skysight-inc/HackerNews huggingface dataset:
How does one become a cryptographer then?

Do the people who perpetuate this meme with no basis not realise the clear and present danger it presents to humanity?

Yes certainly don't use homerolled crypto in production.

More importantly do not dissuade human beings with talent to roll their own, play with others codebases, and in general have a good fucking time with cryptography.

Straight out of the counter-intel handbook is how it looks when people repeat this bullshit ad nauseum.

Everyone on Earth should roll their own crypto. Don't listen to this nonsense, the real world needs you.
They will also setup a 74bn 'bad bank' : https://www.telegraph.co.uk/business/2019/07/07/deutsche-con...
The Labor Theory of Value is a fun toy model, but it isn't very accurate.
I think they're on Netflix now. For how long, who knows.
Data Played a Role in Raptors' NBA Championship
First, a side note: when you, as someone unfamiliar with the subject matter, say things like "I have trouble believing" and "this seems unlikely" to someone with subject knowledge (I have an EE degree), you come across as condescending. "I don't understand" is a better way to phrase your confusion than doubting the veracity of the person you're asking for help from, and makes them and others more likely to continue to help you.

> Are you saying that the DC voltage difference is always 0 VDC?

AC vs. DC makes no difference in the statement I made. However note also that DC is not transferred through transformers; any DC offset with respect to earth ground in the distribution system will not be seen by the customer.

> Are you saying that the AC voltage at all points in the isolated system is always 0 with reference to earth ground?

No. But if you measure one at a time, with no other connection between the systems, you will see this. If you measure two simultaneously, what you see will depend on the relative impedance of the two measurement devices. This is easily experimentally verifiable.

> So rather than there being "zero voltage", I think the reason for safety is related to dfox's answer below: the system is limited in how much current it can put through you, and it's the amperage that harms you rather than the voltage.

No. Those statements are not separable. See andyjpb's sibling comment.
There's all kinds of these artificial enhancements in aircraft. They range from "stick shakers" [0] (which cause the control stick/yoke to shake when the plane detects a near-stall) to yaw dampers (which counteract "Dutch Roll" in swept-wing planes) [1] to full-blown "you tell me what you want and I'll keep the plane from tumbling out of the sky" control systems for fighters [2]. There are also "flight envelope protection" systems which prevent pilots from overstressing aircraft. What's uncommon is for them to lack redundancy. Yeah, Boeing has much bigger problems than just MCAS.

[0] https://en.wikipedia.org/wiki/Stick_shaker

[1] https://aviation.stackexchange.com/questions/6391/what-is-th...

[2] https://en.wikipedia.org/wiki/Lockheed_F-117_Nighthawk#cite_...
Hi all. I'm the (actual) owner of that gem.

As already hypothesized in the comments I'm pretty sure this was a simple account hijack. The kickball user likely cracked an old password of mine from before I was using 1password that was leaked from who knows which of the various breaches that have occurred over the years.

I released that gem years ago and barely remembered even having a rubygems account since I'm not doing much OSS work these days. I simply forgot to rotate out that old password there as a result which is definitely my bad.

Since being notified and regaining ownership of the gem I've:

1. Removed the kickball gem owner. I don't know why rubygems did not do this automatically but they did not.

2. Reset to a new strong password specific to rubygems.org (haha) with 1password and secured my account with MFA.

3. Released a new version 0.0.8 of the gem so that anyone that unfortunately installed the bogus/yanked 0.0.7 version will hopefully update to the new/real version of the gem.
Sometimes multi-stage builds are used to get build secrets into the build image. The final image just copies the resulting binaries over, and so you don't want to push the build image since you'd be leaking secrets. (I talk about alternatives to that here, since caching the build image is something you do want: https://pythonspeed.com/articles/docker-build-secrets/).

Eventually this will be unnecessary given (currently experimental) secret-sharing features Docker is adding. But for now pushing everything by default would be a security risk for some.
You need good dictionaries, giving you all possible translations of a word both ways. Given that subtitles in both languages will have matching sentences very closely you can easily determine (be it some counting criteria, simple linear model or dynamic programming) which sequence of let's say 3 subtitle lines matches a sequence of 5 subtitle lines in the other translation.

People/place/town names align stuff pretty easily. The fact that a sequence of lines matches some other sequence of lines makes finding the optimal alignment very efficient too.

I'm guessing that just making a set of words for each subtitle line, counting the common words and picking a criteria of deciding if line maps to other line is more than enough. Subtitles are much easier than free-flowing documents because they are time constrained.
Most of the advice seems to amount to watering down one's criticism. If we do that, won't the result be accepting less-good code into our projects? Is that the outcome we want?
Wow, your site is a goldmine! Really loving how you make this subject matter accessible for average nerds like me.
Show HN: Breakout Jobs – Passively Looking for an Ideal Opportunity? Join In
Cisco AV1. Live AV1 encoding and decoding on a laptop: https://blogs.cisco.com/collaboration/cisco-leap-frogs-h-264...

A talk about it with a demo: https://vimeo.com/344366650
Actually, this is the first time I ever hear this argument being made, which makes it sound a bit like a straw man argument to me. But I won't pretend to be an expert in ancient alien theories.

Do you know of any examples of artefacts produced by "white" cultures that could be considered "out of place" or "too advanced" but are generally not, indicating any such bias?

It also seems a bit tricky to apply modern US-centric supposed racial categories (white/non-white, for whatever vague definition of white) to millennia old Mediterranean civilisations. How could we even really know for sure what the racial makeup of ancient Egypt precisely was and how it would relate to any modern notions?

I'd expect a professional archeologist to have more nuanced scientific mindset about things like that instead of just crying racist pseudoscience to whatever she disagrees with.
People want to use one app to do all their messaging. iMessage is not that app unless 100% of the people you message use iPhones. For a lot of people Whatsapp or Telegram can be that app.
^^^ I know this chap, he knows what he's talking about.
Just FTR, note that BA might appeal against this, so it may be subject to revision before it's all over...

“BA has 28 days to appeal. Willie Walsh, chief executive of IAG, said British Airways would be making representations to the ICO.
"We intend to take all appropriate steps to defend the airline's position vigorously, including making any necessary appeals," he said.”
I was part of a fairly large layoff a while back.

Effectively the company made the decision and then a few folks in HR were involved in hiring an outside firm to handle everything. Even internally few in HR knew what was coming until that day.

Most decisions were entirely high level based on really simple calculations "this whole group", "anyone in this group that is X" and such.

Pretty easy to do if you make it easy.
Residents can check if service line is lead at dcwater.com/servicemap

Lead service lines were predominately installed
prior to the mid-1950s in the District of Columbia,
but there are records of lead service lines being
installed as late as 1977. You can use our service line
map to see the information DC Water has about
your service line at dcwater.com/servicemap
Short bursts of exercise may prime the brain for learning
If you'd prefer: https://scihub.copernicus.eu/dhus/ or https://registry.opendata.aws/sentinel-2/

https://www.sentinel-hub.com/ is more for visualizing and playing around with the data in a web app.

This study also used historical ASTER data (nice selection of thermal bands), which is available at https://asterweb.jpl.nasa.gov/data.asp
I remember studying this in high school geography.

There's a part of the east coast of England that's being eroded at a rate of a couple of metres per year due to the sea cliffs being made up of soft glacial deposits.

It's an interesting example because people can observe the effect of the sea eating the land in a very short time. Some losing homes that were once miles from the coast.

Of course this phenomenon occurs on every coastline, but it takes generations.

https://urbanrim.org.uk/Holderness.htm
The article makes good points against rolling your own crypto. Is there anything in there that can’t be solved by implementing it properly in a library? Openssl works fine with RSA+TLS. Isn’t the lesson learned from this that we need higher abstraction level (foolproof) APIs for our crypto libraries rather than not use RSA?
How does this explain the loss of value of money by inflation?
ST is a somewhat crude language and it turns out ugly most of the time. However it's simple and gets the job done. That being said the implementation varies between vendors.

Beckhoff allows non standard stuff to hide the worst offenders like the 10-ANDs in an IF condition with something that looks like a function call.

If you can use FBD (and your vendor implementation is good) you can make overviews useful for debugging while implementing the details in ST.

In the end changing what language I write code would not save much time between getting the specification to the customer pushing the start button in my case.
The Internet of Anxiety
He's racist. I can't believe I'm still seeing anything about him on HN. I really wish HN had a filter/mute function.
It's all in libsodium. For example, below a pynacl API usage fragment, abridged from their docs [1]. No crypto parameters or nonces or authentication are exposed. Modern crypto is really relatively easy to use.

(What's never trivial is key management, how do you get Alice's public key, but that's hard with any sort of public key cryptography.)

# Generate Bob's private key, which must be kept secret
skbob = PrivateKey.generate()

# Bob's public key, and similarly for Alice...
pkbob = skbob.public_key

# Bob wishes to send Alice an encrypted message so Bob must make a Box with
# his private key and Alice's public key
bob_box = Box(skbob, pkalice)

# This is our message to send (binary blob of data)
message = b"Kill all humans"

# Encrypt our message
encrypted = bob_box.encrypt(message)

[1] https://pynacl.readthedocs.io/en/stable/public/
I live in Atlanta (formerly: Philadelphia, Boston, Bay Area). I would say that Atlanta "winter" is cold enough to be a season - although it's more defined by the threat of possible snow than by actual snow.
Supposedly, this project was going to include pinouts for the mini-replica front fascia provided by Pidp-11...a pretty cool project itself: https://obsolescence.wixsite.com/obsolescence/pidp-11
Congress and Regulators Should Impose a Moratorium on Facebook’s Libra
FTA: "If it ever comes to a court case, one of the first things [sic] the judge is going to look at is community expectations and practice around our licenses. A jurist is supposed [sic] to do this in contract and license cases; there's some famous case law about the interpretation of handshake contracts among Hasidic Jewish diamond merchants in New York City that makes this very clear and explicit. Where there is doubt about interpretation and no overriding problem of of equity, the norms of the community within which the license/contract was arrived at should govern." [Emphasis added.]

The first two sentences of this quote are flat-out wrong and give false hope about the supposed willingness of (U.S.) courts to rescue people from "unfair" contracts. Only in the italicized part of the final sentence does ESR get it right, and even then only partly so.

1. In American law's protocol ("subroutine") for interpreting contract language, a judge will never get as far as looking at industry standards unless the judge first determines that the language is ambiguous, that is, capable of two or more plausible interpretations, and that evidence of industry standards can be helpful in resolving the ambiguity.

2. "Equity" generally doesn't enter into contract interpretation or enforcement, at least in U.S. law. The normal governing principle here is "freedom of contract" — as in, you're free to make a really dumb deal, and (with rare exceptions such as "unconscionability") the court won't rewrite the contract for you just because you come to regret having entered into it.

3. If the judge does get as far as taking industry standards into account, then: (A) Evidence of just what those standards are will need to be presented; (B) the finder of fact — possibly the jury — might have to weigh the evidence and "decide" what those industry standards are, for purposes of deciding the case; and (C) the industry standards won't necessarily be controlling in any case.

Source: I teach business-contract drafting as a part-time law professor; my relevant course materials, with links to additional reading, are at https://toedtclassnotes.site44.com/#AmbigTop
One of the beauties of complex systems is that these individual failures do not produce system-level failure unless you are extremely unlucky and they all fail simultaneously.

If you are simply counting the number of failures, complex systems do look a lot less appealing than simple ones. But if you count only catastrophic failures, complex systems begin to look more worth the energy tax spent maintaining them.

This is the guiding design principal behind most biological, social, economic, and (now) internet-related systems. I don't even think it is intentional. It is simply the best solution so it was discovered by natures and is constantly rediscovered by engineers.
> Not all malware is a "virus."

Haha, this is called moving the goal post. Fanboys do this all the time :)

Edit: Plenty of buffer overflow and momory corruptions are listed for iOS just in 2019.

https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
The 12-50 statistics happens to be fact, I do not know how pointing that out is racist. Also ESR seems to be making the point that violent crime is result of low IQ instead of skin color.

A lot of people including Christopher Hitchens, Sam Harris etc. have pointed out the dangers of islam and why in modern times it is the possibly the most dangerous religion. That does not make them or ESR an islamophobe.
Kind of off-topic, but why doesn't their site https://trailofbits.com/ have their certificate configured correctly? I know that their main site is https://www.trailofbits.com but I didn't expect their other record to be configured incorrectly.
Ask HN: Firefox Extension Like Hacker News Sidebar?
Hacker News Sidebar is a chrome extension that tells me when I'm reading a page that has been submitted to Hacker News. It produces a button that pops out the thread, and I love it. I'm switching to Firefox, and it doesn't seem to exist there. Can anyone recommend a similar extension?
Thanks!

I wish I were a little better at SEO so average nerds would have an easy time finding it.
I think it's unfair to say he is a racist when the point he makes in the first post is that people are unwilling to talk about these important issues of IQ because they will be labelled racists:

>For anyone who believe that racial equality is an important goal, this is absolutely horrible news. Which is why a lot of well-intentioned people refuse to look at these facts, and will attempt to shout down anyone who speaks them in public. There have been several occasions on which leading psychometricians have had their books canceled or withdrawn by publishers who found the actual scientific evidence about IQ so appalling that they refused to print it.

>Unfortunately, denial of the facts doesn’t make them go away. Far from being meaningless, IQ may be the single most important statistic about human beings, in the precise sense that differences in g probably drive individual and social outcomes more than any other single measurable attribute of human beings.

And here he makes the main point:

>And that is actually a valuable hint about how to get beyond racism. A black man with an IQ of 85 and a white man with an IQ of 85 are about equally likely to have the character traits of poor impulse control and violent behavior associated with criminality — and both are far more likely to have them than a white or black man with an IQ of 110. If we could stop being afraid of IQ and face up to it, that would give us an objective standard that would banish racism per se. IQ matters so much more than skin color that if we started paying serious attention to the former, we might be able to stop paying attention to the latter.

I don't see how you could honestly read all this as racist. I'd imagine similar reasoning goes for the rest of your quotes.
Won’t it have to be converted to a raster image before it can be OCRd?

Granted all you need to do is render it to a canvas but that’s an extra step on top of everything you need for a raster image, I’m not sure it’s easier.
No it's not sad, that's how a healthy society is supposed to work: harmful content is being criticized and marginalized while useful contributions are accepted, even if they come from the same person.

I don't know wtf is up with people these days that they want to erase other humans from public discourse because they have done something bad. People aren't black and white, history has numerous examples of those that contributed beneficial things, while at the same time being less than ideal human beings.

Please feel free to explain the author's transgressions through a comment in every submission of theirs, and leave the rest of us to judge the value of the submission on its own.
"Somewhere in this 900-page book is a 600-page book. One that has the same story, but weighs less. Without those 300 pages, though, it wouldn’t be Neal Stephenson. It’s not possible to separate the essential from the decorative. Nor would we want that, even if it were were. Not only do his fans not mind the extra — it’s what we came for."

First book of his I ever read was Snow Crash, and I was hooked in the initial few pages with his description of the "Deliverator".
I'm glad to see this. Calendar integration (or lack thereof) was a large part of my decision making process when I was last shopping around for email providers. I wound up sacrificing privacy for a good calendar since I use it daily. I may have to re-evaluate providers soon.
> If in fact you "want to allow my customers to send me encrypted data via an untrusted channel" in 2019 you should just set up a secure Web Server, with a Fully Qualified Domain Name your customers know (e.g. write it on business cards, or the sides of vans, or a huge building) with a form on it, where they can submit things.

That assumes the customer's browser is trusted, and not configured to silently allow all encrypted connections to be intercepted, decrypted and potentially modified by someone else in the network, which is unfortunately still too common.
How Money is () made in the modern economy [pdf]
I didn't link to my duplicate issue and you're really fixated on that particular line of attack. I linked to the original issue, both here and on Lobsters. The duplicate issue was quickly locked and forgotten.

I meant "I didn't create the issue" in the sense that it's not my fault that people want to change Gimp's name, not "issue" as in "id number in Gitlab". You can thwart this particular barbarian at the gate and feel content that if you attack me the question of Gimp's name is settled, until the next barbarian comes along, but there's a lot of barbarians and you'll probably be fighting this war for many years to come as long as you and other Gimp developers decide to dig in their heels and die on this hill.

So now that the original issue has been deleted, not even locked, you agree it's reasonable to open it again? Where else can this discussion continue?
There is IEC60309 socket for "small" devices (230V 16A). Typically found on (european) RVs and in datacenters.
Netflix recently added it in my region. I wonder if that deal is the reason it was targeted for take-down notices.
>>it is the accumulation of value of individual work

But it's not though is it? When money itself can do the work (investing) then this whole thing sort of falls apart. A battery can't create a larger battery by itself. Also plenty of people inherit their "batteries" or find them through random chance (lotteries, sweepstakes, etc.)

This all sounds good in theory but I don't think it really holds up when examined closely.
But the ungrounded transformer prevents the fault currents that the RCD would detect, so unless I am mistaken there is no scenario where a RCD would provide additional protection beyond an ungrounded transformer.
> Europlug and the (spiritual) advancement in the form of the Swiss SEV 1011 plug.

Europlug has no protective ground wire.
I wonder what "banking" is to a bank like Deutsche Bank?

I have some visibility to a bank that grew from a community bank to a fairly sizable regional bank in the US, but it is still largely a consumer type bank with individual account holders / businesses. Almost everything they do as a "bank" is very much what anyone might think a bank is. It's surprisingly simple how they operate and everyone at the bank is on the same page.

At large banks I see what seems more like a whole lot of speculation, tax management, random opportunities etc.... seems like that easily can get out of hand.
The Little JavaScript Book
I think this is getting close to the right answer, but I still don't understand the details. Let's say that we set up a large ground isolated system, and have it driving a resistance heater (20A at 120VAC). Standing barefoot on wet concrete, I tightly grab one of the leads to the heating element. With my other hand, I use a hammer smash the heating element so it's no longer a complete circuit. What happens and why?

I suspect that I'll get a terrible shock and likely die, because some substantial current will start flowing through my body. You seem to be saying that I'll be fine. Why do you believe this?

My guess is that the typical ground isolated system is safe not because of the isolation per se, but because the transformer used is small enough that the maximum current is not life threatening. When the circuit is intact, I'm unlikely to get anything other than a static shock. When the circuit is broken, it's current limited. My intuition is that this is the same as having a very small generator with only a few coils of wire. What am I missing?
Study Suggests Vast Majority of Americans Dislike Political Correctness
I don't think OP wants a project to accept anything "less-good". It's just a post asking to be respectful to the contributor. Attack the idea(in a civilized manner) - not the person.
How I approach it is to roughly map out the features it will need e.g. database, backend logic, UI etc. Then I'd think about whether or not I can achieve that with a stack I know e.g. Laravel/Vue.js. If not, I'd isolate the tricky parts and research what tools I'll probably need. Rinse and repeat until the right stack is settled on. Then start building a rough draft.
I didn't read any of these as watering down. Which ones do you think dilute the message?
You tube engineer injures 8 in LSD-fueled rampage