jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
This "$5 wrench" XKCD always come up but... Plausible deniability ain't the only way around it.

For example there are safes that, no matter what you do, are only ever going to open on, say, wednesday morning at 10am. Or a safe that shall only open if, one hour previous to that, you entered your own personal code + a rolling code. You enter the rolling code and the one-hour countdown starts. Now... If you can only get the rolling code by calling someone (for example a security company) and if that person accepts two words, one being the real one, the other the "I'm under duress" one, now suddenly the "$5 wrench attack" doesn't look that great anymore.

BTW my home alarm has something similar: they'll came me after either a break-in or if I push the button "I'm under attack"... Then through the speakers they'll ask me "the" word. No matter if I say "banana" or "potato", they'll answer: all is fine, good night. But... "banana" means "everything is cool" while "potato" means "I'm under duress". Cops show up in 120 seconds where I live. The $5 wrench dudes better make very good use of that $5 wrench that'll, for sure, bring them billions of $$$ (such intelligent human beings btw: they figured out that a $5 wrench shall bring them riches) because in 120 seconds the cops are going to be there.

Back to the safe: the countdown starts and the attacker has no clue if the police has been contacted. They have to wait one hour. Oh and both codes starts the countdown. But the "I'm under duress one" will lead to some failure message on the safe "Error: mechanism locked" or "Bug 2134978" (whatever fancy you can come up with).

A $5 wrench attack is one thing. Kidnapping someone for days is another thing. Waiting for a safe to open for one hour without knowing if the cops are on their way (and have one hour to be there) is yet another thing.

My point is: I'm a bit fed up by people who have the victim mentality and think nothing can be done versus attackers. If attackers were that smart, they wouldn't be doing $5 wrench attacks in the first place. Use your intelligence to come up with schemes that a $5 wrench attack cannot break.

Another good one: a safe which only opens after a countdown of one-hour, no other way round. But as soon as you enter the code (and the countdown starts), a video feed of the room where the safe is located is sent to a security company. Someone at the security company checks the feed: he sees the $5 wrench (or he sees two people in the room, which is forbidden)... He calls the police and the police has one room to get the dude with the $5 wrench.

I much prefer people who think not just about how to resist $5 wrench attack but who thinks about ways to maximize the chance the one holding the $5 wrench ends up where he belongs.

So yup: I'm a bit pissed by that $5 wrench XKCD. So pissed I may actually one day join forces with company working on solutions to fight against that.
I can't wait for the hilarious unintended consequences.
I'm thinking about the password replacement use case. If an attacker (somehow) was to profile my typing, presumably they'd be able to replay keystrokes matching my own. Is there a way to "change my password" in those scenarios, or are there some sort of liveness checks you can perform to defeat replay?

I registered, but I was surprised to see the registration used username+password. I suppose different use cases require different tech, but that was unexpected.
What? I mean, it's a bit brutal in the phrasing, but the honest truth is that all businesses should strive to design their orgs so that people are replaceable.

That's good for the employee too. In the strictest sense, if you can't be replaced in an org, that means you can't grow, change or shift to new positions.

I've lived this. Typically, when I submit my resignation, immediately the responsibilities and tasks of my current position get handed off to others or dropped, because, well the business is replacing me.
Part of me can see the argument that he bought that property thinking (and being told) that the beach was not public.

Another part of me is like - what's it to him? It seems like it'd only help him to make the beach public and be the good guy.
Hm I'm not sure it was actually a load problem. The server load never spiked. I'm guessing the hosting got in a weird state, either on the server side or the producer process.

EDIT: But in case it happens again here's an internet archive link: https://web.archive.org/web/20191126170030/https://patchbay....
The history of the world is not ergodic.
There’s no need for AI to actually work the same way that the human brain works, and that’s never been part of the definition of “AI.”
Completion and refactoring are much more important than these.

When working with code it's very powerful to work on a higher abstraction level. E.g. move this method to an other class and update all references to it automatically keeping the code correct. It takes a few seconds in a modern IDE while in a text editor you have to do most of it manually.

When you get used to the power of refactoring, you start to use it more and more, like a sculptor getting a more powerful tool.

Open source editors should pool their resources to create such powerful refactoring tools which can be accessible in any editor via LSP or something.
I don't want to make this a game of one upmanship but I'd be surprised if there are GUI things you could do on a machinetosh that you cannot do on Windows.
Possibly placebo, but I felt like bone broth helped during my Achilles tendon recovery.
I keep trying to use VSCode because there are aspects of it that work better than vim. I always end up back with vim. I think that is because an editor that sits on top of a CLI is much more useful than an editor with a CLI on top of it, at least for my work.
Not mentioning that to get the blue mark on Instagram, you can pay a facebook employee that will give you the badge. This is surreal

https://mashable.com/2017/09/01/instagram-verification-paid-...
No it said not use that for marketing. And they didn't, the sales person said he would be the point of contact. They didn't market or try to sell him something in his message. He just send a request to be his contact.
This is what rocket league uses. While it can be unpleasant as a high ranked player to jump in a lobby with your much less skilled friend, overall the matchmaking system and equality of matches is in my opinion utterly fantastic
Here you are:
https://github.com/tensorflow/swift/blob/main/docs/WhySwiftF...
But to some extent isn't it always going to be bolted-on and dependent on library authors to which extent it's consistent?
Right... Because Apple has done that so many times... oh wait they have done it exactly once since re-launching after acquiring NeXT. IT was Obj-C and now it's Swift except they actively support Obj-C still, so I'm not sure what you are talking about?
If your takeaway from 2020 is not "domain experts are always right, and there's no need for independent research from the outside"... you learned a really bad lesson.

That most certainly is not my takeaway, but perhaps you mistyped. What I had reinforced in 2020, however, was that though domain experts occasionally make a bad call (including you, dear reader), I'd still take their opinion over some random jackass on the Internet spouting off about "yeah, but remember when they told us not to wear masks?"
Well, maybe it breaks down, maybe not.

If P = NP, that doesn't mean there are practical algorithms in P for the problems in NP. It could turn out that for all the problems in NP that we currently think aren't in P, the solutions in P are O(n^100000).

Also, it can go the other way. Just because a problem is NP complete doesn't mean that if P != NP we can't solve it efficiently in practice. It just means we can't get an efficient algorithm that will work in every single case. It may turn out that the problem instances that actually come up in real life are amenable to fast solutions.
True, my bad
This is sort of a no-brainer. I'm pitched by recruiters about once a week, and they're all for far away positions - typically SF area, but other areas too. I can't sell my house any time soon - the market just isn't moving - so I'm somewhat held hostage by geography. This doesn't mean that I can't travel onsite and visit your office regularly, nor does it mean skype and phone don't work out here in the sticks :)

Telecommuting requires the entire team or ideally the entire company be set up to work like that - just having one guy out in a different state or country on his own doesn't work very well in most cases. I understand that. What I don't get is why more companies aren't structuring themselves to take advantage of remote workers.

If you have strong procedures in place to deal with remote/offsite workers (fulltime or not), you can more easily integrate short term labor when you need it - you'll have the shared workspaces, file transfers, documentation, version control, etc, already set up and ready to let new people in as needed.

This seems like this would be a competitive advantage that more companies should be looking at. Maybe they will be in the coming years as the impact of underwater mortgages and geography-locked workers starts to impact the broader tech labor market.
Bad title, good points.
https://en.wikipedia.org/wiki/St._Lawrence_Island_famine

https://en.wikipedia.org/wiki/Dust_Bowl
Because they get bored and may do more harm than good. See affluenza.
We're going to do the same thing. Of course, that "dedicated" server will probably be on site and be multi-use. I'll probably actually just virtualize my production environment within it. It's not so much the virtual / dedicated issue behind that; it's the desire to control my backups. (Although linode's new backup feature seems pretty brain dead simple).
The edge traffic makes up 99%+ of the traffic in question.
That might not have been the best example of it but it is the impression I get from the article. Some more (maybe better) examples ...

"The city, in this understanding, is no longer a community of life or a subject of economic and social development; it has become a product, evaluated by objective measures and ranked according to what is effectively a price or value matrix."

And then this "product" seems to be fully controlled and at the mercy of the government:

"Until 2014, China’s National Civilized City Assessment System manual had nine general evaluation categories. The new manual introduced that year featured ten main indexes and 30 points of evaluation."

Which means they can change the criteria at any time for whatever reason.

And then finally the article ends with a Mao quote, which not only is it like ending an article with a Hitler quote, but the quote itself is another great example, "Once, standing on Tiananmen Square, he pointed south and said that, looking to the horizon, there should be a “forest of chimneys.” Oh great, Mao thought he was playing a game of Civ or Age of Empires.
The turbofish rule is much easier to learn: just use ::<> when explicitly providing types for a call. The C++ concept of a "dependent qualified name" is a lot harder to explain.

What's important isn't how often you need to help the compiler: it's how easy the rules are. The turbofish is unfortunate, but it's nowhere near as bad as typename.
Okay, spin me on how it's against the law?

Reviews are the opinion of the person.
Salt Lake is not entirely flat. It's on the western slope of the Wasatch Mountains. The cost to lay fiber is more closely tied to availability of existing infrastructure (dark fiber), regulatory burdens (or lack thereof), subsidies, typical density (single family vs multi-tenant), etc.
Am I the only one that's sad about this?
No. BTC is a store of value.
It is immoral to attack someone who has not attacked or threatened you. It is likewise immoral to advocate attacking innocents. Take that how you will.

I reject the implication that government regulation is an attack of any kind. I do not agree that the fact a government can enforce its power is an attack, nor do I believe it is immoral.

I do not agree that government regulation is immoral.

As a specific example, I believe in the right of government to tax and their ability to enforce that.

I do not agree that private insurance is a solution for things like nuclear power, even in a "perfect world" theoretical sense. A nuclear disaster is a "black swan" event, and many people/companies would be quite happy to ignore the possibility of disaster and take the insurance premiums while things are going well.

If a company can make 50 years of "free" profits from insuring a nuclear plant, and then go bankrupt in the 50th year when they can't pay out the coverage then all that means is that investors have to make sure to safeguard their dividends/profits over the 49 preceding years.
> if you want to run your code in a browser, there's no alternative.

^^^^ YES. Although:

1. there was Java in the browser until recently when the Government said not to use it. Eh, it was dead anyway (in the browser at least- very few new projects using it).

2. there are those things called Flash/Flex/Air/etc. that Jobs killed when Apple wouldn't support them- they still live too all over the place though.

3. HTML 5- it's not just for breakfast anymore.

4. Javascript isn't just there because it is the only thing- morons at Google, etc. helped make faster JS compilers/interpreters. How is another scripting language going to erupt if they keep making the bad one faster. It's like PhP all over. Bastards.

Now back to the post to comment on just one thing:

> Just take 10 minutes and read the documentation! 10 minutes!

I was with it and then I read that and thought, "That's bullshit. Total bullshit." So #1 magic JS MVC framework? AngularJS. AngularJS documentation? Yes it has it... but even though I understand it, when something goes wrong, it is not RTFM, it's TFM: Too Fucking Magic. Batarang doesn't help when things aren't wired correctly, and when it does, it is not written for the beginner. EmberJS? EmberJS has only a community of hardcore Rails devs and Sproutcore people that didn't care it got renamed twice (sproutcore->amber.js->EmberJS) and DHH won't embrace it, so it's is F.U.C.K'd- even one of its big time proponents admitted it would be years before it is ready:

http://hawkins.io/2013/05/ember-data-is-pre-alpha-software/

http://hawkins.io/2013/07/we-are-pioneers/
"Wow, Catullus, thanks for the chariot ride ... the last time I had to run for a day and a half and .... Recedite! excreta caballus!"

"Wow, beaming to the surface is so much faster than that goddamn shuttle. And ... hey! This shirt wasn't this shade of blue before! Mother$#)!($&!"
Not that much, really. Once you've used it for a few weeks and your usual sites are marked as allowed, it gets a lot quieter.
self-driving taxis, here we come
Thanks. I've put a link to node-fibers, 2nd line of readme.
¿are Fiber's performance problems solvable? ¿what if fibers were integrated in node core?
FYI, drivebyacct2: you've been hellbanned for some reason as well. I looked through your comment history and have no idea why. Just thought you might want to know, as it looks like it happened 2 months ago.
Let me amend my original claim: "If gold could be synthesized with something other than a multi-billion-dollar accelerator and produce daily yields greater than nanograms ..."
I think you fundamentally misunderstand the statistics and distances involved here. Millions of civilizations? Only if you take the most optimistic of all statistical stretches. I personally think that there are at most a dozen civilizations that are within our technological range +- 10,000 years (really generous given the enormity of time) and the speed of light conspires to keep them forever beyond our reach.

Aliens do not walk among us.
"Best tool for the job" doesn't sound like something that should be on SO. Far too subjective and likely to result in stupid opinionated arguments that go nowhere.
I agree, but I'll say that it wasn't until I started writing non-ember application code (switching to react + immutable.js + pure functions) that I needed things like call / apply / bind on the regular. So writing framework code can really insulate you from needing these things, not implying that that's a bad thing, but personally writing regular javascript has been a breathe of fresh air.
How does this compare with Knock?http://www.knocktounlock.com/

What are the others?
"Wasn't Bitcoin always meant to be cash for computers?
Bulk of cash belongs in the banks."

I'd say most money lives in banks. Most cash is out in the world.

A downside of having someone else hold onto your BTC on a website is that you can't spend it in the ways that are supposed to make BTC powerful.

On the other hand, you do still reap the benefits of the rock-solid wealth-storage device that is BTC. And where could be a safer place for your BTC than a website on the Internet? Those things never get hacked.
Am I the only one that immediately remembered radiolab's Buttons Not Buttons episode [1] ? They had a nice bit about the "cut the heart out" part and how it contrasts with how easy it is today to start a nuclear attack

[1] http://www.radiolab.org/story/buttons-not-buttons/
"The skies have turned red"

First screenshots show a blue sky
I suspect Periscope's meteoric rise has to do more with being prominently featured in the "Best New Apps" section since day one. It was well after Meerkat reached peak-blogger that it appeared in that section, and even so, I don't believe it was in the #1 slot.
This is a bit disingenuous. As mentioned in a previous comment, there is a method to Montessori. It's not "let the kids do whatever they want ". It is a form of "formal" education and took years of research to come up with.

While parents can certainly homeschool, you can't claim it's an equal substitute for Montessori education.
Another benefit that this doesn't mention is that it can support DisplayPort connections at the same time as USB and charging.
Pebble lasts a week
Even if it worked the way that he understood it, that's a great way to destroy relationships with your advertisers.
So what's the rule then? Block all packets coming out of countries with governments that do MITM attacks? Blame the companies for not locating their servers in other countries? Companies like GitHub? This is so hypocritical.
Most phone companies on their lower tier plans make you pick 1-2 of free calls, texts or a data allowance. High end plans aren't nearly so popular because most people don't get high end phones and of the people that do, many buy direct from Apple so don't have a contract associated with it, instead just using a prepay or sim only plan. So it's really only the high end android phones which get bought on contract which is a much smaller market than iPhones or the actual big market segment here: €100-200 androids

Nobody picks free texts. This leaves 15c/message as a discouragement for using SMS.
Interesting I’ve never heard that: https://www.dhakatribune.com/bangladesh/dhaka/2019/06/01/ak-...

Maybe I’m understating the actual xenophobia towards Pakistanis in Bangladesh. I’m (inadvertently) rather ignorant some of these things because my knowledge is second hand through family. My parents were strongly pro-independence, and my uncle was in the army.
I know the circumstances are different, but what almost happened to .org is going to haunt me for some time.
While violence itself cannot be accepted, I have a lot more respect for a mob that shows up at the doors of Congress than one that shows up at Best Buy.
There's also OAN, Epoch Times, RSBN, Parler, Newsmax, various YouTube vloggers like Millie Weaver, Anthony Brian Logan, Tim Pool, Mark Dice, etc. Quite a lot of conservative/alternative news and commentary out there. The Big Tech platforms include FB and YouTube are despised by pro-Trump folks, because of perceptions of suppression and censorship.
Heck, when Jobs gave the first demo he had to execute a very specific sequence of actions because otherwise the phone would crash.

You’re absolutely right that the phone wasn’t ready for 3rd party apps on day 1, at least to Apple’s standards.
Normally balkanization through war, but IMHO things are not quite there yet if your talking about the current DC drama.

As long as the powers that be, don't do something stupid and "Martyr" him in the next two weeks.
That is correct. Rooted users can copy whatever they want. I believe some of the popular GUI file management tools like Astro won't allow it even if you're rooted but that's only a minor stumbling point. You can do it via a shell or use one of the utilities that does it automatically.
Yeah, that's a tricky one. Try http://phonespell.org/ and look for patterns.
But trying to derail the trade agreement, which is nearing completion, could be difficult for countries not involved in the process.

Nuclear weapons?
I know some folks at City gov, I would _love_ to city a public API for this. So I'm about to stick my oar in. I'll let you know how it goes.
It may seem pointless, but it may be administratively simpler. Similar to how people with government jobs still pay taxes, even though their paychecks come from the government in the first place.
Can someone indict that district attorney and the supervisor for endangering the vaccination effort by persecuting medical professionals who vaccinate people and encouraging the waste of vaccine?

That's the thing that should be illegal here.
Worse than anti-maskers? At least someone wearing a valved mask is reducing the risk that he/she will get COVID in the first place and, thus, become a spreader. Masks that don't filter exhalations can still contribute to reducing R0.
Performance characteristics of what precisely? It's using webkit on both macOS (via Cocoa) and linux (via gtk), Edge on Windows, so I would assume the performance is similar to any other wrapper using those runtimes.
> Matrix (...) actually works well in the browser.

Jabber/XMPP has standardised XMPP over HTTP back in 2014. https://xmpp.org/extensions/xep-0206.html

Arguably clients were not that good at the time, but nowadays there are pretty good web clients. ConverseJS and JSXC focus on chat usecases and implement OMEMO encryption (standard based on Signal protocol). Movim et Salut-à-Toi develop more usecases (social networking, federated forging, etc) though they are less polished at the moment.
Based on https://internals.rust-lang.org/t/can-the-standard-library-s... it looks like that's probably the case, but that it's not beyond all doubt that it holds across all Unix-likes.

> On Linux, the answer is pretty obviously no. Linux file descriptors are stored in an array of structs that has its capacity bounded to INT_MAX, so any negative int would either be considered nonsense (if treated as negative) or be higher than INT_MAX (if it was bit-reinterpreted as an unsigned value).

> The Single UNIX Specification explicitly says that open can't return a negative file descriptor, and says in the page for dup2 that you should get EBADF if you try to claim a negative file descriptor.

> Unfortunately, their description of file descriptor allocation never explicitly says that the negative range is out of bounds, but open references this algorithm while simultaneously claiming that it never gives a negative result.

> Also, Wikipedia says it can't be negative, but they don't give a source on that particular claim (urgh!).

-1 was picked as a conservative choice that's enough for the common case of Option.
The F-Droid repo has a few nice ones. I'm using Infinity.
Honestly I think people accepted this claim too easily. First of all only one browser did that AFAIK. Second of all even if it were entirely opt in it’s another fingerprinting target and was actively being used for that. I really don’t think the people who would fingerprint DNT care one bit whether it’s an explicit statement of intent or not.
> in bypassing policy

Citation needed please, the article said that he followed the policy of not letting the vaccine go to waste.