skysight-inc/HackerNews huggingface dataset:
Scenarios where I can tamper with the password database, but not e.g. add a keylogger to your system are of course somewhat limited (although people love to put the database in sync services like Dropbox) Not just the passwords, the bigger data structure should be authenticated. Some possible scenarios:

I can copy the encrypted password to another entry that's easier to compromise: E.g. you might be suspicious of a phishing mail targetting your bank account, but are you paying the same attention to a faked message from a random webforum you use? (Or maybe an attacker can hack said forum a lot easier than your bank)

For a more featureful password manager that has gained a browser plugin that matches on URLs, I can now add an entry for my phishing URL to the password manager.
> Though I have to say that at least in its current form, the ability of Instagram to spread crap is limited

That proved to be untrue:

https://www.nytimes.com/2018/12/18/technology/russian-interf...

https://www.theguardian.com/technology/2018/dec/18/instagram...

> But two new analyses of the Russian online propaganda campaign by the Internet Research Agency reveal that this view of Instagram was as rose-colored as, well, an artistically filtered Instagram post.

> “Instagram was perhaps the most effective platform for the Internet Research Agency,” states the report by New Knowledge, an American cybersecurity firm which analyzed data sets from Facebook, YouTube and Twitter.

> During the period studied by the report’s authors, IRA posts on Instagram garnered more than twice as many engagements (such as likes or comments) as IRA posts on Facebook – 187m on Instagram vs 77m on Facebook – despite the fact that Facebook offers many more ways for users to interact with content, and Instagram has no native “sharing” button to promote virality.
Throwaway for privacy.

First of all, props to you for being honest with yourself about your frustration. Many people turn their bad experiences into anger that sits inside and ferments into a dangerous and unhealthy brew. Recognizing what's happening to yourself is an important step in changing yourself and your situation. Saying these kinds of things publicly can often bring ridicule or condemnation, but I think it's important to start by forgiving yourself for feeling this way, because it's natural and not doing so will just make you hate yourself more. The way you feel is understandable, what you do with it is what will define you as a person.

Anyway, I've had some bad experiences with relationships as well and the thing that is helping the most is therapy. I highly recommend it, it is the best money I ever spent and I think of it as an investment in my future, similar to putting money in a 401k.

I don't recommend hookers like a sibling comment did, not for moral reasons but because I don't think it'll solve your problem. I'm also lonely and often just wish I could have sex, and I can relate to what you say about wishing a sex doll could just replace your bed for a real woman. But then I had some opportunities for no-strings-attached sex and learned something about myself : turns out I want intimacy, not just sex. For many of us, sex in our minds represents an emotional connection we crave. And having sex with someone who doesn't care about you feels like shit when what you really need is someone in your life who gives a damn.

But maybe you have to learn that for yourself, and maybe your experience will be different than mine. If you're going to try transactional intimacy, maybe start with something a bit less extreme like lapdances from strippers. You might learn something about yourself. And depending on whether you are, there's less legal risk and certainly less health risk involved.

In any case, I do believe that it's possible to get to a better place. My experience was that therapy worked best, YMMV. Good luck.
He's not suggesting "Guess and pass it of as true".

Instead, the idea is to say "Well, I am not sure. However, If I had to guess, I'd say X" where X is your best guess. You can follow up with "If needed, I could find out for sure in {time-frame}"
Oh yes. I've got an A7S2 and while I'm pretty satisfied with it in general (especially after jailbreaking it and killing that annoying 29 minute video limit), there are some things that I really miss, mostly related to networking.

Oh and while one can get a full service manual including block diagrams and wiring specs for it on the Internet, if someone knows how to access its bootloader (probably uboot, it runs Linux in any way, with an Android layer on top for the "apps") so that one can experiment without risking a $2000 brick, that would be really really nice ;)
I assume this is sarcasm.
Hmm, legally you phone, verify your identity and say you're cancelling. Sure, they want to speak for 20 minutes to wear you down to say you'll accept a deal or try a couple more months ... but you're surely not obligated to listen. Once you've id-ed yourself and said "I'm cancelling" then you're done. Hang up. Sue them if they charge you again.

Companies rely on us feeling the pressure of social conformity.

Indeed legally I expect you can cancel by any reasonable means?
The trial is ongoing [1], so it's not surprising you can't find any information on it.

[1] http://www.isrctn.com/ISRCTN30359027
Completely unreasonable as far as I am concerned. ID checks are done as part of safety checks: drunk driving, speed traps, etc. But they cannot be done without another violation occurring. And that’s more than enough government in my life.
Yeah, it's probably not "widely" used. I know the Tcl dev team uses it for Tcl and Tk. That's pretty much the only one I know.

There is a online hosting service: http://chiselapp.com

A list of public projects (I was kind of surprised there were so many): http://chiselapp.com/repositories/
I've seen this phenomenon both in USA and in Singapore.
The media is relentless. What if they are projecting their fears?
There seems to be an impulse to deny the AI progress that people see in front of them. When IBM Watson won on Jeopardy, everyone claimed it was cheating because, after all, "everyone knows the answers, so Jeopardy is really only about who presses the button first". But what about the fact that a computer could know the answers at all, and so quickly? Many people didn't think it was possible, and as soon as it happens they attack the speed of the button press as if knowing the answer wasn't the hard part.

Anyone with this point of view does not seem to understand what is being shown here. This is not just "this ai beat this one player in this one match". It's an entire system of techniques for machine learning. The AI was not hard coded to learn those micro steps, like all other AIs have been. To ignore those things is to miss the point entirely.
you just think it’s a coincidence that all the fb hate started after trump got elected?
>Education is the greatest weapon

It doesn't seem to be working.
Any recommendations for getting up to date with Pytorch? I could pick some cheap books from packt or maybe good blogs ?
I'm aware of chosen plaintext attacks against a reused IV, but at rest the attacker is just an observer.

Offhand, the only problem I see with a fixed IV for string storage encryption is that if two passwords match in the first kB bits, were B is the AES blocksize and k is a positive integer, and assuming CBC mode, the attacker can see this.

Are there worse holes open to someone who is just observing at rest data?

That reminds me of something I've wondered about. How about AES in CBC mode with a fixed IV, but the plaintext is prepended with a hash of the entire message first, using a hash of at least the size of the AES block?

In effect, if the hash output is the size of one AES block, that makes the hash encrypted with the key using the fixed IV be the IV for the encryption of the plaintext.

That should effectively give each plaintext its own IV derived from its hash and the key, but conveniently stores this in the output string so you don't have to have separate IV storage. This could be convenient in applications where you adding encryption to something existing, such as changing a DB to hold encrypted values instead of plaintext values in certain columns, but where you are reluctant to add new fields, such as adding a column for the IVs.

For some storage applications, you want to support checking if a given plaintext is already stored and return the index of that prior instance in that case rather than store a new instance, so if you use random IVs then you need to separately store a hash of each item, and if that is not encrypted that could be a vulnerability if someone stole a copy of the DB if the plaintexts are small (like credit card numbers).

The prepend the hash to the plaintext and use a fixed IV on that provides the reproducibility for duplicate checking, without obviously exposing the hash to someone who steals the DB, while effectively encrypting the actual plaintext using a pseudorandom IV derived from the AES key and the hash.

But I've not seen it used or described, so don't know if it is an OK approach.
Your high-level description resemble a cover letter used on some open-source project to introduce a patch series, justifying the changes.

You could achieve the same by using an empty commit, or tracking those in the bug tracker.

DCVSs are already complex enough, this just seems like scope creep, trying to emulate a feature that is actually part of another tool (the bug tracker or the mailing list, depending on the structure).

Another issue is that it would foster a mentality where people would simply don't care about the exact history and push really badly structured commits, relying on the second-level history to explain their work. Except that if someone publishes something, it's not for this person, it's to be read by other people. The dev could keep a local branch with all their commits if they are so inclined, but that should never be sent to a shared server.

Most people are already bad enough at writing proper commits and dividing their work, I think your feature would make it worse.
Save yourself a click.
That's really cool, but don't unassigned fields have undefined values? How would the function know what was set? I imagine that in practice they're almost always 0, but that's not guaranteed, right? You'd need to set the struct as {0}, to have everything be 0. Is this a feature of a new(ish) standard?
In fact, due to the integration, Fossil supports offline work not only for code, but also for changes in the wiki and the issue tracker. You can do full offline development on code, update documentation in the wiki, comment on issues and change their state and merge all these changes later when you are back online.
And there is no way to find Episode 19.

You know the exact date of Episode 18 so you assume Episode 19 was published soon afterwards. So you go into the profile and click videos.

You realize that the date is not even listed, it just says "x months ago", or "x years ago". And since this video was from two years ago you have to sift through all videos of the last two years. And you can't just ctr+f. You have to go to the bottom to load the next 30 or so videos.

The user interface for these kinds of sites are just incomprehensible poor.
Speaking as a PMC of Apache Flex, but not as a lawyer...

> If someone makes a from-scratch implementation of Swift, or any other language with similar features, can Apple then sue them over these patents?

Yes, Apple can sue you for making use of their patents w/o a formal license in place!

> Or does AL prevent this?

No! The Apache License protects users who use code from the project in question, but does not allow you to use those patents for other purposes.

To give a parallel example:

I license a photograph of two kids in overalls to put it on a poster and sell it.

That does not give me permission to use that image on playing cards, porcelain dolls, or other avenues.

https://www.farmanddairy.com/columns/the-story-behind-the-fa...
We are the most powerful nation on earth because of our immense resources, geographic diversity, access to almost every major ocean and lack of powerful enemies on our border. Geography is destiny. Having the most arable land, having exploited the most oil, having access to the pacific, atlantic, arctic, etc and the ability to develop in peace due to having much weaker nations on our border is why we are a superpower.

The idea that we are the greatest nation because we have the best and brightest from around the world is simply not true. If it was true, our immigration policy would be based on IQ today.

China can't be a superpower because they are hemmed in by Russia to the north, India to the south, US/Japan/Korea alliance in the east and Iran/Central Asia/Middle East to the west.

If it is true that number of "geniuses" makes a nation the most powerful in the world, the most powerful nations would have been china and india. We know that's not the case. So your theory contradicts itself.
Paypal has recurring payments and I thought it was exactly this. Never tried to cancel via Paypal, so I am not sure how this works.
For those who just read the beginning of the article

“It’s in liquid form and injected through a tube in the patient’s nose. There is no smell or taste associated with it – it’s all very purified.”
Mimicking an accent can help understandability, fwiw.

Might not apply here, but it's possible they were just attempting to be understood.
My problem with using things like the RPi for such simple LED blinking projects is that it contributes to the cult of overengineering that plagues the industry. People seem to grow up thinking they need innumerable layers of abstraction to do things, when often they have actually made their solution not only inefficient, but actually less stable and more difficult to develop.
Anyone know cheap online glasses seller that shipping worldwide?
A good companion to this article is the one by Lensrentals where they actually show what happens when the lens is stopped down, particularly the effect on flare.

https://www.lensrentals.com/blog/2008/10/front-element-scrat...
> On the contrary, we should assume that Google, FB, MSFT etc etc will do the worst (for users /society) if it's better for their bottom line. Their trust level is in negative territory, it was zero a few years ago.

All the refrains that try to excluse/explain corporate misbehavior by claiming that that only duty of a corporation is to create value for its shareholders are only tempting a massive regulatory response in the future.

If capitalist ethics are unused to justify socially unethical and immoral behavior, don't be surprised when democracies start to turn against capitalism...
> Indian person in charge was most likely not well educated

Here are some educated managers in US tech companies - [0]

0 - https://www.teamblind.com/article/Do-all-Indian-managers-suc...
Hmm, okay, I should learn how to rebase then.

The biggest part of my problem is a total lack of commit discipline but there are times when I'm working on a branch where my commits don't tell a clear story (changed something then changed it back because I decided to do it a different way). That's when I most wish for better ways to tell that story.

I feel like an idiot for not knowing rebase could solve some of this for me. ...will definitely try it next time.
Gun Cults
And now they are superhuman with regards to "Fog of war"!

A truly crushing next step would be to make "World in Flames" into a computer game, and have Alpha-Star-Zero, which is coming, to become the best it can on that.

http://www.matrixgames.com/products/296/details/World.In.Fla...

If they do that, every single military on the planet should crap themselves, including the US, Nato, Russia, China, and EU. It means that 20 years or less to robots able to operate at every level in an army from soldier to general, and able to comprehensively defeat the best humans at it, at every level. The first nation to the battlefield with this wins the world. One ironic part is that an excellent application is non-battlefield warfare. You don't have to drive a tank to conquer the world; perhaps you can buy a factory or make a deal. The corporate interface here should also be compelling.

Perhaps Alphabet will finally be able to use this to make non-advertising profits.
Eric Weinstein at evergreen state university. but if you’re an sjw you’ll probably think he’s also a nazi so idk
How do your observations refute the original proposition? Race is a problematic concept, but that doesn't mean it can mean anything you want it to mean. If someone had made a similar observation e.g. about American managers in Europe, would an objection to the effect that "America has multiple races!" mean anything?
So, let me make sure I have this right:

1. Fecal transplants are pseudoscience, because we don't know if they work.

2. We should assume they work, and identify specific microbes within them that are relevant or dangerous.

That's contradictory. Further, without data from examining #1, #2 is almost impossible - there are at least 1,000 species in our gut at all times. The only identification process I know of that could be reasonably affordable is 16S RNA sequencing, which is still expensive and would be nearly impossible to do properly on the 0.5 - 1.0 kg sample of gut bacteria (yes, that's the weight of just bacteria) from the average human. Not to mention that evidence suggests that gut bacteria act in concert, that is, we'd have to examine combinatorially many combinations of these 1,000+ species to get any real data.

This is just nonsense.
yes it did. atleast the latest wave of intense fervor. it started when people claimed russian bots on fb affected election. of course there’s always been some criticism but not to the same extent
Stegano: select pixels where to hide information
> resurrecting the old 360KB 5.25-inch floppies tech

Sure, practicability is important as well. The primary reason that nobody is resurrecting 5.25-inch floppies, is simply due to its impracticability. I think many people in the retrocomputing community would like to make a retrocomputer with these crunching floppies, but the supply chain has already vanished, it's also extremely difficult (if not impossible) to make a 5.25-inch floppy drive independently, as it involves custom mechanical moving parts. It's better to use the time to, let's say, a homemade video game cartridge.

Many retrocomputing hobbyists make a liberal use of modern peripherals such as CF cards.
Is the GPL dead. (for 20 years?)
I usually see this idea of a heroic great artist (compared to artists who presumably don’t have what it takes to merit being mentioned) in discussions around classical music. When people talk about visual art, there is more focus on the quality of the work, and the artist’s distinct voice. Consider an example: a work by Picasso looks like Picasso made it, and that’s what gives it its value. By contrast, derivative works that merely copy another artist’s style are usually not held in high esteem. Chopin’s work scores very well according to quality, and his distinct voice usually makes it obvious that the piece you’re hearing is a Chopin. The visual arts are a lot better at allowing more artists to become established than the classical music world is for composers.

This may be a consequence of the properties of the creations. People who want to listen to a concerto will share the experience with many others, and typically won’t be able to buy it all just for themselves. People who want to be involved in the contemporary art world can and often do buy physical works of art for themselves, and it doesn’t matter whether or not the artist could convince a theater of people to pay to sit down together and appreciate it for 30 minutes. If art patrons want to buy physical pieces for themselves, you need a bigger pool of artists to serve them; but if you want to fill opera houses, it’s better to have a few artists that everybody has agreed to like.
No they can't. Talented people have years invested in products, projects and relationships at a company. That is why you see "after 10 years at x, head of y is now leaving for z". It is average employees that can switch without consequence since they don't have a position.

Say you are a talented employee at company X. You have invested time and effort in a project for the last three years and done good work. Now you get into a dispute with a manager over the future of the project. They start playing office politics and eventually get your project defunded, blocks your promotion and requires you to sign a non-compete to get your bonus.

While you can just quit and join company Y the first thing they will ask is what you did the last three years, what your project was and which position you attained. Chances are you are back in a similar position, having to reinvest that time and effort. Thing like this can really mess up your career.

If you are just working on a average project, not really expecting a promotion or in other ways are average, you don't have as much to lose. Sure, if you don't get treated right at company X, you go join company Y in a similar position. On the other hand since you don't expect a trajectory attaining things like good pension, vacation and overtime early matters a lot.
> Push or pull a single branch

> The fossil push, fossil pull, and fossil sync commands do not provide the capability to push or pull individual branches. Pushing and pulling in Fossil is all or nothing. This is in keeping with Fossil's emphasis on maintaining a complete record and on sharing everything between all developers.

This is a kind of deal breaker if it just pushes all of my private WIP branches to remote. Is there any genuine use case for this kind of functionality? Apart from that, this looks interesting.
Have for-hire-workers supplanted hackers in Linux-kernel?
Women Who Conquered Common Beliefs to Travel the World
You don't have to be in NL - they ship them to all EU countries and have stores out of Holland too - in UK, Germany, Belgium, plus you can find them in some 3rd party stores now too.

I recommend them as well. Persol (obviously from Luxottica so no good if you don't went to support them but I just couldn't find as stylish, foldable sunglasses elsewhere) and Ace & Tate are my favorite brands but I don't need prescription lenses so that may vary.
Coroutine Co-Simulation Test Bench: Writing VHDL and Verilog Testbenches Python
Pro tip in this situation:

Send them an email saying that you are deaf and can't talk on the phone. Works every time I've tried it.
+1. Another criticism is consumerism - the hype that some of these devices created was more about purchasing and plugging boards and calling a library, without actually help hobbyists to learn something.

Or as John Carmack has said, low-level programming is good for the programmer's soul, it's hard to imagine that programmers do have souls if they has never been exposed to low-level programming. Unfortunately, in the modern computing world, the chances are becoming fewer and fewer, most systems are far beyond a complete understanding for most people. I think I'll never completely understand the x86_64 instruction set (w/ SSE, SSE2, FMA, AVX), or the signal path of the PCI-E interface on my motherbard.

Recently, I think some popular microcontroller projects may be the solution for a bare-metal programming experience.

But we can also looking it from another perspective - the proliferation of mobile devices changed everything, nowadays, even using a general purpose computer is not an experience that many members of the new generation may have (there was a Hacker News article about it). Some don't understand a hierarchical filesystem of files and directories anymore, and others have problem typing on a physical keyboard. In this sense, to blink an LED on Raspberry Pi is already a big step forward, and it was exactly the motivation behind Raspberry Pi.