skysight-inc/HackerNews huggingface dataset:
I like this idea. I have also been bad about picking podcasts that I like, though. I think laziness and procrastination might be a huge factor for me. :-?
I thought timing attacks only matter for clear data to encrypted data and back part of the library, and as long as they didn’t write any data parsing that is content specific pre or post encryption their encryption and didn’t write their own encryption then there shouldn’t be any major holes.
That's the "L" term in the Drake equation.

And indeed one of the oft-mooted possibilities is that L is quite small.

Which is a bit of a worry.
iWALKFree Gives Injured Veterans Better Mobility
I am a heavy Paprika user as well.

Emailing the recipe formats the content into an email body text and doesn't require the recipient to go to the website. It also includes a .paprikarecipe attachment for direct import into the recipients Paprika app.
As with many things in life, it is a matter of persistence and sacrifice. You have to want it bad enough to suffer through your body literally eating itself, and to keep trying things until you find something that allows you to endure that suffering for the rest of your life, because you don't ever get to stop.
IDM Crack 6.31 Full Version Free Download
I really enjoy the plain-text website. Bizarre font choices but perhaps the easiest to read site I have seen for a while!
It wouldn't matter if a CA decided to require DNSSEC for all issued certs, because others (obviously including LetsEncrypt) do not.
Oh yeah. And after 40, you start to gain weight by not eating!

/s
I think you're right, but for me Java lacks compile-time features sorely (JavaPoet looks alright, but suffers from not being an official component of the JDK). Thinking about the user I'd much rather have that processing done at compile-time than startup-time. I guess this is part of where the appeal of Scala and Clojure lies.

Rust and Nim provide the sort of thing I mean, hygienic macros - they're nicer than reflection because you keep type safety and you keep run-time performance without generating a bunch of transient source files. Nim's also got a nice RTTI interface, too.
Now imagine a woman who eats 1000 kcal a day already. How is she supposed to survive and maintain a liveable lifestyle at 500 kcal/day?
How to Eliminate Circular Dependencies from Your JavaScript Project
From my current understanding adding random noise doesn’t affect most timing attacks because it is averaged out. I may be wrong though
Unbundling and diversifying are both viable strategies. I just don't know if Intel can pull off both simultaneously while maintaining market share, and current levels of profitability.
Generating and sending recurring invoices for my side projects. Lambda + SES, set on a monthly CloudWatch schedule, done.

https://github.com/forrestbrazeal/invoiceless
> In my experience, one of the easiest ways is to make the process enjoyable. Try and find some sort of exercise you enjoy, or let yourself listen to your favourite podcasts / music whilst you're exercising.

TFA notes that they didn't exercise (that they tried but didn't stick).

Ideally you'd combine exercise and calorie counting, but for nerds calorie-counting makes the diet into a numbers game which can be a great motivator on its own.
I started body weight exercises with a friend who guided me—and is very experienced in the area, and also started being in a slight [1] calories deficit.

I've been at it for about 5 months now and I've dropped 30 kg as of a few days ago (from 118kg), which is 66lbs (from 260lbs).

The added benefit of exercise is that my energy levels are much more stable throughout the day, and my mood is generally better and more positive.

Also, this wasn't so much of a diet as a lifestyle change. I always wanted to get into body weight exercises and gymnastics, but got discouraged by injuries and lack of knowledge/guidance. So, I'm very lucky to have met my friend (in more ways than one) who helped set me on the path I wanted to be!

[1]: The deficit might not be so slight anymore, given I gained strength and increased my intnesity whilst keeping the calories the same. I've started eating a bit more to compensate for that now, but I'm still in a net deficit.
It's possible that evolution inherently drives life towards intelligence (as a likely outcome, not in the teleological sense). Three counter-points:

* Sure, an extreme minority of organisms are intelligent right now, but considering that intelligence is such a recent invention, we can't assume that this is the terminal state of affairs. Indeed, intelligence is making progress in taking over the biosphere that shows no signs of slowing down. Perhaps thousands or millions of years from now, we will have converted all biomass to sustain our own civilization and perhaps (artificial?) life entirely devoted to intelligence will be dominant.

* "Evolution towards intelligence" can be a "thing" even if this only occurs to a small minority of species. This is not to say that evolution is a linear progression from primitive to intelligent life; rather, if evolution makes life expand like a tree, and the degree of variation and complexity afforded by this tree is sufficiently large, it could be likely that some of the branches eventually reach intelligence (among myriads of other possible adaptations). This would be sufficient for intelligence to arise with high probability.

* Life is inherently concerned with representing and processing useful information about the environment. The chemical feedback loops that probably made up proto-life would have implicitly encoded information about their chemical environment (and the fundamental chemistry of life still echoes this information). Eventually the incorporation of more complex feedback loops combined with evolution led to the development of complex biomolecules, proper replicators, genetic code, multicellular organisms, nervous systems, brains, the mammalian neocortex, and whatever adaptations enabled human-level intelligence. What we see is a gradual progression through great many improvements towards more sophisticated information processing. It's plausible that a similar progression in information processing complexity occurs with high probability whenever life evolves, although the concrete steps could be radically different. Yes, it took billions of years on earth, but the universe has billions of years to spare and it's massively parallel. Again, there doesn't have to be a linear progression towards intelligence for all life; the conditions just have to be favorable for intelligence to occur as a particular adaptive niche in sufficiently complex ecosystems.

Of course, we can't really say much since we don't know what the actual probabilities given that we only have a sample size of n=1 for life and realistic experiments or simulations are far beyond our current capacity.
> But if you need to have the malicious DNS server connected as a requirement, aren't you already owned?

DNS replies can be modified by anyone in the network path, so it is far more than just compromised DNS server.

> The DNS server can tell you the bank's hostname is a malicious IP, and then you can both steal credentials, or MITM.

All banks use HTTPS for their websites. A malicious IP is no t enough, unless it also has a forged certificate for the domain.
I went from 260 to 160 and I my body looked way better at 160 than it did at 260 so ymmv...
This is pretty handy still. Sometimes I just want to grab an object and map it’s children’s properties into a debug friendly format for output.

Nice work
Deleted that puppy 5 years ago when the info from Snowden came out. SMS is amazing and anyone with a cell phone can potentially use it, even if they don't know that it still exists.

Group SMS is some next-level shit and my friends still talk to me, I swear. It's cool, I don't have to rub my life in their face with life event posts before I talk to them. When I talk to them, I get to catch up with their life and build a relationship like normal humans used to do.
You're both right, there is a values mismatch here. The reason we need optimizing compilers to target modern CPUs is because the hardware architecture is so complicated. The root cause of the complexity is less essential concerns and more an artifact of the history of how things unfolded, compounded by the difficulty of disrupting the current local maximas that we're stuck in.
Yes, and one of the things that makes me sad is when the screen delays to update. When you touch on the screen to add a food, it goes to a blog post (the slow UI update make you do mistake several times each use). I wish to have time to develop a better app, but I already busy with another. There is a big opportunity for solving this problem.

PS: I reported the bugs but I always was ignored, even being a paid user.
Didn't know that thank you! I guess it should be more compact though. Sending multiple complete queries would almost certainly need TCP, not sure the browsers would like that. Then again I think we're getting to the point where DNS should now be considered a mostly TCP protocol.
Trends in design of ransomware viruses
I once made a radio adblocker for streams hosted on http://radioplayer.co.uk/ to be run in a terminal. There is also code to increase/decrease the volume on a Mac. It's not perfect but was a fun little project.

For some reason, the data and audio are out of sync but once calibrated it works quite well.

https://bitbucket.org/timwiffen89/radio_adblocker/src/master...
Note that TFA did not exercise (much), instead they used numbers tracking as motivators, think RPG min/maxing. It also works great with laziness and procrastination because all it requires is tracking and optimising a counter or two.
Downloaded the app, immediately deleted it because it asked me to create an account.

Are there any similar apps which store the data locally?
Illegal alien kids are unhappy having to recite the Pledge of Allegiance
That is not bad after all, I am not bashing oxy, haven't studied it yet, but don't forget that the dependencies could be using more, and there is a fair few of them[0].

https://github.com/oxy-secure/oxy/blob/571ef12199f8b0f3eca55...
I'm not a security expert, so could one of the security experts who frequent HN weigh in on this? Otherwise this looks super cool.
This is a reddit comment from /r/Programming is it not?
Sure, but doesn't have a person more muscle, when they have more weight to carry?
It does not appear to be a "guy".
The fun here is that the app gave me more pain than changing my eating habits.
Book Review: The Captured Economy
>"A 200lb person running will burn about 150kcal/mile, which is a single can of soda, a third of a donut, 1.5 apples, 2 eggs, or 1.5 slices of bread."

The error is to think that 1 mile is a long distance. That takes like 7-20 minutes.
I used udev to run the script as soon as the drive is mounted. The tricky part was ensuring the drive would mount automatically when inserted, even if I wasn't logged in. I tried a range of different tools, and eventually settled on autofs.
I assume that most senior developers in the team had to learn all the components used and how they work,
you can use npm without knowing what package.json is but you will have to learn the details eventually, if you use gulp you will have to learn how to edit the gulp file when you need to do a specific task,l you probably had to learn what source files are and how to set them up and others.
If you do not know this eventually you will have to learn them.

Other platforms have similar magic, like Visual Studio hides complexity from you but on complex projects or weird issues you will have to learn how it works under the hood(compiler, linker , compiler flags, you may want to drop the GUI for building and use the CLI for flexibility)
> In order to design a really secure system, wouldn't you first have to know what "secure" is?

Indeed. For this one loves to build mathematical models, formulate security properties, make proofs, think deeply about the limits of the formulated models (e.g. tempest attacks, cache timings etc. which might introduce side channels) etc.

Finding exploits is quite a different job: Here you very often have lots of legacy systems which have an architecture that is hard to make secure. To give an example: A parser for a very complicated and ill-specified file format where mistakes can easily lead to catastrophes (for example because the format allows to embed "executable scripts" that are run in a JIT-based virtual machine). So you look for loopholes in an often badly designed or at least complex and thus error-prone system and think about how you can exploit these mistakes in a clever way.

I am very sure that both can be very exciting jobs, but they are in my opinion quite different in nature.

> If I am an expert an building impenetrable servers, then I must know how to penetrate servers since I've added patches to block all known attacks. How could I do that without first being a hacker?

I think the essential difference is that if you are an expert in building impenetrable servers, you simply avoid lots of design decisions that are prone to security problems (to stay in my explanation above: these also typically have the property that they can be specified rather well formally). On the other hand, if you want to penetrate servers, you need creativity to turn "suspicious looking design decisions/oversights" into working exploits.

So being an expert in building impenetrable servers will not make you good in penetrating servers: Knowing what design decisions are hard to keep in control security-wise does not (necessarily) give you the knowledge about how to concretely exploit them. On the other hand: Having a strong creativity for how one can in practice exploit oversights does not (necessarily) make you a good engineer for systems that are hard to exploit.
There's no implication here to interpret here, the commentator did directly compare the two systems. Here's a quote from the comment:

> Nintendo delivers 80% of the experience
My mum did run a B&B, in Italy, on the sea.

Me and my sister do live in different cities. She was quite old, but did not want any help from strangers. She did refuse to use a computer keyboard, since she hated informatization, and her sight was short.

So I did automate a system for her to scan the guests documents, detect the data required by local police for registration via OCR, fill up the form to send those data, and update the web site availability database table. The computer, when powered up, did only show instructions in big text, high contrast instructions, which where repeated by TTS (essentially "please feed the documents in the scanner", "please remove the documents from the scanner").

At the end she got used to using it, and she was quite proud being able to be so independent, since the last days of her lovely life.
When I dropped my toes into game Dev, one thing that really bothered me was that you had to use the GUI tools for lots of stuff. I wanted to do everything programmatically and just use Unity3D's GUI as a test/viz environment. But in trying to do that I really ran into a wall where everything felt second class to using the GUI.

I dunno... I just can't come to trust the magical files generated by drag and dropping a scene together.
I wonder if we will ever see support for white-hat botters. I imagine the game publisher/creator would have a separate server which you could request access to. It could have a bug bounty type system where if your account/bot is able to fool the system you will be rewarded for explaining how you did it. I think there are a lot of gamers that would spend time on this so they don't have to put up with so many bots.
It was invented at [Caltech](http://www.feynmanlectures.caltech.edu/).
Counting calories in/out is a way to lose weight that works for a lot of people. It also works well in clinical & research settings, where control mechanisms are strong. That said:

"The only thing you really need to know is that you should be eating fewer calories than your body burns everyday. If you do this, you will lose weight – it’s science. Nothing else matters for weight loss"

This may be one of the most harmful statements about diet. It's mostly true, but in a fairly banal sense. A baby will have a caloric surpluss as it grow. So will a potato. Without the calories, growth will stunt. This is the trivial fact.

The growth trajectory of a potato or baby is not trivially determined by caloric surplusses. One big factor is genetics, which tell babies and potatoes to grow. There are environmental factors, many of which are calorie related.

"This is a scientific fact" is in the context it's used, an empty tautology. Caloric surplusses can be used in exactly the same way to "explain" why an elephant is bigger than a mouse, why there are 6 billion people on the planet, how a bodybuilder got his biceps or why you got fat. This makes it a nonexplanation.

A less abstract hint that we're dealing with a nonexplanation is apples. Add one apple a day to your diet, and calorie counting will tell you that amounts to 5kg fat per year.

We know from experience that people do not gain/lose 10 lbs per year by adding an apple a day to their diet. Your apetite or metabolism (these are related) will compensate for the apple.

That doesn't mean that intentional caloric restriction isn't a good method. It works well for some. Other things work well for others. We don't have perfect knowledge about what works "in the wild" or even in the lab.
Hm, I don't quite understand, if I have multiple A records, is it still a single point of failure? Could you clarify the difference between having a bunch of SRV records and a bunch of A records here?
If she's eating 1000 kcal a day then she probably isn't overweight so wouldn't need to cut down further.
I agree, but I so feel like this comment is suggesting that Facebook isn't using most of these. To me, they all seem to be clear areas of interest or even correspond to features and ad placement that I've observed. Guessing whether people are single, for instance - we'd be naive to not know that FB does that.

Also worth noting that even if they don't themselves derive certain conclusions from our data or use that conclusion, it doesn't mean another party does not. For instance, a user's sleep/wake cycle could be determined by others from the data FB collects and shares with them.
That is absolutely correct. However the problem is that human's body needs energy to run - think, work, feel emotions. So if you can imagine someone on the bed 24/hrs a day, then indeed a simple calorie reduction will help. Because calories will be used for simple body functions, and not anything else. Restricting calorie intake for someone who has to go to work daily, work, live a life, will not work beyond certain limit, which actually allows to live that life.
Time to re-read Feynman's books. It's been a long time.
>Well how does rsync work, then? rsync relies on executing a non-ssh helper program on the remote.

And that's a bad idea why?
You may not lose weight healthily if your deficit makes consuming proper nutrients impossible.

The body can adjust its usage of calories way down in the event of a perceived famine, making the amount of calories consumed no longer contain a deficit.

The RMR can change during a diet as both fat and muscle require maintenance, and you nearly always lose both during a period of deficit. This can make maintaining a significant deficit very difficult

Finally, there is evidence that people who have lost significant weight have a reduced metabolic weight (and hunger for more calories) even five years after they completed their dieting. This may explain why the failure rate of people >100 lbs overweight losing and maintaining is nearly 95%
Ok, this is true, but what happens is the calories burned part changes dramatically based on hormones. And hormones change quite a bit as you age and or gain weight, and not in favor of weight loss.

The hormone mix basically tells your body to store some percentage of calories in as fat. When young and/or fit, this percentage is low. Calories above your burn rate are stored as glycogen in your muscles, giving you usable energy stores that will be used when you exercise.

When older or fat or both, calories above your burn rate go to fat cells waiting to fill back up. As the weight packs on, the percentage increases and more and more of the calories you consume are going to fat instead of being burned. Your caloric burn alotment goes down. You lose muscle density. Testosterone goes down, and the percentage of calories dedicated to fat stores climbs.

So it is still true, calories in < calories out to lose weight. But perhaps it would be better to say “calories in < (calories out + calories stored)”

Where calories stored will vary and for fat people it’s much higher than fit.

A fat man can eat the same food and calories as a fit person who does not exercise, and gain weight and feel tired while the fit person feels an energy boost.
Thanks, but that doesn't answer the question. It's showing percentages, not absolute numbers.
If you're struggling to start, there's a couple of things that might help.

1 - Arrange a regular workout with friends / a personal trainer. Once you're in the habit of exercising regularly, it gets much easier. And putting it off becomes harder thanks to someone else expecting you to turn up.

2 - Take something you really like (food, movies, etc.) and commit to yourself that you'll only do that thing after you've exercised to make it more appealing.
I really like the site as it currently is. I've been considering converting my own website, which has CSS but I've still gotten readability complaints about (usually I'm the one complaining), to such a plain format.
Had exact same thought. "Based on what we know (which is not enough), I can say with greater confidence" ^^ oh really?
Zeratool: Automatic Exploit Generation (AEG) for CTFs
Also, shame on you for imposing empathy as a social norm!

https://psychcentral.com/lib/neuroscience-sheds-light-on-why...
Yep. As I said:
> ... you will keep the muscle you need in your regular physical activity level
https://crashstats.nhtsa.dot.gov/Api/Public/ViewPublication/...

"Motor vehicle crash fatalities were higher for males
than females in all age groups, while the male population
is equal to or less than the female population
in all age groups."

Particularly in the 21-30 age group, males had 3x the fatalities of females.
Apple reportedly working on noise-canceling AirPods for 2019 release
> .. but you probably still don't want your machine to be remotely exploitable by other players

Right. These kind of vulnerabilities are more along the lines of IF an attacker is able to do arbitrary code execution in my first person shooter, by giving it some crafted netcode packages in a multiplayer game - could he then also read my credit card data from my web browser process through a side channel?

And I'm willing to say that - yes - I accept that he can, or at least I'd rather that be possible than sacrifice performance. I realize that any process I run in windows is vulnerable to spying by any other process. Seen that way, the defense has to be against remote code execution, not against cross-process memory reads.

One example of this cross process weakness in windows: once he runs arbitrary code he can just take a screenshot of any other program anyway, including the window with my credit card details in it!
Even high-intensity exercise burns very little energy in the grand scheme of things. The value of exercise for weight loss is building muscle mass which increases BMR.
I didn't say they do that. Just that it's one of the ways to avoid a single, targeted mitm. There are many other approaches and cab baseline requirements (3.2.2.4.) are not very specific on what's specifically expected.
He didn't say that! It gets harder to maintain that deficit because your metabolism will start to conserve energy, your body gets colder and sleepy and therefore uses less energy. At least if the deficit is chosen too high.