skysight-inc/HackerNews huggingface dataset:
omg I can visualize all those pull requests or feature requests on the TCP repo: "It would be a nice addition if TCP also did ..."
I feel like in America at least its very easy to effectively disappear into a lame meaningless life

Or worse

Prob true in a lot of societies

I feel like books are always a good starting point

I like the advice to folks who are thinking about starting uni late

"What else are you going to be doing in five years?"

Something like that

Point being

Why not just start now? You'll lose nothing etc

How to fix a lame life prob not easy

Books

Therapists

Helping people

No shortage of people who need help

I feel like different cities towns geographies can make a big difference too

Sometimes moving forces you to be more active than you'd like to be

Which creates a larger 'luck surface area'

And maybe you get lucky and find someone to help

Then

Before you know it

You're on your way to a meaningful life
The program is the implementation of an intention, if the conception of how to achieve that intention was itself faulty the program does not actually implement the intention.

A program that does not implement its intention is buggy.
If developer didn't put size check in his software then it's not bug with RCE exploit, it's just doing what author has intended.

Where do we put a border?
Even "old" statically typed languages like Java and C++ are streets better than dynamically typed languages like Python (without type hints).

I don't think people have that view because they haven't experienced modern static typing systems. I think they have that view because they aren't willing to admit that they make the kinds of mistakes that static types help with, and they aren't willing to admit that they benefit from the kinds of assistance that static types provide (autocomplete, go to definition, etc.).

It's annoying.
The 404 page is great
> No one has been held to account for that mess and the Too Big To Fail mindset has become deeply entrenched

People don’t actually want this. The problem in 2008 wasn’t bankers or any other boogieman. The problem is that people want housing to be affordable/accessible, but they also want it to be an investment/retirement plan.

If you subsidise housing to make it affordable (a market distortion in itself), and you encourage appreciation in said market (another distortion) you get bubbles. We stopped this bubble from popping so that boomers didn’t have to take a retirement hit. But Wall St’s role in all of this is insanely small. They played the role of the dealer at a card table. The players are the average Joes and the casino is the Fed.
You wouldn't pirate a working service.
MathML Progress
>That goes double for @NNekoru’s friend, who owned suspicious.link.

I'm incredibly jealous
I don't know if I would call the SIGGRAPH audience the non-science type :D
Also this is not an award but a showcase of short videos which are in some measure remarkable from the computer graphics or art perspective.
> this only does code.

VS Code remotes allows you to drag and drop files from your desktop and they're placed where you want them in your remote environment. I don't understand why this would be any different.
> Why _even_? Fairly sure London has more startups than the previous 3 mentioned cities combined.

Leaving out Germany for the moment, Britain (actually even England alone, I think) also has a much larger population than Sweden, the Netherlands and Ireland combined, so of course it may have more startups total.

As for Berlin, I'm guessing "talent" and opportunities are more dispersed in Germany than in Britain: Does it really have much of a "Silicon Valley of <<X>>" besides London? As I understand it, Germany has Hamburg, Munich, perhaps Frankfurt and I don't know what more (the greater Stuttgart region, from at least CureVac in Tübingen to SAP in Walldorf; maybe Mainz-Darmstadt, with BionTech and Software AG?).

Also, Britain has screwed itself over royally with Brexit, which makes it hugely less attractive and competitive.
This is trying to train a neural network to match the behaviour of various mathematical models of biological neurons.

Said models still don't seem to be very close to being able to predict the behaviour of biological neurons though.

If they did, then we'd have invented artificial human-level intelligence.
> What is that 750 USD supposed to cover? - Monitor - PC/ laptop - desk - chair ... either one of those things can cost as much as that

If I were to guess it's maybe all of those things except the PC / laptop because chances are the company would issue that separately with a $750 budget.

My sample size is only 3 based on people I know who have similar deals:

- One of them got $2,000 to buy whatever work supplies they wanted but no company computer was included.
- Another got $1,000 to buy whatever work supplies they wanted but the company issued a laptop separately (~$2k).
- The last one can request any computer related items within reason as long as it's not abused.

For the last one that translated to 2 laptops and a few monitors over 7 years but things like a desk and chair aren't included.

I'd be curious to see what others have gotten for home office supplies. There's other ancillary things too like internet and phone bills. Companies that go all-in with remote workers often partially help pay those bills too.
That assumes that the word master has a root in slavery. It was certainly used during slavery in the Americas. But it is much older. And changing the label does not change the ingredients. The impression that the word master is strongly associated with slavery is a concept that exist in that form only in the USA. But nevertheless, activists continue to fight dictionary entries instead of the problem they claim to be fighting.

The fight over every day language is a tool of opresive regimes, e.g. Hitler used it, Stalin used it, the DDR used it. I miss evidence that this fight has ever yielded positive outcomes.
It is amusing we glorify words like Pirate and Ninja. Yet other words become vilified so we ban them.
> It's only a legal issue because it's allowed to be.

That describes all legal issues.

I agree with you that its a relic that we should get rid of.

But its not simple to get rid of. There are tons of existing contracts.

There are some companies that their whole business is being content "distributer" for countries/territories. They will do anything they can to make sure they stay in business. They might be equivalent of horse whip manufacturer, but that doesn't mean they will go down without a fight.

For giant content owners like Disney, its probably easier to "contract renegotiation". Netfilx even if they were prepared to pay for worldwide distribution deal, it doesn't mean that content owners are willing or able to sell (if they have other exclusive agreements).

This mess would take a while (and by that I mean years and possibly decades) even if there was somebody powerful pushing for it. And I am not sure if there is any such powerful entity pushing for it.

Another way would be to have some kind of international
deal-agreement but that's even harder to get.

In short technical side is the easiest. And all IP/VPN blocking is peanuts compared to what it would cost(time and money) to renegotiate all the deals.
5-8 layers but how many weights per layer? I can’t access the article but it says it’s a deep CNN so probably in the order of a few thousands weights per layer.
>Someone found a way to replace this gatekeeper with their own version

The gatekeeper function was "protected" by hash of its name and parameter types and this is the $600M quote:

"You don't need to find a full hash collision, you're only checking the first four bytes. "

And it is all in the environment where mountains of hardware with highly optimized software are combined in huge networks with the only purpose of calculating few basic types of hashes :)
>you're already overpaid for shit that's not going to kill you

Software developers are not overpaid. Many are still relatively underpaid relative to the value they provide.
It was very interesting interview. They write the source code, and a static type checker parses the program, constructs an abstract syntax tree, and checks everything it can. And then possible errors are highlighted right within a text editor.
How can it be so expansive?

Norging stands out in the stats.

Is this because people who use electric heating have old direct electric radiators? Don’t most homes in Spain or Italy these days have AC? Those are heat pumps so should be able to provide (some) heat in winter with reasonable efficiency.

https://www.statista.com/statistics/263492/electricity-price...
When was the last time banking software got hacked?
"The purpose of a system is what it does".

Maybe you didn't mean for your position to lead to private prisons. But it does, anyway, and that is all that matters.
Especially when they feel they aren’t learning/growing in the current environment…
Language? I know a lot of people more fluent than a typical US dev. Besides that, how much language do you actually need, some basic vocabulary and grammar to communicate.

Time zone? US has 2 continents + you typically need a maximum of 3 hours overlap a day. This is possible even in Europe-EastCoast setup, I typically wake up 11. In US that's 6am sure, but I end my day at 7pm which at US is 2pm.

Covid has knocked down a lot. The biggest wall to crush was the psychological ones. So its now, not only genius contractors who could negotiate reasonable flexibility. Also when 60% is WFH now, there is little point in fighting/readjusting. If this was 10% you could try and battle or continue to limit that.
> but once a system is in place

No, the GP was correct. As soon as any closed-source software implements automatic software updates, you've always one malicious update away from the system betraying you. Having "a system in place" for doing potentially evil things is unnecessary. Interim steps of any kind are unnecessary.

What Apple has done this week doesn't bring the iPhone closer or further to your hypothetical dystopia than it already was. Or Chrome, or Windows, or Android, etc. They update themselves. Every update your devices have done in the past decade could have betrayed you.

Anything that automatically updates is always one step away.
"I get it, there's no money to be made in just implementing all your optimizations in clang directly."

Sounds really shortsighted. I would imagine revenue from Intel dev tools is a rounding error in Intel's complete revenue stream?
Perhaps we should also rise again the question about who controls own computer because any abuse starts there.

Only full control over own device can prevent abuses. Especially when device comes any close to definition of being personal. You should be able to install own software on the personal device. Including os and bios/firmware.
Is it on top of their respective clients or instead of?
> Apple is the only thing stopping WhatsApp ... from demanding your location at all times.

Nope, I will just disallow it. Or I will feed it random GPS coords. After all I own the device I paid $1000 for, and can run whatever software I like on it, including custom GPS drivers.
You always need to rely on some external authority. You can't crypto/decentralize everything.

And relying on external authorities is a good thing actually. Because it's way way more effective than software solutions. Now of course the external authority can compromise sometimes but for this we also already have solutions for like thousands of years - diversification. If people just would learn not to put all their eggs into pne basket and expect eventual compromise that wouldn't be a problem. I think some 101 finances and practical real world problem solutions classes or something like this would get us way further than decentralisig everything with software
Been following you on twitter since vim.so! Godspeed to you sir!
Law is buggy
They still haven't added a "delete all junk" button.
The people working or rather not working on this project are stubborn and backward.
Very ironic (or topical?) for a crypto exploit to boil down to finding a hash collision.
What is it that would make it so expensive? (edit: ah you meant the renovation not the heating system) A good heat pump for a large house is sub €10k. Of course you need some way of distributing the heat in the building too (water radiators or in floor heating). Is it that the houses completely lack radiators? Retrofitting a heat pump to a home that has a water radiator system and with fossil burning boiler is cheap.

I’m replacing my 20 year old heat pump now with a new one and it’s around €8k installed. At the same time I’ll tear out the floors and radiators (replacing the floor anyway) and replace with heated floors. This costs at least another €20k but isn’t really necessary - that’s just a luxury when changing the floors anyway.

Good thing around here really old houses have 200mm insulation and newer ones have 300+ required by the code. Regulation also bans fossil heating or direct electric for any new construction or major rebuild.
I suspect it's just that many PhDs have first hand experience working with cutting edge technologies --- they understand how fragile and unreliable they can be sometimes despite all the extraordinary claims made in the publications.

Also PhDs tend to form their own opinion on things and be quite stubborn about it (that's how they got their degrees in the first place after all :), which explains why their hesitancy didn't change much.
Which in this case is doubly ironic, because pirates and buccaneers were exactly the group that had kept the slave trade alive even after it was officially banned in many places, if my limited knowledge on the Atlantic slave trade is correct.
I'm having a great laugh every time I hear about crypto-stuff goofs.

Who thought an amazing new P2P invention would improve the image of normal money and traditional banks?
Features is one thing. But I’m quite sure that the Thunderbird team and I don’t share the same philosophy when it comes to UI.
My understanding was the llvm was made because the code basis of gcc is too complicated. Since seems to be a killer move.
People started to get a clue about this 5-10 years ago though. It used to be much worse. I recall having to deal with it daily and I don't think about it much any more - more like a weekly exception.

In fact, now also I get some places trying to be too helpful to the point of being confusing. For example, a trainer store that auto-detects location and lists prices in GBP but sizes in US (without indication) and doesn't actually have an EU/UK distribution centre. So whoops it's going to take ages to arrive, it gets re-listed in USD at the final checkout, whoops again, 3% charge from my credit card, and then the wrong size arrives. But at least I knew the rough GBP amount!
"Check the first 4 bytes of" should be banned in crypto code.

Either I want something to match, in which case check it all, or I don't care if it matches, in which case don't check at all.

Why would you ever check 4 bytes?

To me it smells like a way to prevent fuzzers stumbling on a deliberate loophole.
That’s not a helpful way of looking at it I think. Ideas don’t exist in isolation, and thus old experiments have to be carefully analyzed to extract what’s still true out of it. Often times it’s just cheaper to redo the experiment.

This is true across the board for engineering. It’s hard to build something that survives long prolonged contact with engineering realities. Computer architectures change. How things are done efficiently changes. The set of trade-offs we choose to make changes as the underlying business shifts or better business models are discovered. And heck, businesses can be cyclical for no better reason than humans are naturally cyclical in trends (see fashion)
When I write some code it has a platonic ideal in my mind, and I never achieve that ideal, due to various constraints (time, skill, etc). I may pepper the code with TODOs but it's hard to convey that ideal to others.

So when I come back, my code is an unfinished oil painting, and my fixes will try to complete the painting.

If I bug fix someone else's code I am not trying to complete the painting - I am at best just doing restoration.

It is a long time before Inhave made enough restorations to believe I truly own the painting.
> rouge administrators

It's not important but come on, if your field is cyber security at least make sure rogue is spelled correctly.
... the increase in incidences are coinciding with early travel and reducing the state of emergency related to the olympic. I work at a place that housed one of the teams, and the incidence increased around 1-2 weeks after some people arrived.

NHK made a lot of efforts like the one bellow:
https://www3.nhk.or.jp/nhkworld/en/news/backstories/1247/

Check the video,I would say masks help. It's basic physics ...

it's similar to the seat belt and car discussion. It's debatable how much they help (and they might have increased the number of accidents initially), yet they help.
Statistics is hard.
The "you" in my comment is intended at country level. It basically means: your elected representatives.

It's true that individual actions to help the climate may not help a lot, immediately and in practical terms, if there's no bigger policy movement.

Then again, seeing that people are willing to take costly individual actions is a strong signal to elected representatives that their electors care about this stuff. So it still may not be worthless.
My take is that tech will be involved, like it or not. It’s too powerful, or magical if you prefer, a chest of tools for people to keep their hands off. Politics is not a tech issue, and yet we have Cambridge Analytica. Social interactions are not a tech thing, yet how many social network tech-enabled products are there? Both leave much to be desired.

If we want to avoid a dystopian tech slavery, we have to actively provide positive alternatives to “just more invigilation“.

You talk about protecting children from content, eg via firewalls. What about the production of the “content”? Do you think there isn’t a role to play for technology?
Nice. I have a friend who uses ungoogable.com.
> it has place.

Yup.

Reminding everybody you need to have some adults in the room.

If your full stack web team has not one single person who's experienced enough to have ever had to investigate and clean up after an intrusion, its 1) going to happen soon, and 2) its going to go badly.

I mean, sure - bootcamp "grads" are cheap and plentiful and have pretty portfolios. But almost none of them should have root on production servers...
For somebody who's in the Apple ecosystem it seems to me that a password-protected Numbers file should suffice. Are there security implications that I'm missing?
It used to be very strange to me, but honestly think the answer is that a large number of HN community members are - somewhat ironically - very closed minded. Once you start to think in that framework you see it everywhere, and it goes all the way back to the original DropBox thread where some guy said "this is stupid you could just combine FTP with SVN".

Of course that doesn't apply to everyone, and perhaps not even them majority, but certainly at least the majority that shows up in crypto threads. HN members tend to be very smart, very technical, and very confident, all of which combine into this ugly blind spot to creative/unusual forms of technical innovation. Crypto in particular is good at sitting right in the center of that blind spot.

This explanation has made more sense to me than anything else I've seen, you'll have to decide for yourself if you agree with it.
That makes sense—so long as you lose trust in the entity when they actually betray that trust.
Get rid of covid and I would go back to the office

If that is the hypothetical

Sign. Me. Up.
Actually, if you search "pgp" you will find that there are a few incremental improvements there.
Sounds to me like there's a decentralized, trustless incentive to make sure your software is secure. Yelping NO FAIR! and central-bank-style rolling back the oopsie does not seem very radical and libertarian and crypto.
You can use screen/tmux, but they’re both more complicated and less good when it comes to this specific use-case.

Personally I use both - mosh (or et) for the seamless automatic-reconnect, and tmux as a console window-manager.
> Sounded a bit nuts frankly as he has young kids and stuff.

May have sounded nuts otherwise, but "as he has young kids"? That would be a reason for moving to Stockholm (or Scandinavia in general), not against.
> why would you be so afraid that the transaction would be cancelled?

The transaction will likely be for goods, services and/or money. If one or more parties don't provide said goods, services or money then the other parties may well want the transaction cancelled. That's different from them all being willing to transact in the first place.

That's not a justification for irreveribility. The opposite in fact. But if you were planning on screwing your customer, say, the irreversibility is a bonus.
Voltage glitching is no double-click. It would be a huge embarrassment to AMD if just double-click defeated the secure processor's firmware authentication. This requires electrically messing with the power supply of the processor.
It would be nice if any cinema in London accepted cash, then I could go see a film again.

(Do please correct me if you know of one that does.)
That was Django, not SQLAlchemy. You can also do it more as you describe, `get(pk=id)` instead of `findOne`.

I just find it pointlessly different to SQL, not really saying it's worse.

The SQL would be `update table set thing = ? where id = ?`.
This thinking is based on trusting "encrypted" links. Did you build the hardware that drives these links? Did you audit the Verilog or code that operates this hardware?

I know of at least one way a to implement a "secure" TLS product that you could purchase and deploy in your datacenter that would leak all of the the keying material to compromise every data connection to the NSA. You would be 100% in compliance of all technical requirements, but your data would be utterly transparent. You would not be able to detect this using an internal or external audit.

Did you purchase your rack-to-rack equipment from the equivalently Trojaned "Solar Winds" vendor? The "Solar Winds" event was a "commercially" botched exploit.

Sorry, NSL(s) do not scale. It is an ever expanding "circle of trust".

Containing secrets is only effective if they are only shared within "your shared culture" and your culture is very stable -- nobody leaves because of a difference of opinion.

NSL can only be effective if nobody knows.
Oh, what a great idea, combine earbuds with earings that are solar panels. Fashion and function, who wouldn't love that.
Ask HN: Why aren't billionaires doing anything useful on Covid, climate change?
You are right about "primary" being less clear. In fact I'd say it is wrong.

Primary means it is the "main" one, but it doesn't imply any controlling relationship. It's kind of like "first".

Whereas "master" (in this context) means it has control or power over other things. For example a "master switch" would override all other switches. Or a "master cylinder" on a car controls the slave cylinder.

It's a real shame that they're making things less clear to fix an imagined problem.
Transistors, while dramatically simpler than neurons, also have fairly complicated physics. It's quite hard to determine the computational power of a microprocessor when you only know roughly how transistors work and have no idea how microprocessors work.
Also done both, and agree that being a software dev is considerably easier, more pleasant and better paid than the kind of factory / admin work I did in my 20s.

I suppose whether I'm worth the money and whether I deserve the money are separate questions. Hopefully the answer to the former is yes, but I don't think I'm any more deserving of money than I was in my 20s, when I got paid a small fraction of what I make now.