skysight-inc/HackerNews huggingface dataset:
I was referring to assumptions that let one equate breaking urandom with breaking arbitrary cryptosystems in other ways. examples:

1. Breaking urandom's construction is much less likely than breaking a less-trodden hardware device.

2. If hashes in general are broken, then any crypto of interest is also broken (counter example: non-complexity based crypto like a one-time pad (note: Do NOT construe this as any sort of practical endorsement of "one time pads". If you do not understand the concept of malleability, then forget this entire comment exists and go read up on that instead!)).

3. Backdooring RDRAND is equivalent to backdooring the entire CPU (counter: a model of auditability that constrains the complexity of a backdoor)

These assumptions are mostly reasonable, but they are assumptions nonetheless.

Embedded systems do suffer from a demonstrable lack of entropy. Studying techniques for hardware entropy collection is interesting in its own right, which is why it's disappointing that this page seems more focused on productizing their device as a black box USB stick rather than concentrating on open review.
Any woman in Texas is starting from an in-built 10 point disadvantage. Ann Richards was damn near legendary genius levels of campaign competent, and she still needed the opposing side to basically self-destruct to barely squeak by to win the governorship.

So, if you combine the fact that Wendy Davis was female and was facing a very competent political opponent, 20 points isn't really surprising. Her distribution was exactly what you would expect (check the county results map on the right hand side):
https://en.wikipedia.org/wiki/Texas_gubernatorial_election,_...

Now, compare that to Ann Richards win and loss:
https://en.wikipedia.org/wiki/Texas_gubernatorial_election,_...
https://en.wikipedia.org/wiki/Texas_gubernatorial_election,_...

So, Wendy Davis took the districts she was expected to take (possible exception being San Antonio), and nothing more.
For the micro payments, I don't take the initiative to suggest bitcoin that often, but it could be a decent payment option if this were actually implemented.

Another social experiment you could try is offering a year subscription for something like $5, it might drive return readers aswell as solve the micropayment issue.
> The line that separates technicians from designers and scientists is much blurrier in computer science etc. than most other fields.

I think that the GP provided a reasonable explanation for this situation by saying that the "field is less than a century old". If you go back in time you are more likely to find one person inventing a new brick, designing a house with it and then building it. But later when the body of knowledge was too big for one person, specialization started (the same happened in medicine and many other fields).

And actually it is already happening in the IT area. Just several years ago it wasn't uncommon that a game or any other non-trivial piece of software was created (including some clever "inventions") and marketed by one person.
> Who cares?

Apparently you do. Without knowing anything about me or the company, you have decided to side with Google and are here, at least, trying to overlook the oddity. Which is no software company has ever done this apart from CampaignRunner! It is non-obvious. Would it surprise you to learn that we too are in "advertising" business.

Again, I found it odd and posted about it. If you don't find it the least bit interesting, that is fine. No need to generate noise or downvote anything.
The conditional move is the statement `low = v >= value ? low : other_low;` which either assigns `other_low` to `low` or does nothing.

And other_low is a variable, and not an arbitrary element of the list (which is a big difference with respect to cache), and it can also be seen from the assembly that it's stored in register. So there there is no "both cache lines" to fetch anything from.
> You say gerrymandering doesn't help the GOP, then link an article which describes how gerrymandering has allowed for the complete and uncontested domination of half of the legislature by the GOP for over a decade.

Single member districts and the concentration of liberals in urban enclaves helps the GOP, but very few sane districting systems (using single member districts) would fail to produce the same outcome -- you'd have to actively gerrymander in a way that breaks up communities with similar demographics to get a near-proportional representation out of the existing population distribution.

While gerrymandering may help the GOP in some cases, the big thing that helps the GOP isn't gerrymandering so much as the basic structure of the electoral system (which also makes gerrymandering a high-stakes game.)

Which is why Lessig proposed ranked-choice voting in multimember districts. Multimember districts with proportional representation within districts eliminates the high-stakes districting decisions that make gerrymandering possible (there are still district lines that need drawn, except in small states, but the details of where they are drawn has much smaller impact on outcomes), and also eliminates the natural advantage that a group whose support is a small majority over a wide area has over one that is supermajority in a concentrated area, tending to produce results in the legislature that are overall more proportional to those in the electorate.
I don't think you two are using the same definition of embarrassingly parallel (emphasis mine). Given real world constraints, video compression is nowhere near as embarrassingly parallel as, say, motion jpeg. Many of the recent improvements (eg. better motion vector estimation) only see any benefit when you're encoding sequentially.
Kimsufi just resells OVH’s Dedicated Servers.

But, sure, you get exactly what you ask for.

On the other hand, I never had an issue with my OVH 2$ (now 5$) server, and I run an Apache with worpress, an IRC bouncer for a handful of users, a mumble, a teamspeak and a minecraft server on it. Less than 100% CPU and RAM utilization.

OVH isn’t cheap because they don’t deliver the performance you ask for, OVH is cheap because they really don’t provide anything else in the free tier, no backups, no additional IPs, no guarantueed uptime.
I've said before how I really appreciate the approach the guys at RethinkDB have taken... With the automatic failover support baked in, this would definitely be one of my go to solutions. The management/admin interface is much nicer than any other NoSQL database out there, while offering a lot of the things that a traditional RDBMS offers.

I'd probably reach for RethinkDB before Postgres or others simply for the better administrative experience. Especially for small teams or start-ups that don't have a dedicated DBA role.

For anyone curious, the databases I would most likely reach for, depending on the situation would be RethinkDB, ElasticSearch and Cassandra. I really do like MongoDB a lot as well, but RethinkDB offers the features with far less friction, though the query interface takes a bit of getting used to.

That said, I also like more traditional RDBMS options as well. I REALLY like what PostreSQL offers, but have no desire to administer such a beast, failover isn't really baked in, and the best options are only commercially available, at a significant cost. There are also hosted options for AWS and Azure for various SQL RDBMS. That said, I find being able to have data structure hierarchies in collections tends to be a better fit for MANY data needs.

Congratulations to Slava and everyone else at RethinkDB.
Pound load balancing concepts (basic)
I agree, but I think the basic stance doesn't need to be more than "Be respectful and if someone isn't, talk to them about it before bringing it up with the community". Mismatches in what people think respectful means will happen, but I suspect it's impossible to write a COC that eliminates this problem.

It seems better to allow people to say what they want (with the assumption that it's reasonable and respectful) and provide a path for conflict resolution than to try to codify exactly what "respectful and reasonable" means. Both because that's different for every community, and any strict set of rules is ripe for rules lawyering/abuse.
What about public disclosure of their stock holdings?
Switch "identity politics" with "gender/racial identity politics" and their statement becomes (almost) accurate. The whole internet SJW brigade seemed to get its footing in 2008, which would make it about 7 years ago. Before that it existed in niche groups nobody ever heard of or dealt with and was far from being mainstream.

It wasn't until 2010 that it seemed to really take off in the media so I'll personally excuse the "5 years". If you try to find feminist articles or gender politics articles circa 2004-2006 it can be pretty difficult, but if you try to find them from 2008-2010 they become plentiful and easy to find.

I find it intellectually dishonest to stretch "identity politics" to be about "Free vs Proprietary" in the context it was used in, because context will always matter more than a strict dictionary definition.

The nitpicking over terminology (and analogies) is an extremely annoying tactic. So I'll cite Layne's Law [0]. While in the actual "dictionary definition" of identity politics, he is factually wrong. You do indeed have to have a very narrow scope of identity politics (gender, most specifically) to become accurate. In modern usage, in regards to SJW/feminism, "identity politics" is almost exclusively about "gender politics".

[0] http://c2.com/cgi/wiki?LaynesLaw
Interesting.
I would have thought it would be reasonably resilient though, due to its intra-frame nature. If you get lost in the stream you could scan forward to the next JPEG header.
Official GraphQL Relay server
I like it if implementation matches spec. Below quote is about every desirable property you want in a TRNG for high-assurance security. Using simple circuits based on widely-proven physics is much better than complex circuits leveraging cryptographic assumptions. Often more efficient, too. This could have also have application in security-critical boards and ASIC's (esp mixed-signal) aiming to re-use proven blocks. I've forwarded it to a high-security specialist that sometimes makes and breaks hardware TRNG's to get his take on it. Hopefully, he'll reply while it's still getting HN attention.

"So from this, we have a theoretically strong basis for efficient extraction of good entropy. We have sources of noise which are naturally white and for which the best scientific understanding is that the mechanisms underlying them are subatomic scale events which are as independently random as any kind of physical phenomenon is known to be. We have multiple sources of noise that are not all influenced by the same set of physical or environmental conditions. We have a mechanism to extract it which ensures good mixing over time and is robust against interference from predictable signals, over a wide range for the noise floor mean. We can implement it in a way which makes it obvious that no programmed manipulation of the process output is taking place. It is self stable and doesn't require continuous tuning to operate correctly. And we can clock bits out of it at just about any rate we please up to the effective bandwidth of the circuitry responsible for doing that."
Evidence showing the existence of natural law?
Sadly, insider trading is pervasive on wall street. You don't read about the guys that don't get caught, and there are a lot of them. Remember, if you can't spot the sucker at the table, you're the sucker. That's why I keep my money far away from the stock market except for index funds.
When Prostitution Is Nobody's Business
Not the OC, but it seems like there are more an more outsiders coming in and trying to enforce their politics while not contributing anything. I think this has always happened, but it seems like there's been an uptick recently and that worries me.
I Watched Hackers Pull Off a Real Life Ocean's 11 Heist
> If anything this just shows that the SEC has all the tools in the world to stop illegal activity, yet it does nothing, so long as you're part of the Wall street establishment.

How does it show anything at all about what the SEC does with the establishment?
Awesome, thanks for sharing.

Didn't work at first on my PC, but I definitely appreciate your sharing the code.

Edit: worked after a refresh.
How Life and Luck Changed Earth’s Minerals
For those interested, there's a (poor quality) video[0] as well as source code[1] available.

[0] https://www.youtube.com/watch?v=hOTV6jxT9oA

[1] https://github.com/ervanalb/lens
There's a nice post about entropy in such (virtualised) environments, with specific regard to unikernels.

https://mirage.io/blog/mirage-entropy
Well put. The solution to rules lawyering is not more rules.
The default setting should be to respect the privacy of the user first. Since they know most users will blindly go with the default, it's an asshole play.
All software has spec bugs. Normally these can be ironed out in extensive testing, if your software has many users. This sort of military system has few and probably is not used that much. An testing jig should be designed and used for this sort of system. However, it will not iron out all the bugs.
Why Lose Weight Using the Paleo Diet Will Change Your Life?
Did you read the article? Not only was sql injection found, logins were brute forced. 2fa absolutely would have helped with that.
It seems like your company is doing good work. Kudos! This in no way invalidates my point. Thanks for the info, though. :)

As an unrelated aside, you sort of seem to be indirectly addressing statements that I never made. Maybe I'm wrong here, but it kind of looks like you're speaking to a larger point that goes something like "Vulkan on SoCs will fail because noone will ever update their drivers."

So, here's how I engage in discussion:

I talk to and with people in order to exchange information. I try to be direct, to the point, and say exactly what I mean. Because I am long-winded, I am not always sufficiently terse. Because I am sometimes a mental spaz, I am not always able to put the right words in the right order to convey the right information. However, one thing I avoid like the plague is innuendo or other unspoken implication (except when used for obvious comedic effect). Having to decode hidden meaning in everyday conversation is tiring and tiresome; I've no desire to waste the time and energy of my conversation partners on such things.

When I make an accusation, or outline a scenario, the most literal interpretation of my words is the correct one. I don't have hidden agendas, and I welcome clarifying questions. Anything that I leave unsaid in my prose is a thing that I have forgotten or simply doesn't pertain to the current conversation. :)
http://www.ebay.ca/sch/i.html?_odkw=recon+transcend&_osacat=...

I'd probably go with the $290 version - might stretch your budget, but worth a look
Okay, I'm going to really handwave here.

There's a ubiquitous product, probably 100+ million instances currently operational just in the USA. This product costs about $10 to make. It has both a radioactive source and a way to (indirectly) detect alpha particles.[1]

Yes it's not a perfect analogy. But surely there's a way to build a much cheaper alpha detector?

[1] https://en.wikipedia.org/wiki/Smoke_detector#Ionization
I could not agree with this more.. the development teams are definitely active with the community via github and irc... I followed along with the support for geolocation indexes, and was really happy to see that come into play.

It's taken a while to get to this point, but the development to get here has been methodical and incredibly well managed in terms of getting appropriate groundwork in place for a feature (like automatic fail-over) instead of just trying to hack at it or bolt it on the side. For that matter baking solutions for data streaming into the box, as opposed to less thoughtful options.
they also brute forced employee accounts (likely the sql injection was in the employee facing section of the site)
No? If only does deltas, presumably you aren't changing all the files very often. My largest duplicity backup is, ~800GB. With 24h of hourly snapshots, 1 month of daily snapshots, and 1 year of monthly snapshots, the actual backup currently takes ~5TB. It only increases in ~1-10GB/day
> The bean counters and hipsters making the decisions nowadays have learned nothing from computer history.

As someone who's also used and remembered write-rings, etc., this is nonsense. The concern over threats back then was VASTLY lower than today, because the threat was in fact far lesser. Computers were vastly less interconnected and knowledge about exploit tactics was still nascent, and a fair bit harder to come by. Stuff was massively exploitable because in the "good 'ol days" there were a lot fewer computer literate people to think about things like "attack surface", and fewer still who had motive to use such knowledge maliciously. I knew grad students back in the 80's who had written their own illicit versions of "su" to make their lives easier. I.e. local privilege escalation tools. An undergrad banned (and transformed into an overnight pariah amongst his peers) for hacking CS dept servers. All kinds of devices hacked by the curious via some hardware port intended for maintenance or just left behind on the PCB. Those things happened, but the collective impact of much of that is less than one major exploit pattern today (Flash 0-day, legacy consumer routers, take your pick).

No, the root problem vs "yesterday" is just that our computers are cheaper and far more interconnected than ever before. Things like the option-ROM-as-vector being an economically practical technology. Our collective level of ability to ship secure systems is probably far better than it ever has been, but that's almost nothing in the face of an exponential explosion in the pervasiveness of computing. We still ship an incredible amount of insecure software and hardware systems, just because we make so damn much of it. Why design a complex fixed mechanism or circuit for something when you can solve the problem 1000x better with a CPU or DSP? That's great, but "oops, we forgot the security again." Or we didn't, but an exploit was still found and updating is otherwise infeasible.

It seems that ability to ship secure tech needs to be nearly pervasive, enough for a sort of technological herd-immunity (or herd-defense-in-depth), if you will. At this point, I suppose we're looking forward the day when all our little computers are muttering to themselves like trees in a forest chemically signaling about attacking pests.
Maybe it's just me but it would be nice to have a tick or OK or such next to the repos that pass and have no issues.
Dot grids are nice too. They're a good compromise between blank pages and graph paper: http://rhodiapads.com/collections_dot_everything.php
official JDBC drivers please :)
Pro Tips from the Most Successful Kickstarter Campaigns
Do you have any source data?
Great documentation with some useful examples and tutorials to get you started. I just tried it and very impressed with the performance and ease of use , especially the admin section is very handy. Need to try it with cluster , any docs/videos on creating the cluster with different machines across the globe?
This particular one seems aimed at "forcing" project maintainers to police what people say on Twitter or on blogs. The driving example is some guy that heavily contributes to popular Ruby library (Opal). He wrote anti trans stuff on his Twitter account, and his Twitter profile says he's involved with Opal. Third parties got upset and decided they should kick him off this project. This code of conduct now codifies that, so people can say "ha! You have the responsibility to kick this guy out, yeah!"

This kind of thing isn't that necessary. Though some rules (like, I dunno, no posting dumbshit gifs) might tend to increase the quality of conversation. These particular ones seem more about making someone feel they've made an impact, rather than driving a high quality community. Though the justification will be that by policing everyone's behavior, we'll end up with all sorts of great work being done by people that are too offended to otherwise participate.

More likely, if you want to drive involvement, is to make sure your project itself isn't intimidating for people to start on. Good starter docs, explanations on how to submit changes, volunteers that gently help new comers, etc.
>It makes sense to insulate Congressman from insider trading charges. They are exposed to so much inside information that the executive could bring charges against them on a whim. Which would have significant separation of powers concerns.

How about disallowing them to trade altogether in the first place for as long as they hold office?
I mean, hedge funds have the resources to monitor thousands of websites. Joe Retail Investor doesn't. Reg FD was introduced to level the playing field.
> That my point of view must be silenced at all costs is one of the main reasons why I would never support the Geekfeminism people.

There's a difference between silencing a point of view and refusing to repeatedly have the same argument. New arguments need new information, and the vast majority of arguments in that area have been had already. That's some of the primary value provided by their wiki: a repository of past arguments and refutations, to avoid having to revisit them every time.

Project mailing lists and other communication channels, for instance, are the wrong place for repeated introductory conversations demanding justifications for a code of conduct. And that's a very common problem.

Considering I didn't start with the set of base assumptions I have now, and had to learn them over time, I'm always willing to question them. That I don't personally find any of your arguments even remotely compelling towards that end doesn't make those assumptions immutable.

To explicitly state some of the assumptions that I suspect we disagree on: 1) If you refuse to exclude anyone from a project, then you're by default excluding people who are not willing to put up with a hostile environment. 2) Since you can't avoid excluding people, better to exclude people who make the project less welcoming. 3) Don't let the people you want to exclude write the policy. 4) Don't let the people who would fare just fine in a project without a code of conduct drive the requirements; get the requirements from people who wouldn't.

Apart from that, the other reason I don't particularly care about having this argument here is that it's unlikely to have as much effect as having it elsewhere.
"A target that has no ill will to the U.S., but which is being monitored, needs better and more monitoring, not less. So if we’re in for a penny, we need to be in for a pound."

This is profoundly sick.
Yes, I noticed that intelligence isn't listed. So are we set to deride folks of lesser IQ, but not so little they classify as "disabled"?

Maybe they're just aping what they see in other places. Eg freedom of religion should be a no-op, fully covered by other rights. Folks should be free to think and do as they please. Religion shouldn't be an excuse to get away with other things. Yet this wording seems copied around as if it was deep or something. Same thing here, with a few added classes?