skysight-inc/HackerNews huggingface dataset:
Do you object to the Good Friday Agreement? Because its fundamental principle is that the constitional status of Northern Ireland was a matter for the people of Northern Ireland alone.

If the vast majority of people in NI are happy to be part of the EU customs zone and allowing them their wish (in the spirit of the Good Friday Agreement) also allows brexiteers to turn the rest of the UK into a Singapore (Reece-Mogg) or a Venezuala (Corbyn) as they see fit without any encumberance from the EU, then what's the problem?

I just don't get it. A year ago, some of the leading voices of the Brexit movement were advocating special customs zones to be set up around the UK, once free for EU competition rules. There were news stories with brexiteers advocating a Tyneside Customs zone, for example. Why is it fine for Tyneside to be have a separate customs zone to the rest of the UK but not Northern Ireland?
We had applications back in the 1990s. I know, it seems unfathomable now but applications preceded the App Store.
Things Apple Isn’t Doing
Announcing Knative v0.3 Release
Not much at all. In fact, since the tiles are only generated once, they could stick a CDN in front and never have to worry about anything but data transfer costs afterwards.
Turns out, low churn and high margin companies are worth a ton! Especially with low interest rates and a public equities market that shouldn't return more than 4% real over the next few decades. Not a lot of other places to put your capital.

What margins qualify as "high?" I have a SaaS offering I'm working on, and I was going to charge as a multiple of my compute and network costs. Is 85.7% "high" for SaaS? Or is that meh?
Amazing what a company can do when they ignore regulations and simply extract wealth out of our communities. 80% of their profit comes from huge corporate listings yet they advertise themselves as a "home-sharing" site. Nonsense.
Airbnb's defense is that they'll be offering alternatives to hotels (in both business travel and as cheaper vacation options).
I've known you (from your posts at comp.lang.lisp) to be eager to present the facts as you see them and thorough in your argumentation. What is it about Urbit/Yarvin that merits this sort of post?
That sort of assumes that the UK is all hunky dory after it leaves. If it gets slammed with an immediate recession/raising unemployment/etc... then that's leverage the EU has to convince other members to stay.
Good thing they are junk. It'd be terrible if it was a talented artist's work.
This reply is tragicomically ironic :(

See it like this:

The bug is in the verification of the host, not the user. Eve can intercept a connection from Alice to Bob. It can "pretend" to be Bob, but it can't MITM (aka "proxy") because it won't be able to auth with Bob. However, auth depends on the server encrypting a message with Alice's public key, which everyone has ( https://github.com/torvalds.keys !), including Eve, so Alice will connect to Eve. Really this is nothing different from just connecting to a fresh host: you upload your public key to the remote ~/.ssh/authorized_keys somehow, and voila, right? How does your ssh client know that was the same server? The fingerprint. Did you check it? No.

Check out this article:

> The more well-discussed use of asymmetrical encryption with SSH comes from SSH key-based authentication. SSH key pairs can be used to authenticate a client to a server. The client creates a key pair and then uploads the public key to any remote server it wishes to access. This is placed in a file called authorized_keys within the ~/.ssh directory in the user account's home directory on the remote server.

> After the symmetrical encryption is established to secure communications between the server and client, the client must authenticate to be allowed access. The server can use the public key in this file to encrypt a challenge message to the client. If the client can prove that it was able to decrypt this message, it has demonstrated that it owns the associated private key. The server then can set up the environment for the client.

- https://www.digitalocean.com/community/tutorials/understandi...

As you can see, ssh public key auth authenticates the user, not the host. anyone could be that host.

Now: you as a human will quickly notice "where is my homedir? wait a second... this is not Bob—This is Eve!" the question is: quickly enough? If you were using scp: no, look at TFA. If you were connecting to github for the first time using git, perhaps using homebrew on a fresh machine: now you'll definitely never know. If you had set up your ssh key agent to forward keys to your "trusted" Bob host: serious trouble. There are loads of reasons why intercepting an SSH connection is a dramatic bug, even without being able to MITM it.

Or just try and turn it around: why do you think SSH prompts you to confirm the host key fingerprint, if it doesn't matter? For fun? They didn't add that as a joke.

Alas, few people understand this, as you so elegantly demonstrated :/
Software can absolutely be proved bug free. By being proved. Software can not be proved bug-free by tests (and even that assertion is not completely true, you can prove software through exhaustive testing if it's very very simple).
Shellcheck is awesome! Been using it for about a month and it’s great to understand certain behaviour in the script, even if I don’t end up fixing every single warning.
Can anyone here speak to AirBnb's continued growth. Rumors say it's plateaued and even public articles suggest the same
https://skift.com/2018/11/14/airbnbs-growth-is-slowing-amid-...
Coffee contains water. If water is harmful, coffee will be just as harmful unless it has protective effects.

In any case, you can't say they "established that drinking water damages DNA" and then go on to argue that they should establish it with another study about water.
In a world where everyone consumes as much energy as the average Californian, the average wealth everywhere will be decently high.
Super skeptical here, or at least the wording is misleading as hell.

> The product allows users to charge a 60kWh EV battery pack with 119 miles of range in 15 minutes as compared to 15 miles in 15 minutes today.

> The technology works with off-the-shelf lithium ion batteries and existing fast charge infrastructure by integrating via a patented self-contained adapter on a car charge port

First read says that they're delivering 60kWh in 15min, or they're pumping electrons at 240kW. This is just nonsense -- most deployed DC fast chargers are 50kW... the charger companies and the OEMs are experimenting with 200kW chargers, but those are liquid cooled. So physics says this is nonsense.

Okay, so second read: the 60 kWh is distracting technobabble, and what they're ACTUALLY doing is "adding 119 miles of range in 15 minutes."

The just-announced Nissan Leaf e+ has a 62 kWh battery with 226 miles of range. When you DC Fast Charge, going from 0-80% takes about as much time as going from 80-100% (EV roadtripping is about doing frequent small charging because of this phenomenon, not one-time top-offs like with gas).

The Nissan Leaf e+ is about a 60 kWh battery, and if they're adding "119 miles of range in 15 minutes", that's about half the Leaf's 226 mi range, so call it "30 kWh of charge in 15 min". That means they're charging at an average of 120kW. Okay, now we're back within the realm of physics.

Note the Leaf e+'s (yet unreleased hardware) still only accepts a maximum of 100kW DC fast charging. I think jaguar has experimented with 150kW charging on the ipace (but again, liquid cooled cables).

So they're saying they found a way to cycle fast charging and get about a 20% improvement in average charging rate from the current kinda-top-of-the-line tech, and only for the first 50% battery capacity.

Not nothing, but hardly "as quickly as visiting the pump", especially since whatever tricks they use likely won't continue for the next 50% of the battery.
Like how in jargon.txt they used 69 as an example of a big number:

"69 adj. Large quantity. Usage: Exclusive to MIT-AI. "Go away, I have 69 things to do to DDT before worrying about fixing the bug in the phase of the moon output routine..." (Note: Actually, any number less than 100 but large enough to have no obvious magic properties will be recognized as a "large number". There is no denying that "69" is the local favorite. I don't know whether its origins are related to the obscene interpretation, but I do know that 69 decimal = 105 octal, and 69 hexadecimal = 105 decimal, which is a nice property. - GLS)"
0. run shellcheck and fix all the warnings

Using shellcheck will give the developer more confidence in their code, and also learn through the feedback it gives
Does it matter? The EU chose to tie them together into the Single Market. Freedom of labor movement was meant to put give people the same rights as capital. Giving people fewer rights than capital seemed like a bad idea at the time, so it was all tied together.

Maybe those should be uncoupled, but the EU isn't about to do it to stop a member state from leaving.
They've started exploring helping people add ADUs and will almost certainly investigate how they can continue to increase their supply. That said, on the high end, they absolutely can continue to increase prices, and that's probably a much stronger lever than most think.
This might all be true, but is there ever going to be a point where we assume positive intent? We shouldn’t be inferring deep-seeded psychological attributes in every day communication. It’s super likely that nothing at all was meant by using the clinical term.
Worth reading even for those who already read the NYT review, as it nicely explains the timeline of how we got into this situation.

Fully agree that Google and Facebook are mainly to blame. As an example, Google's success in surveillance and pacifying critics through open source trinkets almost definitely convinced Microsoft to try its hand at the same game. And now the two biggest operating system developers are spying on their so-called customers.
Study identifies a new way by which the human brain marks time
At the time, there was uncertainty about the root cause, but yes, I think it's been traced back to a set of specific CSPRNGs.

You do not need to give urandom a kick of any kind; once the KRNG is seeded, urandom will for all intents and purposes perpetually feed you secure random bytes. It's likely your distro already goes through some effort to make sure urandom is seeded by the time you start up a shell.
An unforeseen issue with probabilistic assessments is the model of the probability space is probably inaccurate.

For example, Nassim Taleb has an argument of IQ being a single-dimentional assessment to a multi-dimensional domain.

I think it's more practical to have a possibility space (where unknown unknowns is a possibility). This removes the need to assess probabilities (which will probably be incorrect) while having being able to per-mutate through the list of possibilities. One can also do logical deductions, based on the possibility space, to assess possible strategies to explore/solve the issues at hand.
I have been working through the examples and exercises in Paradigms of Artificial Intelligence Programming by Peter Norvig, the full text is available online, all code discussed in the book is LISP https://github.com/norvig/paip-lisp
> although it does run tiny risk of being trivial to mess with if a malicious client wanted to skew numbers.

I don't doubt it will happen if this becomes well-known. Activism takes many forms.
Cern plans even larger hadron collider for physics search
In the case of my friends, I'm sitting at the pump or standing in the store texting my friends. In the case of my wife, I'm waiting for her to get out of the restroom.
Yes; extension methods just operate over the public interface
Personally I use OpenDNS for years. I wonder why it's not mentioned there.
Capitalism has always been a corrupt race to the bottom. It requires growth, so once the ethical ways to make money are optimized, the only way to grow is to become unethical or create new markets that are ethical. Guess which one is about a thousand times easier? It's not the ethical route. I truly believe the only way to go from here is to socialize an idea in business that we don't want growth as our top success metric.
That can be true at the same time that "winning markets like South Lake Tahoe aren't the markets most critical to their growth" is true.
> When it's couched in how to deliver software updated, it becomes your problem as well.

I honestly don't see how. If/when I'm ready to take an update, I can come get it myself. If they want to charge me (or charge me more) for it, then they can do so at that time. No tracking needed except for that associated with payment.

> Adding an additional system that allows better tracking of the useful information without increasing the personally identifying features of IP based tracking (which still exists) is laudable, in my eyes.

Not as laudable as not engaging in tracking in the first place. However, I don't see how this doesn't increase personally identifying features. On the contrary, it's adding one: a unique identifier.
The same is true of the right of course. Not everybody there approves of violence, but some do. Some have a long history of violence and harassment, and the president seems to support it.

Part of that, particularly from Trump and his supporters, and probably from Antifa and similar groups, is excessive tribalism. They hate the other side and are eager to hurt them. Trump supporters are certainly quite open about that. Antifa might actually be different. It's also possible they actually believe that violence is necessary in order to stop fascism. But any support they may get from the left is probably pure tribalism again.

Of course there's also another aspect to violence from the right: things like lynchings in the 1950s, harassment of women, violence against Muslims and other minorities. Those stem from pure bigotry and a belief in (usually) white male superiority and a right to punish others if they seem too uppity or seem like a threat. I assume most people on the right abhor this, and yet some of these still happen.
"Serving the people" can itself be interpreted both ways. Say there was a referendum and people voted to eliminate all taxes. Would they still have a duty to carry it out, knowing that it would most certainly lead to national collapse?
My local MP was kind enough to organise a visit of parliament. He mentioned an amusing annecdote. The tradition still is that when the Queen visits parliament, a senior MP is held hostage in Buckingham. He was chosen on one occurence and was waiting in a drawing room of the palace, in the company of a General. To make the conversation, he asked the general "what if something were to happen to her Majesty?". The general smiled and replied "don't worry, it will be very quick".
One thing to consider is that at the point when it becomes difficult to do everything on your own, family or caregivers or whoever is helping you need to understand whatever devices you're using and help you use them. Maybe privacy becomes impractical and other considerations like good record keeping become more important.
I noticed that they very assiduously avoided the whole "Working software over comprehensive documentation" angle and didn't say anything crazy like "maybe CDRLs of stupendous quantity and length due at regular intervals to the DoD might negatively impact development."
Glad they caught the bug before the fork instead of after.
>extract wealth out of communities

Yeah, you don’t have an axe to grind here, I’m sure.
Auto insurance is risk management, not investing. Auto insurance doesn't expire. OP can keep being wrong for years, buying options over and over until they're no longer liquid. I guess you can do that with any stock. The market already prices that in (implied volatility as I mentioned).

The point is, you don't use options for investment decisions where you don't know the timing of when you'll be right, unless you're hedging another investment.
For me the killer feature that makes me choose Apple Maps is “turn-by-turn” directions for Transit, including the information which exit is the best one to get to my destination.
> If there's always another vote, no vote needs to be implemented. What's the point of voting then?

Most democracies have regular periods where you vote. Are you suggesting that since there will be a new US Presidential election in 2020 that Trump is now no longer legitimate? How would that circumstance be any different that a referdendum?

Voting isn't wrong.

What is the implication of you trying to tie the institution of democracy to childhood antics? Are you suggesting that a vote is no different that chance? That the opinion's of people that change are no longer legitimate?
It was passed before the end of last year when the two Houses and the presidency were in the same party's hand. It would be much harder this year.
If you have no idea how it actually works, then free not to say anything.
The problem is that literally nobody wants May's job right now. Given the shit sandwich she has to work with she's doing the best she can, but the best they can do is make a terrible situation slightly less terrible.
At some point I hope companies like Google/Amazon/Apple will allow us to initiate the conversation with their devices using additional "safe" keywords like "help" or "emergency" or "I'm lost". That would improve their value for emergencies a lot, since injured people don't need to be senile to be befuddled or verbally incapacitated.

There are numerous products available now (like "Life Alert", but cheaper), where the user simply presses a button on a pendant around their neck, and a human voice asks "Hi, this is company X. How can I help you?". The summoner can then converse verbally with the agent and request help or contact someone on your behalf.

Though I think most such devices/services don't yet know your physical location, it seems likely that more of them will do so soon, as well as add supplementary features like the ability to route the summoner's call and location to a caregiver's phone or computer.

Using such a device is almost effortless, which I think is essential for someone who's confused and afraid or injured.
Another group did a talk on this at DEF CON 26 last year:
https://research.kudelskisecurity.com/2018/08/16/breaking-an...

They analyzed over 340 million keys from the web.

> As part of the presentation given at DEF CON 26, one of the outputs was Kudelski Security’s Keylookup application. On this site, you can submit your own public keys and have them tested against our dataset. We will let you know if your key is vulnerable to Batch GCD and ROCA attacks. If your key is in our database, we will be able to give you an answer immediately, if it is not, you may have to wait a bit until the tests complete.

> https://keylookup.kudelskisecurity.com/
Don’t let the food processing companies derail that discussion. Decreasing portion size will just make people buy two. If anything should be regulated it would be the ingredients allowed in things that are called meals. Specifically sugar.
> Most brexiters I know admit that a hard brexit would be bad economically.

They are doing it now, because they can't contradict obvious truth. Before they were hyping how good it would be, to brainwash the masses, knowing full well it won't be good.
The way May approached negotiations with the EU was from a position of weakness and was doomed to fail. I wonder how much of her approach was a result of political constraints or how much of it was a result of incompetence or deliberate sabotage by her or the bureaucracy.

1) She should have made deals or conditional deals with other trading partners before submitting Article 50. This way she would have had a good BATNA option in the case negotiation with the EU failed. The EU may have been more reasonable if they realised the UK had less to lose from a failed negotiation. Of course there were problems with this approach. Firstly, it might not have been politically possible for her to delay submitting Article 50. Secondly, if you are in the EU you are not meant to negotiate trade deals with other countries. However, there is no reason for the EU to find out and I guess more importantly the EU has no real way to credibly punish the UK for that action if the UK alternative was just to submit Article 50 straight away.

2) She should have tried to get assurances from other countries in the Council to negotiate good trading terms before submitting Article 50. Yes. This is not how the EU works and the Commission is probably more likely to act in a way that hurts EU citizens but benefits the EU as an institution and unfortunately they are the ones in control of the text of such agreements. But if there was strong pressure from the Council then the Commission would look bad if they scuttled a free trade deal that looked to benefit all parties.

Free trade is meant to be good for both parties [There seems to be strong consensus from economists on this point!]. So assuming both parties are acting in good faith with their citizens welfare as a priority then surely the outcome of negotiations should be a good trade deal.
Ah, sure. What I'm trying to get at is discovering those inputs is the real trick. Comments elsewhere in this thread about exhaustive testing do a better job of getting at the same idea.
.onion addresses point to hidden services, and I was under the impression that the "dark web" usually just refers to these hidden services. So what other alternatives exist besides "Tor" and associated .onion addresses to access the dark web if its not hidden services?
I wanted to try the first one but did not feel comfortable entering a phone number (it seemed counterproductive and kind of ironic).

As for the second link, it turned up nothing for me. I’m not sure if that says more about my online habits or the websites service. I would the former.
Remember the Tesla insider that leaked a bunch of firmware and system details?

https://twitter.com/atomicthumbs/status/1032939652393521156

If it's to believed, the charge rate limit from a Supercharger is already maxed out -- they're pushing energy into the battery as fast as the charger can supply it (and taking some safety risks in the process).

This same company has been around for a few years with spurious claims about improving laptop battery life with their AI algorithms. So far nobody has seen evidence that it works, and nobody is lining up to buy them.
But the current main issue isn't even strictly about money, but the border between the Republic of Ireland and Northern Ireland.

It is not only an economic question, on which a compromise could probably be found, but one with hundreds of years of political, religious and cultural baggage.
This is a straight up lie right?

My car (2017 Honda Accord) has a 500+ mile range on a tank of gas. It'd take over an hour to charge to 500 miles.

Even at 15 minutes that's a lie. It takes no more than 2-3 minutes of actual pumping to fill my 500+ mile tank of gas.
Maybe people who can't afford a $1000 ticket for speeding in a construction zone shouldn't speed in a construction zone?

One of the reasons states increase fines regressively is because the targeted acts are committed most frequently by those at the lower end of the income spectrum, and existing fine amounts were insufficient to deter such activity.
I wish they could have continued without it. Issuance reduction was really important, we've had too much selling pressure for too long. It might have eased it.
They also make a lot of money in China where betraying their users privacy was required to enter. And that was almost the same week then their CEO, Tim Cook, told on camera that privacy is "fundamental human right". I guess he doesn't consider Chinese people human.
If you're interested in chord generation, I've used Cthulu[0] by Xfer records to experiment with chord progressions quickly.

[0] https://xferrecords.com/products/cthulhu