skysight-inc/HackerNews huggingface dataset:
Well the addition is done in FP32, and it's a 32-bit storage format in memory, so calling it a 16-bit format isn't right either. It's really a hybrid format where everything is 32-bit except multiplication.

Given that it's 32-bit in memory (so all your data structures are 32-bit) and also that in my experience using it is very transparent (I haven't run into any numerical issues compared to full FP32), I think calling it a 32-bit format is a reasonable compromise.
We've heard great things from patients about the VA program for sleep apnea, and we're looking to incorporate best practices from their published studies into our care protocols.
I'm currently the owner of a sleep apnea mouth guard (MAD) similar to your pictured one.

Fortunately it was free thanks to UK's NHS, because I cannot use due to discomfort and teeth movement, causing disrupted sleep.

What's your experience been like, and are you doing anything to combat users giving up on treatments due to discomfort? Curious also why you aren't offering CPAP machines.
Thank you so much! We've been working very hard the last year, and looking back - yeh we did add a lot of stuff :)
Increased incidence is evidence as is the known link between viral infections and heart problems.

Suppose your car doesn’t start. That supports the possibility of a dead battery, it also supports broken wire or anything else that’s a possible cause. What it doesn’t support is your car being in proper working order.

If your car doesn’t start and you haven’t used it in 2 months, well it could be something else but …
It doesn't, you just cherry picking one difference you could think of and try to claim that is the only thing that matters. That doesn't rebut my argument.

Obama absolutely would be called a racist xenophobe today based on his stated policies of border control, his mass deportation of illegal immigrants, and instances of separating immigrant children from their families. That is how far the window has shifted on this topic. Birthright citizenship doesn't change that.

So that's how far the window has shifted on the subject in a few short years. Therefore I think it is quite reasonable to question the allegation that racism and xenophobia is getting worse.
Yeah, you are right. The art of naming things...
> The report highlighted that there was a five-day window of time between January 16-21, 2022, where an attacker had access to a support engineer’s laptop. This is consistent with the screenshots that we became aware of yesterday.

Yeah, it was.
From Russia's perspective, they are pre-emptively preventing the further expansion of NATO towards their borders. For Russia, NATO expansion to the East looks like the build up to an invasion. Hey, I don't say they're right, but they have experienced two major invasions from the West before. (Three if you count the Swedish one).

It's pretty clear that they meant it seriously in 2007 in Munich that they would not tolerate it. Perhaps, just perhaps, the West has not acted wisely.
"Prestige" BuzzFeed was always a tainted name there inability to realize how shitty their reputation was and release real news under a different name directly lead to this.
Yes. They kept it USB-C, presumable to leave some differentiation for the Pro models https://www.apple.com/ipad-air/specs/
If the automaker advertise a level of automation where I am not supposed to do anything while the car drives itself (which seems to be the case), of course I blame it in case of accident: what could I have done it to prevent it, except for not using the feature at all ?

If instead we talk about driving assistance and I am supposed to keep an eye on the car, I am fine with being responsible for any accident.
Good question. Imaginary mass -> negative 4-momentum -> momentum exceeds energy -> object is moving faster than light (backwards in time in some reference frames).

There are some reasons to suspect/hope such things might not exist, such as protecting causality.

In general, asking "what if <simple field type> was <more complex field type>" can actually produce super fruitful lines of inquiry. You can use "complex numbers", "quaternions", "finite fields", whatever you like. There's plenty of unexplored ground here.
- Transition costs for UI is much higher than the value to switch.

- Poor man's luxury item - just about anyone can "upgrade" to the more desired product

- the added cost per month isn't worth most people's time to care about.
Show HN: Test Your Defenses with a Malware-Simulator Package
The hair looks really great! In the Matrix unreal engine demo, they kind of cheated by having a character with long hair.
Postgres supports jsonb which I've used with Supabase to act as a Firebase analog. I just pushed all data into a JSON blob rather than setting up tables, it worked well, pretty much the same as how I used Firebase.
I don’t understand why I got the downvotes…

I was taught that sharing code between services should only be done in circumstances in which there is already a strong connection between them - for example by being owned by the same team.

In the organization where I initial learned how to deal with microservices even direct calls via HTTP between services was a no-go and only used in rare circumstances and if then only temporary.

I am not sure if this is the way to do it since I have a sample size of one - but we had about 500 services to manage and in the end it worked okay and I never saw something you described. That’s why I wanted to know if you have considered just not sharing code.
Do you know if Okta support are/were able to change a user's email?
Especially with how much access they had on the company Slack org.

Everyone's terrible with secops, but Okta employees were apparently dumping AWS keys into public channels.
The user does see 32-bits and all bits are used because all the additions (and other operations besides the multiply in matrix ops) are in FP32. So the bottom bits are populated with useful information.
I disagree.

If you have a practice that isn't effective (e.g. code reviews that aren't preventing bugs), doubling-down is almost never the correct solution.

Code reviews are like unit tests; they're helpful under the right conditions. Mostly on the tricky bits or when a dev is working in an unfamiliar area.

It's a common fallacy for folks to believe that if a little of something is good, then a lot of it must be better. I've been at places with 100% code test coverage or requiring EVERY SINGLE PULL REQUEST to be reviewed. It's obnoxious, and it doesn't do shit to prevent bugs. Instead it causes folks to burn out on the practice and write crap unit tests or stamp "LGTM" on every PR they're forced to evaluate. People have a limited capacity for cognitive engagement and wasting that on piddly crap means they can't spend it on the important bits.
A new tutorial has been added to https://github.com/step-security/supply-chain-goat/blob/main... to perform behavior analysis of dependencies.

For this a package was needed to simulate behavior of past hijacked packages. https://www.npmjs.com/package/@step-security/malware-simulat... makes an outbound call in a preinstall step.

You can think of the @step-security/malware-simulator package being like the EICAR file, which is used as a test file for anti-virus software.

Can be used to test if you can detect packages that make outbound calls, which is a common theme for hijacked packages.
Report only to companies that accepts publicly vulnerability reports and keep all the records
We need a canonical, chronologically monotonic, marketing independent ID scheme. Marketing people always tries to disrupt naming schemes and that’s the real problem.
Samsung G9 is for sale now, and it pushes 5120x1440 at 240Hz without subsampling through DisplayPort 1.4, which is the exact same pixel rate as 5120x2880 at 120Hz.
It may be “trivial” to someone with a high level of expertise. But the number of moving parts required in that automation does add a significant barrier to most the of “script kiddies” that are using bots.

You still need to automate account creation and setting up of a TOTP token, that’s not “easy” for a lot of people.
They are at least saying that Okta engineers were posting AWS keys in Slack, which they had full access to and found by searching for AKIA.
That is exactly our plan! We like to decouple the different Appwrite components. This allows us to offer max flexibility for developers and let everyone use the server the way they like to. Using the REST API, Realtime or GraphQL with or without offline support - your call.
>what if it includes a kill switch that's fundamental to its existence

Like my everyday flying car, that's a nice idea but may have the problem of not existing.
Any hints in how use nix with DBs?

I have a semi-docker setup where I stay with the base OS + PostgreSQL and the rest is docker. But that means that upgrade the OS/DB is not that simple.

I tried before dockerize PG, but still the OS need management anyway and was harder to use diagnostics/psql/backups with docker....
Like the poster said, it’s whack-a-mole.

These trivial mitigations at least filter out low-effort script kiddies. People gaming the system “for real” will put incredible effort into getting around your countermeasures. You always have to be one step ahead of them.
https://news.ycombinator.com/item?id=28216287
I think you overestimate the popularity of refresh rates over 60hz.
>The Okta service has not been breached and remains fully operational. There are no corrective actions that need to be taken by our customers.

The rest of the note literally show they have been breached. What?
Thank you! Actually the Firebase has done an amazing job on making the DB scalable, and we got to appreciate their work even more when working on our implementation.
Hmm... I think I'm not quite the target market. For me the whole point of a tool like this is that I don't need to worry about maintaining this kind of thing. All the guff around auth and functions is just stuff I have to put up with to get that hosted niceness.
> are that I have an Nvidia 1080ti and buying an equivalent AMD card in this market is insane

If you're worried about support for the Nvidia 1080ti, I've found no problems with the Nvidia drivers for a 1050, a 1060, and the 1650 I'm currently using now. If you're just wishing to upgrade and would rather go the AMD route because of binary drivers, I get it. If you're worried about bad Nvidia drivers in linux, I've found them to be very good lately as long as you keep them updated.
That monitor only has 163dpi, which isn't "retina" or particularly tight to my eyes, whereas the Studio Display has 218dpi, which looks great at pixel-doubled (200%) rendering. Huge differentiation in my book
I can't critique the risk you raise about reward for worker time; that's valid concern.

But isn't part of the thesis of capitalism that it should drive market efficiencies and thus reduce the cost of goods and services for consumers?

(that could have sounded tongue-in-cheek; it's not intended to be. as I genuinely understand it, cost reductions over time are supposed to be one of the benefits of the free market system. and if those savings are being achieved thanks to open source software in industry -- which I believe they are -- then I think it's worthwhile questioning the effects. do profit margins and tax burdens increase accordingly with the efficiency savings, for example?)
All official RPi resellers are required to sell them without forced add-ons, at the list price. The scalper bots are trying to arbitrage that.

I think a CAPTCHA in the ordering process would make more sense.
We're never going to get every provider organization using the same EHR, nor would that even be desirable. But almost all of them have passed ONC Health IT certification so they have similar functionality, including exposing at least some data in open industry standard formats.
I think there's two ways about it though. Most "good" companies (e.g. Cloudflare) will try to be transparent and proactive without taking on liability.

In this case it reads as though Okta are obfuscating the truth, and that's not good.
It's a crystal so just one molecule for all the transistors. In terms of atoms it's something on the order of the size of a 30 nm cube and with each silicon atom being .2nm in diameter something like 3 million, give or take an order of magnitude or two.
Ana does a better job I think of explaining some of the finer details, and some specific implementations[1].

1. https://youtu.be/67LXWocO9HI
"Stealing stuff" is not possible. All this time we've been talking about subtler avenues of attack such as delaying or banning transactions, or overpowering and replacing some of the blocks at the top of the chain.

Proposed blocks must conform to the rules. If not, bad faith actors can get their stake slashed by anyone else. Anyone doing anything outside that framework is not following consensus. Whatever they are doing, is not Ethereum. I'm not fully up to date on what could happen if part of the stakers keep on doing that, but I think that the result of that kind of contested fork would be that each part would be able to slash the funds of the opposing part in their own consensus. In short, it results in a split, with the good faith actors in one side. After that split, the good faith actors would now control 100% of the staked funds.

Btw, you're absolutely right on your last sentence. Consensus was and is always a social contract between humans. The protocol is just a neat way to distribute it.
R is an implementation of S. John Chambers worked on it at Bell Labs starting in 1975.

https://en.wikipedia.org/wiki/S_%28programming_language%29
Simple solutions are also easier to refactor into more complex solutions when the complexity becomes necessary. Going the other way is much harder.

In simple systems, you often have the option of simply throwing away entire components and remaking them because the system is simple and the dependencies between components are still clear.
How to leverage functional programming in Kotlin to write better, cleaner code
> there was a five-day window of time between January 16-21, 2022, where an attacker had access to a support engineer’s laptop.

> Support engineers are also able to facilitate the resetting of passwords and multi-factor authentication factors for users

No breach at all here.
Why do traders need to be insulated from their risk more than everyone else in society?
Grammarly Continues to Pay Staffers Who Joined Ukrainian Army
According to gdpr, this post could be illegal (because.. Lie)
The thing with take homes is that if I apply for 4 or 5 jobs and they all want a take home, than I am literally spending all weekend doing these things because they are NEVER just 1 to 2 hours, it's always more. One time a company wanted me build an entire website, with login, databases, everything, including their obscure stack elements that basically no one knows by heart. It was only supposed to take 2 hours.. like give me a break. I emailed them back saying I expected to be paid for this and almost attached an invoice.

If you aren't a programmer, how do you know you are giving anything appropriate to the candidate, either technically or in a manner that respects our time?

If you were hiring a doctor, would you send them home with a patient?
If you were hiring an airplane pilot, would you send them home with a little airplane for a few hours?

Of course not! I can't think of any single profession that has to have such an undue burden placed upon the candidate, so why are we put through this?

Many times, I find myself wishing we could just have a registration or licensing process like other professions. I thought my degree was supposed to be for that, but I guess not.
Maybe some investors are ok with an organization in a company losing $10M yearly but it doesn't really strike me as toxic for them not to be ok with this.
Yes, motion is highly uncorrelated. E.g. the whole body has no movement when she raises a hand with a chess piece. Humans don't do that. Everything would move from the chest up to assist the motion.
You've not refuted the article so much as pointed out a corner case the author didn't address in which ML is a good fit. Your example, using ML to perform the medical coding function, is using a data source (in this case the EMR) for one of the purposes for which it was explicitly designed and for which it is (arguably) non-deficient. That is a realm not doomed to failure.

The realm doomed to failure is using a data source for a completely oblique purpose for which it is horribly distorted. Namely, the purpose of optimizing individual and public health by discovering guidelines and treatments, diagnosing illness, and delivering optimal care.

(Of course medical billing as an enterprise shouldn't even exist, but that is another topic.)
The market rewards being good at job searching and interviewing. It makes a bigger impact on compensation than actual engineering value.

So get better at interviewing.

If you're already focused on coding, the next piece is systems design.

The more senior the job, the more likely part of the interview process is moving boxes and arrows around to design a scalable, reliable system.

This book is a great place to start: https://www.amazon.com/System-Design-Interview-Insiders-Guid...
> Well the addition is done in FP32

Addition is done in 10-bit mantissa. So maybe TF19 might be the better name, since its a 19-bit format (slightly more than 16-bit BFloats).

Really, its a BFloat with a 10-bit mantissa instead of a 7-bit mantissa. 10-bit mantissa matches FP16, while the 8-bit exponent matches FP32.

So TF19 probably would have been the best name, but NVidia like marketing so they call it TF32 instead.
They have a cloud offering. Personally I'd rather pay for someone else to manage devops than myself.
I would think for a self-driving car to reach an acceptable level, it should be like a train. If I get on a subway or a bus and it hits someone, I am not held responsible, even if it stopped specifically to pick me up first.
OT: does anyone know what happened to rweekly.org? It hasn't been updated in a long time and I don't know a good substitute.
Just use a blocker everywhere if you prefer not to accept cookies? 1Blocker on Safari did the job for me here.
I'm not suggesting it's deterministic.

People have been saying that if driverless cars are safer than humans by any amount we should allow them. I'm saying they should be much safer than humans before we allow them.

The public will not tolerate car manufacturers killing 10's of thousands of people per year just because they are very slightly statistically safer than the average human driver.
I've had a couple good experiences at, of all places, Walmart - including the a pool cue I bought several years ago

There was no slot for the cue anymore, and no sticker on it

Asked the guy in Sporting Goods how much it was

He looked at it for a minute and said, "how's $5.97 sound?" (that was the price of the marked-down solid maple stick, this was a two-piece fiberglass jobbie (probably a $40-50 cue at the time))

I told him, "sounds great"

He printed-out a "replacement" price tag, and went to check out
besides the whole "we dug through slack and got your AWS keys" i think the worst case scenario would have been removing MFA from an a compromised account and having access to the e-mail to self-serve the password reset.

that and maybe going through JIRA and seeing if anything was of any interest?
Vultures, parasites, vampires.
8600 channels? Wouldn't that overwhelm you? I'm trying to think up scenarios where an org would need so many, but I can't. Is this normal?
The name "Buzzfeed" itself, even if you didn't know what it was, doesn't bring to mind serious investigative journalism.

It makes you think of content being shoved out as quickly as possible, about whatever topic is popular, in hopes of getting clicks. Which is exactly what their sans-"News" site is.
Yep. I’ve been bitten by that myself. It’s sneaky because it may pass all your unit tests because you’re using small numbers. Then it gets to prod with record number 2718 and kablooie.
I'm planning to release a large part of my self-written tech-stack as Open Source: https://nexusdev.tools/

I write my web apps with Nim on the back-end and Flutter on the front-end. The release will also feature a Python SDK.
Yes. Luckily a lot of amazing open-source companies like RedHat, Gitlab, Sentry, MongoDB and Elastic have already demonstrated multiple ways to build successful open-source business models, this is one area we don't need to reinvent the wheel at.
To dedicate your life to your father's work, to forgo carving your own path, and at great risk of carrying blame for tarnishing Tolkien's legacy, and still earning praise for it -- I don't think the money offsets it by much.
Well the governments job is to create laws to make it easier for humans to live together. Even if Gattaca style gene selection is available, laws can be put into place to prevent discrimination.

I.e. it is 100% illegal to do genetic testing for anyone other then yourself or your under-aged children. Those tests can only be done by a doctor and cannot be transferred or shared with anyone other than another doctor. Any employer or person that attempts to do a genetic test on someone can face jail-time.
Something like blablacar?
A new book called The Genome Odyssey (Euan Ashley) has a large section on HCM and genetic medicine. The Stanford Med School research team has many disciplines bridging the medical and computing sides. He has several youtube talks about hiw work.
There's probably a support channel for each customer and agents tasked with floating amongst them.
The problem I often see is in the evaluation of the naive cost of fixing it versus the actual probability your target of opportunity will become a legitimate design consideration. The naive cost almost always is large but the probability your target of opportunity will be necessary is often small or miniscule. It's easy to try to cover all your bases and write something in an unnecessarily flexible way when a concrete implementation would have solved the immediate requirements succinctly and very likely may not to be touched again for years (if ever again).
This is really impressive assuming it is as automated/scalable as Unity implies.

The skin and hair look great which are both really challenging for their own reasons, but one particular detail that was surprising was at 1:36. If you watch her lips closely you can see where the top and bottom lip stick together as they open. If they can simulate that level of skin detail when the motion is backed by mocap data this could be a huge quality jump for character-driven and dialogue heavy games.

There are definitely still moments where the lips, teeth, and tongue look "3D" but I don't think I would notice if I weren't hyper focusing on the mouth and just enjoying the story.
I see. I guess I've been lucky enough to be on teams that haven't thought of microservices that way.
I wonder how much retail arbitrage is just leaks by the resellers themselves.

But always better to blame scalpers. They can’t defend themselves if they don’t even exist.
Electric cars/bicycles/scooters/motorcycles, computers in everyones pocket, huge cheap TV-s, fast wireless internet, robotic lawn mowers, radar cruise control and the list goes on and on and on...
It occurred to me yesterday that at some point someone will inevitably advocate for the banning of deep fake pornography in their country by creating a porno starring the politicians of their lower house. I reckon it’d be illegal within the week.
This is the future, imo. Code will be eaten by natural language, especially English, it's like the blob of languages.