skysight-inc/HackerNews huggingface dataset:
I like this definiton better. IANAL Warning.

Personal Data:

- PII is Personal Data.

- If a user has PII, then all of the userdata is Personal Data.

So HN posts would not be Personal Data for the users that have email field empty. And even email (and any other user-entered data) can be made non-PII if ToU explicitly required to be so.

My advice would be to legally and technically isolate PII and other_userdata. GDPR/etc compliance become quite easier this way.
A sane extension to IPv4 using 64 bit addresses, and not disturbing anything unrelated to address space exhaustion: not replacing ARP with the ICMP-based neighbor bullshit (so that you now need an IP address to get an IP address) and so on.

https://en.wikipedia.org/wiki/Second-system_effect

Even the use of colons in the textual IP address notation is moronic. The colon is already used in a notation for port numbers: 1.2.3.4:567. Under IPv6, you have to use square brackets around the address if it is followed by colon-delimited port number. Ugh!

A 64 bit extension to IP can just use a four-part dotted address, where the parts are 16 bit decimals. Or perhaps an 8 part dotted address. A range of zeros can be two consecutive dots: 10..1 would be 10.0.0.0.0.0.0.1.
Google Duplex-to-text, is that you?!

I wonder when HN will start having HN-trained bots posting. There's lots of smart discussions by smart people here; surely high-quality grist for an AI mill?
«effective output which is transactions»

No. The "output" of Bitcoin is bigger than that. You focus on a single aspect of the system (processing transaction) and disregard everything else. You fail to look at the big picture, at what the system indirectly creates outside of transactions (helping people escape inflation, and yes redistributing wealth that is donated to charities, etc.) The point is: none of these benefits would exist if Bitcoin/cryptos didn't exist.

Your argument is like saying that "cars are a waste" because one aspect of their operation (engines losing energy as heat) is waste.
America needs apprenticeships. E.g. in Czech Republic you can attend these vocational schools instead of high schools and there's less of a stigma to attending them. There are schools for programmers, nurses, car mechanics.

Particularly the programmer ones let you do learn idk, basic networking, 3d programming and some basic entrepreneurship (accounting etc).

I believe it's one of the reasons it has the lowest unemployment rates in EU https://qz.com/index/1046172/this-country-has-the-lowest-une...
Wow, would be nice if this was integrated into the OpenAI environments
Implementing a Java Rate Limiting Service for the Ambassador API Gateway
You also work for the Military Industrial Complex if you live in the U.S and contribute taxes.
I'm disappointed we didn't see any cute baby photos of the baby mice in the video.
How much money would it make for you to think about your users, and how much would it cost you?

That depends on the rate and cost of user acquisition, as well as the ROI of user retention.
OK, then we will call them driver writers and they will do exactly the same stuff. An embedded application that doesn't do something fairly unique with the hardware isn't an embedded application. It's just a regular computer application. That's why we make the distinction.

Low resource systems won't be going away any time soon either. The ignition (or battery controller) in something like a weed whacker is unlikely to be communicating with anything and will likely be running on a 8 bit processor with no room for libraries.

I don't see that the problem is that we will lose the skillset as suggested in the article. The bigger problem is that we have trouble producing embedded programmers in the first place. The universities/colleges are doing a terrible job. Most embedded programmers picked it up on their own by messing around.
Ok, I guess I just assumed since Nest is a Google company... but I can check that. Thanks for the tip!
Thank you, I was copying from the Imgur app on my phone and it kept giving me bad URLs.
Not saying it's true for you, but everyone I knew at college that was working full-time was in my opinion getting far less out of college than they would have. You need time to ponder, to explore, to be curious.

Having to grind insane hours just to get in the game might be workable for the very dedicated and tough, but it's certainly not an optimal experience, and something we should strive to make not necessary.
So google (or whoever) can just tell stonewall investigators and/or inform them they are GDPR compliant and that's good enough? Are the investigators going to be allowed to examine intellectual property? Sorry for all the questions I am failing to see how this will be able to be enforced
Suppose there are four fully qualified candidates for a single position. To a first approximation, three of them did not get the position because there were four candidates and one position. The reasons why one or another candidate was chosen are much much less relevant to the outcome experienced by other three. The difference is mostly luck. Sure the hiring committee may have found reasons for picking one and not the others. But that's the nature of their job...rejecting three candidates and/or choosing one. And all this assumes that there actually was a position and not just the possibility or hope or wish that there might be one in the future.
I mean, they're not, according to their own ToS (or even their own interpretation of it).

It says something in there along the lines of video and audio may not be separated. On the basis of which, they ran a witch hunt on all 3rd party YouTube apps on the Play Store, which had a background playback feature.

This in itself makes no sense, as separating video and audio during playback had always been possible on the desktop by simply switching to a different tab in your browser or minimizing the window.

But obviously, this wasn't about showing integrity. They published YouTube Red with its background playback feature just a few months after this witchhunt.

And since the Play Store is their property, they didn't even need a legitimate basis for throwing these apps out. They own the market, so they were able to just shut out the competition.

Don't build your life on Google property...
Truly the Columbo of the animal world.
True! The fact that you'd be able to use pretty much any GPU - even integrated/AMD/NVidia would really help.

Speaking of which, doesn't the new Vulkan API include compute too?
@lvh

What are your thoughts on the wireguard homepage effectively saying it's not ready for production use?

I've looked at using wireguard on a few occasions, but it's always sounded not ready for production usage reading through it. Looking forward to the point where I can though.
Do those features need a cloud connection if I am on my own wifi?
I don't believe college should be free, and I believe students should be able to choose whatever major they want to. I believe we should do away with gov't backed loans for college which artificially increase enrollment into soft majors.

Students should sooner than later learn to make informed decisions.
Not to mention if they're working fulltime they're forfeiting a large part of the value of the degree. Half or more of the value I got from my degree involved out of class activities.
Still in Romulus Michigan
For organizations with extremely sophisticated security teams, pretty far beyond the industry norm for "unicorn" startups (which themselves tend to have security teams with 10+ people on them, meaning millions of dollars of annual spend on security), this makes sense.

But for other companies, when they haven't been architected from the beginning to carefully support this access model, this is terrible advice. Just awful. Converting a company with a VPN/private deployment environment model directly to a "YOLO BeyondCorp" model will get that company owned up.

Further: if the primary things people need to get into private IP space for are (1) developer access and (2) access for non-technical staff to admin interfaces, the win just isn't there, even if done correctly, for most companies with the BeyondCorp model. It costs more to keep that model secure than it does to set up a system of VPNs for private access.
"NAT gives you privacy!" :D

I mean, I like how sharing my IPv4 address with neighbors under cgNAT makes e.g. torrent monitoring sites (was on HN some time ago?) mix several people's downloads together into one list lol… but with actual data analysis it shouldn't be hard to separate my activity and the neighbors'
Bitcoin is neither of those things. Mining, developers and exchanges are all centralized. All a government that cares has to do to control issuance or censor transactions is regulate those entities.
The tax increases you would need to sustain a system like that would be absolutely devastating. Also, college degrees would mean a lot less if they're free- devaluing them for people who actually paid for them
They solved their own problem but not everyone else's. If–as they state–complex projects present challenges for Make, then rewriting their build system in a DSL of the language they understand (Haskell) solves their own pain point but not everyone else's. Take this to its logical conclusion, every large project goes away and re-implements Make using a DSL of a language favoured by the community. This seems to me to be locally optimal but globally sub-optimal. We have to learn a new DSL per-project just to tweak the build system. No thank you. It's a bad move in the meta-game.

Much better to reach out to other projects and figure out how to make Make better, no?

Sometimes I think great coders (10x coders) can work against themselves. Because they are such great coders they are able to re-implement in situ rather than improve the stuff they get from over the fence. If Make is really that bad make Make better in a language-neutral way.
I was trying to guess that 2004 was the most proximate archive year of their papers prior to when yours was rejected, hence that list: https://eprint.iacr.org/2004

Are you saying any of these papers make a significant argument about side channel attacks? Or of you saying there are eight papers that make some reference to it? If it’s the latter that’s quite a big difference and it’s easy to see the logic of rejecting your paper based on its central theme.

I didn’t notice any of the papers made a significant argument about side channel attacks. Maybe 2004 was not the most proximate year prior to take as sample data? Or maybe I’m just overlooking the eight your referring to?

Btw I wouldn’t begrudge you any wtf thinking if you had any. It would definitely suck to do good work and not get proper and timely recognition for it, especially when it could have sped a solution or helped mitigate a real life problem.

It’s just that to whatever degree this suckness happened, I can’t see how it was due to irrational or biased reasoning on the part of the Cryptology ePrint archive.
Not in Europe
Correct, I was only stating that this same meta-game exists. It’s not about identity politics, it’s that white men have made the rules for a very long time. So from the perspective of a white man, it’s an attack on traditional values.

From the perspective of a black woman, it’s trying to claw out the same degree of freedom that the rule makers have while not pissing them off enough to get rebuked (or arrested, or whatever).

I feel the world would generally be a better place if we all understood each other’s point of view better. Sadly, most rulemakers have no interest in this.
College is usually worth it but needs a reboot for this to really be true now.

Useless and wasteful bureaucracy is responsible for much of the increased expense. Why should students be saddled with years (or decades) of debt to pay for pension seeking, position protecting goof offs to waste time and resources? That makes no sense at all.

Plus the "education" seems to have deviated somewhat into political indoctrination to the point some students come out confusing the two. That doesn't help.

So ya, if colleges would get back to the basics of a sane mandate and operate efficiently it would be fantastic. "Free" college doesn't help because on the current trajectory, the parasitism will expand to slurp up an infinite amount of provided resources, and indoctrination will continue to grow at the expense of education.

I'm not a fan of bootcamps in general, but something along those lines, a group of people fed up with the nonsense and starting over seems could possibly produce credentials that actually had worth other than being a (largely social) signal. And presumably outside the current system these would have to be affordable.
From the mouth of John Cleese: https://www.youtube.com/watch?v=wvVPdyYeaQU

I realize I am not in tune with times, but it somewhat irks me that a lot of (generally) younger folk at work want to blog about every single task they've accomplished or assigned to. Often turning these seemingly routine tasks into heroic efforts described in the blog postings. I guess it's called career growth. :)
Cool Anecdote - but I don't see your point. It's still more expensive than it used to be, and you can't expect every 18 year old to make the same perfect decisions you did. I worked my ass off too and still came out with debt - and I could do my cushy white collar job now without any of the education I payed so much for though I doubt I would've been given the opportunities I have been given if I didn't have the degree on my resume.

Also, cheers from another Michigander - I went to Western.
I would just go to old.reddit.com if I were you ;)

That comes across as condescending and smarmy.

Again, I'm not against evolution. This whole things is yet another example of what happens in asymmetrical power situations.

https://news.ycombinator.com/item?id=17092795
Dear MacOS: stop forcing yourself on me
I think the pay is terrible because this type of work is now mostly being done in parts of the world where labour costs are lower than the US.

This is true, and it works for small localized code...but when it comes to application work it backfires a good amount of the time. A serious portion of embedded application work is digesting the business knowledge of the client and translating it into working firmware.

If you need to take a stateside engineer and write and review the specifications to the code, then throw it over the wall, THEN review the finished work before delivery....what was the point in the first place?
All the solutions that would actually solve these problems are politically unpalatable, all the politicians that would / could provide these solutions would be run out of town.

Also Educated != smart. You can have plenty of educated people but still have bad outcomes in society. If only smart people could vote then that would go a long way to fixing society, but again, a solution like that is immediately off the table. So there are ways and means to fix any and every problem, the problem is nobody will use the tools or they are not even smart enough to know that the wrench is for turning bolts in the first place (the don't even realize the solution in staring them in the face in other words.)
Do they think they are being useful?

From twitter posts, it seems like they know their crap is the same as everyone else, but they want the Adsense money.

Idk, twitter Personal Finance is a cesspool of shitty adsense/amazon affiliate filled blogs.
Google Play Music isn't a paid product for me.
A company's interests are superficially different from a government's - they don't care about which party is in power, sure. But they have much the same interests at a deeper level of: keeping existing power structures in place, not letting weirdos mess everything up.
How long until you are unable to update your digital certificates? Or the certificates used to sign the apps you run are no longer valid and the apps cease to function?
Full Cycle Developers at Netflix – Operate What You Build
For six decades, Australia man donated blood – and saved 2.4M babies
> Isn't Android proof of a sort that Linux is still worth something without GNU?

Not at all. Android depends on tons of GNU software.
When it comes to tech migrations I see 3 types of stories.

1. Create "new technology" that is a backward compatible or even drop in replacement for old technologies. Good examples of this is Web technologies, TLS, Linux APIs, bitcoin soft forks etc. This however makes "new technology" vastly more complicated both in concept and in implementation. e.g. writing a conforming web browser from scratch is impossible today.

2. Create "new technologies" that are parallel redesigns and are made "how they should be". The intent is to simplify the technology and fix problems discovered in previous versions. The plan is to run things parallel until people _voluntarily_ switch to "new tech" because it's better. Examples of this is python 2 vs python 3, IPv6, etc.

3. A third approach I guess is making backward compatibility a tool, like it's done with all ANYTHING->ES5 compilers.

(Sidenote: python2to3 tool should have been python3to2 instead)
Just throwing it out there, but WireGuard does more than just make strong crypto "default". Instead of separating, say, transport from encryption (transformation) they tightly couple them. It's intentionally limiting this flexibility for the sake of performance and administration simplicity...in their own words:

> It intentionally lacks cipher and protocol agility. If
holes are found in the underlying primitives, all endpoints will be required to update.

(https://www.wireguard.com/papers/wireguard.pdf)

Just skimming their whitepaper it seems this is done to cram everything into Layer 3 which has administrative and performance benefits. But comes with a significant tradeoff to flexibility.

They follow up that statement with something that slightly confuses me:

> As shown by the continuing
torrent of SSL/TLS vulnerabilities, cipher agility increases complexity monumentally.

But the general sense I am getting is WireGuard is strongly opinionated and limited...and one way of spinning that is less vulnerable to user error. Personally, I have trouble equating that to meaning WireGuard is more secure. For similar reasons I have trouble equating OpenVPN configuration to "requiring hardening".

That said WireGuard's approach and lower layer, like IPsec, has some serious performance advantages over OpenVPN. Their whitepaper also seems to indicate that it performs better the IPsec, but I would have to see more benchmarks from other sources before making a definitive conclusion on that.

Judging from this article and the comments in this overall thread though, it appears that WireGuard has some zealous (perhaps a bit over-zealous) evangelists though.
I'm guessing there is a lot of money to be made using moneyball techniques to hire people. There are likely many candidates out there that would excel at professions, but don't have the ability to signal it to employers.
Splootysplotty: Open Source Alternative to Lewis Carroll’s Jabberwocky
I'm not as well versed as many here (I'm an advanced amateur) but have some understanding of networks and crypto and am trying to wrap my head around this.

Can Wireguard be described as an encrypted, stateless, roaming, keypair based UDP tunnel?
>every year of college costs 1 year of salary

This is point-blank wrong, unless you're only talking about elite private schools. Most state schools cost around 1-1.5 years of full-time salary, discounting room and board since you have to pay for somewhere to live independently of if you attend university. If your goal is to simply get a degree, you can do it for less than $50k (which is definitely still off compared to the 70s, I agree).
All I got to say is that Hannah Wolfe is a beast (in a really good way!).

Check out her number of commits compared to other contributors: https://chart.ly/github-dashboard/TryGhost/Ghost

Keep up the good work guys!
Well, college experience includes networking...

Not everything can be reached through HN, it's an echo chamber of similar minded people
UBI will only be truly implementable when we have robots automating everything.
The Problem with 7825 – The 200TB proof
Tell that to Verizon. After 5 years, I'm still waiting for IPv6 on my fiber connection.
It's simple, try and get the best education you can for as cheap as possible.

I have not read the article, so forgive me if they state it there, but a large contributor to the problem of "must go to college" are employers.

It's amazing to me that software is the only industry that accepts people for what they can do and have done whereas other industries require explicit requirements.

Yes, training can be expensive, but kids learn so much faster when they care.
It's funny how everyone damns web technology for changing too fast.

But now that wasm is slightly available, the same people wonder why it's not self-evident that everyone should've jumped ship immediately to such fledgling tech that isn't even a drop-in replacement for Javascript.
Ah, that sounds good, thank you! I should be able to figure it out with that.
That was kinda the whole point of the article:

Very high demand for embedded engineers => too expensive, hard and time consuming to train the needed engineers => market responds by creating API’s so less “traditional” skill is required
People in first class are generally rich, which means they're likely to be older, which means they're probably going to be slow too. The main advantage is that there's fewer of them since the first class section has far fewer seats than coach.

I'm thinking of a system where people who have demonstrated an ability to very quickly stow a suitcase in the overhead compartment and get in their seat and out of the aisle, and then stand up, grab their suitcase, and start walking down the aisle, and do this in formation, are given special status and put in a special part of the plane as a reward for their efficiency. This would probably improve the process overall, as well as encourage people to stop screwing around so times improve overall. Maybe they should even have training classes for this.

This reminds me of the difference between car drivers: some of them can jump in the driver's seat and pull out in a few seconds, and others take 5 minutes doing--I have no clue what--before they can start driving (and I don't mean people plotting directions with GPS either, I saw plenty of this behavior long before people had smartphones or GPS). That latter group is probably the same group of people who make airplane boarding/deboarding so agonizingly slow.
Is it though? As a value prop for the average student it is immensely positive expected return. Even more-so for prestigious schools.
It was a 500k match not 1 million.
There is no such thing as a saving grace methodology
I think you're missing the point of what GP is saying.

My interpretation was that rules are only an approximation for what the rulemakers actually care about, and if you understand that, optimizing for what they want and not what they say will be a lot better for you than doing what they say but not what they want.
any hints which soc manufacturer?
Fair enough. And I'm just talking out of my ass about my own theories, here. I still welcome conversation to try to inform myself.

Roughly, I think we should think in terms of Trade Schools and Liberal Arts programs.

I'm a huge fan of Liberal Arts programs, but I don't think they should be a pre-requisite for a STEM career. They also shouldn't be a pre-requisite for many jobs that people have today.

We should all be much more in favor of Mentoring. Maybe Corporations should receive tax benefits for being good Mentors.
Otherwise someone could eavesdrop this publicly available material, or MITM the content for the benefit of...why?

This new https craze is like demanding seals of authenticity from posters on lamp posts.