skysight-inc/HackerNews huggingface dataset:
> Because of the inefficiencies of the routing the nerve takes, it's often hailed as one of the most striking cases against intelligent design — or at least calls into question the "intelligence".

Man, what an obnoxious way to start an article.

EDIT: link was removed, this comment no longer needed.
Should we not be using bcrypt anymore?
Hi Przemek,

Could you please drop me an email wesie.wesie@yahoo.com so that we can discuss further.

Thanks
Wesie
Yes but in these situation the copyright assignment is a separate contract underwritten by the person committing. What (I think) driverdan means is that an OSS licence legally cannot substitute this separate contract - one cannot automatically assign one's own copyright to another entity by following an OSS licence.
AR Lenses Show 30% Activation Rate
VC4 is no powerhorse, so...

https://www.notebookcheck.net/ARM-Mali-T720-MP2.145232.0.htm...
https://www.notebookcheck.net/Broadcom-VideoCore-IV.116484.0...

See 3DMark - Ice Storm Standard Graphics 1280x720

VC VI is maybe 30% faster than VC IV.

So it looks like Opi3 may be pretty much in the same (low) performance bracket with RPi4.
Go for it, dude, I'll pitch in on the mobile app once you get the funding
Intro to Entropy and Information Theory for Digital Analysts [video]
It looks like it uses some AppleScript and Frida [1] to inject code into Messages.app on the Mac.

1: https://www.frida.re/
One theory is that sasquatch live in family units, and they bury their dead. They’re much smarter than bears.
To extend this short form a little bit: at least for me, a key insight of this article was: Depending on the height of your circuitry above the earth's surface, depending on the area covered by your wires, and depending on whether there was a thunderstorm above you at the time, there might be a fairly huge DC charge on your electrical distribution system.

So, the article offers an explanation of why it's really useful to ground one of the two AC wires in the first place: AC generated by the power company may not be the only source of electrical charge on the wires. I must admit, that was not something I thought about before.
yes. you are right. what makes a supermarket “better” is that their tech is not yet there + you can in theory pay with cash making it harder to link your identity with your characteristics.

we need strong privacy laws so that the penalties for collecting/abusing biometric data is a strong deterrent for whoever does this kind kf thing.
According to Wikipedia, they also repaired the damaged/destroyed bridges. Strange omission from the article.

"The convoy broke and repaired 88 wooden bridges" [1]

[1]https://en.wikipedia.org/wiki/Transcontinental_Motor_Convoy
Are mechanical keyboards good for gaming?
The new Excel dynamic arrays work with the good old C SDK too. Just return an array and the entire range is displayed.
No idea about cost, but given they're under £1 each [0] it's not adding a lot.

[0] https://cpc.farnell.com/pro-elec/9518-5a-black/uk-mains-plug...
V*A means you can vary V or A and get a higher wattage.
So, you contradict yourself :)
Bob Gimlin.

Yes, really. They can do it with computer graphics, but not costumes. Computer graphics didn’t exist when the film was made. Spandex didn’t even exist yet.
Those are just the easy parts.

Things get more complex when you own a non-US ETF or mutual fund. Now you own a passive income trust that’s treated differently, with its own reporting requirements.

It can also be a headache to take advantage of your country’s non-retirement tax-advantaged savings programs (e.g.: Canada’s TFSA)

Or if you’re a director of a corporation, like being a board member of the building you live in.

It’s also headaches for a condominium if a US citizen becomes a board member, which they usually can’t stop because they were voted in. If their old bank didn’t want to deal with US persons, now they have to hang everything over to someone that does.
I'm not super familiar with Ruby (had a bad initial experience with some awful Rails code and never went back), but maybe?

From what I've read in blog posts, it feels like the coolness of Ruby comes from the feeling of "holy crap, something that would have taken me two days in Java/C/C++ took me an hour with Ruby" (hopefully I'm summarizing this more or less correctly).

Erlang has definitely given that feeling to me. Distributed programming can be really, really hard, and gluing things together with sockets and whatnot can lead to a lot of really difficult bugs. Since Erlang embraces distribution and concurrency as part of its paradigm, it sometimes kind of feels like outright magic. Sometimes things feel like they went a bit...too perfect, like you missed something, when you really haven't.

I'm not going to say that it fixes every issue with concurrency; you can still have race conditions and Mnesia and ets can be a bit finnickey if you're not careful, but I think I can honestly say that, for distributed apps, I can accomplish 20x as much as I could with most other platforms.
It's completely dependent on the traffic of the site if a spammer takes the time to break a custom captcha.

I work on a site with 10 million monthly pageviews and spammers register on a form that has recaptcha and email verification... and we tried hidden input fields and other tricks, but each day we have consistently had 5 new spam accounts. With SVG they can just take a screenshot of what a user sees and send that to OCR. Complex math will turn away as many legitimate users as spammers.

The only real way to stop spam is to use a 3rd party API to detect it, or use something like a karma system that builds up over time. I think we're at the point where simple solutions won't work well unless you have a small site.
The Spanish Prisoner: On the Future of Libra and Bitcoin
Considering that terminals can display images just fine you'll have a hard time convincing Unicode that you need arbitrary pixel sets because somehow images are plain text (emoji had prior usage in plain text and they have a lot more semantic meaning per character than just some pixels).
Comparing Erlang to C# is a bit unfair.
The latter is a general purpose language that can be used to build software on every layer of every platform.
The former is a distributed programming DSL (an awesome one granted).
There is 0 Erlang-native GUI libraries, there is no documented Erlang pipeline for iOS apps etc.
I don't know what commenter was writing about, but he often played the "RMS is an extremist," card and would position himself as the sane person. Some people didn't like that, even though RMS is an extremist. I think many people (including me) got the sense that he was being manipulative to gain power.

Other than that, every once in a while he makes an annoying jab at RMS, and in at least one case, I felt he was grossly misrepresenting something RMS had said in order to gain more support for his own agenda.
I don’t understand the last fix. Why does calling “Hello, world”.split spit out a warning about $? Shouldn’t the string and interable libraries be modified so split and join work without depending on deprecated features?
I prefer to perform functional tests in my automation, such that you prove the application does what it claims instead of testing the internals to prove a function outputs the right data type. This seems like unnecessary tech debt that can be solved for in smarter ways, like a strongly typed language.

But had they included this as a requirement I would have provided it. I am not in the habit at guessing informal unspecified requirements. If that is an indicator of their internal communication then I suppose I am glad I failed.
If I understand you and OP correctly, it’s a kind of joy derived from doing something for a while, being acutely aware of the limitations and frustrations that come with it, and then discovering a brand new way of working that doesn’t involve any of the slog you’d grown accustomed to.

Speaking purely personally, mathematics has consistently been the discipline that’s delivered the most bang for my buck in that regard - learning a new branch can let you solve problems that are just impossible to solve, or take pages and pages of computation, in a few lines.
OpenThread, the Open Source IoT Stack
Self-hosted version of our BI tool (https://www.seektable.com) uses Sqlite for storing user accounts, data sources configuration, saved reports and other metadata. It works just fine with .NET Core (we use Microsoft.Data.Sqlite wrapper). Strongly agree that backup is damn simple as this is just a file in docker volume + custom data import/export is quite simple with sqlite3 cli.
I remember that being actually useful for me! XP 64-bit couldn't run 16-bit windows executables, but you could build wine against SFU/SUA and then use that to run them.
I do support work for my small business via email, I need to know if a network is having problems, when a server goes down, if any users are having payment issues and jump in to fix these immediately if not sooner. A console ding as an email notification that I can't differentiate from pressing backspace one too many times is absolute trash.

Ideally I want Android-style reply in the notification level stuff.
> This isn't really about "getting the latest version", it's about "getting the latest security patches for a stable version."

Typically security patches trigger new releases with minor/patch version number bumps, which are then installed by getting the latest version of the package. That's pretty much the SOP of any linux distribution.
The patch itself reveals the vulnerability. Attackers analyze these things to see what they’ve fixed. If you release a patch but don’t announce the vulnerability that was patched, then you’re just hiding it from good guys who don’t have time to dig through the patch.
Who Has the Most Censored Internet?
Good writeup here, from the same author:

https://www.filfre.net/2018/06/the-incredible-machine/
Plenty of people have cell phones with them. They are either too shocked to take a picture, or they use their digital zoom and the pic comes out fuzzy and people call it a hoax. Or they get a decent pic and people call it a hoax anyway.
There's a new novel called 'The Atlantropa Articles' written by Cody, who has a popular youtube channel.
At least the text isn’t gray on gray!
Animated – True Scary Walmart Horror Stories
Ah yes Jim Jordan, the shining beacon of a Congressman who serves the people
Poshmark is very well know in the fashion space, which probably has very different demographics to the HN crowd.
Corporate Open Source Anti-Patterns (2012) [video]
Relying on network frequency as being accurate to any degree is madness. It's not even useful for any correction.

Even the most basic RC oscillator outperforms it by orders of magnitude.
> The obvious follow up question, then, is: why does Japan use 2-prong outlets even today?

Because JP is behind the times:

> Japan also uses a grounded plug similar to the North American NEMA 5-15.[49] However, it is less common than its NEMA 1-15 equivalent. Since 2005, new Japanese homes are required to have class I grounded sockets for connecting domestic appliances. This rule does not apply for sockets not intended to be used for domestic appliances, but it is strongly advised to have class I sockets throughout the home.[52]

* https://en.wikipedia.org/wiki/AC_power_plugs_and_sockets#JIS...

So as things are re-built, you'll see more.

In the same way the old 'best practices' in automobiles didn't mandate ABS or air bags, some country's electrical best practices aren't written to the state of the art.

Everyone is probably looking at IEC 60364 for overall guidelines:

* https://en.wikipedia.org/wiki/IEC_60364

See:

* https://en.wikipedia.org/wiki/Act_on_Product_Safety_of_Elect...
Re: those infrastructure components written in Erlang not attracting Erlang users in any permanent way—it’s not so much that they have more users than contributors, but rather just the bare fact of them being infrastructure components. A black-box infrastructure component can’t be a “killer app” for a language.

Rails is a killer-app for Ruby because it’s a framework; a developer who uses Rails in their project is inherently a Ruby developer. People learned Ruby to use Rails.

But you don’t need to write a single line of Erlang to use CouchDB or Riak or Ejabberd. They’re self-contained. (And, in fact, scriptable in not-Erlang languages; CouchDB for example spawns and manages a JavaScript engine to run its “design documents” on.)

Thus, these infra components becoming popular doesn’t cause there to be any more Erlang programmers than there were before.

In that sense, I would say that Erlang has never had a true “killer app” yet. (Outside of a few specialized domains, like telecom and fintech, where the OTP platform itself is Erlang’s killer app.)

And even in the places where Erlang itself is a “killer app”, it’s also not so much a viral thing that the whole industry gets excited about; rather, Erlang is more of a “secret sauce.” Nobody’s learning Erlang in their basement because their friend told them it’d be the next big thing in their industry.

How does anyone learn Erlang, then? Well, usually, engineers are forced to learn Erlang at one job (where the system architect there decided on it); they get to liking it; and then, when they later become a system architect themselves in another job, and choose a stack, they choose Erlang, thus forcing a new wave of engineers to learn it.
I recall a few, FaTe, AoLazy, and others being shared in island55. Also memories of Master AOL & Internal/Overhead accounts that allowed infinite scrolling in chat.
They're (Apple) rather lucky that their user base vehemently upgrades whenever possible.
Same, this is how I got started with coding as a teenager.
I mean, the core issue is that IMAP was never really intended to be used in the way that encrypted email works right?
If I'm following this thread properly, the important difference here is that with symmetric crypto you'd also have to make sure nobody else saw the key. With public keys, it doesn't matter if someone snooped.
And like forest fires, sometimes people suffer and even get killed dy downturns. We should try to avoid that instead of the fire itself.
Heather Mills, others, win settlement over Murdoch group phone hacking
> I truly worry for anyone participating in these open source codebases and not being aware of how much they are targets.

So when you extorted people to play with other's crypto codebases in the previous post, were you trying to make them into targets?
What Phoenix did to improve display response times that much?
> If you can do that it seems to me like you could just use symmetric crypto

No, because with symmetric encryption you'd have to protect the key against theft and tampering (i.e., against reading and writing by a third party), while you only have to protect an asymmetric public key against tampering, which is a lot easier in practice.

(also not an expert, just my understanding of it)
Self-driving cars, SUVs, and the trolley problem
> My biggest problem with code reviews isn't so much the phrasing(although it is definitely important), but the fact that they almost never has a "done" criterion.

I've actually been experiencing this myself, as I've recently started a job with code reviews, and it's been driving me crazy.

> In my opinion, if new code has nothing objectively wrong with it(no security flaws, no unacceptable design patterns, no foreseen bugs, etc.), then the author has the prerogative to merge the code.

One of my biggest personal issues currently is that I have a fear of hitting the GO button, doing one more look-over just in case. I suppose it's just a lack of confidence in my own abilities, or maybe being anxious that my code isn't up to the standards of everyone else and the code base as a whole.
How to improve MessagePack JavaScript decoder speed by 2.6 times
It’s broken up into 6 parts because they dive so deep into every aspect of the film. The guys history. Feasibility of hoaxing. Etc. I’m not trying to convince you. I’m saying give it a listen and see what you think.
I'm one of the few who really enjoys KQ7. This was their foray into the modern era, making a game that doesn't soft-lock you or require impossible knowledge (i.e. trying pretty much every permutation/combination of items for the right answer).
More than 1k Android apps harvest data even after you deny permissions
Can you define a megaproject?
If you want to start looking at application layer pentesting I would review the owasp top 10 and then see how you can apply it to your current projects. I'm constantly using this list and other tricks on any sensitive site that my data resides to hone my skills and make sure there isn't any dumb security flaws that will leak my information. The sad thing is that you'll find cracks in the armor of almost any web service that you use.

I think the most basic test you can practice is just changing the URL if you see a number in it. If you change the number should you see the information that is at the new number? Yes reveals a lot about the website and it's security measures and will let you keep poking further.

Last thing I'll say is, as you practice and learn do not be malicious, even if you could delete an entire set of data because of bad permissions, don't do it. Most, like 90% of companies are relatively appreciative of being told about an exploit. There are some that are not however :(

Practice makes perfect, if you can get marginally better at security them you will write better code and better applications so go for it!
AI can restore the 'care' in 'healthcare'
Is there an open source slack alternative that's simple to setup? I'd settle for just a react gui with the nice screens.

The trend of commercial open source apps to be a major PITA to deploy & hack on is kind of tiresome imo.
There are some weak curves that may be vulnerable. This is mostly (conjectured) to be about quantum computing. However, the solution they offer is RSA 3072. No thanks, I'll stick with ECC. We'll know pretty instantly when ECC gets cracked as the whole crypto space will collapse like a balloon. You could also be more cynical and assume that the NSA has a backdoor for even huge RSA and just want to push people to something they pwn.
It sounds counter-intuitive, but Cisco found that having more coding tools available actually helped their live, low latency video encoding use case for video conferencing and screen sharing. They discussed it in their presentation at Big Apple Video:

https://vimeo.com/344366650
Stricken Russian Nuke Sub Crew Prevented ‘Planetary Catastrophe’
then all we need is someone to restore the 'health' and we're good to go!
This is really cool, though I have never played with the PDP-11 architecture. When I first took computer organization and architecture at my alma mater, Wittenberg University, my computer science professor (Brian Shelburne) made us learn the PDP-8 architecture. I will never forget learning machine code on the PDP-8. He was very popular among the PDP-8 fan community as he developed two different emulators for the PDP-8 and published a few articles on using the PDP-8 in teaching computer science. He made an emulator for Windows DOS and later on a different one in C++ for Windows 7/8/10.
This problem is supposed to be solved by the "basket" structure of inflation calculation. The basket is a collection of spending by a typical family, and inflation is the measure of the cost increase of that basket. If iPhone goes down X and rent goes up X then inflation is zero.

But the composition of the basket is not easy, varies and is prone to gaming.
Dr Brain was my favorite game as a kid, I played it over and over and over. So fun. I was so excited when the sequel (Island of Dr Brain) came out, and it was just as good.
Georgia’s New Election System Raises Old Computer Security Concerns
ssh-keygen -t ed25519
The Turing Pi Clusterboard Runs Seven Raspberry Pis at Once
> How does one become a cryptographer then?

Basically: studying it in depth (especially the mathematics part). Focus on cryptanalysis for a while, and find some flaws in existing implementations.

The moment you really start to fix those flaws, you probably know enough to implement a cryptosystem in a reasonably safe manner.

Even then, there likely will be many flaws in your implementation. So, you need other cryptographers to review it, several sets of eyes looking for flaws. Oh, and don't forget to make sure someone reviews for side channel attacks. (and some other things that I am probably forgetting right now)

In the end, the cryptographers that implement cryptosystems are a rare breed. These generally include people that are good at both the hard mathematics involved and the low-level programming knowledge that it requires to prevent timing attacks and the like, and even some hardware knowledge.

Who am I to say this? I have studied information security with some focus on crypto, including cryptanalysis and implementation of cryptosystems. Followed some MSc-level courses on implementation specifically, would not touch implementing a cryptosystem myself for production.
These are anonymous IRC aliases, not real names. What I've mentioned isn't a secret or in any way outing or revealing; keep in mind that #perl on Freenode is a public channel, and anyone who's frequented the channel for more than a few weeks are familiar with what I described. If anything in this is sensitive it's the way newbies and "casuals" are treated there, and that it's allowed to go on without intervention from other Freenode staff.
The difference is 6A vs 16A rating.
That's a big one. Many devices cannot be safely operated off the compact Swiss plug.
Until we fully understand the human brain, we won't be anywhere near AGI or "true AI" as you call it.

Current AGI efforts amount to cargo cult science where experimenters create increasingly vast neural networks and hope some kind of intelligence/consciousness magically emerges.

So far "AI" seems to be a combination of if statements, neural networks, and linear algebra - which is great for specialized tasks! But light years away from the way humans can pick an area and self-teach.

Believe it or not, not all of HN is atheist either, so that means many people believe the human mind is more than just a biological Turing machine/neural network and that there is some sort of "spirit" or "soul" if you will that accounts for our first person consciousness experience. Hence, without a spirit/soul, you'll never be able to create a conscious computer.
Ingenious. The US has no national ID, so ICE built one by scraping. They didn't ask the states for consent, because the US has no real privacy law and also they're ICE.

The politics of immigration have also been a driver for national ID in the UK. Rather than build an upfront system, laws were passed requiring employers and landlords to check right to work and right to reside. The system was privatised as part of the "hostile environment".

Immigration enforcement is a big driver of panopticons, because the public likes the idea of hunting foreigners and is dismissive of the idea that they have rights. The only way to truly exclude immigrants from a country is greater and greater use of "checkpoints", which can increasingly be virtual. Expect to see more and more ICE cameras popping up to perform the other side of this facial recognition.