skysight-inc/HackerNews huggingface dataset:
I believe the parent of your post is referring to offers from both companies when he was a new grad. Inclusive of both offers.
To put things into perspective, let the Bitcoin network hashrate (double SHA256 per second) = B and the number of SHA1 hashes calculated in shattered = G.

B = 3,116,899,000,000,000,000

G = 9,223,372,036,854,775,808

Every three seconds the Bitcoin mining network brute-forces the same amount of hashes as Google did to perform this attack. Of course, the brute-force approach will always take longer than a strategic approach; this comment is only meant to put into perspective the sheer number of hashes calculated.
Does the link redirect anyone else to another article entirely?
I don't understand the use of the 1st amendment in this case, which is about free speech, but Amazon is trying to avoid giving data to the gov which would fall under the 4th and 5th amendments. Does anyone understand their reasoning for this approach?

I would also like to add, And I said the same thing about Apple, this feels like public relations via the courtroom more than a genuine desire to protect data from the gov. Don't forget Jeff Bezos's CIA connections!
Getting them from RAM instead of the screen doesn't give you an advantage on (for example) DI or ledge teching?
Fair point and spoils my enjoyment of the parent poster's provocativeness.
Show HN: Random Donald Trump gifs and quotes service for web and Slack
Top 5 Knowledge Management Software for Startups
As a technical manager, this actually isn't that far from what happens with teams of engineers. The less precise I am in describing the requirements of a system, the less correct solution is produced. This isn't to say that my team is incompetent or mindless -- far from it, I find them to be some of the most talented engineers I've had the pleasure of working with.

Perhaps the solution to this particular problem is a clear specification of the requirements of the problem -- very similar to how corps define requirements documents for what their product does/behaves like?
Sigh. I do. Why? No IT department would allow us to use Linux, since they didn't understand it.

This is across three separate startups and companies. It's infuriating.
I have no problem with the vast majority of other people. I have problems with some small minorities (based on behaviour, cleanliness, etc), and not being able to select who I share my ride with is the problem. The future mobility is either fancy name for taxis, without a driver who makes sure the car is clean, and works at a low utilization (1-2 people per car) as current cars, or small buses where I cannot choose who I travel with, which doesn't fit for everybody. So my point is: no big revolution is comin up, only incremental evolution.
We'll see if his arrogance allows him to actually utilize advice. He's good at being a reality show personality and getting people to trust him, but otherwise he's a know-nothing.
>That is very convenient, since it's easy to detect when people are communicating on a secure channel.

This is a fairly complicated question. Disk/file encryption is not easy to detect without access to the disk , however I won't discuss that here because you only addressed communication.

Generally when policy people talk about encryption they mean technologies which protect confidentiality, but not technologies which protect authentication e.g. signature algorithms, MACs, etc. Authentication technologies often contain random fields such as nonces this provides a very obvious location to store encrypted data in a message. Given that ciphertexts should be indistinguishable from randomness, an attacker should not be able to tell that a random field is not random without the key. There are already tools which hide ciphertexts in nonce fields.

Compression also provides a useful place to hide ciphertexts since it looks random as well.

Most criminals will not go to the lengths above. Most people including most criminals prefer convenience over security. That being said, if communication security is important to a crime (and it usually isn't), and the criminals are competent at INFOSEC (they usually aren't) they can and will use encryption which is not easily detectable (spies can and will use hard to detect encryption even if encryption is illegal).

We are moving toward a society in which almost anything done in public is recorded and analyzed via video, RFID/cell tower access patterns/social media/license plate readers. Police have never had more tools to investigate crime and never had more evidence to convict people. If LEOs so wished and had the resources to handle the caseload and arrests they could get ~90% clearance for jaywalking.
My bad! I scrolled too far reading the article and the URL changes automatically -
https://www.forbes.com/sites/jaymcgregor/2017/02/20/reddit-i...
I hope bunch of people quit after shit like this and memes of "toxic workplace", so I can have a good chance to land a gig at uber.
I have to believe that most people can make $100 in much easier ways than running most of a marathon
It was before my time, but ALGOL used ":=" long before BASIC existed. The point is that academics have repeatedly not used "=" for assignment for successive new languages over many decades. Clearly they care, even if you do not.
maybe adding voice to vim commands would achieve the same thing.

but who'd want to be in the same office as someone talking to a computer all day.
I carried oatmeal, brown sugar and cooking oil.

You make a porridge with oats, add few table spoons of sugar and so much oil that it looks more like soup than porridge.

100 ml oil contains 900 kcal. You can go all day with 3-4 oatmeals
It sounds like you want to have your cake and eat it too. I believe our right to free speech is the most important thing we have. However, if someone reads a post they don't like why should they HAVE to hire you?

As an employer if I read something that genuinely offended me (I have no idea if that's even possible) I wouldn't hire them. I hire people I think are going to make the team better and that I think we would want to work with.

So, yeah, if that hot take you wrote on the internet was a tad incendiary, why is it bad that people passed on you?

I'd like to think that I'm evolved enough that I could disagree with someone's opinion and work just fine with them- but if what they said struck a chord, I can't say that I wouldn't pass on them.

At the end of the day your freedom keeps you out of jail and my freedom gives me the ability to say no thanks. What you say in the public square isn't consequence free.
> It also contains opening hours, addresses, etc., which is all in OSM. I don't understand why people always try to start anew when the data is right there.

It's a while since I played with OSM data for my own prototype, but I found most of the entries were 3 or 4 years out of date, and didn't include anything except a name and GPS co-ordinates. Some didn't even include a name. There was only one entry in my city with opening hours, and that entry didn't differentiate between days of the week. Some entries contained typos, and there was no consistency with naming of chains (eg one person calls it Dome, another Dome Coffee, another The Dome, and another Dome Coffee Fremantle).

In short, OSM was a really bad dataset (at that time) and I found it better to start from scratch.
Ahem Orwell's 1984. It's a book.
Twitter's not so bad. It is civically important. Revolutions grow because of Twitter. Opposing armies tweet menacingly at each other. And for better or worse, it is the current US President's primary mouthpiece.
Ah, yes. Forgot all about time dilation effects. In my defense, it was a pretty off the cuff response. Also, I would assume they aren't meant to be literally traveling at exactly light speed, but I don't know the relevant equations to figure out how that impacts my comment. Clearly, in this area, I'm a dilettante at best.
Depending on who you talk to, OSM means 2 different things:

- For people involved or passionate in the project, OSM is the database. All information is stored there and is available for consumption

- For people outside of the project, OSM is the website displaying the rendered map. As with all rendering, some information is lost, some is put in front.

If you want this information, you can use the overpass API (https://wiki.openstreetmap.org/wiki/Overpass_API); at higher volumes you may want to get extracts of the db and query it directly, or use a custom renderer to have your own beautiful map with the data you want. Unfortunately there is no way to make the OSM website display specific information on a case-by-case basis.
You could just do this with a video you release anyways, and skip the century of GPU runtime.

This break requires you control/generate both the original and the evil file.
it is only pieces. pieces can potentially span multiple files.
Hmmm.

Software Engineering has Continuous Integration, since it is so expensive to fix software later in the day.

Is there any such thing as Continuous Reproducibility?

Constantly checking that the science can be reproduced?

How prevalent is this in different branches of Science?
Are you serious?? That's the only reason I am where I am. Was just about to reach that benefit :(
5 (Or So) Best Online Resources for Embedded Firmware
Thanks. There's definitely a ton of advice in there. Also, check out the link at the end where I collected related case studies! You can find some really good stuff in those as well.
To be complete, it should be pointed out that the signature techniques you mention are signing not the document itself but a hash of the document. This attack does allow a bait and switch attack on cryptographically signed documents that utilize SHA-1 as the hash.
https://www.tacnetsol.com/blogs/news/5-best-online-resources...
Democracy in this country was tainted from the start, most of the population were excluded from participation (women & non-whites), so the idea that it suddenly became corrupted is nonsense. The corruption got even worse as those with money and power resisted the others gaining rights to protect themselves from the people with money and power.
Why do I feel like this is the litmus test for someone to see if they want to save Flickr?
While the vast majority of participants in races are doing it for fun/exercise, there are a handful of sub-elite runners at most races who are in it for more competitive reasons.

It could be prize money, but that is usually small. There are other types of compensation though. Being a member of a race team, receiving free or discounted gear, free entries to races, and some level of celebrity within the running community.

It's fun and rewarding, and a ton of hard work.

I suspect that a significant portion of her world is now rocked. In order to run those times, she is running every day and probably participating in group workouts, etc. A significant part of her social network is likely tied to her success as a runner, even though it is not her primary job.

I can only imagine how difficult this must be, which makes her decision to cheat so baffling.
Why? If I choose to cheat on a test to pass a class and avoid studying it's a poor decision (from a risk vs reward perspective) and also a dishonest one (from a societal perspective). Many dishonest choices are poor ones.

I guess you're arguing that poor implies bad judgement which is a lesser crime than dishonesty? But actually in some cases I'd rather have the latter than the former.
SHA1 is now dead
But you can't control the data in the malware. It will be garbage.
DeviantArt has always been a nice community. I find it surprising that the price is so low given that they add a lot of value.
Understanding the Go Programming Language and Release 1.8 Features
Good incentive. I don't think this is gonna work though. If trump supporters will actually want to have a conversation and listen to trump opponents, they wouldn't have supported Trump in the first place. So many blatant lies , they have to know some of these are lies, and they still choose to believe it and ignore all the facts. They voted because of their emotions and frustrations (and biases) . No amount of rational thinking /facts/ truths are going to matter.
Hate the gym? History explains why the treadmill can feel like torture
iPython Notebook Tutorial on Using Pandas
Way for a startup offering alternative / unattached peer reviewing maybe?
Same here; Grab worked fine in Kuala Lumpur (back then MyTeksi), with the added benefit of requiring the driver to use the meter.

It worked ok in a very touristic part of Thailand (Patong & Phuket City), with a lot of scammers (asking 700 THB for a ride that should be around 300).
>The reproducibility difficulties are not about fraud, according to Dame Ottoline Leyser, director of the Sainsbury Laboratory at the University of Cambridge.
That would be relatively easy to stamp out. Instead, she says: "It's about a culture that promotes impact over substance, flashy findings over the dull, confirmatory work that most of science is about."

Well, maybe I'm too much of a layman, but that doesn't quite seem to add up. Is not calling it fraud about protecting people's egos and saving face?

Or is it like if an accountant completely screwed up all his work and got the numbers wrong, but it was because they were a buffoon- not a fraudster? I guess that would need a different word than fraud.
I believe it was a joke about the book. Like the government being suspicious about knowing facts about the device. :)
For those of us who are totally clueless about the construction of these hash functions, what is the fundamental flaw in SHA-1 that allows this attack? How do newer hash functions avoid it?
And I thought it was all about the Malt Loaf
As with computer monitors, you'll tend to get what you pay for according to a logarithmic scale of price and performance, but the cheapest one will be absolutely amazing by historical standards and not worth having according to some people. The key factor is budget rather than technology.
"Science is facing a "reproducibility crisis" where more than two-thirds of researchers have tried and failed to reproduce another scientist's experiments, research suggests. "

Ironically, it says this as a bad thing, but in an ideal world this would be 100%.

It would be like saying "2/3rds of coders have reviewed their colleague's code and found bugs". Since bugs are basically unavoidable, the fact that 1/3 haven't found any points more in the direction that they're not looking hard enough.

edit: pretty much everyone seems to have taken this the opposite way to how I intended it, but re-reading I can't figure out why that is the case. I'll try to re-phrase:

Science cannot be perfect every time. It's just too complex. This is why you need thorough peer review including reproduction. But if that peer review/reproduction is thorough, then it's going to find problems. When the system is working well, basically everyone will have at some point found a problem in something they are reproducing. This is good because that problem can then be fixed and it will become reproducible or be withdrawn. The current situation is that people don't even look for the problems and no-one can trust results.

edited again to change "peer-reviewed" -> "peer-reviewed including reproduction"
Scaleway New Workload Intensive Cloud Servers Starting at €0.05/hr
> The problem, it turned out, was not with Marcus Munafo's science, but with the way the scientific literature had been "tidied up" to present a much clearer, more robust outcome.

I've seen this time and time again while working in neuroscience and hearing the same from friends that are still in those fields.

Data is often thoroughly massaged, outliers left out of reporting and methods tuned to confirm, rather than falsify certain outcomes. It's very demotivating as a PhD student to see very significant results, but when you perform the same study, you don't find reality to be as black and white as published papers.

On this note, the majority of papers is still about reporting significant results, leading to several labs chasing dead ends, as none of them can publish "negative" results.
As a non-lawyer and not legally trained it seems like 1st amendment has nothing to do with this but 4th and 5th has everything. This is scary. It means the 4th and 5th amendment has no power with these devices?
Using rkt stage1 images to test code against various Linux kernel versions
20% seems insanely high to me - do you have a source for this? First google hit for me returned this [1], which puts the number between 1% and 2% of GDP

[1]https://www.bloomberg.com/news/articles/2014-03-03/advertisi...
imho the headline should be the other way around:

> Most scientific studies cannot be replicated by peers

.. which is more to the point.
Yesterday, coincidentally, there was a surprisingly silly and heated discussion in a large Facebook group about whether a person who specializes in Wix can be considered a "web developer." (https://www.facebook.com/groups/hackathonhackers/permalink/1...)

Hacker News is biased toward DIYing websites from scratch, but WYSIWYG builders like WIx are very important for those who aren't tech-savvy. DeviantArt, in a world where designers must build their own overly-elaborate portfolios with JavaScript and CSS shenanigans to stand out, serves as a good compliment.
Interesting premise, some objections:

1) wouldn't search time be proportional to file size for hashes? These guys worked on 400kb pdf's, while most popular torrent content is in the GB range

2) Wouldn't this only work for users that got the entire file from you? fileA and fileB may have the same hash, but some random portions from each will have a different hash.
Digital Ocean ssh key authentication security risk
Impact of the BBC’s relocation on creative industries in Manchester and London [pdf]
The whole point of an experiment is to isolate a single variable so you can test a falsifiable statement about it.

It's the exact opposite of building a system, which is what coders do.
the deal will increase its revenue outlook by around $8 million

So around a 4.5x revenue multiple, which doesn't seem bad for a business that isn't growing rapidly(?)
It gets even worse as if you produce a follow-up paper for an improvement, you're generally expected to produce something better. If the original result doesn't hold up, the only alternative is more even fraud, I mean, data massaging.
Not sure what you mean by that
One might reasonably describe the 4kB granularity of virtual memory as bookkeeping overhead, although it's probably not what people would usually think of if they heard that.
It's more like all the competitors in a market lowering their safety standards to cut costs. If buyers can't accurately assess value then it turn into a bad situation for everyone.

Anyone trying to do the right thing goes out of business and someone cutting corners get's their business.

So a tragedy of the commons style "collective action" problem.
My thought exactly, although you would need your malware to incubate for some time to allow it to spread properly first.
From 2001-2007 I worked on helping build the community at dA. Had such an interesting and unique childhood and teenage years due to deviantART (and IRC). I owe everyone from that time a huge thank you for helping me become who I am today. It lost all it's magic (for me) when Scott and Eric Kolb left. Angelo is an absolutely amazing guy and I really really admire him but it was pretty sad to watch the community die. FYI, Chris Bolt the dude who built a lot of the tech there is INCREDIBLY and if you can figure out how to hire him, hire him - afaik he hasn't worked anywhere else in the last 17 years.
Alphabet Has a New Tool to Weed Out 'Toxic' Online Comments – Fortune.com
Thanks I wanted to ask the same as a non-American. If this is protected then surely so is internet history, call metadata etc.?
I don't think that analogy is at all accurate and I think the conclusion that you reach from it is completely incorrect.
Having moved in Deviant Art circles (some time ago, admittedly) I'd say one reason for the low price might be that, somewhat like Reddit, the core values of the community make it challenging to monetize.
An Intro and Primer to Blockchain
Never forget: when Facebook, Twitter, and Cloudflare tried to slow-down SHA-1 deprecation:

https://www.facebook.com/notes/alex-stamos/the-sha-1-sunset/...

https://blog.twitter.com/2015/sunsetting-sha-1

https://blog.cloudflare.com/sha-1-deprecation-no-browser-lef...

I think Microsoft tried to do it too early on, but eventually agreed to a more aggressive timeline.
Wanderers is indeed excellent.

See also: the timelapse footage of the sky from the VLT, Paranal. Just thinking about it gives me vertigo.

https://www.youtube.com/watch?v=wFpeM3fxJoQ
I respectfully disagree. The parent comment was insinuating this was about bots or robots, which it really isn't. Chat-like interface aside, Alexa is no more a "robot" than Gmail or the Amazon.com homepage: It's just an interface to a company's web service.

And while I added a (sigh) which indicates some disapproval for the Citizens United decision, my comment wasn't meant to start a conversation of the merits of that decision, but simply indicate that this was effectively a corporate personhood case. If anything, I added the (sigh) because of my concern that I would get downvoted into oblivion by other people who disagree with the Citizens United decision. :/

Please, please don't let HN become Reddit. Don't comment just to tell someone you think their comment is low quality and uninteresting.
It's because there is a huge problem with the scientific publishing business but because people don't want to admit it because it makes science seem "weak" these issues are largely ignored because of other conflicts of (self)interest.

I'm not a scientist in anything but the colloquial term used as description for a curious and interested person, but when I spent time as a sysadmin at a genetics lab I actually had to read papers as part of the job.

I had previously held "science" up on a pedestal, but I quickly learned that bad science abounds even in reputable publications, and is rarely called out (mostly because scientists use publication to further careers largely based on name-on-paper count).

These days, every time I hear some scientist say "I've been published $largenumber of times," I think to myself 1/3 are probably impossible to reproduce, and 1/3 are probably "I developed this field specialized technique so I get a name drop but didn't actually participate in the study."
> I have not been able to find any company hiring graduates ...

Don't search job posts online, you must go where the fish are. Start attending live events, conferences, etc...

In Oslo, try OsloSec> https://www.meetup.com/OsloSec/?scroll=true
I wonder if SHA1 was used instead of SHA256 for Bitcoin mining, how much optimization these SHA1 discoveries would bring to the mining process (since it's more like partial brute forcing rather than finding collisions) i.e. what would be the percentage difference in the difficulty because of them - on the long run, since it takes some time to implement those things as ASICs.
Malware distributed through Google Play with almost 3K bots has been taken down
i'm a bit of a special case here - i'm a night owl, late riser and usually show up quite late (around lunch). also, my commute isn't that long and this way i can circumvent the notorious drop in concentration after 6 hours (which, in my experience, isn't universal).

there are several more downsides to the 5d6h model, but i personally don't care much for those right now and i could switch any time.

most of my friends and colleagues choose the 4d7.5h work week and i think it's the better option for most people.