jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
> Your conception of the speed of public-key crypto is warped by how slow SSL is; 256 bit elliptic curve crypto, which hasn't degraded in security for almost 25 years, is so fast that you can rekey 10 million sessions every 10 minutes on standard PC hardware.

This argument implies ECC and SSL are mutually exclusive when they aren't. ECC has been a standardized part of SSL for years and there are many shipping implementations. The same thing stopping ECC in SSL from being deployed is what would stop DJB's ECC-hard-coded protocol from being deployed.

I guess DJB still wants to use Curve25519, but nobody has taken any steps to make Curve25519 actually implementable by mainstream software vendors. The first necessary step is to get it approved by NIST. A second necessary step would be to get IANA identifiers reserved for its use in TLS and other protocols. The third necessary step would be for his claims about the un-patented-ness of the curves verified in a way that venders can rely on. A nice fourth step would be to have it endorsed by the NSA like the Suite B curves. IIRC, this would require some standards to slightly weaken their minimum requirements of 256-bit curves to allow this not-quite-256-bit curve.

> * That being the case, there's no excuse not to bake fast modern crypto into HTTP so that it's simply always there; Bernstein has created a TCP-friendly alternate transport protocol that does exactly this.

Lots of people are working on doing this using existing standards like DNSSEC, TLS, and (maybe) X.509 already. Minimal extensions of these existing standards are going to win unless they are shown to be unworkable or unless some other protocol is soon shown to be obviously overwhelmingly better.

> [B]ake public keys directly into URLs or hostnames ("nym-based security"), use CNAMEs and aliases to make things more user-friendly, and secure the end-user connections to the DNS.

I wonder how this would work in the real world when keys are rotated and/or revoked.
Actually, they're absolutely not taking the position that it's all or nothing:

"That doesn’t mean we’ll never publish them, but
before taking an irrevocable action that could harm
an individual’s privacy, we have to weigh that
person’s privacy interest against news value and
relevance."

The specific request that Greenwald made for partial disclosure missed the fact that the information referenced had already been released, as described by Wired:

"The Times story quotes Lamo as saying that Manning described uploading his leaks to Assange via a dedicated file server, and that he communicated with Assange over encrypted chat. The story says those portions of the conversations aren’t included in the excerpts we published.

"Based on that, Greenwald claims that Wired’s “concealment” of the chat logs “is actively blinding journalists and others who have been attempting to learn what Manning did and did not do.” (That’s one sentence. He goes on in that vein for quite a while.) But the Times story is incorrect, as we noted on Wired.com the day after it ran. The excerpts we published included passages referencing both the file server and the encrypted chat room."

Bottom line for me: Wired's response was well-reasoned and professional, and answered the fairly wild accusations in the original Greenwald piece.
They were working on Storm since before iPhone came out. My initial RIM meetings basically said as much with heavy hints at touch interfaces, and this was six months before iPhone was introduced.
Until you did one spin wrong and it would start spinning the other way :)

It's interesting though that the most common 6-sided pencil would fit perfectly for the cassettes. Had the hole been just a bit bigger or smaller and it wouldn't have worked.

I remember a friend in junior high using a pen to rewind to spare his walkman batteries…
While ATMs were prevalent back in the 90s, what most people forget is that your ATM card was just that: a card that let you get money out of your account. The ability to use it as a VISA/MC came later. You still had to remember to get cash because you might not be near a machine for a while (they were only attached to banks) and you usually only had one credit card for big purchases and emergencies...
It all balances out. The industrial revolution removed the need for lots of manual laborers and replaced unskilled jobs with machines.

But then TV came along and created even more jobs for the unskilled than the patent crop rotator over destroyed.
Ok, so if the chat logs are eventually revealed and they contain information relevant to the accusations against Assange, then you will reverse your opinion?
You should definitely have a gander.
In certain contexts, news orgs will publish full names when it's in the public interest. Very often, the subject or source in a story will request to remain anonymous and they typically honor this unless, again, there is a compelling public interest in not doing so. Subject to your example, it's really, really hard to understand why NYT wouldn't honor Alexander's request here since a) if you really wanted to you could find his full name online and b) they didn't use the same standard when reporting on Chapo Trap House (for just one example) [1], which has much more influence (and revenue generating activity) than SSC ever did.

The reason the article you linked is quite different is, well, whoever that person is was explicitly trying to increase their profile via an interview with the NYT. It's already a literal puff piece.

[1]https://www.nytimes.com/2020/02/29/us/politics/bernie-sander...

>The Chapo co-host Virgil Texas (he lives and works under that pseudonym) went to a nearby bar for a beer...
alternatively, one could consider that bit-shifting isn't nearly as common of a thing as I/O stream redirection.

I'm agnostic on C++'s std stream stuff but I am pretty anti-"yes bitwise logical operators are so important that they get priority over all these symobls".
That's an opinion piece, not a news article. There's also a distinction between protecting a source, and excluding information about the subject of an article.

Fwiw, I was highly critical of the op-ed from the start, and I think it's particularly outrageous now that the author is known to be extraordinarily less senior than one would have reasonably expected.

And the NYT played an important role in starting the Iraq War with the help of their "anonymous sources".

I have no problem criticizing the Times when they're wrong. I think it's an awful paper overall, that's almost entirely entertainment rather than anything that could be called "news".
Worth adding Excel’s default .xlsx format won’t even save macros.
And as Raymond Chen would say, if you have macro execution you’re already on the other side of the airlock. Being able to P/Invoke from VBA is really handy too!
From a more abstract point of view we just build a loop through all permutations of numbers 1,2,..,n. Probably the most efficient algorithm for this task is this one https://en.m.wikipedia.org/wiki/Steinhaus%E2%80%93Johnson%E2...
The fact that the article whose author the NYT kept anonymous was an opinion piece makes the example more relevant to Scott Alexander's case. Scott's work was closer to opinion than news, though it was opinion grounded in rational arguments, explained in detail.

And unlike the anonymous author the NYT did protect, I don't think Scott ever misrepresented himself. All Scott asked was for the NYT to honor the importance of anonymity - something whose importance they have previously acknowledged - in his case.
RoaringKitty is also known as DeepFuckingValue. This name is probably more well known to the general public, but Reuters does not mention it.
"There's a real gap in our understanding of capitalism and crime if it's easier tom compensate shareholders of a toxic company than it is to compensate the direct victims of that toxic behaviour."

Fortunately, the Strauss paper^1 on which this Levine newsletter entry is based does not suggest it is easier. Where did this idea come from. Instead, the author found that non-SEC regulators and primary victims generally received greater recoveries than investors and their securities fraud class-action plaintiffs lawyers, where the class-action lawyers were piggybacking on investigations by non-SEC regulators and litigation by primary, non-shareholder victims. (That is only based on available data; some primary victim settlements might be private.)

In this piggyback litigation the author reviewed, the vast majority of cases resulted were successful for both the primary victims (non-shareholders) and the securities fraud shareholder plaintiffs. In other words, the non-shareholder victims are getting compensated, and they are getting larger payouts than shareholders in piggyback securities fraud class-actions.

There is no suggestion anywhere in the paper that it is easier to be compensated in securities fraud class-actions than in actions brought by non-SEC regulators or non-shareholder victims of the corporation's conduct. In general, class-action securities fraud complaints have a very low probability of surviving a motion to dismiss. Rather, the paper suggests class-action securities fraud plaintiff's lawyers can increase their odds by piggybacking on non-SEC investigations and litigation by non-shareholders who are victim's of the corporation's conduct. That is not surprising.

1. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3664132

New title: Is Everything Also Securities Fraud?
How do you find Neal Stephenson? He's not exactly SF, but his stories do have a SF element to them.
Clio | Remote/On-site (Canada-only) | Full-time |

At Clio, we are on a mission to transform the legal experience for all. As the world's leading provider of cloud-based legal software, we provide lawyers with low-barrier, affordable solutions to manage and grow their firms more effectively, more profitably, and with better client experiences. We make it easier for legal clients to collaborate with their lawyers and understand the legal system, and ultimately help to create a more inclusive legal community and a more equitable legal system for all.

Roles:

- Development Manager: https://boards.greenhouse.io/goclio/jobs/2072662
- Security Engineer: https://boards.greenhouse.io/goclio/jobs/2628467
- Senior Developers: https://boards.greenhouse.io/goclio/jobs/2944627

If none of these are a fit, please take a look at our job board as we are hiring a TON of different roles: https://www.clio.com/about/careers/engineering/

Please email me at elise.mance[at]clio.com or apply directly!
This is the exact same reason I can't go for a OnePlus myself. I would look elsewhere.

edit: even if you flash the phone with open-source ROMs and firmware, the closed-nature of cellphones in general make it nigh impossible to know what hardware backdoors the manufacturers are forced to put in.
Wasn't it developed by Asobo, and Microsoft being the publisher?
That’s very neat - though I think orthogonal to my Nix plan. Certainly suits anyone that wants to manage multiple APs from the same interface however.
Well I am really glad you are here and i'm also glad they worked as well for you as they did for me.

Out of curiosity, why even have the desire to get off the meds? do you experience side effects?
Yeah, but Thomas said "The majority can not square it's fundamentally flawed fair-use analysis with a finding that declaring code is copyrightable".

Which is obviously false. A fair use analysis can -only- take place if the assumption is the code is copyrightable; if the majority had first decided the code was not copyrightable, fair use is immaterial.

Thomas' argument, if followed, would either have led to this same decision, or would make the opposite point he was trying to make.
Yup, aware of those. Should probably clarify that I'm specifically trying to say that AFAIK there isn't any "anti-virus" that runs on Linux and is performing any level of behavioral analysis. There are a lot of _auditing_ tools that can allow detection of bad behavior like this, and you can alert / remediate based on that behavior though.
How much manual work is required in training the text model? Do I need to give examples?
Interesting, I think there is some truth to this. Making more from investments than you make at a day job is pretty demotivating.

Wouldn't raising the corporate tax rate further reduce economic growth though, making things worse instead of better?
First dose gets you to 80% efficacy after about 10 days.

If you e.g. produce 1 dose per month, you're way better off giving the doses to ABCDEFABCDEF than AABBCCDDEEFF. Six people are 80% protected after 6 months, instead of 3 people 95% protected after 6 months... assuming that everyone ends up at the same efficacy at the end (which we don't know).

But... we know this is probably effective-- probably even more effective after the delayed second dose.. which isn't the same as showing that it's effective in a study.
I think it’s worth pointing out that there is nothing “conservative” about cutting funding to a pandemic response team. “Republican”, perhaps. But not “conservative”.

Note that many countries with broadly left wing governments, such as those in Europe, were also not prepared for the pandemic, and will also pay a high cost.
The distinguishing feature is:

"You can download courses interactively on a prompt, which will list all course domains and their respective courses available with tab completion."
It's a gamble the British government are already taking, they decided to extend the time between doses to give me people the first dose sooner. We'll start to see in 8 weeks or so if it was worth it.
I think this thinking is, at least in part, a result of assuming that the decision makers are optimising for the same outcome as you might expect them to, eg. long-term growth, profitability, etc. rather than, say, bleeding the company of its human equity for short-term increases in monetary profit, that otherwise wouldn’t be attainable, and likely as a result likely furthering that decision maker’s career, assuming they exit before implosion.
I'd like to use try code generators that generate code from flowchart. I like DRAKON style but it seems unmaintained.

Anyone knows anything similar to it but more modern/better maintained?
This would be a delicious form of ice cream
Based on price alone facebook would seek out lower paid workers and exclude SV employees. Is that the final outcome?
FDR wasn't God. He can be wrong about stuff.
All the article says is that they subscribed to other people's public calendars. I do the same with many of my colleagues, am I harrassing them?

Is it also pure coincidence that these union organizers just happened to be fired for harrassment soon after Google hired a union busting company?
>why leave it out?

Because he summarized the plot, not the paper.
Whoops, I seemed to have misplaced my endoscopic camera. \s
A solution to run non-headless Chrome browsers in the cloud would be welcome. We used Sikuli and now UI.Vision RPA for test automation, and have to manage the servers for it ourself. If I could outsource this to a service like browserless, it would be convenient. (Applitools was an option I looked at)

The web app we are testing right now (SaaS for architects) makes heavy use of canvas elements and can't be tested headless.
Certainly, but that's nothing more than a truism.
> The number result is 0.008333333333 with the 3 repeating forever. For a computer to store a number that repeats forever would require an infinite amount of memory

This is clearly a literary technique to create interest. Like saying something like "I told you a billion times not to exaggerate". It should be clear to most readers that this is not an attempted mathematically precise comment.
You do realize that MariaDB is also Mysql compatible? As is PerconaDB. No one is arguing that aurora isn't mysql compatible and that video doesn't contradict AWSs own website that says mysql compatible aurora is based on mysql.
That's some insidious auto-incorrecting there!

I actually hate all auto-"correction" features with a passion. After every Office update at work I have to go into the Outlook settings and manually disable all of that crap, but that still beats the hell out of having to live with it.
Extending the example, “if a company A (eg. Marlboro) pays you a salary X to do your fucking job Y ( make cigarettes more addictive) and if you use that money and time on activities Z(whistleblowing, protesting, etc), especially if it negatively affects company A's image / revenues, why shouldn't the company be allowed to fire

I think people feel strongly about certain issues. That doesn’t imply that what they are doing is inherently wrong if driven by those core sentiments. How about we empathize- We can respect both Google’s and the employees’ action without choosing sides.
If I only have to allow one page, it's all good.

But then the first page wants to load from another 10 pages. I allow the non-tracker ones, usually two or three. Reload.. and they want to load from another 5 pages. I usually give up here since I'm not that interested anyway. Why the heck do you need code from over 15 external pages?
Apple offers educational discounts.
I think in either the first or second keynote back to when React native was announced they talked about their reasoning behind using flexbox. I think it's also 'the good'. They were able to use a web technology and make it work in react native just as if it's the browser, pretty impressive. If they had to come up with their own 'css' style layout api I would then have put it in 'the bad' myself.
Lots of postmortems on Gamasutra have a "What Went Right" section; pick a few games you consider successful from the list below, and read what they say about that. Of course, it's not so much about what to do, but about doing it right: there really is no silver bullet. But in products like games, where everything is so tangled up together, every mistake send ripples of trouble across the entire project and team.

http://www.pixelprospector.com/the-big-list-of-postmortems/
This is discussed in the article. Do you not agree with the methods presented?
So this is just glorified tombstone debugging..? Why not use a proper debugger, like gdb?
> If you're forced to split out your view, your template, your stylesheet, your controller, your model, your business logic, et cetera into separate files you are forced to keep components large.

Why exactly does this force you to keep your components large?
Well, I guess I won’t be working for Coinbase then. I am probably of the rare breed, who actually likes to go to office (not everyday). I can’t imagine staying home all day everyday basically hopping zoom calls. I hope other companies use office presence as a competitive advantage at this point
Reports of its living have been greatly exaggerated.
Note, I've heard that Mozilla takes donations, but I don't think Firefox does.

Personally I don't mind at all if Mozilla wants to display ads in Treeherder or in their corporate offices, I wouldn't even feel like I want to pay to remove those :)

My point being, I don't expect firefox donations would amount to very many millions, but it's important to note that today the option doesn't really even exist.
The failure of Pantsir in Libya has been fascinating. One has to wonder if it's a failure in design/tech or in training and operations? Same with the drones that were used with impunity in Nagorno-Karabakh. I also wonder if the Russian's have been hyping their SAM systems too much. Not that they're not formidable, but they often seem to make their A2AD systems sound impenetrable.
See the example of Tesla 2013. Apple is not hiring to keep the startup or the innovation. But for the up or even worst:for the talent. Its like selling your house to the scrap guy
Cool - thanks for the reply!

If some credits or a startup discount are ever helpful, we have a startup program and can help out there. Let us know.
It seems to me that Apple buys companies because they want to research and build a technology into their products, rather than eliminate competitors. It seems to me they’re more interested in the talent than the market.

That kind of behavior I attribute to Facebook.
Google/Alphabet has received more than 8 billion Euro in fines by the EU. I wouldn't generally call them toothless.
> [Edit] When I delete my account I'm going to lose old conversations, but that doesn't bother me anymore because I already recently lost them once when I switched from Android to iOS... WhatsApp has no way of keeping your history in that case. And otherwise there's really no friction to deleting an account, since you can always recreate it.

There are several third-party tools that allow to convert the history from Android to iOS. I recently switched and was able to keep all of my history.
I thought everyone decided we didn't need a vast number of ventilators like we thought we would? There was a huge panic for a week last March and a lot of random companies were going to be making them, then it just seemed to go away.

Does anyone know if we managed to ramp up normal production or there was some other reason it stopped being an issue? Or maybe the issue didn't go away just the media coverage and they're still trying to use ad-hoc ventilators?
> and in those cases it's fine to hire a consultant to help.

If I want to be that consultant, what area would be a good choice to become proficient in on that level?
What's weird is that I don't know anyone who uses it. This is because (a) I'm an American and (b) nearly everyone I know uses an iPhone, so we all use Apple's own messaging tool instead.

I know some crypto fans who really try to push for folks to use Signal, but there's too much inertia. WhatsApp isn't really on the radar.

It's wild to read how much of a monopoly it enjoys elsewhere.
Looks like maxing out acceleration solves all other problems. I guess we should require a minimum power-to-weight ratio for cars from now on.
AnySoftKeyboard has swipe-typing, though alas it's not as smooth as in commercial apps.
sms/mms?
Is this why Game Freak is not part of Nintendo?
Most likely. The open source movement in software was still relatively recently and quite radical. The hardware companies are still stuck way in the past.
Not really, they are only making it less likely that we use their chip in our product because we never tested it and can’t make a prototype with it.
If the device is malfunctioning due to say a break in a ventricular lead, patients can be shocked every 40 seconds as the ICD tries to restart the heart. So the magnet switch allows fast and easy deactivation without knowing keys.

Remote adjustment and monitoring over wi-fi does require two-way keys, which is a good thing.

Note I have an ICD for Brugada Syndrome. Come the robot rebellion I'm already on their side as a cyborg!
For this to have happened they'd have to have managed to do this on the initial count and all subsequent recounts, under observation by three different parties of interest and maintained a relatively consistent final number of votes.
This is a zero-sum view.. just because you benefit doesn’t mean the other side suffers. You get the service you wanted, the other person gets the money they wanted. They wouldn’t be doing the job if they had a better option.
The only advantage I can see is for people who don't monitor their expenditure well so their purchases get denied when they try to spend too much on a particular thing. Otherwise, I agree, there are plenty of services and other banks that allow you to categorize transactions so you know how much you are spending on particular things.
Way back machine to the rescue!

http://web.archive.org/web/20150106023452/http://www.conosco...