skysight-inc/HackerNews huggingface dataset:
> Plus wind energy kills birds. Engineers try to minimize this risk, but greedy entrepreneurs with connections to lobyists and the government tend to "flex" restrictions.

That is a long-since debunked myth. In the US [1], 2.4 billion birds are killed each year by cats, 600 million die in collisions with glass buildings, 214 million in collisions with cars... and not even 250.000 due to wind turbines.

If you really care about birds, go and argue for cat TNR programs and for restrictions on glass usage on buildings. Otherwise, you're just using a strawman argument.

[1] https://www.statista.com/chart/15195/wind-turbines-are-not-k...
I’m not trying to justify any of it, just pointing out that theft is a completely accepted part of culture in the US. Don’t get me started on civil forfeiture…
No, it's not static. The information is pulled from a file that gets updated by a separate script.
Building PyMC Labs: Principles from Open Source That Boost Company Innovation
Hopefully we'll see an improvement in the relations between Russia and the West.

It will be interesting to see how the (alledgedly mostly russian) ransomware industry fares after this new development.
> Even some Spanish dialects like Galego have the same r

You are opening a can of worms here considering that Galego is officialy a language, not a dialect, and it's basically very very similar to Portoguese, up to a point in which a galician colleague of mine, when we were at a conference in the USA would talk in Galego with a couple of Brazilian guys and they talked to him in Brazilian Portoguese and they went along just fine. Modern galego and portugues stem from the same root[1]

[1] https://es.wikipedia.org/wiki/Idioma_gallego#Historia
I wonder what the special feature that will use this one instead of other journal or notepad apps is?
> If it's not a human performing the expected steps

Nothing is performing those steps in a NN.
How is my comment against the HN TOS?
Make general purpose computing illegal, and only pirates will have general purpose computers...
It is pretty easy to locally or remotely debug with xDebug, the docs are pretty straight forward. What makes it difficult I find is when you're trying to use it in weird VMs.
It's difficult to even play on your TV at times. I had rented a Blu-Ray from the library, popped it into my standalone player, connected to my TV, and recieved a message that my player wouldn't play it because it was out of date. What.
That took way way too long... How is it possible that this happens only now and not shortly after PayPal launched?
As an alternative, AnyDVD HD can trasparently strip the encryption off a Blu-Ray disc. I haven't tried it with any Ultra HD discs but it works extremely well for traditional Blu-Ray.
Hey HN, Deta CEO here. Glad to see Deta on HN!
Hapy to answer any question (although a bit sick today, so apology for the short and duplicated answers).

Because many of you are wondering about our business model: we're working on Deta Space, which helps devs publish & monetize their web apps with no ops, and we take a small cut. Deta Space is still in the early pilot stage.

Learn more about Space here: https://www.deta.sh/space & here https://deta.space/.

Have a great day!
PUBG’s developer is suing the developer of lucrative PUBG lookalike Free Fire
You're right, it is substantially more work to clean and organize the code for publishing. Being open about your work does make the attack surface much larger and more likely to be nitpicked, criticized, have an error found, etc.

But it is more honest. Whatever you think about the effort required to do this, there's value in honesty.

Here is an example of my own scientific work:

- paper [0]

- preprint [1]

- GitHub [2]

It certainly wasn't easy to get all of this done. But doing this can also be a guide for others. They get to see exactly what you've done so that they don't waste months on the exact implementation. They can see where maybe you've made some mistakes to avoid them. They can see so much of the implicit knowledge that is left out of your paper and learn from it. Your code isn't going to be perfect, but what paper is, either?

Everyone will be a critic, anyway, so make it easy to pick up criticism of the stuff you feel the least confident in and do better next time. You won't get better if no one sees your code.

[0]: https://cancerres.aacrjournals.org/content/81/23/5833

[1]: https://www.biorxiv.org/content/10.1101/2021.01.05.425333v2

[2]: https://github.com/LupienLab/3d-reorganization-prostate-canc...
And according to a some talks in YouTube, also power plants, traffic lights, etc.
This kind of thing is best done after the thesis is in the bag. A student is racing against the clock. Grad study has many kinds of hard failures. At the most extreme, your advisor could up and die. The focus has to be on finishing. That's how you get out.
While the mainframe is arguably still a success (after all, they still run an amazing number of core services in our society: banks, air-traffic, governmental stuff, ... [1]), it's hard to find any evidence for a successful Watson project [2].

[1] https://www.bmc.com/blogs/state-of-mainframe/

[2] https://www.nytimes.com/2021/07/16/technology/what-happened-...
Brazilians have a hard time understanding European Portuguese (I think that pronoun placement is a major factor other that the actual phonetics - they just don't expect certain phrases).

And I've also heard from Portuguese that they find Brazilians easier to understand than some of their own compatriots, especially now that telenovelas have spread Brazilian vocabulary in Portugal.
Yes. The PII of all citizens of EU countries isn't leaked out there ( there have been country-wide breaches like in Bulgaria, but it's the exception), and when leaks do happen, people learn about them quickly and the companies get fined if they were at fault/handled it badly.

Oh, and EU PII is drastically less useful. Most countries in the EU have national ID systems, which are used and required for anything important ( like a new bank account or loan). A bad actor could still use PII for social engineering though.
As a BR-born son of an American and a Brazilian, this post/article brings me all sorts of joy. To this day, the sound of people speaking in BR-PT out in public brings a smile to my face. (To be clear, I live in Boston so there is a pretty large Brazilian population here)

All languages have their own beauty but there's something special about Brazilian Portuguese - the flow, the "sing-song'y" nature of it, it's almost like a dance. Admittedly I am biased, but I've heard similar from people without the background.
some people like to be in this position, although I find those people have a way of stretching out every support or maintenance task that should take hours into weeks
Agreed, perhaps there is some competition in citations for follow up work, releasing source code makes it easier to get 'scooped' on your future plans section? (not saying that optimizing for citations is a good thing)
Since when have we told anyone that they don't need nvidia docker packages installed? You can validate that the Debian packaging has always shown nvidia-container-runtime/nvidia-docker as a recommends for CUDA support.
Yes, you should publish. Mainly because it will give you a sense of accomplishing something, also, nobody cares really :). Especially about old code, if they do that's even better.
and even in recent history: David Bowie, Fergie, Jerry Seinfeld, Joel Madden, Kobe Bryant, Luc Besson, Steven Tyler, Paul Walker, Jerry Lee Lewis, and many, many more.
The solution to that problem should not involve an employer. It might look something like legally mandated defined benefit pensions, aka Social Security in the US.
It’s not even necessarily that low depending on the standards you apply / references you use, lots of chips have base clocks which are quite low especially for low-power CPUs or SoC.

For instance the Atom x6200FE has a 1GHz base clock. According to its spec sheet it can’t even burst (while the higher-rated X6211E has a 1.2GHz base clock and can burst to 3).

Your problem’s more likely to be that it’s an Atom from 2008 (which implies lots of performance-related concerns, like being pre bay-trail and thus in-order), than it being 800 base / 1.3 burst.
I think you're confused. The truth you're talking about exists outside of both of those contexts (theism VS atheism).

Religion is just a collection of beliefs that may or may not involve "an invisible man in the sky". Theism VS atheism are mostly orthogonal to the point you're trying to make.
Interestingly, quantum mechanics is already sort-of fully deterministic. It's only the not-quite quantum mechanical Born rule that's interpreted as probabilistic (unless you believe in eg the many worlds interpretation.)
Show HN: Humble – Bundle webpages for offline viewing
https://en.wikipedia.org/wiki/Erwin_Schr%C3%B6dinger#Pedophi...

> Schrödinger repeatedly sexually abused young women.[42][43][44][45] "The poor things," Schrödinger wrote about the young women and girls he had sexually abused. "They have given me the moments of happiness in my life and themselves the sorrow. Such is life."[verification needed] Schrödinger recorded his sexual "conquests" in a diary he called "Ephemeridae" (mayflies).[citation needed] He justified his preference for young girls by saying that their innocence was the ideal counterpart to his natural genius

The Futurism piece links to https://www.irishtimes.com/life-and-style/people/how-erwin-s... which starts:

> How Erwin Schrödinger indulged his ‘Lolita complex’ in Ireland / Nobel Prize-winning physicist, who spent 17 years in Ireland, was a serial groomer of girls

I don't have an account to read it.
>What they are not free to do is to freeze his account and just keep his money.

If the poker league is being run illegally, not only are they free to freeze it, they are required to.
In my view and personal experience, the pros outweigh the cons:

* You increase the impact of your work and as a consequence also might get more citations.

* It's the right thing to do for open and reproducible research.

* You can get feedback and improve the method.

* You are still the expert on your own code. That someone picks it up, implements an idea that you also had and publishes before you is unlikely.

* I never got comments like "you could organize the code better" and don't think researchers would tend to do this.

* Via the code you can get connected to groups you haven't worked with yet.

* It's great for your CV. Companies love applicants with open-source code.
Again, you appear to be blaming policy and models entirely for these problems, as if the virus doesn't even exist in your mind. So yeah, it does look a bit like the gripes of a privileged person.
Your argument against escaping is the same one against input sanitization. Literally you cannot know where all your data will go when storing it so how do you even begin to sanitize that data? No special characters? Alphanumerics only? You're going to have a bunch of modified data that user's are unhappy with to start. Furthermore you have the same problem with simply not knowing all of the ways that data will get into your system, so you won't be able to reliably sanitize all of your inputs. (e.g. manual entry, internal tools, random scripts, etc.)

I understand defense in depth and by all means doing some sanitization up front can help increase your defensive posture (Often at the cost of user experience), but the proper and effective way to protect any of 100000s of use cases for your data is to ensure that each use case is escaping data relevant to that use case.

Direct responses:

1. If you store simply store the data, it is not your responsibility to ensure that the data is "sanitized", but simply to ensure that the data follows the expected format. Rather *the onus of security is on the person actually Using the data.*

2. I have tested applications and written up findings where customer's use internal data to generate excel files w/ PII in them, and one user could steal another the PII of employees from another customer due to CSV injection. Yes these attacks are weird and niche, and even if this one attack doesn't matter, it's just an example of various weird attacks. If you are writing software where you take user data and put it into strange filetypes or systems, you should be researching those systems and writing code that doesn't break or have unexpected issues. You can find the necessary technical documents to figure out how to escape things. (https://owasp.org/www-community/attacks/CSV_Injection)

Finally, input validation is not input sanitization. Validation is making sure it conforms to your expected data-type (e.g. Username cannot contain special characters.) Sanitization is when the application modifies data that the user has submitted - e.g. stripping off special characters from names (O'Brien => OBrien).

You keep saying "Do defense in depth" but your argument is why sanitization is better. Do both, but ALWAYS escape if you have to choose.
Why doesn't this fall under the CFPB? The money is held in a bank account which ultimately belongs to the PayPal customer.

When I was in the prepaid card industry we held money for people in our bank account just like PayPal does. The bank held us to account for each of our customers. We accidentally prevented some people accessing thier finds for a few days due to a software glitch and had our asses handed to us. As we should have.

One lady was prevented from accessing her $200 for a few days and her lawyer extracted our maximum arbitration amount of $8000 from us.
Nice, I hope it will be improved to print the variable names as in Python f-string, something like "{x=}" generating "x=<value of x>", much better than having to write "x={x}" everywhere..
nah, it's The Algorithm, the big algorithm in the sky, it knows everything we do and controls our destiny.

All Hail The Algorithm
this is my default approach unless really out of options i can think of

but i do slip up at times and jump to punch in a word that i later realize violates one of those yellow rules for instance
We had a somewhat beloved chatbot at work, but we are of course a consulting company.

And it is gone now and replaced with a much more effective app, my point is just that it clearly possible to make chatbots that aren't rage inducing.

The question is just if it is worth it, something we didn't think after the novelty wore off.

I believe one way it can provide value is when it is closely backed by competent support staff so it takes more of a receptionist role instead of the role of a support engineer.
Cool, but mine doesn't.
There's a lot of advice here, but very little data to support any of it. Since you're a scientist, why not take an experimental approach to answering this question? Publish your code, for one (selected) paper. Monitor (a) the download log, and (b) the emails you get related to your code.

I hypothesize that you will see some combination of three effects: (1) you will get lots of downloads (which means people are using your code, good work!), perhaps with lots of follow-up emails and perhaps not depending on what the code does; (2) you will get lots of emails from random nutjobs looking to pick holes in your work, and you will waste your time answering them; (3) you will get almost completely ignored.

Whatever the outcome, I think a lot of people would be interested in to hearing about what you learn.
Not if it’s not otherwise illegal and disclosed in the terms you agree to. As part of a settlement they now have a “privacy-centric” portal so you can manage what they know about you, ostensibly. But it’s difficult to find, and I would wager that most people who use the service don’t understand what they’re getting into.

Everyone seems to use it now, and it’s increasingly difficult to link accounts using ACH micro deposits because Plaid can be configured to disallow manual linking if the routing number corresponds to a bank they support logging into.

I simply don’t do business with companies that use Plaid in that manner, it’s a hard stop for me. My bank’s customer agreement specifically prohibits disclosing user credentials to any other party, and when support is confronted by that, they typically have no idea what to do with that other than say “Plaid is secure”.
I'd only clean it of stuff like passwords and such, and add a header that the code is provided as-is.

You could add a disclaimer that the code was worked on until it provided a satisfactory result, and no further, and is not intended for (any) use.
You might even add that, except for outright, actual errors that affect the result of the research, comments are discouraged.

I often publish very bad code, terrible terrible spaghetti, it's not how I write code at my job, because at my job, I'm paid to produce not only working and correct code, but also code that is maintainable and understandable and follows certain practices.

However, my hobby is not writing corporate code, but writing code that get done what I want to get done, nothing more, and sometimes less. It might even have actual bugs in it that I can plainly see and don't care about because they don't affect my uses

If people can't tell the difference, I don't care, not my problem. If a future employer can't tell the difference, I won't work with them.
Typically it means you've configured your firewall correctly. Shodan continuously crawls the Internet so it's not based on user requesting scans. The IPv4 space is fairly small so Shodan just checks every IP (3+ billion) to find the services that run on it. Your activity/ use of Shodan doesn't affect how Shodan crawls the Internet - unless you request a scan using the API/ CLI. For more information: https://help.shodan.io/the-basics/what-is-shodan
> it's substantially more work to clean and organize the code for publishing, it will increase the surface for nitpicking and criticism (e.g. coding style, etc).

I should take a couple of hours. The code works? You know how to reproduce what you did, right? It shouldn't be perfect. Shouldn't even pass code review. Should just work.

> many scientists look at code as a competitive advantage so in this case publishing the code will be removing the competitive advantage.

Well depends on the field I guess, but you also want recognition and impact. What is the point of publishing a result no one uses?
If you're into this sort of calligraphy, absolutely check out these works:

• The Book of Kells[1] in Dublin — this is considered to be the masterpiece of Western calligraphy. If you're ever in Dublin, don't leave without paying a visit to this!

• Meetings with Remarkable Manuscripts by Christopher de Hameml — get a hardcover edition of this book; it has absolutely gorgeous selection of artwork from 12 of the most spectacular "illuminated manuscripts" (including the Book of Kells) in the world. The writer is a marvelous storyteller. This hardcover edition is definitely one of my "prized possessions".

You can browse a lot of these works in great detail on this[3] excellent visual arts website by the Getty Research Institute website.

[1] https://en.wikipedia.org/wiki/Book_of_Kells

[2] https://www.penguinrandomhouse.com/books/316549/meetings-wit...

[3] https://www.getty.edu/art/
Humble's doing everything it can lately to make Itch more attractive.

https://itch.io/
Video: https://twitter.com/campuscodi/status/1481989170876882944
Valve has been investing in Linux gaming for nearly a decade now (to my knowledge), and it's looking like a really good decision. I've recently set up new Windows and Mac devices and it's just glaringly obvious how tightly they're clamping down on their respective platforms. My perspective is a that of a Linux sysadmin who hadn't done a fresh Windows install in over a decade, and took about 3 years off of using Apple products.

It's definitely an arms race, and the experience is getting worse and worse for customers (including software developers). I don't know if the average user notices these things or not. Valve is trying to not get caught in the crossfire here, and to have some recourse when inevitably MS wants 30% to allow steam to run natively in Windows. In the meantime they also have built a strong reputation among nerds like us, mostly as a byproduct.
I thought it was really interesting that Mr Sullivan is a former US Attorney. Surely he would have known he was putting himself in significant legal jeopardy, no?
No, fault the AMA for pumping out so many academics who can't keep a person healthy,

just treat their symptoms/today's ailment.
You want to address your countries lobbying problem by killing business rather than using legislation or political action to prevent lobbying. That is decidedly unwise.
I had a spreadsheet of the bundles I grabbed back when this was about donating to charities and getting DRM-free software. (I think I've bought at least the first 10 bundles.) The further HB moved from those two goals, the more I lost interest. I even tried the subscription for a while, but it felt like the focus has changed to generating revenue for profit and not to raising funds for charity or giving users DRM-free software. At this point, it is more efficient to donate to a charity directly.

[Edit: I guess it was always more efficient to donate to a charity directly, I meant now it is more efficient donate 95% to a charity and take the 5% or whatever to buy a DRM-free game and download it without a client at GOG, Itch, or other site.]
In almost every case, it's better to just use a regular dumb dialog tree than to try using any of the whizz-bang NLP stuff. I also have some horror stories about Watson that I'd love to tell if they weren't under disclosure agreements...

All of the advanced features like this that are built into chatbot products are only there because they look fancy when you give the demo. From a customer perspective, you only ever want to get connected to the second-level customer service agent that might possibly be able to tell you to do something you haven't already tried. And from the business side, they want to get as many interactions out of the funnel so that they don't need to be connected, and thus they can run their customer service desks even leaner.
The code should be published, and knowing this, researchers will hopefully try avoid certain commonly harmful practices. One of these is re-using the same script to run slightly different models by editing some of the hard-coded parameters. I've myself found more than one mistake in someone else's reported results due to this sort of thing. But identifying it was quite a bit of trouble because the record of what was ran was erased when they moved on to the next model.

What I would not expect from people is code that would necessarily run in your environment. For example, in many cases, the paths are going to be hard-coded, for a variety of reasons. It might be ideal to write code that will just work, in a reproducible environment, but that often takes more work than people are willing to commit to, given all the other things they have to do.

Finally, cleaning up your code for presentation is a final opportunity for you to discover any mistakes before you publish and then later have an embarrassing public retraction.
PayPal has worked hard to not be a “bank” so they are long overdue for being sued about this. I know countless vendors who have had their funds stolen.
Whether it works or not, sounds dumb or useful. Clients keep asking for it. Personal experience and opinion, they are best as a backup for human agent, when one is busy or unavailable. Costco, Amazon, Ally have good implementations on these. Chatbot discussion maybe in the air, Chat Widget is a must have form of interaction. Customers expect a site to have a "Chat Now" option on the website.
Cryptocurrency ads reach record levels on London transport