skysight-inc/HackerNews huggingface dataset:
>> The same is true of anyone who flies by private jet, or anyone with private health insurance in a country where the vast majority of the population uses the public health system. Are these things "corrupt"?

Short answer: The difference lies in the transfer of wealth to the next generation and our meritocratic values.

As a society, we have a value system that we implicitly adhere to. At least in the US, meritocracy is big part of our value system.

We believe that if you work just as hard and contribute just as much as your neighbor, you deserve to enjoy the same quality of life.

So, let's look at some examples:

Example A) Person A works his/her ass off and becomes rich off the fruits of his labor. He then spends his riches on private jets and private health insurance.

Does this conflict with our meritocratic values? No. He deserves a higher quality of life because he worked his ass off.

Example B) Person A then purchases access to an elite university for his child, who as a direct result, enjoys a better life than his poorer peer who works just as hard.

Does this conflict with our meritocratic values? Yes. His child didn't deserve their higher quality of life because they didn't work their ass for it.

You don't have to agree with meritocratic values, but it explains the difference.
But should we take that observation as evidence against, or for...?
Generate a temporary link that, when clicked sends an event to your system to deprecate the link and redirect the user to a presigned S3 download. In my case the file attachment was the product and it was important the system know when someone had downloaded, but a backend system that keeps temporary urls and requests a temporary download link from the file provider is a useful pattern. Nice thing about signed links is your server doesn't have to handle the file - it's between the client and storage provider.
Counter anecdote: college roommate who grew up the bulk of his life in mainland China had major problems with spoken English but his written English was fantastic. ¯\_(ツ)_/¯
Do you guys make any money on the recruiting end?
Chickens 'teamed up to kill fox' at Brittany farming school
I really hope you guys succeed. College is a dead model - this is life changing. At scale, it's world changing.
The Missing Parts of Kubernetes
In fact, when making this post - max planck institute and cern so on came to mind, but was not confident it was a schools vs research Institute ? Certainly there is no shortage of great minds from universities around the world, it’s just they don’t seem to nearly have the US BRAND awareness

* edit: on second thought i suppose I am not adequately equipped to talk about global brand awareness as it originally stated. Curious how other countries see collegiate prestige outside of their own or if US colleges have some extra factor?
Be aware; the list contains a number of events involving the B737-800, which is an NG aircraft, not the MAX.
Ya I don’t disagree that there’s title inflation, but yes they do in this instance differentiate.
Maybe the article is a decoy and what he said is not how he did it.
It's because most of the laws governing penalties for drug use are not created (and are often not enforced) by local jurisdictions. For example, Federal sentencing guidelines are made in Congress.

Local jurisdictions, when they do participate in enforcement, are incentivized on convictions and other metrics and alignment to the Federal system is better. So, even if the local police, DA, judge and others in the system are national minorities, but local majorities, they are still working for the national majority policies.
Yes, but my point is that Debian people always seem to cite “rpm hell” with regard to manually tracking down rpm dependencies, while ignoring the fact that that hasn’t been a problem for decades.
On Linux, Firefox can now run natively on Wayland (you have to manually enable it) while Chromium still can't (but the support is being added). The responsiveness difference is massive
I haven’t done any kind of calculations, but can you say Mercury is closer to points on Earth’s orbit on average than the Earrh is?
Fingerprinting with canvas depends your GPU and font installed. Don't think there are any way out without hurting the rendering performance servery..
Presumably 64 bits were originally chosen because it still permitted simple or naive ASN.1 decoders to return the parsed value as a native 64-bit type. But ASN.1 INTEGERs are always signed, so theses serials would now have to be 65 bits. But any ASN.1 decoder interface that permitted directly storing a 65-bit value into a 64-bit type--even an unsigned type--is dangerous if not broken. I'm guessing that most X.509 management software (much like my own) simply maintains the parsed serial as a bignum object.

Serials were originally intended for... well, for multiple purposes. But if they only function today as a random nonce, and if they're already 65 bits, then they may as well be 128 bits or larger.

A randomly generated 64-bit nonce has a 50% chance of repeating after 2^32 iterations. That can be acceptable, especially if you can rely on other certificate data (e.g. issued and expire timestamps) changing. But such expectations have a poor track record which you don't want to rely on unless your back is against the wall (e.g. as in AES GCM). Because certificates are already so large, absent some dubious backwards compatibility arguments I'm surprised they just didn't require 128-bit serials.
I often get “side channel” attacks - the classic “will you still only eat plants once it’s proven they feel pain, too” or “what’s next? Give animals rights and a say into government?” I excuse myself from the “conversation”
Are you sure that isn’t just the comedown from the anesthesia?
To play devils advocate, the public idolizes celebrities. This boosts celebrities to new stratas of popularity. When their public image gets tarnished it becomes much harder to idolize them thus magnifying the damage. The boom bust cycles are inevitable.
The article talks about how chat used to be a protocol, so you could talk between chat clients.

As though you could log into discord and start a conversation with someone who was only using facebook messenger, or snapchat, or twitter, or whatsapp or instagram or any other service where messaging was possible.

Discord in reality represents a different way of doing things. You can chat with other discord users. That's it.

It's a decent system when the userbase is big and the company is benevolent, but it's a different thing than everyone who does "messaging" agreeing to let messages from any service go to any other service.
This seems highly unlikely to be authoritative -- AIUI serial number unpredictability is critical to SSL certificate security, as without it, it becomes possible to induce a CA into producing a signature that matches a certificate for another domain. Unless something else changed about the format when the hash algorithm was changed, AFAIK this property is independent to the hash algorithm in use

If memory serves it isn't a theoretical attack either, I read about it used against (Startcom maybe?) not so many years ago
The Pixel 2+ does have a coprocessor for compute workloads (the Visual Core). However users here have reported this working on a Pixel 1, which doesn't have that chip.

The Verge says it may reach other devices later.

It sounds like it's both better than the old dictation model, and significantly smaller.
Yes, now certificates are about half as hard to hack as they were supposed to be.
I just don't understand how a tunnel filled with Tesla cars can work in practice. Do you walk to a "station" and load into a Tesla? This sounds a lot more complex than loading in a regular PeopleMover or automated train. There would need to be two tunnels or some kind of turnaround point.
You know that you need to break when you get close to another veichle in front. Now you have a new shiny cruise control (without latest distance keeping feature). Well, you still need to break when you get close to a veichle in front of you.
It differs insofar as when you do it 'above board' more people get a piece of the pie, the pie tends to be larger, and there are more events where the consumption of pie is celebrated. One can argue that the benefit accrues to the university rather than the corrupt individuals, but from the point of view of excluded applicants that difference is moot except insofar as a donation expands the number of admissions or academic resources.
The first and second report look to be the FO's and Captain's for the same incident. And don't make sense as I though MCAS is during manual flight. Why would Auto Pilot need MCAS, it's like Auto Pilot using Auto Pilot?
>Thank you for this feedback. This is really valuable. I believe the confusion started on the first question. After you choose it, you become a contractor in the agreement, not a customer, so many provisions are against you. We will probably delete this option to avoid confusion. We will also improve wordings and use of symbols to improve trustworthiness.

This has left me even more confused. If I'm the contractor why would I want an agreement with many provisions against me? In that scenario I would want a contract neutral to in my favor. Something that will get me past my client's legal team while protecting me as much as possible.

>Regarding the editing, you should have received a final Word document with 100% ability to edit it. Preview is just to get a general sense of the document.

Ah, I stopped at the preview point.
"50% easier than theoretically impossible" means it's now 50% possible, doesn't it?
The rest of this thread (including the parent comment you were replying to) seemed to be about city vs suburbia, so that’s how I interpreted that Wal-Mart story. I’m not very familiar with the suburbanisation process in North America - I’ve never lived there - but wasn’t it driven by the desire of avoiding higher crime rates by moving to less densely populated areas? If so, local suburbanites must have hated that new Wal-Mart precisely because it was a point of congregation. Your reasoning is centered around “in vs out-of-area people” but the way I read it is just “not many people around vs lots of people around”.
I wonder if these parents will be punished as much as parents who get caught cheating on government assistance programs so that their kids have housing or food or health care.

Probably not. They can afford lawyers to defend them and negotiate plea deals and settlements.
No more than "half of infinity" is half finite.
Its 50/50.

Either you crack it or you don't.
Thanks a lot for your tips, I'll follow 'Show HN' to show the project.
The non-experimentation result anti-pattern
Wow, that's nice. I'm going to start using that now.

cjdns always seems so intimidating when I look at it, Yggdrasil looks super friendly and easy.
I suspect a lot of people expect OpenSSL or LibreSSL to be used in this kind of setups.
The first one was Instagram. I tried too many times and had my IP blocked from signing up with Instagram.
Probably referring to A330:
https://en.wikipedia.org/wiki/Qantas_Flight_72
They never quite figured out the root cause of the un-commanded dives
I confess I wonder if the switch to EPYC is cost based or speculative execution bug based.
Thank you very much.

Actually, I don't know what are people trying to achieve when they run these things.

Did you had a problem cjdns was solving?
That's an interesting business model
The investors and executives named in the college admission scam
We'd need some meta analysis of the rate of issues for other plane types by release date to track the declining exponential curve of bugs to legacy.

"all new systems have bugs. this may not be unusual"
Worth noting: ovh have stunningly good rates for RAM, on dirt cheap instances, and you just have to accept there'll be unplanned reboots and their support is, well, they're dirt cheap, it's minimal.

For things that suit those constraints, they're amazing value for money though.
I think you're making a valid argument that misses the larger point.

I agree that the practice of university donations in exchange for college admission is neither legally corrupt nor dishonest.

However, it is still wrong according to our societal values.

That is, we have a value system that we implicitly adhere to and meritocracy is big part of our value system.

At least in the states, we believe that if you work just as hard and contribute just as much as your neighbor, you deserve to enjoy the same quality of life.

When parents purchase access to an elite university for their child, they are conferring an advantage to their child over the child's peers that is unearned and unfair.

Elite college admissions is a zero sum game. There are only a certain number of spots available and purchasing a spot for a kid who slacked off in school necessarily takes the same opportunity away from a more deserving kid.
I'm very similar. There's an assumption that because I'm very into technology, that I must have all the latest gadgets. In fact the opposite is true: I see through lots of the hype cycles and avoid fads, wait for things to stabilise and/or standardise before jumping in, and maintain what I have for years.

I tell people that I've 'seen how the sausage gets made' ;)
No, that’s an oversimplification on my part to not complicate things, you’re right it would need to net higher.
How to Make Your Site More Accessible Without Breaking the Bank
It works fine until some bug arise and nobody have the authority to fix it....
Additionally they'd have decent regular meals, presumably plenty of time to sleep, and time to work on schoolwork. Plus they probably don't need to work while in middleschool, highschool and college.
The basic story as I understand it is that DarkMatter under contract to the United Arab Emirates wants to become a trusted CA, and they are widely expected to start running a governmental MITM once trusted, but the CA root programs don't have any provision for "You're a bunch of sketchy creeps, we don't trust you." (Oddly enough for a "trusted" root program, there is generally no actual evaluation of trust as conventionally defined. The "trust" part is "can you pass audits and generally be technically and organizationally competent to not let your private key be stolen / your infrastructure be abused by an attacker." Individual employees are part of the threat model, so there's usually a two-person rule for access to the private key; entire malicious organizations willing to lie in public and cover their tracks are not envisioned by the model.) So people are trying to block their application by nitpicking technical mistakes that, by the letter of the Baseline Requirements, disqualify you from being a CA.

https://www.eff.org/deeplinks/2019/02/cyber-mercenary-groups... covers some background on DarkMatter.

One of the Baseline Requirements is you may not issue certs with fewer than 64 bits of entropy. Turns out DarkMatter was doing that, by issuing certs with 63 bits of entropy. Also turns out this was a thing lots of CAs did. Now that it's been pointed out publicly....
Amazon can believe whatever they want, but when they say "maintainers of an open source project have a responsibility to ensure ... " - I call bullshit.

Those maintainers owe Amazon nothing. The have no responsibility to Amazon. None.

Same as they owe me nothing.

By definition (if you use any of the more-that-two-or-so-year-old definitions of "open source"), the project is defined by "remaining free and open", in that you can always use the code and license you've been using - but there's no way anybody can make it a "responsibility" of a maintainer to to anything in the future. They could die, they could get bored, they could get an all-encompassing job, they could get a family, they could get venture capital and license any future work with a non-open source license (as Redis and Elastic have done, at least in some people's view).

The "the promise the maintainer made" was "here's some code, under GPL or aGPL, or Apache Licence, or Artistic license of BSD three clause, or whatever the promise at the time was. Take it or leave it. No future responsibility assumed or enforced. They might even have a track record of releasing more stuff under the same license/promise. But they can stop or change things whenever they want.

If Amazon wants the maintainers to do anything else (including ever committing another line of code or fixing a bug), they can wait for them to do (or not) it at their discretion, or they can pay the maintainer (or someone else) to do it (and then, depending on the license, potentially be required to release that code under the same license.

Sorry for the rant, but that line caught my eye too, and I got immediately pissed off at Amazon's sense of entitlement there. No open source maintainer owes you shit. They've shared what they've shared, and you can take it or leave it, but you taking it doesn't place any obligation or responsibility on them.

(deep breath)
Yeah, I'm not saying anyone should. Just a reminder of the possibility.
If it works, it prevents mass surveillance and makes insider attacks much more difficult.
Possibly the closest thing to an intelligent alien we will ever meet, and it gets tired, closes its eyes, goes to sleep, and possibly dreams. Cute and comforting all-in-one. :)
I think this is the real source of nostalgia. Kids these days are presumably still chatting to each other all day on the AIM of the era. Snapchat perhaps?
What is the big difference in outcome between if a government or a multinational hundred billion dollar corporation conducts mass censorship?

>Facebook can do what it wants here. If you don't like it, divest.

"Country X can do what it wants. If you don't like it, leave."
> what about the message this sends to the kids that it's OK to cheat your way through life?

Maybe they don't think they're cheating. Maybe they've just grown up thinking they deserve whatever they can buy.
Well for example, some comparisons to the CNN paper you pointed to:

- No comparison is given of number of model parameters. If optimizing strictly for model size, RNNs tend to be nice and compact.

- The computational advantage of the CNN at training time is throughput. The advantage of RNN at decoding time is streaming latency. Running the CNN frame by frame as they are received removes the ability to run frames in parallel and if the CNN is larger, it will run slower, and depending on its receptive fields it may not even stream well at all.

- That particular CNN system uses a strictly external LM that is not jointly trained and has an additional hyper parameter at decoding time to weight the LM that requires additional tuning.

- It is still autoregressive in the beam search, so the LM will still be run many times sequentially adding tokens just like an RNN LM, and is likely to be more expensive. The throughput advantage a conv lm has in scoring whole sentences is totally lost. In fact, there doesn't seem to be anything special about the choice of a conv lm for that paper except that it is fun to make all the parts convolutional.

- CNNs frequently require more total flops, but are high throughput on eg a GPU because they expose so much parallelism. On an embedded CPU this can be a bad tradeoff.

As a side note, there's no reason that CNN architecture, which in the paper is trained with a close relative of CTC and is decoded identically to a RNN CTC AM + external LM, couldn't be trained as an RNN transducer. Despite the name neither the am nor lm have to actually be RNNs.
If all of these decentralized identity companies truly want an open and self-sovereign system, the big question is: are they willing to shutdown their operations once that is achieved?

Or are they all attempting to monetize identity with various business models that are against the stated goal?

Identity should be owned by the individual, and the universal decentralized/distributed identity protocol should be owned by the commons. Any for-profit business model for identity (90% of the member companies) will inevitably seek to silo and exploit data to achieve monopoly and extract economic rents.
Well, they don't - but then they'll eventually get the reputation of being a party school rather than the prestige that goes with outstanding academics.

It feels like having a purely merit based population of students would create a very stagnant and dull environment.

'This university sucks! Everyone here is a nerd.'

OK, you probably did not mean it that way but I can't resist having a little fun with this. If all you want to do is shake things up, why not just draft random working class people via lottery? For extra amusement, make them go even if they don't want to. True, we would not learn anything about the perspective of the super wealthy, but they already have billboards and TV stations to inform us of their opinions.
I think the bias against crack has more to do with the public perception of a crisis versus powdered cocaine.

Crack was regarded as a national emergency in the 80’s. That never happened with powdered cocaine beyond the local drug wars in Miami.
I completely forgot about Adium. If I remember, there was an iOS app too at one point? Or there was a way to have it push messages to you phone when you weren't at your computer?

Slack, Discord, Messenger, ... should have made Adium clients as alternative to a full blown Electron App. That would have been pretty rad.

I clicked on the source link and development tab only to be greeted by an expired security certificate error and broken Trac. I take that as it's not maintained any more. Sigh, so sad.
Relevant xkcd: https://xkcd.com/2030/
The interesting aspect that a lot of people are overlooking is that, for a theoretical attack within certain timeframes, this difference can be make-it or break it!

Imagine a collision attack that takes about a 1 year with 64bit serial numbers, so with 63bit serial number it should take about half, at 6 months.

The average certificate is issued for about 1 year, so being able to mount a collision attack that took 1 year in 6 months can make the difference from generally-not-useful to very practical and dangerous.
No doubt it's a disappointment for these kids, but they will get over it pretty quickly. People have a powerful ability to protect their ego and tell themselves what they want to hear.
> Do you think this hormonal response has no impact on weight loss (or, for that matter, muscle gain)?

That's way too broad a statement for me to blanket agree or disagree with. Short answer: no I definitely don't think that. Long answer: basically everything else I said in this thread.
I got it. Thank you dang
I don't know. Purdue is much easier to get into then IVY league schools and yet ranks better in CS than 3/8 of the IVY league, tied with one, and really isn't far below than the other 4 according to US News [0]. Based on my assumption that Purdue is highly rated because people who graduate were the top X% of students and others were weeded out or re-took classes to learn the material better, would you rather have the filtering/weeding_out for "better" students be done at the high_school->college choice level like the IVY leagues which are highly selective but grade inflate or the people who graduate from college learning the material you probably require for the job where grading is tough?

[0]: https://www.usnews.com/best-graduate-schools/top-science-sch...
Maybe Boeing poached the guys responsible for Tesla's panel gaps, who knows?
I believe this is only an issue if you can produce collisions for the underlying hash function. SHA256 is still considered safe against that.
Envoy is not the web server, it's load balancer. If you want to serve static files It will be better to use any other software. Furthermore, it is a very complex problem for HTTPS servers, because the Linux kernel doesn’t have full-featured TLS support for sendfile syscall. I implemented daemon which is used as in-memory storage for static files and client for our proprietary web server. Trust me :)