skysight-inc/HackerNews huggingface dataset:
There are two families of rules used in Go - computer-unambiguous rulesets that enable computers to decide a winner, which commonly results in 1000-move games, and human rules, in which humans can decide that the game is over when they agree on the life-death status of each group. In the AGZ series of bots, the training process also short circuits with resignation at a 5% winrate threshold, resulting in games of length 50-200 moves. This saves compute and avoids polluting the training data with useless finish-up moves, but also makes those positions effectively out-of-distribution.

The bot was exploited with friendlyPassOk=true, which is basically saying that a bot playing with human-friendly configurations, trained in a way that has no cleanup positions in its training data, can be exploited under computer rulesets.

There are really so many more interesting questions one can ask about computer Go AI exploitability...
I'm baffled that someone would settle on 'white, cotton, Nike' as the most appropriate one sock model to own.
Yet almost every other consumer good is more expensive in Europe. Especially now with the Euro tanking vs the dollar.
func composeE[T](fn1, fn2 func(T, error) (T, error)) func(T, error) (T, error)

func liftE[T](func(t T) T) func(T, error) (T, error)

?

I'm not a big fan of functional programming though.
Let's say he was giving 500,000GBP. 10%

Great right? You have just given folks incentive to plant problems and reap the reward. You might say, they can audit and if you caused the problem, you don't get the reward. Great! Now, let's collude with another team mate, I cause they problem, they fix it, we split the rewards.

Once you give monetary incentive, folks start figuring out ways to game it.

There was an agreement on how much he was paid, the company paid that. Doesn't matter if he saved 5M in profits or not. What if he had failed? Or what if he was the reason the pricing import failed? Would it be okay for the company to penalize him by clawing back some of the money he had been paid in the past?
I've done some digging, as I am terminally curious.

It was taken down by Hasbro with a DCMA complaint in July 2009 [1]. Not sure when exactly it was resurrected, but I'm glad it worked out for them in the end.

[1] https://uboat-aaa.blogspot.com/2009/07/dmca-takedown-notice-...
I did. There reference to the “civil rights amendments”. It’s not as narrow as the “Civil Rights Act” as someone else commented, but that is also included as a consequence of inferior law.

To simplify it for you, you inherently cannot have the right of free association if there is no means to freely associate, because the ability to do so has been taken from you by force of perverse law.

I find it quite curious to live in a world where people do not understand that they are slaves, probably due to the fact that they have been conditioned to understand slavery as only being possible when there are chains and “black” skin involved, i.e., conditioning. I have never met a single other person who really understands that slavery is a mostly mental conditioning, chains and related iconography are merely just that, icons or a symbolic representation that abstracts away what slavery really is.

Most slaves, even in the deepest South American jungle plantation never wore chains. Chains ares unnecessary once you have properly trained your slaves to their condition. That applies to western slaves that make up the majority of western nation countries, likely including you too, as well as the slaves all over the world producing things in farms and mines so higher level slaves (you?) can, e.g., feel virtuous and privileged by being obedient and rewarded and, e.g., by driving electric vehicles.

Slavery never ended, folks, it just pivoted the business model and if you are reading this here, you are just a more privileged slave, maybe even a slave master.
From what I can see in a quick search (and from this presentation), Netflix only uses FreeBSD for serving video and they run these servers themselves in their own datacenters I guess. In contrast their apps on EC2 use Linux [0]. Sounds like the time has not yet come when AWS is paying anyone full time to support FreeBSD on EC2.

[0] https://twitter.com/brendangregg/status/1412201241472471048
Another happy long-term Duplicacy user here. My only problem with it is; on the rare occasions I need to restore something from backup, I can never remember the correct syntax and always have to look it up again.
Honestly, I have always been very happy and satisfied with TeX.
But any initiative is always welcome. Good luck
Location: India

Remote: Yes

Willing to relocate: In India, yes

Technologies: Python, Golang, SQL, c++, git, docker, k8s, MySQL, elasticsearch, redis, gin, flask, spark

Over the last two years, I've become borderline obsessed with everything happening in the data space, right from core database innovations (like duckdb), workflow and data orchestration tools (like prefect and airbyte), to niche products in data lineage and observability (like Atlan, great expectations). Therefore, to summarize, I'd like to work on building tools for/with big data :)

That being said, I've realised that there are interesting aspects at every abstraction in Computer Science! :) For example, Clojure is something I've been meaning to get into for a while and NLP is something I always like working on. So, feel free to reach out if you think I'd be a good fit!

Blog: https://aneesh.mataroa.blog/

Résumé/CV: https://drive.google.com/file/d/111XAKGnU9PApwmLtFmZdHDjMsNQ...

Email: makalaaneesh18 {at} gmail {dot} com

LinkedIn: https://www.linkedin.com/in/makalaaneesh/
Like this kind of game.
That advice is for the old materialistic pre-climate-change/infinite-renr world.
I like yishan's content and his climate focus, but this "we interrupt your tweet thread for sponsored content" style tangent is a bit annoying - not directly for doing it or its content, but because I can see other thread writers picking this up and we end up the same as Youtube with sponsored sections of content that you can't ad block.

FWIW With YT you can block them with Sponsorblock, which works with user submitted timestamps of sponsored sections in videos. If this tweet technique takes off I'd imagine a similar idea for tweets.
That's missing the forest for the trees, don't you think?
Neither of your examples actually replaces the {0} in "context" with "some context", so they are not achieving the desired output (which would have been `{"context": "some context", "input": "{0} % $0 -- DROP TABLE \\\"USERS\\\""}`). They are equivalent to my "safe but wrong" examples. The point here was that you may want to "template-ize" the produced JSON for whatever reason.

Also, DoS is a legitimate concern, and of course using a safe language makes other consequences less dire. I wasn't using sprintf() in my example for nothing.

> Naively printing potentially malicious input to places like the console is still quite dangerous, no matter how much you escape it! Logs can be captured into systems that then paste it directly into HTML.

This is exactly my point: when you include untrusted input into another string, even if you escape the untrusted input correctly for the desired format of that string, the entire output is now untrusted, and generally can't be further processed safely. Yours is a perfect example: you can escape the user input to make sure it is formatted safely, but you can't at this point tell in what other ways it should be escaped for other systems that may process it (for example, even printing to the actual console like this may be unsafe, as the user input may include terminal control characters).

Even this problem is still simple if we can assume that, say, anything printed to the console that later needs to be displayed in HTML should be considered an HTML string - it just becomes a simple responsibility of the log collector to properly escape the log lines as HTML content.

The problem is much harder if the intention is to actually control the HTML output through log lines (say, adding new-lines through br in your log statements, or emphasis or whatever). If that is a necessary component of your system, you need to re-architect this so that log lines themselves are no longer simple strings, but are structured so that any user-controlled input is kept separate from the trusted application-control formatting

Say, instead of logging

error: user entered "some|||string<script\>alert('pwned')</script>" which is not a valid number<br>starting over

you would log

error: user entered %s, which is not a valid number<br>starting over ||| some\|\|\|string<script\>alert('pwned')</script>`

and the log collector would need to know to recombine it into the original string, escaping the untrusted part as needed, before outputting it to HTML as

error: user entered "some|||string&lt;script&gt;alert('pwned')&lt;/script&gt;", which is not a valid number<br>starting over

Edit: interestingly, I had to use <script\> instead of a normal opening script tag, as HN would give me a TLS error if the comment contains the normal opening script tag...

Wonder if there is some input sanitization going on here as well.
I get what you're saying but this is totally impracticable for some people. I mean, just thinking about myself, I work in a smart/casual environment and I wear a few different outfits over the week, I cannot allow myself the tenacity to not match my socks with the tone of my shirt.
Sometimes the lack of reward indicates a cover up. I've seen my manager turn white while in a room with his boss and he made a joke about the cost of pizza he was providing and I replied with "take it out of the million or so I saved you last week". He didn't tell his boss that I worked 48 hours straight to resolve a problem my manager created.
And it had an insanely long battery life, I could respond to, and read text messages without opening my phone. It didn't have unnecessary stuff- it was simple and met my watch needs. I don't have a smartwatch now, because I'm not interested in having yet another computer on my wrist. I guess I've just decided to settle for a gimmicky automatic watch, it doesn't even have an alarm! And it dies if I stop using it for a few days.
Word has track changes, though not the math support it seems.
The key to finding good branded stuff is to find the stuff first, then figure how to brand it.
Because WG14 doesn't care about security, for them C is basically a portable macro assembler with added conveniences.
In general, as networks grow the fiscal incentives and selected standards change. Even outrage drives engagement.

70k users migrating to Mastodon in 1 week is interesting. However, I do respect your opinions.

Have a wonderful day, and here is an up-vote... =)
I know a guy that bought every new Samsung flagship device as soon as they hit stores. He said he just has to upgrade.
> continued and unchecked concentration of power and wealth towards London and other major cities.

Potato, potahto. The concentration of power and the prejudice are not unrelated. But also, when you say "other major cities" .. the number 2 and 3, Manchester and Birmingham, both count as "northerner". Power is really just being focused on London and Tory marginal constituencies. Those are the places that really get attention.

#4 city is supposedly "Leeds-Bradford", which I don't like as a definition and Bradford is blighted by a literal crater as well as the usual urban problems.
How big is HN? Is there a stats page? How many users, daily visits, posts, etc.?
I think acerbity is warranted to some extent. We are data scientists. We get paid the big bucks because we have big brains and have the skills and training to use those big brains in order to reason about the work we are doing.

Data science has become so easy and accessible nowadays that basically anyone who can write code can fit and use models. That's a great thing in general, but it means that those of us who do this for a living really should hold ourselves to higher standards.

Even if you are thoroughly mediocre at your job (like me) and aren't smart enough to come up with something like Prophet on your own, you absolutely do need the ability to reason about the models that you use, and to evaluate their performance correctly.
If your data don’t encapsulate conditions similar to the conditions you’re trying to explain then you really shouldn’t use that data at all or in isolation. This is still the post-Covid economy and the closest period to that was 1917-1922 (give or take). (Data probably aren’t that great for that period. Boo hoo)

That pandemic saw a huge reversion in trends towards wage earners away from corporate power due to labor changes from millions of people dying or leaving the workforce due to illness.

In the current era, policy makers seem to be making a characteristic silence on labor force shifts. (And immigration is seeing pushes to diminish supply of labor.)

Also the current era sees historically high levels of market power concentration at the corporate level. Simply, if market power is ceded to an entity then changes in that market are likely caused by those power brokers and they’ll be the ones with the power to make whatever change - all else staying the same.

If I’m wrong then Powell increasing rates will have the desired effects with minimal side effects. Side effects being a sign that “the lever pulled did work but only through secondary effects managing to affect the right underlying factors.” This would signify that interest rates weren’t the best way to address inflation.

If I’m right, then market concentration needs to be directly addressed through regulation and oversight. Empower the workers - the people.
>we demand reasonable levels of due diligence from owners of private businesses when criminal activity is concerned. If you run a business that sells stolen goods, someone runs a drug ring out of your restaurant or you serve alcohol to minors you have a big problem.

Absolutely.

And as I understand it, many of those social media companies do a piss poor job in policing the kinds of criminal activity mentioned by GP.

That might be an area where targeted regulation could be useful.

But the larger discourse around moderation tends to be focused on political actors (both legitimate and otherwise -- I'm not going to get into a political discussion here, as it's tangential to my point and not likely to spark worthwhile interactions) and the slights they claim are disadvantaging them.

In my view, that's the wrong discussion. We should be much more focused on the very real criminal and tortious conduct that pretty much runs rampant on those platforms.

I voted with my feet a long time ago and don't give my attention to those sites, but that only helps me and doesn't address the larger issues.

As I mentioned in another (tangentially related) discussion[0]:

The best-case scenario in my mind would be more decentralization of
discussion forums. That gives us both the best and worst of both worlds:
Folks can express themselves freely in forums that are accepting of those
types of expression, while limiting the impact of mis/dis-information to
those who actively seek it out.

Which may well be a good idea in this domain as well. Smaller, more focused and decentralized forums are more likely to have decent moderation (as those involved actually have some interest in the topic(s) at hand) regimes, and those that cater to criminal activity are isolated (and both more difficult to find and more vulnerable to being taken down) from the majority of folks.

It's not a good solution, but it's becoming clear that moderation of huge forums like Facebook/Instagram/Twitter/etc. isn't really practical.

If you accept that premise, what options (other than decentralization) could address these issues effectively?

[0] https://news.ycombinator.com/item?id=33407548
I was in this position as well but after about a year of a FitBit Luxe, I'm a convert. Fitness-wise, I like the heartrate and GPS tracking for walks and bike rides, and length-counting for lane swims. I like that it's an easy interface to input my weight and see that as a trend over time. And I like the sleep tracking and smart-wake alarms quite a bit.

Notifications I could take or leave; they're not super reliable but have occasionally been useful.

Battery life is IMO fine; I charge it once or twice a week while sitting at my desk or having a shower.

I know I could cobble together these capabilities from a suite of other apps— Strava, Apple Health, whatever. And I get annoyed that certain things on the watch aren't more customizable. But the overall package is more than good enough for my basic needs, and has motivated me to make (and stick to) real lifestyle changes, which is ultimately the point, at least on the fitness side.
Yeah I wasn't impressed with the examples either.
TIL. They look identical too.
When considering the cost of recruitment, training, and negative productivity associated with low morale it is mind-boggling that companies paying $60-100K+ for employees cannot or will not find 1% of that employee's total to keep them happy once a year.

To be honest a lot of the things company do don't even seem like profit maximization (since a Christmas gift could easily be argued that way), they just feel like constant short term thinking, medium to long term be damned. They know this is worse for them eventually, but yet they do it anyway since that 1% saved today across the whole company might be a big number.

A lot of it all comes back to poor management training and how they spend too much time maximizing the balance sheet rather than maximizing the workplace itself. Same reason why IT pros spent years trying to get two monitors regardless of the well known productivity gains.
I am a quite good bad programmer
I find somethings actually strange. Per se, checking my quality as a developer with job interview questions I will receive a not so high grade. I would say between 5 to 7 out of 10. Not brilliant. But as a developer I think I am actually really good.

I never "studied" computer science in a regular way, but I am in the industry more than 20 years. I started as a hacker, reverse engineering, assembly code, moved to C and C++ and now web development in Node.JS, Go (golang) and Rust and Vanilla JS. Touched of course Python and Arduino and Raspberry PI.

I find it that my code and overall look as much better (if I can be a bit non modest for a second) than other developers even seniors.

- My code is highly readable with good comments and other can take over my code responsibility quite easily

- My code runs (and also complies) faster than other - I understands the usage of Hash / Map instead of searching arrays and many other small things that actually enhance the code performance

- I know how to KISS (Keep it stupid and simple) and so I am able to write complicated software because the basic is simple and separated so my feasible to comprehend

- I understands Object Oriented correctly and knows where to use it and how and when to avoid it

- I know not to search always the latest new shiny thing (library or framework) and use legacy software that actually do the job when needed without complications

- I understand how the computer works, from BIOS, BUS to OS (Linux and Windows internals)

- I have (again if I may say) good product skills and some UX guts which helps me manage things on my own

All of this together allowed me to build and sell already two startups. Develop and maintain easily many web sites and SaaS which creates me nice passive income (such as https://gematrix.org).

So am I a good or bad programmer? - Still I will score quite low in job interview questions ...
I agree that compression ratio is the primary metric (but not the only important metric). I just found "[better] in all ways", explicitly calling out encode speed, incongruous with simply ignoring decode speed.

As for which is more important out of encode and decode speed, I would personally rank decode speed higher. For example, app icons on your home screen were encoded once (by the graphic artist) but are decoded zillions of times (by every user every day).
I don't get how any of this is better than buying a decent truck and tow camper. Truck prices are likewise insane in the US but offer more utility if you decide you want to stop living out of a camper.

A lot of this seems dumb but it would be nice to be the one selling overpriced camping stuff to millennials.
I absolutely second this. Their APIs are incredibly flaky - especially with Actions, and it's incredibly annoying that they don't report on their _real_ availability - I can't remember the last time there was any form of related service degradation on their customer facing monitoring during an outage.
Gotcha. Thanks for the feedback! Happy to chat at any point, just shoot me a message. I'm fairly easy to find on Twitter/LinkedIn/my website.
Yes, I'm sure his estranged relationship with his South African father gave him such an advantage in Canada and California. All those connections! That's a low brow dismissal of his achievements.
But you have tedious repeated things upvoted to the moon as long as it is the right kind of wrong, so that is often all you see in popular subreddits when sorting by popular.
No it isn’t different. At least it is not different in it’s mechanics. The activities of a moderator and a censor are identical. The intent and objective contain nuanced differences, but only of degree not kind.

Both moderation and censorship have the outcome of reducing what information parties are allowed to communicate, and a system is its inputs and outputs, thus they are the same thing.

This isn’t to say that it’s bad or good. The rhetoric of moderation is perceived better than censorship, but this is like the cops calling your interrogation an interview; it doesn’t actually change what’s happening.
Why are you so aggressively sure that was an American anecdote?
I get that benefit, but I feel it's in the way of having to find $25 worth of items before placing the order. A lot of times I'll change my mind on that $8 item before I get there.
The C++ reason has to do with the construction order of fields, which C naturally doesn't have.
I would hate it if everyone (or even many people) did this, but it's nice to know someone outside of Samsung has tried them all, but then again, I guess you wouldn't ncessarily get very neutral reviews from such a person.
With me being an IT person my landlord asked for recommendations for doing backups. Some googling revealed duplicati and we gave it a go. Installation + configuration was easy and the features were sane. That was like 6-7 years ago and it is still running without issue (AFAIK ^^)
It's useful as a study guide and reference even for someone who ostensibly learned all this stuff in school. It's a tremendously good book, and it's even more impressive that it's free to read online in a high-quality HTML document.
People once wanted slavery and explicit segregation, that doesn't mean it's evil to force them to stop. Gallop polls not withstanding there is evidence busing improved the lives of minorities. I've lived in the south where busing had been forced and the north where it wasn't. It does work.

https://eric.ed.gov/?id=ED571629

> When people call busing ill conceived or the worst means of ensuring integration, they conveniently obscure that busing was almost always a tool of last resort, mandated by courts only after lengthy battles with school boards and state officials, by black parents and civil rights groups, failed to produce even modest integration for black children.[1]

People may have opposed busing for a variety of reasons. Yet the results suggest it was segregation. IME even desegregationist parents flinch once an 'other' comes home for dinner with their child's family.

[1] https://www.nytimes.com/2019/07/12/opinion/sunday/it-was-nev...
Are there any comparable alternatives to Pebble even now? I’ve yet to see one, but I haven’t followed the market very closely since I stopped using one.