skysight-inc/HackerNews huggingface dataset:
Assuming you rinse them off and you have a reasonably large amount of cutlery, I'd say you are definitely too paranoid about this specific thing. Your entire kitchen is a bacterial growth medium - just leaving things out means they get covered in bacteria. Those bacteria will grow and this is fine - the most efficient use of your thoughts is fixing the really large offenders, one of which is: Do you properly wash your hands (most people do not, or at all)?
You might also want to go a UX route, if IP would indicate a certain language - but browser is set to EN, emphasis could be set on the option to change the language. You could even simply ask the user for his preference.
That's really nice, thanks. I wonder how my Google fu failed me here. Bookmarking!
The malware attack on Lake City, Florida, which paid ~$460K to free 16TB
It wasn't an assumption, it was a goal. The project was supposed to encourage peaceful cooperation by giving everyone more land and a constructive project to cooperate on. Which is naive, yeah, but he wasn't unaware of the current political situation.
Unpopular opinion alert. Having a family is a new skill. Embrace it! Put your other stuff on hold for a few years.
Wash them quickly. Bacteria growth is not significant on the order of minutes.
Colinux was freaking great, I could run an OpenSSH server on port 22 and sometimes ending up on a Linux box, sometimes on a Windows box. Weird.
Does Wall Street going to absorb these people back or they might have to find another trades all together?

How general the skills learned on the Sales and Trading are?
TLDR: Cutting out all the fluff about developers screwing themselves when they try to roll their own solutions, his argument is that it's the necessity of padding that makes RSA fundamentally insecure, and we should use ECC instead.

It's not a new viewpoint, and there are arguments for and against.
What about spectacles that generate a lot of tax revenue for the rest of the city?
Number of bots were actually much higher a few years ago. Lots of likes, comments and follows were all automated by brands. They did a good job to ban lots of bots. So it seems less likely that it is the future of Instagram.
crypto_box_easy(ciphertext, MESSAGE, MESSAGE_LEN, nonce, bob_publickey, alice_secretkey)

Where do you see a place for parameters?

Even if there was some choice, it would've been a choice between known good options, no footguns.
How about the United States of America?
A fourth distinct Lisp is Emacs Lisp.
>If you can recover in any way

Physically replacing every single component, one by one, will lead to a recovery.

>I stand by words mean things.

They are an abstraction of thought to enable communication and external storage. A very leaky abstraction.
Yes, Sony Ericsson A200 had a bug in SMS picture decoding (old, monochorme, pre-MMS one) which was easily craftable into an exploit if carriers were allowing multipart SMS.

Guess what cell carriers did back then? Yes, they disabled multipart SMS
Oh, hey, [2], that's me, glad you liked it.

FWIW: while I clearly subscribe to the notion of cryptographic education, I also thing that we should give people high-level recipes. Why are they the right ones? Yep, you gotta trust me. I'm fine with both of those existing ('tptacek and I co-authored our Cryptographic Right Answers doc from last year) because they have different audiences.
Bitfinex says it's paying back its investors–but won't give any exact figures
The blog fails to explain why trailofbits are recommending ECC over RSA when the NSA is now recommending not using ECC and instead recommends RSA.
https://eprint.iacr.org/2015/1018.pdf
weberlars/diuid https://github.com/weber-software/diuid runs a UML in a docker container, which then runs a Docker daemon of a different version inside. Clever.
Seconded.

For governments to do anything, individuals need to do at least one seemingly ineffectual thing: vote. But voting is a poor signal. You vote in most cases for representatives and these representatives stand for many things. To improve the signal you need to show this is why you voted, and that you will do it again. By doing the small, seemingly ineffectual things you can do as an individual you are signaling your preferences to people who can do more.

And more than this, by doing something, anything, you are in effect voting for the behavior you think is acceptable in your society. You yourself are more likely to do another small thing. Your neighbors will be a little less enthusiastic to be seen doing nothing. People, everyone, is looking for an excuse to pamper their present selves at the cost of other people and their future selves, but few people are so thoughtless and selfish that they will do this in all circumstances. By making this choice a little less comfortable for yourself and others, you shift the ratio: how much burden you and others will take on now versus how much you put off on others.

The truth of the matter is that if everyone would just do the little, seemingly ineffectual things we wouldn't need the government to compel us or engineer our incentives. The fix we find ourselves in is the cumulative result of many individuals doing small, seemingly ineffectual things that made things worse.
Foley Catheters Market Present Scenario and Growth Prospects to 2026
If you buy property in the uk the money will have to be handled by a solicitor who does checks for money laundering.

In the US any property can be owned by an anonymous business which you own through deeds.
Use Planoly. You can preschedule content and will post it on your behalf.
What parameters do you have to choose? Apart from nonce, which is confusing for most people who don't read documentation, and computational params for password hashing (unavoidable), there's no parameters to choose from (no curves, no hash functions, cipher modes, etc.)
You are convinced that I am incorrect, but I can't actually see from your response in what way I am incorrect. What are those much acclaimed firmware differences? What makes the Galaxy Note especially "well beyond" competitors, I am assuming even compared to the rest of the line (what are the differences between those?). This way, maybe you will enhance my life with some new knowledge. Maybe I'll even agree with you. Who knows!
Unless I am stupid, these are all implementation specific problems (e.g.: bad key selection, bad key size selection, exploits due to coding errors, etc.) and this does not tell us anything new about prime number factorisation.

If this assumption is correct, why not just recommend a key size and some checks for generation than recommending elliptic curves? Elliptic curves have their own problems especially due to their complications around exploits of specific curve properties but more importantly the fact that programmers won't understand what they are calling in their code.

I understand that libsodium has been here now since 2005, but are we really at the point where we should stop using RSA just because a lot of Salesforce/Oracle/Azure/<insert boring job> developers are misusing RSA? I guess this question is really about whether we are at the anecdote stage or the herd immunity risk stage that OP mentions.
The prospect of doing React server rendering within the JVM, rather than in node, used to be a lot more attractive to me before I switched to containerizing my apps, specifically with kubernetes.

Now, the benefit of using the best tool for the job, and separating concerns (the API and the React server renderer can be deployed, logged & scaled independently) far outweighs the overhead of managing and connecting several different runtimes, because that's trivial with k8s.

The only slight advantage I can think of is loading data on server renders 'in-process' and not having to go via http, though I emphasise slight as this is certainly not a bottleneck and not something I worry about at all frankly.

I think this is cool, and I get that Clojure + Clojurescript add another reason to pair these things together and perhaps this is quite a Clojure-specific thing, but just wondering if anyone would pick this over running separate JVM + node services in k8s or similar (assuming that's an option)?
I think what happened to D-Link should be standard. They have to have 10 years of independent security audits.
or a way for Germany to eliminate British sea power in Mediterranean, and provide convenient German land route to Africa
Writing hello world using Caesar Cipher
That's not really a coupling issue, but a matter of GPU drivers not generally being hardened against shader/usage bugs. Similar issues have existed on Windows, Linux, etc. browsers with WebGL support.
The statement is predicated on the entire system being ungrounded (i.e., everything on your side of the transformer). Voltage is relative; if there's no prior connection between two systems, when one gets connected to the other, the systems become referenced to each other at that connection, through which no current can flow (since it's the only connection), and hence exhibits zero voltage across it. In this example, the other half of the power outlet is then 120 V relative to whatever the person is touching (presumably Earth ground).

(Also side note: in the US system with hot and neutral, neither is 60 V from ground. Hot is 120 V from ground, neutral is (ideally) 0 V. Only in a 240 V system are the voltages symmetric.)
I may be biased, but I think British plugs are great. They have integrated fuses and are switchable too! The sockets have shutters as well to stop children sticking paperclips or forks in and electrocuting themselves.

Not great to stand on, however
One more reason, given the huge amounts of salt all the new area would be a wasteland, and quite honestly just more space to fight
Look at Chicago for an example: It's one of the most restrictive states in the union on 'gun control' yet has some of the highest murder rates and death by guns across the board.

Seems to have worked GREAT there!
I didn't mean no learning on the job. The time to learn is between projects. If your employer keeps people on projects constantly, then learning happens between tasks.
Quassel is very nice and achieves the level of desktop integration people expect nowadays (notifications and so on). It's nicely GUIfied and it's QT so it themes nicely. It also has a core/client split so you can put the core on an always-on server somewhere.

There's also an Android client, making it a pretty unified system. You can seamlessly switch between laptop and phone.
> Amazon clearly does not compete by hiring the best engineers. Rather, they compete by throwing money at the problem and undercutting everyone else, getting by with mediocre engineering.

Evidence please. Amazon has a lot of freaking fantastic engineers and "throwing money at the problem" is definitely not how they solve problems.

It's a huge company and not every single engineer is excellent and there are definitely rotten bits but that's true of _every_ company that's large enough.
100% this! Googling for jobs is free and easy. See what's in your neighborhood. Working 40+ hours a week on solutions is the best way to up your climate game.
Qubes OS: https://qubes-os.org
Emojis are increasingly in court cases – judges struggle to interpret them
> An Inky display from Pimoroni. We've tested the Red PHAT

I tested it too! It was actually really good as an NTP client clock attached to a Pi Wireless Zero. I had it update every minute, then every 15 minutes it would get the time from my Pi NTPD clock server and display the offset in red. Longevity was excellent: it did 763,200 updates in its lifetime.

The Pi actually died following an attempt at an update but the display seems to still be operational.
I think the article misses the point of what people can do politically and what we can as a tech community do using our skills.

For politics, I encourage everyone to look at Climate Citizens' Lobby [1]

For tech, there are now a few communities creating projects like climatechoice.co [2]: [3][4][5]

[1]https://citizensclimatelobby.org/

[2]https://climatechoice.co/

[3]https://climateaction.tech/

[4]https://techimpactmakers.com/

[5]https://www.tmrow.com
Where do those consultants/developers come from? Are they born from Crypto eggs with all the knowledge in their brain? Or how do those mighty people come to be?
You would need an obscenely large key size to make RSA post-quantum secure. The speedup a quantum computer gives you isn't some linear factor. People have explored what that would look like: https://cr.yp.to/papers/pqrsa-20170419.pdf

But more importantly:

1. No, quantum computers that big don't exist.

2. If they are somewhat practical, you really want perfect forward secrecy so they at least have to break a classically hard problem _every time_, which is unlikely with home-rolled RSA systems.

3. If you do care about post-quantum KEX (because your information needs to be secret for longer than you can count on quantum computers not being practical), we have faster alternatives, like SIDH.
The term has nothing to do with the users capabilities. A person with a broken phone will bring it to their nearest tech person or genius bar.

A bricked phone means it has as much use as a brick, therefore fully unrecoverable regardless of technical skill.
Potential difference between two otherwise not-connected systems is not well defined. In practice the system will not be totally ungrounded, but there will be some high-impedance path to ground, and the impedance is hopefully large enough to not allow any significant fault current to flow.
Thanks for clearing that up.

Now is it unusual for sensors and computer controls to help meet the airworthiness requirements?

I’m guessing it’s definitely not preferable.

I also think everyone is agreed that Boeing (the company and decision makers) really fucked up here, but it seems like a chain of bad decisions at every stage has played a part in this disaster.
Hmm. OK, better wording would be "Handling mitigation such as MCAS is required in order...". I've seen several news articles, such as the one cited, which reported that the yoke forces decreased near stall AoA in certain flight regimes. Here's one from the NYT: [0] Originally MCAS was implemented for rather extreme maneuvers, and required both the AoA sensor and a G-force sensor to agree. Later, it was discovered that low-speed stalls also had yoke-force problems, and the control authority was increased, and the G-force requirement dropped.

[0] https://www.nytimes.com/2019/06/01/business/boeing-737-max-c...
It's not the growth during washing I'm worried about, but that not rinsing them will leave them covered in a growth medium that will significantly accelerate their growth over the next hours or days.
In fact, you can buy transformers that are ungrounded to isolate the supply and make it safe to touch either wire. When combined with an RCD, this makes a very safe system
No, never iOS is deisgned by Gods themselves.

https://www.theiphonewiki.com/wiki/Malware_for_iOS
Token Authentication with Rails, Vue, GraphQL and Devise
S9+ owner here. I remapped the bixby button with bxactions. You can set it to anything you want.
It does elevate “oh, I made a mistake” to concrete fraud/forgery if there’s reason to go back and look into it.
How Facebook Fought Fake News About Facebook
According to the F5 telemetry report (and my own anecdotal evidence), non-PFS suites were a lot more popular than that, the majority as little as 5 years ago :-)

[0]: https://www.f5.com/content/dam/f5/f5-labs/articles/20180423_...
It seems you are the author of the website and many of the libraries linked there.

I suggest you resubmit this as a "Show HN" post. You can read more at https://news.ycombinator.com/showhn.html
Hillary Clinton seemed to think the US ousted him .. https://youtu.be/mlz3-OzcExI
"Slowly at first, then all at once."
I just got through adding outlets and lights in the garage this weekend, but I’m otherwise kind of a dumbass about such things. Should I have to choose, though, I’d go 240V at 60hz. 240V so my coffee water heats faster than the 120V we get in the US, 60hz just because you gotta choose a number, and 60hz makes for good wall clocks.
so if you want a vi in your image (the article has a vim line) you can get one (because they are occasionally useful) for a low cost by installing nvi instead of vim. It's great and only a few K.
Show HN: Pomodoro timer using figlet, cowsay, and optionally lolcat
Gall's Law – “A complex system that works is invariably found to
I updated my crusty old Pentium G-based server–the results are worth sharing
They are absolutely massive though.
A Bitter End for Regular Joe? Scientists Engineer a Smooth Beanless Coffee
That is very helpful to know it has been done, thank you. I need to try UML out it seems. The SMP issue and any overhead are other big questions.
Secure the business site from hackers with SSL encryption
https://en.wikipedia.org/wiki/Bullshit_Jobs

18,000 unnecessary staff amassed over the years.

Edit: *Not all of them were unnecessary of course.
A bricked device can be recovered - usually - by replacing hardware, that's the limit of the definition. The GP comment is right, bricked is bricked and there's no way to recover a bricked device with any software means. It means the hardware is fucked and it's usefulness is equivalent to a brick.
In this specific case, isn't it the Mattermost company that funds most of the development of the OSS project ?
Show HN: VacList – A tool to view and track Steam accounts
> That's not really a coupling issue, but a matter of GPU drivers not generally being hardened against shader/usage bugs.

You shouldn't be able to crash the whole operating system (not just the display server, display driver, etc.) with an ordinary shader, even if it crashes the shader compiler or causes the GPU not to halt. It's not as though I wrote these shaders in an attempt to crash iOS.
? I can’t find one. Really. I lost my “google kungfu”. Can you give me some direction? I will love you!
I couldn't find any documentation about the intended security model of UML, but from what I could tell, it's not resistant against malicious code running as root in the guest.
GC is a way to let the computer do something so we don't have to think about it.

This is a GOOD THING. It's what using computers properly is all about. The idea that there's some sort of virtue in doing this reasoning manually just baffles me. It's like objecting to compilers because it's better if human string together the opcodes.
The post is about "the real reason" and the real reason was never for impaired workers and it is not "the real reason" in almost all cases!

Quit using the minority to represent the majority!
Decorators are in stage 2. Have I missed something?
It's just generally taking a reasonable stand ("I don't want to spend my time on Nvidia, especially not for free") into an unreasonable one ("Users who have Nvidia are bad and should be bullied").
And as stated in countless well cited articles, this was done in order to maintain the 737 type rating and make the MAX 8 handle like other 737. Not to meet regulations that were otherwise unmet.
Police enter Tron’s Beijing office following Ponzi scheme suicide
This seems like making a mountain out of a molehill.

To get an ICLA all legit while you are employed, run it by the legal department of the company you are employed by, and they can give you an idea if any changes to the agreement is needed (and of course, if you are allowed to spend company or private time on the project), and get it signed legally and on file for all parties involved. Done.

Many of the issues outlined here can be resolved by properly communicating all the concerns before signing a legal document (which is recommended practice).

It seems like ESR is treating these contributor agreements as static one-way agreements rather than things that can be changed as needed.
At my work, we've recently finished rewriting a macroeconomic model from Excel/VBA into Python. Would've been nice--and easier for the economists--if Python had simply been available in Excel. But I think the long-term advantages of teaching the econ modeling team Python plus gitand an agile-ish workflow (versus no defined structure that led to a tangled mess of VBA in the first place) will be worth it.
NT4 used the win95 interface, it came out about a year after win95.
> This brings back old memories from hardening the sms/text parsers of feature phones of yesteryear.

> There it wasn’t entirely uncommon that when you sent a malformed sms-deliver PDU (e.g. text message) to the phone and crashed parser that tried to decode it, it took also the phone down before it could ack the message back to SMSC.

By yesteryear do you mean the present and feature phones do you mean current android phones? Some models are still vulnerable to a text-of-death.

https://poetengineer.postach.io/post/deleting-the-text-of-de... not my blog, but the same problem happened with my mother in law's phone. The phone becomes unusable because of a stream of org.android.phone application has stopped messages and the only thing to do is use adb to delete all texts, until it comes in again. I was never able to pin down the exact problem.

Edit: Sorry, I didn't mean to come off as snarky, but I just wanted to 1) point out that there are still issues with decoding SMS and MMS messages, even in some modern phones and 2) provide a link to anyone who encounter the same issue as it was very frustrating for my MiL and very frustrating until I figured out I could just wipe all SMSes with adb.
Taking you seriously for a moment. You don't need to understand elliptic curve mathematics. As with any other public key crypto system there will be a Private Key which you must never reveal to anyone else, and a Public Key which everybody can be told. They're bits. You don't need to care what those bits mean, if you find yourself using software which expects you to care what the bits mean that's too low level, bail out and find higher level software.

Unfortunately Coda Hale's post makes a bunch of assumptions. Reasonable assumptions for a lot of the audience, but they're still assumptions. So an equivalent post has to either make equally broad assumptions OR it has to ask you a bunch of questions.

Not crypto questions, but just questions about what you actually want to achieve by having public key crypto. That's going to dictate what you should do. In particular Public Key crypto almost invariably ends up with questions about Identity because of the Public Keys, how do I know this is Bob's Public Key? Do I care about that? Who is "Bob" anyway?

Example #1: For a Web Browser the answer is Identity means the Internet DNS hierarchy decides what hosts are named, the Web PKI provides us with an Authority that says this public key belongs to news.ycombinator.com. It's up to the end user to decide whether that's Hacker News or the Disney Company.

Example #2: For Signal the answer is that Identity is defined only locally by a user's own "address book" or similar features and they get to decide whether this contact is really "Dad" or "skrebbel" or "Jenny Smith", Signal promises to tell you if "Dad" doesn't have the same public key any more (which is suspicious), but paternity tests or verifying in person that "Dad" isn't just a proxy are your problem.

If in fact you "want to allow my customers to send me encrypted data via an untrusted channel" in 2019 you should just set up a secure Web Server, with a Fully Qualified Domain Name your customers know (e.g. write it on business cards, or the sides of vans, or a huge building) with a form on it, where they can submit things. Done. Choose a web server you like and go look at Mozilla's instructions for securing Web Servers.
I never understood this, why would anyone want to deal with ANOTHER app to do messaging? iMessage is built in, integrated, and has end to end encryption. What more functionality are people clamoring for?
It's so sad this guy is still getting airtime and attention.
I'm so happy to see an upswing in PDP-11 projects in the past year. It's such a nice architecture- very extensively documented, and from a time where it was possible for a programmer to really understand what the machine is doing, top-to-bottom.