skysight-inc/HackerNews huggingface dataset:
I agree. It would be nice if the line:

> RSA 2048: yellow recommended to change

was followed by at least some link that explains why is it unsafe. Could anyone elaborate further?

UPDATE: there is now a link up in this thread, from the user fjarlq, which points to an NSA recommendation from 2015. The recommendation seems to be related to the need of having a "quantum computing resistant" key. But with quantum computing still in its infancy, how do we know which types of keys would be adequate?
Talk Python to Me: #77 20 Python Libraries You Aren't Using (But Should)
> There was even a book on the New York best sellers list called 'Weapons of Math Destruction' claiming that math and statistics are somehow 'racist'. Think about that for a minute to let it sink in....Facts are now racist.

I don't know where you read that but you really, really, really need to learn about that book before repeating it, much less complaining about the lack of intellectual conversation.

Cathy O'Neil has a Ph.D in mathematics (https://www.genealogy.math.ndsu.nodak.edu/id.php?id=38230), worked as a quant, and most definitely is not claiming that math is racist. Rather, she's talking about how MISUSING math – and especially machine learning – can reinforce biases which were already present or introduced by sampling error. She's actually calling for greater mathematical understanding so people keep these things in mind and avoid them:

http://www.npr.org/2016/09/12/493654950/weapons-of-math-dest...

https://mathbabe.org/2014/08/12/weapon-of-math-destruction-r...
There are, I believe, three main reasons why the recommendations are so poor on YouTube:

a) YouTube doesn't know anything about the content itself, can only use metadata

b) The algorithm itself is biased towards creators that post often and keep users hook the longest, which is almost always vlogers (ask any animator what they think of YouTube)

c) Many recommendations systems today create many buckets and once you watch something from one bucket (you show your intent), the algorithm will focus on that bucket only. (You can see it working extremely poorly on Amazon that tries to sell you a fridge after you just bought a fridge).

It's very hard to build a great recommendation system (look at Spotify's Discover weekly), but because this is 101 of any machine learning course, it's the primary thing that companies refuse to outsource (I build company around it, failed badly).
Outside of Bloomberg, most news organizations are struggling. They couldn't foot the bill at ten billion.
If I pay someone a million dollars to do work for me. And they cause half a million dollars in damages due to negligence, it's coming out of their pay.
> There is enough money. Money dedicated to space exploration is well spent.

How do you figure? We have plenty to research on earth for a fraction the cost. What makes you say space exploration will give a better return?
A guarantee does not say something will not happen. It says if it does happen, recompense will be provided.
I did not read it due to the certificate problem. Could someone post an abstract here?
Times of samsung 830 using 27nm SLC are over, its <1000 cycles 16nm TLC now.

Drives that reach >1PB or write endurance are no longer on the consumer market. You can buy them (SLC), but you wont after seeing the price.

You can do nice tests that will last for hundreds of TBs .. until you pause for 24 hours and realize all the data is gone.
Simple solution change save time to 30s

Windows file compression
cookies.sqlite => 1MB => 472KB
sessionstore-backups => 421 KB => 204 KB

Move TMP cach folder to ram drive ie ImDisk
Someone did say "rainbow table". Fortunately it's just further down.
Also: with quantum computing still in its infancy, how do we actually know which types of keys would be adequate?
You mean, "refusing POTUS's orders to undermine the law of the USA, is unethical?"
All products carry some risk, and all companies calculate the risk vs the cost of mitigation. It's impossible to make any product if safety trumps everything else.
That's because Scheme doesn't support partial applications (I mean, you can return lambdas, but your functions aren't curried by default). That's why we have to cut macro from the third line to fake it.

Instead, the first line is Haskell, the best-known language to support that particular feature. I personally dislike it, but if you're demonstrating partial application, it's the language to do so.

And in case you haven't realized it yet, Java is actually the new COBOL: Verbose, ugly, and very popular in industry.
The same arguments were being made in some Reddit threads on the same post; I don't see any reason or new information to point towards RSA 2048 being a questionable or unreasonable choice.

If quantum computing becomes more accessible, there will be a quantum shift (forgive the pun) in how we secure our connections.
Itch Relief by Mirror Scratching. A Psychophysical Study (Ig Nobel Winner)
IAD recommends not upgrading to ECC in case this would incur significant costs, only to have to upgrade again once they settle on quantum resistant algos. So not because of crypto reasons, not because ECC is more vulnerable to quantum attacks relative to RSA, but because of practical operational and economic reasons. They think they will have quantum algorithms soon enough so that RSA >=3072 is OK in the meantime. At least that's my understanding of what they're saying here: https://www.iad.gov/iad/programs/iad-initiatives/cnsa-suite....
Thanks for the tip.

I'll see if it has any affect on my laptop's battery life and fan usage.
Again, what we did to Tokyo was far worse and that somehow never comes up. In this case, nukes were actually not the worst thing we did. I never claimed a unanimous decision, but even with hindsight there is no convincing argument you could possibly make for an alternative invasion of Japan. It would simply have been to horrible for all parties.

> Only the Japanese could so quickly recover from the horrors of a large-scale nuclear bombing

Ever heard of the Wirtschaftswunder? US support post-war was crucial for a lot of countries' recovery.
Global Space-Based ADS-B Flight Tracking
Koblitz and Menezes explore various theories about the NSA's new policy in their paper, A Riddle Wrapped In An Enigma:

https://eprint.iacr.org/2015/1018.pdf
Yep. It may seem counterintuitive that the moon could somehow be "zoomed further," yet because of its vastly greater distance, that is effectively what happens.

In the example above, the woman is standing the same distance from the Starbucks, while the photographer moves further and further back with a longer lens. As the woman recedes into the distance, the longer lenses are picking a smaller and smaller angle out of the field of view, which makes the Starbucks appear ever bigger behind her. The same thing happens, at a much larger scale, with the moon.
If you invert the two elements of pcwalton's comment, another way of putting it that might sound less disappointing to your ear would be this: competition is another way of contributing to other projects, if done openly, collaboratively, and in a constructive way.

One of the delightful aspects of this entire HN thread is the interchange between the authors of rg and ag with regard to burntsushi's detailed explanation of the tradeoffs involved, and how the ag author considers making some changes based on learning and philosophy detailed by burntsushi. This interchange is a great bazaar moment in the sense that new ground was staked out. If the proposed moral obligation would be to simply contribute PRs to existing projects (for a slew of philosophical architectural and features differences like Unicode support, etc.), then innovation slows to a crawl because of passivity constraints, bikeshedding, etc.

If you have the talent and capacity to build a better alternative, and share it openly, and explain it so well, as burntsushi has in this domain, then the only moral imperative I see is that you should do so.
Thousands of Verizon Customers Report Unexplained Surge in Data Usage
Oh, well, since it isn't the federal government doing it that means it's completely okay.
Here's a copy of their CNSA FAQ:

https://cryptome.org/2016/01/CNSA-Suite-and-Quantum-Computin...
Czar Pino
Hrm. I'd have to see Pournelle's specifics, though I'm not particularly inclined to find him highly credible. The narrative is interesting.

A few pieces I've been putting together from numerous sources:

1. The USA and USSR were the two dominant oil suppliers of the first half of the 20th century, and are still typically trade off the 2nd & 3rd spots, after Saudi Arabia, today. Oil is much of what made the 20th century. See Daniel Yergin's The Prize (mentioned several times in this thread), and Manfred Weissenbacher's Sources of Power -- he notes this in the introduction. The book is an exporation of how energy shaped history.

2. The final collapse of the Soviet Union happened in large part through the oil glut of the late 1980s. The USSR had overextended its domestic committments, had been forced into an unsustainable arms race by the US (which had greater capabilities than the USSR through much of the postwar period, total ground fources excepted).

3. William Ophuls, a little-known author, who combines ecology and political science. In his 1977 book Ecology and the Politics of Scarcity, he calls much of the subsequent three decades of development, including the fall of the USSR, the industrialisation of China, and the nonindustrialisation (mostly) of India and Africa. Moreover, he gets the dynamics right, a far more crucial element IMO than timing, which is hugely uncertain.

I've found it interesting that command economies (USSR, China, North Korea, Cuba, East Germany) often see a very rapid initial growth stage, then a stagnation. One might argue that there are exceptions (Saudi Arabia is essentially a family-government-enterprise-state institution based on oil), and there are market-democratic states that fare poorly. But that quick-launch-early-plateau dynamic seems fairly common.

Appreciate the ref even if I'm taking it skeptically.
For comparison ancient Opera Presto stores about 500 bytes per tab in Session file.
I don't see how tax is a valid point. 99% of individuals and corporations do not have their spendings - that's not only the net flow, but also the breakdown of revenue and costs - revealed to the public. To imply that they might be dishonest, and that dishonesty will not be caught by the government, would mean that everybody has to release their spendings to the public. Mark Zuckerberg could be cheating on his taxes. You could be cheating on your taxes. Surely you don't want to cause financial harm to the rest of us?
Better humans
I just tried. Bitbucket was working ok. What issues are you facing?
I'm on a fedora 24 laptop.
Off topic, but I want to thank you guys again for your service. You guys make it so freaking easy to manage access to our various servers and VMs- I can't even remember how we used to deal with it.
I love Haiku -- and their inspiration in BeOS brings back my memories of deciding not to work for Be in 1996, and then later hitting jackpot at the Be Inc. bankruptcy auction.[1]

[1] https://www.youtube.com/watch?v=hgN8pCMLI2U#t=53m49s
Pretty much anything involving searching and filtering. For instance if you'd like to search about the benefits of regular expressions in industry it would be very useful to be able to use regular expressions to do so in Google/Google Scholar.
Interesting.
5 downvotes and 2 comments... Why only 2 comments
I'm considering applying for an unlaunched e-commerce startup. Is it worth applying as a solo (technical) founder, with all of what's been built so far done by a web development firm paid for by me?

I doubt I can get a co founder before the deadline.

Also, I see more questions than in this doc:

"Is this application in response to a YC RFS?

Where do you live now, and where would the company be based after YC?
(List as City A, Country A / City B, Country B.)

Who are your competitors, and who might become competitors? Who do you fear most?"

Any tips on whether I should include a comprehensive list of 15 competitors, or focus on the big ones and the one I'm worried about?
> mining the search query report

You haven't even got to do that!

It takes very little time, in many industries, to build 100,000s of keywords. It is just string concatenation:

{modifier} {Size} {Colour} {Clothing item}

Adjective: buy, cheap, buy cheap, cheapest, best, quality
Size: large, small, extra large, petite
Colour: ....
Clothing item: t-shirt, tshirt, hoodie

That's hundreds of keywords quickly.

Keyword research is something I think people overdo. You know the sorts of keywords that exist, you need to get them all into the system, and then optimise en masse.
If you read the transcript, you can see that the Germans really were in awe of what was accomplished by the Americans with the time and resources available. It makes me proud to know that my nation can get pass the BS when push comes to shove and do the impossible when the impossible needs doing. As an engineer I have a profound understanding and respect for people who dare to do what others said couldn't be done. It's one of the things that motivates me to learn. For me, I think it's really cool to hear others say "Wow I didn't think you could do that!"
I don't see it as an exception, but rather as a matter of priorities.

It means "(more) than (one TEDx talk)" and not "(more than one) (TEDx talk)s".

And it works the same way in one of the author's native languages. It is even more obvious and you cannot get it wrong in that language.

Also, the definite article is used in this language much more regularly than in English. The problem with English is that, on the contrary, it does not use it everywhere. So you have to drop it sometimes, but not always, and the "rules" can be a mystery for a foreigner.
Hmm. Suppose I want to buy a bike. Joe steals a bike and sells it to me for cheap. I did nothing wrong, but could be forced to return the bike. But if I resell the bike, I am no longer liable?
No the spec is finished and Babel supports it. Browsers already have started implementing it.

Edit: I realize you mean Typescript, my apologies
Automated image captioning using machine learning
Limiting factors are the things you don't have enough of.

If food isn't constraining, it's not your limiting factor, something else is.

The general idea is expressed in Leibig's Law of the Minimum, from Justiz Leibig, a 19th century botanist.

This is why counterarguments to Malthusian philosophy based on showing that some arbitrarily selected factor isn't constraining are moot. The question is, what is limiting in the environment. And if growth has stopped, something is constraining it.
No, not even close to a few hundred years. No more than ~20 years at this point. https://www.keylength.com/en/4/
There is a lot to be said for systems that do their jobs despite their age, and which have been validated and refined over the course of decades.

In many ways, I'd rather maintain an old, well tested system than a modern system with widely available exploits, conflicting commercial interests, and rapid obsolescence.
Try Vivaldi.
For anyone reading the thread, this is an absolute must-read paper if you're at all interested in the near-future of production cryptosystems in high-risk settings.
Is it also your position that the current legal standards for what constitutes negligence when handling customer information are appropriate?
I wasn't asking as a productivity question it was more wouldn't they want to read the history of thought leading to what they're doing just out of sheer curiosity?
About to go to bed, but this item:

The final collapse of the Soviet Union happened in large part through the oil glut of the late 1980s.

Is at least claimed to be part of Reagan's economic warfare against the USSR.

Note also that not any one or even two of these things were likely sufficient to bankrupt it, they all piled on particularly in the '80s, and most of it was external and intentional.
Yes that is an excellent point! Moral superiority and the imparitive to act are highly motivating factors. What's interesting is that when faced with the opposite senario, humans tend to default to inaction rather than be a whistleblower. Moral superiority is only motivating if the majority is on your side.
An abacus has an exceptionally small attack surface when you think about it.
Commenters seems to not understand why solitary confinement is a standard action for suicide risks.

It's not about punishment (though Manning was also found with contraband in this case).

It's about the safety of the individual, and order for the rest of the inmates.

The inmate lives in a tightly controlled environment, and nobody sees a body swinging in the next cell over.
List of Research Meetings and Conferences on Aging Science – Trdinoo
I really recommend having the program trap on overflow. There are some proposals like as-if-infinitely-ranged, which is like bignums but without having to actually store a bignum.

It's really problematic to use them, though. Every integer would turn into a pointer, and the O(N) thing really is a problem. If you're doing secure coding you need careful control of data dependencies, since they create side-channel leaks, and nobody who makes "safe" languages appreciates this.

Plus most people don't need numbers that big. I think it was even a mistake to make size_t 64-bit.
Ha! Bravo! That is some old software! This hunt has reminded me of The Cuckoos Egg by Clifford Stoll.
My "luxury" VC fund features investor meetings three times a day, with meals and drinks provided by top-rated chefs and bartenders. Hell, for a higher "management fee," we'll even let you stay at our "offices".
Oh really? Last time I tried it I think it didn't.

I assume they added support for it in the meantime... Great!
So this is what I get when I use Google Assistant. http://www.pixelstech.net/fun/279-Am-I-talking-to-Google-Ass...
If there is anyone who could mess up Twitter worse than Twitter it is Google.
It's not so much the Americans defeating the Germans that makes me proud, but rather the immense technical achievement that was done in such little time out of necessity. It is a perfect example of the American ingenuitive ideal. It's shouldn't be taken as a slight to other nations but rather as admiration for the accomplishments of those who came before me
Too true - both the negative (who wants to program an abacus), and the positive (there is no magic in this program/device).

I feel like developers tend to favor the magic, due to the burden it relieves, without having to consider the negatives due to the way the business of software works.
Tax law and slavery are dramatically different concepts. Your analogy really doesn't hold water.
Great. Google Glass redux.

More people to punch in the face, until they learn to put their rude, obnoxious, always-on-please-prove-otherwise camera away.
NSA’s Failure to Report Leaked Vulnerabilities Underscores Need for Oversight
I want Jarvis, literally the AI in the Iron Man movie. I want him to converse banter and operate my computers / servers with whatever I need, and do it FAST. Siri and Google are doing good things, but I want something I can host myself so its quick, responsive and feels like i'm talking to a real person.
IBM built custom computing solutions for Nazi Germany, so....
A shift of a very, very tiny yet discrete amount?
Reminds me of this article [1] that appeared in game dev mag when that was still circulating.

[1] http://seanmiddleditch.com/data-structures-for-game-develope...
Snapchat Releases First Hardware Product, Spectacles
That's not correct notation for the ideal gas law.

Ideal gas law doesn't apply to real gasses, (actually in some cases especially helium).

Ideal gas law does not apply to liquids.

Ideal gas law only works at low pressure and high temperatures.

Overall the ideal gas law is not a law it's an approximation that works in a few cases, it has no baring in this case.
I find it highly suspect when a data structure uses independently allocated nodes tha contain actual pointers (as opposed to indirection ints). I know people like to make the tree just be another node, but it's really really important to allocate things together! I would deem it mandatory to allocate every node in the same tree in the same vector.
Well it was specifically about mirroring. In that context, the Torvalds quote is actually pretty popular.

But I apologize nonetheless - it was not my intention to make a sexist joke.... Just a geeky one.
> The problem is that this isn't about saving money _overall_.

It hasn't been shown to be otherwise either though.

> companies that lose data don't pay any costs at all until afterwards

Because we don't know what they should pay. We need reliable research that nails down how much a security breach costs society, and until have it, it's impossible to provide companies with the right incentives.

Note that the cost should depend on the circumstances. For example, if Google or Facebook has a major breach, it would probably have a bigger impact (on a per-user basis) than a small service.

If you just impose a uniform per-user cost for data breaches, then you're essentially giving larger services an unfair competitive advantage.
You are right that the ideal gas law doesn't describe real gases but it can be a reasonable approximation for some applications, even at fairly low temperatures, provided the density isn't high.
> detects stdout redirects

Is there a portable way for you to find out that stdout is connected to output.txt? isatty() only tells you that there may be a redirection and I suppose on linux you could use /proc/self/fd/1 but I don't know how to do it portably.
I have the dream of revival of the xbase spirit. This lead me to the idea of build a relational language (http://lambda-the-ultimate.org/node/5353), and it lead me to the idea of build a better relational database, where the LOG is a first-class citizen (so, like built-in event sourcing), the db is fully relational and other nice ideas.
That would, clearly, be between you and your agent.

Meanwhile, you would be legally exposed to lawsuit to reclaim that half million dollars in damages.
> Providing some of the parts,

He just gave a laundry list of parts which grep or any other tool could use, and gives a thorough explanation of what benefits each one gets you in the blog post.

He's also having a seemingly productive discussion with the ag author on HN, which could result in ag sharing components.

Ripgrep seems to be a fun side project for the author. Making it posix compatible and getting involved in the politics of changing the language and algorithms of a major tool might not be considered fun by the author. This is totally reasonable. Especially given that Rust isn't really the reason why rg is fast -- justifying Rust is harder in this case. But if you like Rust (and not C/++), then it's even less fun to work on a C/++ codebase.

The blog post is written in a way that any tool can pick up the same perf improvements if it wishes (often by just picking up a dependency). The author has been collaborative, not combative, with the ag author here (and presumably with other tool maintainers if they come forth). This is very much in the spirit of open source, since even if things superficially compete they still can share code and ideas. You're being very unreasonable here.
People walk around with their cellphones out, and you aren't complaining. Any of them could be filming you. Nor are you punching CCTV camera operators (I hope).

I always considered Google Glass could've been a success, if they'd only left the camera out. You could still do a lot with a head-up display that doesn't require video input.

Google was socially clueless, tried to do too much too fast and aroused public hostility. It could've been different. Wait till a wearable heads-up display is more accepted, then consider adding a camera.
You could think of it as "death of the author". Also could be thought of as death of production.