jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Yesterdays's HN discussion about this: https://news.ycombinator.com/item?id=8806394
That, at least, is the case. Specific operational cryptanalytic capabilities are indeed in separate compartments: PICARESQUE, PIEDMONT; focus on PAWLEYS for backdoors in, say, routers. GCHQ use STRAP3 protection measures for their CRYPTO compartments in CESG.

As a sysadmin, Snowden basically had root, and probably had access to pretty much everything that wasn't thoroughly airgapped. However, very few computing resources would have been cleared for that Exceptionally Compartmented Information. The documents he gathered were focused more on activities like mass surveillance and standard undermining, that he sought to blow the whistle on, rather than their targeted cryptanalytic capabilities in general.

640-bit RSA could be broken essentially in real-time by the computing resources available to GCHQ a couple years ago. Of course, they don't actually have to work in real-time, so I suspect that 1024-bit RSA is entirely within their capabilities currently, given that. Diffie-Hellman is slightly harder, but if they're prepared to throw some in the bin or lag behind, they can probably do it, but that's just guesswork.
In his user history, you find this:
'BoS: NSA is monitoring key internet routers'
on 1996-06-12

http://marc.info/?l=best-of-security&m=96843702620513&w=2
#3 seems like it could even be a legitimate optimization.

#4, If they did a SRAM write, then a EEPROM write and only raised an error when the EEPROM write failed, your suggestion would seem plausible, but since they do an SRAM write, then raise an error because the SRAM write worked, it is hard to believe this isn't an intentional protection feature.
By the way, as far as "grandma won't be sideloading":

https://finance.yahoo.com/news/apple-hits-back-facebook-revo...

Here's an example of Facebook encouraging people to sideload a developer-licensed application with enhanced permissions so they could bypass permissions and leech more data.

So this is not a theoretical problem, this is something that actually happens, and that Apple has had to push back on.
What type of greater scope is that? How much oil you think is enough for you to witness chainsaw dismantling of your family?
Texas's winter was extreme for Texas, not extreme for what a heat pump will do.

I live in Idaho and get "real" winters. Range hasn't been a problem for me with my 2018 Tesla (Even though it has the resistivity heater). I've even visited Utah a couple of times in the winter.

And, no offense, but I don't really trust the manager of a car dealership to give me accurate information about what's going on with tesla trade ins. You wouldn't ask a Chevy dealer about a Ford.
On the other hand, I chose the first option (several years ago) -- and doing so saved me from having to generate new keys (and rotate them on every host I used) when I got my Yubikeys replaced the second time (due to a bug in the key generation library used on the Yubikey).

--

I generated my new GPG key while booted into a "live CD" environment on an air-gapped host.

Because I believe in doing things right, I deliberately selected a machine for this task that 1) didn't have Intel AMT/ME, 2) didn't have any wireless network interfaces, 3) had no storage devices installed, and 4) had PS/2 ports for the mouse and keyboard (for "better"entropy)!

I set up the new Yubikeys, generated my new GPG master key, and generated a different ("authentication") subkey for each Yubikey. The master (certification) key and signing and encryption subkeys -- but not the authentication subkeys -- were exported and then backed up on a brand new USB flash drive that I'd purchased at a retail store, just taken out of the package, and created a small LUKS-encrypted filesystem on -- using an outrageously long, randomly-generated passphrase, of course.

The USB flash drive is kept in a sealed envelope inside a tamper-evident bag that's kept in the safe. The passphrase is kept, well, somewhere else, obviously, as is the passphrase for the GPG master key. Using the keys on the Yubikey doesn't require them; only the PIN -- which is long but not as long as the passphrases -- that exists only in my head -- and that's easy enough; I typically do that a few dozen times a day.

Since going through that whole process, there have been two times that I've retrieved the USB flash drive and passphrases. Once was to sign a bunch of GPG keys (from a key-signing party) and the other time was in order to rotate my authentication (SSH) subkeys and "renew" (i.e., extend the expiration date of) the others.

Was it a huge pain in the ass? Absolutely! Was it worth it, though? Sure. First and foremost, I don't worry about the security of my keys at all and -- perhaps more importantly -- I don't have to keep an eye out for the next bug that's found in the third-party (Infineon, IIRC) libraries that Yubico chose to use.
That's true for the time being, but considering Apple has a stranglehold on the app store and are therefore facing anti-competitive questions, they are maneuvering from an entirely different anchor point.

It's in Apple's short-term best interest to win over public opinion. It not only cools down anti-competitive rhetoric, but it also helps sell phones.
The main problem in trying to help out is that your request is so broad.

- "HA" just means "high availability", which means whatever your marketing team wants it to mean. I don't use any provider of any external SaaS that doesn't guarantee 99% uptime - that's HA enough for me. But maybe you mean HA in the sense of "can handle a /. flood without interrupting service"? Or perhaps some other definition. Also, HA of what?

- Distributed databases. Distributed what? Distributed how? Distributed on what? Distributed through what? I mean, I'm not trying to be hostile here - it's a wide field, and there's probably dozens of resources available for each configuration of answers to my drill-down questions.

- VPC Peering, this is essentially a tunnel between subnets. But perhaps you're specifically asking about how to set up/use VPC peering in AWS or some other vendor-specific solution?

I don't even know where to begin with any of these questions.

I'm guessing that's why your question gets little traction and lacks replies.

But perhaps I'm wrong - perhaps all the things you listed have some sort of obvious industry standard that I'm not aware of, and anyone "in the know" reading your question will automatically fill in whatever context I'm missing. I'm not from the US, and don't work for any of the big tech companies, so it wouldn't surprise me.
I find this is especially if the code was written in haste, but if it's code I write professionally, it's usually easy enough to reacquaint myself. Probably the worst cases are the spaghetti code abominations that are generated by hackathons.
> might find a way for better revenue sharing with employees

Most people want a steady paycheck at the end of the month and (a feeling of) security. This seems to cost money indeed.

At least in Europe, when you are a freelancer, you earn considerably more for doing the same job. Why? Because of the earlier mentioned point.

You would think most people would start freelancing because of this, but it's not true. Most prefer the safety.
Right, sorry, I was mistaking this for a democracy. We should definitely just do whatever the man from the government said and not think about it too hard.

But remind me again how the military is going to defend against the likes of the Sony attack?
So, SHRDLU and what else?

You do know that SHRDLU is still unique enough to warrant multiple resurrection attempts?

http://www.semaphorecorp.com/misc/shrdlu.html
If they really had no great alternative, and the chain of reasoning was that clear, then traders would have anticipated it and it wouldn't have caused any major problems.

Since it was widely unexpected and people did lose piles of money, I expect there were other likely alternatives and perhaps your analysis may be suffering from a bit of post-hoc rationalization.
Which is how it should be. I can understand keeping a summary of the data to track the performance of your admissions process, but you shouldn't be keeping highly personal information about students for any longer than it takes to make the admissions decision.
Yes they can. Not a crypto backdoor, an OS backdoor. It's easier.

If I install a keylogger on your computer, it doesnt matter what encryption you're using, I can just type in your password. That kind of backdoor.

Go for the weakest link in the chain.
Correct me if I'm wrong, as I'm not experienced with these tools: when you're done, you upload the image to a server?
I think the problem with this type of argument is that all the things you mentioned will have to be reconsidered if the pool of potential investors widens to include the general public. For example, if I have to live with a large cap table in order to have a chance to fund my venture, then of course I'm going to live with it vs not starting my company. The admission fee is a fair point but at a high level if there are tens of millions of potential "investors" out there now for startups who market themselves well enough then the market will find a way around the admission fee.
There is not a single word in the article about any scientific research supporting these methods.

Of course you can say "look, the airport is safe, it must be working", but this is no proof.

Moreover, these "security screening processes" you mention look very much like racial profiling to me. The article states that the duration of security interviews is "based on such factors as age, race, religion and destination".
I do. It started when the BSD project made its initial free release, and really got going when BSD became a runnable OS in its own right. Ever since then, people have been saying that the GNU project is unnecessary since BSD exists.
Comments from the article, whether true or not, have nothing to do with whether or not I should use Uber:

> It requires passengers to run a nonfree program (an app).

> That app requires running other nonfree software (in the case of Android, Google Play).

> It requires you to let Big Brother track you, with a portable phone. This is sort of implied by #1

> [...] some women [are] scared to use Uber. Not because this may not be the case, it just doesn't affect me.

> Uber is an unregulated near-monopoly, so it can cut rates for drivers arbitrarily.

> Some [drivers] are trying to unionize.

> Uber plans to do away with human cab drivers.

> With real taxis, you can flag one on the street or phone in any fashion

Comments from the article, if true (I have no idea if the individual ones here are or not), should affected whether or not I use Uber:

> Drivers are starting to complain that they’re left with little money for their work.

> [Uber drivers] have to work 15 hours a day

> Uber executives and staff have stalked passengers in various ways.

> Journalist Sarah Lacy writes about how an Uber executive said he would punish her critical journalism by using lies to smear her family life.

This seems fairly alarmist, even for Stallman (I don't mean that to be an ad hominem), but it's just not very convincing to me.
Okay, so how reproducible is this?

Because I've seen many cases of single-primate case studies that turned out to be not reproducible as others attempted to do it, — in particular those that found human-like behavior in nonhuman primates.

It feels as though every researcher that wants to find human-like behavior in non-human primates can find it, and every research that desires that it isn't there can find it's nonexistence.
I'm not the person who asked, but I think their point would be that "being fruitful, multiplying, and dominating" are just natural human tendencies which religion was aiming to justify and did not create.

I mean, we know of a lot of domination and exploitation that happened before judeo-christian religions had come into place, or that happened in places free of their influence. The Bantu peoples massacring most of the population of the southern half of Africa comes to mind.
I don't need to walk around with them, my main goal is a better sitting posture, and I'd be fine with a model that has a cable connected to the laptop, in fact, that's how I imagined it in my first thought.
I don't even know how to file a dispute without a human involved. Customer service handles it. When you deal with them over the phone it's usually pretty reasonable. They're not evaluating the cut of a diamond. All the photos in the article would obviously be settled in favor of the buyer.

Also why would PayPal close a buyer's account after a chargeback? They'll just debit the seller. Why would PayPal even care? I searched online and can't find a single instance of anyone complaining about that having happened.
I have ever only had to do one chargeback on a Bank of America Visa. I think it’s still visa I dealt with and the process isn’t bank/carrier specific but I’m not sure.

It was not fun. Took a very long time to open the case. Had to appeal a couple times and was a multiple week endeavor.

A trip to Denver was an eye opener. We rented a car and charged it on Amex. Denver has a very weird toll setup that camera/LP reader based and weeks after we returned we started getting charges trickling in for the tolls, totalling a couple hundred bucks. But we had paid for a toll pass with the rental co. I called them and got nowhere fast. I called Amex, sent them the rental agreement and they reversed the charges and said they would handle it. Never had to think about it again and it was about 20 minutes of my time, mostly spent chatting while the scan of the rental agreement was sent to them.

I still carry a visa for emergencies/just in case.

I don’t carry a debit card and haven’t for a very long time. Just run it through credit and pay in full at the end of the month. Basically the only thing we do with a bank is pay the bills or deposit/withdraw cash. We try to keep a degree of separation from what we spend on, and where we hold our money (if that makes sense)
I think arguments can be only made against specific type systems (implementation). If I could express my domain constraints in type system I would happily use it, but often this is not possible or it’s very hard. Then you need to decide if it’s worth the trouble. Maybe your runtime code gets complicated to conform to type systems and hinders readability? Or maybe compiler can prove very little about your code (old example with type of function for reversing a list)?
A-chopping anywhere but the brain without nontrivial cognitive deficit would have perhaps been better, but a little less pithy. The next sentence admits as much.
Compared to how much in traditional currencies? I would imagine less than a couple perecnt of global money laundering happens in cryptocurrencies.
I think there actually is a good paper on retail traders and their influence over the market -- short term or small caps.
https://faculty.haas.berkeley.edu/odean/Papers%20current%20v...

Yeah, I hope to do sth a bit different -- try to understand the retail market and info from them. Rather than straight forward as a stock price prediction, I try to build a tool to make sense on social media discussions.

Building social media predictions on stock price is more like finding an alpha factor -- which we are not very so familiar on how to deal with this part. But there might be something interesting to build a tool for people to look at which might be a factor that could have correlations, such as comparing increase in mentions or news to cross checking with prices. I now that a lot of big hedge funds are having Phd teams to working on finding alpha along with NLP, but it might be more fun to provide retail traders tools to process. For mention rate, I would actually think that it might relate to volatility.
Let's have a chat if you are okay!
No, nation states and their fiat currencies are locked into the bare metal layer of human relations and the only thing that matters is ability to legitimately threaten to kill humans and destroy infrastructure. (or an alliance with a country that has those capabilities)

Bitcoin is not a nationstate and doesn't have the weaknesses of nation states and their economic systems. It uses far less energy to establish and maintain itself.
A bit stupid question. How do you invest in Bitcoin? It seems every month or so, a Bitcoin wallet gets hacked.
clickable: http://startuplift.com/
In my view, the best place to start for a good grounding in rigorous mathematics is Velleman's 'How to Prove It'

As for a good broad overview of many areas, the title that springs to mind is 'the nature of mathematical modelling' by Gershenfeld, though you'd better have some decent maths experience before tackling that one - it can be tough-going, but is refreshing in its breadth and clarity.
Because groupthink is inherent in the upvoting/downvoting system.

I'd almost argue that groupthink is inherent in human interaction in groups larger than one. Almost.

Forums and mailing lists are certainly susceptible to it, even though it occurs less often, but I suspect that has more to do with the size of their memberships. SA, for instance, has tons of it.

Oh, and /. had a serious problem with it for a long time. Their moderation system helps, and maybe it's gotten a lot better (it's been a while since I was active on it), but oh man when /. was the site, it was pretty bad.

/. is a good example of what seems to happen to a lot of online communities -- a small, competent, awesome base of users is very active for a while, things snowball, you then get a huge upsurge in users and activity and trolling, and then that eventually fades and your userbase stabilizes at a point where the userbase is pretty solid and there's not too much in the way of ridiculousness going on.
It resulted in a 9% increase of the "calls to hotline" metric, so you can just go ahead and pay him:

> In April we began prominently displaying the number for the National Suicide Prevention Lifeline at the top of the results page for certain search queries in the U.S. Since then, our friends at the National Suicide Prevention Lifeline have reported a 9 percent increase in legitimate calls to its hotline.

http://googleblog.blogspot.com/2010/11/helping-you-find-emer...
> knew about death camps through the usage of slave labor

Um, he was Technical Director at Peenemunde - which was an assembly line in a tunnel (ie a single room) and which had gallows beside the assembly line on which slave labours were hanged. Oh, and he joined the SS before the war because Himmler headhunted him and told him he would guarantee funding for his rocketry work.
It may be helpful if you state your mathematical background, though I'm guessing that, if you had taken any proof-based math course, you wouldn't be asking this.

I recommend The Art of Problem Solving I and II. On the one hand, they're intended for (mathletic) middle and high-schoolers. On the other hand, some of their problems are quite challenging, and much of the material therein is what my school teaches in its intro discrete math courses since very few students learned it in middle and high school.

http://www.artofproblemsolving.com/Store/contests.php
Something that hasn't been mentioned: Meditate! It can help understand yourself better and become more peaceful. It's not nonsense!
I've said it elsewhere, and I'll say it here:

EverNote is impressive and pretty well-designed, but for all its' creator's claiming to support portable data, it has horrible importing, very little exporting at all, and no bulk exporting (when I used it a few months ago). It couldn't even spit out a text-only note as txt, rtf, html, anything. It's a lock-in product. If you're happy with the lock-in, it could be a nice little world, but beware that criteria.
I was thinking something more like iFixit, but for cars. Maybe user-generated repair tutorials. Might help mechanics "legitimize" their own business if they are active in a community like that.
If you don't have an appointment, I won't come to the door. I live on the second floor ( that is 2 stairways ).

Experience has learned me that people who show up without an appointment usually want money or something else I don't want. Think solliciting for donations, the police, the IRS or a debt collector.

No thanks.
Yep, but it's no guarantee ARM will list on the LSE considering recent UK EV maker Arrival crossed the pond for a decent IPO.
Lutz / Co-writer here. Thanks for your feedback! I'm mostly to blame for the excessive use of symbolism as I'm personally a big fan of visual storytelling as opposed to focusing on dialogue to explain the set-up in a scene. But I agree with you, maybe it was a little too much considering the context was already set very early into the scene!
Why run home behind a bus when you can run home behind a taxi?
Without exposing myself too much that's what I'm doing right now. But while the contracting agency I work for is really great but it's also very massive and I feel very desolated, especially since my last contract was the "build me the forms" which drained the soul out of me.
How long between your second vaccination and when you had Covid? I assume you had no booster.
My memory might fail me, but I think the compiler wizards were building all the core FB stuff on aarch64 back in like 2014-2015 or something.

Someone saw further down the road than I did.
Lots of hypotheticals, fun reading here.

My thought: Isn't there something about bearing witness against yourself? In America you're not required to do so. Isn't removing a tracking device something like pleading the 5th?

Others suggest you should return it to the police, but it seems to me there are way better approaches to that than handing it over.

Its a tracking device, right? They're going to find it, wherever you put it (except in a locked metal cabinet of course).

So leave it by the side of the road - they'll see it quit moving, find it, assume it fell off. Maybe try again, put it back on your car.

Next time, maybe leave it outside town in a muddy drainage ditch? Imagine the sap who has to go in there to get it.

All sorts of fun could be had. Leave it in a bank lobby. In Victoria's Secret under the discount table. In a trash can at the zoo. Behind the Police station where they keep the idle tracking devices. In an abandoned building. Under a parked police car.

So many better ways to deal with this problem, it could hardly be called a problem at all. Its a challenge!
Automotive safety glass is usually the same in both windshields and side windows, but windshields are laminated together with plastic layers so when a front impact shatters them, they don't shred the people inside.

As I understand it, the force of a (non-fatal) side impact in a car is generally less--reducing the danger of the above--and occupants need a way to escape in case of non-functioning doors, and so glass that can be broken free from the inside is the norm for cars.

That looks like they laminated the side windows. I'm not sure I'd want to be in that even if it didn't have Musk's...musk...all over it.
Except... don't I? If I didn't like that behavior, I'd protest it.

Why are the rights of [new thing] automatically superior to rights of [old thing]?

Just because Starlink isn't hindered technically doesn't mean it shouldn't be hindered societally. When you create something, the obligation is on you to do so in a thoughtful way that doesn't cause harm. It's not on society to get out of your way just because you did it.

I'm not sure I understand how that addresses my question.
>>> pass a map[string]string to json.Marshal()

This is my goto speed hack when prototyping. It always works. You don't have to worry about deep nesting. And it frees you to design the data model as you prototype. It's also less punishing than reflecting on every node in a list.

And yes, golang / json (and go / node) interactions need to evolve better developer patterns and runtime performance ;)
It looks like it's shooting to be a lot lower level than Rust, probably Zig is a more apt comparison.