jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Hey.. neat project!

From the docs at https://docs.doppler.com/docs/share-security :

> 2. Client-side JavaScript generates a cryptographically random 64 character passphrase
> 3. Client-side JavaScript generates a symmetric key using the passphrase, random salt, and 100,000 rounds of PBKDF2.
> ..
> 5. Client-side JavaScript create SHA256 hash of the passphrase
> 6. Client-side JavaScript sends the encrypted secret, hashed passphrase, and expiration details (days/views) to the server.

Using PBKDF (or any other "key-stretching" algorithm) is appropriate to prevent someone from cheaply building a table that maps from potential passphrase (+salt) to the potential symmetric key, ahead of time, and then quickly testing lots of potential keys against the encrypted data. If the passphrase is not full-strength to begin with, this is an important step.

But.. if you then send a non-stretched, simple hash of the passphrase to the server, you're giving up all that benefit. The server, anyone who breaks into it, or someone who can snoop on the conversation, gets to perform the fast pre-computed dictionary attack against the passphrase. You've prevented the ciphertext from being used as a cheap oracle, but allowed the server's hashed-passphrase to serve that role instead.

The document didn't say what character set was used for each of the 64 characters of the passphrase, but even if it's just hex, that still gives you a 256-bit key, which is effectively infinite. So in this case, I don't think you need the PBKDF.

If the passphrase were not that strong, then I'd recommend protecting both values against being used as an oracle:

1: run the passphrase through PBKDF (or Argon2, or bcrypt, whatever) to produce the "stretched passphrase"
2: hash the stretched passphrase one way to produce the encryption key, e.g. key = sha256("key:" + stretchedPassphrase)
3: hash the stretched passphrase a different way to produce the hash that you reveal to the server, hash = sha256("hash:" + stretchedPassphrase)
4: never reveal stretchedPassphase to anyone else, or use it directly for any other purpose

That way a dictionary attack against any of the revealed values are equally difficult. This is effectively the scheme we used on Firefox Accounts to protect the Sync password: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... .

Also note: don't use different PBKDF round counts as a distinguisher, i.e. hash = PBKDF(rounds=10000, passphrase) and key = PBKDF(rounds=10001, passphrase). That amounts to the same thing, someone who learns the hash will get a cheap attack against the passphrase.

thanks for building this!
50 years too late...this has been going on forever...they never investigate penny stocks or their broker ilk...pump and dump
boox air has full android. I use google books but you won't be able to use google docs for writing because apps need to be designed to account for eink latency.
What happened to voice commands in cars? I have a 2012 model that's about perfect from an ergonomics point. That is tactile buttons got first choice on positioning and every button is easily reachable from my driving position and there is an overall logic to the ordering of the buttons. Plus some of the buttons have little bumps on them similar to the home keys on a keyboard. The touchscreen got second choice so it's a little awkward to work, but that's fine because you're not supposed to fussing with it when in motion. The manufacturer tried to compensate for this by giving you voice controls to do things on the touch screen/nav system but you have to say the magic words just right so it's kind of a meh experience, as was a lot of that earlier voice controlled stuff.

Went into look at the same model of car in 2020. Now two touch screens and just a few buttons, also no more voice commands. Tested a couple similar models that did have voice, but it feels like it has barely progressed, especially when compared to say Siri.

We did't need all these dual touchscreens and such. We just needed the voice commands to get better.

One insight I did gather was that my 2012's buttons were apparently costly to the manufacturer since they had to worry about the feel of the buttons, their layout had to be worked out, you have to make sure they hold up, it's moving pieces you need to quality control in your build, and of course if you ever want to redesign this cabin you have to do it all again for those faceplates. So touchscreens are cheaper. Which is probably why even though a lot of manufacturers probably know they could offer a better overall experience if they put more effort into the buttons, they go with the touch screen.
TRIVOLTY demo:
https://www.youtube.com/watch?v=tUN1S-SXO88

Twitter: @TrivoltyCompany
Facebook: https://www.facebook.com/trivolty.crystal
Instagram: trivolty.crystal
Some think that use of psychoactive substances were key to humans becoming "humans" and developing the capability for higher reasoning. What makes it not "human" to alter your mental state?
Radenso Theia does that.

But they are suffering from the chip shortage.
I was interested in using it as an X-band and K-band capable SDR receiver, which is a supported use case according to their media.
But we'll see when it ships.
My school requires internships. I don't know anyone being paid under $15/hr, and I know a few that are $25+/hr

Edit: Also, Boston area.
Looks like what we need is a distributed P2P implementation of Delicious. That way it's no longer dependent on any one provider.
Still, the scientists acknowledge that it is rather easy to find a variety of statistically unlikely properties in a large dataset like the CMB

One is reminded of "Assassinations Foretold in Moby Dick!" as an example of this error (http://cs.anu.edu.au/~bdm/dilugim/moby.html)
Music lives in the cloud too.

I have several well-defined Pandora stations. I listen to some other sources as well (WWOZ, bassdrive.com, etc).

I used to argue for hosting my own email, now I don't even "host" my own music.
I do web development. My code runs on headless Linux boxes, so I want to develop on something POSIX. So Windows is out.

I've tried Linux every couple of years since at least 1998 -- I really want to use it -- but I always end up searching forums for the fix to a broken Makefile for a printer driver. Or maybe it's sound, wireless, graphics, whatever. Still. After all these years. I HATE dealing with that stuff. So Linux is out.

OSX is the only man left standing.
oh is that all. An entire generation were taught cryptography on the back of AC, so he definitely the widest read crypto dev.
Not sure about that, but if the FBI were conducting any investigations where they were able to exploit VPN traffic because of a hole in OpenBSD, it would show up in a trial somewhere (and if the prosecution do not present how they got the data, a defense can find out through discovery).
I'm sure the next person will be directed correctly, provided they bother to ask.

I think more common will be someone will find the flash area and buy a non-Samsung part than it will be that someone
will find the Samsung area and being torn between buying a television or some flash storage.

Fixing it so shoppers can serve themselves effectively seems more beneficial for shoppers and BestBuy than fixing it so employees can more effectively cover over the inability to self-serve.
For those asking, it's in section seven, additional clauses:

Notwithstanding any other provision of this License, for material
you add to a covered work, you may (if authorized by the copyright
holders of that material) supplement the terms of this License with
terms:

[...]

c) Prohibiting misrepresentation of the origin of that material,
or requiring that modified versions of such material be marked in
reasonable ways as different from the original version; or...
You definetly learn a lot by having kids. The first kid, you measure water temp, the second kid you just put your finger in. The third one, just the kid. Slightly exagerating, but by the second kid you don't have to relly as much any more on outside advice.
Who's on the low end? Even junior positions are paying close to 100k in some areas, with juniors in the bay making more than that. There are some true-entry level positions and areas (midwest, less urban) that pay less. Academia as well. But if you're talking about overseas devs, even they are charging more these days (40+/hour) for any sort of quality work. You don't want anybody touching your app (or having access to your code) if they don't have a high level of skill and professional accountability. Outsourced teams are often used for MVPs or prototyping - but then these companies call on devs like me when they get serious about their product. If teams of poorly paid devs could compete with highly paid devs, they would already be doing so - outsourcing of development started decades ago and the trend has reversed. You get a much better product with someone who has an intimate understanding of your business and your application, so "gig economy" type of work is generally limited to wordpress-style sites for your local pizza shop.

As someone hiring devs, the push is always towards higher pay. Even with competitive salaries, it's hard to find good senior devs. That tells me that our pay isn't competitive enough (or our recruiters suck, but probably both), which is just going to push our salaries higher.
I love this take and believe in it whole-heartedly. It's very similar to how every shits on each others diets. Some people only eat rice, some potatoes, some meat, and some exclusively ocean. Humans are very versatile and durable and really can make due with most things. The same probably applies to raising children too.
The US is better than China internally, but I mostly agree that China is not substantially worse than the US in terms of foreign policy.
I was hoping there was a rpi port. It seems this is x86 only.
The target audience is mostly a subset of former Amiga users, and the occasional person curious about retro-computing who is more focused on the software than hardware side.

Yes, it's a current project - the mailing list is more active than it has been for a long time, though the number of developers active at any given time is probably in the single to low double digits (for a very generous definition of "active" - people sometimes pops up for a single patch and then disappears for years; this is a niche project).

[I wrote most of the scrollback support for the console handler about a decade ago. Haven't done much with it for years.]
I suspect that pram vs carrying thing has a lot more to do with practicalities then anything else. Quality of sidewalks, availability of good changing places, how far you need to go and how much stuff you carry.
More links on this page:

http://www.leansoftwarearchitecture.com/home/more-online-res...
http://code.google.com/apis/buzz/

Activity Streams,
PubSubHubbub,
Salmon protocol on the roadmap
or... just sharing the idea and not muddling it up by involving the people aspect (who said it)
Yeah, I use the rdesktop command to remote in to the Windows machines at work. Works great!
Which makes it no less problematic.

It's still an unsupported moral claim.
Yea, that would be useful, but I doubt they Google with partner up with people like Skype or anyone.
How China Uses High-Tech Surveillance to Subdue Minorities: https://www.nytimes.com/2019/05/22/world/asia/china-surveill...

53 Hong Kong democrats, activists arrested under security law: https://hongkongfp.com/2021/01/06/breaking-over-50-hong-kong...
I like the idea of spatial audio, I think that is the main thing missing from virtual happy hours and whatnot.

I cant try it out right now. Does it have a limit to how many people can occupy a space? can you control how far your voice projects?

I am thinking of something like a work christmas party where everyone breaks into groups and then walks away and tries another group for a bit and talks to different people. Then someone gets everyones attention and talks loudly or into a microphone for a bit, then it goes back to normal.

In any case, good luck, it sounds great, I cant wait to try it.
I have no evidence either way, the truth might as well be in the middle (many like it, many hate it). In an attempt to show how "double standard" GP's opinion was I just repurposed the argument that one party failing to counteract an opponent which has more power than them, being dominated instead, is entirely the fault of the weaker party. I replaced "the EU" with "the Chinese people". To my surprise GP went on to confirm even this exaggerated interpretation of mine, later adding that allowing them to make the mistake and implicitly paying for it is the only way the weaker party will learn to be strong. Such opinions are far too cynical and extremist for my taste.
Has anyone outside US has had any success to be interviewed by one of these big companies? (it does not have to be a FAANG). I have worked a lot in my interview preparation but then I get stuck in the "We wont sponsor any visa" wall, especially grating in the case of Canada because that completes the circular requirement that in order to get an express visa you need a job offer.

It seems to me the only realistic option is to be hired at your home country, but the country I live is very small and I am not legally allowed to work here in any case.
Not everyone has the disposition to teach and lead.
What does your username mean?
The first paragraph in the "Isolation of single emitters in silicon" section of the scientific paper[1] says that they "implanted" carbon ions into silicon. The rest of the paper discusses how they were able to detect these point defects (carbon atoms).

The outlook, as other commenters mentioned, is that this means we could theoretically detect other single atom point defects in silicon, such as impurities or quantum dots.

[1] http://doi.org/10.1038/s41928-020-00499-0
A good portion of the images/video are spam - take that into account.
I'm glad there's a non-flash version of this, but if you use a mac, RegExhibit is awesome.
Pretty much the only "merge" that would happen anyway is if Oracle donate the Trademark, and all other rights to The Document Foundation. I mean, it's hard to see why the Libre Office folks would want to go back anyway. I think it's safe to say, that from Oracle's point of view, that ship has sailed.

The only "merge" that makes some sense is to release a build of Libre Office under the name "Open Office" for the sake of those folks who have gone through the process of getting Open Office the "approved" Office solution (and have no wish to do it all again for Libre Office).

Mind you, nothing stops Oracle from taking the Libre Office code, and merging it into Open Office if they want to. They could even copy the Libre Office code "as is", rebrand it as Open Office, and release that.
good point. Make people log in to comment (and use that to judge expertise), but anyone can vote for whatever. The fact that I make a lucky guess about something that eventually happens, doesn't make me an expert. What the person says to back up predictions however is a real deciding factor.
In which language should I build my webapp?

Feel free to mod me down, but lately ending sentences with prepositions has become nails on a chalkboard in my mind.
Yes, I know that avoiding this makes everyone sound like Victorian gentlemen, I'm sorry.
France has four times the population density of the United States.

This doesn’t even begin to factor in just how sparse rural areas of the United States really are.

The places that would see the most benefit are the suburbs, and ironically many blue states would benefit the most; and also have a rampant amount of NIMBYism to prevent this from ever happening.
Surely. I am trying to get much information before my upcoming meeting with a CPA so as to be ready with all my questions.
We currently use stripe + taxjar, but it's too complex to handle for a side-hustle in my opinion.

I have heard of https://paddle.com/ , which is a payment service + tax handling. Basically it's like apple's app store. You sell your creation to paddle, and they resell it. So they will handle taxing and you get royalty. it's way easier.

I have never tried them, but if I were to create a side-hustle, I will consider paddle.
I understand the person is bitter, but owning 2% of a failed company that sells for scraps doesn’t net you anything.

Remember when you raise money, that’s not just free money that you suddenly own a percentage of. Unless you manage to make the company worth more than the investments put into the company you don’t get anything, no matter how much the company sells for.
That’s both reasonable and should be expected.
Their growth rate is staggering, and they are enormously profitable. I was most stunned by the gross margins. They spend so little to make so much. It illustrates how feverish the crypto investing world is.
At that price point it’s going to be competing with the Tesla Model 3 once Musk gets the price point closer to his $30k mark. It’s a great idea, but it needs to be 50% cheaper.
Our Embedded Controller firmware is based on chromium ec, and we're using a mature off the shelf BIOS solution shipping in other notebooks today. We chose our key components with driver stability across both Windows and Linux in mind. We know this is something we have to get right to deliver a credible competitor to all the great notebooks already in the market, so it is something we focused on from the start.
All of these publishers are also an impediment for the progress. Just look at more modern approach for the scientific publishing - Authorea[1], PubPub[2], some similar platforms.

[1] https://www.authorea.com/

[2] https://www.pubpub.org/
You mention Go as an alternative. I'm curious how Go is any less arcane.

http://www.quora.com/Do-you-feel-that-golang-is-ugly/answer/...
They won't let me. Despite working for over a year in what's essentially their employee-tech-support / teach-me-how department. But yes.
Isn't obvious way to fix outdated setup guide is to write-edit new? (if it will cost less time to you rather than teach everyone in person)
What are you working on nowadays?
I find the possibility of failure very real; it is this possibility that serves as one of many factors that motivates me. I realize that I almost see it as a game: the opportunity to lose makes me more competitive. This line of thinking is analogous to a poker game: no one is competitive unless the chips are worth something.
Could you elaborate on your lost opportunity point? Are you suggesting that the inability to focus on a particular idea can be crippling?
I use multiple Firefox profiles to help with this: personal, work stuff (non-dev), API docs, and dev. I have different add-ons for each--e.g., NoScript in the personal profile and Firebug in the dev profile.

I'm never tempted to open Reddit/HN/email/etc in my work-related profiles because I hate the idea of polluting my browser history.

The other key to this, for me, is virtual desktops that roughly correspond to the FF profiles. There's at least a little effort involved in switching desktops, but sometimes I need to shut down the personal FF instance, too.
As long as they can grow their userbase they make $4 per person. That's potentially billions of dollars to burn before they have to think about charging yearly which is probably what they will eventually do.

They also have an enterprise edition which is more expensive.
Doesn't sound like that solution is plenum-rated.
Obligatory Quentin Skinner link: https://youtu.be/gH-NxQmf87k
and by send I mean network confirmations + generating zkSNARKs on the client. IMO for a payment network to work, my mom needs to be able to use it and not be frustrated. Venmo barely clears that bar
This decade is the time to engage in a public discourse about what we want from our devices. Really sit back and think about what makes us happy. Hardware and software design can begin to nudge us toward some healthier, happier ideals. One small example: the incorporation of blue-blocking modes (f.lux, night shift, etc.) for night time usage. Some people love the addition of time limits that ensure they don't use apps too much.

I am optimistic that the best social media sites have yet to be designed--rather than optimizing to squeeze the most engagement, ad dollars, or whatever, I like to imagine algorithms that seek to encourage pro-social behavior, friendliness, happiness, fun, healthy habits. We may discover that Twitter and Facebook are fundamentally incapable of doing these things as well as their future replacement, whatever that may be.
> But they built a newer taller building right next to it - that's the one in linked article.

I think that building also dates back to the war.
Suddenly it feels like the 21st century!
The second accident should be something EMS can pull someone out of from other doors. People would be stuck in the first and third, but those images don't show vehicles being incinerated.

It's possible, but not likely to have both a multi-car or large vehicle pileup that blocks all the doors and a fire.
the problem is not just when you wrap it, is that if you move the cable in any way (say, move your laptop around, trip on the cable, etc), it will bend in that spot.

If you tie up your cable in the loop-up-then-down-then-sidewise it will improve things, but then you will put it in your bag and it will bend at that spot anyway as soon as some pressure is applied on the up-loop.

This is why every manufacturer uses strain relief, including apple now.

Saying "users are using the product the wrong way!" is the epitome of form over function.
Towing capacity tends to be limited by braking/stability, not power.
An April Fools joke.. in November.

This is possibly the ugliest car I have ever seen - its less lovable than the Aztek.. somehow.
For it to be sold in Europe doesn't it also have to comply with European laws? Would Tesla create a second version of the truck for Europe?
I'm not an economist, but this seems like a strange index. Is job quality really binary? Are pay and hours sufficient to make a binary determination?

Without analyzing the data, it seems like a proxy for income inequality. If salaries go up for top earners, but stay stagnant for everyone else, then more people have a "below average" income, even if their hours and pay are unchanged.
You act like that doesn’t happen here...I just read a story in the LA times on how organs are being harvested from the recently deceased before a proper investigation can take place