jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Some more interesting crypto questions, for interested HN'ers:

- Write code to verify message integrity, given a tuple (message, authentication_code) and a function authentication_code(message) (Google "Timing attack" if you think you couldn't possibly get this wrong);

- We store passwords salted and hashed with MD5. What do you think? How about SHA1? (Yes, this is bad, since these algorithms are too fast and hence allow dictionary attacks on the passwords; "PBKDF2" or "OpenBSD's Blowfish scheme" are good; bonus points if they know about scrypt; should include a discussion of password complexity);

- An open source project put a project-1.0.zip, project-1.0.zip.md5 and a project-1.0.zip.md5.sig file on their FTP server. Discuss. How about SHA1? (The .md5.sig file safeguards the .md5 file, provided the PGP key used is well-known. Collision attacks for MD5 exist; therefore, a malicious maintainer could serve a carefully-chosen but benign file to most clients and one with a backdoor to, say, .mil. Conversely, no (second) preimage attacks are known, so only the maintainer could do this. SHA1 is safe, for now, but it would be wise to upgrade. Bonus points if they know that the zip format is easy to manipulate. A small amount of bonus points if they express surprise at seeing a zip, since it's mostly GNU projects that use this "double checksum" and those tend to use tarballs);

- We have an API of the form http://mysite/set/key1=val1,key2=val2,...,keyN=valN,hash=foo where foo=MD5(customer's secret || key1 || val1 || key2 || val2 || ... || keyN || valN), where || denotes concatenation. Discuss. How about SHA1? If you disagree with this design, what would you propose? (This idea, based on an old design of AWS, is completely horrible, for either MD5 or SHA1. The obvious issue is that MD5(secret || "a" || "b" || "c" || "d") = MD5(secret || "ab" || "cd"), so that it's a valid hash for either a=b,c=d or ab=cd; the less obvious issue is that MD5 and SHA1, being based on the Merkle–Damgård construction, allow calculation of MD5(msg || msg2) from MD5(msg) and the length of msg. The correct solution is to use e.g. HMAC-SHA1(customer's secret, key1 || "," || val1 || "," || key2 || "," || val2 || "," || ... || keyN || "," || valN), ideally with a way to select the algorithm. Or use HTTPS with client certificates.)

But I agree that people, by and large, shouldn't be directly using any of this stuff.
I live off of TekPub (http://tekpub.com) and Adzerk (http://adzerk.com, http://theloungenet.com, http://rubyrow.net).
I had only heard of the virtual boy before reading this. Clearly not "living in infamy".
Yeah, I've wondered this too. How do so many incompetent people create so much value? Yet, with the recent economic trouble, it's a bit less mysterious. They don't.
Previous discussion: https://news.ycombinator.com/item?id=3779735

It is an interesting article, even though things may have changed since it was published.
also the way she walked into the coffee shop was pretty unnatural
You are talking about extension springs? In my experiance torsion springs break very harmlessly. They just snap and unwind but stay on the shaft. Torsion springs are the only kind I have myself seen used for garage doors.
Yes, we are really always hiring. Don't feel like this any particular bar you need to reach; you can't waste our time. We interview all sorts of people with all sorts of backgrounds. Some fit, some don't, but not neceessarily the one's you'd think.

We also have a history of interiewing the same person repeatedly. I myself interviewed twice before I came to Matasano. There's nothing wrong with realizing it's not a good fit at this time, and coming back around at a later date. Seriously, you can't waste our time.
There's been a shift from freedom of speech to successful demands for censorship everywhere, and it only took about two years. That's scary.

The real power behind this was not social media. It was television. No need to rehash the history of Fox News and Trump. The key point is that news detached from real-world facts became the major input for a sizable fraction of the population. Fox discovered that there's a huge market for telling people what they want to hear. Notably, to the exclusion of contrary views.

Supply-side propaganda has been around for centuries. Now we have a market demand for propaganda. One that pulls media into being even more radical. That's new. Eventually even Fox felt they'd gone too far. Then they started losing viewers to Breitbart and OAN. It really is demand pull, not supply push.

Social media let you listen to people you want to listen to. So it amplifies this phenomenon. But it didn't create it.
https://archive.is/oW53w
:-D

But tbh

> I’m not hurting anybody, I’m not robbing banks. Just let it ride.

He's got a point there. Better this than some pedophile bbs on tor.
It's magnificent in that way, the man in question really is honest and open about it. I especially found the last answer pretty funny: "I had the nurse coming in at night showing me her feet. I actually took her out to dinner a couple times. I can just get girls out of their shoes, it’s a thing I can do."
Odd results, with the male scores dropping, but I suspect that merely has to do with a small sample size (399 in the whole set).

This makes sense, especially as a number of people I know feel stupid because they have test anxiety. My wife included. "Non-"tests such as these seem like they could help quite a few, as they have the exact same physical location as real tests, but break the trend of habitual anxiety because little to nothing is on the line. Practice tests elsewhere don't share the classroom setting, and there's quite a bit of evidence that location influences memory / emotion, so it would seem they should be about as effective as they are at combating anxiety (ie: not much, and not for many (anecdotally)).

edit: <strikeout>Though, to be potentially inflammatory, this does seem to support the opposite stereotype of men having more control over (non-anger-based) emotions than women. Especially when you look at the original article (linked below by Locke1689: http://news.ycombinator.com/item?id=1943596), and see almost no difference in score distribution for men but huge changes for women in the B and C categories (A had almost no change - surprise, surprise, the ones without testing problems showed no gain).</strikeout>
Well, brace and semicolon is considered "not idiomatic," though of course lisk as an alternative is even less so.

Regarding "where," it seems like most of the time "let" is an acceptable substitute. "where" is most convenient in conjunction with pattern matching syntax, so perhaps the solution to the problem of where and pattern matches can be neatly handled together.
It also points out how little money Bezos really has compared to the cost of running the country. Assuming he could get the current market price for all his Amazon shares (impossible) he could fix 100 decently sized problems in the country and be completely broke after. There are way more than 100 decently sized problem.
Could these predictions be more telling? Computers will make you irrelevant. They'll make you useless to society. You won't be important anymore.

These predictions are the very definition of FUD.
Some basic music theory so I can write my own chiptunes :-)

Also planning to give Haxe a try one of these weekends, to see how pleasant it is for coding small browser games.
Cobra compiles to CIL and runs on Mono/.Net runtimes. I think its philosophy is close to Pyret: they both seem to be taking the best ideas from different languages and trying to integrate them into one nice package. There are some similarities in features chosen, but I'm not working with either, so I can't do a deeper comparison.
> (Commenting on the main point made in this thread: it is technically the government's responsibility to not be swayed by whatever corporate influence tactics are used on them. They do a piss-poor job at it - somewhat understandably, as the money & influence provided by corporations often makes the difference between staying in office and being removed from office. But in theory, you can ask for whatever boons you want, it's just that our elected officials are supposed to consider the rights of all citizens when granting them.)

Agreed, and again, seeking preferential treatment (whether directly or in the form of regulations that are easier for you to comply with than your competitors) seems blatantly unethical. However, it shouldn't take asking a "boon" to stop the inexorable "this looks big enough and has enough money in it now, time to screw with it" cycle that seems to crop up every time an industry or company gets large enough for local governments to notice.
I think we were both unhappy the same way and I think there is going to be quite a lot of people with the same experience. While I love[d] learning new things I just hated high school, homeworks, ... as all of that was so boring.
Yes I have tried Debian. Debian is not near as bleeding edge and may not have as good of driver support. It is also quite often slower. If you really want the best performance, a distro like Arch is really the only easy way to get it. Arch is also rolling release which also makes it easier long term. I've actually tried probably 20 or 30 distros and Arch is my favorite. It is difficult the first few times you set it up, but the benefits are great, if you have the time and patience.
"[R]estaurants find that they themselves no longer own the customer relationship."

This is the dumbest thing I've read today. I am sitting in your restaurant! I am voting with my dollars by choosing to show up at your establishment! If I like what you have to offer, odds are I'll be happy to give up some personal information.

If you want to know my email address to inform me of special events, or to give me a gift certificate for my birthday, then just ask me! It's not that hard.

Additionally, if I need a reservation to eat at your establishment, and you're not on Urbanspoon's Rez system or on OpenTable, you may as well not even exist. I'm not going to call you and a dozen other places looking for a last minute table. It's simply not worth my time.
I interpret his statement as meaning "we could use quantum entanglement to transmit information at c (or c minus epsilon) instead of .66c".

But (as far as I understand) quantum entanglement doesn't let you transmit information at any particular speed, so that still doesn't work. (Roughly speaking, QE can be thought of as "the universe transmits information at >c", but in order to extract this information, we have to send messages conventionally. So it has a theoretical upper bound of c, like everything else, but has the same practical limits.)
I just moved here in October and I don't really know anyone. The more I'm here the more I wish I lived in SF. The ridiculous thing is that it takes me 25 minutes to get to work from where I live (the Willows in Menlo Park) to SLAC because the intracity traffic is so SLOW.

Basically though, I think the bar scene here blows. It's cool that a lot of the food places are open late on University though.

That being said, while I think long commutes generally suck the life out of people, I'm seriously thinking about moving to Noe Valley or the Mission and commuting on the 280.

Anyways, I'm up for doing stuff if anybody here wants to. I still don't really know anyone in this area.
I suppose Percival Lowell's "nobody knows" telegram to William Randolph Hearst doesn't count. And he did it with twice as many words.
I bet this could be a great answer to the poster in the "Shadow Scholar" thread asking how he could possibly write 10 pages per hour.
Always have been. Still are.
Someone brought an interesting perspective in another thread and I can't shake it off.

The other side keeps deplatforming them. Their legal cases are rejected. The mainstream media refuses to take them seriously. We're not even listening to them, because it's science and they're *ists if they disagree. We're not debating anymore. We just assume we're right.

We are slowly squeezing a significant segment of the population out of public debate, and they are powerless to stop it. Is it surprising that they are furious about it, and explode in unpredictable ways? Wouldn't you do the same?

E: I accidentally hit submit halfway through my argument. You might be replying to a really different comment
For a computer most will use the back of the keyboard :)

reminds me of this xkcd:
https://xkcd.com/538/
He didn't, though.
* they were refused backup both before hand and long delays during the seige
A for-profit FAANG cannot own a nonprofit like Signal, yes. I don’t know if it’s a 501c or a 501c3, but I think that’s irrelevannt.

But a for-profit company can select all of the nonprofit’s board members and thereby largely control the nonprofit.

This happens all the time w/conservation groups and environmental non profits and their unholy alliance with real estate mafia.
Thanks for the correction. I just used the DefCon as a catchphrase.
Can someone post a source that isn't a racist hole? And CloudFlare, please nuke this garbage from orbit asap
I don't think anyone has ever taken his comment to mean, "all people on both sides were fine".

But as usual, his response to a hate crime was to paint it as: there were violent people on both sides and good people on both sides. Which implicitly means, there is blame to go around and I am not going to condemn any one side more than the other.

When what people wanted to hear was that this whole tiki torch parade with confederate flags and other hate symbols mixed in was a terrible representation of our country and we need to stop the hate.

"Good people on both sides" is just an easy way to sum up his inability to call out hate without excusing it.

And regarding the good people that were there, if I'm a good person and I am in a crowd that starts waving hate flags and chanting, "the Jews will not replace us". You can bet I am going to be gone from that place as quickly as possible.
I agree it's a very weird API, but you get used to it. In python, when initializing the DB I always use:

conn.execute(f"PRAGMA cache_size = {-1 * 64_000}")

That way I never forget about the minus.
I saw Chick with Steve Gadd (amazing) at Blues Alley in DC in 2018. What a great experience.
There's a fun one I hadn't thought about that was mentioned here sometime last summer:

What do you do if your Raft data is in zookeeper and you want to move it to etcd or consul? We need 'migrations' for our non-db data too.
The people that need to make sure Linux apps run REALLY fine on windows and macos are windows and Apple.
> Also, F1 drivers since the turbos returned are much lower pitched, since they rev only up to I think 12000rpm now - you might be surprised!

Oooh that IS exciting! I haven't been paying much attention ever since they banned V10's, but if turbos are back it might be time to revisit.

And that's really interesting about the batteries. Haven't thought of that but it does make sense.
That seems ripe for the usual government work to consultant career path.

Then again, maybe what you're referring to is that their knowledge falls along the lines of state secrets, and pedaling their skills outside the NSA could be considered treason?
There are people who don't care to simplify the code even after the fact.

I worked on a project where half or so of the code was copy-pasted from somewhere else in the same codebase.

The original author claimed that this way is better as it allowed him to see what the code does without jumping around the whole codebase.
The entire profession is rooted in split-second decisionmaking, for reasons I cannot fathom

Because insurance companies, Medicare, and Medicaid reimbursements barely cover costs, so to be profitable they have to make it up on volume.
But what do you mean by "your labor"? How could you not have a monopoly on your labor?

>Would also include inventions.

Inventions don't exist because of a single person. In most cases there is only one or a few workable solutions. Most patentable things are invented multiple times.
To me, this feels like part of a cooking change we'll remember in 20 years.

We were all taught to cook dry pasta in a giant pot full of boiling salted water, the more water the better. No! Not optimal!

A trivially simple change fundamentally alters the process for the better: soak the pasta in cold water for a couple hours (as far in advance as you like, for convenience). The pasta rehydrates and takes on the texture (but not flavor) of cooked pasta.

Cook it in any hot liquid, quickly (3-4 minutes). Done.

The Ideas In Food book (which is a-m-a-z-i-n-g and nerdy) plays around with this technique in a bunch of interesting ways. But they didn't manage to turn box pasta into ramen noodles. Turns out: not so difficult if you use the modern technique.

This article gets even cooler than making ramen at home. Read it! Strong recommend! Extremely hacker-y!

Also: Lucky Peach is pretty great.
bad link, go to the full story straight away: http://www.salon.com/news/opinion/glenn_greenwald/2010/12/27...
Are you serious? 3 to 4 minutes is a lifetime.
I've done it. PM me your contact info at "me at rwd dot im" and I'll give you a call to discuss.
How do you manage to get anything done with such frequent interruptions?
If you have to ask, travel.
Glenn Greenwald has consistently delivered the best analysis of what has been going on with Wikileaks. He's appalled at the way most of the media has covered this story and I couldn't agree more.
Nobel Prizes aren't awarded for brilliancy. They're ostensibly awarded for contributions to science. Since that generally involves discovering something new, it's really no surprise that members of the Manhattan Project (who were working in a previously unexplored area of physics, with gigantic resources at their command) would make some momentous discoveries.

Contrary to this, the Iranians and North Koreans aren't working on anything new (at least not under the auspices of the nuclear energy/bomb project). So don't expect many Nobel Prizes to come their way.

They're rehashing a tried and true path, with a lot of information (both in the public domain, along with probably a good deal of stolen classified material) available to them that the members of the Manhattan Project did not have.

That isn't to say that there aren't any brilliant Iranian and North Korean physicists working on the project. I'm sure they've got the cream of the crop in Iran and North Korea. But just because they're working on this doesn't make them world class physicists.
How did they even manage to put that watermark there in the first place?

Did they just take a screenshot from an unactivated Windows machine?

This whole project is a joke.
> Remote Frequency Health Tuning through Quantum Entanglement

What is that supposed to be?
I haven’t seen any comments encouraging anyone to buy this phone.

If you take making fun of the phone and the people dumb/gullible enough to buy the phone, “encouraging republicans to buy this phone,” well, I don’t know what to tell you. If someone is so full of spite for the evil leftists that they’ll run to anything some of those users make fun of, that’s on them.

But no one thus far has encouraged anyone to buy this piece of shit product.
Although I'm not super familiar with CRDTs, respect for being intellectually honest and humble. Its tough separating ego from our work, especially if we spend a lot of time and energy on it.
No not that level, one level up though. Like, your form for defining a protocol is wrong, or for deftype or that kind of thing.
A big thing is that v0.8 adds the (foo:bar 1 2 3) syntax; I tried using LFE for a while a few years ago and just found the (: foo bar) syntax too cumbersome. I think I had meant to hack it into LFE but in the meantime I discovered that Erlang's native syntax, while perhaps idiosyncratic in some ways, is pretty nice for daily use.

The big advantage of LFE would be macros, which otherwise have to be done with parse transforms in vanilla Erlang. (I understand Elixir also has macros, but sad to say I haven't gotten to dig into it yet.)

Now that I know LFE has the namespace-style syntactic convenience, I'm going to have to try it again.
Because check mate is a very small subset of possible moves at the end game, I'm guessing the vast majority of games will end(?) with 2 kings moving around randomly for all of time.

This assumes most games will make it past the hump of mid game where its possible the king's motion will be limited and a checkmate can erroneously happen, I suspect this is a rare case as well.

On a side note I wonder what kind of useful information could be mined from a huge set of random-random games. Maybe the relative power of each piece in terms of the number of pieces it captures on average? Also with some heuristic tweeks you could probably start exploring the power of various openings. Of course then its no longer random-random.
Crotch bursting (which is the hilarious technical term for it) is more common than you'd expect. Major reasons are over-washing, but a bad fit, stretch fabric, too-thin fabric, and poor stitching are the major reasons for failure.

If you are finding that your jeans are always bursting at the crotch, identify first if it's happening at a seam. If so, buy a different brand. If it's not, wash your jeans less.

If you must wash them, do it inside out, and always let them air dry. Don't use bleach, or any detergent with oxidizing chemicals (this is more common than you'd think). Ideally you should't even wash them in a machine. I think the absurd movement to wear jeans for months without washing is unacceptable if you ever plan to wear them outside of sitting down at a coffee shop, but hand washing them is much gentler and will have your jeans last for years. I own more than one pair of jeans that are years old, and have seen hundreds of days of use without any damage.
White down to King, Black with Bishop, King, Knight, pawn promoted to Queen... but oh, the mistakes. White swept up piece after piece and could Black still take it with a King-Knight combination? No. No he couldn't. Stalemate.
Brave New World, Fahrenheit 451, Dune, Foundation series, Martian Chronicles & Illustrated Man, Ender's Game, Accelerando, Hyperion, The Forever War, Player of Games, Snow Crash
nobody is stopping you from using it, i think the argument being made isn't that "they had it first," but that a lot of materials are going to conflict with the already-established PHP Composer, and that it presents a possible confusion for your (potential) users.

I'd rename it if it were my project. And "go" is pretty bad, but it's clear that if you're looking for specific resources, 'golang' is the appropriate tag/search term.