skysight-inc/HackerNews huggingface dataset:
From everything I've seen, the security requirements of "true" RAE are exactly SPRP - that's certainly how Rogaway has framed it.

To the best of my knowledge, that's why he designed AEZ under the encode-then-encipher paradigm - encode the plaintext with \tau trailing zero bits, then encipher it with (what is intended to be) a length-preserving SPRP.

Being an SPRP, the inverse is also a PRP, and thus any adulteration of the ciphertext results in a pseudorandom decryption, preventing RUP (and causing the trailing zeroes to fail to validate).

Constructing the SPRP then becomes the interesting part - a fascinating construction can be found in https://arxiv.org/abs/1310.4050 (which neither uses a block cipher entire, paying the cost of multiple invocations per block, _nor_ gives up on proofs - instead, it extends Cook's Elastic Cipher construction to arbitrary lengths, using the _round function_ directly, with security reductions to the original cipher the round function was taken from.)
PlanGrid (YC W12) Is Hiring DevOps, Android, Windows, API Engineers and More
Apple are the ones to kill the file name, with iOS.
Reads like this are slowly convincing me not to buy into the world of mortgages and debt and to just live the rest of my life paying for everything in cash. I tried to buy a house last year with my wife but the market exploded where I live and suddenly houses were 40% more expensive from last year.

So we still rent, which makes me feel incomplete. Like I'm kind of failing my duty of bringing the Canadian Dream to my family. But I gotta tell you, seeing 45% of my before tax income going into savings feels amazingly liberating. I stopped calling my savings a "down payment". It's now, "two college funds and 3 years of unemployment."

I feel in total control of my future this way, but I also feel like I'm feeding into the apocalypse paranoia. I won't actually need this unemployment cash will I?
I don't think coming across these problems in general is Haskell specific. We've grown enough to bubble these issues up in this Haskell project, but would have needed to do something much sooner if this was C++.

> make you more comfortable with this stuff

Which stuff are you referring to?
Overall I'd love if all builds were significantly faster, so we contribute to upstream GHC to make it better in the ways we come across. Our platform has a deployment SLA that we strive to maintain as our "target build time".
To be fair, pre-launch development for Cassini was over $1B [0]. There was a massive upfront investment in the mission.

0: https://en.wikipedia.org/wiki/Cassini%E2%80%93Huygens#Object...
> But this is literally a webpage of text. It is more work to get JS involved. Humans using off the shelf browsers aren't the only ones who consume webpages.

Sort of, the contents of the post are in a database somewhere. It's not like someone uploaded a .html page to Blogspot and they converted it into JS. The JS makes it easier for users to customize templates.

The main reason you'd want to avoid doing something like this is that the Googlebot would penalize you, but somehow I doubt Google is concerned with that.

That said, it has a <noscript> version that seems to work fine (I turned off JS and it renders as expected.
Now think about how much in student loans went into creating that sentence.
May it EVER be so...!
> "Bob-4592-daring-weasel-horseradish"

You could easily have a bijective encoding at a frontend proxy that translates between the above and e.g.

> "4592-13f7-de41-203a"

(i.e. discards the descriptive part of the slug, and then reverses the unique words back into their index-positions in the same static 64k-word dictionary used for generation, resulting in a regular UUID.)
Responsibility and the Encryption Debate: A Response to DAG Rosenstein
The one on my MBP 2014 is definitely superior, but I don't mind it. Gets the job done, and I found it precise enough to work on corporate presentations, a place where neurotic detail reigns.
It's the most questionable to me. The ones that are "vaporous", it's obvious to everyone so not many questions need to be asked. But about FileCoin...

How can they compete with economies of scale? And how will they prevent data centers of disks being created (centralizing forces)? If they manage to stay decentralized, how will the very public team defend all the illegal and/or illegitimate content that gets hosted on there? How will they defend against the FBI ordering them to shut it down? Why would people pay more for a slower or less reliable storage solution?

It's very questionable that they were able to make bold claims and get millions of dollars from people who do not have a clue that FileCoin and "distributed storage on the blockchain" is DOA unless you want to store your 3d printed gun designs in the cloud. But in that case, the team building it should've been anonymous...
Doesn't this just mean people will eventually start building artificial social presences to point to instead of simply lacking any sort of presence?
Interactive Bianchi-Pinkall Flat Tori with Three.js
Lack of operator overloading limits the audience of a language to non-numerical applications (e.g. no gamedev).
One Scientist’s Marathon Quest for the Exercise Pill
> You're being playful about this, but I'm legitimately worried about a future where job candidates are rejected purely because they didn't offer their social media identities or passwords.

Demanding a social media identity or password is a great idea if you want to paint a huge target on your back for a discrimination lawsuit.

Said social media account will contain a lot of information about whether or not you are a member of a protected class. Good luck proving that you didn't use it in your hiring decision.
"When you think about Surface Book and you hear there is a new one, it’s more powerful."
I've been following the literature on this topic for a while now, and I've always wished for more examples of actual systems built with these techniques. Are there any? What kind of scales do they deal with? Are there any write-ups on them? (I know of at least one good one[1].)

In particular, I've wondered how a simpler solution to the problems posed in this paper stacks up. At what point does it fail? e.g., Consider:

* An op based model.
* A client-server architecture (not p2p).
* Operations are assigned a total ordering by a central server.
* Given any two dependent operations A and B, A is always
transmitted before B.

This still gives you a lot of the stated advantages of an eventually consistent system, where each client communicating with the server will eventually converge even if they all temporarily diverge. The central server and total ordering is a key ingredient, because it's what lets you guarantee ordering between any two causal operations by having the server "choose" an ordering.

I'm naturally interested in trade offs. For what use cases does the central server model break down? Is it still useful for other things at lesser scales?

[1] - https://medium.com/@raphlinus/towards-a-unified-theory-of-op...
He also ignores opression of peoples, and nations, and family destroyed by invaders in Africa which takes many generations to recover from.

And he has a single view of what makes a nation great, which seems to include enslavement and domination of others, and controlling nature as opposed to coexisting with nature.
2018 Chevrolet Traverse AWD First Test: Adventure Seeker
I just tried it locally in Chrome/Firefox/Safari. Ends up working, no issue.
Prisoners have nothing but time.
Fantastic story. I noticed that he won a scholarship from the Gates Foundation; that's quite some journey, and great to see the difference a chance at redemption may offer.
Oh, I see. I can understand why that would be irritating.
If there's anyone I would be concerned about it's the Ontario premier, but sure go on ahead down to the US where they ostensibly don't build uninspired buildings in their cities or something.
"Fluid simulation" was a bit of a nonsense response to that question, but there are similarities between metaballs and fluid simulations. The kernel functions used to interpolate Smoothed Particle Hydrodynamics samples are basically the same thing as metaball functions. The main difference is that you probably don't need the isosurface during simulation.

On a related note, one of the annoying things about metaballs for fluid surfacing is that there's some spooky action at a distance. Two drops of water will reach out towards each other as they come closer together, which makes no physical sense at all.
It's not just metaprogramming, it's a lack of standard types (like sets) paired with a lack of parametric polymorphism cough yeah, generics cough that makes writing some data structure manipulations feel sort of counter-productive.

Go makes up for this by making other stuff being easy and fast to code.
Speeding up social science 10-fold and how to do research that’s actually useful
I don't know how to say this without seeming rude, but you just don't get people. I fully agree with your logic. But you are emotionally illiterate, and people are emotional animals. If you don't make the effort to connect with people on an emotional level most of them will not listen to your rational arguments.

I absolutely feel your frustration. I share your basic outlook. But most people don't. You're not smarter, you're just not as easy to activate emotionally as they are. That's why advertising and propaganda in general doesn't consist of long earnest rational arguments of the sort found in academic journals. It consists of atavistic emotional manipulation because that is what works most reliably.

Has anyone ever handed you a political flyer that consisted of a wall of text that you glanced at but didn't bother to read because you just couldn't be bothered to navigate >1000 words of half-baked political theory that didn't really speak to you as an individual? Well that's how your arguments come across to most regular folk.

Being right is not important if you can't get people to pay attention. Citing comparative statistics is a wonderful way to get people to ignore you.
Happy to answer any questions you have about the company.
Yeah, I mean, what is he suggesting as an alternative for passwords for something like a small/medium ecommerce site?

You can have a guest checkout so they don't need to have an account, but some people want them.
You don't use an ad blocker?
Privacy on the blockchain
You appear to be assuming they didn't see it coming or know it was happening.
Maybe this is a little churlish, but while I agree that we should say that a person that finishes out his prison sentence should be considered to have paid his debt and from then forward be on an equal footing, I think that should be equal footing. We shouldn't let our cultural love affairs with redemption narratives sway our judgments to the point where we are treating someone better for having gone to prison.

It is really really hard to become a law professor. Not only are there a huge group of lawyers that would love to become law professors, but because of the difficulty in getting social science appointments and because law professorships pay significantly better than social science appointments, there's now a huge group of Phds also vying for these spots.

Shon Hopewood went to the University of Washington law school. He may well have been the only tenure track hire that graduated from that law school in ten years. Not that its a bad school, but law and especially the law professoriat is incredibly credentialist. Yes, he got a good Court of Appeals clerkship, but I'd bet there's members of the Elect (those that had SCOTUS clerkships) on the market that didn't get tenure track offers this year, much less offers at Georgetown. Maybe you'd say, well he's going to be great in the classroom -- students will get an entirely unique perspective. I'm sure that's true, but law schools don't hire tenure track professors because they'll be good in the classroom. At best that might be a partial factor in hiring adjuncts (the primary factor being willingness to take the starvation wages they pay adjuncts).

All of which I mention just to show that this really does look like putting a finger on the scale. I grew up in this society, I'm not immune to the pull of a redemption narrative. It does speak to me, but I think when we step back and think about it we really shouldn't be favoring people that did things like commit armed robbery over those that didn't. Even if they paid their debt. Equal footing, sure, but not better.
What's the status of recursive nix / people's thinking about recursive nix?
I'm happy that Python's metaprogramming came in handy for you and your team, but Python's propensity for DSLs is one of the reasons I loathe it so much. I guess in the context of data science, a DSL makes sense, but it's a nightmare to debug.
Thank you for the insights on Go and how Go has added value to your
organizations and enabled a better environment for development at your
organization! I love hearing viewpoints on tradeoffs and general evaluations on
value of new(ish) development technologies.

I'd also like to point out that I write this a Python-phile that has come to the
understanding that Python is great until it isn't. When Python becomes to
burdensome, the understanding of the problem delivered by my Python sketch
helps to narrow the focus of what I need to solve the problem efficiently. By
that time, Go has never been the correct tool for me. I'm comfortable writing
solutions in C, Rust and Java, perhaps this is my problem.

Whenever I read or write Go I don't understand how it managed to capture the
mindshare that is has. Especially in the face of other technologies available,
Go seems like a timid step forward in descriptions of computation, when there
are bolder choices that deliver valuable additions to my development ecosystem.

I appreciate that Go places a premium price on simplicity, however with
languages like Rust make some big steps towards static guarantees at compile
time the guarantees that Go makes seem pretty weak. But I feel that when I make
the leap from Python to Go, I admittedly don't understand the allure. Static
compiltion is really nice! Statically linked binaries for distribution is very
nice! The tooling is out of this world! Hands down, Go has one of the best out
of the box toolchains I've ever encountered. But when helping me think about
computation, Go doesn't.

Go's concurrency primitives don't feel like a great deal of a step forward
compared to C. I know, I know, this is crazy talk. I feel like I am missing some
great wisdom about Go, I truly do. Concurrency is really hard and Go has clearly
helped a lot of people minimize concurrency problems. But whenever I use
channels I am reminded Go does not allow me to shut my brain off, and whenever
the deadlock bug strikes, I feel that I might as well be writing C.

I don't mean to disrespect Go and the great things it does, the opposite of
that! I am hoping Go delivers a bulletproof abstraction for concurrency. Until
then I've become too familiar with other tools to justify using Go for more than
incredibly niche use cases. I really hope that will change (both my mindset and Go)!
I think there's some reason they landed on that one, but seriously, if that's your biggest complaint about the language...
Thanks! Will definitely try this. I invested in a vacuum sealer which works OK but is a bit of a pain.

My approach lately is to give away what I can't eat immediately.
Aside from poorly-drafted laws, committing a felony is a good signal to the rest of society, most of whom well never be convicted of a felony, that you are different in a way that makes you more likely to commit a felony worth charging. Your debts are not cleared when you've served your time, you are still a convicted felon even after you're out.
You had me at 4. I'm definitely GOing to give this language a GO now. That was a GOod introduction to the language, a veritable advertisement, if you will.
The life and loves of a ‘tremendous literary rebel’, Michael Madhusudan Dutt
I've posted this before but I've really been pleasantly surprised by how good working in PHP7 is. It's not my favorite but I certainly like it more than Ruby.
So if a murderer shouldn't be incarcerated or pay restitution, then what?
What's wrong with 'some poor person'studying and passing an exam to be a doctor?

Fwiw, I'm still saying we should have residencies.
> I care about performance (ruling out any GC language)

[Citation needed]
I never heard of Nim, something to try out at some point. What's your favorite Nim tutorial?
Can you elaborate, somewhat? How long ago did you try GO? Also, I agree, having a generous assortment of contributed libraries makes all the difference.
I once had a pair of police officers try to tell me that my refusal to let them search the vehicle was grounds for probable cause and would enable them to legally search my vehicle.

I laughed and pointed out that I'm not a teen and am quite familiar with my rights. They were visibly disappointed and told me that I was kicked out of Kansas and that I'd be arrested if I ever went back to Kansas. I giggled again but left and they followed me to the interstate slipway.
Considering the restrictions on felons obtaining a job, a firearm, even voting, I would say this this story definitely represents the exception rather than the rule when it comes to how we treat them.
> I am a big fan of restitution laws where the damages go to the victim, rather than the state.

So people should be able to kill others and just have to pay a fine to the estates/heirs of the victims?
Two large projects that I know of are CockroachDB and Influxdb

A quick glance seems to indicate that cockroachdb takes about 9 minutes [1] and infuxdb about 15 minutes [2]

[1] https://teamcity.cockroachdb.com/viewLog.html?buildId=380603...

[2] https://circleci.com/gh/influxdata/influxdb/tree/master
You should probably shoot the messenger (OP) - for linking a blog post instead of the official launch page.

This is the actual launch page:
https://www.microsoft.com/en-us/surface/devices/surface-book...
ACME is an open protocol. The LE servers are open source. You can run your own ACME server, the same code base as LE if you even wish, and it'll work fine with Caddy and Apache.

And if you think it's too big to fail, I encourage you to start your own ACME-compatible sister CA to Let's Encrypt. And if you're now realizing you don't have the resources to do that, you just answered your own questions (but you can still donate to the EFF or to Let's Encrypt directly: https://letsencrypt.org/donate/)
https://jeremytunnell.com/2015/04/29/a-guide-to-section-1202...
I thought the point of the process was to automate certificate issuance so that HTTPS could be deployed everywhere. I didn't think distributing CAs was part of that, or even desirable.
Building a Voice Experience for People with Type 2 Diabetes
And this is why I don't understand how anyone in the U.S. could be flippant or irreverent about any of the rights afforded to them under the constitution. In America, it is still legally feasible to challenge the existing surveillance programs, which are inherently limited in terms of invasiveness.
Nope. The market is adaptive, though. Every time someone sells on a piece of news that "should" be ignored, it trains the rest of the market to "buy the dip".
Happy to go into more detail about our profile via email:
reinhoceros at gmail.com or let me know how to get in contact.
What happens in your scenario if operation B arrives hours later? It's hard to provide reliable ordering in practice because networks aren't dependable and things that happened earlier may show up later.

I work on a realtime database and we heavily rely on CRDTs for communication. We can't have a central server because our goals are fault tolerance and high throughout.

If you're more curious about the subject look into Riak. Afaik that is the biggest project built with CRDTs
Why is his podium set so low so he has to hunch over it the whole time?
Yeah there are some use cases where Python is a clear winner. For us Python seemed like a good fit initially. Traffic was low and the API didn't provide more advanced features where Python's speed becomes an issue. (Ranking, aggregation)
How the hell do you intend to hide your secondary identities from the NSA and GCHQ? Even Tor is probably compromised.

(Also, creating secondary identities is easy on paper, but IME segregating myself like that and presenting a fake persona takes a psychological toll. Perhaps others are more adept at it.)
For those who don't know, Adrian is both an excellent jazz/acoustic guitarist AND the co-creator of Django :-)
This is the exact topic I've been trying to think on for the past month. Excited to dig through it.
And Boeing raking in $13 billion in government subsidies over the years but denying it receives any subsidies. Bombardier denying they receive subsidies is also stupid. All aircraft manufacturers get piles of government cash even Airbus and Embraer.

https://www.washingtonpost.com/blogs/govbeat/wp/2015/03/17/t...
Bloop: The Loudest Underwater Sound Ever Recorded Has No Scientific Explanation
Really Fun HTML5 Soccer Game – (WebSockets vs. WebRTC?)
Residency is not just a formality. A pre-residency doctor is about as useful as a fresh CS grad who has never seen, or worked on a real codebase in their life.

Except that instead of checking in awful, unmaintainable spaghetti, they'll be making life or death decisions.

I wouldn't let an unsupervised zero-work-experience fresh grad be solely responsible for a product. Doctors make important decisions - without any supervision or 'code review' on a daily basis.
Wealthfront states it more clearly here: https://blog.wealthfront.com/qualified-small-business-stock-...

It’s a major benefit if you have the opportunity to early exercise your shares.
Solution to securely aggregate allegations could make it easier to come forward
I think it is a silly argument in the first place. See, they are additional preventable deaths, and not accidental. Comparing them is pretty silly.

That said, I still don't like reductions in liberties due to fear of terrorism. Freedom is inherently risky. I am not a coward. Giving up liberties out of fear is not necessarily a good idea.
This is awful. In the current UI, my appointment says "Open House". In the new UI, in compact mode, it says "Open". In responsive mode, it says "Op".
Here is a similar one in Python (in the sense of using the same word or identifier multiple times):

x = [[1,2], [3,4], [5,6]]
[x for x in x for x in x]

For more details see:

https://jugad2.blogspot.in/2014/03/flatten-list-of-lists-wit...
It's not really the way most of those people are thinking. If the fact pattern was changed to one with more conservative valence, like an ex-con running an important trucking concern, the roles in the thread would be reversed.
Fight digital distractions, browse with intent
I have the exact same use case and have not been able to find a service that does it. We have a machine learning service that generates some content for each user but the rest of the email is just a standard newsletter.

In the end we just fire it from our web application like a transaction email, this has a few disadvantages though:

- Sending to our list of 100k users takes a good portion of the day, although this could be fixed if we used the bulk send APIs our transnational email provider has.

- Our marketing team can't easily edit the rest of the content in the newsletter so it generally remains pretty static or needs developer time just to send a newsletter.

I'm not really sure how such a service would work though, would the email provider make a webhook call back to your servers with the user id and you server return the content for that section?