jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
from the conclusion it looks like the latest version of OpenSSL mitigates the attack:

'''

One concrete mitigation strategy has been realized in
OpenSSL 1.0 [18]. There, only the substitution table S is
stored, and then the required multiplications within GF (28)
are computed by using the following relations, which can
be realized in a highly efﬁcient way using the PCMPGTB
instruction:

+- -+
| +- |
| | ff (int8_t) x > 0 |
2•x = (x << 1) ⊕ | 1b ∧ -+ |
| | 0 (int8_t) x ≤ 0 |
| +- |
+- -+

= (x << 1) ⊕ (1b ∧ PCMPGTB(x, 0))
3•x = 2 • x ⊕ x

In this case, the required table contains 28 = 256 entries of
20 = 1 bytes each, and on standard x86-architectures with
a cache-line size of 26 = 64 bytes we have that only l = 2
bits of each x∗ are leaked. Looking at Table 1 now shows
that we have p3 = 1, i.e., every k∗ ∈ {0, 1}4·2 is a valid
partial key-column candidate for every x∗ and y∗ . For this
reason, our key search algorithm does not work anymore.
Because of the large prevalence of AES another mitigation
strategy is currently embarked by software vendors. Namely,
they are increasingly often offering hardware support of
AES in their chips, e.g., [25], rendering access-driven cache
attacks impossible.

'''
> i use Little Snitch and DNS blackholing of tracking services

Why do you need that when you can just not use things that spy on you (by your own logic)
> Was it simply accounting for the time off that you took?

Yes, precisely. Even if you try to say something like "took time off for family reasons" or "ran my own company and contracted for a year", they seem to sense something's up. In fact, I think hiding the reason why I was off hurt me more than it helped, because people tend to assume the worst (ie, "I can tell this guy's hiding something, wonder what it was...maybe he was in jail!").

In the end, I only got interviewed by those places I was honest to about being out for medical reasons (and one of those places was where I ended up working). And just getting that handful of interviews was fairly challenging, given the supposed high demand for people like me (I have experience/expertise in a high-demand area).
Sometimes someone's valuation of work is questionable. It may have had value to them, i.e. they paid someone to waste time out of pity, or their valuation could be wrong. They could pay someone to pray their stock prices increase not realizing it's useless.

There are much more obscure ways in which work can be entirely useless without anyone noticing, and plenty of ways people can end up with jobs that are pretty obviously a waste of time.
Yes, that looks like connivance to me
But guess who approves purchase orders for business software? Coz it ain't the developers...
> RejoinableTCP

actually i understood a lot from this name, but i get it
It's never silly! What if there's a chance the same effect can be recreated just by the setting and not the drug? Seems nearly impossible but I'd rather have control.
Hi all. I'm the author of this post.

If you have any feedback or questions, I'll be checking this thread.
Why would that be misjudging it?

I would say that is part of the creative process.
Don't forget the folks using a study's results to justify a program directed at a totally separate demographic (inner city study tried to applied to rural area or vice versa).
$129, jesus. A Kindle Paperwhite is $119.
Well, part of what the national distributors are paying for is the exclusive right to distribute the film within their territory. Cash up front front from an established distributor looks a lot nicer in the business plan than possible future download revenue combined with having to do your own advertising in each language market. If you can't pre-sell the exhibition/video/broadcast rights, then essentially you have to borrow at a high rate of interest to compensate people for the significant downside risks.

The fact that producer, consumer and distributor interests are not aligned doesn't mean they're oppositional. Consumers aren't incentivized or sufficiently experienced or organized to provide forward financing in most cases, distributors aren't incenitvized to give away free copies because they're trying to recoup their risky investment.
I didn't, and this is exactly what I need.
No really. It's not actually multitasking. Downvote away, it's your ignorance.
Could definitely use a pricing page, or at least a feature page. But otherwise nice job. Oh and you probably want to rework the login error message system :)
Interesting... a 25% year-over-year spike in thefts is huge and certainly suggests new theft tools are greasing the rails.
You could do undergrad online (e.g. Open University) while working, then go to a graduate school full time.
Additional migration information from TestFlight: http://help.testflightapp.com/customer/portal/articles/17687...
A friend of mine is a lawyer, she's been talking about this lawyer-programmer similarity for a while. She tried to organize laws from the more textual representation into a more diagrammatic one, which in a way is a step step towards representing laws like programming code: http://www.lexagraph.com/category/diagrams/
Do you need to buy it yet?

Don't fall intro the trap of equating using your credit card to building your business.

It's tempting to spend the early days boostrapping buying themes, registering for SaaS plans, and setting up your Trello board. But be careful. If you spend too much time on that, you won't have any code, and you'll burn out before you even start.

My advice: Code as much as possible without buying a template. When you're ready to make it look good, you can buy a template. But first, make sure you get yourself to the point where you need one.
I find it completely unamazing. Companies that are "changing the future externally" are spending their resources in one place instead of another.

Human attention and willpower are limited resources, and assuming that when someone or a company does one thing right they must be doing other things right as well is one of the oldest fallacies in the book.
That directory merge issue really was annoying. I had LaTeX installed and it spent a good three hours merging the LaTeX install directory. I restarted the install once because I thought it had gotten hung, but when it happened again after I restarted I found the debug console and realized what it was doing.

Yosemite really did have an extremely poor install process.
It should be mentioned that this article is from December 2006, when index funds were less widely adopted than they are today.
Ehhh, that's a hand-wringing, self-serving generalization.

"We have the answers. We're just not soulless enough to want to go through (and perhaps change, in the process) the effort to supply them and make them help."

Platitudes rarely change things.
Maybe you can train your Agile developers to write down "key business knowledge" in complete sentences. You don't prefer to live under the tyranny of oral tradition, do you?
There is a broad spectrum of value that is up for debate. There are amazing human beings, but also vile human beings.
What I meant by a "different class" was simply that it did not pertain to the privacy aspects of user-hostility brought up by this article.
I find it quite odd that actual diversity doesn't necessarily coincide with a claimed interest[1] in diversity. You don't advertise like all get out about diversity, and yet your team is pretty diverse. But look at the author of this post; he works for a company called Hangar who team is anything but diverse: https://www.hangar.is/team

[1] This is also called "virtue signalling".
There is no such thing as an apolitical organisation. That’s the definition of politics.

It is not a police, it has no coercive power. The reason is obvious if you think more than 10 seconds about how to get sovereign governments to cooperate on public health matters.

What would be your ideal organisation? One subservient to the American government? Or do you want it to be a world government above sovereign states? How do you think it would fly?
When I hear a story like this, the first thing I want to know about is how the incentives are structured.

The author makes a great point, which is that medical research is expected to pay its own way. So the next question I'm looking to answer is "Why is that?" What is it about the way we structure this research that made it make sense to U Penn to underfund mRNA research?
As the other commenter pointed out, default implementations (with genetic constraints!) are supported, they actually my favourite swift feature.
Put meaningful bounties on the things you want solved.
Excellent article. Loved the specific examples for collection types, esp defaultdict and namedtuples!
They do use a sliding scale.
We have one real "case study":

https://firstlook.org/theintercept/2014/12/13/belgacom-hack-...

Active attacks allow access to the keys, and once the attackers have the keys, unless the PFS is properly used, the old captured streams are readable. But often it's even easier to read the documents on the attacked machine directly.

Still, all this was known before the material we comment now. Which doesn't mean we should let PFS remain unused or wrongly used as it is now and that we shouldn't try to protect us from the active attacks.

If we worry about the decryption of our SSH traffic, do we properly use PFS? What do we do to prevent or detect active attacks?
I'm reminded of a scene in Louie where Louis CK is approached by a Hollywood producer to discuss movie ideas[0]. The producer asks him for his best idea for a movie.

Yeah? All right, well well, you know how movies, there's always a guy and his life is, you know, okay?

And then something happens, like a conflict and he has to resolve it, and then his life gets better?

Well, I always wanted to make a movie where a guy's life is really bad and then something happens and it makes it worse but instead of resolving it, he just makes bad choices and then it goes from worse to really bad, and-- and things just keep happening to him and he keeps doing dumb things, so his life just gets worse and worse and, like, darker and-- Like-- like he has-- lives in a little one-room apartment, he's not a very good-looking guy, he has no friends and he lives-- he works in, like, a factory, where they-- like a sewage-disposal plant, and then he gets fired, so now he doesn't even have his job at the shit factory anymore and he's-- and he's going broke and he takes, like, a trip and it rains, like, just stuff, just shit keeps-- horrible.

But then he meets a girl and she's beautiful and he falls in love, so you think that's gonna be the thing, the happy thing, but then she turns out to be a crook and she robs him, she takes his wallet, and now he's, like, stuck in the middle of nowhere and he's got no wallet and no credit cards.

---

[0]: Louie S2E10 "Halloween/Ellie"
WSJ picked it up
Sorry for sounding like such a fanboy, but during my 40 years on this earth, I have never been more impressed with a human being.

The guy is pushing the envelope on perhaps the most difficult engineering/technological endeavor ever attempted by a private company - and he's making it look cool and futuristic.

As if that wasn't enough, he's doing this in two different industries simultaneously.

I'm not saying he can do no wrong, but I'm just flabbergasted that there are still so many armchair critics and naysayers when it comes to Elon Musk.
Forgive me, but I'm not very familiar with the rapidly growing container-based ecosystems market, but how do all these pieces fit together? Namely:

* Mesos / Yarn

* Marathon

* Kubernetes

* OpenShift

* Chronos

There are others I'm sure that I just don't recall.

Also, how does the container approach fit in the traditional VM models of OpenStack / AWS / Digital Ocean. Are these systems aiming to ultimately replace them? Do they solve the problems of networking and disk?

Maybe it's time I spent an afternoon looking into all this.
Well, it depends on which problem one wants to attack. In this case the problem is transparency; in a world where git would be the primary legislative tool, TTIP and TPP would be stored in private git repositories.

On a related note, I remember somebody qualified in the field, who wrote here on HN how a version control tool would not be an appropriate tool to develop laws (since they are not developed like software), but unfortunately I can't find the thread.
Interesting. I wonder which library the author used for Elasticsearch, if any. For example, there is the official Java library (http://www.elasticsearch.org/guide/en/elasticsearch/client/j...) and several Clojure libraries (e.g. http://clojureelasticsearch.info/).
Criminals and marketers already know how rich you are based on where you live.

Not true.Read this:

http://www.amazon.com/The-Millionaire-Next-Door-Surprising/d...

The fact is that most rich people live without showing off. They enjoy having the freedom to do in their lives what they want but they do not want other people kidnapping their children or blackmailing them. Or just people behaving different with them because of the money.

You know Bill Gates used to park his car like everybody else in MS, until it became impossible for him to park without having 1 or 2 people ask him for money(on the tens of thousand of dollars each time).

Or ask me. I am not Bill Gates, but for people in my environment I have "made it".

Just putting my name in my HN account will significantly change how people react to my comments.
Sorry, to be clear, I wasn't attributing the lack of CAPTCHA to bots. Rather the improved usability and increased human sign-up rate to the removal of a painful CAPTCHA.
Different perspective: Mac-only is a very attractive feature for some people. I blog infrequently, and only ever do it from one of my Macs. A solid, native Mac-only app is the only way to make the best possible app of this kind for OS X.

So for me, and others in similar circumstances, it is actually a very attractive feature (and the thing that made me click through to see what Cactus is all about).

I don't care about blogging from Windows or Linux, since I don't ever do that.

(I do care about open source, though, so I would encourage the authors to open source the whole app, if at all possible.)

EDIT: Hmm, but after playing with it I see that this tool doesn't actually provide native editing, which is the part where a native OS X app would be the most useful. This tool just kicks you out to your text editor to actually edit content. (I was thinking it would be something more like MarsEdit, but instead of publishing to one of the blog services, published to a static blog.)
How am I the first person to mention Leisure suit Larry?
You might be onto something here.
Yeah, that what a properly modern designed account form given today standards can do this days.
If I recall correctly it was written as part of his research for Cryptonomicon.
I wouldn't get too hung up about it. Just having a Github account puts you ahead of the curve, and most Github accounts are just random personal projects and junk, including mine. My current employer even pointed out that I have the same problem (very few comments and not much documentation) with my projects, and I just told him "it's all personal projects" and it wasn't an issue (but YMMV obviously.)

Most employers don't care. Of the ones that will, most will only give your code a cursory glance just to make sure you're not a drooling imbecile. For those employers who actually look and actually care, maybe, have one really shiny project and refer to it your resume. Really work on some final projects and consider posting those. Although, if you do add documentation and comments, etc, then your projects will be more attractive to the open source community as a whole (which will, of course, make you look better to employers.) But do it if you want to, not because you feel you need to.
That's a pretty heavy handed definition of irresponsible disclosure.

The onus of patching security flaws is on the company, not the security researcher. Responsible disclosure is a courteous and respectful form of helping a company fix their vulnerabilities, but it ceases to be responsible if agreeing to keep a vulnerability private enables the company to swipe it under the rug.

Top security talent at Facebook and Google can patch complicated vulnerabilities in a matter of hours, days or weeks. 17 months, even for the most unsophisticated engineering team, is inane. At that point, you could have spent 17 months rewriting the entire codebase from scratch.

What the discloser did here was perfectly reasonable - 90 days is typically considered the upper limit of time for a company to fix a vulnerability. This is typically the time that a vulnerability will be automatically eligible for public disclosure on, say, Hackerone. 17 months? No way.

Also, downvoting is a valid way to express disagreement, see this comment by Paul Graham: https://news.ycombinator.com/item?id=117171
You still have to shoot down a fighter jet to disable it. An enemy can't hack the pilot remotely and safely land it on their own air strips, which has happened with drones.
“By learning from our mistakes we have successfully failed.”

The vibe I’m getting from this thread haha.
It's because UFO is never used to mean "plane of unknown precise identity or origin country". Other terms are used for those, like "plane with its transponder disabled" or whatever.

The problem is, when UFO reports occur they invariably seem to objects that cannot fly by any sort of conventional aircraft physics:

a) There are no wings. Ever.

b) They are often reported as moving slowly or even hovering, which missiles cannot/would not do.

Thus UFO has come to be synonymous not with its literal meaning of a flying object that doesn't light up with proper ID codes on radar, but a flying object that is not merely unidentified but unexplainable. Unexplainable Flying Object would be a more accurate expansion given how it's used. That doesn't automatically imply aliens, but the whole "secret military breakthrough" angle is no more falsifiable than aliens are.
Note that the city did nothing of the kind. They adopted a resolution stating their intent to reform the zoning code by the end of next year, a non-binding and thoroughly unambitious bit of foot-dragging.
As I've said elsewhere, the $29 and $99 support plans for AWS have to lose AWS money. At least a (fairly long) while ago the support was nuts through these. Total expert level / out of scope. Frankly I'd encourage them to hold scope a bit more but its obviously working for them.
TF-IDF algorithms like BM25 do not come built in, but are straightforward to implement on top of postgres' text search:

https://www.alibabacloud.com/blog/keyword-analysis-with-post...

The key is you have to compute the IDF into a side table using the ts_stat function, since this is a global property (inter-document frequency) of your corpus. Once you have your IDF table you can write a ranking function based on that table.
In Japan such hopes can be replaced with digital celebrities, and DMM games characters
https://japan-animemusic.com/en/news/%5BAnime%20Key%20Player...
> raising White children to be White is a form of child abuse

That's off the rails! How many Fortune 500 companies were circulating her books in "recommended reading lists?"
How about twelve tens for 120? That how it sounds to me ;)
Wow, you must be a riot at parties.

Some of us serious engineers actually enjoy these sorts of things.

(also, if you can't build a functioning barbot for less than a grand you are a bad engineer and you should feel bad)
> But who needs typescript for that?

Who needs javascript if you have dart? Who needs dart if you have go? Who needs go if you have erlang? Who needs erlang if you have c? Who needs c if you have assembly? Who needs assembly if you have binary code? Who needs binary code if you can just control electric signals by manually plugging and unplugging a cable to the wall?

Apparently all you need to build a good website is a power cord and some patience!
Do you legitimately not know the differences between these various groups? There is a lengthy process that takes years to become a citizen and only citizens can vote. There are a variety of legal options to come to the US to study, work, and live without becoming a citizen.
How do you set it up though, on the OS or in each app and with what software?
I appreciate you taking the time to tell me how to think. I know what I saw both locally and on TV. You can give me as many bubble-filtered thoughts as you like, but you're trying to convince me that I saw and experienced something that I didn't see and experience.

Let me know when I can't get my wife's medication again because right wing ""terrorists"" smashed up my pharmacy, or when parts of my city are completely off limits for violence, or when one the teachers in my school district gets arrested for assaulting somebody filming them burning a car. I'm not losing sleep over congress getting delayed for a couple of hours. I'll keep my perspective that all political violence is bad, and that I want little to do with politics in general, but one side of extremists in particular has caused more problems for me than another.
In particular remotely denoted "Kill" devices. Which destroy the entirety of the laptops contents.

Encryption by itself is likely not enough to secure the contents from a nation state actor.
Ah this takes me back. In a previous life, 5 years ago I was working in Carlo Sequin's graphics lab in UC Berkeley and I was writing a software to make things like this (focused on non-orientable meshes). You need to see his crazy room. It's basically surrounded by things like this he collected his entire life.

His numberphile video: https://www.youtube.com/watch?v=3_VydFQmtZ8

NOTE: I think he cleaned his room before that video, he has way more toys around usually :D
This logo is garbage, I can't mince words about that.

Looks like an obscure chinese/japanese app company logo.
> If you're worried about logical fallacies like Whataboutism, you've just committed an Ad Hominem.

That's not what an Ad Hominem fallacy is.
The US Capitol belongs to the people. There are risks from that which fall on the people who serve there. In counties with monarchs there are different traditions expressed by the architecture of public institutions and the seats of power.
Black Panthers were literally insurrectionists and wore that badge with pride.
> millions of people of this country can’t be trusted to personally vet what they read/watch online?

How dare you. This is the epitome of an elitist attitude, isn't it? Reeks of privilege, honestly, and that's not a term I use lightly, considering how abused it is today. You must be so much smarter than all these people, because you agree with the mainstream take on everything. How high status of you! Why, if we had a class system, I'd have to assume that you view yourself as a Brahmin, and these millions as Untouchables who are not fit to make their own decisions about what information they consume.

This is a morally reprehensible attitude. You would turn over people's freedom to corporate gatekeepers and pretend that it's "for their own good". Do you understand what it means to be an apparatchik? By saying things like this, you make it clear that this is the role you're hoping to take on for yourself under the coming totalitarian liberalist system. Do you also inform on your neighbours?

> what’s right is subjective

What an easy way to weasel out of moral accountability. OK, if that's true, then for me and for millions of other people, "what's right" is absolute freedom of speech, extending to online, even when it makes people mad or uncomfortable to have to confront ideas they disagree with.