jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
>A simple countermeasure at the ISP level: a buffer to merge 'www.you' to 'tube.com'

addressed here: https://news.ycombinator.com/item?id=22656122

>A far greater danger is DPI that use statistical analysis to detect possible tunnels.

That's only an issue if there's a blanket ban on tunneling/proxies. While it's a problem in authoritarian regimes (eg. china, kazakhstan), it's not an issue in most western countries. I haven't heard of any western countries banning VPNs (yet).

>The current best is [...]

The timing information would still be suspicious. Most people aren't constantly checking their gmail/facebook multiple times a second, but normal browsing would generate packets with that frequency. It's really only undetectable if you're sending/receiving messages (eg. IM or email). A better candidate might be multiplayer game traffic. They provide a consistent stream of bits[1] to hide data in. If you're willing to set your tunnel's bandwidth to a few kilobytes a second (throttling if there's too much data, sending decoy packets if there's too little), it'd be very hard to detect any anomalies.

[1] random search: https://youtu.be/8Kvj5TZNNJ4?t=1080
I don't have a link, but here's how that would work: there are strict limits (a few thousand per donor) on how much an official campaign can raise/spend. Outside/independent groups have no such restrictions (see Citizens United) - they could take a billion dollars from one donor and spend it all on behalf of one candidate. But what good would the official restrictions be if the campaigns could call the independents and say "buy a million dollars of ads for me". So there are also strict laws about "coordination". You can probably figure out the rest by yourself... But leaving the records in a place where they are "available to the public" provides plausible deniability to the coordination problem.
So language/tooling choice should be a sort of a Harrison Bergeron* affair, to make sure that the least able to program will still be able? I'm not so sure I agree with that. Nor do I agree with its obvious counter-proposal, meritocracy.

I have heard of teams using "communication" to bridge these gaps but I know little of that technology.

* https://en.wikipedia.org/wiki/Harrison_Bergeron
It's a little silly, but I've pronounced a '{' or '}' as a 'curly brace' ever since I played Cave Story[1], in which one of the main characters has that name. Before that, I think I called them 'curly brackets'.

[1]http://en.wikipedia.org/wiki/Cave_story
This. Radioiodine can cause thyroid cancer but other than that when you're looking at a cluster of rare cancers don't look at radioactivity.

On the other hand, we have had many cancer clusters that make the most sense as if they were infectious agents. Now, cancer is obviously no infectious--but we already know HPV is responsible for a lot of cancer, including strains that produce no symptoms. It's quite reasonable to think there might be other viruses that are carcinogenic but otherwise asymptomatic and thus staying below the radar.
I could see a lot of reason why Shopify would more or less be force to do this. If the transaction appears to be initiated on their site they may both be liable for PCI DSS and GDPR.
Yep. Unless you check the gonads and the DNA on both sides, any explanation will be uncertain.

I note that birds use the WZ sex system, which is like the opposite of the mammalian XY sex system. Males are ZZ. Selective silencing of genes on the Z chromosome for dosage compensation could cause spacial variation across the body. We see something like this in the XY sex system with Barr bodies, leading to coloration differences such as those of the calico cat.

It's also possible to have a plain old male-male chimera, or a plain old mutation, with the cells in one part failing to produce the proper color.
> I'm currently eyeing up the successor (Microsoft surface ergonomic keyboard) even with the unnecessary numpad - it looks to be of a higher build quality, and the bluetooth freeing up a port is a bonus.

Anecdotal word of warning -- this was the worst keyboard I've used, and I promptly switched back to Sculpt. My issues: less ergonomic, worse keys with worse typing experience, fixed numpad, major connection issues with dropped and stuck keys (this was obviously the breaking point), and Bluetooth didn't work during Linux bootup (LUKS password input).
People who equate privacy from banks and the state with criminality are the reason the financial system has normalized mass-surveillance and the principle of 'guilty until proven innocent' inherent in AML laws, and the reason why the financial system has become so laden with financial friction, power disparities, and exclusion of marginalized populations.
> What do you want them to do, invent money out of thin air?

You're talking of Bitcoin donations, right? ;-)
get a daughter who's required to be at gymnastics practice at 6am :(
> Here are my options now:

> ...

> d) Market test the cards

D, D a thousand times D. I assume you have a plan on where you are going to sell these? Dip your toe in and see if you are barking up the wrong tree.
It was my understanding, having read the scrypt paper, that scrypt is significantly more secure then bcrypt (hence its existence).
If China had a justice system where trials were carried out in the open rather than in secret behind closed doors and a press blackout, then it would be easier for us to determine the truth...
The TechCrunch article says people have until May 13 to download the videos. You just can't stream them after April 29.

Still, this is a pretty bad job on Google's part IMHO. More notice would have been good. (What if people were traveling or were sick for a month or something?) Plus Google should have an option to automatically transfer videos to Youtube.

Can't understand why Google's messing this up so badly.
That is true, but on the other hand, Wuffles allows safe unchecked array indexing, which is a very hard problem that Rust doesn't attempt to tackle--in part because it spends most of its complexity budget on the borrow checker! I for one would be extremely interested in using Wuffles in the inner loop of many routines I currently write in Rust which are performance critical, and for which I know bounds checking is hurting performance (sometimes in ways it's hard to convince LLVM to remove), but for which I can't justify the use of `unsafe`. I would particularly love it as an embedded language, rather than one needing a full-blown application.
What's the hook?

The hook is you like to program in Ruby, so here is a game engine where you can use Ruby.
Same reason they picked Gab for social media and BitChute for video hosting. It's not a mistake.
Where did you hear that Among Us was built on DragonRuby? All I can find is that it was written in C# and Unity.
Some people consider avoiding heap allocations to be smartly limiting. ;) It’s not really that limiting either, when you learn the techniques for it.

There’s a famous list of NASA’s rules for safety-critical code that you’ll see pop up now and then, that subscribes to the “avoid heap memory allocation” philosophy. https://en.wikipedia.org/wiki/The_Power_of_10:_Rules_for_Dev...

It’s not nearly as true anymore today, but working in console games 10-20 years ago, it was very common to try to avoid dynamic memory allocation because it was viewed as slow, unsafe, and unnecessary. A common strategy was to statically pre-allocate a single block of the worst-case memory needed for a given feature, because you need to be prepared to hit the worst case without crashing, so you might as well just reserve the max and focus on reducing what the maximum possible usage is.

I once debugged a crash in a console game that was caused by someone trying to be too clever by half with their allocation and copy constructors. We had a team of a dozen people working on the crash through a weekend during crunch because the crash only occurred in a release build on the console dev kit. The cost of this one stupid bug due to using memory allocation could literally accounted for in the thousands of dollars. I basically had to write a mini one-off release-build stack-tracing sampling debugger in order to trap it. So, anyway, long story short, I’m old enough to appreciate why some people suggest that avoiding allocations is a good thing.
Thank you for your random mind-bending insight.
He used an estimate of what it would take to have a lawyer draft a new licence to price simply changing it to BSD.
This is me. I am considering switching from programming to other professions because I could reach higher pay a lot faster.

The plus side is that I get to do programming projects I find interesting(machine learning for me) in my spare time. While avoiding the tedious programming.

Best of both worlds.
The problem is a "real" certificate being MitM'd and replaced with a self signed one. Things like certificate pinning might be able to mitigate that. Even though it's been a bit of a farce (in no small part due to the quizzically large set of trusted root CAs) the idea is that the CAs that you trust do their due diligence and don't sign fraudulent requests.

>[0] If you really care, you should use a CA-signed cert. But every attack that possible when using self-signed certs is not only possible when using plain HTTP, but much easier to execute, and also much easier to execute silently.

Right, but the owner of the server you're connecting to is the one that has to choose if the data they're serving or receiving qualifies for protection of this sort. By omission they've basically taken the position that their pages or data are not worth preventing an attacker from MitM'ing you. If you allow self-signed certificates to fly without a warning at that point you're taking the decision to secure from a MitM attack away from the server owner that wants to protect their pages. Sure, a savvy user would notice a change, but what if they've never been to that site before?

Here's a scenario: Bob's Widgets sells Widget 9000 and has a secure site with a certificate signed by a CA. Alice hops on free WiFi at a Widget convention and visits for the first time, hoping to buy some of these amazing widgets Bob sells. Except Mallory intercepted the traffic and swapped out a self signed certificate. Bob's only way of telling Alice that his certificate and therefore traffic is authentic is by using one signed by a trusted third party.

Now that isn't to say that I don't think your idea has merit. It just doesn't fit into how we currently do things. What might work is a keeping port 80 and port 443. Port 80 is secured by a self-signed certificate but the user isn't informed (via their browser's indicators, like a green icon or what-have-you) that their connection is secure because it isn't in the sense that it will protect them from MitM attacks. It is however encrypted and you can have the browsers trigger warnings when the key changes similar to the way SSH does. 443 still behaves exactly the same where users only trust CA signed certs by default.
I can hardly believe NASA is going to become a relic...
The vast majority of it across all categories seems a bit random, to be honest. Only the star figures like, say, Sam Altman or James Harden don't seem arbitrary.
a hardware usb analyzer is just one of those things that's terribly expensive, not really even because of the hardware (its not that complicated) but because of the software which must be really good and this one runs on all OS's. I will admit I used this project as an excuse to get one but good electrical engineering tools cost in the thousands of $
it used to be called startup news, way back in 2007.
Why would he have suspected Radcliffe of being a "face person"? He's not just "famous for being famous", he's famous for starring in an incredibly successful series of movies.
TC article keeps referring to revenue and net income as compared to a year ago which was a notoriously bad year for the travel industry. So these growth numbers don't really mean anything. Would be really interesting to see where Kayak stands in comparison to 2007 & 08.
A TV Series DVD set usually has a suggested retail price of between $45-60...and you can generally find them on sale for no less than $15-25. That is over 2x the cost for a DVD set and you get stuck watching one show.
I suggest that figuring out how to use PS3s as a supercomputer would be a great hack whether it subverted sony's business or not.

There's nothing shameful in being associated with Wozniak or Draper or any of the great technological innovators.

There is something shameful in being associated with the "l33t h4x0r kr3w" (or Iranian Cyber Army) and those who participate in mass defacements etc.

edit:

Also, I really don't like the idea that you're pushing, that you have to work 'outside the system' in order to be a hacker. I completely agree that important attributes of being a hacker are the ability to see problems from non-traditional viewpoints, to come up with unusual solutions, to challenge the de rigeur way of doing things, to disrupt. And those attributes are shared by many subversives.

But the important difference to me is that a hacker is constructively subversive.
Nice job guys. As Obama's trip to India demonstrated, India is (or rather will be) an emerging tech center, so it makes sense that it is ripe for its own version of Silicon Valley. Any online community that can facilitate the growth of its local physical economy is a good one.

Not sure I agree with all the negative comments here about the IP issues. After all, NewMogul.com was (is?) pretty much a clone of YC News here, but open to submission and discussion about more broad topics besides startups.
If you're looking for a more polished version of this game, "Turing Complete" on steam has the exact same premise.
Elon will definitely access private conversations if he takes Twitter private.
First, I need to restate the rule to give it nuance. Original research isn't allowed on Wikipedia. Primary sources are acceptable for simple statements of fact, but editors can't make analysis of or synthesise what is contained in that material. That analysis or synthesis requires reliable secondary sources.

The epistemological basis for the "no original research" rule seems to be because Wikipedia is not a suitable vehicle for synthesis or analysis: it is written by anonymous editors with varying degrees of expertise in the subject area. They are not assumed to be competent to conduct such analysis. They are only assumed competent to find secondary sources that make such analysis and cite them.

The rule also has some pragmatism about it. If such analysis was allowed, it would have to be performed on Wikipedia with its reasoning clearly articulated and developed. Wikipedia is an encyclopedia, it shouldn't be cluttered by such reasoning.

The appropriate place for analysis and synthesis of this kind are peer reviewed journal articles or other secondary sources where the author's expertise or authority to speak to a point, and their reasoning, is made plain. A reader should, at least in theory, be able to check the source and verify as such.

It is also not seen as acceptable for editors, who lack accountability for what they post, to offer such analysis. A news report is expected to have some degree of accountability, to put the relevant statement into context and to consider competing views. A Linux kernel mailing list post does not do this.

That said, in my experience, a blind eye is turned to uncontroversial analysis.
The point is that a random data set will spontaneously produce clustered groups of apparent events that are not due to any underlying cause.
Three things that have helped me.

1. A little bound paper notebook such as a Moleskine.

2. A mind mapping program -- I use FreePlane -- to store links, including links to files on my hard disk. An advantage is that I don't have to get the organization right on the first, second, or even third try.

3. A lot of the information in my life is not digitized, such as most of the sheet music in the world. So I now rely on my cell phone camera to record a lot of that stuff.

Amusingly, when I was in grad school, it was still considered to be an open question whether a person should get their own computer. The university computer store had a little guide, and the most memorable advice -- which certainly rings true in my life -- was: "Don't expect a computer to make you organized. If you have a messy desk, you will have a messy computer."
> Text files are inherently GPU-hostile, and that makes them a weird choice for a graphical markup language.

The point of a standard is to be device agnostic. Tying it to present-day technical implementations would limit its adaptability to future tools, as well as creative misuse of the technology.
Ag stats are pretty sensitive.
I realize that there is a lot of hate directed towards Tim Ferriss and his tactics, but you can learn a ton from him. Even if you ignore everything that he says and writes, just watching him in action will make you a better entrepreneur.

I find that the best way to deal with self-promoting people is to ignore them. I have a limited amount of attention and brain space, and I really don't have time for Tim Ferriss trying to cram himself into every nook and cranny of it.

Besides, Tim Ferriss is a cunt. If you try to learn from his example you'll become a cunt too.

(Interesting: my spellcheck flags "cunt" as misspelled. How else would you spell it?)
I didn't discover a talent. I created it.
Discovering map while writing in scheme was enlightening! It opened my eyes to functional programming and more than made the all nighter worth it.
Another view, a few smart guys build a small patent portfolio for doing HDR and use an iphone app as a method for marketing their technology and making a few bucks. Big Co finds them and their technology and buys them for a large sum. Mission Accomplished.
True. I have been hearing rumors of a Windows 7 upgrade next year. The rumor was initially November but that didn't happen.
I don't know in what world these regulators live in, but in my world 80% of pedestrians are walking listening to an ipod/iphone/iwhatever. We already live in a society where pedestrians do not hear cars.

They've got that covered: http://www.boston.com/news/nation/articles/2011/01/24/2_stat...
It's for 1/10th of the price, so twice better then? Just kidding, my point is that Tesla is selling it in about the same terms. Beta software for extra money, no guarantees.
Well then you're an Obamabot/Palinist and you're blind as a bat, drinking all your Kool-aid, pulling the wool over your own eyes. Commie.

Seriously though, this is a great read.
There's a few segments of the customer market that will pay varying premiums for more customer service/quality, but only so much. Costco exists only in areas with above median wage shoppers, and can afford to exist by offering a limited selection of items sold in bulk. Similarly, a handful of retailers can afford to exist in this market, such as Trader Joes/Nordstrom/Apple/REI/etc, but most consumers are fairly price conscious and won't hesitate to shop elsewhere that offers lower prices. Or they can't afford the premiums for these places in the first place.
The headline would than have said that equal number were killed by mob because of the accident!
One unexpected discovery for me was that wearing a tight FFP3 mask is quite pleasant during cold winter weather.

It's very effective at warming up the air, probably because it mixes it with the one in the dead space.
> and not on the market value of your work

Interesting choice to invoke market value to argue that the salaries that the market has settled on for remote work are too low.

The market value of work isn't the amount of revenue that the work brings in. If you think you can capture the full value of the work you do for yourself, you're always free to work as a solo entrepreneur instead of working a traditional job. That's kind of an upper bound on what the company could pay you, but the market value of the work is based on the number of employees the company needs and the number of qualified employees they can find. Remote work floods the supply with lots more available workers than they can find in any one city, so salaries for those roles go down. That's not treating you like a child, it's just how a market works.
> Creating and updating a 1 million item list wouldn't be a cheap operation in a traditional UI system either.

IDK, works pretty well with Qt's item model system
Oh thanks for the clarification! That was not immediately obvious to me, though in hindsight it does say Part 1. I agree, that is quite the time investment. Like any mini-series, the first segment really needs to nail it to keep the viewer coming back. I share some of your sentiments.
> immediate mode causes more CPU load

Does it? Computers are FAST. Webdev stacks are many things, but it ain’t fast or performant.

Has anyone built a moderately complex UI in a good immediate mode UI and in a good retained UI? I’d be very curious to know the actual results.
About working from home: I won't do it again, unless needed

I will go somewhere else (rent a room/desk if needed) and I'll work there.

Going from "work mode" to "home mode" is very important

"Living in the bubble of Hacker News does distort the perspective. We tend to ignore how luxurious our jobs are. We shouldn’t forget that there is life outside our communities."

Oh this applies to many more things than jobs.
If you are talking about fiat currency, the most obvious and current way of doing it in a decentralized fashion is to pay your power bill while mining for alt-currencies. You pay USD for electricity, the electricity is used for a portion of the payment infrastructure, provides services for it, and you get paid for it with coin. You've effectively turned a payment to your electric company into coin in a highly decentralized way.

For crypto exchanges, there are several ways to do this including Ripple, Ethereum (when it is done) and Mastercoin. See this article on the exchange Mastercoin is launching in March: http://www.cryptocoinsnews.com/2014/01/31/mastercoin-is-laun...
Such keys are supported to a certain extent (e.g they won't be reported as unused). A runtime tool that tracks runtime misses to the store is a part of ruby i18n gem and many other environments already. I have found such keys to constitute a minority in most projects I've worked on.
As one of the volunteers operating the existing Market St. WiFi and the housing project WiFi, I can say that this is definitely being discussed and evaluated, but I don't have a lot of hope for the Department of Technology making anything happen.

They have deeply-rooted relationships with large telcos and utilities that have granted them good deals on easements to lay their existing fiber and copper paths.
If the city started offering competing services for money, it would throw those relationships in jeopardy.

It's really too bad, as a lot of the dark fiber resources are already in place to build a decent backbone that could support radial paths out different neighborhoods.
However, there's very little technical clue (if you're a competent network engineer in the Bay Area, why would you work for a city? ick.) and political capital/gumption towards making this happen.

The layer 0 - 7 stuff is easy. It's layer 8 and above (money, politics, humans) that make this hard to accomplish.

If you're an SF resident, call or write your supervisor. Let your opinion be heard and demand proper infrastructure!

Fiber is becoming the new roads; how you get your product to market.
Municipalities need to step up and get building, because the big utilities and ISPs sure as hell aren't.
that's like saying the only reason people aren't impervious to bullets is because governments wish to use guns to kill people.

there will always be something taboo in society to blackmail people with.