skysight-inc/HackerNews huggingface dataset:
You're probably going to want to whitelist a domain here and there relative to the default blacklist. And the pi-hole has a few blacklists that aren't enabled by default, since they are much more strict.

So pi-hole-as-a-service doesn't make too much sense.
Transit App Launches Offline Trip Planner Built on Top of Custom Compression
Can I just have the site NOT try to be smart at all? Get out of my way, copy what I put in directly, and if I add a newline treat it at least as a BR entity if not a full P block?

The asterisks filter triggered across MULTIPLE LINES.
What exactly do they mean by "recognized the Internet"?
Creating Digital Experiences with Valtech
Yeah, you're missing the security model.

The point is to have the decryption done on a system that is isolated from the production environment (and is consequently isolated from security compromises).
How colliding blocks act like a beam of light to compute pi (Part 3/3) [video]
I mean the idea isn't to never use the mouse, just use it where appropriate and don't do the back and forth of mouse to keyboard which slows you down. (One great aspect of thinkpad's trackpoint is that you never need to move your arm to click something)

I mean it's kinda dumb to reach for the mouse to hit C-c C-p enter then reach for it again to focus your editor.
Worst part is this creates a rift in the market where vendors are not incentivized to produce quality products, but rather to manipulate and game. Who could have possibly thought that A single entity handling so much of the nation's purchasing would end up with terrible oversight in quality?
I came across this article last month: https://ifelse.io/2019/01/12/secure-ad-free-internet-anywher...

It was surprisingly very easy and straightforward to setup, and working very well! It's most useful on Android/iOS.

One small change I've done is to set the Pi-hole DNS server only on a specific set of VPN connections (using specific ports) in order to have a full, unfiltered VPN if necessary.
If you're interested in Pi-hole you might want to check out AdGuard Home:

https://github.com/AdguardTeam/AdGuardHome

Pi-hole isn't difficult to setup but AdGuard Home is much easier. Just download the binary and run it. If you want it to start on boot run it with the `--install` flag. Works on Linux, Mac, and Windows.
MariaDB readies new enterprise server
The Mystery of Antarctica’s Missing Meteorites
I opened up my book of cryptography from Jonathan Katz, and found this in regards to CTR mode:

> As with OFB mode, another "stream-cipher" mode, the generated stream can be truncated to exactly the plaintext length

This is contrary to what Jonathan Katz told a class taught from the University of Maryland which I took, which is odd. I've used CTR mode before and exploited CBC padding oracles, I don't recall being able to use CTR mode this way but I rarely used it since we focused on CBC exploitation and a bit too much on CPA/CCA proofs. After looking at the diagrams shown, it's clear that since the message is XOR'd on the output of the generative random of the encryption function, CTR mode can indeed be truncated since the remaining generative output can be ignored. So I had a misunderstanding in my head on CTR mode.

Now on to GCM. Unfortunately my edition of Katz' book doesn't include GCM so I have to default to Wikipedia. The last XOR is more than likely where a truncation can occur, so I was wrong about GCM mode as well.

As for Python tests (package already installed, no need to use PIP when it's in the various Linux repos):

from cryptography.hazmat.primitives.ciphers.aead import AESGCM
import os
key = AESGCM.generate_key(256)
gcmtest = AESGCM(key)
nonce = os.urandom(16)
len(gcmtest.encrypt(nonce, b"testbytes1", b"ASD"))
len(gcmtest.encrypt(nonce, b"testbytes12", b"ASD"))
len(gcmtest.encrypt(nonce, b"testbytes13", b"ASD"))

This outputs 26, 27, 28 respectively.

While this proves your point, I want to make clear that ignoring the reason and just trusting the output of an implementation isn't really a good way of learning things (although complimentary). I was using the Wikipedia and text references so I could understand why it allowed variable length, and at my first look the construction didn't appear like you could truncate.

Despite all of this, the CTR-mode section of the book includes a CPA-security proof and the CBC section says it is vulnerable to CPA. I'm going to try to dig through that to see why. If they are cognizant of the fact that same length attacks are something that makes you vulnerable, there must be a reason why they believe CTR/GCM are not.
it's not their job. there's a reason anyone can do it.
> If it was a struggle to keep wikipedia's lights on, I'd consider donating myself

Isn't that kind of problematic too though? The idea that donations may only go to organizations that would struggle otherwise? (I know I'm inferring something you didn't explicitly say, but I do think that is a fairly common sentiment as well)
PiHole as a service will definitely happen and I would be willing to pay a monthly fee for it.

My setup has been running for over a year and it has completely transformed the Internet for me.
The police are almost never around to intervene in a crime in progress. They show up in the aftermath and investigate what happened, gather evidence, and eventually may refer a suspect to the prosecutor for charges.
That makes sense, thanks. I have actually run into a use for one of the side projects (Wikidata) so I may be more optimistic about the foundation’s chances of doing something else useful with a big budget.
Serious recommendation - trash recipe books, unless you're interested in recreating a specific kind of flavor.

Then, learn about proper ratios. (Best book I've found so far is "Ratio: The Simple Codes Behind the Craft of Everyday Cooking"). And then get yourself a copy of the flavor bible, which makes it easy to create excellent flavor combinations. You're set for life.

(You might at some point add cooking chemistry into the mix, too. But the point is, learn to make recipes yourself, so you know they're tailored to what you like. Instead of having to try them one by one)
Compositing was (shortly) after OS X.
Personally what I'd like to see is speciality ingredients. Stuff that isn't normally sold in my region and if I order those ingredients online they I would need to spend way more because they aren't sold in small amounts.

But instead when I look at these services it's almost all ingredients you can get at almost any US grocery store.
> Who the heck came up with USB 3.2 Gen 2×2? That has got to be the dumbest idea. No one cares how it works

Well, you will if you end up trying to use a part which supports 2×1 with a part which supports 1×2, since they both support the same top speed, but together they only support the lower speed of 1×1.
That's indeed what often happens - having to re-explain or they understand what I meant to say. But every time I do this, I lose a bit of credibility, and that adds up in the long run.

Moreover, sometimes, I lose people completely because "car" was also correct in my phrase and made my phrase impossible to follow :/
Ok thats a good argument. But the few pihole-users i know do not have a single whitelisted domain and likely will never have one. Also I could still whitelist most domains by adding the ip to my etc/hosts
This is a favorite topic of mine. There are several multi-country metropolitan areas in Europe, for example Malmo-Copenhagen and Görlitz/Zgorzelec. Many cities have smaller suburb cities across the border, like Strasbourg-Kehl and Geneva-Annemasse. And the Benelux countries take this to the extreme, of course.

Even Berlin, which is pretty far from the Polish border, have commuter trains to Poland. That's right, the Berlin metro ticket will take you to Poland.
That's still a question of defense of property, though, right? You may be able to shoot someone to stop them from stealing your car. You can't ever shoot someone because they tried to steal your car. The circumstances in which a self-defense justification extends to property presumably also differs per-state, but it's not the same question as "stand your ground".

It's maybe worth noting that "defense of others" is often also a thing.
RescueTime on Android is losing call time tracking as Google support fails
A tomato from your garden can only be as good as the cultivar. If you plant shitty tomatoes and grow them well, they'll still be shitty, albeit fresh, tomatoes.
That is assuredly their best-case-scenario "burst" speed.

The sd cards I have always list some performance like "up to 80mb/sec" but never seem to get close in reality.
Well, keep an eye out for it here:

https://deepmind.com/research/publications/
Seems like there is: https://adguard.com/en/adguard-dns/overview.html

However, as it's been said, you might want to easily whitelist some domains.
Bruni Collin's is very citrusy Spanish gin, I don't think it has juniper in it. Tastes bloody amazing.
Thank you.

I do have other advantages against other people, but I believe that everyone is better than others in specific areas, so I didn't consider them much ;)
Think it might be A/B testing. I have got it sometimes, not others.
> Of course there are scenarios that require 3 life sentences (e.g. serial/psychopathic killers), but they really are rare.

No, not of course. The concept of multiple life sentences is farcical. The scenarios which warrant them aren't just rare - they're nonexistent.

If you believe someone should be imprisoned for life then fine, you can defend that position. But giving someone multiple life sentences is a mastabutory exercise which has no practical effect.

They're only going to live the rest of their one lifetime. Give them the one life sentence and be done with it. Life sentences are idempotent - there is no effect to adding more of them together, so it's entirely spurious to do so.
My only fear is that the podcast market will also collapse without their advertising money.
Adenoviruses are just scraping the surface, too. We have very little knowledge so far on how viruses, bacteria, fungi, and parasite animals can impact epigenetic regulation and deregulation in ways that are not immediately obvious. And obesity isn't exactly something that shows up in measurable quantities a few days after initial exposure. You wait decades, and the difference attributable to the variable under study might be a 2% difference in body fat. That's something you would only find if you already sort of knew where to look.

We're only finding this stuff now because the problem has grown to the point where researchers are specifically asking "why the heck are we so much fatter now?" They are finding multiple answers.

It turns out that real viruses can hack your body and change your persistent settings, just like software viruses can get into your computer and install a botnet rootkit. Some of those settings aren't even accessible to users. (I know if I had a slider bar to change my own body's preference for fat percentage, I'd drag it to 20% and tap the lock icon.)

Learning about this stuff, I now look at fictional plot devices like the super soldier procedure from "Captain America" in a new way. The machine demethylated all the DNA in Steve's body, and the serum injection targeted some specific genes to be re-regulated. Rather than chopping up the genes as CRISPR/Cas9 would do, an epigenetic regulator nondestructively tuned them, and set up positive feedback loops to keep them tuned to the "maximize Nazi-punching" profile. That's still far beyond our current abilities, but it makes it all seem more plausible.
I think that machine learning will move out of the cloud and onto devices closer to where it is needed. Moore's law isn't what it used to be so it will likely be a blended environment where heavy processing is done in the cloud and then synced to local devices for lighter processing. Things like self driving cars will need more powerful AI without the delay of contacting the cloud. Also things like smart switches, appliances, and such will need some smarts locally, maybe built into some home based brain that syncs with the cloud.
Great points, thanks for the link. It appears that serfdom largely disappeared as a mass phenomenon in Western Europe [England/France/Italy/Spain] early [XII - XVI centuries], but persisted in Central and especially Eastern Europe all the way into the XIX century.

https://www.encyclopedia.com/international/encyclopedias-alm...

https://www.encyclopedia.com/international/encyclopedias-alm...

https://www.encyclopedia.com/history/encyclopedias-almanacs-...
To an extent - many laptops and nearly all desktops don't have Thunderbolt at all. TB external GPUs are probably the main use-case for the technology today (people indeed do use them for rendering)
You thought USB-C was going to solve all your problems?

But they need a new reason to sell you more cables, dongles, and adapters.

Maybe they can call the next one USB 5G! That not only helps confuse the branding even more, but . . . It worked for AT&T.
there is nothing in the world that there are no examples of what are you talking about. examples are theorhetical.
And once we're done with that, let's disrupt food production and fire protection!
I think "humans also do X" is fallacious. Humans also draw paintings like The Black Square by Malevich (and he wasn't the first to do it) and there's a poem consisting a single letter "i" by John Curry and another consisting of one word "lighght". Does this mean a printer capable of printing random letters is a poet and one that can produce a black page is an artist?

It's true it is hard to define what art is. But I'm pretty sure /dev/random isn't an artist, even if a human artist can produce random things.
True; my primary exposure to the US prison system has been in Texas which certainly sees its share there.

I suppose it would be more apt to say that the fact that the justice system allows a private interest to be involved shows how corrupt it can be.
Why both ”secret” and ”you can’t have it” in the title? Surely this is a news item worth a title somoeone actually put effort into?
Again? Can this end with anything other than failure? It'd be nice if it could, but that seems outside the realm of possibility.

Aside from this never having worked, and being, so far as we can all tell, incompatible with the level of fine-tuning to everything from the backend to the pixel positions of the UI that people want, there are very serious problems with the business model (or absence thereof)

Some telling snippets from the article:

"Everything you build on Dry.io right now is stuck there."

“Later on, we’re going to be making on-premise stuff, so if you want to run it on a local server or something like that,” Cassimatis promises. “But for now, yeah, stuck on our platform.”

"Dry.io also has no business model, yet."
Then it wouldn't be a charity donation. Giving money to successful projects is better done as an investment (or
maybe purchase.)
Wow, I relate completely with what your wife is saying here! I do often mix words in a phrase or swap the context.

And man, I speak fast (don't articulate much). My friends used to call me Buzz Lightyear because I was speaking at lightspeed ;)
You raise a valid concern. How will you know If wikimedia's branding interests ultimately help them to deliver more of the goals you relate to? The means they take to improve their messaging may ultimately help them to coordinate resources more effectively and deliver more of what you support. Would the ends justify the means in that case?
2 billion may die following a nuclear war between India and Pakistan [video]
Don’t cling to the Titanic, build a better, stronger boat.
> But giving someone multiple life sentences is a mastabutory exercise which has no practical effect.

That's not necessary true in a system with early release where release eligibility is based on the original sentence.

Heck, even in a system without that, if there is a possibility of one the verdicts later being nullified or the associated sentence altered, there is a potentially signficant practical difference.
I really loved USB-C then they screwed it up so badly. Can we have 1 cable that is required to have every exact feature available, no exceptions? Works on any device, supports everything from storage to video transfer (Monitors) and whatever else Apple would add to it.
I absolutely love the DNS based solution for ad-blocking and preventing tracking. I use AdGuard DNS on my PC (DNSCrypt) [0] and phone (DoTLS) [1], and it has improved performance of apps (not just websites), 'cause I guess there's a lot less going on under the hood now (trackers like new-relic and segment might be consuming a good percentage of resources which they wouldn't now since their domains are NX'ing?).

What am I worried about is DNS based black-holing is trivial to workaround against (as an ad-provider, one could simply force use a custom DNS client and pin to a DNS resolver of choice) [2][3][4]. What's next for pi-hole and solutions like AdGuard DNS short of re-writing packets going through UDP/53? Not sure how one would intercept the DoTLS / DoHTTPS connections, to rewrite those.

I'd like to hear if anyone has some thoughts on this, or if this has been discussed elsewhere.

[0] https://simplednscrypt.org/

[1] https://news.ycombinator.com/item?id=18788410

[2] https://news.ycombinator.com/item?id=19170671

[3] https://news.ycombinator.com/item?id=19106023

[4] Firefox 64 for PC, by default, was configured to ignore OS/Network Interface provided DNS resolver and used CloudFlare's over HTTPS.
It's genuinely not intended to be an ad hominem, because it's genuinely not an attack. I'm trying to place your comment in a context, because without a context I can't really make sense of it.

Quoting:

> mathematicians go use proofs and logical deductions instead of experimentation.

I don't understand this - what is the word "go" doing in there?

And mathematicians don't "use proofs and logical deductions instead of experimentation" because that implies there's a choice. There is no choice - if you want to say that in Euclidean Geometry, a right-angled triangle is always such that the square of the length of the hypotenuse is the sum of the squares of the lengths of the other two sides, that's not something that can ever be verified with experiments. Similarly, a prime of the form 4k+1 for k a non-negative integer is always the sum of two integer squares. You can verify small cases, but you can't know that it's always true based on experiments.

So there's no real choice. Even so, I think most mathematicians would wonder exactly what it is that you are saying - it's really not clear to me, for one. That's why I wanted to know the context, and how much experience you have of these things, so I can try to interpret what you've said, and work out what you might mean by it.

Context matters.
> Excessive amounts of carrots and other "cheap, but filling" substances.

This is why I hate potatoes soo much. There are wayyy too many restaurants that depend on potatoes for margin.
Same experience here. Every single service will credit you for mistakes but it only takes one or two mistakes before the convenience factor is destroyed.

I’ve had the core ingredient missing from my boxes before. As in, the core ingredient is in the recipe name!

I also found the produce quality to be hit or miss. Spinach especially was regularly too wet and thus spoiled before I even had a chance to use it. That never happens to me with store bought produce.

The ecological impact also started to wear on me. I felt gross with the amount of plastic I was throwing out.
Yeah.

There's two things here that can be conflated. For instance, here's the ingredient list of La Choy soy sauce:

Water, Hydrolyzed Soy Protein, Corn Syrup, Salt, Caramel Color, Lactic Acid, Potassium Sorbate (Preservative). Contains Soy.

This is pretty clearly a "fake" soy sauce, in that it's not brewed, and there are additives made to simulate the flavor and color from a long brew. But here's the ingredients of Kikkoman, which you can find in almost any grocery store in the US:

Water, Soybeans, Wheat, Salt

That's a real brewed product. There are differences in brewing technique between a product made at scale like Kikkoman and the shoyu this article is about. But it's still fundamentally the same product. Which is not to say people shouldn't seek out traditionally brewed shoyu. But if you're using La Choy or generic store brand soy sauce, you can get a lot of the improvement in flavor you're going to get out of a traditional shoyu from just buying Kikkoman. And if you want to experiment beyond that, try Kikkoman or San-J tamari varieties.

EDIT: It's sort of like the difference between barrel aged beer/wine/spirits and aged differently. It's certainly more expensive (all else being equal) and different. It's not necessarily better.
We'll soon be talking about terrabytes, not terabytes :-)
The “firm” in this case is the Computer Lab at the University of Cambridge, UK.
there's already a very popular react (cljs) framework called reframe

https://github.com/Day8/re-frame
Slack Emoji Picker for FB Messenger
Can any of the DNS wizards here explain the potential performance implications of using this? I have been meaning to install this and begin using it but the latency of a Cloudflare DNS request is so low (and reliable) that I don't know if I want to risk introducing this into my network stack.

I have an R720 and a few old RPi's... so either major overkill hardware or major weaksauce hardware.
This doesn’t fundamentally change the supply and demand problem in LA, which is a city built entirely for cars and nowhere near the road capacity for everyone to be able to make all the car trips they would like to.

For cities that want people to be able to get around AND for the roads to be relatively uncontested, the only reasonable solution is to lower demand by raising the cost of driving - ie. significant congestion pricing (tolls) across the metro - and invest the proceeds into a vast increase in more space efficient transit options. Typically this means express bus and rail service, although the number of people who can cycle efficiently on a dedicated bike way is pretty impressive, and with the scooter revolution there are a lot of other personal mobility choices for people who are less physically able.

Traffic congestion is a problem of geometry and public will - with public will being the primary impediment to progress.
You should research European labor law.
How does the Hololens 2 matter?
Interesting paper and results, but this patently does not extrapolate to "smarter parts make collective systems too stubborn."

Try: "simulated, independent agents exclusively with left/right movements collectively begin to perform worse after they are able to remember beyond 7 prior moves."
For Android, Emacs 26.1 is available in Termux. I can confirm it works on my phone. No rooting required.
K3s: The Lightweight Kubernetes Distribution Built for the Edge
Pi-hole replaces your DNS on the local network so one device is protecting all your other devices without you having to do anthing else. Yes, even that Wii or whatever :-)
You can probably name a dozen that fits without too much effort. All taskrabbit/fiverr clones, all food/grocery delivery clones, etc.
Okay, so I'm assuming you can help the protocol designers make the appropriate improvements in TLS 1.4, or whatever the next major version gets called.

In the meanwhile, what about those of us actively trying to deprecate TLS 1.0 and 1.1 and support exclusively TLS 1.2+, and with certain preferred cypher suites?
Many Animals have inspired innovations. And this is just one of them. Scientists are also studying how spiders balloon so that they can use the same concept to create a better flying experience.

You can read more of these kinds of stuff here: http://bit.ly/eFor-Real-2H6Ml7t