skysight-inc/HackerNews huggingface dataset:
I recently worked on a project where I had to choose a hash function for non-cryptographic error checking. I investigated CRC in detail for it, even wrote two different implementations from scratch.

CRC-X is complicated to use and terrible choice.

First of all, it is not a single algorithm, it is a family of algorithms. For a CRC of size N, you have to also choose a N-bit polynomial, N-bit starting value, and N-bit output XOR value. There is no single standard, there are tens or hundreds of popular options [1]. The optimal polynomial depends on both the CRC size, and the length of the data you are feeding into it [2]. If you choose poor parameters, you will get terrible error detection characteristics (like allowing extra 0 bits at the start of data with no change to the checksum). If you choose good parameters, certain classes of common errors like zeroing out a block of more than N bits will still have much worse characteristics than 1 / 2^N random chance of collision.

Second, implementation in standard libraries is patchy. Most programming languages have some CRC32 implementation - but do not document what parameters they use, or use different notation for the same parameters (forward and reverse), or do not let you change the parameters, or do not let you change the CRC size, or all of these. There is no easy way to get a "standard CRC64 or CRC128" compatible across platforms without putting it together from github snippets and example code yourself.

Third, CRC is fast when implemented in hardware, but not that much faster than SHA-1 or SHA-512 in software. It's only 1.5-2.5x faster [3], and when you're doing one checksum per uploaded file or something, it really does not matter. It's going to be even slower when you don't have a suitable-length CRC available in optimised native code, and have to write it yourself in simple C or pure Python.

The obvious and simple solution is to pick a known popular cryptographic hash like (SHA-X) that is available in the standard library of every programming language under the exact same API and no parameters to configure, truncate its output to the digest size you want, and call it a day. No need to worry about error detection performance on specific error cases like long bursts of zeros, and you get some defense against malicious tampering as a free bonus.

[1] https://en.wikipedia.org/wiki/Cyclic_redundancy_check#Standa...

[2] http://repository.cmu.edu/cgi/viewcontent.cgi?article=1672&c...

[3] https://www.cryptopp.com/benchmarks.html
World's oldest images made from pixels in French prehistoric caves
Angular Source Code Tour [pdf]
How is it better?

I'd even prefer it was some random (assuming clean) meat tissue than soy.
I encounter human drivers exceding the speed limit on a daily basis as well. Is that not also failing to follow the rules? At least the robots won't do that.
Get married and have childern. Raising children makes you think of more important issues than big money. You people in CA have really lost it.
While I dont agree with everything this comment or said, I definitely see that most people in the US (because that's where I live) are typically either tellers, paper pushers, execs... Hardly anyone does anything actually meaningful it seems. There is like 3% that seems to be in endeavor fields like science, exploration, invention... But most of what I see is completely meaningless drone work.
Trump, Putin and the New Cold War
An Opinionated React Progressive Web App Repository
There are better cryptographic hash functions (e.g. Blake2) than SHA1 that are even faster. Check out the "results" slide of this slide deck for the cycles per byte table: https://blake2.net/acns/slides.html
The left really is descending into tin-foil hat conspiracy madness.
Chat. In other words: whoever matters is accessible through it. It's an integrated platform for trading that also includes 'social', you can do every bit of your workflow there -- communication, sales, research, trade.
Ποιοι απατούν περισσότερο;Οι άντρες ή οι γυναίκες και γιατί; – Athens Escorts
Why do I hate my friends on Instagram?
Probably not. It's just that CRC128/CRC160/CRC256 primitives are not as common as MD5/SHA1/SHA256.

I did not, from Linus' post, get the impression he believes SHA1 are more magical than CRC except in the "image / second primage" sense.
Every password guessing optimization is about finding logically linked character distributions in passwords.
An intro to numpy
MCQ Questions on Fundamental of HTML and XHTML – InfoTechSite
The acquiring company acquires the target company's assets in return for assuming its liabilities. No cash changes hands.
“It did not really matter what we expected from life, but rather what life expected from us. We needed to stop asking about the meaning of life, and instead to think of ourselves as those who were being questioned by life—daily and hourly. Our answer must consist, not in talk and meditation, but in right action and in right conduct. Life ultimately means taking the responsibility to find the right answer to its problems and to fulfill the tasks which it constantly sets for each individual.”

― Viktor E. Frankl, Man's Search for Meaning
My takeaway from all that - the git project is internally taking steps to mitigate vulnerabilities from this particular attack (making it harder to insert the arbitrary binary data necessary into git metadata), but a) is just throwing up their hands at the problem of projects that store binary blobs like image data in their repos, and b) is not taking this as a signal that more serious sha-1 attacks are on the horizon and they should speed up their hash-replacement efforts.

This latter leads into the problems with Linus' positions in particular. In that thread, does not take seriously the threats that this poses to the broader git userbase, because he only seems to care about the kernel use-case: trusted hosting infrastructure at kernel.org (itself an iffy assumption, given previous hacks and the use of mirrors), and the exclusive storage of human-readable text in the repo which makes binary garbage harder to sneak in. These do not apply to most users of git. His rather extreme public position (paraphrased, "our security doesn't depend on SHA1") is even more troubling - it absolutely does depend on SHA1, this just isn't (yet) a strong enough attack to absolutely screw over the kernel. A stronger collision attack (eg a chosen-prefix as opposed to identical-prefix, or godforbid a pre-image attack) would absolutely invalidate the whole git security model.
"I suspect that his [President Trump] actual knowledge of the issue is extremely limited. If it were not for the massive turmoil that could ensue, I would urge him to skip one of his golfing weekends and come to us and see for himself."
Dropping the stove certainly does simplify things, that's the main benefit. I've tried it but I just couldn't eat cold/raw all the time, especially in cooler weather. I use one of these brass alcohol stoves, it's light and dead simple: http://brasslite.com/
The pedestrian was already engaging on the crosswalk and would have required the car to stop too.
It's depressing to see how our opinions are collectively shaped to further someone's agenda.
Examples of unexpected mathematical images
Try:

$ apt install wallstreet

$ wallstreet

I created that for Ubuntu, as a follow-on to:

$ apt install hollywood

$ hollywood

Purely for fun. Try it!
I used to work for Bloomberg. They bring together countless data feeds, analytical tools, some analysis and news into one central location. They pump a lot of money into these data capturing efforts. They hire hoards of data capturing grunts to trawl the web for renewable energy projects and heavens knows how many more to process financial statements.

I suppose at the end of the day even though they do all this I'm not 100% sure they do it very well. I don't use the terminal or claim to know how, but it seems to have have become an essential tool for many people in the finance industry.

Although after all that I know there is a joke going around that the main reason most people fork out for the terminal is for the chat functionality.
Sorry, I didn't mean for it to sound as if I was speaking for you. What I meant was, if you were actually them, you would be doing the same things they are. Maybe this seems tautological, but I think it's an insight that helps one to be compassionate.

If my current mind were to be downloaded somehow into the other guy's body, would I be a border patrol agent? No! But that weird hybrid person never existed and never will. If I had been born as he did, and had the same brain, and gone through the same experiences (in other words, if I were actually him), I would be doing exactly the same things.

This realization that people are doing the best they can (usually very unskillfully) can help us be compassionate toward them.
"Jill Watson, Round Three" (AI TA)
> I'd argue SHA-3 being efficient in hardware is almost completely irrelevant for 99% of all users of cryptographic software.

I'd argue that for 99% of all users of cryptographic software, the difference in speed between SHA-2 and SHA-3 is irrelevant.

BLAKE2 is a fine hash too :]
Yes, that is something like timeboxing, except they don't have a 1x - 1.5x - 2x thing, just 1x.
Who Is Guy Fieri?
If you were planning on getting a compromised binary blob into a git repository, you would not bother with the whole SHA-1 collision and switching things out later.

You would just build a hidden backdoor into the first binary blob, like a deliberately omitted array bounds check if specific parameters are used. Reviewers and tests won't find that in complied binary code either, it's much easier to hide than large amounts of garbage data, and you even get to keep plausible deniability of it being a honest mistake if discovered.
Any suggestions on how to do this ? Meditation may be ? This is easier said then done.
It doesn't really matter, but I just hate when some old cliche is attributed incorrectly to someone modern as if it was clever.

https://en.wikipedia.org/wiki/Standing_on_the_shoulders_of_g...
> Don't want so many people? Mandate reversible sterilization at birth.

Jesus fucking Christ, let's just round up all that don't have jobs and kill them all it'll go faster.
> The fact that they give the vendor a heads-up at all is a courtesy to the vendor and to their clients.

It is the norm, and it is called responsible disclosure. You're trying to do the less harm, and the less harm is a combination between giving some time to the developers to develop a fix and getting the news out there for customers and customers of customers to be aware of the issue.
Yet almost every weekend somebody is getting shot in Malmø, in one area of the city the police gets rocks thrown at them by organized groups of youth when they show up.
> Yes, you can go really low cost if all you care is theoretical performance / $.

Yes that's a fact, and if you're trying to evaluate a solution based on performance/$ then the comparison is made with regards to this factor, and not others.

> In practice, the cost efficiency of the system should be seen as 1 / (time to solution for typical applications) / (cost of ownership per year).

If you believe that criteria is relevant then you should know that Ryzen's advertised TDP is around 95W while some Opteron 61XX processors have a TDP of 85W.

> Furthermore, the biggest news for me regarding Ryzen is what they're doing with APUs. Affordable APUs with unified memory supporting HBM (stacked memory) could be a game changer.

For 40$ you can buy 4 opterons with 12 cores each. This means that for less than 1000$ you can put together a 48-core system that supports up to 512 GB of RAM. For around 500$, anyone can put together a 24-core system that also supports a couple of GPUs.

Anyone that cares about HPC on a budget knows quite well that used Opterons is where the optimal price/performance ratio can be found, particularly as Opterons already out-perform Xeons in BLAS-based work.
I wonder if compulsory national service in these areas for individuals who don't contribute over x% or $yy.. in personal income tax a year would work?
I recently had some problems with my smart phone losing battery power too fast, so I started putting it in battery saving mode. I would have expected things to get more sluggish, but I actually experienced quite the opposite. In battery saving mode, most transitional animations are disabled, resulting in an (in my opinion) vastly more responsive experience. Since then, I have went out of my way to disable as many animations as possible, and I have not found myself missing any of them yet.
But isn't the real lesson here that X.509 is flawed

I don't think that's the case

And there are signatures that are provably resistant to collisions, shouldn't we move to such signatures?

It's just much simpler to move to a better hash function.
> Dither was developed precisely because naively interpolated or truncated 16-bit audio is audibly inferior to a 24-bit source.

Dither was developed because it's technically better. Audibly inferior though? Perhaps, with utterly exceptional source material (e.g. test tones) and when the output gain is high enough for peaks levels to be uncomfortably loud.

In reality, many recording studios have a higher ambient noise level than the dither, making it redundant in practice — the lower bits are already noise, so audible quantisation artefacts weren't going to happen anyway. That said, dithering is pretty much never worse than not dithering, and almost all tools offer it, so everyone does it.

24 bits is important because it gives the recording engineer ample headroom, and it gives the mixing and mastering engineers confidence that every last significant bit caught by the microphone will survive numerous transformation stages intact. Once the final master is decimated to 16 bits per sample, you know that your 16 bits will be as good as they could have been.
I had a very long post about humility and emergent leadership that I mercifully just lost to an errant keystroke. I won't attempt to duplicate the deathless prose and deep, though humorous anecdotes from my work history that I dredged up as evidence. Lucky you.

Let's just say that the worst leaders I've worked under have had the certainty that they were Leaders, that they were somehow born to it, and that they were surrounded by idiots.

If you think you are surrounded by idiots, get out fast. This will work out well no matter the true situation:

1. If they are idiots, you'll be pushing a rope. You can't save them. Do your best elsewhere. Unless you're an investor, who the heck cares? Just another ship going down.

2. If they aren't idiots, but you only think they are, it will end badly, and it's best ended early.

The only way that a King of the Idiots gig ends well for you is when they pay you a pile of money to leave because they can't fire you because of bad press or something, and most people won't even be in a room with people who are at that level.
OMG It's Happen in Qatar Only.Amazing at the Ending
It's similar to the 'build vs maintain' debate we have in software. The article is about how great it was to build this up, but it's going to be someone else doing the hard work of maintaining the 'debt'.
are you honestly suggesting that a large part of the population can be trained to become research mathematicians?
The line between microdosing and tripping balls is thinner than many people realize.
Exactly. People are talking that there is no jobs like if everyone in the world have a roof on their heads, have enough food to eat, have good education and so on and so forth. Just those basic things are a huge amount of human activities.

The problem is not no jobs, the problem is political will and priorities. Right now most of the wealth created by all humans goes to a tiny minority that has different priorities than the rest of humanity.
Data does not lie. So many people remain uneducated and their health is seriously affected because, it seems, the government doesn't really care. For anyone that cares to give it a read, I wrote about living a lifestyle on the ketosis diet, and it involves me going from 260 pounds to 178 pounds. I wrote this guide to help those struggling to lose weight like I did for so many years. Once you figure out the puzzle and are able to solve it, than the knowledge is best shared. Unfortunately, it is always up to the individual and their choice of what they eat.

https://mypost.io/post/no-bullshit-diet
Undoubtedly. Such obvious delusions are commonplace and don't necessarily correlate to one's scientific literacy or electrical engineering skills.

Such audible differences constitute a testable claim. So far, the number of claims that have withstood reasonable test conditions is zero.
Nothing happens if you don't make it happen. It's that simple, but this also means that you can't use the easy indicators for feedback. Everyone is waiting on the social approval, they got hired into a designed role that coddles and limits them, and so did you. That's why they and perhaps you look "dumb".

Go seek out a good conversation. About anything. What you should be doing now is finding ways to dream bigger.
You don’t need a Product Manager
Citation needed.

http://venturebeat.com/2014/04/25/why-google-doesnt-care-abo...
You are looking at this from a computer engineer's point of view (perhaps). However if you look at it from the world of finance, access to a data broker with up to date(seconds) information where you can also chat with major bank traders and hedge funds the package is very complete.

Data brokers. Not a regular thing in comp.sci, but very much so in the world of finance.
What makes a person like Steve Mercer, being extremely well educated and highly successful take part in such dubious procedures? Will a personal experience drive one into being involved in Breitbart and such or is clinical financial calculation fueling such decisions?
Always loading the intermediate certificate trades one privacy problem for another.

From https://bugzilla.mozilla.org/show_bug.cgi?id=1334485#c11 :

Another approach to this problem is to do AIA chasing (that is, fetch the URI in each certificate to attempt to find an issuer). Firefox currently does not do this for performance and privacy reasons. Doing each fetch is slow (you would probably want a cache anyway, and so would still be vulnerable to this attack). Also, a CA (or even an untrusted party, since you can't verify the trustworthiness of the AIA field until after you've already fetched data from it) can use this to track users.
> the good looking object could be committed

In source code there will be an obvious block of "hash was attacked here" crud in each file. The 'good looking' object will function non-maliciously, but it will be obvious that something is up.

> I'm still not sure if "never" is a rounding error, hyperbole (which would be ill advised talking to laymen), or actual fact (that source files due to the reduced entropy in byte patterns could in fact never ever collide, which I doubt)

"never" is to be read as "over a billion times more unlikely than all life on the planet suddenly being wiped out". It's not going to happen accidentally.
"BMAP is the coolest.

Pulls up a global map with "near-realtime" locations of cargo ships, offshore oil derricks and wind farms, tropical depressions and hurricanes, uranium mines, all kinds of crazy stuff.

You can zoom in on the Panama Canal and see which oil tankers under whose flag are waiting in line to pass through, where they're going and how much oil they're carrying.

You can sort the world's ocean-going cargo vessels by commodity, to see where all the orange juice is."

https://www.quora.com/What-are-the-coolest-functions-on-Bloo...
If you know you're going to have to experiment a lot on some aspect of the game/product, it seems to make sense to isolate that part, removing the commonalities into some kind of framework (perhaps informal, jury-rigged, so you can iterate on just that aspect.

A bit like the Wright brothers building a wind tunnel, so they could experiment quickly with control systems.

But Id wrote some great games, so maybe I'm missing how they handled this aspect...
Could you expand on this comment and/or provide links to relevant reading?

Much appreciated!
It's clear that Facebook and its ilk are becoming the gatekeepers to elections and social movements. China must have foreseen this long ago when it blocked them. The means are now in place to steer the governments of the democratic world in the directions preferred by those able to pay Facebook. As an increasingly political group of corporations, perhaps these new social gatekeepers will one day like to do a bit of steering towards their own goals. After all, cybernetics is the art of steering.
We already knew that. Anyone who voted for Obama, Clinton, Trump or Bush knows that they did it because they were influenced by the expensive campaigns that existed to further their and their parties' agendas. Everyone also knows that those campaigns were paid for by people who did it to further their own agendas.
It's a lie to whom? And on what basis?

I'm seriously starting to think this was a troll post. Here's why:

- Entropy increases with time (body and muscle decay, etc)

- Yet you clearly stated you are getting better each day OBJECTIVELY (lift weights, football, earning money, etc)
And by the way... there is only the current day. Everything else is an idea/memory/abstraction

- Then you say it is a lie that you are not motivated. Utter bullshit. The lie you are living is the idea that you would be lying by allowing yourself to be happy.

Feelings and thoughts do not matter, behavior does.

You clearly pointed out you have no big Mission or goals. You have your answer right there. Make an arbitrary decision to make your family, friends and community better in a massive way. DONE.

The difference between happy people and unhappy people... is that happy people just decide to tell themselves they are happy.
Tl;dr Allahu Akbar is the Muslim Hallelujah and is used in just as many different contexts
More widespread use of adblockers would have stopped this.
Have your opinions been shaped to further someone's agenda or is it only those of others?
Suggest: Basic to Advanced Python Tutorial/video Series
I am a big fan of "You don't know JS" by Kyle Simpson and his Video series - "Advanced Javascript". It was really one of the right ways of learning javascript. Surely opened up my mind when it comes to the way I had to think before programming JS.
Please can someone suggest good tutorials for Python? I have gone through few on Pluralsight already(don't want to mention the author/s) but, they don't seem to be as good as how Kyle teaches.
Share your thoughts and links.
Asylum seekers are now 2-3% is Swedens population. If the US did the same thing that would mean 10 million people. (Israel, next door, has taken in zero)

The people coming in now are completely different from Balkan refugees, Persians and Lebanese. In the case of the Balkan refugees, they were European. And the Persians were fleeing from an Islamic theocracy - they didn't share their values. Ironically, it was a women of Christian Lebanese descent who was murdered by these new arrivals:
https://en.m.wikipedia.org/wiki/Killing_of_Alexandra_Mezher

Bildt mentions Spotify and Minecraft, but the new arrivals are making a different use of modern technology: http://www.independent.co.uk/news/world/sweden-facebook-gang...

Carl Bildt has his head in the sand. Look at these most-wanted pictures from Sweden and Denmark:
https://www.interpol.int/notice/search/wanted/(RequestingCou...

https://www.interpol.int/notice/search/wanted/(RequestingCou...

Try not to notice any patterns, since that would be crimethink.