skysight-inc/HackerNews huggingface dataset:
> Attackers must recover the entire prekey with high accuracy before they can attempt to decrypt the shielded private key, but the current generation of attacks have bit error rates that, when applied cumulatively to the entire prekey, make this unlikely.

It seems the real mitigation isn't the prekey size, but the temporal sparseness of the symmetric key -- since I would've imagined attackers would just try to obtain the symmetric key rather than the prekey. Weird to see they they didn't even mention this... I imagine attackers would try to find a way to get the symmetric key to stay in memory for a while.
The stories linked sound a lot like the stories of people trying to get support from Google for ... well, anything except big-money GCP issues, really.
Seems like you could make a fan out of this stuff that could be used to vent the heat from air conditioning units instead of using electric fans.
Interesting, isn't it. I get that huge scale is very hard, and I'm sure the iterative small optimisations become increasingly difficult... but the MVP of an Uber-like app wouldn't seem to be hugely complex?
Scrollpercent
Yes, I use TypeScript types very idiomatically and have received very positive feedback on my TypeScript code. But just running `tsc` takes >10 seconds on a relatively small project, and IDE support is becoming proportionately slow, e.g. hovering over anything to show its type often takes 5-10 seconds before VS Code will actually have something to show me. It's becoming painful, and that feature which I once heavily relied on has become nearly useless to me.
You can grab free Windows VMs that Microsoft provides for browser testing. They expire after 90 days, but they are usable for the purposes you mention (except gaming).

https://developer.microsoft.com/en-us/microsoft-edge/tools/v...
A lot of people are extremely dependent on Wine (myself included) to run Steam games through Proton. I have a VFIO-enabled VM reserved for games that don't work, but it's much more convenient to be able to just play games on Linux.
You want your own domain. I don't know how I'd cope with the mess the internet is without an infinite supply of disposable email addresses.

The next question I always get is about how annoying it is to go make an email address in the middle of checking out is. I personally always have a shell open - I'm a command line person. So I just run a script, `nem spammystore-com190621`, done. (And then `dem spammystorewhatever` when they start annoying me.)

I've fantasized about writing a browser plugin that scans the page for entered email addresses and shells out to create them on submit, but (a) I'm not even sure that's entirely possible anymore, and (b) wiring my browser up to something that runs sudo on remote machines seems like maybe not the best idea I've ever had.
My initial thought was roughly the same -- I have wifi at home, at work, at the gym, at the coffee shop. The only time I go over 2GB in a month is if I turn off wifi for some reason and forget to turn it back on when I got to work/home.

But to your point, I also watch videos primarily on my laptop, not my phone. I also have a phone with plenty of storage so I can cache all my most listened to music, my audiobook, and latest podcasts.

I technically have unlimited data, albeit dropping down to 2G speeds after 2GB, but I almost ever hit that limit. The cost isn't a factor for me, since it's flat-rate. I know it is to some people, but it's the presence of wifi and my preference for watching videos on my laptop that keeps mobile data usage low.
Vice on HBO did an episode back in 2015 looking at several different experimental (at the time) cancer treatments which included a segment on the fourth patient to receive CAR-T.

https://www.youtube.com/watch?v=FlK-PeCfezM

The CAR-T segment starts at 27:30.
How Accurate Are Your User Personas?
I fly gliders. Absolutely can't wait until my local club finally decides to get an electric single-seat self-launching glider, preferably with enough endurance to do some additional tens of kilometers after the launch, in order to avoid landing out if the weather dies out. It's a gamechanger with regards to both costs and convenience. No towplane, towplane pilot, no outlandings.
A battery fire is a scary prospect unless the fire can be effectively contained and the hot gases vented (I don't suppose extinguishing one is likely to be an option.) There has been at least one crash involving fire, though I have not been able to find out if it was a propulsion battery fire. [1]

In Eviation's Alice, the failure or shutdown of one of the wingtip's motors would require the shutdown of the other, on account of asymmetric thrust. It can be flown on the rear motor alone, but I do not know how well it would climb in the case of a motor failure on takeoff. Maybe an EE can step in and say whether electric motors can be over-powered for relatively short durations (in this case, a few minutes to return to the airfield) without much increase in the risk of it failing?

BTW, I see that this prototype is a tail-dragger, though rendered images show a tricycle gear.

[1] https://electrek.co/2018/06/04/siemens-electric-plane-protot...
Decentralized video infrastructure platform Livepeer raises $8M Series A
>Recently my water bottle leaked on my $2000 Thinkpad and fried the LAN card. ... Instead I did some research and found a $20 replacement card on Amazon. It took me 15 minutes to fix my laptop. I felt a great sense of pride afterwards for avoiding a great amount of environmental and financial waste.

Laptop parts are commonly available on Ebay for very cheap. Laptops are generally very serviceable (especially Thinkpads, Latitudes, and other business-class ones; MS Surfaces are not however) and it's not that hard, with a small screwdriver, to take them apart and replace various circuit boards. Considering how much a new laptop costs, and how cheap something like a miniPCIe WiFi card is, it's absolutely worth it to repair.

Another important thing is that many mass-produced things fail in the same way, so you can frequently Google for your product and failure mode, and find someone talking about what the problem was and how they fixed it. YouTube is an excellent source for repair videos for many things; frequently companies selling repair parts (such as for appliances) will make these videos themselves, to help boost sales and as free advertising (which they actually get paid a little for if lots of people watch the video).
What can be destroyed by paying its workers enough to live on should be.
Yes... soldered RAM, hard drive and everything into a pricy motherboard so if any of the cheaper components fail, you can pay for a whole new motherboard.
> Today Inkscape was crashing when I tried to rotate a spline with six nodes in an otherwise empty workspace.

Yep - similar experience with Inkscape. I mean - yeah it's fun and it's pretty capable but it's just really not capable of real work. It's a toy/open source "entry-level" piece of software.

Now imagine someone who needs to crank out 40 unique pieces of vector art within 4-5 days. There's NO WAY they can AFFORD to use Inkscape with those sort of stability issues.
You're suggesting an emulator, which is absolutely correct and a worthwhile reminder that we can emulate 32bit without any problem.

It's also worth considering the context, WINE (WINE Is Not an Emulator) provides an abstraction layer that doesn't require the overhead of an emulation layer.

DOSbox is similar. (EDIT: apparently it's not, and is actually an emulator. TIL.)
Ask HN: How to handle code reviews with a visually impaired coworker?
Hello World,

My dev team has switched to a workflow using merge requests and code reviews (mostly by commenting the merge request). Our tool is Gitlab.

I needed to embed a visually impaired co-worker in my team but I face some difficulties:

- Gitlab accessibility seems to be really bad and my co-worker is unable to use the interface to create Merge Request (he uses accessibility tools, of course). I dont'even speak about reading and writing comments in merge request.

- I don't know how to handle the code review process with him. We could do physical Code Review sessions, but it's difficult because I've a very chaotic schedule and so it's difficult to find a common timeslot. Furthermore, it's very difficult for my co-worker to handle all the remarks in one session for any Merge Request with a significant amount of code.

- I need to keep in place the existing tooling for the rest of the team

Does anybody knows of tools interfacing with Gitlab (or the git repository) or methodologies that could help us ?
Your comment about television isn't in the same category; tv and Netflix et al are content delivery mechanisms whereas this article is talking about the content itself, not delivery.
Agreed -- makes me think of the Fleabag example.

Think it's much easier for people to consume 25min chunks across 2 seasons (6 episodes each) than a full-length film.
Young men aged 18 still have to register for Selective Service. The underlying issue remains: 18-year-olds ought be able to vote for or against people with the power to draft them.
That the path of pretty much all mature industries. They got big because they did something novel but once they reach the top they have to spend all their energy defending their position and can’t/don’t want to do anything innovative. They hide behind processes, statistics , surveys, AI and whatever to avoid any kind of risk.

You see the same in tech. It’s been a long time since the biggest players have done much innovative stuff.
Probably true, but how does that jive with the perception that it was all triggered by below-cost discounts from the likes of Jio to grab market share at a huge loss, and that it's not sustainable?
"Just buy two!"

Another case of someone passing the blame from a manufacturer of faulty hardware (Apple) to the customer.

Is there a going term for this phenomena? There should be, by now.
Walmart uses AI cameras to spot thieves
Compressed versions of the load/store instructions don't support 8bit or 16bit values, so in situations where you most care about memory usage you're forced to use the full size versions.
Except for Netflix which is $8/month, rest of the streaming services are very cheap. Hotstar has content from HBO, Showtime etc. Amazon Prime is ok. There are lots of Indian streaming services with Indian content. A lot of data consumption in India is video content hosted within India.
That's great that everything works so well for your use-case but this isn't a PC vs Apple issue. There's no need to repeatedly try to convince anyone that your way is better. We all live different lives and make different choices.
I'm sorry; I don't follow. Could you clarify?
Curious how Quibi comes into play with short-form.

Have also noticed Fox Searchlight has been recently acquiring short films out of the past few film fests. Believe they're making those avail on their YouTube channel.
Fair enough, are you saying then that there could be a case for young women who don’t yet have to register for selective service to have this pushed back?
I wonder if with electric we can fly higher like much higher maybe 80k to 90k since we don’t have to worry about the engine stalling. Could this also make the flight times comparable or faster? For sure less turbulence. As someone who lives on a flight path I’m eager for the change in noise pollution too- though I’m worried the transition will take decades...
Grease isn't something that Kitchenaid makes. You should be able to easily buy appropriate grease anywhere for dirt-cheap. For small appliances with plastic gears, it's most likely some kind of white lithium grease. A little research online should tell you what kind of grease is appropriate for that application, and then it should be easy to get some inexpensively, perhaps even at your local auto parts store in a tiny single-use packet for $1.
That has nothing to do with what you said or my reply. I wasn’t arguing for or against little pantry.

But to your brand new point, can there not be more than one system to give to the needy? Maybe you don’t want to carry can goods with you to work, maybe you don’t want to interact with strangers, maybe you want to help people at times you’re not physically in front of them.

It sounds like you have a bone to pick with this concept but you lack a compelling reason to argue against it. Here, I’ll share my reasons for not installing one at my house. The wild animals will want it, the heat here is extreme and will cook its contents, and I don’t want strangers loitering in front of my house.

Still it’s an interesting concept. It might work well for some people is some areas.
Also, I don't keep my laptop in my front pocket, inches from my groin.

I suspect that was at least part of the emotional response in the Samsung incident.
You have your data backed up, yes? Just curious.
Businesses still run mainframes from the 1970s - so, get ready to wait a century.
> I cannot imagine owning a laptop that doesn't allow me to switch the internal drive.

+1. One of the (many) reasons I'll never own a Mac.
Feature 2A: Vowel Quality Inventories
Yeah - it's not about that. GIMP and Inkscape are incapable when it comes to professional graphics work.

Broken tools cost my client money.
Saying it's about the handshake is not a comment on performance impact, and doesn't need a patronizing "TFA". Especially when the article just talks about 'signatures', in a way that doesn't make it obvious exactly when this key is being used.

This code is probably not adding more than a millisecond, but it's not at all true that handshake speed is irrelevant. If you rewrote the RSA code in a slow secure way, going from 100ms to 5s on a slow chip, that would have very real effects.
For some thought-provoking insights into the scale of the changes ancient American civilizations brought on the landscape, see the book 1491 by Charles Mann.

Maybe the most intriguing idea in the entire book is that the Americas were ten times more populated at the time of European contact than they ended up becoming in the 1500's (when most eye-witness accounts were written).

The "noble savages" we think of were remnants of a disease holocaust that wiped out 90% of the population. It's almost as if we're trying to understand European civilization by observing concentration camp survivors.

The recurring pattern: small group of Europeans makes contact with a native group. They report a land teeming with people and trade. A hundred years go by, and almost nobody is left. Those remaining live in small bands eeking out a subsistence living.

The culprit: smallpox and a host of other diseases that jumped species in Europe due to co-habitation with animals. The lack of such practices (or animal domestication in general) in the Americas meant that the disease transfer was destined to be one-way.

This dynamic may explain why there's only one genus of Homo left alive today. Whenever two groups contacted each other, one inevitably succumbs to the diseases carried by the other.
Um, that’s comparing a jet engine to an electric prop. Apples and walnuts - the two propulsion methods couldn’t be much more dissimilar. A more equivalent prop plane (with similar capacity) would be well under $100 for fuel costs, potentially even under the $50 range.
It seems existential questions must have arisen, otherwise why would people care about religions and their answers?
I wonder what evolutionary pressure produced my intense desire to pick up kitty cats and bury my face in their tummies if possible. Because reflecting on it, it does seem like an odd behavior.
> options for offering non-tracking/non-advertised accounts for those children

LOL, that's the future of privacy, setting your age to below 13.
A more reasonable statement would be something like "Rust makes it easier than C++ to write modules that wrap unsafe operations behind safe interfaces". That's true, but it's not true that module boundaries somehow inherently contain the effects of unsafe code. It's pretty clear that they can't do this, given that the code all ends up being linked into one executable. Thus, makomk's original comment seems entirely correct to me.
Could Changing the Design of Research Posters Speed Science?
PizzaGAN gets the picture on how to make a pizza
Why ['1', '7', '11'].map(parseInt) returns [1, NaN, 3] in JavaScript
I understand it to have been essentially a proof of concept, not something that was intended to provide motive power to a machine. Given that, its simplicity would likely have been more valuable than its efficiency.
I wasn't suggesting it was the main theme by any stretch of the imagination. But the scene commenting on how terrible it was to be compelled to silence made the single biggest impression on me from the entire movie, even though there are plenty of powerful scenes.
Ghjattu-volpe is a noun-noun compound, not a noun-adjective pair. Cat-fox is correct.
Thanks, glad to hear!
Being drafted was never an age-of-consent or age-of-responsibility thing; it was a “we want as many people as possible, doesn’t matter the age, but the public will riot if we ‘steal their kids’ so we have to figure out the minimum age where forcibly sending their sons and daughters off to war is won’t upset people to the point of rioting.” That’s 18, for some reason.
https://github.com/jakearchibald/streaming-include/blob/mast...

Also lists alternatives - see how whatwg request is bogged down in what/if complexity.
35$ for 1TB up/down, 150 Mbps. Available in all major cities. Good enough?
This is why I'm so excited for lithium-air batteries. Theoretically they'd carry ~40.1 MJ/kg, which is very competitive with gasoline's ~46.8 MJ/kg. Factoring in the higher efficiency of electric drives (95% vs. 35% for say a regular ICE car), you'd be getting effectively over double the energy per pound in terms of moving you around.
I couldn't live without Wine (or Crossover). I develop web apps for a small company, and Ubuntu Mate is my primary development environment. A lot of our software relies heavily on Word and Excel because that's what our customers use. And Wine does a superb job of integrating Word and Excel into the Ubuntu desktop. Hats off the the Wine developers for the amazing job they've done.
My understanding was that the genetic diversity in humans is actually quite small due to a near-extinction event about 70,000 years ago.
> My assumption is that Linux users(myself included) that use Windows applications(not games), tend to just run a VM in seamless mode for Windows functionality.

Running in a VM requires an additional Windows license. I'm not even sure if you're allowed to use an OEM license for a VM, or if you need proper retail or even one of those "VDA licenses". It's precisely this kind of stuff why I still use Wine.
Higher means lower air density, meaning less lift, meaning higher power usage, which is even more critical with electric
I use Wine to run Adobe Digital Editions because the proprietary DRM is the only way to get library epub files onto my eReader.

It's very valuable to me for this use case, and AFAIK, there is no viable alternative on Linux (other than cracking the epub DRM, which I really don't want to do and risk giving publishers an argument against public libraries.)
This plane wouldn’t even be capable of getting me to the closest aircraft hub at its maximum range, let alone with a safety margin (I live an hour and a half, by jet, from Denver). Not to mention it will be slow and badly impacted by storms (since it has an operating ceiling of 10,000 ft).
> when you are in no mood to invest the significant time and effort on a standing start for <X> when you've got your existing toolset warmed up already

Sure, and on the contrary I've added Procreate on an iPad as my new illustration workflow because it absolutely kills vs. my old Photoshop/Wacom technique.

This isn't a "I'm not willing to try new tools/invest time into learning because I'm comfortable" thing... it's a GIMP/Inkscape are not capable thing.
If only land were taxed, single family homes would probably not even exist. They'd all eventually be torn down and replaced with apartment buildings as dense as the law allowed. Not a great consequence either.

The need for city services (which property taxes fund) tends to scale more with population size, than with land area.
One potential concern with this normalization is that it could boost institutions with a single world class research group. That group could be pumping out papers while the rest of the school is average.
Wow, the training time difference is much larger than I thought it would be. The main reason I use Flux.jl is because of its flexibility to just throw existing Julia libraries into it (DiffEqFlux.jl for neural ODEs, neural SDEs, neural PDEs, neural jump diffusions, etc. took surprisingly little work). However, I assumed that the CPU kernels would all be relatively comparable between the different neural network frameworks. This is a quite a compelling example that, at least for small neural networks and little data, the overhead can be quite large (quite large as in 10x!).

As the size of the neural networks grow this will fade away due to spending more time in the BLAS kernels. However, for non-standard applications which don't spend their time mostly in a neural network (like many neural differential equations according to our profiling), this difference would make or break an application.
Are you saying you think their angle was to reach a conclusion that sugary information is addictive? It sounded like that was the starting point. What's the issue?
I imagine planes could fly a bit higher, but aeroydynamics are still going to be a big factor. See also coffin corner.
I think that the Linux kernel is reasonably secure, but it still suffers from frequent vulnerabilities.

But to answer your question, I think you see a lot of Android malware for two reasons:

1. Android devices aren't usually patched with the latest security fixes.

2. Most malware exploits the application frameworks that sit on top of the Linux kernel. These frameworks aren't nearly as secure. And if an application framework has a kernel-mode component where code can be executed? There goes most kernel security protections.
A lot of people are uncomfortable with mass surveillance but there seems to be an unstoppable wave to implement it. Same with climate change. A lot of people want to do “something” but there s no will to really change things so we will just deal with the consequences in the future.

Get ready for a mix between 1984 and Brave New World.
Netflix (and Amazon, Hulu, HBO, etc.) are both content delivery and studios. The two functions don't need to overlap but it appears as if that's what's needed for differentiation and stickiness.
Eh, Verizon just offered unlimited data for free for my whole family.
I think we can be reasonably certain that drug crimes are not 327 times higher in the UK.
In major metro cities fiber to home with >50 Mbps is common. Tier 2 cities and below have to depend on the state owned telecom provider BSNL who offers 2 - 10Mbps or cellular internet.
We will have to agree to disagree. IMO the compositional paradigm of hooks is radically different than using classes for example.
Show HN: Rent a Hive – Of real users to swarm your website
Eclipse 2019-06 IDE Improvements: Java, Maven and Gradle
Ugh.

I live in Arkansas, and my AT&T bill this month is $410. Granted, about $150 of that are payment plans for devices, but still. The base rate plan is $110, and there's a $20-30 per line fee for four separate lines.

I have an iPad Pro 11" LTE and an iPhone X, my wife has an S10+, and I handed down my 6th Gen iPad LTE to my 10-year-old. It's a lot more than "needed", and our aggregate data usage is 30+ GB/month, but still. The difference in cost is staggering.