skysight-inc/HackerNews huggingface dataset:
No? Yes? Neither? Both?

I've seen enough of these discussions to be able to parrot back to you some of the usual responses. Basically, say that you point your webcam at a perfectly black sheet (0x000000 in color). Will you get any actual entropy from this? No.

Now say you point your webcam at the night sky. On a clear night, I will more or less know what your camera is looking at, and will be able to to narrow down the huge field of possible values presented by sha256 to a much smaller set of possibilities. Knowing when you generated your private key and your method of getting entropy, I will be able to crack your key much easier (doesn't mean easy, just many orders of magnitude easier).

Now, say you point your webcam at a lava lamp, or the display showing characteristics of some quantum process, or something else provably random. Here I can't really tell wtf your camera is looking at. I can of course go and slide that black sheet in front of your camera for a bit. Or stand in front of it. But if you physically secure your camera, then yeah you are doing something right (though of course not everything, as it's quite possible that something in your algorithm is in fact reducing your possible output to only some subset of possible values produced by sha256).

It's the same thing with radio. If you tune it to a signal that's producing a sine wave with a stable frequency... I know exactly what your input is. If you tune it to something like the BBC, I know exactly what your input is, even with some noise. If you tune it to something really random, can I just put a very strong transmitter near your receiver and overwhelm the spectrum such that you are listening to only my signal? And the best part is that you won't know that this is happening even more than with a webcam.

Personally, I wouldn't really want to trust these devices. They are fun. but they aren't practical for this purpose. Where you need real entropy is a data center. And a data center won't be receiving too much radio.

Again, parroting every other thread about this, a reverse biased transistor will give you true quantum randomness which is very cheap, very easy to produce, and is difficult to temper with at a distance without disrupting the rest of your equipment too.

Again, you don't need as much entropy as you think. Your kernel will seed a CSPRNG with a tiny bit of entropy, which is enough to keep you safe for eons after that. You can't "run out" of entropy with that scheme. The biggest issue is to initialize the random number generator with true entropy before you start using it, which is only difficult if you are running virtual machines and the host doesn't provide entropy to it. I believe at least in some schemes the seed used is based on time or some such predictable factor, which doesn't help.
As anvandare pointed out in another comment,

"It shall be as easy to withdraw as to give consent."
I have to disagree. Evil mode in emacs is (on the scale of vim clones) pretty good, but it is still an emulation of vim within emacs, and there are a lot of hard stops throughout the experience for a long time vim user. The biggest hard stop for me was the implementation of C-[, which interpreted word boundaries differently than vim - differently than emacs even.

Of course, if all you're looking for is modal editing in emacs and don't mind falling back to emacs keybinds, then evil mode will do just fine for you.
I'd say the cars will be able to hyper-mile, utilizing regenerative braking as much as possible and actual brake pads as little as possible.

Will they avoid potholes? In New England, we have MANY bad potholes, I wonder what they will do about that. Will they avoid manhole covers, objects on the road? I personally can't wait to see when/how it all plays out.
I assume the poor dashcam footage came out because it fits the narrative they were all trying to push. I don't think there is any reason to believe it was the input to the driving system, but either way, it does not look good for Uber, and if it is apparently deliberately misleading, or, worse, has been tampered with, then that would take it to a new level.

The release of the interior shot might have been an attempt to throw the 'safety' driver under the bus, so to speak, and while her inattentiveness was a very serious matter, it also does not look good for Uber.
Ahh, I wasn't aware of that.

What about heavy machinery, like construction plant? Or power tools? Or common kitchen utensils? Would they satisfy the analogy?
Just open it in private/incognito browser, free and less tracking!
The super concise summary: quitting is hard MOSTLY because you think it is hard. The rest of the book is just examples of that fact. This may not be true for everyone, but it certainly turned out to be true for me. But it's not something easily conveyed through words. I suspect this book is effective only for people who are ready to quit, but needed that external trigger prompting them to do so.

Hope you quit soon. Life isn't all rosy on the other side, but it feels a hell of a lot more real.
Worst Programming Languages to Learn in 2018
This is cool! One of the top comments on Indiehackers (if I remember correctly) was to click on an egg to change the background color - I'm gonna echo that here.

Love the "remember to bookmark" label!
BMW, Daimler merge mobility services to take on Uber, Waymo
:D

At least I didn't. It was the first time I commented on Rust here on HN.
Yes it could well be. And I for one don't set much store by 'experts', especially where smoke is concerned:

https://www.rawstory.com/2016/05/doctors-used-to-literally-b...
>I mean, of course they store everything the user does, why wouldn't they?

Because their behavior fits the legal definition of stalking in many jurisdictions. Yes, the user "consented" to the stalking, but many of their friends which are being stalked as a result did not.
The global optimum might not be the combination of locally optimal routes. The shortest route through a network segment to a peer may end up being globally slower than a locally slower route to another peer which can handle the traffic faster.
I keep refactoring my Emacs config, but it still grows instead of shrinking.

Maybe I'm not "there" yet. But for now, I feel that the more things I start doing in Emacs, the more productive I get (and the more fun I'm having). They say Emacs is an OS; I find it to be a damn great one. Its UI model is a better fit for 90% of things I do on a computer than the standard one.
But I willingly give my data to Google - they have (for some reason or another) kept my trust.

Facebook broke my trust with data I didn't know they had collected.
You would have enjoyed the exhibition as there are a couple of Italian gems in there: The Olivetti programma 101 desktop computer, the Olivetti TCV250 Video Display Terminal and a poster for the Arte Programmata (an Italian Kinetic Art movement from the 60's )
Normally you don't get to see this stuff in the USA as most of the exhibitions are very US centric.
Why is equifax still a company?
I've been thinking about this a lot lately. How is it that CA grabs a bunch of facebook data and now we are a little bit angry...not really moving the needle on data privacy, but our society is a little upset.
Yet, equifax gets boosted by someone with the most absurdly gross negligence around data security that I have heard of in a long time, and there is barely a peep.

It seems to me that this company should be liquidated. How is this remotely possible? There is something about equifax that I'm not understanding, or is it that we are just so desensitized to poor data management that we don't care as a society anymore?
I’m rooting for the future of carbon materials as a way to monetize atmospheric cabon dioxide. So this article pointed out a few opportunities for carbon:

1. robotic assembly of carbon products to lower costs

2. eliminating use of synthetic polymers in the process

3. learning more about “carbon nanotubes are asbestos”
I'll wager with you that if we randomly stopped individuals on the street with Android phones we'd be able to find a significant portion of individuals who have "Ok Google" enabled. (I'll concede that this piece of functionality can be disabled.) That said, I'll also wager that for those with the "Ok Google" functionality disabled that at least one application on their phone has the microphone permission enabled. I'll even wager that if you own an Android phone you have at least one application with the microphone permission enabled.

Additionally, I can disable the microphone on my home device if I wish with the push of a button. If I'm in public I can't walk around asking every stranger within earshot to "disable their phone's microphone".

Now, explain to me, in the case where "Ok Google" is enabled; how isn't the phone always recording if "Ok Google" works (or "Hey Siri" for that matter)?

Given everything covered, is it still "disingenuous" to say that a cell phone is minimally as risky as putting any of the devices mentioned in a home if not more due to the inability to control the devices of others?
... says the guy promoting his site.

Can we retitle this post "Shame: not a thing anymore"
Well you can use the Wi-Fi based modems/dongles/routers/whatever they call it that basically connect to the cellular network and create a Wi-Fi network you can connect your iPad to (or anything else really).

A bit annoying given that it's one extra device to carry around and charge but if a "dongle" is what you want then I think it's the best solution.
I have no doubt that the issue you describe happens, but people have also had the experience that there simply isn't any "enjoyable activity range" to begin with. This could be some abnormality in interoception, which researchers are finding is much more common than previously thought (it was previously regarded primarily as an ASD symptom, but as much as 15% of the general population might be affected depending on how abnormality is defined and assessed).
Evidently we're at the outraged-explainer-porn stage of the media manufactured panic cycle. They are certainly using every part of that buffalo.
Through the looking glass: Security and the SRE
and since this article is 6 months old, any updates in the meantime?
Most Popular Development Posts of the Week (28 Mar 2018)
Out of curiosity, what's with the emphasis on the pedestrian wearing black? Was it a night accident or something?
Show HN: AfterClass – a new kind of document augments understanding
Two things:

First, it's generally best to praise publicly, and criticize in private.

Second, saying "@Users's commit screwed-the-pooch" blames but, frankly, may not be the whole picture. It's entirely possible that the commit caused the issue, but everything was done by the book in which case it's really an organizational failure.

Personally, I sympathize with your argument. I have no personal problem with Torvald-style correction. I used to work under an asshole who would threaten to have me fired routinely. Personally, I prefer the blowhards because you can always tell where you stand. Still, not everyone is wired this way and part of leadership is recognizing that and playing to various folks strengths and weaknesses.
"statistics for 2018 show that of the 74 offerings completed so far this year, around 76% will end up in the red."
Are ICOs a fad or are they here to stay? https://www.investing.com/analysis/whats-behind-the-lower-nu...
netdata is very interesting, thank you for sharing it.

It seems to do something very similar to Cockpit, but netdata has way more stuff out of the box.
I didn't mean that the federal agencies should necessarily have a role here. I would think that many US states also have agencies charged with administrating the law, something like a "Arizona Roadway Authority" or whatever.

My comment was trying to explain how even within a single hierarchy like a state's executive, which a Governor at the top and traffic engineers somewhere below, it's peculiar to see someone jump so many levels of that hierarchy to assume control of a rather low-level decision.
And you're at the superior-to-all cynic portion of your comment history.
This is an interesting project and I've played with it in the past.

Note, however, you should not use this for any real purpose. I saw a video on Youtube a while back of the author presenting this (at a LUG meeting or some such) and even he warns against using it for any real purpose.

So play around with it, hack on it, etc., but do not, by any means, incorporate this into any process that requires actual entropy for cryptographic purposes.
They Called My University a PhD Factory – Now I Understand Why
It's not going away anytime soon. Especially since jet fuel is pretty much just another form of diesel.
Took advantage to go onto Google and give it even more info on what ads they should (and should not) show me. That's probably not what the Guardian expected/wanted me to do.

I may be alone in this, but I expect that everything I do on the Internet is done in public. Nothing new here.
Tovala Looking for First Chicago PM
Lol @ 'basically'
> It's an unpopular opinion, but I believe the pedestrian caused this situation by putting themselves in a dangerous situation and not paying attention.

That doesn't mean that the Uber system wasn't dangerously defective and that a fit foservice self-driving system would have noticed in time to react (which may not have been sufficient to avert a collision, and may not have prevented a fatality, but given the speeds involved would have significantly reduced the risk of fatality.

That the pedestrian should not have entered the roadway where and when they did may relieve Uber of legal liability for this collision, it doesn't stop the failure to react at all from being evidence of a critical safety flaw.

And, had the same thing happened at an equally poorly lit, not specially marked, intersection in many jurisdictions (including California, not sure about Arizona), Uber would be legally at fault because of pedestrian right of way. If Uber's system can't see and react to people in dark clothes at night, it's not even remotely suitable for use, at least at night.
Thanks, pretty neat script; works nicely!
I got trashed at a party with a leader of Uber's self driving program. He told me it was normal to lie about who was in control when incidents happen. He said everybody does it. He said nobody's numbers were as good as they said and deception is standard practice. After an extended conversation with him I have no doubt this crash is due to negligence
I don't believe for a second that there was ever a "vegetarian" cat anywhere on this Earth. Cats simply need to eat meat, period.
But the issue is that they only delete stuff that's public - the issue with data brokers is that it happens underground - you can't just search your name and get all the data brokers that have your info.

So while this might be a good service for people who had their personal information disclosed publicly (doxxing, etc), it will do little against data brokers.
Well, there's man tune2fs:

-m reserved-blocks-percentage
Set the percentage of the filesystem which may only be
allocated by privileged processes. Reserving some number of
filesystem blocks for use by privi‐ leged processes is done to
avoid filesystem fragmentation, and to allow system daemons,
such as syslogd(8), to continue to function correctly after
non- privileged processes are prevented from writing to the
filesystem. Normally, the default percentage of reserved
blocks is 5%.

-g group
Set the group which can use the reserved filesystem blocks.
The group parameter can be a numerical gid or a group name. If
a group name is given, it is converted to a numerical gid
before it is stored in the superblock.
Yes. The video from the internal camera shows a pitch black night with almost no light and a black clad figure appearing out of nowhere. However this footage is quite disputed as this level of darkness would suggest that the car had basically no lights to speak of and that the roadside lightning did not work either, none of which were of course true.
That's right, there are many ways. I just wanted to point out that you could roll your own tls.
> I may be alone in this, but I expect that everything I do on the Internet is done in public. Nothing new here.

So how do you send private messages? Carrier pigeon? Even Signal uses the internet, after all.
Actually the treatment of sentient droids in those movies is one of the sour points for me, rewatching it now. Somehow it's OK to just wipe a droid's memories, or dismantle it, when it's just as much a 'person' as any of the organic characters. Blah.
If you subscribe to the view that Emacs is an OS disguised as an editor, you can get pretty far with it on Windows too. I do recommend that.
Critical OpenSSL Security Advisory - recursive stack overflow in openssl
It's generally considered a form of negligent homicide, which is a crime in the USA.
China is using AI and facial recognition to fine jaywalkers via text
Note that the video intro is the ABC national evening news:

http://abcnews.go.com/US/teen-builds-baseball-throwing-prost...

The BBC probably did the story after seeing it air on US broadcast tv 2 weeks ago.
> Is this really surprising to anyone but the laymen?

That's a pretty huge caveat. "This isn't news, except to the majority of people". It's an article in The Guardian, it's obvious intended for the "laymen", of which there are a pretty big number.

> of course they store everything the user does, why wouldn't they?

That's the crux of it, for me. I agree, they have no incentives not to hoard data. So those incentives, like GDPR, should be created.
In addition to that, that data derived from the data you supply (i.e. a trained ML model on your preferences or face) aren't deleted even if they do permanently delete data you've posted.
The massive complexity, diversity and general black-box nature of modern PCs leads me to believe that we won't have a similar scene of enthusiasts to develop amazing hacks for, say, 2009 Dell Inspiron laptops.

There's an elegant simplicity in these old pieces of hardware, it's relatively easy to study them exhaustively and if you're clever enough you might find a new way to fit the pieces of the puzzle to do something nobody had though possible before. If you want to hack a modern PC you'll probably first have to spend a few years reverse-engineering the various parts to figure out how they work exactly and what you can do with them. Even getting a basic understanding of the low level details of a modern GPU is quite a massive undertaking.
Won't an app worth its salt use certificate pinning to prevent this mitm ? In other words - Can I use Charles to sniff FB or watsapp traffic ? I do not use both services, but interested in analyzing their traffic.
Public transit can work for predictable, regular trips. But most busses I've ever been on have been nearly empty. The theatre of supporting public transit (busses anyway) is expensive too.

To replace cars significantly, busses would have to run on most main streets in a regular grid pattern over the entire city over the entire day. Nobody does that. Instead they run irregularly over favored routes (hotspot to hotspot). Which gains some riders at some times of the day.

I'm not sure busses are even an ecological gain in most cases.
> It's easier to make cars self-driving than to fundamentally re-architect the layout of every single city in the nation, though.

We did that for cars, though, so it's not unprecedented.
Top 1000 Upvoted Books in Reddit History
All that's negated by the video showing her looking down at her cell phone.
You're very bold. Not everything I do on the internet is public, fortunately.
There have been auto crash safety tests in the auto industry for several decades now. I imagine it would simply be an extension of that testing. Yes -- the companies will put emphasis on making their cars work for the test, but just like crash testing some companies will most likely distinguish themselves by designing above and beyond the standard test.

The point is to have a documented standard to compare automated systems by.
Like the other commenter said— it was a blood test. The result was actually low hemoglobin. Low hemo unfortunately runs in the family as well– my mother has a severe case of anemia and suffers a range of issues related to that. Thankfully, I'm nowhere near that case.
The Google timeline has surprisingly missed a log places that I have been. They are either not telling me about it, or they don't store everywhere I go.
https://www.google.com/maps/timeline?pb
Hmmm... it's interesting if true. Or we could be being trolled by the same group along with Von Lars Wienand.

It would still be a bit sad if a cancer donation site could be brought down with so much less than 1 donation per second, but I'd use occam's razor.
A Slack clone built in React and Chatkit (with source code)
For context, the accident happened under a brightly lit portion of the street. Safety driver could have easily avoided it if she were paying attention to the road instead of her phone.

Picture of where it happened: https://imgur.com/gallery/XQrAB
I'm more interested in what they collect about me that they're not showing on a user-friendly dashboard.
Waze officially launches its ad program for small businesses
Make that random names with an apparent alt-right flavor. Yay for the internet.
We have both of those setup, the guy is just an asshole.
Ballistic missiles often don't have steering fins, and are guided using thrust vectoring. Also, missile defence often has to take place in the terminal stage of flight (e.g. THAAD), where the missile is carried to its target by its momentum, as you can't station your defence system in your enemy's territory.
Just copy configs over. Best, keep a repo with all of them.

Few hours spent on setting up your environment at a new job is still a great bargain if it makes you more productive (and/or makes you enjoy the work more).
Not remotely an expert on how those algorithms work - but that's kinda what I'm talking about. If I can be confident it won't activate until someone clearly says, "Alexa", then I'm not too worried because the older kids understand they're not supposed to mess with it in ways we haven't taught them. If my 2-year-old can activate it when he doesn't remotely say it properly, I'm worried about what he can accidentally do on it, what else activates it accidentally, etc.
I'm in the same boat, I resolved it with Nutritional Yeast.
Maybe you don't? Pretty hard to guarantee at any given time anything you do or say is "private", internet or not.
Autodesk Inventor Professional 2019 Full and Crack (x64)
First: No, I didn't leave anything out. Review the link I included in my last comment. Hold on to the Federal Circuit as a personal stick in your craw if you want, but I didn't leave it out.

Second: That's a stretch. To argue that the case would have stopped at the Ninth Circuit is to argue that because the Supreme Court denied Google's petition to reverse the Federal Circuit, then they would have denied Oracle's petition to reverse the Ninth Circuit. That's a junk argument.
This is the best version of our future. Young people realizing that technology has reached a point where individuals can create new things, not for a paycheck but because they improve our own and each other's lives. You think Uber disrupted the taxi industry? One kid just disrupted an entire branch of biomedical engineering.

Of course, this could easily be followed up by the worst version of our future, where work like this comes to be expected and demanded of our best and brightest with no appreciation for their efforts.

Act wisely, humans!
It's okay, I only use Incognito mode.
Foxconn Acquires Belkin for $886m: Gets Belkin, Linksys, Wemo
Amazon’s Reportedly Dropping $1B for a TV Show to Rival Game of Thrones
Introducing the Industry’s Next Video Codec: AV1
This is a great idea. My partner made a playlist of Boston Calling bands. It was helpful for a festival when you don't know all of the bands (the festival bands play concurrently too so you couldn't see all the music..)