skysight-inc/HackerNews huggingface dataset:
For me, it was not lacking time, but lack of energy.

After the first one, it took 3 years before I had enough energy to pick up side projects again, and then the 2nd one came and we were even more exhausted.

Now 3 years later (6 years total) I'm finally starting a side project again.

Scheduling kind of works, but when you don't have the energy to do something that you scheduled, it still doesn't work.

My hobbies have changed over the last 6 years. I picked up BMX racing with our oldest, D&D/ttrpgs with new friends and reading sci-fi/fantasy instead of watching tv and playing games (you can pause it anytime).

My new side project relates to one of my hobbies (lfg site for ttrpgs).

Being picky is necessary and having "meaningless" downtime to find your focus is more important than stressing out and trying to do everything and nothing.
Huh? The homeless rate has been going down across the country over the past few years. Maybe you're just in one of the few states where it has been increasing, like New York, California, or Massachusetts.

https://www.usich.gov/tools-for-action/map/
whatsapp sent videos end up in there if you're on android. even if you dont watch the videos, you download it and have it stored.
Commercial availability of a part is absolutely a factor in deciding whether something is a brick! I.e. some large expensive machine is bricked because the manufacturer refuses to sell you a small proprietary part without which the machine is entirely non-functional.

It’s a fairly frequent pattern where an IoT device becomes a brick because an API shuts down. Similarly, if you can’t replace a crucial part because the manufacturer won’t sell it to you, that would brick a device. If the device is cheaper to replace than to repair, then it is bricked (the Xbox).

A brick must be entirely non-functional and simply not worth repairing. It’s supposed to be a less vulgar version of FUBAR.

There are rare stories of extraordinary lengths that a maker will go to (such as fabbing your own custom parts, or standing up a private version of an API and DNS hijacking requests from the device in order to make it function again) in order to “un-brick” a device. The defining trait of these stories is that something new is invented in order to make the device function again.
I'm sure someone has come up with a better analogy, but dollars are like electrons, they only do work when they move.

I was looking at some other HN thread a while back and there was someone talking about how a subscription model works much better for investors because the regularity of returns worked best with expectations from the investors. And it occurred to me at that time that this electric analogy might extend to impedance matching between investor and investee...with the best matched networks operating the most efficiently. (And of course, if you can develop an investment model that matches underserved opportunities you might find a way to make some money.)
They are way more likely to face regulation for not attempting curating. The mainstream of small minds is why we are in this shitshow.

Mainstream mentality has always been to freak out when something goes outside what they consider acceptable even if it is harmless. It goes back to the Oscar Wilde and he certainly wasn't the first.

Including the observers commenting on the stupidity with "So long as they don't do it in the streets and frighten the horses." While callous and somewhat homophobic by today's standard it pointed out how society really should be reacting - not giving a shit unless it leads to an actual danger.
From the linked article, Perl 6 tries to support all kinds of paradigms. This really detracts from professional development where communicating code and clear code is necessary.

Every language that supports too many paradigms or gives too much expressive power to the user eventually has a "the good parts" books that proscribes a conventional way to program in that language in a professional setting.
Here is but one facet of many that explain why. If this isn't enough, I can quote some of his many racist tweets and blog postings for you, but they will turn your stomach.

http://www.linux-magazine.com/Online/Blogs/Off-the-Beat-Bruc...

>The Decline and Fall of Eric S. Raymond

>Around the start of the millennium, Eric S. Raymond was one of the philosophical leaders of open source. His essay and book, The Cathedral and the Bazaar was obligatory reading for executives trying to understand open source. Now, after lying low for over a decade, Raymond is getting attention again, this time for two blog entries in which he rants about how so-called Social Justice Warriors (SJWs) threaten open source.

>[...] Raymond's call to defend open source from SJWs is as deceptive as anything he attributes to his enemies. Free and open source software is too widespread to need defending, and his attempt to create an issue does not map well on to actual events. For those who remember his earlier contributions to open source, his recent comments make for a disappointing epilogue.
cool & useful. nice job =]
See samoa below, half of his friends using iphone disable imessage??? It's nonsensical. iMessage works wonderfully.
> Eric S. Raymond is a wandering anthropologist and trouble-making philosopher. He's been known to write a few lines of code too. Actually, if the tag "ESR" means nothing to you, what are you doing reading this magazine?

Seems unnecessary and gatekeepery.
The article also tells you to use libsodium, which makes safe cryptographic choices.

(It's absolutely true that ECC can be as much of a footgun, e.g. non-random-k ECDSA is worse than RSA PKCSv15. But the real takeaway is to use something that's already set for security, like libsodium.)
Sure, it’s a herd effect. Investors pull their money and consumers spend less. This reinforces itself until the govt injects money via a stimulus or bailout.
Of course it is, it's Eric Raymond.

End of the day, if you assert the ability to do something, and that assertion is fraudulent, you, the committer, are fucked.
> and hence exhibits zero voltage across it

This is the part that I'm doubting.

Are you saying that the DC voltage difference is always 0 VDC? Since much of the article is about the necessity of grounding your electric distribution network to prevent high static voltages, what makes this system different? Instead, I think it's more likely that the difference in DC voltage can vary significantly.

Are you saying that the AC voltage at all points in the isolated system is always 0 with reference to earth ground? Again, this seems unlikely. If you take 3 simultaneous measurements (Isolated A to earth ground, Isolated B to earth ground, and Isolated A to Isolated B), I have trouble believing that you will find 120V between A and B and 0 between both and ground.

So rather than there being "zero voltage", I think the reason for safety is related to dfox's answer below: the system is limited in how much current it can put through you, and it's the amperage that harms you rather than the voltage. You might get an initial static shock, but the AC amperage is going to be small enough not to harm you. But I'm still confused why this is the case. I think it may have more to do with fusing and generation power than with isolation per se.

Yes on the side note. The article does a great job of explaining (at least for the US) why neutral and ground are distinct, and why hot and neutral are not symmetric.
How much of the expansion comes from borrowed money though?
After a recent power outage, we found that a seemingly random selection of sockets and lights had become prone to intermittent glitches. By popping one circuit breaker at a time, I realized that these circuits coincided with breakers on the right side of the box. From this, I found out what is apparently a common pattern: we have two 120V out-of-phase incoming lines together with a grounded neutral that is presumably the center tap on the secondary winding of the local transformer. Between them the two live lines give 240V, which is used by the AC unit.

Unfortunately, while you may have the voltage for a faster coffee maker, you may not have the wiring in your kitchen and I don't suppose you can find a UL-approved coffee-maker for that set-up, which has two live wires (though maybe they are made for restaurant and institutional kitchens?)
It was created to show the danger of Monopolies in Capatalism. Capatalism just means private ownership.
9. lol keep trying. 99. Doesn't work. 99999. Breaks modal.

...

9999. Ahhhh....Just right.
And has a long unrepentant well documented track record of racism and islamophobia and climate change denial.

And he's made his career by trying to destroy RMS's life's work, instead of doing anything constructive.

I could go on.

Source: I've known him since the early 80's.
I've read the book and it's pretty good, it also shows how bad the economy is. Especially where there are a lot of "manager" jobs that seem to be quite superfluous.

The fact that Deutsche Bank is cutting 18K jobs is quite bitter, because the mass of people is quite large. I wonder if other banks are planning such layoffs and if we will have to expect more mass cutts.
Not all malware is a "virus."

Has iOS ever had anything where one app could "corrupt" other apps?
I've been a huge fan of the UI design of bvckup for years -- the attention to detail is heartwarming.
Or material for a Clive Cussler novel. :)
It's probably not a phone number. It's the max value of a 32 bit signed integer.
Is that covered in the last paragraph of the public exponent section? I think Ben linked to an older ImperialViolet explanation over that paper, which maybe we should fix.
The higher amps trips the circuit breaker. If you don’t think a difference in voltage determines one’s tea water heating time, check the wattage rating on a kettle sold in the US (120V) and one from the UK (240V).
> When e = 3, or a similarly small number, many things can go wrong. Low public exponents often combine with other common mistakes to either allow an attacker to decrypt specific ciphertexts or factor N. For instance, the Franklin-Reiter attack allows a malicious party to decrypt two messages that are related by a known, fixed distance.

Surely anyone who studied a single textbook about crypto knows this? Or anyone who bothered to do a bit of reading about the crypto library they are using?

After a bit of searching, apparently this is a big issue. Search for "RSA.gen_key" on any of the following pages:

Exhibit A:https://github.com/const586/freestream/blob/ee95c78e85719caa...

Exhibit B:https://github.com/lixmgl/Intern_OpenStack_Swift/blob/40c241...

Exhibit C:https://github.com/egbertbouman/tribler-g/blob/14e5c4eaf66f5...

Exhibit D:https://github.com/wizzard/dm-p2player/blob/fb3a89aedc0a2374...

Exhibit E:https://github.com/mimianddaniel/booksalt/blob/248c2349fd9a6...

Exhibit F:https://github.com/GrandPaRPi/p2ptv-pi/blob/6f79c00f9055a376...

Exhibit G:https://github.com/C6SUMMER/allinclusive-kodi-pi/blob/8baf24...
From my understanding and maybe I'm wrong here, he means that they tend to not roll their own ECC implementations.

From the video, one of his major complaints is that people learn RSA in their first year of university, understand the math, then roll their own. How hard can it be, its modulo and exponents. People don't tend to do this with ECC. They just pick a library.

You are right in saying that the same roll your own problems that occur with RSA would occur with ECC.
Depending on one's paranoia level, you could have a monitoring script on independent (third-party?) infrastructure that fetches pages and goes through them checking resource hashes. If the SRI hash listed in the origin, or the actual hash of the resource, changes, you get an alert.

If an update was not pushed, then you know something hinky is going on.

Some folks regularly check the signature of their SSL certs, and monitor certificate transparency logs. It just depends on how vigilant one wants to be.
I'd say it's highly likely there would be not much else than warring tribes and the most basic of technology (such as agriculture and mining). Africa is a really tough place by definition, and for civilizations to thrive you need not just political stability, but also a cultural inclinations that are mostly lacking in sub-saharan society.
Randian economics is not a solution.
Money is just a promise. You promise that you do something for somebody and in exchange you get money which you can convert to another promise. In the end it depends on the reliability of the people who use it whether money exists or dissolves into a broken promise.

At the moment the promises are high. We will see whether they can be fulfilled.

https://www.investopedia.com/terms/t/trumpflation.asp
Page Doesn't Load in Materialistic
Wikipedia
How does the government cause downturns?
In practice, you run up against the current limitation of your home's wiring.
It doesn't need to tell you anything new about prime number factorization because practical RSA cryptosystems get broken with far more boring bugs than prime number factorization. RSA padding bugs aren't really "coding errors": RSA padding is just as critical to RSA security as the hardness of number factoring.

Furthermore, they don't just tell you to use some random curve thing: they tell you to use a specific implementation with knobs twiddled for security. You could work hard to maybe get everything right, or you can just do this thing and everything will be set for safety for you.
In the artifact the RNG in baked into the game itself, there is on way to avoid it.
In HS you can build deck that has none of it (or varying degrees). You still are at the mercy of a draw (but that's just the beauty of deck building).
Cute-B Capsule
Herbal Pills for Breast Reduction
A lot of women, who plan to decrease the size of their breasts, may regard as natural methods of breast reduction. To some degree, losing weight and performing regular exercise does help in natural breast reduction since it decreases the amount of tissue that needs to be detached. Many women also practice a reduction in the size of their breasts after breastfeeding. On the other hand, the skin may drop some of its flexibility. Some women also choose for herbal breast reduction, while others may utilize creams or other remedies to decrease breast size.

Non-surgical methods of breast reduction are in most cases not successful or found to give way only inadequate results. Breast reduction herbal pills are also not recognized by the FDA and therefore do not meet the same high standards as other recommendation drugs. These natural products do not have to produce any proof to maintain their claims. Hence, there is no technical proof to confirm that the reduction actually takes place. There is no force on the manufacturers to complete their marketing claims.
I had a 1500 euro chair that I hated. I replaced it with a 200 euro chair from Ikea that I now use the most.

What is important to me is variation. I have a swopper, a light stool, an Ikea chair, a walking treadmill and sit/standing desk. The expensive "ergonomic" chairs don't work for me.
I generally enjoy the content that Trail of Bits puts out, but the harsh tone and use of explatives seems only for the sake of attention to a non-issue. RSA, the algorithm, is generally safe for real-world use. It is possible to use RSA securely (we've been doing it). However, there is indeed an issue.

Lets define the issue: Poor understanding of cryptography leads to poor implementation in practice.

This issue applies to any crypto algorthim, not just RSA and ECC. If everyone dropped RSA tomorrow in favor of ECC, would all of our problems be solved? No.

How to solve this issue?

1. Increase understanding of general cryptography. It is a dense subject.

2. Make implementation of cryptography easier. This is slightly more difficult though, as it depends on your use-case.
WeChat Bans Microsoft’s Chinese Chatbot
Random User Generator and OpenID Connect Provider
Your entire argument smells to me like The Politician’s Fallacy:

Something must be done.

This is something.

Therefore we must do it.

There’s lots of that in business: Long explanation for why something must be done, then a short explanation for what “this” is, and we just have to take it on faith that “this” will do anything to fix the problem that makes us feel like something must be done.

But as long as “everyone else is doing it,” we all believe in this something that we must do, and as long as we all believe it, we’ll all back “this something” we must do.

Whether it works, doesn’t work, or even makes it worse.

e.g. If you ask people how many golf balls fit in an airplane, word gets around and the next thing you know, people who can game PIPs to not get fired will game your interview to get hired in the first place.

And by hiring them, you don’t hire someone else who can actually do the job but doesn’t solve recreational puzzles for a hobby, nor do they spend any time learning how to game interviews.

This is the thinking that also brought us, “Nobody ever got fired for buying IBM,” and so forth: An emphasis on doing the thing people believe must be done, rather than looking for something that works whether it’s popular or not.
The argument is that the interface is too complicated for non-experts to parameterize securely.

Consider the libsodium example: https://libsodium.gitbook.io/doc/public-key_cryptography/aut.... The crypto implementation parameters are handled under the hood.
How You Doing Everyone?
Feel Free to disqus on Health, if you are ready so tell me what's your major health problem..
Money is strange, indeed. But disabling downturns might be something we don’t want.

From the article: “Recessions are a healthy, necessary part of the economic cycle. They keep investors, businesses, and households disciplined. They remove overcapacity and make room for innovation and evolution. The US has endured 42 recessions and five depressions since the 1780s. The US economy recovered from every single one, returning to growth within an average of roughly one and a half years. That includes the 39 recessions and depressions that proceeded the establishment of the Federal Reserve in 1913, and the 20 that occurred when the US had no central bank at all. The eras of the most robust growth in American history have been punctuated by frequent recessions, not long stretches without them.”

I like the analogy of getting ansgty all at once and seeing the therapist. I probably wouldn’t characterize down-turns as money running out, though. This might be what you meant, but the money doesn’t run out per se, recessions are more like angst leading to shyness, it’s less activity rather than less money. If the money actually ran out, I imagine the chaos might be a lot bigger than we’ve ever seen.
What exactly is free? When I create an account it appears to be a paid api?
It is easy. It's super easy.

I developed a full product using private IG's APIs and developed a public API on top of it.

I shut down the project after a C&D from facebook, let just say they weren't too happy about it :P
> which power standard is the "best" and how do we get rid of the rest?

Not sure what's 'best', but getting rid of the 'rest' is likely to be expensive in terms of capital investment and for a comparatively minimal benefit. To put it from a US perspective, I have a house built in 1940, and while most of it's been rewired to more modern standards, there are still a number of places where it has the original 80 year old wiring. What this means is that I have devices I can't plug into all sockets in the house, and even this inconvenience hasn't been worth the thousands of dollars and personal disruption it would cost to upgrade those circuits. There are cheaper workarounds and more pressing uses for the time and money it would take to make the change.

It's this sort of reasoning that makes me hesitant to think that a unified global power standard is ever likely to happen, and that's even before considering some of of the infrastructure costs of making a change.

That said, modern flexible power supplies and dual voltage appliances seem like they go at least a large chunk of the way to make the situation at least a little better.
i cant find any hits for "origin" or "CDN" on the original RiskIQ article: https://www.riskiq.com/blog/labs/magecart-british-airways-br...

the RiskIQ article identifies the location of the script as "the main website"

additionally, I'm not sure how this would solve the problem. If BA went to all the effort of putting their frontend assets on a CDN, why wouldn't their HTML, with the hashes also be on the CDN? and if the hashes are not generated by the CDN, how does the server generate the hashes without being affected by changes on the CDN? regardless of outcome, if the process is automated, does a human being need to read a diff every time any file on any CDN changes? Can't an attacker then just wait until the hashes are automatically updated?
calculator, timezone & currency conversions
Yeah, i think you said it best! Cheers!
I know, but as far as I could tell, Amiga had the better music, while PC/VGA had the better graphics (and sometimes more content).
The question we should be asking is whether these complex systems are actually required.

In absolute terms, our ancestors lived much much simpler lives and somehow managed to survive. So, it's not that we're required to have such complex systems, it's that we've decided that the reward is higher than the cost (which is fine). But, I wonder, how accurately have the costs and the rewards been evaluated? I suspect that we don't always take into account the full cost and risks of complexity. If we did, I suspect we'd build fewer highly complex systems, and the systems we did build would be better.

If you think of the entire IT experience as a system, somehow all the various social, economic, and technical forces have conspired to produce massive complexity which shows in constant bugs, failures, broken websites, and security breaches. I wish we could just step back, take a deep breath, and find ways to simplify and clean some of this up.
Europlug and the (spiritual) advancement in the form of the Swiss SEV 1011 plug. You can fit about 3 Swiss plugs in the same space a Schuko uses.
I suppose if your goal is 100+ fps that's probably valid for high fidelity multiplayer games like battlefield, but there is no way even an ancient CPU can't handle games like CSGO at many multiples of that. I value real estate and image quality, so my panels are 30" and IPS. Which means I'm limited to 60fps. However if I unsync, the framerate is in the 150 range in Overwatch. This is on a gtx 1070 with ALL settings maxed at 2560x1600.
> I think "key size" is something maybe protocol designers need to be worried about, but it's still about two hops above how kobs-set-for-safety I like recommendations I make to be for the median programmer.

From the article:

> The most important thing to keep in mind about cryptographic key sizes in 2019 is they don't matter nearly as much as the general public likes to think.

:P

The "general public" I'm referring to is the set of people who aren't cryptography protocol designers.
A bonus for the shaver socket is that it is often switchable, so a 120V shaver can be plugged in. This is less of an issue now, with newer shavers having circuitry to allow them to run on anything from 100-240V.
When I was getting into Linux as a teenager in 2008 esr came up a lot, but apart from writing The Cathedral and the Bazaar and a few shorter essays and contributing to relatively-minor opens source projects…what has he actually done? Especially recently? He frequently feels like someone who's famous because he's famous.

I'm not trying to slander the guy; he's definitely contributed more code and ideas to the open source community than I have. I just don't consider him to be anywhere near the same level of hacker as Linus or rms.
> And he's made his career by trying to destroy RMS's life's work

What are you referring to ?
Don’t stop believing in the benefits of indexing