skysight-inc/HackerNews huggingface dataset:
I think it really depends on the industry and location. There's a clear tendency on HN to only consider the tech market in California, where it makes the most sense to hop companies regularly. It's not the case for everyone.

I work in a large European industrial company in aerospace, and the vast majority of the employees stay until retirement. Yes most change job regularly, even relocate to different countries, but within the same company. Outside options aren't great, you're not looking at large potential raises and will have difficulty finding as good of a package unless you go into another industry completely. If I was fired I'd probably have to move to a different country and get into another industry to get a good offer.
I also made something similar: https://FinURLs.com – a neat finance news aggregator.
Motley Fool is really awful. Every article is just click bait trying to get people into their sales funnel.
Why downvote a question like this? Is the thread solely for US citizens?
Great work! Hacker News still seems to have a deeply skeptical culture with regard to machine learning - not sure why. There's always someone saying it's "not novel" and it's "just doing x".

Overfitting is a known issues in machine learning, people. If you still think all neural networks are doing is memorizing the dataset completely in the year 2021 - you might want to revisit the topic. It is one of the first concerns anyone training a deep model will have and to assume this model is overfit _without_ providing specific examples is arguing in bad faith.

Sentdex has shown his GAN is able to generalize various game logic like collision/friction with vehicles and also learns aspects of rendering such as a proper reflection of the sun on the back of the car.

He also showed weak points where the model is incapable of handling some situations and even did the impossible task of "splitting a car in two" to try and solve a head-on collision. Even though this is a failure case; it should at least provide you with some intuition that the GAN isn't just spitting out frames memorized from the dataset because that never happens in the dataset.

You will need to apply a little more rigor before outright dismissing these weights as merely overfit.

@sentdex Have you considered a guided diffusion approach now that that's all the rage? It's all rather new still but I believe it could be applied to these concepts as well.
Where I went to school, they put all of the effort into the kids who were failing and if you were doing well, you got no help because hey you seem to be doing ok.

Results?

The kids who were failing still failed because no matter how much teachers do, it's still up to them to study.
The data is CC-licensed and they provide a download for a data dump, scraping it is just wasting your time.
Why was it a mistake? What happened?
Isn't this problem easily and simply solved by dual licensing GPL/commercial?

If Daniel wanted something in return for his code, he should not have MIT licensed it. I don't mean that in a snarky way, I just don't see what more there is to say on the matter.
Blog posts != standup.

There may be structure to comedy, but that does not mean that there are dogmatic rules that apply to all mediums and all audiences. Expecting anyone to study and follow the techniques that have been developed for a successful standup routine, and then use them when writing up a blog post is somewhat absurd.
Cheers mate and thanks for signing up!
Bug bounty programs tend to get utterly swamped with low-quality reports and entitled researchers.

It can be hard to separate signal from noise.
It currently compares past 3 years of comments, so yeah the similarity may not be apparent from just the recent comments.

We did this so it would work even for the less active users. But I think your suggestion might work, too.
Cyber-heists: The methods and menace of the new bank robbers
I would expect that a relatively large percentage of disabled people are also incels, and that being an incel may be one of the more challenging consequences of being disabled.

I wonder how the experience of these disabled incels compare to people who are incels for other reasons.
So basically Nuclear Fusion? Or I am under the impression even Nuclear Fusion is far closer to commercial application than QC?
Everyone in the reporting team was out. Hey, Drew is a coder with access to the datavase, maybe he can write us up a report real quick. Say I can, do it on test, works great. They just want the results exported as a CSV, so no problem. Run it in production. Takes 2 minutes, but works. Give the the report. Didn't use NOLOCK. Pharmacy system was down for those two minutes.
I would work backwards from why you want to learn a new language in the first place. Definitely spend some time on that. Usually the reason will lead directly to a project that you want to work on. Otherwise it will be hard to follow through.

Ex: I wanted to learn C, but my reasoning was only that it seemed like "real" programmers knew it. But that's not a good reason. Instead what I really wanted was to get closer to hardware and build software that did low-level operations. So I learned objective C and build audio-processing software for iOS that I actually wanted to work on. So I was able to learn a bit of the language and a bunch of other cool things that I still use today.
Try again? The app is hosted by Streamlit which is still in beta.
Thank you so much for the detailed explanation, giving this a try in the coming weeks
Yeah, I think people want a better l1 from a variety of perspectives (some may be in conflict with other perspectives people think should exist), not necessarily a l2, which really only even exist because of eth limitations, which has a whole bunch of other tradeoffs people hardly mention (like cross chain settlement risk within the same[bridged] asset being introduced with the roll ups).

I know only one evm compatible l1 (avalanche c-chain) that's better from a consensus perspective (not nakamoto), decentralization (#of validator nodes that actually participate relative to stake) and time to finality.

wrt decentralization, lots people ignore all the choke points in the eth/polygon model (infura, nakamoto consensus, local vs cloud run nodes [people like to handwave this in the avalanche discord as well and focus purely on stake distribution…]) which must not be ignored, esp when considering PoS.
I appreciate this advice, and generally agree, but game theory doesn't take externalities into account. If your employer is particularly toxic and hiding it, a noisy exit might bring extra scrutiny that could help other people who stay with the organization, though maybe not. Plus, sometimes the previous employer makes leaving on good terms impossible, like if your employer is being criminally investigated for tax fraud.
By default, all expenses reduce your profits. Unless there is a specific exception, ransom is just another expense and should therefore be deductible.
+1

I always turn to Cryptopals when kicking the tyres on a new language.
For some users I searched, the most similar user is a throwaway account, which is somewhat eye-opening and unnerving.
Same here. I've tried Firefox and Edge, same result in both.
> Parents always want the best for their children and this predictably leads to full segregation.

More likely, segregation happens because parents don't always want the best for their kids. A lot of it is simply self-segregation, driven by varying parental attitudes to education and the like.
I've used this in the past for gameboy emulators. It worked, but there is a constant game of cat and mouse. Apple is aware of this and tries to make it harder to happen, developer convenience be damned.
Looked at another way: Bad guys now know this guy has talent, they also know Apple ripped him off, what’s to stop them from making… a better offer?

Apple probably thinks they’re protected themselves but if this guy “turns” the entire industry is at risk due to Apple’s thrift.
I was just about to point that out! I tried a friend's account and the second match was a throwaway that I know for a fact is theirs.
I'm not sure if I got you right: The performance boost with speculative execution is massive. It introduces a vuln. It is the fix for that vuln that kills the performance.
I still don't understand what the author means with his exploits (also against Instagram[0]) involving a race condition.

A race condition means that something unexpected happens when you do something concurrently. Not "it gives the same result as when done one by one, but we're doing it faster" (which is what the author appears to be doing). It has to be different from the result any sequential operation could achieve.

They used a few thousand IPs to hammer an endpoint, staying below the per-IP rate limit. Did it matter that this was done during the same time from all the IPs? If yes, it's not clear from the blog post how/why it mattered. If no (i.e. the result is the same when first completing all requests from the first IP, then the second, etc.), then it is not a race condition - just concurrency.

[0]: https://thezerohack.com/hack-any-instagram
I think who society in general would choose to save is more useful than personal views.
Iran Poised to Elect Mass Murderer
Not every company works only on small software products.
I couldn’t agree more, it’s terrible and they should be ashamed of themselves for being so useless.
I remember when Yahoo Finance was really good as a content aggregator we had dozens of contracts with news sources which you could filter etc. Plus the message boards that were some of the best on the internet. YFin has devolved into something unrecognizable (and horrible).
$18k this time. $12.5k last time. Seems like this is his range
That’s a really interesting and unintended use case…
Doesn't work for shadowbann'ed accounts, alas the more interesting case...
For learning Rust I just picked a random, reasonably sized C++ project and spent a few weeks porting it to Rust. Was more than enough to get a grip on the core language features and tools and start receiving interview offers for a Rust position (though I ultimately decided to stay on the JVM track). The project was a face detection library: https://github.com/atomashpolskiy/rustface
I don't especially agree with that, but I realize that we have a subconscious bias towards attractive people and that people in general are probably more likely to save an attractive person over an unattractive person.
This was my thought exactly. Excuse my naivety, but shouldn't a wifi-enabled pi be able to broadcast and automatically connect to others around it? And as long as they all have unique names shouldn't <piname>:port_number be possible for a simple web sever on them?
It's evolving , just backwards (read:arparent)
Even Google Security was really friendly, even as I reported something that seemed like an issue but turned out to be my own fault
Gonna add shadowban'ed accounts option?
Mamba: A robust alternative to Anaconda package manager
I don't really get what your main criticism is. In your other comment, you said the biggest sin committed was that of stacking punchlines on punchlines (which is a problem of flow, not joke quality), but now you're saying that some of the jokes are too bad and should have been cut?

More importantly, though, the standards of live comedy can't be directly applied to something that's intended for reading. Live comedy concerns itself a lot with timing your delivery to the (vocal) audience response. I agree that the linked material would need rework before it could be used as a stand-up routine, but that's not the goal.

For what it's worth, I think the blog post is funny. Most of the jokes are funny. Some jokes are less funny, but aren't dwelled on, and by the end of the page I've forgotten the bad ones.
High passing rate and minimal number of student complaints. No one in administration cares if the high passing rate is because standards were lowered. All they care about is that more than x% pass.
> they can't ship a cube

... it's a university research gadget, I don't think they ever tried to make it a product?
We see, time and time again, password recovery systems getting exploited.

Aside from Apple's shitty response to the brute force vulnerabilities discovered here, I'm also annoyed that Apple isn't nearly as paranoid as they ought to be about the security of what is likely to be the #1 hacker target in their system.

Instead of using a 6 digit 2 factor key, they could easily use 12 character alphanumeric key. That's (20 + 10) ** 12 / (10 ** 6) = 500 billion times harder to brute force. And honestly, is having to type 12 characters such a burden for the exceptional case of a password reset? I don't think so.

Building secure systems is hard, I get that. I've made dumb mistakes myself. But Apple's iCloud contains people's locations, their photos, where they live, their email, notes and other secrets, and iCloud also circumvents all Apple's on-device encryption. It's fundamentally a system that sacrifices security for convenience, and it really sucks that all the real and serious security efforts made by other teams at Apple are negated by iCloud.

There are many people, myself included, who use password managers and who will never ever lose their full disk encryption keys, passwords, or recovery keys. I don't want backdoors. I don't want forgot-my-password systems. I want to opt out of all of it.
Less likely Microsoft has signed multiple rootkits and more likely that someone has either stolen the certificate, they have someone at Microsoft signing the malware for them or they have found a vulnerability in the signing process imo.
Expenses and losses related to 'kidnapping for ransom' are tax deductible [1], so it stands to reason that ransomware payments are also tax deductible.

[1] https://www.irs.gov/publications/p547#en_US_2020_publink1000...
Is it intentional that this only works once and then the page needs to be reloaded to enter another name?
Picked up too many boring jobs with messy legacy codebases as opposed to prioritizing building and specializing. Went into industries that ended up being on their way down and didn't take care of their engineers and switched to tech late.
Any good books that you would recommend on "Hardware Security"? I understand it is a broad field but would like to start somewhere.
> incredibly lax safety procedures.

Or someone having a bad day. Human beings are not robots. In fact they are quite opposite, https://en.wikipedia.org/wiki/Demon_core

> all you need is for some people to be near some sick bats.

Seems that there are multiple problems with that..

1. High level of optimisation for Human transmission, without many mutations indicating the possibility that it was pre-optimised somewhere before making the jump.

2. Presense of double `CGG` which is left as a common market to denote lab insertions.

>The insertion sequence of choice is the double CGG. That’s because it is readily available and convenient, and scientists have a great deal of experience inserting it. An additional advantage of the double CGG sequence compared with the other 35 possible choices: It creates a useful beacon that permits the scientists to track the insertion in the laboratory.

https://www.wsj.com/articles/the-science-suggests-a-wuhan-la...

So on the other hand, for lab leak, only these needs to be satisfied.

1. They were doing GoF research on viruses trying optimise for human transmission.

2. Someone had a bad day and didn't follow the strict procedures, and ended up getting infected with a super charged virus.

What makes the above far fetched is only if you take the chinese researcher's word for granted, and accpet that there was no such research being conducted there, and no virus that was close enough was stored in the lab to start the research with. But without that, I think the lab leak is much more probably, and I think most experts will agree as well (They don't because they have a hard time doubting fellow reserchers without evidence).
There's another popular-ish paradigm: basically software modular synths, rather low-level so you create individual sounds by wiring the signals into graphs. Max/MSP and ‘Pure Data’ are the most famous in this style, they're often called ‘sound programming languages’ for some reason. I'm having a hard time finding a finished demonstration instead of a tutorial, but here's one for Pure Data: https://www.youtube.com/watch?v=DGiT55likdo

SunVox, mentioned elsewhere in the thread, is similar in the approach afaik, and works on many platforms (I first saw it on Palm and then Windows Mobile in mid-2000s).

CSound is sorta related somehow, but it's an actual textual language for generating sound.

There are also apps that look like hardware modular synths: VCV Rack is the most well-known and open-source; apparently Reaktor is in this vein too. And there's Hexen on Android. (Propellerhead Reason and Reaper both flirt with the modular approach, making you wire the signal between some modules, but they seem to have dialed it down, dropping unnecessary work for the user).
Neither the App nor Google use location data. However, Google still prompts your for these permissions because, in their mind, the swapping of rotating IDs presents an indirect way of tracking somebody's location (although that data is solely stays on the device and is never transferred, unless a positive person decides to upload the list of IDs there were in contact with)
Obviously, but when you’re in either one of them, as far as you’re concerned the one you’re in is Real Korea and the other one is Fake Korea.

Westerners, especially the ones invested in ensuring the security of the south against the north, like to think otherwise, but even the south is pretty authoritarian. On the same site there’s a piece about the foreign ministry wanting to spend police resources going after some prankster who swapped satellite image of Seoul with Pyongyang[1].

Of course it needs to be said that it’s several orders of magnitude less authoritarian and abusive compared to the north, and perhaps it’s even warranted as a bulwark against pro-north sentiment in the south. But it is what it is.

1. http://m.koreaherald.com/view.php?ud=20210618000668
Only tangentially related, but I love this note at the bottom of the Radium download page:

> Information to warez groups

> Since the source is open, it should be simple to turn the demo into a fully featured version. Please let me know of any problems. (Just compiling the source is cheating!)
Yea, 3 years is a long period. I think by default you should compare only past 30-60 comments and have options for comparing past year and past 3 year. If that works well, you could actually build a "dating app for intellectually curious" ones. Might be easier to do using Reddit data too.
While it's true that the NSA could feasibly compel them to do this, I would be reasonably surprised if they exerted that capability so casually that this many ended up uploaded in e.g. VirusTotal.

If everyone thinks random signed drivers can be malicious, then they're more cautious about them, looking for them. If everyone thinks signed drivers are a sign of trustworthiness, it's much more likely that your malicious driver can wind up where it needs to be, and stay there without being noticed.

My personal bet is heavily on malware getting signed either through a stolen cert/compromised signer or simple incompetence.
So my HN doppelgänger according to this tool is someone I don't hold in high regard, and even clashed with once. Cool...
What makes you believe Apple is unique in their avoidance in paying taxes?
No, it might be resource constraints, trying to handle the traffic.
Their costs don't necessarily have to go up linearly. So it isn't a given that they don't need to increase the percent. That would only happen in a perfect world.
> That experience ought to tell you have a reasonable chance of needing to be joined relationally at some point? Then the smart thing to do is to interpret that as a 1NF violation.

The smart thing is to separate phone numbers into separate fields if you need to treat them separately. But I don't see what this has to do with 1NF? Something can be bad design without being a 1NF violation and vice versa.
> More than 90% of insurers in one recent industry survey stated that “exclusions or limitations” are a “methodology for recovery.” Translation: that means they’re expecting not to pay you.

To add an anecdote to this, I have a friend who used to work for an insurer and now works in reinsurance and regularly jokes that everytime an insurer pays somethings, someone is getting fired.

This is ihmo one of if not the most dishonest field of work in the modern world.
Ling's Cars is a national treasure. A bastion of web design best practices, the work of a genius, no doubt. Really makes me proud to be British.
Some discussion from several months ago: https://news.ycombinator.com/item?id=25028786
You know how if you have to explain the joke it's not funny? If you have to explain why it's not funny ...

"It's not a matter of opinion" really? Says the joke crime commission? Oh wait, there isn't one, because humour is always a matter of opinion.
> Radium

There is close/save dialog box without buttons, you have to type yes/no. First time I see this in desktop app.
Im curious, what do you think or his stronger argument: that intelligent and able people should be favored in the event that only a handful of people can be saved? I’m not sure I agree, but I can see where he’s coming from.
Not necessarily, but Rails is much more a productivity marvel than a technical marvel tbh. This is as it should be for a productivity oriented tool, not surprising users with technically advanced stuff is a feature in that case.

And sure, some of the engineers at Github/Shopify/etc are super qualified but from my personal experience in the Ruby ecosystem (5+ years and counting) there are WAY more autodidact freelancers who can throw up new websites in minutes but still struggle with computing the algorithmic complexity of linked lists than there are CS graduates who have a solid grounding in data structures and algorithms. In such an environment, it is not surprising that many of the available libraries are very business-oriented but not very optimized.
I thought SunVox is closer to low-level-ish purely modular synths/effect graphs like Max/MSP and Pure Data.
I read this “idiom” together with --len as lodsb; stosb; cmp; loopnz. But with time it lost it’s purpose, because if you look at any modern char-star interface implementation, you’ll see pages of multi-arch simd-aware code. And it will never pass a review in a decent team, because neither readability nor performance (the author, with all respect, couldn’t even spell its meaning out correctly N times in a row, which we all couldn’t for some N, give or take one, and weather). This idiom is just a dead relict on a venerable C programmer’s home altar.
There's an Algerian pattisier within walking distance of my home. It's very good! A match for any French pattisier.
This Jen, is the internet.
Isn't dang a bit of a special case? How many people comment about the rules of the site?
At least if someone enters into an agreement to share their data they actually have the right to share said data unlike privileges reserved for Bob corps officers not Sam the secretary.

This is the most obvious problem but there is also the implied covenant of good faith that is clearly violated by trying to trick Sam the secretary into giving up agreements entered into by Sam's boss and a third party.

I think you vastly overestimate the validity of such an agreement.
Is that capital also not produced by workers, in the past? It’s a form of crystallised labour.

Also, does a fixed initial investment entitle one to a fraction of all future (variable) value produced? Why?
Rabbi is joining the German army
My #1 match was an account[1] banned for "posting unsubstantive comments and repeatedly breaking the guidelines". Now, I may be biased, but I don't think that's accurate :v

1: https://news.ycombinator.com/threads?id=franciscrick1