polyurethane blends from VBC (they call that line Earth, Wind and Fire).
A 4 day week is the middle ground - something I currently do and love it

I also recently launched https://4dayweek.io - Software jobs with a better work / life balance.

I'm on a mission to help normalise the 4 day week
I think you might be missing context for the thread? Or maybe I'm inferring context that isn't there.

I thought we were discussing the "no copyright assignment" scenario.

> But if you do so and release it without notifying them

That's them not doing due diligence as far as I can tell. The employee would also be in breach of contract, possibly even committing a crime.

Employees can do all sort of illegal acts while in the employ of someone else... and when that happens you prosecute them (if it's egregious enough).

I suppose it may mean that an upstream project may be harmed quite badly if this goes on for long enough...

... but that's no different for any open source project. Or even closed source: Maybe an employee is working for two companies and 'reusing' code in an unauthorized way.
> You can support some uses of facial recognition without wanting it to be used to say ticket people for jaywalking.

That's a huge assumption that many of us (opponents to widespread surveillance tech) just don't agree to. I don't think it's possible to hand government this kind of capability, then limit it to a specific set of uses. It always expands in scope, covering more and more use cases until the folks over at Vision Zero[0] make an impassioned plea, "Suppose you could prevent 10 pedestrian deaths a year by enforcing our jaywalking laws better? Why wouldn't you want facial recognition software to protect them?"

Or maybe the bias-free policing people[1] put forward their argument that removing human cops from jaywalking enforcement will increase Equity. It would be a decent proposition! And you end up with every minor thing being automatically caught and ticketed.

That would suck.

"Slippery slope" may be a fallacy in formal logic, but it's damn useful in resisting the march into a dystopian future. Nip this shit in the bud. Make it require some effort to enforce the law.

[0] http://www.seattle.gov/transportation/projects-and-programs/...

[1] https://council.seattle.gov/2017/07/20/council-president-har...