skysight-inc/HackerNews huggingface dataset:
Nice job!

I made one of these back in the day. Also allowing positive selections gives the model a lot more information and gives the user more power. You can use that to easily remove gridlines and smudge marks in photos of drawings without having to select every little thing you want deleted, or similarly you can positively select the main subject and a bit of scenery, negatively select a few passers-by, and let the model remove a crowd. The key point is that it moves some of the training-time bias toward a runtime selection, allowing better results on a wider variety of tasks (at the cost of more clicks on photos the model understands with few removals happening).
DRY the chilli, Beautiful Soup
Good thread by Paul Krugman:
https://twitter.com/paulkrugman/status/1547202926149378048?t...
Super low rates and a bunch of time on peoples' hands caused the biggest zero sum game in years. Pump and dump.

No new value created, just people playing musical chairs until the music eventually stopped.

I feel your pain, I was deep in it too and my gut was telling me the way forward. But I ended up listening to the shills, mostly because I'm relatively young and wanted to lean towards more exposure than less.
Can't respond to "word on the street" (i guess my streets have different words?), but I am more than happy to respond to any detailed questions you have! There's also a ton of public research (for example https://twitter.com/MessariCrypto/status/1546894197671821320 - amount stored on Filecoin grew at 128% quarter over quarter).

Disclosure: I am co-director of Research Development at Protocol Labs.
How I handle this is as follows, within a B2B context. The email sent to the user contains both a magic link and a code.

If the user clicks the magic link from the same device that they initiated the login from, it just opens straight into the app.

If the user clicks the magic link from a different device, it confirms the token and then the browser waiting on the original device logs in. It uses a generic browser/server messaging library to achieve this, based on whichever of HTTP SSE, WebSockets and polling is available.

If the user can't do either of these for whatever reason, such as email virus scanning or whatever, the bottom of the email also contains a code which can be entered onto the waiting login form, along with some information about never giving that code out to anyone else on the phone and checking the URL.

The magic link also has an interstitial page with an automatic POST form to deal with browsers and other things pre-opening links. There are also various points along the way that it attempts to check for phishing and perform additional interventions, such as if the magic link is clicked from a different country to the login request, or if the request is coming from a suspicious location, etc.

After all this is complete, it then does 2FA using SMS. The magic link login is only needed the first time you log in on a given browser as it saves a persistent cookie, but the SMS 2FA is needed every time. We don't support persistent sessions due to legal requirements.

We are also working on adding webauthn authentication, but early testing suggests most users find it very confusing. Mobile devices tend to handle it acceptably, but Windows' implementation in particular is currently very user hostile and often users worry they are being hacked. It also doesn't replace the email/SMS-OTP flow, because if the user is logging in from a new device, we still need a way to validate that it's them before they can subsequently authenticate with webauthn. We also support SAML SSO.

Most users are not interested whatsoever in carrying around a Yubikey. Even just using SMS-OTP got a lot of push back for being inconvenient. I think FIDO2 will work better for users when there's a good way of automatically synchronising their keys across all of their devices in a vendor-neutral.
> I'm not sure how you can confidently make any conclusions about any of this while we're in the midst of it. We're not through to the other side of this downturn yet, so who knows what could win?

I saw some of the same predictions as GP, they were all about the start, not the middle or end.
Gold is not a good hedge against inflation
https://www.nber.org/system/files/working_papers/w18706/w187...
This is really, really important for any kind of fermentation (including things like sourdough starter). I believe it's possible to get rid of some kinds of chlorination from municipal water sources by boiling the water first, but it is not possible to get rid of "chloramines," which are widely used (at least in the US). The web page for your local water supplier should be able to tell you whether they use chloramines or not, but I pretty much always just use bottled water that I know has nothing in it that would inhibit the fermentation.
> Something nasty is brewing in the economy. It will be obvious when it hits but until then it will be confusing as hell.

It's only confusing because of FUD from governments who know damn well we've entered a world-wide inflationary death spiral driven by the debt created to perpetuate the idea of infinite growth, even in the face of the system repeatedly trying to correct by popping bubbles. Turns out that reinflating the very bubbles that just popped is exactly the wrong strategy.

Also, in the US we are facing the fact that the vast majority of emergency debt created to combat economic shocks from COVID was embezzled by corporations and fraudsters.

Record profits across the board for corporations, highest CEO pay ratios ever recorded, massive housing bubble; the monied class is making off with their spoils and cashing the stock market in. Meanwhile they are sticking it to consumers with inflation (even shrinkflation) and then complaining about worker shortages!
It's the difference between "There is nothing handling this route at all" and "there is something handling this route but the object isn't found." To me the former is an HTTP 404 and the latter is an application "Not Found."

But I also very much don't like playing the "if you expose your app over HTTP you should assimilate HTTP semantics and do a fuzzy lossy map of your application to HTTP verbs and HTTP status codes." I leave the HTTP semantics to the front end web server and live on top.
Your argument only makes sense if you are getting pay raises that are commensurate with inflation. Not everyone is. Some people might lose jobs (or not get one amidst a hiring freeze) because the nominal non labor cost of operating the business might go up than they can increase prices (or labor costs could go up because other employees are demanding raises).

>the value of their home has increased significantly

This causes their property taxes to go up, too, adding to the pressure.

> The main losers seem to be renters

Home ownership rates are decreasing; and you really forgot people on fixed incomes or no incomes (living on the street).
Boy. This is the best explanation of this belief I've come across yet. It's coherent and reasonable, even if I disagree.

My highest scoring StackOverflow answer [1] (and my most controversial) is on exactly this topic and _no one_ in any competing answer have given _any_ sensible explanation of their reasoning. I've genuinely never understood their thought process, despite trying really, *really* hard. This explains it a bit, even though I totally disagree.

There are other tools for helping differentiate different varieties of 404 or 401. There are status codes, there's _nothing_ preventing you from returning a payload with explanation or overriding the Reason Phrase. If your HTTP client is too fragile to handle a very common usage pattern for HTTP status codes then pick a different one.

---

[1] - https://stackoverflow.com/questions/11746894/what-is-the-pro...
Can I frame my aversion to pop-over windows as an accessibility problem? Can I sue the E.U. for cookie banners being an accessibility problem?
> keystokes matter a lot

Meta
Inflation metrics don’t care about demand levels.

It’s just a basket of goods.

The question of how many people can afford this basket is a different question.
What happens to the green tops of the onions?
15 Revelations in Twitter’s Suit Against Elon Musk
Reminds me of Dismaland.
https://dismaland.co.uk/
>Internal migration is too slow and too small to explain the interior’s price shocks.

As anyone who paid any attention to the housing market in the past 2yr knows, if you have 10 houses and 11 buyers...

>the interior saw the worst of the real economic shock

That places that have economies that are more dependent on physical goods, services that cannot be performed remotely and high volume low margin types of business (which are heavily affected by supply chain stuff and commodity prices) should not surprise anyone.
I've been around since before the dot-com crash, and while "you can't time the markets" is true to some extent, some people take it as an excuse to turn their brains off entirely and ignore fundamentals.
Bound to Unbound – A Journey to Digital Freedom
Markets price in the future, not so much the present.

Right now the gold market is pricing in a Volcker-style freakout by central banks.

If Powell pivots, this will surely reverse.
But you're using the results of a Pachinko machine to say that some balls knew the right place to land. There have been people pulling money because a crash is coming any day since the start of the bull market. Sure, it's possible to time the market but it's equally possible to make the wrong prediction.

> Whether they sold in November or August, they correctly timed. Buy and hold investors made the wrong move by holding. It was obvious then to many.

In a decade or so I strongly believe my investment will be up significantly from those November numbers. I won't care what happens right now, it literally doesn't effect my plans to withdraw the cash when I retire.
Not sure exactly what you mean by "best guess + fuzzing", but I have compiled code that was first decompiled by Ghidra. The problem is there are lots of invalid identifiers in the decompiled output.

The worst are symbols that are used inconsistently within the same function, like a parameter which is passed in as a long and then used as a pointer to a struct or even as a function.

The Ghidra community basically says you should not expect the exported decompiled code to be valid [1,2]. Which is fine, since rount-trip compile-decompile-compile is not exactly Ghidra's purpose.

Maybe there's a setting to make Ghidra export asm literals when it can't figure out a valid disassembly, but I am pretty new to Ghidra so it could just be my own ignorance.

[1]: https://github.com/NationalSecurityAgency/ghidra/issues/236

[2]: https://github.com/NationalSecurityAgency/ghidra/issues/3553
Sounds like Steam early access with metics and feedback. Maybe it’s referencing social media campaign to measure interest during the early prototype stage like star citizen has been doing.
Luxury!

https://m.youtube.com/watch?v=ue7wM0QC5LE

;)
“Insofar as she recognized at all that she was dreaming, she realized that she must be exploring her subconscious mind. She had heard it said that humans are supposed only to use about a tenth of their brains, and that no one was really clear what the other nine tenths were for, but she had certainly never heard it suggested that they were used for storing penguins.”

― Douglas Adams, The Long Dark Tea-Time of the Soul
"but they absolutely are looking at details resolved in these specific images, processed in this specific way."

I don't think you're correct. PR images from telescopes aren't new, so if you are correct then surely you'll be able to find papers based on older photoshopped images from Hubble.

Are you able to find any?
Gold hasn't fallen dramatically year over year. It spiked last in Feb and March this year which isn't terribly surprising given that Russia had just invaded Ukraine and could possibly go down in history as having fired the first shot of WWIII.

A year ago gold was about $1800/oz, now its $1717/oz. Thats a drop of around 4.6% while inflation is up 9.1%. Good is priced in dollars, it hasn't lost value so much as it hasn't been hit as hard by inflation.
The trick is that if Twitter succeeds, then their legal fees become Musk's legal fees by virtue of him owning the company. They are heavily incentivized to go at this as hard and long as possible if they are to go at it at all.
Interesting. Are the conditions checked at runtime on each call of the function?
It does seem to be a circle: games carry adverts. The overwhelming majority of adverts is for more games. If you get the advertised game, you're now seeing ads in that game for more games...

Mobile games are a weird, impossibly self-sustaining beast. Developers (usually have to) dump money into advertising, even as their own games are advertising the competition.
So its flash player all over again?
R is my go-to for this, and one I recommend often. It makes a nice calculator language (with only a little weird syntax), has a very rich standard library of functions, and is reasonably fast.

The great thing about R is that it scales well with task difficulty. It works well for a couple numbers. Then you can use data frames, and the Tidyverse (https://www.tidyverse.org/) packages to do a lot of data analysis (especially dplyr, which is extremely powerful). Finally, if you want to look at your data, the built-in plotting capabilities are solid, and ggplot2 is both extremely powerful and reasonably easy to use.
Great demo, very simple interface and great features!
Custodial bitcoins defeat the entire purpose of bitcoin. The fact that you don't understand that speaks volumes about the bitcoin community.
yes, but you still risk paying too much, and then if you have to sell for any reason, risk taking a huge loss. Lots and lots of people lost a ton of money in real estate during the 2008 downturn by overpaying and then being forced to sell.
No consoles support
Ok, yeah, in retrospect that's probably fair.
I'd say that's almost all mobile ad networks, as it's not the network themselves but the ads.

This is good for both companies as Irnsrc gets deeper down the stack in terms of data and targeting and unity gets more spend flowing into their systems increasing their efficiency.

Too bad the IDFA issue is slowly killing all forms of performance advertising. Unity should be looking to buy studios akin to Unreal IMO.
Don’t selfhost. You inevitably will misconfigure your servers and lose your customer data. Bow to amazon overlords and don’t even think otherwise.

Don’t drive. You inevitably will kill some pedestrian. Use Uber and let professionals do it.

I don’t think that’s a healthy attitude. And exposing data because of misconfigured firewall (ahem, DOCKER-USER, ahem) is like 1000x more probable than someone hacking your cryptoschemes.

There must be freedom in software engineering. Even at cost of some grave mistakes.
> 28 year old FAANG engineers with 600k in savings and a house

This is truly such an exxagerated strawman. It’s such a minuscule number of people, and they’re definitely not 28. Plus, the sky high salaries are for senior engineers, not juniors.
It might be worth distinguishing here between 'some people that can time the market' and 'market conditions that can be timed by some people'.

'You can't time the market' would preclude both, but I think GP is talking about scenario 2 and you are talking about scenario 1.
Dart is a language optimized for use in the Flutter GUI framework. Well done.
Need some more straw for your strawman there? I can't take this comment seriously when you misrepresent both approaches so badly.

There are legitimate downsides to magic links but this isn't realistic. Do you not have to enter email on register? Where is the email confirm step for password signup? Finding the tab you just opened and dragging it... really? All of that happens on first signup as well. And the comment you are replying to is talking about a 1-2 times a year process, is a magic link really so difficult to use twice a year?
I am ambivalent about 200 for employee not found, but that is clearly a different category of error compared to an api version not existing. for employee not found, the error is purely in data: there is no responsive data, but the request itself was made to an existing endpoint/url/route correctly. no api version existing is an improperly made request: whether or not there is data cannot be determined as the request itself was problematic, so we never even got there.
Prices are up, wages are up, but last I checked (admittedly a month or two ago) profits were doing just fine. That profits are still solid under so many adverse conditions indicates to me that there is a lack of competition in the market, very little competitive pressure on pricing. The Fed isn't going to fix that with rate hikes, and there doesn't seem to be any interest in enforcing the anti-trust laws that we have on the books. I think we're in for an exciting ride, though I'm happy to hear why I'm wrong. :-)
A bold case against zoning: Houston
Worth noting that the dollar has been on a major rip due to certain circumstances. If you compare gold to euro or yen, it's doing quite well.
I took a look at the paper. Unlike the Hertzbleed attack this one seems to justify the bleed naming given the ability to rapidly locate the password hash (which can then be quickly brute forced back to the root password, most likely). However! There are caveats. It appears that modern Intel chips actually already mitigate this:

> "We observed that eIBRS systems seem protected from RETBLEED. IBRS, which is the alternative for earlier systems, was considered too expensive to use in practice when Spectre was introduced in 2018. Flushing the entire BTB through IBPB upon kernel entry would arguably be even more expensive. Intel’s mitigation. Despite the performance cost of IBRS, it mitigates RETBLEED on vulnerable Intel CPUs. Hence, IBRS will selectively be enabled on systems that exhibit RSB-to-BTB fallback behavior that do not support eIBRS."

Translated:

• New Intel chips have better support for blocking this attack. You can get performance+security by using a new(ish) CPU. Windows already uses that support if present. Linux apparently doesn't, but will presumably migrate now the retpoline trick is broken. The big slowdowns would come for older CPUs without the right hardware to control these attacks.

But, wait:

"Concurrently to our work, Branch History Injection (BHI) [7] explored the limitations of eIBRS and found that indirect branch speculation can be hijacked to run previously executed indirect branch targets in the kernel. Whereas RETBLEED targets Intel CPUs without eIBRS and certain AMD CPUs, BHI targets Intel CPUs with eIBRS and ARM. Moreover, because of the limited number of disclosure gadgets available to BHI, unprivileged eBPF is required for practical exploitation, which consequentially has been disabled as a mitigation"

Translating again:

• Even with new Intel chips there's a way to break them but the conditions are so specific that no normal kernel compile will produce them. Instead you have to be able to JIT compile custom code on the fly that runs in kernel mode. The eBPF feature lets users do this, but, if you limit it to root then the problem goes away. Oh and also ARM chips aren't magically invulnerable or anything.

Overall, I think this confirms the impression I already had for some time - despite whatever other issues it may have Intel is ahead when it comes to security. People aren't really looking for vulns in ARM chips though that may change now with M1. In fact even vulns in AMD chips are considered second tier and not that interesting. But, Intel chips have more features to stop speculation attacks.

A lot of Spectre-type attacks have actually been addressed over time by new hardware features (usually in combination with OS patches), but chip makers seem to suck at communicating this to the general public. If you're worried about specex attacks then your best bet is to aggressively upgrade your CPU to stay on the leading edge, to ensure your OS and browser are always fully patched, and if you write software for Intel servers, to explore SGX enclaves which these days do a lot of pipeline flushing and partitioning on entry/exit.
My gut said sell at 69k or even much before. I 100% knew 100k was impossible. Truly I expected 75k or so. But I listened to the shills.

Key lesson -- if a shill has good information, take the information. But make your own decision at the end of day. How it fits into your mid/long term goals etc.
Subscribe and cancel is what I do with anything that doesn’t let me turn off auto-renew.
for one, the base currency in question is uncensorable. e.g. I for one find it detestable that fruits and nuts sellers in Iran suffer immensely because of US sanctions. The idea that innocent citizens are being made to suffer for their governments policy (especially in more authoritarian countries) is gross. I see it akin to punishing a child for their parents behavior.
It really sucks when it's phrased so directly like that, but yeah that's basically it. Slowing down inflation means causing a lot of pain along the way, no matter how you go about it
The language I want is a specification language (a bit like Pluscal or P) which allows me to specify distributed system behavior, then ask both correctness (liveness/safety) questions and quantitative behavior questions. I wrote a bit about it here: https://brooker.co.za/blog/2022/06/02/formal.html
Here is what I think is happening:

the assumption that stocks hedge inflation has clearly been borne out of false over the past year

Inflation is not a tax as commonly assumed. This is why people who are dumping revenue-generating assets and bonds and are content with 'losing' 8%/year by being in cash, because they aren't really losing anything.

You only get 'taxed' by inflation if your consumption habits or preferences are aligned in such a way as to match the components of the CPI, which for the wealthy/rich they aren't. The rich don't need millions of dollars of food, healthcare, or gasoline. If you already own a home, then your hedging needs are already mostly fulfilled.

For someone who has much less money, then inflation is more like a tax, because your will be spending a lager % of your income on essentials, such as food and gas, which are tracked by the CPI.
Only if your wages go up as well
Many people predicted the situation we're in right now. What perplexed us all is that the ZIRP era lasted as long as it did without having the current effect.

We're heading for a consumer debt crisis. Outside of the tech bubble, average people are in a dire situation.

> What if the rate hikes keep coming fast and furious and the CPI keeps rising even faster?

Same thing that happened with the housing crisis in 2008. Consumers are going to default, and instead of the banks sharing the risk in the market they helped over inflate, Wall Street's going to get bailed out, because entering a deflationary environment is absolutely off the table.
real estate is not that good of a hedge, as it will tank after rates raises.
Thanks LinuxDude007! Curious what features you especially liked?
Sourdough does use yeast from the air and feeds on the flour (often with help from a sugary friend like an apple), but fermentation of vegetables is usually from bacteria on the skin of the veg, for instance in sauerkraut the bacteria that kicks off fermentation is Leuconostoc mesenteroides which is found on the skin of cabbage (and many other veg).

With both you can use a starter, often from the previous batch but buying them works too. My first attempts at sourdough weren't very successful at all and I wish I'd chosen a famous starter to get that good taste, even once I got it going okay it wasn't a great taste, the yeast strains in my kitchen can't have been that good!

[1] https://olykraut.com/blogs/knowledge/the-stages-of-sauerkrau...

[2] https://en.wikipedia.org/wiki/Leuconostoc_mesenteroides#Envi...