skysight-inc/HackerNews huggingface dataset:
> You're confused because you're unfamiliar with the concepts being discussed. That's not the same thing as being confused because the parent comment's argument is flawed.

That's very unnecessarily condescending. You then go on to criticise RSA, which is fine, but fails to address the point I made which was that they criticised RSA's implementation, not its inherent design flaws, while promoting a newer scheme with a less time-tested implementation.

This is verbatim what I was responding to:

> As RSA and finite-field DH aren't broken

>> No, but their implementations often are.

PS - I strongly suspect your tone is a result of another thread of discussion we had in this topic[0]. I'd suggest you make snide remarks there rather than carrying it over into this thread.

[0] https://news.ycombinator.com/item?id=11909436
The FBI has collected over 411M photos for its facial recognition system
Not on (eg) BSD. I don't know if this is Linux-only, or more pervasive, but certainly not entirely standard. On Net, Free, Dragon Fly and OpenBSD "-l" mean "update only the local database", versus Kerberos.
I actually watched the majority of this, it's a very interesting talk. I'd imagine that all of us are going to need to use at least some statistics one day, so I consider it time well spent.
When gravitational waves are released from the merger of two black holes, the combined mass of the resultant black hole is less than sum of its component black holes, because some of the mass was released in the form gravitational waves.

Questions.

What are the implications of this on black hole entropy and temperature? Can black holes evaporate from gravitational radiation alone without Hawkins radiation?

What are the implications of this on the mass of any object in the universe, since all objects are related to each other gravitationally and the universe is expanding? Does it mean objects are constantly loosing mass and the universe is filled with energy from this release? Can dark energy be related to this process? Can universe be expanding because matter is constantly lost into the gravitational waves?

What are the implications of gravitational waves on the fabric of spacetime, if objects are constantly leaking gravitational waves in a nonstatic universe?
If only you had told me twenty years ago.
Did you miss the link to http://jacobappelbaum.net/ where the rest of the testimonies are collected? Or read any of the other blogposts on the subject like this one? https://blog.patternsinthevoid.net/the-forest-for-the-trees....

It isn't a single 'open blog'. Alison is a widely respected member of the infosec, internet freedom and librarian communities.
I scanned it and transcribed it and shared it online a few years ago, but not sure if that is still around, and I'd have to dig through boxes in the loft to find the original, however, the letter this article [1] describes sounds almost identical in content to the one I have.

It reminded me that I also have a "letter from the prison chaplain", and a short follow-up letter from "Antonia Garcia" in shaky writing that trails off mid-sentence, and another letter from the "chaplain" saying he had passed, enclosing a supposed prison death certificate.

[1] http://theappendix.net/issues/2013/10/proto-spam-spanish-pri...

EDIT: I found the transcript and have put a copy online here:

https://docs.google.com/document/d/1dsb_Ss9dIRa8NvoAZ0W2FLi0...
Plan to synthesize human genome triggers mixed response
> If the allegations true, they should prosecute, and should have prosecuted immediately.

Prosecution of alleged crimes is, in most jurisdictions, at the sole discretion of the state, not that of the injured parties.

(Civil litigation is possible at the instigation of the injured parties, but the calculation of whether that is desirable even if legally justified is not so straightforward that one could reasonably, in a blanket way, say that if there allegations are true, they should make and pursue them in court.)
I ranted about this on my blog whilst drunk, and then went off in a tangent, you can find it at jameshalsall.co.uk, 2nd post.

This really makes me uncomfortable, standards are there for a reason, you don't just ignore them because you don't agree with them.
upvoted because funny, but there are quite a few false positives in the results
Agh I forgot to mention this! Thank you, I'll add a note to my post.
Apple employee Trent Reznor...
I've had people approach me to be their cofounder on their projects, and I have almost always said no, because A) I have my own projects I'm interested in working on, and B) I didn't think they brought any useful skills to the table.

When you're teaming up with a cofounder, you're not just getting a free employee. You're getting a business partner, and that person needs to be someone who complements your skills. But too often, I see MBA types who are "looking for technical cofounder for lots of equity" to mean "need a code-monkey who I will boss around for free."

Even more distressing is the fact that so many young programmers will go along with it.

If we're going to be cofounders--and let's just assume for a minute that I have the technical part covered--then that means I expect you to be able to prove that you know how to perform the tasks of marketing and sales. I can show you several past projects I've worked on. What can you show me?

And you need to be putting in just as much effort on your job as I'm putting in on mine. And no, you are not waiting for me to finish the product. That's not how marketing works. You need to start now.

Nobody has managed to do that yet--and there have been several suitors--thus I haven't taken on a cofounder.
Instead of discussing the issues that prevent women from joining the tech community, you want blogposts about how to get women into tech. Is that accurate?
You're already given your own concrete time estimate - 'hours' - how did you work that out?
Doesn't seem like a dumb question to me! AFAIK, our models of physics work forwards, as well as backwards. So in theory: yes

IANA physicist, and have 0 training in physics, so someone please tell me if I'm wrong
> Since the victims have very little trust[1] in the ability of the judicial system to handle this properly

So, unsubstantiated character assassination is superior?

It's ironic that you cite the Ghomeshi case which completely fell apart when actually examined by the judicial system.
Meanwhile, this works, is under active development, and is essentially at HEAD of both openzfs and zfsonlinux:

https://openzfsonosx.org/
I love that the data-as-sound is so cute: https://losc.ligo.org/s/events/GW151226/GW151226_template_sh...
In principle, yes. The Einstein field equations are time symmetric, so you could reverse the situation by pumping in gravitational waves from a great distance in a spherically symmetric way, and have them converge in some central region in such a way as to increase the mass of a black hole at the center, or have it split up into two more massive black holes.
Can a Bunch of Doctors Keep an $8B Secret? Not on Twitter
Hey, let's do some math!

The formula for gravitational potential energy is just mgh (mass times gravitational acceleration times height), and g is just GM/r^2, so the potential energy of one black hole in the other's gravitational field would be GMm/r, which would be the same for the other, so the total gravitational potential energy would be twice that.

Also, the schwarzschild radius of a black hole is about 3km per solar mass (2e30 kg).

Which means that before their event horizons touch the two black holes should be separated by a distance of at least 65.1 km.

So, 2 * G * 14.2 * 7.5 * (2e30kg)^2 / 65.1 km is...

8.73e47 joules

divide by c^2:

9.7e30 kg or 4.86 solar mass

So the system actually had nearly 5 solar masses of gravitational potential energy in it, some of which was radiated away as gravitational waves.
> tar -z (tar is a tape archiver, not a compressor!)

Did you not want -z to exist at all (so you would pipe through gzip separately), or not want it to be a magical default?

GNU changed the -z handling at some point in the last decade (so that it autodetects whether input is compressed upon extraction and decompresses it without being told to), so now tar -xzf foo.tar.gz and tar -xf foo.tar.gz both work, where previously the second one would have failed because tar wouldn't have tried to decompress. Is that change what you're bothered by (it's pretty counterintuitive to me!), or did you just not want compression built into tar at all?

GNU tar now includes flag-based support for -j (bzip2), -J (xz), --lzip, --lzma, --lzop, -z (gzip), and -Z (compress).
Glad you got an answer. :)
I love the idea of JWT but I don't understand how you would use them to store a lot of information, as the token it self would balloon in size. For example using a JWT to authenticate an API request. The JWT would store a user ID and a list of permissions. What if a user has 100 permissions? The token is going to get huge....? Unless I'm completely misunderstanding how to use them.
Excellent articulation. I feel the same ways about the potential costs of cofounders.
Well yeh, I thought this was pretty common knowledge at this point.
Stars- They're Just Like Us: On Astrology and Queer Culture
There is also an effort to get these detectors in space with eLISA: http://physics.aps.org/articles/v9/63 This will be able to detect wave frequencies that would normally be drowned out by terrestrial sources.
Actuators Inspired by Muscle
Slight off topic. Does someone know a quick way to enter large amount of detailed traffic counts (say around 300 intersections, counted in every lane and every possible turn), and can routing engine and OSM data help? Is there any specialized software that can be used for this type of data entry?
Doesn't make it any less true
how much does each facility cost (ballpark)?
The cognitive science of trolling
So was the iPod. Products are built on the back of what people want and its a very tough row if you want to go against that.
I just think ubi is a panacea when we are really headed towards a cyberpunk dystopia were powerful corporations hold all the cards and the workers are reduced to a form of neo feudalism
Depending upon how long the full-size graphics card is, the Dan A4-SFX [1][2], NCase M1 [3][4], and NFC Systems S4 Mini [5][6] mITX cases might be worth a look.

[1] https://www.dan-cases.com/dana4.php

[2] https://smallformfactor.net/forum/threads/dan-a4-sfx-the-sma...

[3] https://www.ncases.com/

[4] https://hardforum.com/threads/ncase-m1-a-crowdfunded-mini-it...

[5] http://nfc-systems.com/shop/s4-mini-chassis

[6] https://smallformfactor.net/forum/threads/nfc-systems-s4-min...
Another irrelevant 90s musician making bombastic comments about copyright, another day.
Just How ‘Smart’ Do You Want Your Blender to Be?
They put the distance at 440−190+180  Mpc. 440 megaparsecs is is around 1.2 billion light years away(!).
The answer is actually yes, at least in principle. In practice this would be extremely difficult (read impossible) due to the weakness of gravitational wave interactions.
Related discussion: https://news.ycombinator.com/item?id=11910543
Most video sites are. From eBaumsWorld to Facebook Video.
> Think you're indispensable? Do they know that?

Indispensable employees are a sign of organizational failure. They indicate a weak point in the organization -- if that person gets hit by a bus, or walks off the job, or is on vacation during a crisis, we're all in trouble. And if an employee becomes indispensable on purpose, that person is a problem and should be let go before the situation gets worse. Where I used to work, people who thought they were indispensable were the first to go when we had layoffs.

All this is to say that if you ever find yourself thinking, "this place would fall apart without me," you have a big problem.
Out of a pretty big slide deck, explicitly intended for a beginner audience, this is a weird thing to pick on. The following is "Proposition 1.1" from the relevant section of a standard text (Bhattacharya and Waymire):

"A stochastic process X0, X1, X2, ... has the Markov property if and only if for each n the conditional distribution of Xn+1 given X0...Xn is a function only of Xn."

The only difference between the above Prop. 1.1 and the statement in TFA is that TFA omits to specify it means a conditional distribution of Xt+1 given X1...Xt (as opposed to an unconditional distribution).

But, in literally the following line, TFA goes on to clarify what it means by stating the equation that the words correspond to, and the equation has the correct conditional distribution.

I don't see reason for alarm here.
I have the pleasure of working with both an excellent principal developer and a principal test engineer (my other team members are great too, they just aren't senior).

Both can effectively communicate with non-technical stakeholders. Product Management, sales, consulting/services, clients, etc. I wouldn't hesitate to include either in a discussion with executives (internal or client) when appropriate.

Both can do any job on the team, including mine (project manager). They might not be comfortable doing it. They might take longer on some tasks. But, if all else fails, I can safely ask either of them to do anything and they'll find a way to get it done.

Both have successfully managed special initiatives (in a "tech lead" role). These typically involve coordinating across teams, so require a higher level of time management and communication than developing for our primary project.

Both have successfully mentored junior developers, interns, or new (but not junior) employees.

And Both have earned the trust and respect of everybody else in our division. They are go-to resources, not only within my team, but across the division.
I think the practical limitation here is generating and concentrating/focusing the gravitational waves.

EDIT: And there would probably have to be some control of the relative phase of each component wave as well.
The interactive nature of those visualisations do a great job of increasing ones' grasp of the concept.
>This is a really bad idea and a good way to get owned. Database backups must be PULLED

Just make sure your database server doesn't have permission to delete backups (e.g. Have it POST a backup via HTTPS). There is nothing wrong with db server initiated backups.
FWIW, I run 2d desktop apps and the web browser at 2560x1440@144Hz just fine on my NUC6i7KYK. I use a non-composited desktop with DRI3 turned on. Tear-free in chromium (since it does internal compositing buffering) and perfectly smooth.
MapQuest discontinuing free OpenStreetMap map tiles
I mention Ansible and other tools in the article. The idea, as others have mentioned, is to teach a man to fish. You're much better off with having an automated way to perform this, but you shouldn't ever run anything automated that you don't understand.

We'll release an Ansible Playbook over the next week or so that follows these steps.
I agree with Gabe Newell's stance on piracy.

"We think there is a fundamental misconception about piracy. Piracy is almost always a service problem and not a pricing problem," he said. "If a pirate offers a product anywhere in the world, 24 x 7, purchasable from the convenience of your personal computer, and the legal provider says the product is region-locked, will come to your country 3 months after the US release, and can only be purchased at a brick and mortar store, then the pirate's service is more valuable."

http://www.escapistmagazine.com/news/view/114391-Valves-Gabe...
have a look at OpenTripPlanner which provides public transit routing using OSM and GTFS data

http://www.opentripplanner.org
Ask HN: Who are you going to voting for?
RSA-1024? Still in use in many applications, considered extremely vulnerable.

Are you going to suggest that RSA itself is an improper algorithmic choice, in favor of elliptic curves? That option wasn't necessarily available to all users when some of these RSA deployments happened.

Edit: I see that you addressed this point elsewhere in this thread.
> It’s a markedly different opinion from when a 2007 pre-Apple Reznor said the iTunes store made him feel “uncool” (“[it] feels like Sam Goody to me”) and admitted he was a frequent user of the file sharing website OiNK.

Whatever your views on his statements are, this comparison is fallacious. He's called YouTube disingenuous for building a business on the back of stolen content. OiNK can neither be accused of disingenuity, nor of building a business.
Are Americans' perceptions more or less accurate than they were 50 years ago, when confidence in public institutions was a lot higher? Look at the factors 'vaadu listed:

> Corruption. money gets access

Back in the day, money used to buy votes and offices outright.

> Elected government folks' priority is getting reelected.

That's always been the case.

> Unelected government folks have far too much power

The power of the administrative state contracted dramatically during the Reagan/Clinton era. Measures like price controls are taboo today, but were seen as a standard tool of governance in the 1950's and 1960's.

> Lack of accountability for wrongdoing and incompetence

Government is way more transparent today than it used to be, both voluntarily and involuntarily. The FBI's investigations into MLK took about a decade to come to light. The NSA's activities are being leaked almost in real time. U.S. covert missions in other countries used to take decades to come to light. These days, we all but have a play-by-play of every drone strike.

Another example is that the morals of our leadership are subject to more scrutiny than ever. JFK was literally raping young women in office. George H.W. Bush had a mistress that everyone in knew about. But the media never talked about any of that--there was a code of silence about that. But that code of silence is dead today. Obama is probably one of the most morally virtuous men to hold the office--if he wasn't his failings would've been plastered 24/7 across the Internet.

I'd argue that peoples' increased cynicism is not a response to government getting worse, but peoples' expectations getting higher because they have more information about everything.
Well, which video site is not? Youtube's DMCA responses are really good, compared to FB or any other video platform.
An old article I read about password cracking using EC2 while back... let me look it up.
Do you think that random posts on the internet get into the full moral complexity of day-to-day life, then? A couple hundred words is worth more than a criminal investigation?
BCrypt works fine, but I wouldn't say it is "2016-era security practices". It was written in 1999 and hasn't had as much scrutiny as SHA or Blowfish (although it is based on Blowfish).

Regardless, using a salted, multi-pass algorithm will keep everything nicely secured using nearly any hashing algorithm.

Remember the goal is not to crack one user's password using a brute force lookup table, it is to crack everyone's password.
This is a pretty low bar on JWT advice.

Here are some more:

* Make sure that you use JSON.parse to handle incoming JWT bodies if you are writing custom JS code. Using any eval() derivative function opens up XSS

* If you include any strings from a user into the body of your JWT, for example as part of a claim, you must output encode and input validate that data to make sure the result is a valid JSON object in which only the claim expected was modified (think of inputs such as "my address', exp:'never', username: 'admin").

* Your server side code must actually check the claims inside your JWTs. This is really an awfully common thing not to do.

* If using access tokens (or other such tokens), know that there are two tokens, an id_token and an access_token. Endpoints may expect both, so that they can use the id_token to obtain a principle and access_token for credentials. It is important that the server code checks that these tokens belong together (at_hash for access_tokens, st_hash for security_tokens). Otherwise the theft of a user id_token implies a malicious user can auth with it even if their access_token is for a different user.

* Look for open redirects in your JWT-application, fiercely enforce CORS, etc policies. Know that session fixation attacks plague OpenID Connect, OAuth, etc.
You just described why I bought the i5 skywell nuc. Yes it's a little pricey for what you get, but power consumption is low. It's a perfectly adequate lab machine.
I went to lookup the algorithm GPG uses to encrypt private keys, to help answer the original question, but couldn't seem to find that information anywhere. Do you know what it is?
Good. It's my browser. I get to turn its features on and off, not you.

And that goes double on my phone.

As a compromise, I'd accept a prompt like:

+---------------------------------------+
| This page recommends we disable |
| autocomplete. What do you think? |
|[Okay] [Fuck them; autocomplete anyway]|
+---------------------------------------+
The accounts of multiple victims, both anonymous and high-profile members of the community, are sufficiently convincing to me.
> "The problem is that autocomplete='off' is far more often used for poor reason than good."

Wow. I think Chrome is jumping the shark on this one.

EDIT: It seems I have angered the Google employees on HN. I have but one acronym: KISS. Have the standard adjusted or adhere by it
This signal was reported on months ago. Can anyone explain what they did to move the GW151226 signal from 2-sigma to >5-sigma?

"The data is in fact completely open and you could analyse it yourself! In addition to the GW150914 event there are also two others that rise somewhat above the background ("GW151012" and "GW151226"). You can see them by eye in the above plot. They are clearly not statistically significant enough to announce a discovery alone, but still they are tantalising... with room for improvement to design sensitivity (by a factor of ~2 which increases the spatial reach by 2^3) and the construction of a third detector in India to triangulate the signal, the future of gravitational wave astronomy is exciting."
http://syymmetries.blogspot.com/2016_03_01_archive.html
I have also just started work on this project:
http://cupomterra.com.br/
For our society, yes, for theirs, I have a hard time agreeing.

For example, if you don't know what the current date is, the device will be useless to you. And if you know what the current date is, knowing how many days to the next eclipse is useful for - what?

If the device were generally useful, many more of them would be made, as well as similar devices, and we'd have found more.
> The judge himself acknowledged that the evidence in this case raising a reasonable doubt is not the same as saying these events did not take place.

There is a fairly dramatic, well-known example of this (outside of the area of sexual assault) in the OJ Simpson case where the high (beyond a reasonable doubt) standard of criminal law failed to be met, resulting in a criminal acquittal for murder, but the lower (preponderance of the evidence -- or, in layman's terms, whatever the jury finds is most likely to be true) standard of civil liability resulted in a finding of civil liability for wrongful death.

A criminal acquittal means innocence only from the perspective of the criminal justice system, it doesn't mean the act charged was not committed by the person charged.
And sometimes the standard is wrong. The page telling the browser that the user isn't allowed to auto fill a form puts too much control in the hand of the page.
Quartz Crystal Resonators and Oscillators [pdf]
Something I've asked before but got no answer - at these extreme masses, velocities, and forces time dilation has got to be immense.

Yet the article makes no mention of this whatsoever.
Is there ever a reason to honor that setting?
Would you prefer they had the rat's anus on it instead?
This causes many problems for app devs to work around this broken policy. StackOverflow is full of silly tricks from field naming to odd JS. Wasting time