jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
They talk about decrypts of SSH tunnelling as a "potential", if they can later steal the keys. SSH, I note, does have an RSA-based key exchange as well as its usual Diffie-Hellman: if their targets have been using plain RSA, that would make an attacker's life easier for historical decrypts! Based on their typical methodology, I think that is probably what they are talking about, because they mention stealing IPsec pre-shared keys from router configurations in a very similar context.

Of course, all we have is a probably - this selection of documents is not anywhere near as comprehensive as we'd perhaps like here. We're having to fill in the blanks - and there's too many blanks to fill in clearly. There seems to be relatively little in this leak from NSA's PICARESQUE/PIEDMONT, or GCHQ's STRAP3 (which covers specific operational details: purely by way of hypothetical example :-), where individual full-take feed taps actually are in Telehouse North, or specific details about SIGINT enabling via the Cavium Nitrox chips), sadly. Alternative ideas (or leaks!) are welcomed.

Recent versions of OpenSSH have using some non-NIST primitives from djb, including Curve25519-SHA256 key exchange, Ed25519 keys and ChaCha20-Poly1305 transports. I am quite confident neither NSA nor GCHQ have any good cryptanalytic attacks against those primitives.

There is mention of some exploitation against finite-field Diffie-Hellman in TLS (PHOENIX). That lacks context, however, and we can only guess about what's missing. One possibility is it's an active attack which tricks the peers into agreeing keys over an unsafe field (TLS 1.2 has no way to date for peers to suggest or agree on lists of named fields; however, the recent ffdhe draft does provide one) - however active attacks don't really fit the context under discussion in the slides. The TLS Working Group at IETF is currently discussing this, and a suggestion's been made to remove the old finite-field DHE transports due to their poor performance and apparent vulnerability, replacing them with ECDHE over secp256r1 (a NIST curve), and quite possibly in the near future X25519 over Curve25519 (a non-NIST curve). I don't know how that's going to resolve yet.
Baidu's search results are basically unusable compared to Google's. The only reason it thrives is it's one of the only few options in the country. Another thing, given the ruling party's organization structure and its way of execution/management, a rough cut(I mean 一刀切 in Chinese) style is exactly what you can find in almost all the things they do. A fine-grained approach can hardly be expected in this case. Not to mention there is a lack of feedback mechanism of this demand for decision makers.
Dynamic dates _do_ serve to mark printouts and snapshots of sites, for whatever that's worth.
Anything by Greg Egan; some of the things by Adam Roberts; i like William Gibson (the modern books too); I also really like Bruce Sterling.

HN has a lot of these style threads and you're going to get some good recommendations if you search for them.
I've sold all my crypto when the price reached 20k a few months ago. Feeling a bit sad now, but I was really tired from ups and downs of my net worth.
Also, I'm disappointed that Bitcoin price depends a lot on big players, they can manipulate the price a lot. I don't feel like I have much control over my money.
If the hash function is collision resistant (e.g. SHA-256) unique hashes are guaranteed in practice.
Just thinking out loud here, as I was considering something like this.

I can also not give up the WhatsApp account due to the social pressure. What if I would use a second phone, a cheap one, used only for the whatsapp (and some other essential but privacy invasive apps). I would not have that second phone always with me, but it would provide me access to the social network I need without feeling tracked or providing more data than needed.

I do understand that this doesn't fix exactly the issue presented here, but I already assumed that whatsapp data was already in Facebook's hands one way or another. But I would limit the amount of information that WhatsApp can track about me by having this application on a phone which does not really represent my full actions as i don't have it with me.

Edit: Corrected some typos.
Reminds me of James Munns' "Anachro PC" https://jamesmunns.com/blog/anachro-pc-001/

https://github.com/jamesmunns/anachro
>>"I have heard the claim that Britain destroyed the local Indian textile industry, [..]"

If I remember correctly, not only Indian, but also, for instance, Egyptian. I have not sources at hand unfortunately.
They don’t not use CAC cards? I’m surprised they don’t have to be in compliance with NIST 800-53 (e.g. AC-11 for screen session locks)
"Default" may mean different things. A Samsung phone has a Samsung keyboard as the default keyboard, while a Pixel would have Gboard (I guess).

I assume they send every word you type to their servers, but I also assume it's encrypted in transport, so it would be somewhat safe?

It's a very very difficult struggle.
Can you please point to where I contradict any of that?

It's like telling your grandma to install security updates, and her coming back saying no one has broken into her computer so it must be secure (while gramps insists someone has).

The simple fact of the matter is our elections are NOT secure, and making them secure would be cheap, and easy.

We have absolutely no idea whether the vote counts in the US are authentic. That doesn't mean anyone stole this election. That certainly doesn't mean Democrats stole this election. But it does mean we should secure them.

Of course, physical security is a cheap and easy step. The harder part is gaming our media. If attackers can help direct where voters vote with $$$, that's a cheap attack too.

As a footnote, if I were an attacker, of any type, I wouldn't even bother with the November election. The easiest place to attack is primaries. Both 2020 and 2016, we had among the weakest candidates among the crop win.

We're going from a con artist to a senile mildly corrupt lifetime politician of limited accomplishment. UPGRADE! I'll expect we'll move from major corruption to minor corruption, without an attempted coup.

What I think we deserve, though, is a politician with intelligence, vision, and integrity.

That requires fixing systems, rather than GOP pointing to DNC, and vice-versa.
Thank you, that is good to know.

Also, please know that I am sincerely grateful for all of your work. Without the software and materials that you and your team labored to create -- and which you provide freely -- I might not be a professional programmer today.
Unfortunately their IDE doesn't work at all on OSX, their support crawls, and it's obvious they are internally French as in bureaucracy.
TM:PE allows to forbid lane switching close to the intersection forcing them to pick a lane earlier at higher speed and not break the flow.

To do so use the yellow+red circles tool, pick a road node and press Shift+S. Repeat until traffic goes smoothly.

Demo https://youtu.be/ex2PfNktryk?t=1260
I am not a fan of FB. Lord knows they are arseholes.

I _do_ like these labels, I think they are good.

but

It is dishonest to say the least that imessenger only has access to just those details. To use imessenger, you need an icloud account.

Tie that to the location services and any payment information, Apple knows everything about you, even more than FB.

The issue is about trust. rightly people don't trust FB with their data. However I don't think we should be letting apple off so lightly, especially when they are pointing the blame at other people.
Alas, Numpy arrays are limited to thirty-two dimensions.

This is fine, because with high numbers of dimensions you really can't afford to store a dense-matrix representation in RAM and 32 is plenty for any low-dimensional problem.
As long as tether can provide a small percentage of liquidity on USDT/USD then they (arbitrageurs) can maintain the peg. This can obviously break down, and has in the past. It's all about liquidity...
I won’t stop until they lose their freedom.
A lot of advertisers didn't care when Safari etc. did it, such is the scale Chrome has - they just stopped targeting users not using Chrome. Now it's affecting everyone there's an outcry
Every single one of the "superpowers" is guilty of this, not just Russia. Russia's just easy to target because it's obviously authoritarian, and thus villainous by default.

The problem is obvious. The solution is not. Sanctions won't help, but I'm not knowledgeable enough to say what WOULD help.
Can anyone recommend a business bank replacement for Azlo, which is also shutting down?
His "Public Healthcare Nation" is likely to be hit with an adverse selection problem- unless you have to pass a physical to be admitted.
Congrats Paul! Hope you guys can continue to keep burn low by eating essentially every one of your meals at the Googleplex.
I get so used to my tens of thousands of cores that I forget the amazing things that can be done with far less . . . only two hundred cores! Only two terabytes of RAM! Astounding.
this is what i want to know. I'm not sure and I'm not trying to thread crap but is the title Co-Founder the proper word to use? I'm curious because wouldn't a "founder" be someone who started the company from the beginning? From what I understand Paul joined afterwards (after the angel investing).
Thanks for the correction. I wasn't sure what the range issue was. I wonder if it was because the FTS was different than the one they flew on Kwajalein on the Falcon 1's or due to different range requirements.
Apple shoulders significant blame in this colossal mess. They knew the iPhone 4 would be huge and obviously failed to do (potentially forcing AT&T's hand) sufficient integration and load testing for this order process. Apple should've known the limits beforehand and had measures in there to throttle the process. Better to get a "Try again later" than to get to random screens and error and keep trying for hours on end.
Lieberman is pushing the bill. He was almost our VP 10 years ago, so perhaps he still thinks it's possible to grant that power to himself.
In retrospect, I can't believe we had a choice between this guy and Dick Cheney for VP back in 2000.
Physical keyboards definitely feel more accurate and nicer to type on. I could have gone touch only when I got my phone, but I specifically went with the Droid rather than wait for a Nexus One because I wanted a physical keyboard. I don't understand how people can use those on screen keyboards all the time. There's no feedback whatsoever.
Great news, it a shame there are delays with the international shipping, I have had this pre-ordered the second that it was available for pre-order. I'm sure it will be worth the wait though.
That is, MDY (1) traffics in (2) a technology or part thereof (3) that is primarily designed, produced, or marketed for, or has limited commercially significant use other than (4) circumventing a technological measure (5) that effectively controls access (6) to a copyrighted
work. See 17 US.C. § 1201(a)(2).

I don't quite get how elements 3 and 4 are met. Glider's primary purpose is to autonomously play WoW (as stated in the opinion) not to bypass Warden. Was it "primarily marketed" as a Warden bypass? I assumed it was marketed as a bot with the Warden bypass as a feature? I guess I'm misunderstanding the 3rd textual element for violating § 1201(a)(2).

Can anyone clarify?
Might want to ask Marc Held of Zazu (http://www.getzazu.com/). He's around... Marc? You there? :)
Don't think so - fridge was YC S10
Your answer to the second question should show a little less certainty unless you have a study to link to. I think the original commenter gets that you're just waking up a little earlier, but consistently doing that every day isn't natural. Sure, neither are alarm clocks in general, but there are probably studies about those. This is a special case of alarm clock that could, in theory, have different long-term effects.

There are probably legal issues with your claim as well. I'd just say that it's very unlikely to have adverse effects instead of "it is completely free of adverse affects".
> For example, interacting with my FriendFeed page involves the coordination of thousands of individual processors and disks owned by a dozen different entities, including you, Facebook, Amazon, Google, your ISP, and many intermediate ISPs.

Put that way, the entire idea of "the cloud" sounds scary. I have a sudden urge to replace all the webapps I use with native apps.
Since you placed a pre-order your email address was auto-populated. You probably just glossed over the text field (it was on the first page).
In practice Australia has implemented an elimination strategy. For some reason they don't want to say so.
G Suite or whatever it's called today isn't "enterprise apps"? And their GCP is still third in the running and bigger than Oracle's and IBM's clouds, so that's gotta count for something.
'Glitch' by Kewlers was out around a similar time as Gantz Graf, and has some similar vibrations:

http://www.pouet.net/prod.php?which=10058
> Alas, microphones are not as easy to deactivate.

Easier on desktops that don't have a built-in mic.

I use a mic with a hardware power switch.
> If you could be bothered

Again - please take the temperature down a notch. I'm significantly less invested in this topic than you seem to be.

And to respond to your specific point - I'm not clear on how a new blank drive would be a security concern. There might be a technical reason why it has to be this way - or it could just be poor design. At this stage I'm curious to know the thinking behind this.

> Frankly I think that is a good thing that changing hard drives is linked to the security chip.

I'm trying to think of an attack where "needing a second computer" is a major hurdle once you've got physical access.
The article does a good job of refuting your points, I'm surprised you made them having read it.

You don't want to give people a sense of false hope because it discourages compliance with interventions with known effectiveness, like social distancing.
FWIW, Australia had 23 local cases in the last month (an outbreak which resulted in a major city going into a snap lockdown).

Australia and NZ's risk profiles are different from pretty much anywhere else in the world right now. On that level, it's not a particularly reckless move.

That said, I understand the hesitation that a lot of people, particularly from NZ have. Our positions (both NZ and Australia's) have been hard earned, and one major slip up could make it all count for nothing.
Ahh yes, written in Rust, my favorite feature.
> some of them would just assemble and service their own fleets from readily-available parts, similar to how Amazon/Google/Microsoft self-assemble their own cloud servers (instead of buying them from Dell/HP).

Amazon/Google/Microsoft don't assembly their own servers, rather than they buy servers directly from OEMs who were previously selling to Dell/HP
So interesting to read about this.

I am working on a (side) project to plan and launch a small community of houses built on water, pretty much in a similar way. (in my case, the candidate site is the Venice lagoon in Italy).

The main advantage is that you can remove most of the senseless regulatory constraints - and if you do it right, there's mostly just upside. Building costs are slightly higher, but you also get other benefits, such as protection from earthquakes.

Granted, this has to be done in a water area that is not subject to unusual weather situations.

It is not for everybody, sure. But it is something probably worth experimenting with.
I think you have the right lens.

This is "blue tribe member discovers existence of grays, and denounces them as not true blues".

Blue tribe be wary, the grays are among us and can be hard to tell apart. At first glance they often look like us, believe many of the "right" things. But something is... off?

How can we spot grays? Well, grays (as almost the definition of their in-group) are supposed to value the substance of an argument more than appearances so if you say something nonsensical about, for example, race, you can smoke them out if they don't uncritically agree with you like a proper blue should. They can't help themselves! These optically challenged idiots will try to do _math_ on what you said, or something equally silly. It's perfect.

A side benefit of this identification process is that you get to call them racist.

Since gray tribe is vastly overrepresented here compared to general NYT readership I think this also explains the reaction of many commenters.

Disclaimer: not a blue or red, probably a gray.
Are there any studies showing the opposite results?
School sucked big time for me. But I thought I was in the minority because I was nerdy, not very popular and insolent towards teachers bacause I hated authority.

Now I think it might be that everyone else also thought the same, only with a different set of reasons - the non-nerdy kids feared maths, the popular kids were getting involved in the struggle to be popular.

Maybe parents suppress the memories so as not to face what they're doing to their children just to get them off their backs for a while.
For context Random-X will soon activate on Monero. It'll be interesting to see how it holds up in the real world.
That simple solution is basically impossible to pull off. I can't think of any cloud provider that'll let you sign off without having any identifying details about you. They'll need a payment method to begin with, and unless you usurp someone's identity and use stolen cards, you won't be able to anonymously pay for the hosting. Just getting an email account via Tor without providing any identification is hard.

Every step along the path of doing something anonymously online is difficult. There's nothing simple about it.
https://community.ui.com/releases/UAP-USW-Firmware-4-0-69-10...

"[HW] Default disable crash and critical event reporting."

I've installed and personally bought a lot of Ubiquiti gear and this was an unwelcome change. However, this certainly qualifies as an appropriate response and there's no reason to start dumping hardware over a software change that's been reverted.
We use these two books for eRes, the student-run entrepreneur incubator here at the University of Michigan. They really compliment one another, and this presentation gives a good overview that ties the two together.
A beehive or an ant colony is actually one organism, from the point of view of evolution. The individual insects are genetically identical within a collective.
A mentor of mine has saying that startups are an emotional rollercoaster. One week you are high of the positive feedback after pitching to an investor, next week you realize that they are still far from investing. One week you get tons of work done, next week you bang your head against some stupid technical problem that you thought was trivial. One week you have a spike in adoption curve for a random reason, next week it flattens for apparently no reason.

You just have to learn to ride the emotional rollercoaster. For some people, it comes naturally. They are confident and positive, constantly living in their own reality distortion field. Some analytical people have doubts all the time.

If you have doubts about your capability to execute, consider that as part of the business and just push through the emotional low back to high.

But if you have doubts about your overall idea, then you just have to go back to the idea. Why I'm doubting it? Idea should be something that you think has obvious potential and you just wonder why others aren't doing it. Often times it's enough to adjust your original idea a bit. Get feedback, fresh perspectives. Pivot. And you suddenly feel confident again.
I think, his parenting rights has to be taken back.
He buys toys for kids used - which is very unhealthy.
And he will not be able to buy cutting edge or very good stuff this way. No new books kids - Nope! Dad knows better.
No new dress - nope! Dad has THE idea!
In case of emergency he will not be able to pay for care for kids, unless he depend on government provided healthcare (do not get me wrong, I am "socialist" myself and I am pro-government-run-care), which unreliable, and does not cover many things.

My opinion - yes you have to try to live cheap life, but
not by buying used stuff - somebody else, with not really cheap life bought it first, but buying inexpensive stuff and using as long as possible, till it falls apart.
Bad behaviors often have a reason behind them: stress.
Stress is often created by poorly run, evil, cruel, egotistic societies. Improve social capital - the problems will decrease by themself.

Why you think US is the country with highest incarceration rate? And let's say Norway - much smaller?
Well not when it comes to Round-up Ready. It's Roundup Resistant GMO + Roundup = we kill everything in the field except the crops.
Your first comment seems to suggest that people who are pro-GMOs will be going against these findings. GMOs and weed killers are two parts of Monsanto's business model, but as far as the science behind the two goes there is virtually nothing in common.
I know that its hard for someone to understand who doesn't work with farm chemicals on a regular basis but Roundup is on the low side in terms of toxicity.

Here's a copy of a Material Safety Data Sheet that all those who handle herbicides need to maintain for employee access:

http://greenhouse.ucdavis.edu/pest/pmsds/Roundup.PDF

Almost anything is toxic, even salt, if the dose is high enough. The question that must be answered is if there is a realistic chance that people in contact with the herbicide can receive a high enough dose to raise the chance of cancer. Or that the average person either living in the country or consuming the food has an increased risk.

It's becoming increasingly common for states to take blood tests at the beginning and ending of the season of commercial pesticide applicators to monitor them.

If anyone was to have an increased level of ill health this group, because of the sheer volume of material that they handle, would be the first to show it.