skysight-inc/HackerNews huggingface dataset:
Modern crypto algorithms are decay-free. They may still get weaker because of improved math, or quantum computers, but never because of increased computing power. That was an artifact of too slow computers at the beginning of computers history.

Modern algorithms are replaced mostly because the alternatives are easier to use, faster, or more flexible in some ways. With some huge emphasis on "easier to use" because that means "more secure" on practice.
I respectfully disagree. Alacritty follows the Unix philosophy of doing one thing, and doing it well. I used to think that terminal scrollback and tabs were great ideas -- but switching to tmux changed my mind completely. Tmux is so much more capable for managing your session history. The terminal's tab and scrollback features can never match this. They're just bloat :p
So if you don't even understand that The Avalanches are an electronic music group... nevermind...
No, I think it's good. Wikipedia, no, of course. :)

But factcheck.org, for sure.
Given how much evidence could be classified the problem here is a lot of it is going to rely on how much you trust the National Security Complex, and given that the political party affected is the one whose base is more suspicious of the Nat Sec that isn't necessarily an easy case. I'm inclined to trust them in this case since it goes along with other evidence that we've seen, it makes sense with how Putin does things, and I don't see why they would have a reason to pick a fight with Trump right now by making something up.
Apple Engineer Talks About New 2016 Macbook Pro:

https://www.youtube.com/watch?v=-XSC_UG5_kU
Are cheapo mic and speakers even capable of operating at those frequencies?
What's super weird about this to me is how unlike the actual shows these are; OITNB doesn't take place in a cell block prison, and Matthew Modine isn't bald in Stranger Things.
...one only has to make a similar comparison between Tesla and a variety of auto manufacturing firms to note there is a distinct whiff of under-performance and delays that, by outward appearances, appear to be top-down culturally.
"the government" is made up of a shit ton of people. I don't think there's some grand conspiracy involving the intelligence agencies, the Obama administration, and even Republican Senators to make all this up.
So if I make backup plans, I don't think there's any chance of my primary plan working? Don't be absurd.
All you've mentiond as the benefits of np++ are also available in other widespread editors but with less drawbacks and better support.
And the USA should be punished for it's mischievousness?

You left that out both times.

It feels like a lot of US folk are still in the blame-somebody-else stage of grieving.

Is it Russia's fault the US electoral college system allows a minority to elect the president?
I don't know yet, but after leaving my last job about 4 months ago, I'm thinking about getting out. My last job was great fun, but led me straight to Nowheresville, as the skills I was using are not in great demand. ~2 years of doing that and my other tech skills are basically obsolete. Nobody is even looking for Angular anymore, and the jobs I see that use a LAMP stack look terribly boring to me. I'm going to take a React class and try to get a roster of clients that will let me work remotely. I've been hesitating to do this, because I really do not enjoy building systems for the web anymore. The only saving grace would be working remotely.
Big planes have an order of magnitude lower complexity than a rocket of the Falcon 9's caliber. That's a somewhat subjective statement, I'm sure, but even if it weren't the case there's so much variation between each Falcon 9 I'd be surprised if they could crank that many out with any reasonable amount of QA.
>Hardly proof that CTR did not systematically downvote pro-trump and promote pro-hillary content and comments.

It is claimed by many that CTR publicly claimed their work was to pay for anonymous comments online. This impression has spread far and wide. There is no such claim or statement by the PAC -- that is clearly false.
I don't think he is, but "the enemy of my enemy is my friend" happens
How do you run a restaurant as a side project? I'd heard that this business requires a huge amount of time.
> Multibyte characters are 100% supported, but only if they are available in the chosen font. The fallback fonts feature will resolve this issue for you.

How do I enable this feature?

The characters  and ⑂ don't work in Menlo.

 and  do work in Cousine for Powerline font.

In Terminal.App and iTerm2 this works in both fonts. Do those applications also have a fallback fonts feature?
Amazingly, I understand that the board had a lot of big and very well known names.
There is also a discussion of this "level system" of complexities on Lipton and Regan's blog https://rjlipton.wordpress.com/2017/01/04/babais-result-stil...
Why do you think crowdfunding for startups hasn't kicked off as well as hoped? What sort pitfalls have startups in the space encountered that you know about?

Thanks!
> How is this not "heads I win, tails you lose"?

Because the investor will not have 100% recovery rate.
Nothing fancy. I was in the BI department of a big telco and I inherited a "next best offer" system. It was extracting data from the DWH, doing some scorecard based optimization, picking the right product for the right customer and sending the results to the call centers. The data extraction part was a PL/SQL framework and the optimization was done by a SAS tool. The system was really slow: after a change in the parameters it took 48 hours to recalculate the results. Unfortunately the product line managers loved to change the parameters on the day of the data delivery and my team lead couldn't say "no". So after a couple of month I ended up doing almost everything manually in order to keep the product line managers happy and to keep the deadlines. Practically I took the system step by step to pieces and I worked with standalone SQL scripts, like back in the 90's. After a lot of people were fired and my team lead resigned I was left alone for two months. There was practically nobody to require urgent changes so I used my time to rewrite almost everything from scratch, included the features the product line managers wanted and reduced my monthly workload from 25 days to 3. And I didn't tell about it.
You can be against both.
Surely the onus is on people to show that CTR did so.
Page 2 (or p. 12 of the PDF):

> In July 2015, Russian
intelligence gained access to Democratic National
Committee (DNC) networks and maintained that
access until at least June 2016.
Could that be avoided if the design of the framework would of kept specificity in mind or does that not matter in that case?
Two Google Homes Are Arguing About Whether They’re Human
What could have been released that was worse than what they openly said?
The address thing is normally solved by the fact that you organise your commands by things that should only logically change togther. So a conflict messages won't revert irrelevant fields back to their old ones.

So your commands should not be

UpdateCustomer

They should be

UpdateCustomerAddress
UpdateCustomerEmail

Etc

For the address, just take the last one. All the business logic I can think makes this ok.
LeakyReLUs work as well or better than ReLUs, so it can't be because of sparsity.
And a new car today also probably won't be rusted in less than 10 years time, what exactly is your point?

>Nobody will blame you for bad crypto if you released software in [the 80s and early 90s].

So you are 100% agreeing with me.

Security expert Bruce Schneier expanded upon what I said back in 1998:

>Cryptographic algorithms have a way of degrading over time. It's a situation that most techies aren't used to: Compression algorithms don't compress less as the years go by, and sorting algorithms don't sort slower. But encryption algorithms get easier to break; something that sufficed three years ago might not today.

>Several things are going on. First, there's Moore's law. Computers are getting faster, better networked, and more plentiful... Cryptographic algorithms are all vulnerable to brute force--trying every possible encryption key, systematically searching for hash-function collisions, factoring the large composite number, and so forth--and brute force gets easier with time. A 56-bit key was long enough in the mid-1970s; today that can be pitifully small. In 1977, Martin Gardner wrote that 129-digit numbers would never be factored; in 1994, one was.

>Aside from brute force, cryptographic algorithms can be attacked with more subtle (and more powerful) techniques. In the early 1990s, the academic community discovered differential and linear cryptanalysis, and many symmetric encryption algorithms were broken. Similarly, the factoring community discovered the number-field sieve, which affected the security of public-key cryptosystems.

https://www.schneier.com/essays/archives/1998/05/the_crypto_...

The ironic thing is this article also said "I recommend SHA-1"... SHA-1 was broken 7 years later.
Different experiences. I put myself through school, have $50k in student loan debt, and I'm living comfortably on $54k/yr in New Jersey. Renting a small house, and sending around 15-20% of my income to help support my mother and 5 young siblings. I eat out a few times a month, and otherwise have a modest entertainment budget. I'm only able to set aside a very small amount, if anything, right now, but overall, I'm fairly secure. Without a requirement to live in an expensive area, I don't see why anyone would have trouble living on $100k/yr even with a couple kids and a non-working spouse. May not be luxurious, but should at least be comfortable.

I often wonder if it's just people who have a different concept of what is a necessity vs a luxury due to never having to go without for a significant part of their lives, or people who have just never lived outside of the cities or other expensive areas.
What was your outcome and/or your personal experience
TLDR: it was because Disqus added the Facebook SDK in the last week or so, for some new feature they're testing. They're looking into this.

^ That sounds legit to me... I believe this was the primary reason why Facebook made an SDK and Like button in the first place...for data mining. Pretty clever.

This is the consequence of building on a platform like FB, you exchange your visitors browsing habit data for access and FB expands their graphs of IP<>websites to improve their ad targeting. And with Disqus is won't be as obvious because the publisher might not be aware that it leads to an FB connection.

So regardless if it was unintentional this is a relevant story for the trade offs of using platforms.
I don't know if you are joking or not.

But HN has a liberal bias if anything; however I do believe that most people are a bit disappointed with this report. Maybe having hoped that it would clearly provide evidence that the big email collections WikiLeaks had from the democrats were provided by Russian state actors.

Instead we get half a report on RT which anyone could have written.
I remember it. They used to announce demonstration schedules. And the line from the Foreign Office was "BBC is independent". What a crock of shit. And the New York Times was calling the Ayatollah Khomeini a "saint". (Let that sink in.)

https://sadbastards.wordpress.com/2013/08/08/khomeini-was-pr...

RT is clearly a propaganda organ and Russians are old hands at propaganda. That much is clear. But the germinal issue, the elephant in the room, is that corporate media in our nation serves such a thin gruel of "news" that outfits like RT or (earlier) Al-Jazeera gain a foothold and establish "credibility" simply by publishing what our media refuses to cover. Didn't they get the memo that we have thing called the internet these days and other sources are a click away?

The biggest nugget in this report, imo, is that NSA is not so hot about this assessment. Which reminds me, did the former CIA employee cum whistle blower dish out CIA's dirty secrets as well or did he just dump on the NSA?
I appreciate your wanting to make tech more inclusive, but I am a woman, and I don't need to be protected from comments that reference sex.
Does anyone know if the FTC is backdooring a federal warranty carve out here for software with respect to security? Generally devices that come with software have specific disclaimers of all warranties for fitness and damages (either direct or incidental). And California has held such exclusions to be allowed[1]. So if the FTC prevails and D-Link is held to be liable for their software flaws, would that then create a place where consumers could sue software producers when their software broke even though there are specific exclusions in the TOS and EULA?

[1] http://wmblaw.blogspot.com/2013/05/are-contractual-exclusion...
> Is there a list of major B2B and eCommerce sites using LE for their primary customer facing sites? This would be useful if our customers brought it up.

W3Techs[1] is generally a good source for this kind of information. Themeforest seems to be using them, for example. (Certificates issued by Let's Encrypt are counted under the IdenTrust root on W3Tech, since that's the CA that cross-signed Let's Encrypt.) Generally speaking, they get used on low-traffic sites (compared to the other major CAs), but that's not really surprising.

[1]: https://w3techs.com/technologies/details/sc-identrust/all/al...
240V, What we usually do here is run wires to a light point and fan out from there (the light fixture has a small box above it), small rooms can be grouped together by connecting the two boxes. Heavy appliance sockets get separate circuits, and kitchens usually have most circuits.
So parallel mostly.
See but I think that's great stuff to consider. If we can't actually make things that are both cost-effective and safe to the public, I'd say those things should not be made and sold to the public.

Maybe it slows down the progress of the industry, but if that progress comes at a price all of us are paying (through the currently-unaddressed externality of shitty code enabling DDOSes around the world), I think that is progress that should be slowed down.

I certainly don't want to wake up one day and find that my employer's sites are gone, and their business (and my livelihood, and my home and family's security) threatened because rando manufacturer X's IoT cameras have taken out a data center for lulz. So..regulate? Bring it on.
Installation was surprisingly easy.

And performance was surprisingly good. `find /Applications` results in...

- Unrecoverably crashing Hyper
- 1:28 iTerm2
- 0:32 Terminal
- 0:20 Alacritty

Very impressive stuff. I'll be keeping an eye on this project.

And performance was surprisingly good; a `find /Applications` on my computer crashes Hyper, takes 1:28 on iTerm2,
that as the case may be, the same argument applies to vim (i use vim, with at least some of its keyboard shortcut glory, and love it); it might be faster in a lot of cases, but at the end of the day editors like sublime, atom, brackets, etc all have a much larger user base because people aren't willing to learn
> Their DNS "client" implementation was a tour the force of NIH wrongs, including screamers like not implementing security functionality that had been commonplace in other implementations for a decade or more.

:(

> Damn it, they have a web server in there for the sole reason of displaying a QR code for the initial log signing key. A signing system that apparently Poettering's brother came up with as a doctorate thesis, with systemd-journald being the only implementation (that i know of).

Okay, that I didn't know.

Actually let me read that backwards...

> log signing key

What on earth? Is the log encrypted?

> QR code

How are QR codes relevant to encryption?

> web server

Why do I need a WEB SERVER to display a QR code?! Uh... I can get displaying a QR code on the screen, sure. But... I get the impression you mean the QR code is served over a web server?

Oh. For headless boxes. But... why display a QR code, again? Why not just serve the log signing key itself? QR codes aren't encryption (just a good week's worth of reading on error-correction).

> BTW, these days you find dbus inside the initramfs. Because systemd need it to be present during bootstrap. After systemd-pid1 is up, it will kill the initramfs version and fire up the one from the HDD instead.

Mmm. Because all of its APIs are delivered as D-Bus (desktop-bus) services. I totally get that, but... aghhh. Why not even ZeroMQ :(

> There are times i wonder if the Fedora maintainers grit their teeth and play along with Poettering and crew because they have the same paymasters.

Unless things have changed, Linus Torvalds uses Fedora. He's had a lot to say about things.

I would be very very surprised if there wasn't a noteworthy bunch of mental-pitchfork-wielders.
Perl6, it finally has a production release and some useful libraries to build real tools.

Very interested to see if it was worth the wait.
I was happy to notice not long ago that apod.nasa.gov is now served over HTTPS with a Let's Encrypt certificate. Even OP link is!
This was on HN in July but has an update based on a comment from Jim Roskind, designer of the QUIC protocol.
If by staying out of our elections you mean stop participating in political speech then I don't see how that is going to happen or why it should happen.
You're right. There must be WMD in Iraq.
Seconded! Jimmy Maher is one of the writers that I'm extremely happy to support with Patreon's "blind" model, where the author gets paid $X for publishing an item regardless of its content.

I don't read everything he writes (recently there was a series about WWI fighter aces that I didn't have the patience for)... Yet I feel it's absolutely proper to pay for anything he chooses to publish. That's the only way an author can have the freedom to pick his topics without having to think about its short-term commercial viability in terms of clicks/shares/donations.
Also, Cathode is a terminal made with OpenGl and it's really fast: https://www.jwz.org/blog/2011/01/cathode-vintage-terminal-em...
It's not a huge surprise to me. Apple's UX and UI stuff has taken such a huge dive in quality. I had hoped someone else would take up the torch but not even Microsoft with Windows 10 is doing good enough IMO. It's weird how usability has taken a back seat to flashy movie style UIs which few can use effectively. Seriously, just give us similar stuff to the finder and the start menu and leave the flashy UI stuff to Hollywood films.
Hyperparameter optimization for Neural Networks
Absolutely. 20kHz, from an electrical engineering perspective, isn't really a wide bandwidth. You might get some fairly strong distortion but almost always it will still work, unless we're talking about something like a piezo.
yeah, it's less "unnecessary", more "provided elsewhere". in this case, he's saying by tmux... which does mean learning a bunch of new keybinds, which is a little upsetting
As an outsider (Australian), it's all the same to me.

The US has one political party: The Right. Meddling in the affairs of other nations, conducting proxy wars, arming the world, crushing the little guy.

That's how the US Government comes across a lot of the time.
If the music was algorithmically generated, what methods were used?
I use it every day, and until reading this thread I didn't even realize it wasn't mechanical...
Lacking an actual war, and admitting that the intrusions were easy to pull off for a trained script kiddy, what can we do to punish the Russian regime for this? Ideally, we could hit only the oligarchs' interests, since dividing them from their general population will be the most strategically effective move when their economy is already taking a hit from low oil/gas prices.
DevOps explained
Reading his comment, his concern isn't with c++ as a language, it's with the tooling and development practices around it. He suggests that because of the generally project specific nature of the tooling and development idioms, generally a higher bar of experience is required to contribute.

I can't argue with him there, and I'm about as much of a C and C++ fan as it's possible to be.
At the bottom there's an email link to get access to all the pitches. Why not remove the friction and just post some links?
> This report is a declassified version of a highly classified assessment; its conclusions are identical to those in the highly classified assessment but this version does not include the full supporting information on key elements of the influence campaign.

The authors addressed your complaint on the final page of the report. Stop confusing this matter by introducing a "burden of proof" fallacy.
Are you using the VimFx or Vimium extension? Disabling it and using spacebar made it work for me.
"All private keys automatically emailed to NSA, CIA, FBI"
Same here. If I could avoid driving to and from the office I would get 2 hours back each day.
It absolutely is uncommon to have that much student loan debt.

http://ticas.org/posd/state-state-data-2015

The average student loan debt is $27,000. Having four times that amount makes you a massive outlier.
You're being intellectually dishonest. You have no way of knowing about correct reports that the intelligence community provides the military on a constant basis.
Is trusting them because we should trust them somehow a superior heuristic than a track record?
> Schroeder

The guy known as Gazprom Gerhardt, who coincidentally decided to phase out nuclear power? Yeah, sad story.
I would automate coffee making. Too many lazy or disrespectful coworkers skipping the making of coffee after taking the last cup.
As the first couple of pages claim, the "real evidence" might not be shared here due to risking exposing methods, as is the usual claim. At this point, given Trump's recent statements against the intelligence community, I think they should say "fuck it" and just publish it already. Trump doesn't seem like he'll be a friend of the intelligence community unless they publish things he likes. To quote Trump, "what do you have to lose?"

Of course, they could not have it and thus just be lying.
I think the problem is that Tim is too focused on cost effectiveness and hasn't learned to reign in Jony and company which seem to not give a flip about UI and software. To them it seems software should "just work" without any effort on quality assurance. Seriously, either Jony needs to step down from being the big boss on the whole visionary stuff or pushed out. I love his hardware design but I really am hating his software decisions and choices.
Oh thank you so much!!! I am right now in dire need of light terminal (read st's equivalent) for macOS, since iTerm2 felt bloated since few years ago and font rendering is kinda meh, and it is slow, and it has many many features I really do not need, and Terminal.app simply doesn't make the cut (no true color support for example). I need speed, true colors, and minimalistic terminal as possible, since I use tmux (tabs and gui not needed) for anything if I need more than one terminal screen. Not sure if this is worth the hassle to set up right now, I might just wait for alpha release. But I am watching this on GitHub and can't wait to try it! (plus it's Rust which almost made me dance in my room)
If the evidence was taken to a US court and put before a judge and jury they would probably have to show them the classified bits too.
I think you meant to say $500k is a decent down payment on a house, yes?
>I never played PA, but I'm pretty confident I would be meh on it.

People like to trash Planetary Annihilation but it's not really deserved. Yes, it doesn't scratch the TA itch as well as one might wish but it's a decent game in its own right.