skysight-inc/HackerNews huggingface dataset:
> Microsoft changed their CSPRNG to FIPS 186-2 or NIST SP 800-90A

It's changed once, in Vista SP1. Since then it's only used AES256 in CTR mode as a DRNG as specified in NIST 800-90. So I'm not sure it's fair to say it changed that much. Linux's CSPRNG has also not seen much change other than to make it more resilient in certain conditions (there was some paper on it IIRC) and to add hardware RNG support (e.g. rdrand).

> 3. OpenSSL is a questionable security product with it's history of vulnerabilities.

I don't think this is the (main) argument against its CSPRNG although it may be one of them. My understanding is the main argument against it is that it's overly complicated by design (e.g. entropy estimation, how it's initialized (especially on Windows)). You could also probably argue that it may be showing its age with its use of SHA1 but you could say the same for the Linux kernel as well.

If you want to look at a userspace CSPRNG done right (or what I believe to be one done right) just take a look at BoringSSL's[1]. In the case where there is a hardware RNG it will create a ChaCha20 instance, keyed with the OS's CSPRNG, and use that ChaCha20 instance to filter the rdrand output (as to not use it directly or xor it). If there isn't a HW RNG then it will just use the OS CSPRNG directly.

There's no entropy estimation, no way to seed it, and by design it's simple and fast. You're correct that the system's CSPRNG may not be fast enough, in fact the BoringSSL dev's mentioned this[2] citing TLS CBC mode. This is probably more a problem on Linux than Windows due to the design of the CSPRNG (Linux's is pretty slow).

So with everything being said I would argue that it's always the correct choice to use the system CSPRNG unless it otherwise can't satisfy your needs. In which case just use BoringSSL then.

As a side note if you really need to generate A LOT of random numbers just use rdrand directly. You should be able to saturate all logical threads generating random numbers with rdrand and the DRNG (digital RNG) should still not run out of entropy.

[1] https://boringssl.googlesource.com/boringssl/+/master/crypto...

[2] https://www.imperialviolet.org/2015/10/17/boringssl.html (under the "Random number generation" section)
Not available yet but projected launch this summer. we are currently working on onloading strategy to get users on quickly upon launch.

We saw the same problem you described with alot of Let's
we will probably change it. Im on the fence but there are more pros than cons to the change.
> The things that happen on Facebook don't matter

Makes me think Facebook is like Reddit but with people you know.
Here's the documentation for systemd-random-seed: https://www.freedesktop.org/software/systemd/man/systemd-ran...

What are the command-line options that are available to that tool? Without looking in the source code.

>Note that I'm a fan, but far from an apologist.

An apologist is merely someone who offers a defense of something. It comes from the greek word ἀπολογία, "speaking in defense". Thus you are an apologist, even though you're not dogmatic.
There is an amusing sequel to this story actually, and no harm in telling the story after all these years. The 68K product was a proprietary networking card for a private telephone exchange type product made by Philips. After developing the product in NZ a hardware guy and I were sent to the Netherlands for final testing and further integration prior to manufacture. The Dutch engineers were very well trained and competent, but used to hugely elaborate heavy process and the more free-wheeling type of development we were used to was definitely foreign territory. Rumours that the crazy guy from New Zealand had developed the telephone switch software in his chess computer (i.e. now that I've explained the story, false rumours) preceded our arrival.

Now I was young and dumb at the time, and I had decided for some reason to jokingly call the simple bit bashing communication protocol I'd invented to talk to my chess computer "V.69" (The V series protocols - eg V.24 = RS-232 in the USA were big at the time). A V.69 port had actually made it into the final schematics for our board. It was just 5 logic level pins (two inputs two outputs plus ground) - and in production it would not have any impact - but it was possible to solder a 5 pin header onto the pins, and hook it up to a PC running the same terminal software previously discussed - If such a PC was connected my embedded code would emit diagnostic information.

We had many meetings during our visit, with the typically gruff non-nonsense Dutch engineers and their huge vats of extraordinarily strong coffee. One of them was with "the Standards guy" who wanted to audit compliance to all possible standards - I was able to spectate mainly as it was hardware stuff. But suddenly he was pointing at the V.69 connector, clearly labelled as such. We'd forgotten all about it. Us> "Oh well, arrrgh, yes. It's a diagnostic port - for the lab only - no impact on production - the header is just omitted." Him> "But what is this V.69 standard?". Us (hopefully)> "Well, it's just a 5v serial diagnostics standard". Him> "Okay, yes I've heard of it". So as is often the case, the need to save face saved the day.
In all fairness, you can brew with larger amounts in shorter time and also resteep with black tea too, or I suppose green too.

"Get the leaves wet and drink the water" is really all you have to do for tea. All these other rules are just people saying how they like to have it, but you don't have to.

And yeah, oolong variety is not as well-known as it should be. Blame it on health-hype for green tea.
This is a simplistic answer. Look at East Asian cultures to seem a much more sexual conservative environment. Try to delve into the why and it's complicated! As far as I can tell it boils down to marriage stability. Most people date to marry (any relationships that don't lead to marriage are viewed as a failure). Promiscuity leads to sexual insecurity as the less experiences partner fears not living up to the more experienced partners expectations. So this creates a strong downward pressure on everyone to not be promiscuous (and in small communities peer pressure is overwhelming)

I can imagine that historically prostitution was kinda the equivalent of becoming a eunuch. Sure it maybe pays well, but you typically won't marry (I guess unless your stunningly beautiful?) and you won't carry on your family lineage (or the vague female equivalent)
> The linked article points out that this is true in the case of Eric Garner's crime of selling loose cigarettes: nobody really thinks that this is something anyone should potentially die over.

Eric Garner's death has more to do with management of the police department then taxes on cigarettes.
Also selling tax free cigarettes is likely to increases smoking and increase cancer deaths.
I think the systemd complaints can essentially be reduced to "my init system now knows about cgroups, sockets, dbus, [and other things that didn't used to exist]". I haven't heard anyone offer a replacement that accounts for these features while maintaining "the Unix way".
IMS cant find your email in your profile not there. "Let's" stay in touch and try to help each other with our growth strategies.

Do you see what I did there? lol
Great observation. They're calling their own BS indirectly. Whoever is involved in SciHub with strong presence on social media should immediately start using that quote to push SciHub. :)
If I was told that all I needed to pay was $4500, and don't have to attend classes, for a course that the every student in other universities attend classes for, would I not have second thoughts about the university ? Every student who joined UNNJ knew it was a scam, and they were an accomplice
> I spent HOURS on the phone trying to acquire a license for Windows 7 Enterprise, I needed it for Hyper-V.

I'm not sure why you're trying to do that.

Windows 7 cannot run Hyper-V. You can install the Hyper-V Manager on Windows 7, but that only requires Pro or Ultimate. [1]

Client Hyper-V was only added in Windows 8, and you only need Pro. [2]

[1] https://social.technet.microsoft.com/Forums/en-US/f0f1dc3d-9...

[2] https://blogs.msdn.microsoft.com/b8/2011/09/07/bringing-hype...
Hacker News is for me a news and discussion portal. Reddit is something that might show up from a Google search. I block most of the distracting internet during the day - except FB and HN - so of course those two get the majority of my allocated distracted time. I should measure it, but I'd not be at all surprised if they each got an hour a day.
I thought the recent part would be obvious. Thanks for showing it wasn't. I've edited my comment to say "recent" to be clear it has to be a comment they're likely to be looking at periodically for replies or other activity.
RescueTime does exactly this.
Personally I think it's probably more about the emotional or intimacy factor that would put someone off such a career.

There is no inherent intimacy (taught, or otherwise) to working as a greeter or fast food worker, but whether through cultural or biological forces, I would imagine most people would consider sex an intimate act which would put them off pursuing it as a career.
He's not going to because it doesn't affect him personally. And let's be honest, systemd isn't that bad, and has some benefits. It's not worth getting religious over.

You'll know there are too many dependencies on systemd when people who don't want it (Devuan, Slackware, openBSD) can't boot a decent system without it. I don't think we're in danger of that: people who don't want systemd don't need it.
So the way I have always handled it -

Product owners create stories. These are titled things like "As a (type of user), I want to be able to X". The point of the title is to determine who this actually benefits. Then, they attempt to define it with acceptance criteria. These are a list of "what does it mean to solve this need". Ideally, it implies a set of tasks, and gives a decent starting point for QA to start testing. This is stuff like "When the user clicks X, the system shall Y" and "Should the system fail to do Y, it will instead (failure mode), and (inform the user? Stay silent? Whatever). Sometimes the product owner needs help from the devs to determine this.

The devs will then add tasks to the story. The story should be able to be completed in one sprint; the tasks are, indeed, much faster. They're tracked only insofar as to see progress towards the story's completion, but they're not nearly as important as the story itself. A story with half of its tasks complete is not done; the feature is not implemented, it's not ready to go out. When all the tasks are done, the story is handed off to QA to vet; at that point the story is done, and it can be shipped.

The dev team is only ever committing to what can be done in a sprint. They should have an idea of how many story points they can handle in a sprint, such that they can work with the product owner to determine the stories they'll work on in that sprint.

When the estimates start lining up with what is actually achieved (that is, the team has a velocity of, say, 40 story points per sprint. And they're completing 40 story points per sprint), the product owner can start planning around it. "We have four sprints until the business wants the next milestone. As such, I have assigned 160 points worth of stories to try to get in for that". And that's reasonable. And then, if anything emergent comes up, or new stories take priority (a 'pivot', if you will), the product owner knows they can't manage it; they either need to replace a currently existing story with that emergent/newly prioritized story, or, they need to slip the schedule.

And that can actually work. It requires honesty, transparency, and a desire to actually get shit done, but it can work. The problem is oftentimes people or cultures value CYA, politics, and 'leadership' over getting shit done, and all of those make agile little more than a scapegoat for why everything is on fire.

And it's only one way of being agile. Kanban, for instance, still has stories and tasks as described, and it still offers velocity, though measuring it slightly differently, but it isn't concerned about the sprint boundaries.
I'm not sure where this tendency of Red Had for taking over the ecosystem comes from.

Because they're willing to fund the work.
Here in NoVA...

It's typical of people from both the East Coast and West Coast to think their experiences are representative of the whole country...

Just like it's silly for me to say everyone from the coasts ignores the middle, it's silly for you to imagine that everywhere is like Northern Virginia.
Windows 7 was the VM, not the host.
Goddamnit I hate how there is no true boolean datatype in t-sql. I can't write a simple predicate without comparing its output to 1 or 0.
It doesn't invalidate what you say, but you're assuming there's a bounded number of different values in the array -- 2^k where k is your word size.

Under this assumption, a correctly implemented quicksort also runs in O(N) time.
This is the largest factor.

I love cities. But I'm having a hard time with so-called "urbanist" people/policies.

A lot of the philosophy boils down to intentionally make life harder for anyone who isn't living in Downtown urban cores -- areas so expensive, no one who works for a living can ever afford them.

Effectively, they want to punish poor and middle class people simply for being poor and middle class, through the design of the place we all live in. Which is counter to the whole point of cities in the first place.
Prohibition of alcohol certainly didn't make it safer! In fact it made it decidedly much less safe (people going blind/dying from methanol poisoning).

There were also other downsides, such as increase in gang power due to profits from alcohol running, sales. It seems like there would be similar parallels to prostitutions (gangs, pimps, etc).
Last year, I was spending roughly ~25 minutes / day on Facebook (according to Rescuetime). I've never had the app, or messenger on my phone. So on Chrome, I added News Feed Eradicator (https://chrome.google.com/webstore/detail/news-feed-eradicat...) and my usage dropped down to about 5 minutes / day (still more than necessary).

Unlike a lot of people here (it seems), I get a lot of real usage out of Facebook though. For example, it's the number one source of events for my favorite hobby / workout. I wouldn't really be connected to the community and know what events are going on if I didn't have it.
That's not correct, but is a common misunderstanding. The Catholic Church's teaching is that sexual intimacy between spouses has both unitive and procreative dimensions, and that both need to be respected.

For a deep dive, see Pope St. John Paul II's Theology of the Body[1] and the late Fr. Paul Quay's The Christian Meaning of Human Sexuality[2].

[1] https://www.ewtn.com/library/PAPALDOC/JP2TBIND.HTM

[2] http://j.mp/QuayMeaningOfSexPDFscan
Since you've made it clear it must be a recent comment, by qualifying your statement with the token "recent", I would agree that this is a worthy solution.
The tl;dr of this seems to be:

* Visual C++ now has very aggressive SSA-based optimization rules.

* One of these optimizations is the bit estimator, which tracks the state of each bit of local variables.

I'm not aware of LLVM/GCC or other compilers using a bit estimator. I found some hits in the CS literature but I'm not aware of any other compilers using it, and it seems like a pretty potent optimization!
They are both problems, but with different characteristics. One is an abuse of a law involving fraud and large-scale white collar crime. The thing about white collar crime that makes it especially dire is that amount of money involved, and the damage done, is almost always much greater than low-level street crime.

The other involves illegal border crossings by individuals from a neighboring country or visa-overstaying mostly from South America.

I've personally witnessed a kind of overlap of these problems that went way beyond H1-B fraud and went way into human trafficking and organized crime. In that case a high-tech company was being used as a front for illegal immigration from an Asian country, with no-show workers and other amazing stunts more typical of a corrupt government or union operation. But that was an exceptional case.
massive amount of information

I'm not so sure about that. As a general rule, we don't expose healthy people to large amounts of radiation; so it's hard to separate the effects of the radiation from the effects of whatever caused them to be irradiated.
Show HN: I Voted for Pinboard TShirt
After Bin Laden raid, CIA Pakistan chief came home suspecting poisoning by ISI
Open source hardware: j-core design walkthrough [pdf]
Who are these people and how can people contact them?
>THIS PROJECT IS AS OF NOV 2014 CLOSED AND WILL NO LONGER BE MAINTAINED!

from https://github.com/dotse/PacketQ
Ugh, I'm tired of mandatory "OOP for dummies" a la Java (and C# to a lesser degree). I've been programming since the early 80s, and I have been exposed to more than just Javascript, or Java/C# for that matter. (BASIC, Fortran, Pascal, Lisp, some assembler, xBASE, C, some C++, Shell, Perl, Java, C#, Ruby, Javascript, some Python, some Objective C, some Scala, Groovy and smatterings of other proprietary / DSLs)

My first job in the mid 80s was in a language with runtime typing. My experience is that "strong" (compile/parse time) typing is not the panacea that many say it is. I've seen far more damage caused by C style "operator precedence stew" issues (vs Lisp style all funcs w/ parens). It's like the Type Police have to punish us for the dark era of C/++ Play-dough Pumper byte molding the industry had to put itself through in the 90s.

In fact, I would much rather see a language that forced modules/data/functions to be flagged which were not immutable/idempotent (which should be an enforced default), rather than an even-trade-at-best static type feature. Yes, that means your "main" would be flagged as "dirty", so it could do I/O, but your library modules (lang; 3rd party; app) would mostly be pure functions.

Anyway, I much prefer dynamic (runtime) types and FP with an occasional dash of OOP style Javascript to the "Let's be like Java!" cult. As Douglas Crockford likes to say "Those people will go to their graves, never knowing how miserable they are". Ironic, considering how the coming holy grail of ADTs/Objects was beaten into us in Uni in the 80s, and FP all but ignored.
Apple was overstepping the boundaries a decade ago. I guess this is turning out to be a multigenerational struggle.
El Crapitan has so many problems it's ridiculous. They broke not only all kinds of Open Source software with their overly paranoid system protection, but also a bunch of hardware by messing up the USB drivers. There are now tons of musical instruments, Arduinos, and other USB devices that don't work with El Crapitan. Apple's response was: ... there was no response.

Us hardware manufacturers are still looking for a fix. Our customers are angry at us and blaming us, and we can't do anything. There's no way for our customers to even tell Apple what's wrong, either.
Nitpicking here: I don't think Silken Laumann lost any Olympic medals, only Pan Am medals if I remember correctly. Not that it makes any difference whatsoever to your point.
Running Debian 8 on the Amiga Emulator FS-UAE
Of course, by the time you get to event handlers and REST calls, you need a back end, but you could mock up an awful lot in 1.x without ever worrying about a "build".
The choice isn't binary: sysvinit or systemd. There is a third way. I'm not much of a sysadmin, but I'm intrigued when I read of daemontools and its ilk.

http://homepage.ntlworld.com/jonathan.deboynepollard/FGA/dae...

http://blog.darknedgy.net/technology/2015/09/05/0/
>I still have serious misgivings

I guess that kinda tells us more than anything else he said.
Only your second point is valid to me and not worth the use of the system by itself. This is not worth the encapsulation around your acquaintances you are supposed to cultivate the relation face to face, not through a "wall" and mediocre public interactions.

There is a lot of means to communicate and coordinate things efficiently (it was already possible before facebook) and the "fine control" over your "present yourself" is either an illusion or proof of your superficiality. I think it is the point around what facebook was built: the superficiality of people and their need to show off everywhere and think of themselves as some public figure. I guess that's also why instagram and selfies are so popular. It's all about network connection, not about the meaningful content the network is supposed to carry.
Radiation therapy treatments are almost always fractionated, meaning the total dose prescribed by the radiation oncologist is spread fairly evenly across multiple days, typically 25-38 treatments for most disease sites. And since patients are rarely treated on the weekend, it usually takes 1 to 2 months for a patient to complete treatment. I don't know that I would consider 1 to 2 months a short time. There are some exceptions, such as gamma knife for brain cancer, in which the entire prescribed dose is delivered all in one session.

Also, radiation therapy is often used to treat not-so-small areas (volumes). For example, mesothelioma cases often require irradiation of the entire thoracic cavity. And if that isn't a big enough target for you, well, total body irradiation is actually a pretty common modality for certain, less localized, cancers originating in the blood and bone marrow. Both external beam irradiation (for mesothelioma) and total body irradiation treatments are always fractionated, generally delivering no more than 2 Gy to a patient in a single day, to give healthy tissue time to recover between fractions. Having said all that, you are right that this is still quite unlike the conditions presented in the article. Perhaps you would prefer studies analyzing the increased exposure of long-haul international airline flight crews.
On embedded devices in the SheevaPlug family, it's a bit slower than the old init, presumably because it's doing a lot more stuff (and the OS is either on slow flash or a slow USB-to-SD card interface). It doesn't seem to scale down to small systems very well. I do like the colors, though.
Their curated playlists are seriously top-notch. I've found so many new bands through the Blogged 50 and Gorilla vs. Bear playlists.

Plus, Google Play Music's UI blows the others out of the water. My favorite part is the "Play Next" and "Add to Queue" choices for unobtrusively adding songs to what's currently playing. Something that iTunes actually used to have, but then they removed it for no reason.
> Who tried and convicted him?

This is not a court of law. People have a right to (and do!) form their own opinions without going through the courts. Calling something a scam does not require a legal judgment, AFAIK... unless you want to argue that it would be slander/libelous to do so. However, this would probably be a tough sell since saying "X is a scam" in everyday life would probably be interpreted (for legal purposes) as saying "It is my opinion that X is a scam" and opinions cannot be slander/libelous AFAIK.
Ubuntu's Upstart was also pretty nice in this regard.
Christian thinkers have, over the past 20 centuries, developed a variety of views on when/how immoral actions should be tolerated by the state (and left to divine judgment) versus their being actively prosecuted.

There is a fascinating essay on the moral theology of Thomas Aquinas – one of the most influential thinkers in the history of Western Christian thought – as it pertains to the toleration of prostitution:

Aquinas on the Practice of Prostitution

http://www.illinoismedieval.org/ems/VOL13/13ch4.html
not cool dude.

https://blog.pusher.com/battlehack-new-york-city/

https://twitter.com/braintree_dev/status/630482398883528704