skysight-inc/HackerNews huggingface dataset:
What the article doesn't mention is that the "extra reserves" in the body, i.e., the calories that are currently used and are not burnt when exercising, must be a constant (the body can only skip burning calories that it gets) whereas exercise can be scaled.

Say you are overweight on a 3000kcal diet and start exercising. It is physically impossible to not lose weight if you exercise for more than 3000kcal. You might not lose weight if you exercise a more modest 1000kcal or even just 500 - but the statement that you cannot outrun your diet is trivially false. It might just be much harder than one might naively assume.
Theoretically, a vulnerability in SSH could expose you, but I think those are quite rare. The bigger risk of keeping the server exposed is probably that some application opens another port. But that won't happen on Port 22, so that one could stay open to all.
Facebook/Metas recent decisions strike me as completely mad. I don’t understand what the Metaverse should be, and I don’t get the impression anyone else does. Not even Meta, for that matter. Their buffalo ad is downright bizarre and their demos nothing. Renaming the company figures, but this whole Metamates business is beyond parody.

Am I a naysayer? A tech pessimist and a neo-luddite? Am I not clever enough to understand what’s happening? Out of touch perhaps? After all, I rarely use tech outside of work and like an offline life.

Or has Zuck lost his marbles?
It would take just one glorious Haskell PR
> “But if your case had been approved, who in the senior faculty would have won?”

I am not from academia, but can someone explain the "game" to me? Why do senior faculty win or lose based on who gets tenure?
> honest, i don't do the math

Also 30 years here. I have exactly the same thing as you describe though when I switch insulin I do start calculating again to be sure it matches with my assumptions. Blood glucose measuring is required though as you mention. I'm one of the lucky ones with very lineair and predictable response to every unit more or less of insulin. Not everyone is that lucky though.
This doesn't really sound like a problem with Slack, but rather a personal or cultural problem with a lack of setting or respecting boundaries.

Slack has options to communicate:

- that you're away

- that you're on a call or in a meeting etc.

- to pause notifications for an hour or whatever

- to star the most relevant channels

- to mute less-relevant channels

- to leave irrelevant channels

- to sideline conversations into threads

All of that is just Slack itself, in addition to things like putting meetings and vacations and other appointments on the shared team calendar. Some people where I work book meetings with themselves to guarantee focused distraction-free time. That's completely valid.

Part of being a professional is setting boundaries, communicating them, setting the expectations that the rest of your team will do the same, and of course, respecting those boundaries.

That includes not calling or pestering people that are on vacation. Which also requires that you don't "check in" while you're on vacation, because if you do, then other people will feel like they're expected to as well.

Set and communicate your boundaries, and in a team that respects each other, it shouldn't be a problem.
Why Scientist Bust Myths About How Human Burn Calories
Just be careful with a bastion host that you have a fallback. If anything happens to the bastion host and you don't have access to that IP, your VPS is basically lost. If you use a bastion host, I'd at least have two.
I host stuff on AWS, but I am pretty sure that hosting on my own server or a server a IT service provider maintains is much cheaper.
> they spend their days slacking

what's in a name?
I come to hacker news to get away from trolls like you.
So Qt doesn't work without moc, right?
You would set it based on the range your ISP tends to assign you, and remove 0.0.0.0 for the ssh port.
The advantage is that you only need to harden one instance. The others are safe as they're basically in an "internal" network (firewall blocks all other IPs). With that bastion host, you'd do anything to make it as secure as possible (fail2ban or the like, authkey, block countries you won't access from, etc). For small projects, it's also reasonable to check logs from one host, but not to do so for 10 hosts.
No need to imagine this, read up on New Zealand.
And also annoying if your body really doesn't like them since they clog up after at most a day with me... (I've used them a few time since they were the size of bread boxes with long wires and the results after about a day always become erradic and unpredictable)
When I interviewed at Google a decade ago I asked the interviewer that directly and he admitted most of the work will be maintenance & that sort of challenge (he was a former CS professor).

This was for natural language processing at search so very much the foundation of google's bread & butter/cash cow (pick your favorite metaphor) and something you may think requires pretty sophisticated work. But I guess by then a lot of the fancy work has already been done & I'd have been one of 1000s of programmers working on it.
Pichai: "Yes, we use data to make products more helpful for everyone. But we also protect your information."

https://www.nytimes.com/2019/05/07/opinion/google-sundar-pic...
On your ssh bastion make sure to at the very least:

- have minimal services running, preferably only ssh

- if you have other services running then use iptables or a firewall frontend to block all incoming ports except for the ones you specifically need/want open

- disable root ssh login

- disable password login (eg use ssh keys and preferably with a passphrase too)

- you can also use something like fail2ban or denyhosts but it’s not really necessary if you’ve also done all the above

- yum or apt update it frequently

- For your ssh connection from the bastion to your AWS instance or any other important ssh destinations from the bastion, use a key with a passphrase for increased security (on the off chance your bastion gets compromised)

- Don’t do anything else too important on your ssh bastion.. eg don’t have any important stuff or work laying around on it or other services/applications running. Just use it as a jumphost only.
A high speed processor for elliptic curve cryptography over NIST prime field
lol of course we could build another Saturn V. It would be practically from scratch and require a congress which is a bit less polarized, but that's just a silly statement.
Sounds like Barcelona today.
I wonder if someone is maintaining a non-SEO-spam bucketlist of things to do/see/experience before you die for a typical hacker/STEM/bookish geek?
The person thinks it's fraud because they watched videos by a propagandist who goes by the name "common sense skeptic" who makes videos that sound a lot like the people who make videos about flat earth. I say this as they quote all the same talking points of that person.
No

EDIT: it may look gibberish but it's still a structured source file, that requires (simple) lexical analysis etc
Or just leave yourself 'online' all the time.
"Some web services therefore use the TLS handshake to fingerprint which HTTP client is accessing them. Notably, some bot protection platforms use this to identify curl and block it."

As a user of non-browser clients (not curl though) I have not run into this in the wild.^1

Anyone have an example of a site that blocks non-browser clients based on TLS fingerprint.

1. As far as I know. The only site I know of today that is blocking non-browser clients appears to be www.startpage.com. Perhaps this is the heuristic they are using. More likely it is something simpler I have not figured out yet.
Electronics Industry Use Cases
If you are a CXO of a business in Electronics, what are the top 5 software application use cases that you would rather not build in house?
I don’t know what you mean by invoking Vim here. Among text editors, there’s nothing particularly special about Vim in its functionality (what you can do with it), it just presents commands in a slightly different way that makes it more efficient when you’re used to it. (I say this as a devoted Vim user for over fifteen years.) This, on the other hand, is focusing on a tiny piece of the functionality of graphics editors, exposing the ability to edit path data as a text/graphic hybrid, a mode not supported in the slightest by any graphics editor that I can think of. It’s functionally radical (it makes novel things possible or feasible), which Vim never was, is or will be.

Is there some other axis you have in mind that I’m not seeing?
Easy-peasy:

http://www.graphicsmagick.org/GraphicsMagick.html#details-cr...

«If the x and y offsets are omitted, a set of tiles of the specified geometry, covering the entire input image, is generated. The rightmost tiles and the bottom tiles are smaller if the specified geometry extends beyond the dimensions of the input image.»
Is changing SSH port really necessary? If your SSH is vulnerable, attackers will find the Port for it.
I did the test once with most meters I still had laying around: ballpark correct but according to them my blood sugar level was between 3.8 and about 7 mmol/l. I have one which is very finacky in the 4.0 and lower range which is annoying if you want to know if it really starting hypoglycemia or you are just tired.
I think the sheer amount of data being transferred off of our various devices completely shocks the average, non-technical user. There's an assumption that unless you explicitly send something out, or actively make a post - something that involves clicking 'send' or 'share' - that the device is a receiver only when...that's just not the case. Part of this is technical education, but I think a lot of it also comes down to the fact that these devices are hermetically sealed from the average user, and even the average technical user. We have been trained to manipulate apps, not hardware; that's the only 'surface' visible to the user.

The cynic in me says that the lack of transparency about this is intentional; look at the outcry that happens when people learn about fb/meta snooping through their device, or the various apps turning on cameras and microphones when the user doesn't expect it. It's not that people don't care or have given up on privacy - it's that a lot of times developers lie to the user about what's happening, or at the least obfuscate it. Look at how torqued off people were when Apple forced apps to actually notify the user what they were doing!
"I put my phone down to talk to my wife at dinner. Here's what I'm learning."
With money and political will they absolutely could build one in 5 years. I'm not sure why people are stuck on this "we just can't accomplish what they did in the good ol' days"
> blame the user

Not sure how this is blame the user. If you are setting up a bare metal server for a client and they don't ask you for (say) DDOS protection, will you still set up a DDOS protection protocol for them? I would think not since most people would try to match what a client asks for and maybe throw in some freebies.

If after that, they get hit by DDOS, the onus is on them to have told you to plan ahead for it and knowing this is not "blame the user'.

This is exactly what AWS is also offering - a basic setup and extra bells and whistles to protect yourself from possible issues based on your threat model.

Maybe I'm missing something in your response.
I’ve never been there, I lived in Vancouver for 2.5 years then moved to the us, I couldn’t visit more of Canada since I couldn’t drive at the time.

The common complaint I saw at r/Vancouver and r/personalfinancecanada was that the food scene was lacking compared to those cities, and the conservative/redneckness of the city/province.
I think this also caches closures, and recomputes them either when the inputs change or the closed over values are mutated.

Edit: Oh, apparently that's not the case... Or maybe I missed something.

http://skiplang.com/playground/#bXV0YWJsZSBjbGFzcyBGb28obXV0...

Edit2: `debug()` is tracked as an effect, causing `get()` not to be memoized. Unfortunate...

http://skiplang.com/playground/#bXV0YWJsZSBjbGFzcyBGb28obXV0...
Right? Can someone just list the myths and their refutations so I can move on with my life?
I often feel sorry people are shy about inventing new languages and using them in production nowadays. I'd rather have a reasonably different language for every class of problems which would eliminate boilerplate code.
Or to phrase it in one of those naval references that they now seem so keen on: "The Metanic cannot sink!"
Yes, the Iraqi scud was the primary factor, but it almost seems like if your seat belt snaps in a car accident with a drunk driver and you go through the windshield and die. The drunk driver is culpable but the car company doesn't get a free pass.
>One thing that puzzles me is why HN does not have a policy of banning users who post explicitly racist comments.

HN does have such policy.

The issue is some users think anything right of Trotsky is "racist", "White supremacy culture", etc. It's a term that has almost lost all practical meaning in $CURRENT_YEAR.

>But I'm happy to supply on request.

I'd love to see some examples, because practically every instance I've seen of racism in the comments section has been [flagged] quickly. I flag it everytime I come across it, and I rarely come across it these days.
+ the funny thing is that both openaps/androids + loopkit are more advanced than the commercial offerings that we are starting to see now.

Medtronic licensed their artificial pancreas system MD-Logic from Israeli company DreaMed in 2015. Dexcom bought TypeZero (who have system called inControl) back in 2018.
I couldn't finish the article due to the excessive fluff! Reading the comments, I'm glad I wasn't the only one.

How about summarizing the main points at the top for those who are interested in real information instead of the height and weight of the scientist?
It's extraordinary to imagine that someone published books and papers in major journals without noticing the framework in which they did so.

> one of the reasons why I choose academia is because I believed in the power of ideas & hard work.

MIT is an organisation, a body corporate; it is not the reification of some Platonic ideal of academe; and organisations are inevitably about resourcing, and teamwork.

If you want recognition for individual merit, become an Olympic athlete. But of course, you'll then discover, that's about resourcing, and teamwork, too.
A naive spectral path tracer can be less complex (code wise) than a "normal" one. You just trace each photon with its wavelength instead of tracing RGB (or some other full spectrum) per path. Since this abstraction is closer to physics, it makes a lot of code easier to reason about. Wavelength dependent refraction is straightforward, you just use the index of refraction for the photon you are tracing.

I find this code base extremely easy to read despite not being a C++ (It has that Carmackian quality). Pretty easy to use to port to the language of your choice.
https://github.com/TomCrypto/Lambda
To get the kind of effect you see in the youtube video you'd render diamond or something with extreme refraction.

This is far from real time though of course. It will run an order of magnitude slower than anything you can do with full spectrum rays. So doing it in realtime would probably be just like subsurface scattering is done in real time: you just have to cheat. Perhaps there can be some inspiration from the real thing though.
They are. Enforcement is on the way, just slow. Belgium just charged the IAB Europe group a big fine.
How to Navigate Product Management Specializations
I suspect Tor is being banned not because of a small user share.

Perhaps you may get broken sites with Firefox, because no-one cared. But banning? Seems like a stretch.
Here is the usable demo:
https://yqnn.github.io/svg-path-editor/

I found this while searching for a way to edit paths and it was just the right tool. Every hour I find new features, like

- Snap to grid (on and off - I first thought the drag and drop of dots was not working correctly)
- Minify output
- Import and Download as SVG Button upper right
- Scale and translate
- The three dot menu in the Commands list

With the image import button and opacity settings you can easily manually vectorize raster images.
It's just awesome. I would love to see some more github stars here :-)
You’re not alone. This reads like one of Grandpa Simpson’s stories about onions.

I also like the way they’ve broken my browser’s reader mode too.

I was once advised to read the opening and the last 2 paragraphs of articles like this. If there’s no actual content there then move on without reading.
Not with that attitude...
It obviously isn't and shouldn't be illegal to run such a service, and I don't agree with the idea that all data analysis should be done on the local device.

But I don't think "your data never leaves the phone" is something that only journalists and people with similar strong privacy requirements would or should value. All other things being equal, I would always prefer an app that keeps my data local, on principle. The difference being a journalist would make is that I would enforce it, and really journalists should know how to do that. They should be disabling network access, both cellular and wifi (which you can do on Android but I'm not sure you can on iOS) for any app they enter sensitive information into.
Look it's okay to not know what every language does, or which library is doing what.

But a lot of them are not even using the tools at their disposal correctly or are just being wildly dishonest and incompetent, a few examples:

-In the past 2 weeks I got contacted 3 times for expert JAVA/JEE jobs, java is NOT on my resume/linkedin/github, you don't have to know what it is to search for a keyword

-I got contacted for a Senior SRE role by a DECACORN, and actually invited to an interview, I'm neither a senior, nor doing SRE, none of these things are mentioned on my profile

-I get contacted for on-site jobs 1000miles away, when I'm basically mentioning everywhere that I only do full remote, even WORSE, sometimes they start by saying "open to remote/remote friendly" only to tell me after a few messages: "oh btw this requires moving to [FARAWAY_CITY], are you ok with that?"

-even worse than all that, yesterday I got contacted by a headhunter, after a terrible experience with him and a lot of time wasted, I guessed the name of the company and messaged the CEO, turns out they're not even one of their clients: they just message every dev possible then when someone say yes they message the CEO to TRY to sell them your profile for a public job posting

-they don't want to share information, we have to play a cat and mouse game to know basic stuff like what's the actual stuff I'm going to build, for what salary, using which technical stack, remotely or on the other side of the country, I feel like I'm playing a crappy game of "Guess Who?"

If this is not ignorance/incompetence or downright villainy, then what is it?

I think some industries are rotten to the core and this is one of them, there is nothing wrong with saying it. Do you have empathy for spammers?bankers?insurers?
This is embarrassing, I confused You with Nyxt.
„Nyxt is graciously funded by grants from the European Union Next Generation Internet Initiative. Specifically via the sub-grant providers NLNet and FundingBox.“
I have no idea how much bureaucratic headaches are connected with applying for that kind of funding, but you as the primary maintainer should certainly not spent your time on that. Maybe someone else can look into it, or I can have a look to make up for publicly claiming you had a source of income that you don’t. Sorry again.
Personally uBlock origin would be the most pressing extension for me and You do have native adblocking. But for future broad adoption webextensions are absolutely essential.
You point out how difficult this is and that full chrome compatibility might be impossible but even partial compatibility excluding UI specific plugins would go a long way.
Could you elaborate a little on the similarities you see between SEO spam and child hunger?
it says something about FOMO and being enslaved to the system when people feel 3 days of silence is life changing. Like the brief moment of clarity an addict experiences just before succumbing to another cycle of abuse. 3 days isn't enough to build new routines to help you stay sober. It's more like waking up from a dream before falling back into a slumber when in the morning you won't remember what that dream was about.

I've been escaping into the woods for several months on long distance hikes. No Internet, no phone or GPS, nobody to talk to but the moon. When the moment is right I have a tent, sleeping bag, a few bits and bobs like a ferro-rod, rescue-blanket first-aid kit, plenty of blister band aids, and whatever else I can fit into a backpack.

This has literally healed my addiction, and my crippling life-long depression.

I'm really happy people see how powerful (and weird) 3 days offline can be so they feel an urge to tell everyone. I also find it hard to keep it to myself. But I hope their next step is to imagine what 1 or 3 months could do. Truth is you can become a totally new person beyond your wildest imagination.

It'll be really weird when you get back because people still think you're same when in reality you've totally become someone else. It's a literal lifehack.

Once I came across some distressed farmers in the mountains who lost their cows. I offered to help them searching. They were confused and said you will help for free? Aren't you busy on a hike reaching your destination. So I told them that experiences like these are my destination. The problem with herd animals like they told me was that they were already gone for 3 days. And timing is so important! Apparently if cows are separated too long from their herd, then chances increase they won't bother coming back. If you do catch them they will always stay "naughty" and tend to escape again. But worse! They often bring a friend with them and continue to remain a problem for the farmer forever. I feel like that cow sometimes.
Deduplication is a hard problem: what constitutes a "dupe" is somewhat arguable.

My first approach just used metadata, but that doesn't aggregate the files stripped of their original metadata, like what you get from a Google Takeout, so I had to add image hashing as well. I actually generate three mean hashes in L*a*b color space for PhotoStructure (many hashes ignore color). I've also found that metadata needs to be normalized, including captured-at time, and even exposure metadata. It's a lot of whack-a-mole, especially add new cameras and image formats are released every year.

I described more about what I've written for PhotoStructure (which does deduplication for both videos and images) here: https://photostructure.com/faq/what-do-you-mean-by-deduplica... -- it might help you avoid some of the pitfalls I've had to overcome.
"Everybody in this room is wearing a uniform. Don't kid yourself." - Frank Zappa
You are severely overestimating the physical abilities of a severely obese person.
Personally I don't think there is any merit of using tailscale over just public key auth. The way that can go wrong is if there is a vulnerability in sshd, which would be well disastrous.
I find it funny how the article equates bulk archiving emails with productivity.
I've been that engineer at a particular time in my career. And saw others be that person as well, since.

In my view, commonality between I and others I've known with that behavior was that we came from a long multi-year project. After experiencing daily maintenance of big projects for a couple of years, you tend to have a strong opinion of things you don't want to see again when moving for greener pastures.

It just seems to disappear with time. Maybe because at some point people accept that telling others what to avoid is pointless, people tend to learn only from their own mistakes.