skysight-inc/HackerNews huggingface dataset:
Yes. Which means that Ethereum guys quite quickly after DAO hack started to think that "code as law" is actually a really stupid idea. What is beyond my understanding is how anyone believes into the smart contracts using Ethereum after that, though.
Most companies would never have to go the lengths insurers go. They'll hire PIs to literally follow claimants around IRL to make sure they really do have a workplace injury. I know this because I worked at an office tasked with reviewing and annotating the videos they recorded.
I spent about 10 days in Cuba as part of a scientific research trip just before Obama eased the restrictions. What disturbed me the most was how many Cuban scientists I met who truly believed the Cubans would cure cancer for the entire world if it weren't for the American "blockade."

Aside from the government propaganda, a lot of South American & Caribbean countries have the same issues you've outlined. (Though the lack of toilet seats has so far been pretty unique to Cuba in my travels most of the poorer countries are definitely BYOTP.)

One thing that really stood out to me about Cuba when I went was their odd transition to "private property" which this new constitution vaguely addresses. When I was there (in 2014 or 2015?) Cubans were allowed to "own" real estate but the government could force them to "sell" the property at any time, at the price specified by the government, and only to the seller selected or approved by the government. It didn't seem that "ownership" came with many rights or benefits.

As for the "voodoo" I think that's fairly common in the Caribbean/South America as well. There are "voodoo markets" in Haiti & Togo, for example. And the "witches market" in La Paz, Bolivia is... something if you're into being surrounded by dried llama fetuses.[1]

[1]https://www.dailymail.co.uk/travel/travel_news/article-52738...
Ask HN: Where do you get your PDFs and ePubs (research and texbooks)
I've been building a personal knowledge repository app for the last few months and wanted some feedback:

https://getpolarized.io/

Specifically, where do you get your PDFs and ePUBs that you read?

Do you use specific sites? Find them in specific apps?

Or do you just see them reference from news sites like Hacker News?
google also actively recommends leetcode before their interviews
AES is a block cipher that operates on 128-bit blocks exclusively. If you look at the implementation of AES-GCM, it also operates on 128-bit blocks. AES-GCM is basically just counter mode with built in correct MAC handling.

Your claim that AES-GCM is length preserving is completely false, other than the obvious multiples of the block size which is the same as CBC mode or any other mode.

Your statement isn't heretical, it's just based on a false statement. If the premise of your statement were true, your extra analysis would be correct.

I would read up on the details of the mode itself, this graph is a good place to start then move on to the mathematical section which talks about the 128-bit blocks:

https://en.wikipedia.org/wiki/Galois/Counter_Mode
Looking at this reminds me of reading Scientific American when I was a child. The articles were in-depth, scholarly, and often difficult, even when simplified for general consumption. I know Scientific American changed its format to survive, but I miss this rigorous style.
Oh.. and here's a link to the app I mentioned:

https://getpolarized.io/

Right now we have support for PDFs and web content but not ePub which which we're currently investigating.
Lack of PFS isn't a weakness. It isn't a mathematical backdoor. It's a config option that is left disabled when entities have a moral and ethical rationale for inspecting the traffic traversing their network.
This fix does not even work on windows. You can still request data on a different drive.
Thank you.

Are there specific soups typically used? Or just any soup will do?
How to port desktop applications to .Net Core 3.0
Midnight Lizard is an open source project: https://github.com/Midnight-Lizard/Midnight-Lizard

You can read it's privacy policy: https://midnight-lizard.org/extension-privacy

Also starting from Chrome 70 you don't have to allow access to all websites: https://developer.chrome.com/extensions/runtime_host_permiss...

As a Midnight Lizard developer I'm doing my best to make sure it is as secure as it can be, but it is harder to prove that you are not doing anything bad...
This is clearly rigged and dictatorship and regime change will be required for the good of the Cuban people who hate socialism.
I meant that on average a police officer who has committed a crime in the past is more susceptible than one who has not.

It seems your suggestion is that people would fight to keep their past crimes secret? That's an interesting alternative view.
As mentioned above, people with video cameras.
Would a central source for warrant canaries be helpful? Like one place where you can find all those individual warrant canaries from companies you care about...
K3s – Lightweight Kubernetes. 5 less than k8s
Rewrite the output logic with PyAutoGUI doing the keyboard shortcuts and grade typing? https://pyautogui.readthedocs.io/en/latest/
It is getting increasingly easy to buy off-the shelf FPGA boards that plug into exposed computer ports. Fomu is particularly unobtrusive.
Not all businesses need to raise VC money. Not even all startups do (though it's certainly a lot more common with startups).
> “MacOS fixed the specific vulnerability we used to get administrator access in macOS 10.12.4 in 2016”

USB-C Macbook Pros we’re only announced on Oct 27, 2016. Not sure what version of 10.12 they shipped with, but seems like it was a pretty fast fix.
It's not just companies that want to MitM their traffic: consumers want this too. Otherwise all the IoT devices in a house will no longer be trustable: Alexa can start uploading everything it hears, even if you never said "hey alexa!". And because of forward secrecy, you can't verify what it did or did not send: it all looks the same.

This expands to any IoT device with proprietary software on it, which by 2023 will be quite a lot of things.
The first time I fasted 4 years ago, it cleared up the brain fog (for lack of a better description) that had been an ongoing issue for about a year prior to that. The difference was extremely noticeable and happened overnight. Since then I've always noticed increased mental clarity and energy after fasting (minimum 24 hours - strictly water only).
>_some_ backend functionality

Famous last words.
Why is it clearly rigged? The article doesn't even have any allegations of fraud to report on?
I found it pretty productive TBH I have shared my experience here
http://haidrali.com/how-pair-programming-helped-me-focus-mor...
From Employee to Bootstrapper: My Financial Preparation
This list is incomplete. For example "How We Bootstrapped Our SaaS Startup to Ramen Profitability" has 603 points: https://news.ycombinator.com/item?id=15544378

What is your methodology? Here's a BigQuery to get all relevant posts (although you'll have to filter out Twitter Bootstrap manually):

#standardSQL
SELECT *
FROM `bigquery-public-data.hacker_news.full`
WHERE REGEXP_CONTAINS(title, '[Bb]ootstrap')
ORDER BY score DESC
LIMIT 100
This isn't a competition between 10% of the workers and 90% of the workers. There isn't a fixed amount of money allocated to 'labour'.

It's a competition between the capital/investment cycle of the economy and the labour/consumption cycle. In this case it boils down to leverage in employment negotiations. Those 10% crackerjack hyperworkers you're theorizing exist would be even BETTER off if they were recouping a larger amount of the margin they were producing.
They can only sell the ads they've got in inventory. I've been on FB since 2006 and the last ads I remember seeing were for godawful Farmville-style games and shady dating sites. My profile would tell them I'm college-educated and living in a developed country with a network of similarly educated friends. And yet, I have never seen a single ad that didn't look like it would have fit right in at a late night infomercial.

The Twitter PWA Chrome app sadly doesn't block Promoted Tweets, and it's the same thing there; low-quality ads from garbage companies I'd never consider buying from.
I ate a whole tray of tomato sandwiches with vegannaise at my sister's wedding and I've been chasing that dragon ever since
> Drugs aren't harmless, and we shouldn't pretend like they are

Agreed, but IMO the "war on drugs" has caused far more damage than drug abuse. While there are recreational drug users they tend not to be drug abusers. Rather drug abuse usually tends to be caused by erroneous self-medication. We could help these people.

The war on drugs tears our society in half by forcing people who might otherwise use drugs in a recreational manner into a counter-culture where they feel alienated. This alienation leads to mental health disorders which are treated through self-medication which causes even more problems and a vicious cycle begins.
I assumed you were intermittent fasting (16 - 20 hours per day). 62+ hours is extreme.
That's a tough call. We've thoroughly learned that not only should developers not build their own cryptographic primitives, but that they shouldn't even trivially combine them on their own. "Use AEAD" (or better yet: use noise) is good advice for application and protocol designers who on their own probably wouldn't even think about the problems ... but it's not sufficient.

We haven't seemed to learn that length hiding, traffic analysis, and shared compression dictionaries are all so firmly in the realm of what encryption is supposed to do ... make content secret ... that developers also can't be trusted to get these right on their own.

So if you're in the position to telling someone to use AEAD instead of CBC, I'd make sure to also tell them that they should think hard about length hiding, message timing, and shared compression dictionaries, and whether those are important concerns in that environment. Oh and they still have to watch out for IV problems with plenty of the AEAD implementations.

Personally I long for some better crypto boxes than "AEAD" and I should really get off my butt and define one; at the level of total hand-waving, I trust cryptographers more to review this stuff much better than protocol designers.

Like here I am claiming that TLS, the most pervasive network encryption protocol, has actually gotten measurably less secure at encryption, by at least one important measure, in the last 5 years.
In other words, are you saying that distributed databases with local storage can greatly reduce network I/O with things like predicate pushdown, which is not possible when the database is built on top of a distributed file system?
Because 1) having any reviews at all drives purchases because of a social proof effect (see Influence - Cialdini). 2) Amazon are not liable because of Section 230 of the Communications Decency Act (platform operators shall not be treated like the content publishers who create information on those platform).
I have been warned against turning on IOMMU because the code to operate it is so little exercised, and therefore buggy. A crashed kernel is secure only in that it stops running.
Perhaps, but the very nature of carjacking is that it's a violent crime against you, not just your car. Yes, the end object for the criminal is stealing your car, but many carjackings have resulted in severe injuries or death for the victims, which is why it's actually legal in South Africa to have flamethrowers mounted on your car to protect yourself from them (!). These crimes should be treated as attempted murders, and I have a hard time imagining how someone can be "too vigorous" in defending their very life from someone who is actively trying to murder them.
Blackmail requires the existence of a dirty secret. No (dirty) secret = no blackmail.

I do realize blackmail and bribery are not the same thing.
Iterative and Incremental Development: A Brief History [pdf]
If I were inflating my rating with 5-star reviews, I'd also want some 1-star reviews to complain about inconsequential things like "the coffee machine's cord was only 5 meters long" or "it was a bit louder than I expected, waking me up more than I wanted during my morning routine."
>...Real wages haven't increased since 1970.

From the data from the Fed, this is only partially true if you ignore non-cash compensation:

>...A job usually also involves other types of compensation, such as the employer’s contribution to retirement pensions, health and life insurance, paid vacation and other leave, and any taxes the employer pays on these benefits. These benefits are now a substantial part of the cost of an employee, and they appear to be growing. The top graph shows that labor compensation growth is frequently higher than real wage growth. We can make this point more clearly by using index values: In the bottom graph, we set both series at 100 in 1970 and let them run. Real compensation growth is significantly higher: the 60% increase looks much better than the 3% increase for real wages.

https://fredblog.stlouisfed.org/2016/09/wages-with-benefits/
"someone struggles to figure out how to make a lightbulb work, then woosh, anyone can test that lightbulbs work."

That's exactly what you can do with remote viewing: test that it works for yourself.

It seems like you're assuming that it is possible to use such powers for base and counter-life purposes like amassing wealth or that anyone that has reached such a subtle level of consciousness would even care about being wealthy.
So no real changes other than the lifting of a psychological "fog"?
> (no good link for that, unfortunately)

I've found something.

I recommend reading and watching Eckhart Tolle.

[1]: https://www.youtube.com/watch?v=Ci8ZAj6Z8C4

[2]: https://www.youtube.com/watch?v=X0Yw6wNNx7E
Nope. "Our results strongly support Pancrustacea" which is in line with the taxonomic hierarchy I was making reference to.
I was thinking purely about the physical size of a single bit. I feel like I can personally interact with a 1mm object. Anything smaller gets in the way of the physical intuition. I wasn't actually thinking about photos at all.

Anyway, thanks for your perspective! I think the conclusion is the same -- we've come a long way from the internal combution engine.
Last year I bought a set of cheap Bluetooth headphones on Amazon which I use on a daily basis. It's obvious they have an affiliate program because I often seem on those daily deal roundup posts that a lot of tech blogs now have.

Recently, I've been getting emails from the vendors asking me to leave a review in return for a free product. Here is a copy and paste of one:

Dear Customer,

Thank you for purchasing our (HEADPHONES). Are you satisfied with the Bluetooth headphones that you bought? If there is any question or concern regarding product quality, please don't hesitate to contact us first.

If your (BRAND) experience has been everything you hoped it would be, share it with the world! Meanwhile, to express our sincere thanks for your kind support, we are more than happy to send you a (FREE PRODUCT) for free if you are willing to leave us a review since this would be very helpful for other customers who are also interested in this product.

If you are interested in a (FREE PRODUCT), please get back to us with the screenshot of your review.

Note: you can click the link below directly to leave your positive review:
(LINK TO AMAZON TO LEAVE REVIEW)

Please rest assured that we’ll arrange (FREE PRODUCT) to you ASAP after we receive the screenshot of your review together with your shipping address.

Any questions, please kindly let us know.

Have a nice day!
DrainerBot infected apps play invisible videos to drain your data
Yes, mathematicians go use proofs and logical deductions instead of experimentation. But the idea still holds, whatever conclusion they reach should be taken as the best current answer instead of absolute immutable god-given truth.
I've been developing on Windows for the past year, from a mixed OS X / Linux background, and it has been a seamless experience, the only things I miss are the ease of installing packages like Node or Redis or Postgres, but those are done only the first time I boot up a new Windows installation so the pain is amortized in the time I spend not worrying about random lockups or drivers not working.
I recommend that you copy and paste the Amazon link to https://reviewmeta.com/ and https://www.fakespot.com/ to see how many of the reviews are actually legit.
Security wise it’s much better having the separated usb connected baseband. Much more control of what comes in and out of the application processor.
Working at CERN is one example
Still hurts that they killed Fireworks. Best photo editor ever for quick web ready edits.
First, you might want to look closer at who you're talking to.

Second, you might want to read a little more about how counter mode works.

Or, why not just try it yourself? "pip install cryptography", pop open a Python shell, and encrypt some stuff. There's only so much you can get from Wikipedia. Because: counter mode doesn't create ciphertexts that are multiples of the block size; not doing that is the point of counter mode.

>>> from cryptography.hazmat.primitives.ciphers.aead import AESGCM
>>> gcm = AESGCM("\x00" * 16)
>>> len(gcm.encrypt("\x00" * 12, "YELLOW SUBMARINE", ""))
32
>>> len(gcm.encrypt("\x00" * 12, "YELLOW SUBMARINES", ""))
33
Show HN: Startup Cemetery – Learn why 100+ startups have failed
This is a great example of a niche banking solution which is far better than any traditional bank can provide. I think we'll see a lot more of this as banking APIs become more available.

My company is working on similar problem and solution for youth sports teams and clubs which are also non-profits (formally or informally).
Yup. It's called a "self-documenting editor" for a reason :). From built-in help on every command, function, variable and keybinding, through apropos and tutorial, through a full-length manual - all available off-line, in the editor - it's easy to get your bearings around using and customizing Emacs. That is, once you adopt the old-school, pre-web notion of software actually having documentation.
One VS Code suggestion I'd mention is Centered Layout mode (under View > Appearance). If you only have one editor group open and aren't doing side-by-side work, it's a nice relaxed view of the editor that defaults to roughly 80 characters as well. (Official docs say it defaults to a golden ratio of your screen resolution, so it's not directly based on character count.)
The End of Blu-ray
D.O.P. Balsamic Vinegar, the only authentic Balsamic Vinegar, goes for well over $100 for a tiny 100ml bottle, and given the multi-year, multi-barrel method of brewing each bottle, it is a miracle it can be found for even that cheap. Congratulations for having a cabinet full of it! May I come over sometime? ;)
Yes, as an English speaker living in Germany, this is also something that drives me up the wall, but has also gotten better recently. My personal favorites, the cream of the crop:

* Netflix: full site in English, subtitles (and audio tracks) for all shows available in German, English and several other languages. Only a few edge cases where the source (written) material appearing on-screen has already been hard-translated in.

* Amazon: will let you turn on full English experience, up to and including...English speaking support (both written and verbal). This is truly the cream of the crop in terms of quality of experience.

I really appreciate any German-oriented site that offers English as a possible language in spite of knowing my location. And if somewhere on your servers you already have English available, you would be silly to not make that available world-wide (where it makes sense).

Of course, these are two of the biggest tech companies, so perhaps that speaks to the cost of internationalization.
I just did this on my work laptop; is there a way to replicate my certificate lists (or, at best, the deltas)?

> Chinese gov authorities

How would I identify these?
Which means this whole argument might be insincere and the real goal is otherwise.
Oh yeah, I forgot a really big one:

7) camera. Instead of having to carry a separate camera around just in case I see something I want to photograph, I already have one built into my phone that's pretty good (though admittedly of course not nearly as good (particularly for low-light conditions) as a serious DSLR or other good camera). My new phone even has dual lenses, a 16MP regular lens with OIS and an 8MP wide-angle lens. Considering I carry the phone around all the time anyway for the other functions, the camera is a really nice bonus.

Along with this is 8) Banking apps, with check-deposit functionality (enabled by the camera in #7). No longer do I have to take time off from work and waste my time and gas going to the bank when someone sends me a paper check; instead I just take a couple photos on my banking app and it's deposited.
Whatever it is this take is, it's not boring. :)
> Which most Tennessee whiskey likely doesn't meet

Actually, Tennessee whiskey is required by federal law to be straight Bourbon. The legal wording is "a straight Bourbon whisky produced in the State of Tennessee".

As of 2013, the Tennessee state legislature also requires that Tennessee whiskey be charcoal-filtered through the Lincoln County Process, with exactly one distillery grandfathered in. If charcoal didn't meet the requirements of straight Bourbon, then it would be illegal to sell anything as Tennessee whiskey because that would mean nothing could simultaneously meet the state and federal requirements, and that's obviously not the case.
> Genuinely good vietnamese, thai or even japanese food is pretty hard to find in singapore

I agree with you on Vietnamese food, but both Thai and Japanese food are very common in Singapore. Did you try Golden Mile Complex for Thai food, or Robertson Quay/Liang Court/Cuppage Plaza for Japanese food?

> Just try and find a good pork Banh Mi in singapore, I dare you.

Many eateries here cater towards the halal market, so it's sometimes a little difficult to find the pork version of anything that isn't mainstream international cuisine.
Yahoo had something similar, although all I remember was them bugging me to choose a color for security, and me trying to ignore it because I didn't care.

I wanna say it was something about colouring the login box, but I can't make that make sense.
A fantastic post on Maillard vs carmelization for anyone curious:

https://www.reddit.com/r/Cooking/comments/4b4dw5/what_is_the...
I've looked at it, but I would be writing hundreds of lines of code just for the interface, which would really slow me down. I really want to be able to focus on business logic and slap together a minimal interface in an hour or so. And unfortunately, I'm not able to code every day, so the more interface cruft I have to wade through, the longer it will take me to dig back into it in the future when I need to make changes. EasyGUI is built on top of TkInter but takes care of all the details to give you a handful of super-easy-to-use basic widgets. It would be perfect if it was just a little more finished.
Not right now, but they will in a big way.
I'd be interested to know how much experience you have of advanced math.
Well yes, we're talking past each other then. I'm coming from a perspective where I get the space to actually perform risk assessment and where that actually matters. I don't need to comply with a needlessly highly regarded CVE database, nor do I have trouble communicating this. Furthermore, I still find value in vulnerability scanners - to a limited extent - because they allow me to automate manual work.

If you are working in a more political organization (that is not a value judgment - that often comes with organization scale) then other things influence you processes. I'm sorry, but that's not the perspective I take. That doesn't make my approach any more dangerous though - I think it's an appropriate perspective and I'm happy I can take it.
How to Have a More Appealing Website Design