skysight-inc/HackerNews huggingface dataset:
Shamir’s Secret Sharing is one of my favorite algorithm names. It sounds straight out of a D&D wizard spell list. Especially when you interpret it as ”sharing in secret” instead of ”sharing a secret”.
No...?

But then, if i'm on the computer i'm coding or doing something productive.

I don't read the news and I don't have facebook.

I'm i'm not "doing something" - i.e something that requires thinking, i'm out and about and exploring.

I don't watch tv either...i'm probably more sociable than most people to be fair...

I get depressed and demotivated...and stop learning if I don't get enough stimulation...
Thats very un American and the reason nobody liked the guy and his presidency failed. Humility, thoughtfulness, introspection. Look at who replaced him in 1980. As POTUS you have to look good in front of a oversized American flag.
Exactly, especially if they get most of the weight material for free or even get paid to take it.
It certainly is. I can't possibly fathom what goes on people's minds that leads them to think Twitter is a great platform for information sharing.

It makes me sad that humanity gave up blogging for tweeting. I can't think of a more unsuitable platform for making this kind of posts: it limits the number of characters, the UI is awful for continuity of posts, the webpage is really heavy since it loads much more content than the post itself and the platform treats unregistered users as if they didn't deserve to read the content.
well i lived there for years, honestly i don't have problem to eat with chopsticks, after all i think i am better with them than my wife who used them since birth, but spoon is quite usual item in any restaurant, forks maybe not that common though when i need them for visitors that always had them

after all you think all those instant noodles sold in shops are eaten with chopsticks instead folding fork which it's in package? it's not like fork it's some strange concept for Chinese. every Chinese eat instant noodles more or less, majority of them eat them often with fork (when on train or traveling elsewhere)

but yeah all dishes from food delivery are accompanied by cheap short bamboo chopsticks
Openssh User Enumeration Exploit
Hi, I wrote a tool in c++ to exploit the issue explained here:

http://seclists.org/oss-sec/2018/q3/124

you can find it here:

https://github.com/gbonacini/opensshenum

Any feedback is welcome !

G.
And here's [1] Stephen Hill's list of links for 2018:

[1] http://blog.selfshadow.com/2018/08/16/siggraph-2018-links/
Thanks for sharing. This is helpful info.

If a tower crane did not need to be transported, how much would the design change? I’m guessing not much, but curious.

I was imagining there would be no counterweight but just opposing loads, then I realized that might be a safety hazard. But, I really don’t know about these things.

I just love the elegance of this solution and immediately obsessed. I think it just ruined my productivity for the day.
But skyscrapers are built in economically beneficial areas, whereas you can build this thing anywhere.
I’m pretty sure we’re not. They can work very well together as long as they all see each other as competent.
Mistakes: if it’s a server used by a small number of security conscious admins, it’s moot. If it’s used by a lot of people, however, the odds go up dramatically that someone will have a weak password, one which is on a common list, or reused on a site which you’re just about to learn was breached.

Keys can be leaked but since it involves copying files and users aren’t penalized for using strong ones it’s much less common.
At some point in time, there was a middle ground between those two extremes: Wordpress, Blogspot and so on.
I walk 50 minutes a day to work and back and live in relatively sunny Greece. Didn't stop me from developing a deficiency.
I can understand the reasoning. However, that ruling does not apply to the US.

It’s something of a cultural identity issue in the US. Mocking religious beliefs in the abstract is often acceptable, but mocking specific people is far less so.
Getting the casualty out ASAP isn't always the priority, particularly if they have a potential spinal injury. Getting them into a controlled and survivable position is paramount.

Usually only if they are unresponsive and not breathing are they extracted immediately regardless of risk or further injury.

Source: NPLQ training
It took 1.5 year to upgrade GitHub to Rails 5.2.1
As the author presents it, it seems to me difficult to discover the idea of "partially clearing denomninators"; but notice that we can still clear all denominators—we just have to be lazy about what we do next. (This is one of the things that I have trouble convincing my calculus students to do; I'll frequently see them encounter a product of two binomials, reflexively multiply them together, and then spend time factoring them to find the roots of the product.)

Anyway, if we clear denominators in the author's example, then we get:

7x + 2 = A(x - 1)(x + 2) + B(x - 1) + C(x + 2)^2.

As long as we don't multiply and re-group as instinct may suggest, we can plug in `x = 1` just as easily as the author describes:

9 = 0 + 0 + 9C.

As he suggests, we can also plug in `x = -2` (and now it's maybe less mysterious why this is still OK) to get

-12 = -3B

; and then we can proceed as the author does, subtracting off the B term and factoring out `(x + 2)` from what's left, or (which is substantially the same procedure) we can differentiate:

7 = A(x - 1) + B + 2C(x + 2) => 7 = -3A + B.

(The differentiation would look more complicated if we had more terms, but notice that we don't actually need to know that the derivative of `C(x + 2)^2` is `2C(x + 2)`, only that the derivative of any polynomial divisible by `(x + 2)^2` is divisible by `(x + 2)`, and so vanishes at `x = -2`.)
Mp3 algorithm, Spotify, Opera Browser, Vivaldi Browser, BMW, Audi, Opel, Mercedes...
> I mean, Brazil and other countries are pursuing "cyber-sovereignty". The EU's GDPR is fundamentally that.

To a certain extent, but if the EU really wanted cyber-sovereignty it would:

1. make sure all chips used in electronics sold in the EU are designed and manufactured there, by European-owned companies. This prevents a backdoor being put in them.

2. make sure all operating systems used in the EU are written there, also to prevent backdoors. The obvious way to do this would be to make it open source and based on Linux.

3. make sure all social media popular in the EU is run on servers based in the EU, and run by companies owned and run in the EU. This is to prevent outside actors from manipulating public opinion or from building up kompromat on individuals.

4. make sure all internet-based data services (e.g. Google Maps API) are run on servers based in the EU by companies owned and run in the EU. This is to prevent outside actors from pulling the plug on them or jacking up prices.
Timing, luck, and connections. I decided it was time to look for a new job, and that evening I went to Craigslist, just to see what jobs were listed there. I had never looked at them before, and didn't have much hope, but one of the ads was for exactly what I wanted, working at a company that I built part of the initial proof of concept for a decade previous, and had done a small consulting job 5 years earlier. I reached out to the CTO via e-mail, he asked if he could take me out to lunch the next day, and 2 days later I was in the office setting up my credentials and fixing some problems in their infrastructure so the CTO could go on vacation the next day. A few weeks later we negotiated the deal and I started my new job.
watch the video, especially the end, the guys around her are literally standing and waves are going to shore, nobody except the actress has any problem just walk to the beach

this video it's hoax or very bad promo
I'm not a mathematician but here is my ELI5 understanding of it based on linked wikipedia article.

If you know the coordinates of any 2 points on a line you can recover the equation for that line.
The same is true for 3 points on a quadratic curve and 4 points on cubic curve, etc.

So if our secret is the number c we can put it in the equation for, say, a quadratic:
ax^2 + bx + c = 0
We can then give any number of people the coordinates for different single points on this curve.

None of these people know the equation but if any 3 of them share their coordinates they can work out the
equation and thus the value of c.
This isn’t a blanket law against everything. Your bar ad for twenty-somethings for example is perfectly fine and exactly what everyone would do.
I've had first-hand experience of something that's been discussed elsewhere: a lack of omega 3 fatty acids and vitamin D3 itself may be associated with heavy sunburns and sun allergy (itchy skin, runny nose etc right as you're out in the sun, and not caused by fragrances or cold air).

I'm not able to look up studies for this right now so I'm just going by my own experience and other anecdotal reports, but it's a kind of circular dependency that intrigues me.
You mean illegal immigrants? I’d be surprised if DHS doesn’t already do this on the border with Maxico.

In a similar spirit there was a recent Ted talk [1] where the guy was enthusiastic about doing image recognition on a global scale from satellite images. He argued it would allow things like tracking every ship in the world.

This surveillance world is coming gradually from every direction, and like a frog, we will wake up in a water which temperature we may not like.

[1] https://www.ted.com/talks/will_marshall_the_mission_to_creat...
Not stopping the overthrow of the Shah (and then admitting him to the United States) may have been a mistake because of the hostage crisis that unfolded and also created geopolitical instability that continues to this day.
Privacy.
In the EU, there's the GDPR with such rights as the right to be forgotten, the right to access and correct any data a company has in you, etc.

In the US, the FCC recently made it possible for ISPs to sell data on browsing behaviour from their clients to anyone that pays.

Neither is perfect, but they are worlds apart in this respect.
I graduated in anthropology. In the last year of the course was doing Erasmus in Brno, Czech Republic with a friend and we both noticed that a forensic software tool used by all forensic anthropologists for biological profiling was really bad. I mean, so bad it was almost divination. Because it's difficult to find a job in anthropology, we decided to create a startup and develop a new better tool. So we learned R, aggregated a lot of human skeletal data (it was so hard because there's a "GDPR for human anatomical data") and even published papers on it. It was a success except that nobody bought it. I mean nobody, they all used our papers and online code to do their own thing. In retrospective we were both idiots with no business sense. So of course it failed hard and had to find a job somewhere else. From there on it was always on LinkedIn: I worked for an environmental consulting company until they fired me and other colleagues because they couldn't pay us; then moved to a Japanese zaibatsu where I lost my mind wrangling spreadsheets for the quarterly reports. It was a lot of work and since this was a nearshoring job the pay was very very low. So I kept my LinkedIn profile as "actively looking for opportunities" and a recruiter for an investment bank contacted me about a position in banking operations. I went to the interview and left in the middle of it since that job consisted in copying and pasting stuff in Excel all day long. A week later she called me back, apologized for wasting my time (!?) and offered a position as project management officer for a team that implements some machine learning stuff and bots across the whole company. No experience in PM at all and with a basic understanding of Python and R so impostor syndrome kicked in really hard but after 6 months here I am, doing just fine. I want this to be my last job, I'm learning more statistics and python so that I can make my own forecasts and trading bots.
Just to add to @borealid's comment: a password that encodes 96+bits of entropy is effectively a shared symmetric key (OK, technically a secret).

Point being - it needs to be managed like a key: it's inconvenient to type, hard to remember, should be stored encrypted at rest, preferably in an hsm.

Gnupg agent/ssh agent and the various key agents for desktops all do this, and generally support hsm as well.

There's also a small difference in the complexity of enumerating the keyspace of rsa/ed2259 vs trying random passwords. With key stretching I'm not sure if there's implicit differences in rate of attempting login.

As for no direct root login via ssh - I think it depends a bit on the server. On a shared system login via regular user +sudo leaves an easier audit trail (who ran "sudo apt-get dist-upgrade" on Friday evening and took the weekend off without checking that production systems didn't crash... Was it "root" or "bob "?).

Then there's the nudge towards only doing what needs root as root (eg: curl/wget stuff as regular user, verify signatures, content - then run as root).

Is it more secure to locally dump and asymmetrically encrypt backups on disk as root - locally, and have a dedicated backup-user that gets the archives? Probably.

In general ssh keys (and certs more so) makes it feasible to split up access and authorization, revoke access etc without relying on something complex like ldap/kerberos for user management.

> Also, if somebody hacked into a non-root administrative account, they can just use sudo to elevate.

If they only have your ssh key, they'd typically need your password to elevate. Or you might require a shared root password - or set a password on wheel and require newgrp wheel before sudo. Not sure if the latter with disabled root account has much benefit, though.
Right

10% would be overkill. I don’t think we should be aiming to sacrifice our livelihoods to be concrete block stacking addicted energy horarders, but I’m not entirely against that either. It’s hard to look at a solution so tangible and transparent as concrete block stacking before ducking my head into this mangled half-commented test suite.
Recently found a command line library written in go that was so useful to me in a python webapp I'm building, I decided to just wrap the go app and call it from a python subprocess. It is a bit slow to do it this way, but premature optimization, and all that. Anyhow, the bottom line is due to this I was forced to get a handle on Go this week so I could at least build the go library and make a few changes as needed. Wow, was I absolutely shocked to find out current package management in this go app is just pulling libraries from master on github. It really made me feel like go is far behind python in maturity. Pulling all these dependency libs from master definitely does not feel production ready. Maybe this will help resolve things.
See No Evil: Transparency in the Supply Chain
For that goal sure. For life, I am sure s/he has moved goalposts like we do :)

I have a reverse question for you though: has this kind of questioning worked out fine for you till now in real life?

An unwanted tip fwiw: it comes across as belittling an achievement (whatever it might be) from a quick glance. You probably don't mean it that way- in which case do look at rewording that into something like 'has it been everything you hoped for' :)
The motivation exists elsewhere. The statement “In Japan, we don’t usually doubt a professor” is also true elsewhere. I don’t usually read any paper with the assumption that data was fabricated (maybe selected, possibly presented in a way to tell the strongest story, but not out-right fake).

So, I still can’t quite put my finger on what is different about the Japanese ecosystem. Perhaps the checks and balances within departments are not as strong?

Outside Japan, a manager or department head seems to have a stronger supervisory role in my limited experience.
I did once hear that part of it is historical. That in some places, many years ago, because photo developing was a much more manual process using more primitive means, and given that pharmacists of the time were used to handling and storing chemicals, and carefully following chemical processes and so on, that there was a natural link between the two. This would be back before the time of posting your film to Snappy Snaps, or there being a centralised photo-developing laboratory with an associated chain of collection huts that simply acted as the interface to the public. Once an association is created - exposed film goes to the pharmacy to be developed - it tends to linger.

However, I've not been able to find any evidence of this. It could just be a just-so story.
OK. I don't like that. I messaged the team about this.
It's very common in UK for pharmacies to print digital photos (and in the past, develop films). German drug stores also have this service.
Just yesterday I was talking with a friend about hard skills of humans and as it appears how it isn't interesting anymore. Maybe this is out of scope of this article. Dan talks about getting the right people around a table to gain some traction, but that's it. Has the thinking about how individuals function in a team or company become out of favour? It feels like we currently just accept that we have some natural talented people person in the frontline that will figure out how to handle individuals. Scrum masters seem to be very helpless with solving conflicts or improving teams apart from random strategies they found in a cool textbook. There seems no serious education. And that leads back to the beginning of the article. Many agile people sell snake oil, scrum masters buy it and try to sell it to someone else.
Shouldn't see it at all.
I don’t mean just the salary: in America the safety net is very poor, medical insurance is an issue, transportation and social services aren’t uniform like they are in Europe; everything is spotty at best.
Ask HN: Atheists of hackernews how do you deal with zealouts.
How should I deal with extremely religious people and their inability and lack of interest in reasoning logically on specific issues, particularly when I am based in a developing country where the average person is extremely religious to the point of insanity, sometimes I just get tired of it all.
You are a very good troll, Sir
My rule of thumb: if you need Redux or the React Context API then your app is too big to be worth writing.
It helps that Shamir as well as making the name alliterative also sounds like the stage name for some early 20th century magician
Kinda working on it. It's not easy though.
Why doesn't it just lift a single extremely large block when electricity surges and then very slowly drops it back down to generate electricity (no need for complex hook-and-release)? The maximum capacity would be determined by the maximum height of the tower along which the block is lifted.

Or why doesn't it just have many medium motors; each permanently attached to a single medium-sized block? Why should the relationships between motors and blocks be one-to-many?

Lots of small concrete blocks, a camera and a hook to latch onto them one at a time sounds overly complicated and error-prone - Not to mention how much precious time would be wasted getting the hook through the holes and then coordinating the lifting so that each block ends up stacked nicely.
What I don't get, why the complicated design to assemble the blocks into stacks? This seems to add a lot of non-essential complexity: Now you need cranes, a hooking/unhooking mechanism (that seems to even require cameras and image recognition!), the ability to move blocks horizontally and lots of computing power to coordinate the whole thing.

Even more, the up-front cost to recover energy is higher because you need to lift the blocks from the stacks before you can drop them.

Why not simply use a fixed hook/rope/motor/generator assembly per concrete block? Or, if there are too many blocks for that, use a hydraulic system? (But then again, what is the advantage of using many small blocks instead of a few large ones?)

Nothing against the company - the idea is awesome - but it seems weird that almost all the advertised innovations are solutions to problems that wouldn't exist without the "put the blocks into stacks" design:

>The innovation in Energy Vault’s plant is not the hardware. Cranes and motors have been around for decades, and companies like ABB and Siemens have optimized them for maximum efficiency. The round-trip efficiency of the system, which is the amount of energy recovered for every unit of energy used to lift the blocks, is about 85%—comparable to lithium-ion batteries which offer upto 90%.

Pedretti’s main work as the chief technology officer has been figuring out how to design software to automate contextually relevant operations, like hooking and unhooking concrete blocks, and to counteract pendulum-like movements during the lifting and lowering of those blocks.

(Not counting the described innovation of finding a new mixture that includes waste and reduces the amount of cement needed.)
Serverless is a buzzword. It's not meant to be logical.
This method may work, but the explanation is nonsense.

We start out with an equation that’s undefined at x = 1. First we multiply both sides by (x - 1), then we evaluate at x = 1. None of that is valid.
I couldn't agree more. I dread the day when my government decides to force my older car off the road because of something about environmental standards and efficiency not being up to modern standards.

It's true that modern standards for the mechanics and driving controls in cars are a significant improvement on what I have. Sadly, modern standards for everything else they bundle in these days seem to be a huge step backwards. I want them about as much as I want a "smart" home and a "smart" phone.

It's sad, because I enjoy playing with new technologies and would love to have the benefits of recent advances and devices, but for me the risks and costs in terms of security, privacy and safety are often too high to use a lot of these things. I'm starting to feel like the older relative we all seem to have who doesn't know how to use a computer...

(Edit: Fortunately, as you demonstrated with the separate navigation box you mentioned, there are often good alternatives right now that have to compete on merit because they're not built-in, which aren't necessarily as owner-hostile. I just fear the day when the number of us willing to pay a little extra and give up a little convenience to maintain that independence will be too small to sustain the market.)
I'm not sure there's a single concept. I teach programming from scratch and I find there's a few inflection points

Point 1: if-else, loops, arrays, pointers. Fizzbuzz is a surprisingly clever exercise which covers all the hard parts.

Point 2: Project management, i.e. to-do lists and Agile. Without it, there's the paralysis of having "too much" to do.

Point 3: OOP.

Point 4: Hacking. The delicate balance between planning and winging it, and getting the best ROI out of technical debt.
Carter succeeded in freeing the Hostages. Carter's negotiations lead to the release of the hostages on the day Reagan was inaugurated.
Iranians were deliberatively delaying the release because Carter was literally the the face of great Satan for them.
I'd go further and say you that, if you're on medication, you shouldn't take any supplements without first checking with your doctor.

With regards to vitamin K, all the versions of the supplement I've seen have a specific warning on the bottle that they're not to be used if you're also taking anticoagulants.
How do you onboard new clients for your digital agency?
We are nimble technology team, mostly working with referral clients. We have been focusing on web & mobile assignments.

We have focused on building client accounts which are sizeable & long-term.

We would like to understand more about how you are on-boarding new clients?