skysight-inc/HackerNews huggingface dataset:
Unfortunately, Signal is not decentralized or federated (for good reasons[1]). Email is. This is an important feature for those of us who worry about the growing centralization of the web, as well as the very many users who still mainly use email for communication. When you leave a job, you may not keep your email address, but at least you can still communicate with people across organizational boundaries.

Anyway, even if email security cannot be perfect, I agree with the sentiment behind RFC 7435[2] - some protection is better than nothing.

If anything, I feel that they didn't go far enough in this compromise. Most people interact with their email through the provider's webmail client. Autocrypt is fundamentally incompatible with this[3]. This means that it will really not be useful for the majority of users.

1: https://signal.org/blog/the-ecosystem-is-moving/

2: https://tools.ietf.org/html/rfc7435.html

3: https://autocrypt.org/level1.html#requirements-on-mua-e-mail...
You can, but it won't be as pleasant as using something more appropriate. Proofs are a big part of any decent data structures and algorithms course. So you want a language that makes it possible for students to prove things about programs written in it, without hand-waving away large parts of its semantics.
I think your on the money here.

Also, I believe that you need to learn more than one language to full appreciate those concepts.

There is some irony in the fact that i developed my own indepth, initiative understanding of these concepts while learning JS.
> tptacek
> Unpopular but very probably true fact: email can't
practicably be made secure, and people should stop trying. E

Why is this childish stupid comment on top? Ah right he has such high karma point ratio, the troll stays on top and can't be downvoted enough. Comment system broken.
>evaluate candidate interest.

As well as screening for social class/culture/values fit. FAANG companies don't want nonconformist people outside of the kool-aid bubble regardless of their abilities.
> Modern psychiatry has infinitely better cognitive tricks than the moralizing platitudes in motivational essays.

Please name two such tricks.
All this seems like a pretty compelling reason to move to using VMs and type safety to provide process isolation instead of using the hardware, e.g. https://www.destroyallsoftware.com/talks/the-birth-and-death... or Microsoft's Singularity and Midori projects.

It's a shame there's so much inertia behind the current setup of hardware memory management etc that it seems it'll be a long time before anything actually happens here.
First, I'm not sure that's a good metric to measure the success of democracy. Second, Trump lost the popular vote.
What makes one language or another "more appropriate"?
Ok I can give 256K a shot next time.

Actually won't the ISA controllers be even slower? I'm not sure what bus the PATA controllers on this PC are connected to but isn't it connected "natively" so to speak? It might even compete for bandwidth with the sound and network card.
So just a function that returns a closure? It can be a real pain to read code like this if it's overdone -- I really would need to trust somebody to let them go meta at their discretion.
> I meant, in general settings (ie, no special problem structure), that you need full Hessians for Newton’s method. And, regarding conjugate gradient, in (non-DL) settings that I’m used to, that for good results you need preconditioners which are also second order.

Yep, but often sparsity is present or the objective function is reasonably well-behaved. The former can save straight Newton; the latter will make nonlinear CG or quasi-Newton methods converge rapidly. (Quasi-Newton methods build a simple model of the Hessian from gradient and step information, usually using repeated low-rank modifications of a diagonal matrix. There are variants, like L-BFGS, that have an explicit, tunable limit on the number of additional vectors to be stored. This work really well for some reason---usually far better than gradient descent, and almost never more than a small constant factor slower)

> Could you provide a reference to a 10^7 size problem that is being optimized with Newton’s method? I’d be indebted.

Interior-point methods for linear programming form the Hessian of a barrier function at each iteration, then (sparse) Cholesky factorise it, then do a few backsolves to find a search direction. (Special hacks generally go into these "few backsolves" to speed convergence.) This is a damped Newton method. Commercial implementations include CPLEX, Gurobi, and MOSEK; there are a great many less-commercial implementations as well.

Chih-Jen Lin's LIBLINEAR uses a truncated Newton method (solve Hessian*direction=gradient by linear conjugate gradient, stopping early when sufficient accuracy has been obtained to take a step) to create linear classifiers for data.
Well. I tried cxfreeze first, an sit failed on including tkinter properly. And while pyinstaller handled tkinter w/o issues, it failed miserably with scrapy requiring workarounds and many trial and errors.

Anyway, having packaged apps in Javascript (nodejs) , Java and several other languages/tools/frameworks , I find the state of packaging and GUI in Python simply pathetic, it really takes you 20 years back :)
This argument is always a mess. I think a lot of the problem stems from not having a clear definition of what we mean when we say "email". Some of these complaints seem to be about SMTP, some are about client programs, and some are about PGP.

Your individual concerns are all valid, but that doesn't mean they come together to make a compelling argument that email will always be horribly insecure. Heck, you could probably take most of the points in the parent comment, change a few words, and have a pretty solid argument to take back to 2008 and convince everyone that mobile device messaging will never be secure.

There's nothing inherent to the concept of "email" that says we have to use any of these individual flawed components, or that we have to use them together in exactly the same way as we're doing now. For example - What's to stop somebody from taking the Signal code and hacking up support for a mail client that uses Signal with SMTP as the transport?
Thanks for the suggestion. We will look at it.
I'm not saying ADHD doesn't exist or that it's not a genuine disorder. I'm saying that there's a huge no-mans-land between "you're fine" and "woah yeah you clearly have ADHD and we should fix this."
The tools she had on hand were as primitive as it gets no DAW or anything we think of as a sequencer she had to build all this from analog modules and patch cables.
27 Smoke After Effects Video Templates
I'm not. I'm saying there's no clear cutoff, not that it's not a thing.
KHU+ĐÔ+THỊ+SWAN+PARK+|+KHU+ĐÔ+THỊ+SWAN+PARK+NHƠN+TRẠCH+|+DỰ+ÁN+SWAN+PARK
Sorry, I edited my previous comment to clarify what I mean by “more appropriate”.
previous discussion on HN from 2015: https://news.ycombinator.com/item?id=8921320

and a Twitter thread from 2018: https://twitter.com/mkennedy/status/949688651058835456
Rosted
problem is that it is difficult to anticipate; It may look like a simple 'glue the commands together' task, but it may turn out to be more tricky.
> No announced RISC-V silicon is susceptible

Wasn't the BOOM CPU (https://github.com/ucb-bar/riscv-boom) fabricated? It definitely seems vulnerable to Spectre.
>> RISC-V isn't magically immune to spectre for no reason.

Indeed. RISC-V is an ISA and says little about how any given implementation may accelerate branches or load cache lines. It's entirely feasible to create a CPU based on the RISC-V ISA that is vulnerable to these attacks. There are proprietary RISC-V implementations in the wild today that may or may not have such properties, and while these deeply embedded implementations are likely to be simple, in-order non-speculative processors we can't really know.

Recently the RISC-V ISA was found to have an under specified memory model[1] that could manifest as memory ordering problems in more complex (and as yet hypothetical) implementations. This was discovered by Princeton researchers using a formal verification system. Since then RISC-V developers have been working[2] toward correcting this by fully specifying the RISC-V memory model (including two variants with different degrees of rigor.)

To my mind this specific case argues that open design may see real benefits from public scrutiny.

[1] https://www.electronicsweekly.com/open-source-engineering/ri...
[2] https://groups.google.com/a/groups.riscv.org/forum/#!topic/i...
As someone who used to be much like the asker and is now a little more like the answerer, I cannot recommend this answer enough! It is so insightful and well-put.

Treat it as breadcrumbs from someone farther along on the journey of growth and self-discovery.
I've known plenty of developers whose automatic response to `packagemanager install packagename` failing is `sudo packagemanager install packagename`.
You're discounting the value of moral thinking. You can reduce everything to a medical issue, because all human behavior is indeed biologically caused, but you are failing to consider that blame and fault and other moral concepts are exactly the kind of thing the mind is responsive to. Why are you so hostile to those, but so eager to pump people full of drugs, designed and dispensed on the basis of our very poor understanding of the the brain[1].

[1] Which is not to say that there's no place for psychiatric medication, but they should not be the first course of action.
Ask HN: What are some useful scripts you use frequently?
Motivated by a 3 year old question
https://news.ycombinator.com/item?id=8592274
Silicon Valley is developing a 'raw water' obsession
Hmm are you sure? I've read the fractal of bad design many times.

Some issues might be "fixed" but could they fix the actual *fractal of bad design"?

Isn't it still a mix of c-style, java-style, inconcistent, left associative, horribly broken language it always was?

I always thought the bugs were anecdotal backing of the main point: php is badly designed, non programming language for non programmers, who suffer stockholm syndrome from all php abuse...
Just wait until Angular 2 hasn't been cool for a while and you can't find any JS developers who are interested in maintaining your software rather than rewriting it in xyz_latest_fad_framework.
"new tools are continuously created to address the weaknesses of other tools, instead of fixing those weaknesses in those other tools" - FTFY.

> This happens in other languages, just more slowly due to smaller community sizes.

Yeah, my point is that there is a cost for learning learning a new tool; the faster those new tools replace the old ones (instead of someone fixing the old ones), the more you have to pay of that cost.
My point is that "mute" is strictly better than "block", so there's no reason to have "block" in the first place. Even if somebody likes the misfeature of the blockee knowing they're blocked, you can always tweet "I just muted @theannoyingperson", so that @theannoyingperson knows they're muted.
Critical Electrum vulnerability
None of those reasons the life expectancy decreased had anything to do with income inequality. Nobody died from an accident or Alzheimers because rich people got more money. Please don't use this as an excuse for whatever pet issue you want.
What type of consulting do you do? Do you do general custom dev work? Or something more specialized?
They do have a point.

The more the complexity, the harder it is to keep software (or hardware, which for CPUs is defined as software) bug-free.

CISC simply has no place in the networked world, and RISC-V is the best RISC architecture.
Linux-insides: Linux kernel load address randomization
I'm not sure what the right name for this racial slop is, but you can't dump it here.

We've banned this account for repeatedly abusing HN for ideological battle. Please don't create accounts to do that with.
> teaching people the concrete skills they need for a job

That will be obsolete in ten years? The whole job, I mean.

This wasn't a bad line, but today it did lose its luster.
>> Wasn't the BOOM CPU fabricated?

No one has fabricated a BOOM processor. It's a synthesizable core that runs on FPGA.

>> It definitely seems vulnerable to Spectre.

The question has been asked but there is no answer yet; it depends on the details of BOOM branch prediction and no one has made any claims yet about BOOM one way or the other.
hstr has a vi mode.
We've banned this account for repeatedly using HN for ideological battle, which breaks the site guidelines.

https://news.ycombinator.com/newsguidelines.html
But you did manage to write this comment! Someone else could have been way too lazy for that, too.
> Emerging industries can't work like this - someone has to do the work before the universities catch up

Often, in fields that are just emerging into commercial viability, the people doing the new work before it gets taught in universities or commercially applied are researchers at universities (professors leading, but graduate students often doing the heavy lifting and often undergraduates working in supporting roles), who are then also (both via publication and personal contact and advisory councils) taking it to industry to further development.

So, yeah, while someone is doing work before university classroom instruction catches up, a lot of that advance work is done in universities, across the whole professor-to-undergraduate academic heirarchy.
But that's even more reason to split out the stats. It would be very good to know that the average life expectancy for opioid users is much lower before I consider taking them.

Life expectancy if you get the surgery and medicate with pot: 80 years.

Life expectancy if you get the surgery and use the opioids: 60 years.

That seems immeasurably more useful than a national average alone which only can be used for political talking points.
Multisignature wallet
https://news.ycombinator.com/item?id=16062850

https://news.ycombinator.com/item?id=16061923

https://news.ycombinator.com/item?id=16040540

https://news.ycombinator.com/item?id=16086038
> the more code engines share, the more de facto standardization of bugs we would see, so having genuinely separate implementations is very important.

Well it's not like there aren't any bugs in the specs. And whether there are bugs in the code or the specification, it's the same process for fixing them : politics :)
> Proofs are a big part of any decent data structures and algorithms course.

There is no need for anything more than a loosely agreed upon pseudo code for for the proofs though, actually many proofs can be made without any code.

> So you want a language that makes it possible for students to prove things about programs written in it, without hand-waving away large parts of its semantics

You can write proofs in any language. I'm not convinced that using a language that is easy to automatically prove correctness of is useful for learning proofs. If anything it's the perfect opportunity for syntax and semantics to blind the student to the fundamental assumptions and arguments that allow them to understand and write proofs.
I Was a Skeptic of Mindfulness … Until I Tried to Make My Case – FiveThirtyEight
Cache side channel attacks: CPU Design as a security problem (2016)
>there's very little public policy value in that

That's incredibly myopic and would point to a massively flawed system if that's true. It's incredibly valuable for public policy on both ends of the political spectrum to know if certain demographics are dying much sooner than others.

A single national average is about as useless as you can get unless your goal is to bemoan the decline of the US or highlight how much better one nation is than another.
What are your thoughts on doing PM right out of school? I interned at Msft as a PM and SWE. Now I’m trying to decide between the two rolls.
I was curious, so I tried to answer this question. Problem being, detangling the cause/effect and interactions of e.g. employment with food stamps isn't immediately obvious to me. To give some of the examples I was looking at:

Overall, social security and disability spending per capita, and overall enrollment, is up. (at a very high rate since the 90s, comparatively to prior).[0]

However, out of pocket costs and private insurance costs have been increasing at even higher rates [1]

To look at food stamps, SNAP participation has been going down rather significantly in recent years.[2] It's an open question as to the relative contributions of increased employment rates vs. changes to eligibility (often via republican states imposing work requirements), let alone normalizing this against the various unemployment/"workforce participation" measures to find the "real rate" of unemployed, un-protected individuals, which has certainly not recovered since the recession [3]; implying that the SNAP cuts may not be from the "good signal" (employment is found) precondition.

Something that's not well captured in the above (chosen because they were a few "notable social programs" I could think about off the cuff) and someone more informed than I could likely tell me what the core metric for this would be; but there's an worrying pattern I keep hearing about regarding schools pushing for a four day school week. (here's an analysis showing the motivation of cost cutting, and the unfortunately lacking results [4]) If the implied need to cut costs is _that severe_, for whatever reason (my assumption would be a combination of state funding and taxbase) one can reasonably see this as another eroding facet of state/social support, if not necessarily intentionally.

All in all; I get the feeling that while local benefit cuts (and more importantly aspects such as increased out of pocket costs for healthcare) are probably not helping, it's only one aggravating facet along the side of a core deeper systemic trend(s).

[0] https://www.ssa.gov/policy/docs/chartbooks/disability_trends...
[1] https://www.usnews.com/news/health-care-index/articles/2015/...
[2] http://www.newsweek.com/people-food-stamps-snap-decline-part...
[3] https://data.bls.gov/timeseries/LNS11300000
[4] http://www.ecs.org/clearinghouse/93/69/9369.pdf
No, it doesn't. Unix error codes are extremely well understood. Tell the Git maintainers that their program ignores errors and robustness—they'll be surprised.
That's not a matter of splitting out stats, because the information gathered doesn't support that. That kind of research does get done, but it's expensive, time consuming, and only really possible when alternatives have been fairly widely applied for enough years to have good data to support meaningful analysis of expected lifetime (and may still, even then, be misleading I'd treatment protols for either drug have evolved significantly over the period.)

So you won't find them for all the options of interest, and you emphatically won't find them for emerging options (including pot, which hasn't been even quasi-legal long enough to support good data.)
This is really bad news and reminds me of:
https://www.amazon.com/After-Empire-Breakdown-Perspectives-C...

This guy predicted the downfall of the Soviet Union in his mid 20ies based on statistical indicators like life expectancy.
I say please don't write any goddamned software at all.
How does being able to implement standard algorithms and solve programming problems screen out "nonconformist people outside of the kool-aid bubble regardless of their abilities"? These interviews are designed exactly to evaluate ability, in contrast to loosey-goosey "tell me about a time..." culture fit questions where the interviewer can apply their own biases and reverse engineer a justification for whatever hire/no-hire decision they want?
> No one has fabricated a BOOM processor. It's a synthesizable core that runs on FPGA.

This slide deck says that BOOMv2 was taped out in August for TSMC 28nm HPM:

https://content.riscv.org/wp-content/uploads/2017/12/Wed0936...

> The question has been asked but there is no answer yet; it depends on the details of BOOM branch prediction and no one has made any claims yet about BOOM one way or the other.

It's a pretty standard out-of-order design that executes loads speculatively. The BOOM spec has a sentence beginning

"As BOOM will send speculative load instructions to the cache…"

How would such a design not be vulnerable to Spectre?
It's difficult to find via Google, but the 'wendy carlos - topic' channel on youtube has at least some of the tron soundtrack
Ask HN: What are you doing for your mental health?
Time to end the war on drugs and start treating drug addiction as a disease...
I've had this problem. One facet of it was the fixed vs growth mindset (as described by Dweck) due to being told often I was smart as a child.
Agreed. People have been trying and trying but like like traditional letters and snail mail people have been trying to replace that for years unsuccessfully as well.

There are use cases for all of the different methods and the level of security you require will usually dictate what methods you employ when it comes time to transmit any certain type of given message. The substitutes work for us based on convenience and preference and, for the most part, most people don't truly need secured end-to-end encryption for their daily correspondence (even though I personally think it would be a great habit to get into before it's an absolute requirement to ensure personal / private / public safety).

Things like Signal are steps in the right direction but I only see a few notifications a month about friends and family joining. I'm not seeing rapid enough adoption from the "every (wo)man" to indicate that the public at large sees the need for end-to-end encryption, yet. Since we already got Snowden's revelations I'm not sure that time will ever come. Frustrating, it is.
Pretentious? Come on. There’s nothing inherently wrong with spacing your em dashes. It’s even part of the AP style guide.

I personally wrap them in thin spaces (U+2009), except in fixed‐width fonts, where I use an en dash with full spaces instead.
When it comes to health 'us, America' is so incredibly diverse in behavior that it's nearly meaningless.

We can have a medical break through that lets us revive stroke victims as brain dead patients that live for years in beds. Simultaneously we can have a smaller opioid epidemic that kills fewer people than the stroke victims and makes way more addicts. Average life expectancy increased, but who really gives a crap in that case?
John Young Dead
Separate the reponcibiltiy of leading and managing?
It's 2018 and bash is still the most convenient language for an enormous number of tasks. Funny, that...
Huh. As someone with diagnosed ADHD and who has (in the past) taken appropriate medication, I still thought the advice rang true.

How you conceptualize your identity is a huge factor in addressing behavior pattern ambivalence. For me it somehow dovetails perfectly with a neurochemistry explanation because there's no bright line separating this stuff.
Site is down. Is there a cached version?