skysight-inc/HackerNews huggingface dataset:
I'm intrigued! But a few questions/comments:

* How is this two-factor? I only see one factor (a thing you have, your phone). Email adresses are not secret.

* Again, email adresses are not secret. How do you limit login-spamming? I don't want to wake up in the middle of the night because someone is trying to break into my account.

* What about timing attacks? If i stand over your shoulder while you're in the library - and i try to log in using your email address a few seconds before/after you, wouldn't you think "oh, probably a fluke" and allow my login? How would you differentiate between logins?

* If you're not that security-minded, you could have a desktop client as well - so you don't have to rely on your phone. At that point you could probably just have a browser plugin that does it all for you. (And at this point you're pretty close to what i already do with LastPass, although the site i'm visiting doesn't have to do anything special other that implementing a regular username/password login system.)

EDIT: Also, as far as i can see from the Play Store screenshots, the app only asks you "Do you want to log in at <site>?". A far better solution would be to show the user a number sequence (or a cute cat or dog picture) on both the login page and the phone. If those two mismatch, the login attempt is not from your session.
http://www.hyperantivirus.com/?id=bkkE1AAYggxdfEx
Or maybe a bit of both: http://stackoverflow.com/questions/27967093/how-to-aggregate...

I appreciate you taking the time to answer -- and I get that there's a reason for why we have graph databases. But I really meant something more concrete, as in here's a real-world example that isn't feasible to do on machine X with postgresql, but easy(ish) with a proper graph structure/db -- rather than "not all data structures are easy to map to database tables in a space-efficient manner".
New York also has centeral heating for several buildings.
https://forums.aws.amazon.com/ann.jspa?annID=3061
> Today, Elastic Load Balancing released a new default SSL Security Policy that no longer includes Ephemeral Diffie-Hellman (DHE) ciphersuites. ELB offers predefined SSL Security Policies to simplify the configuration of your load balancer by providing a recommended cipher suite that adheres to AWS security best practices.

1. Select your load balancer (EC2 - > Load Balancers).
2. In the Listeners tab, click "Change" in the Cipher column.
3. Ensure that the radio button for "Predefined Security Policy" is selected
4. In the dropdown, select the "ELBSecurityPolicy-2015-05" policy.
5. Click "Save" to apply the settings to the listener.
6. Repeat these steps for each listener that is using HTTPS or SSL for each load balancer.
Witcher 3 had looked awesome on all press photos and in-game videos til last week. The finished game looks the same on all platforms, a highend PC runs on idle (30% Gpu). Witcher 2 Enhanced Edition (2011) has a pretty similar ggraphic. Assassins Creed Unity looks like a game from the future. Witcher 3 is a good game, but the PR wasn't that good.

@down voter: do you mind to share your thoughts
An interesting point to mention is that the traffic "jam" moves backwards. This is because at the front of the jam, cars are able to accelerate out of it, while at the back o the jam cars are piling up into it. Seen from above the jam is a shock wave moving backwards.

This often upsets people when they get out of a jam only to see there was nothing causing it! In reality what caused it may have been much further up the road.
So why don't you get together and collectively do something about it?

I would never accept having my pay downgraded without good reason or having to suddenly endure less flexible work hours. My general rule is: pay & benefits are only supposed to improve, as soon as either one degrades, it's time to look for another job. And job prospects in IT are pretty good right now, at least in the US.
Glowforge gets $9M from Makerbot vets to build a laser cutter
> Basically, this is an extremely secure, 2 form factor, idiot proof login system

As far as I know, factors are

1. Something you know (password)

2. Something you have (a dongle or phone)

3. Something you are (iris or fingerprint)

With only pressing a button on a phone, how can this be two-factor? There is no password ("passwords are obsolete" and usernames are not a knowledge factor in multi auth) and nothing of biometrics. Am I missing something?

By the way, not entering passwords is a fantastic way to login. I have been using the Passwordless [1] method for some time and it works great.

[1]: https://passwordless.net/
I don't know, seems like a lot of bloviating and hand waving to me.

>>Media are our thinking tools. Our representations of a system are how we understand it.

I got this quote from the site, seems to be the central premise for this endeavor. Is this even valid? Are media our 'thinking tools' or something else, like our 'communicate to others what I'm thinking tool'? There's a big difference imo. This person appears to be going for a Sapir Whorf Hypothesis applied to media. Seems to be similarly fraught with peril ie open to debate as SWH is.
I agree that this is a profound and perfectly valid question.

Sir Roger Penrose said many times that our current models of Physics are not including Consciousness and that is a big issue. He and Hameroff are working in an interesting line of research that is trying heretically to do just that, model Consciousness pushing the current statu quo https://en.m.wikipedia.org/wiki/Orch-OR

Here is a interview of Hameroff talking about why Consciousness is not an epiphenomenon (as the experiments with paramesiums shows) and is far more than computation: http://youtu.be/YpUVot-4GPM
5 Things I’ve Learned Working for a Startup
It seems I meant "Flexible SSL" instead of "Universal SSL". According to the main website, flexible SSL is not secured. https://www.cloudflare.com/ssl

The beta test of a Cloudflare CA for "Full SSL" is a big improvement over accepting any self-signed certificate, but I still think "Flexible SSL" should not be a thing.
This has always been the point of NVIDIA's propertary game engine technology for more than a decade now - give it away for free or very often for big titles integrate it into game engines using NVIDIA developers (who often come to work on site.) Then once the game is released mention that it works better/looks better on NVIDIA technology than on competitors (AMD/Intel) GPU technology. And of course blame it not working well on AMD/Intel on their "inferior" technology.

NVIDIA must be loving this controversy as it was the whole game plan all along.
I think this has relevance in the present age because it seems anyone who professes to wanting to change the world through intelligent revolution is going to get a file opened on them by those who are only interested in maintaining the status quo.

It makes me wonder what all these people would do if there were really a revolutionary change in civilization such that the power is removed from the elite.
You're right, my wording wasn't clear. I was talking about the market they're complaining about.

I just feel like it would be more beneficial to improve communication and developer support instead of generating negative PR by saying things like nvidia "completely sabotaged" performance when in fact all they really did according to developers is they had a good product and they were always available.
Leet Speak Cheat Sheet
This hails back to the early Guild Wars 2 days, which might predate HairWorks: developers take 'responsibility' for the GameWorks code once NVIDIA leaves. They can't open source it, but they do have the source and by extension so would AMD if they ever walked through the door. Disclaimer: complete hearsay.

What you say about HairWorks optimization is true, but you can't hold the fact that AMD has failed invest against NVIDIA. Look at it this way, if TW3 hadn't added HairWorks everyone would have the static hair meshes. As a game developer I would integrate HairWorks so that I could shine on compatible platforms (albeit I'd probably disable it by default for AMD, instead of having a bad first experience).

It's a pity that the consumer gets caught up in all this. Who's to blame is a lot more difficult to determine than most people think. Purely in terms of graphics cards, NVIDIA has great post-sales support. If I buy an NVIDIA I know games will run well on it because NVIDIA makes sure that they do. This is a pro-consumer post-sales service that I get at absolutely no cost. They are also running up against AMD users in the way that people describe in the comments of that article.

It's not a black and white situation but AMD is certainly not helping in even an insignificant way. AMD customers should be demanding answers from AMD before (not in exclusion to) they demand answers from NVIDIA.
A bit of clever reformatting of your data and 2.1 Pb could probably easily be reduced in size to something that would fit in RAM. Are you actually needing every byte?
Why I am happy downgrading from a $500 to a $75 smartphone
It's not two-factor. Your phone becomes an access card. Which is cool because you don't have to remember a password. But it's not two-factor.
You mentioned 'single point of failure'.
Welp, I got it to work with atom+hydrogen!
That was not a trivial install though
It's more akin to saying "if you're looking at buying several economy tickets to go from A to B, a first class ticket on a direct flight might be cheaper and faster than stitching together several economy tickets"
Meeting users where their understanding is now and not trying to drag them along to where their understanding should be is definitely a challenge with replacing traditional workflows (like username/password, swiping a credit card, letting the waiter carry your card off for swiping, etc). The issue I see with this is that it's introducing another step into the process instead of removing a step or making it easier. Now, instead of just remembering a username/password combo, you have to 1) remember a username 2) Remember that the website that you're visiting has the option to use unloq.io (because they're probably going to offer both unloq.io and the standard username/password) 3) enter in username 4) find your phone 5) unlock your phone 6) wait for confirmation on your phone 7) hit allow 8) look up, reorient yourself to your monitor and mouse, and continue.

Good UX involves taking away steps and streamlining flow, and until flow is streamlined and easier than the previous process users won't accept it.
Your answer told me more about J than the web pages I'v seen. If you put it that way, J might even whet my curiosity.
> Because that untextured hair looks completely out of place next to all the other nicely textured & shadowed parts of that scene

The hair has nice shape and I believe it has physics, but it totally isn't shaded properly. I'm not sure if they are not using the proper Marschner shader (http://www.ephere.com/plugins/autodesk/max/ornatrix/docs/con...) or if the issue is they are not integrating the environmental lighting properly - could be both.
During summer it will dump heat outside through the wall. That's why the device requires to be installed on an external wall. That's actually quite smart, if they can implement the actual mechanism inexpensively and reliably.
The thing is, as referenced in the article I linked, there is a blurred line in functionality between what the GPU can do, via what the driver exposes, and what the GPU can do, if only they would write something for you to help massage it a bit and enable in the way you need.

Without access to the engineer's knowledge of the GPU's hardware, it's hard for the open source developers to even know what they ought to be able to implement. It follows that game studios (and consumers) would be crazy to rely on the coin-flip-odds that an open source implementation will figure out the right thing to do for a particular optimization of the GPU's internals

I am also an outsider, but have had a few friends work on various graphics projects (game engines, CAD software, one of them use to have a map of the OpenGL state machine above his bed). To hear them tell it, trying to maintain absolute "best practices" and only use truly cross-platform, cross-vendor code in your libraries while still hitting deadlines for games is like the mythical web startup that somehow ships despite also investing time in 100% unit test coverage, 100% integration tests, with a little bit of mutation testing and generative testing on top to help test-drive the test suite. That is: it's more of an ideal to strive for than a reality to be lived.

As a Linux user I weep at this state of affairs, but given the way GPUs are made, I don't know what could change.
Big Tech Companies Continue Splitting
I find your argument lacking the real world facts.

Open Source drivers for NVIDIA suck due to lack of documentation. If AMD has a difficult time than Open Source drivers are doomed.

AMD does make good hardware and it has traditionally been a good company. The issue is the lack of a standard. I don't like non-standard solutions with closed code or hardware.
Many companies started with clusters by using retired machines and free software. Going back a few years that would have been a much easier solution to put in place as compared to a capital expenditure for a single top end server.
It misleads users, for a start.

I get the business case (the whole point is that SSL is hard for a large class of server admins). Also it does help for e.g. users coming in via tor or un-trusted networks.

But dammit, I still can't bring myself to like it.
> Mantle and now Vulkan/DX12

The issue here isn't that at all. The issue is a turn-key hair rendering solution. ~~Which AMD does not provide.~~ Correction: AMD provides TressFX, which had bad NVIDIA performance before NVIDIA stepped in and fixed it. ~~In fact I can't find any graphics code samples on their website, contrasted with the abundance on the NVIDIA website.~~ Correction: AMD does have samples.
Interesting to see open source called "slow computing" (not quite what I expected when I clicked on the link). I've never been a big fan of the use of the word "slow" in the various slow movements though. I know the slow movements started with "slow food" and that was chosen to contrast with "fast food", but it does have connotations relating to physical speed, and I think that could be particularly misleading applied to computing. I prefer "thoughtful computing", "thoughtful food", "thoughtful parenting" etc. Too late to change now though.
Can you explain what Tachyon does that's different from what Spark already provides?

I haven't used either Spark or Tachyon. I thought the Spark solution was to just put my dataset in memory. But the Tachyon page seems to say the same thing
> Solution: AMD optimizes HairWorks.

Why didn't NVIDIA make HairWorks, NVIDIA's software, run properly on AMD cards? Given that NVIDIA has the full source, that should have been possible.
Look at R and realize your data can fit in RAM. Almost every data set examples for clustered could really fit inside of a computers memory.
If you're running a windows system licensing costs will be smaller when scaling up than scaling out, so there is that to bear in mind.
Hoe afslanken zonder honger of calorieën tellen? – Leef Nu Gezonder
> you'd see there was a good deal of pushback

... that in practice amounted to absolutely nothing, because the NSA kept doing what it wanted pretty much all the time. They just lied a few times more here and there, like Clapper did. It took Snowden to show that they were lying through their teeth.

> you can look at the in-fighting between Sen Feinsein and former Sen Rogers on one side with Sen Wyden and former Sen Udall on the other.

That's not oversight, that's 4 people deciding what is kosher and being totally forbidden from discussing it in public anyway, as they themselves made clear. That's not how it should be.

> Greenwald has yet to show evidence of a single American that was targeted by the NSA.

All the stuff about "parallel construction" is enough, to be honest. It's not in Greenwald's docs, but if you sum it to the capabilities that Greenwald reported, it's pretty damning.

> what was actually happening was that Google and Yahoo were sending their international data-center traffic across the globe unencrypted

In that case, the responsibility of NSA and GCHQ was to alert Google of the vulnerability and ask them to fix it, not abuse it. Or rather it should be -- it took Snowden to discuss what the NSA should and should not do at the political level.

> The article doesn't answer any of these questions

If it did, you'd be screaming that it's irresponsible disclosure that will harm people on the ground etc etc etc. From your POV, Greenwald is damned if he does and damned if he doesn't; but it's clear from the subsequent fallout that Greenwald was right to publish what he did and how he did it.

> If the NSA is using that access to gather information on, say, Russian targets, I don't care

As I said, there is a world beyond the US border.
> So you page the entire network globally to find the device?

Or locally, and have the device check in when it enters a new geographic area instead of all the time. The accuracy of passive tracking could be decreased considerably if the protocols were designed with that goal in mind.

This is one of those cases where perfect is the enemy of good. Just because there will always be the possibility of tracking in wireless networks, does not mean that that we can not work on minimising that leak.
SQL Relay 0.59 is released with support for many additional databases
Even in summer there is hot water to be heated.
It sucks actually because when I've written custom game engines, one doesn't know if one is using OpenGL properly because NVIDIA just makes things work even if you did a bad call. Then when you try to run it on other drivers that are more compliant, it all fails all over the place.

The solution I guess is to try and find a highly compliant, picky driver, and develop using that, because it is easier to get it right at the beginning than to go back and try to fix things.
Webpack with LESS and React
I have quite a few android devices, but the play store tells me that "This app is incompatible with all of your devices". But I'll keep an eye on this, seems nice. I guess it's two-factor enough, because I have a password on my phone.
The pragmatic (in the non-philosophical sense) argument is that it is less than helpful to be a Spinozist or Cartesian or whatever without knowing it, and without knowing the strengths and weaknesses of the position. C.S. Peirce (who trained as a chemist) remarked that much of what was called "plain common sense" was simply Aristotle. I encountered a teacher in an NLP course who quoted Aristotle's four types of causes without having any idea that it came from Aristotle. Listen long enough and you will Kant's Antinomies of Pure Reason argued forward and back by people who haven't cracked The Critique of Pure Reason.

The other argument is that it is a challenge and a pleasure to follow some of the strongest minds as they make, elaborate, and challenge theories. Not everyone will find it a pleasure. Still, I suspect that the difference between encountering Plato or Locke in a one-semester summary and actually reading Plato or Locke is comparable to the difference between encountering "The Marriage of Figaro" in a plot synopsis and in attending a competent performance.

Beyon
> The issue here isn't that at all. The issue is a turn-key hair rendering solution.

That is incorrect. The issue here is hair rendering which AMD has a turn-key solution for it: TressFX.
Depends on what you mean by massive bloody server. You can get a server with a terabyte of RAM for a price that's insignificant compared to the cost developing software to run on a cluster.
6.000000000000000444 TiB
This isn't multifactor. Use an actual multifactor solution, like Google Authenticator or password+SMS.
Node OS: First OS Powered by Npm
Also not all coders are well paid :(
I moved with a company but left when that gig finished (we were acquired)... since the 10 days they give you to leave when a gig is up or be jailed for immigration violation is totally ridiculous. I therefore figured I'd cut my losses and get out while the going was good versus stay in a jurisdiction that mistreats its talent.
smug git
Ok, one more example: A German company holds a very large amount of profile data and wanted to search through it. On disk storage in the 100's of gigabytes. Smart encoding of the data and a clever search strategy allowed the identification of 'candidate' records for matches with fairly high accuracy, fetching the few records that matched and checking if they really were matches sped things up two orders of magnitude over their SQL based solution.

It's very much dependent on how frequently you update the data and whether or not (re)loading the data or updating your structure in memory can be done efficient or not to determine whether or not such an approach is useful or not but going from 'too long to wait for' to 'near instant' for the result of a query is a nice gain.

In the end 'programmer efficiency' versus 'program efficiency' is one trade-off and cost of the hardware to operate the solution on is another. Making those trade-offs and determining the optimum can be hard.

But a rule of thumb is that a solution built up out of generic building blocks will usually be slower, easier to set up, will use more power and will be more expensive to operate but cheaper to build initially than a custom solution that is more optimal over the longer term.

So for a one-off analysis such a custom solution would never fly, but if you need to run your queries many 100's of times per second and the power bill is something that worries you then a more optimal solution might be worth investing in.
At some point, I think we'll be limited by limitations in the way we think, rather than the inputs (media). Humans think by spatializing[1] (I'm using Julian Jaynes' definition here). Which is why pen-and-paper and electronic analogs thereof endure -- it's a 2D version of what goes on in our mind.

[1] http://www.julianjaynes.org/origin-of-consciousness_english_...

Moreover, things that in the physical-behavioral world
do not have a spatial quality are made to have such in
consciousness. Otherwise we cannot be conscious of them.
This we shall call spatialization.

Time is an obvious example. If I ask you to think of the
last hundred years, you may have a tendency to excerpt
the matter in such a way that the succession of years is
spread out, probably from left to right. But of course
there is no left or right in time. There is only before
and after, and these do not have any spatial properties
whatever — except by analog. You cannot, absolutely
cannot think of time except by spatializing it.
The implication that somebody must own a domain and SSL certificate in order to deliver you software for free is just insanely entitled. If you care so much, why don't you pay the author so he can buy all these things?
I'm quite interested in type theory, I just don't understand it well enough yet. The next (major) goal for my calculator is to produce native code via LLVM. Maybe integrating LLVM will help me find an IL that supports inlining... — my head is full with fun ideas :)
People will build gigantic compute clusters with expensive storage backends when their entire dataset fits in memory.

If it fits in memory, it's going to be magnitudes faster to work with than on any other infrastructure you can build.

So the trick is, you take their "big data problem" and hand them a server where everything can be hot in memory and their problem no longer exists.
Part of the problem is that a lot of problems that are CPU dominated on a single system becomes IO dominated once you start distributing it at very low node counts without very careful attention to detail.
Did I miss the part where he explains how he makes a living and provides for his family?
Using motion sensors to automatically schedule meetings