jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
As someone who didn't really know what they were doing, I used NaCl recently to write a program to tunnel packets over UDP.

I started by reading the NaCl source and all the introductory material available—the web site, the two NaCl papers ("Cryptography in NaCl", "The security impact of a new cryptography library"), and quickly reviewed a couple of other papers (e.g. to understand deterministic encryption and D-H key exchange). I think the biggest problem I had was to understand nonce generation and handling properly. The "Cryptography …" paper does contain some advice that I ultimately implemented. But I had to think very hard about what it said before I was confident that I was doing what it said. For example, it says:

«…the nonce can be chosen as a simple counter: 0 for Alice’s first packet, 1 for Bob’s first packet, 2 for Alice’s second packet, 3 for Bob’s second packet, 4 for Alice’s third packet, 5 for Bob’s third packet, etc. Choosing the nonce as a counter followed by (e.g.) 32 random bits helps protect some protocols against denial-of-service attacks. In many applications it is better to increase the counter to, e.g., the number of nanoseconds that have passed since a standard epoch in the local clock, so that the current value of the counter does not leak the
traffic rate.»

I managed to figure it out, but I would certainly have welcomed a more detailed explanation, and would have been very happy to have help from the code to do the right thing.

In contrast, the cryptography functions were easy enough to figure out and use (with the C API). The only mistake I kept making was specifying the secret key first and the public key second in all my function calls. Once I got used to doing it the other way around, it was fine. Zero-padding the messages was slightly ugly, but I didn't develop any especially strong feelings about it. (Aside: I actually ended up using TweetNaCl, but of course all the documentation is the same.)

I'm very pleased with the resulting code, anyway.

P.S. I looked at libsodium, but greatly preferred the unadorned library.
Ok, so how do I know my VNC is secure?

[edit] I don't have anything like VNC set-up, but maybe we (I) can learn something from this.
yoda time seems not to be affected:

* Y year of era (&gt;=0) year 1996
* x weekyear year 1996
* y year year 1996
ILLA cloud (https://github.com/illacloud/illa-builder) is another very good alternative to retool. We are 100% free for you to self-host your projects. We have a well-designed built-in component library for you to drag and place to build your tools quickly. ILLA is also trying to expand our collaboration with many open-source projects and databases.

Repo here: (https://github.com/illacloud/illa-builder)
". . . a vengeful breeze forces damp chill to the bone. Sullen gray clouds occupy the sky, dispensing an apathetic drizzle."

It's an interesting subject to be sure, but it's hard for me to want to read the rest of the article when the first paragraph finishes like that.
Pair programming was never intended to be a full time mode of development. Half an hour once a week (or whenever) is good enough, and can help with mentoring junior developers. But it is really moronic to do that full time.
There's the threat of significant regulation. I think there's a reason why Zuckerberg feel the need to go in front of Congress, rather than telling them to go bark up a tree. It's also quite amazing how quickly all the payment processors shut off WikiLeaks, based on pressure from US senators.

Companies can, however, be banned from the US for overtly political reasons. See Huawei and ZTE.

I agree that Chinese CEOs walk on thinner ice personally, and that they can be thrown in prison or worse much more easily. That's a general problem in China. However, the easy way in which Americans claim Chinese companies are run by the government is not true. It's also true that large US companies are thoroughly embedded in the government and vice versa (the massive defense sector, parts of the tech sector).
Bingo. It would certainly be wrenching for GP to move from their current life to somewhere less car-centric. But the issue (predominantly in the US, apparently) seems to be that a car-free life simply isn't on the menu when people are making the lifestyle decisions around settling down. Or maybe HN is poorly populated by the people who choose a car-free life.
> It does not provide read-after-write consistency

So, this is probably the last "database" you should ever opt to use, unless you're in a very serious bind.
Buy a pre paid Visa card in cash and rent a box from a cloud/VPS. Install OpenVPN etc and set up auto updates.
Thank you for writing this. Much like the fear you expressed, I'm going to delete my account as soon as I lock in my next job.
I had some issues following along since I didn't know what Genode was.
At first I mixed it up with the AMD Geode processor which was quite confusing.

https://genode.org/ has it up front:

We understand the complexity of code and policy as the most fundamental security problem shared by modern general-purpose operating systems. Because of high functional demands and dynamic workloads, however, this complexity cannot be avoided. But it can be organized. Genode is a novel OS architecture that is able to master complexity by applying a strict organizational structure to all software components including device drivers, system services, and applications. The Genode OS framework is an open-source tool kit for building highly secure component-based operating systems. It scales from embedded devices to dynamic general-purpose computing.

keywords:
capability-based security, microkernel, principle of least authority, sandboxing, virtualization
But it comes at a cost: this is the reason why struct declarations need to end with "};" in C.
Uses alpine images for small footprint

That's really become a docker meme. Please be aware you're sacrificing performance due to not using glibc.
If they have a "no hats" dress code, sure. But if hats are generally allowed, and then they disallow you for your hat, that is illegal.
After asking: "Am I crazy or is everyone else right now?" the answer 'You're crazy' should be acceptable.
I had to abandon my 2012 macbook pro for a new intel mac earlier in the year after it was overheating and killing keyboard and trackpad input during zoom calls, but before our modern zoom based world, what a beast that computer was. Perfectly performant for typical tasks, unlike computers of old that would struggle to run the latest OS after four years.

I'm eyeing the ARM macs, but I think it would serve me well to wait at least two years for software to become more compatible and kinks worked out. People in my field have been having some issues with ARM and rosetta2, even having to return laptops.
I love these little simulators because while they purport to show that slower more polite driving is more efficient, more often than not they show the exact opposite. Want to shove the most cars through per hour? Remove the speed limit. Accelerate and brake like every intersection is a drag race. Leave absolutely no distance between cars. And dump any notion of polite lane changes. NASCAR was right: Minimize unused pavement. The most efficient way to move large numbers of cars down a road is at 200mph with only inches between each car.
But who are selling in large numbers? Individual sellers won't have the capacity to absorb the demand.
It actually supports more profiles: http://copy.sh/v86/ (for example running a Solaris or an Arch Linux)
This is not true. It's about the "freedom" not to change canons that have lasted thousands of years just to be politically correct, which is not freedom, but arm-twisting.

So, pick your religion carefully, folks. At least in America you have many denominations to pick from.
That's a great video, and you're right about the "extremely complex ..." stuff.

But helicopter crashes are frequently survivable. Here's some anecdotal evidence. Long ago I knew an ex South Vietnamese Army guy who crashed two helicopters in a single day during the war. Also my old boss, Annapolis grad, once mentioned crashing a helicopter somewhere in Texas. Even knowing that, I still flew with him in his Beech and in his Aeronca Air Knocker. The younger we are, the more we believe in our own invulnerability and good luck.

Having said all that, I share your trepidation. Fortunately, today's commercial jets are orders of magnitude safer (as measured by actual crash statistics) than helicopters and general aviation fixed wing aircraft.
I don't understand, they say "all you need is a screen". What about they keyboard. You need a wire, a screen, and a keyboard. This seems ridiculously impractical, i would rather carry a tablet or a laptop. Where, in normal circumstances, am I going to show up to a place that has a keyboard and a screen, but not a computer?
Where did you get the > 100000 H1B's number?
Out of those stories, which one ended up being a commercial success?
Amazon EC2 is HIPAA compliant. As such, it has specific restrictions in place. Quoting from http://d36cz9buwru1tt.cloudfront.net/AWS_HIPAA_Whitepaper_Fi... :

> For Amazon EC2, AWS employees do not look at customer data, do not have access to customer EC2 instances, and cannot log into the guest operating system. AWS internal security controls limit data access.

Yes, since they have physical access to the machines, it's possible to get access. However, it's not designed with that in mind. Adding that capability would make it harder to be HIPPA compliant, which is something they want to do. Also, there's AWS GovCloud http://aws.amazon.com/govcloud-us/ for government computing which has its own level of confidentiality. It's more expensive to have 3 different infrastructures than one.

There are many whitepapers about running #3 on EC2. I think your lack of knowledge isn't a useful guide.

As for (4), my own data system does about 40 million SHA2s during a database update.
The article makes that assertion, and implies that their is more evidence beyond correlation, but never shows this. Clean water, is likely to be so highly correlated with IQ due to any number of other factors I think it will be extremely difficult to disambiguate.
Typically, shackles of this sort have a safety factor of 5, meaning that if the maximum working load is 120 tons, the minimum breaking load should be >= 600 tons. Strictly, once the maximum working load has been exceeded, the shackle should be considered compromised. I don't have experience with any shackle on that scale, but my feeling is that you ought to be able to expect a good shackle to withstand 30 pulls to half of its minimum breaking load.
"... capitalizing the first letter of the first word in a new sentence. ..."

Faster to type, easy to run a bit of code to achieve.
If you search for dolby headphone on youtube, there seems to be alot of mixes of a presumably similar (commercial) technique being used to encode the audio from some music that was recorded in 5.1 (https://www.youtube.com/watch?v=547i8RSveZs).
The 5's screen form factor hasn't been taken advantage of at all, the new enclosure, while nice, you literally cannot call innovative, LTE isn't innovative, it would've been 4 years ago but last year it was old news. And the lightning connector isn't innovative in a world where it's getting clocked hard by USB 3.0, which was a done-deal standard by the time Lightning was announced.

The 4S, while having a better camera, it wasn't a huge jump, and Siri was software they removed(which had more features) from the 4's app store.

The 4 was the last truly innovative iPhone- no one was talking screen density, and they nailed it. The new camera was a gigantic step up, the front facing camera was as well.

Also, you missed with the iPhone->3G that the App Store came into existence.

As to the iPad, the iPad 2 was commonly referred to the moment it came out as "The iPad that Apple meant to release." because of all of the small, but numerous, improvements. Adding Retina to the 3 is arguably a similar jump, though admittedly I don't have a lot of room to really know, as I don't own one.
There's some discussion here: https://www.marshut.net/kupiti/3347-lizardnsa-relays-on-goog...
Contrary to the title, much of what he talks about is problems of badly designed urban areas.

He must be better to listen to if you already agree with him. I am interested in the problems of urban/suburban design, but he comes across as a bit too flippant after a while.
Don't forget that you can get the Nunchaku (scroll down a bit) and attack the page, akin to the Asteroids bookmarlket.
Isn't the fact that the article gets voted up proof that a substantial number of HN'ers want it here (again), no matter what you think?
I use sorted sets for a lot of stuff (timelines mostly). A few other examples are job queuing, error logs (I write all error messages to a fixed length list), and rate limiting. Actually that last one works pretty well. The key is something like:

v1:limiter:UNIQUEID:TYPE:HHMM

where UNIQUEID is a username or IP address, etc, TYPE is the specific action to limit (login, signup, etc), and HHMM is a quantized timestamp (e.g. 1205, 1210). You increment this key every time the action occurs and use an expire to keep it clean. It's not perfect, but it does the trick for most usecases.

I also make pretty judicious use of databases to group different classes of data together. Primarily into 3 groups actually: transient data, persistent/customer data, and internal stuff like the error logs and job queues. That way I can dump data at different intervals for each group (I use a tool I wrote called redis-dump: https://github.com/delano/redis-dump).
Another interesting snippet in that article is the bit about the judge banning the use of Twitter to broadcast commentary on the proceedings.
I think we've ended the historical period where younger people will always be more tech-savvy than their slightly older counterparts. I wonder if having internet and ubiquitous connectedness just be a part of the background for younger people will actually make them less likely to be early adopters of something unknown or up-and-coming.
It is called cargo cult computing.

People understand the security importance, they hear the words, and instead of applying them, they disguise as monkeys and are repeating the words ad nauseum while throwing bananas at people's faces expecting security to happen.

It is also happening in OS, sysadmins, science...

You are not the only one to experience this.

Stay light hearted :) anyway, you are closer to the retirement they are, thus you will have less mess to clean.
Bingo--author mentioned sexuality, which is something that is specifically best left to fieldwork instead of reading Wikipedia and books...and yes, I'm speaking from experience.

Talking to people at parties and raves and orgies and meetups is going to give you much better experience and understanding.

And as for the non-sexual relationship stuff, I'll attempt no general claims at this time.
Bazaar is basically unmaintained at this point. If you look on Launchpad, the trunk branch hasn't seen a commit since December 2014 [0]. There hasn't been a release since August 2013 [1].

Mercurial is very actively developed, with dozens of patches a month [2]. They also keep to a planned rolling release cycle [3] along with deep commitments about backward and forward compatibility [4].

New features like the experimental evolve extension [5] are also really cool. I use it for day-to-day work and find it incredibly useful for editing work-in-progress commits into nice self-contained patches.

[0] https://code.launchpad.net/bzr/trunk

[1] https://launchpad.net/bzr/

[2] http://selenic.com/pipermail/mercurial-devel/2015-March/thre...

[3] http://mercurial.selenic.com/wiki/WhatsNew

[4] http://mercurial.selenic.com/wiki/CompatibilityRules

[5] http://mercurial.selenic.com/wiki/ChangesetEvolution
Amen brother. Tragic that we haven't even good back to the 80s
It's widespread because they can be used to store values (ephemerally.) For things like session tokens that need to be accessed quickly and often, but change rarely, using a cache (e.g. in front of an RDBMS) is often a decent choice.

What amazes me is that the best argument against using a cache is "your cache server might run out of memory."
> When: 43% of americans don't believe in evolution.

I don't "believe in" evolution and I'm not a creationist!
> The brain is pretty hard to exploit.

No it's not, just ask any advertiser.

> You can't trick it into thinking an image is pornographic just by changing the color balance.

If the only data someone has about an image is its colour balance and you asked them to classify which they think are pornographic, then yes you can.

It's a pretty stupid idea to impose such limitations though, on humans or ANNs. Even if you did only care about colour balance, you don't need an ANN to tell you that; just scale the image down to 1 pixel x 1 pixel, then look at its colour.
But the CEO said that even if he wanted to he couldn't abide by the CCP's demands? /s
The computation of early (primary school) math courses could be done with a counting board, which is a type of general-purpose computer with memory consisting of buttons/coins and a human for a CPU.

Later (high school / undergraduate coursework), it would be good to use a programming language like Python or Julia or Swift ....

I also think students should spend at least a few weeks or months using a slide rule and printed tables for basic arithmetic, but more to learn about logarithms and mathematical history than to learn about computational mathematics per se.
Likely Law Enforcement Officers but their statement applies if it's Low Earth Orbit. Anything would be well above the general population if done in orbit!
> Is there a reason you're so defensive

> Please stop projecting your need for social justice on me

Personal attacks are not allowed on Hacker News. Please don't do this here.
Even though people are saying this is a matching contribution scheme, I will say OK, lets go with that.

In 2018 -- 2020, no mention of Apple above 4999, so this is still a case of 'free labor' for Apple. Also IIRC Apple also took some userland from NetBSD, they got nothing from Apple.

So what does that say about Apple ? Microsoft gave above 10,000 last year to FreeBSD.
the clozemaster is about language learning.And look like you can not create your learn resource.

With the service, you can prepare any kind of knowledge to study yourself or get it from internet, please reference [1]

https://noat.cards/explore/
The comment from the article echos my own sentiments:

> Speaking solely as a person who is really into encrypted messaging, it terrifies me that they're going to take this really clean story of an encrypted messenger and mix it up with the nightmare of laws and regulations and vulnerability that is cryptocurrency.

Moreover, there are three other points I'd add:

1. I don't like "do everything" apps like WeChat or Line. One of Signals strengths was UX that focused on it's core competency. Early in Signal's development they would add privacy features. Lately they have been adding social features. This, however, feels especially out of left field and likely to hurt the UX.

2. This smells like dev resources will be spent building and maintaining something not related to messaging.

3. I've always had a "don't let perfect be the enemy of good" rationalization that gives Signal autonomy to grow a privacy centric messaging app despite the deficits (e.g lack of federation). In contrast, I personally associate "crypto" with "scam". There have been so many shady ICOs and pump-dump schemes around crypto. This will taint the product for those of us who don't think of crypto currency as being anything more than pump-and-dump schemes and a way to buy dab rigs online.
What strikes me the most is that over long time I developed a crazy notion, which is a kind of build up of frustration I guess, which can be expressed with following words "this should have been solved by now, and it should be simple, darn it is 2021 century..." I do not know how many times I wanted to do some functionality, and then I would realize it is not implemented.

Regardless of what my expectations are for some language or library, simply it is not there, so after banging my head and burning hours trying to solve a problem I would realize I need to use some dirty workaround (and I hate those so much I do not have enough words to describe...)

Just a few example from JS world:

- parser that is simple

- jest framework working fast

- universal planet wide date time

- SCSS compiler that does not require C++ ...

- multipart/form-data request which can be interrupted in nodejs

- ...

For each of above there is some solution, but it looks like a dirty hack ... it seems with time, instead simplifying things we are complicating things that should be simple.

The other day I was pondering, how in any other trade people becoming masters, as they becoming good with their tools, tools are becoming part of their body, so they are focusing more on art and creativity, in programming, except for those rare who are blessed with very good and fast memory, tools are always changing ... as soon as you become comfortable there will be new set of tools... and I should not even start with the whac-a-mole of method and property renaming ...
Bevy: A Game engine built in Rust - https://news.ycombinator.com/item?id=26131350 - February 2021 (117 comments)
I don't think the system allows you to bump against the US No Fly list if the origin and/or destination isn't the US.
Omni found Dropbox's sync resolution to be unsuitable, and OmniFocus' data more closely resembles Things' than either resembles 1Password.

http://forums.omnigroup.com/showthread.php?t=13130
Hence NaNoWriMo, of course.
mitchellh: For some unknown reason your reply is marked "dead". Most won't see it, and there is no way to directly reply to it.
Quora is full of surprises...
Yes the intention was that the Paperwork Reduction Act section requires an entire page while utilizing about 10% of it. I didn't realize the scribd link was present, let alone not funny. I pasted in the link from uscis.gov.
And Wii, XBox, PS3, iPhone/iPad/iPod Touch, and various Blue Ray players, and I'm probably forgetting some.
I think the difference is that neurochemicals can alter your mental state, which affects other feelings and decisions. But being happy about getting a problem resolved doesn't "leak" in the same way.
I'd like to add one to the "Cons" list. This language is even bigger and more complicated than C++. If that doesn't scare you, I don't know what will.
> Internet technology comes and go, social networks are here to stay.

Like Google+, Friendster and Myspace?
The Go standard library is excellent. When I wrote Go I always used it for reference and best practices. No other open source project really came close in my opinion except for other Google Go projects.
I'm in line with your comment more than the parent. This happened to me too. Turns out this expert was very knowledgeable, but spread very thin so he could never help out as much as was needed. Furthermore, there were just issues that one couldn't have predicted because it would require months of working in the code base to see the problems clearly manifest.

Now the guy is gone and we are too invested to be able to fix any fundamental issues without incurring pain, so it's not done.
our velocity is never accurate. 2 week sprints with a bunch of groomed stories planed by business. cool, well... we're also spending hours a day on operation related incidence. we have code reviews. training. peer mentoring. so many meetings. i had to spend hours with a new jr dev last week trying to connect to our VPN and just basic windows stuff.... i was out of pocket for 3 hours yesterday because of force updates to my laptop. meanwhile i was supposed to be pushing a deploy to production... my internet went out for a few hours today because centurylink is just a POS. hmmm. a few weeks ago my roommate forgot to pay the electric bill and our power was out for half the day. life happens. family happens. shit kinda just happens ya know...