skysight-inc/HackerNews huggingface dataset:
A half century ago, better transistors revolutionized computer power supplies
Sometimes you don't know where you want to spend your CPU budget until you have more information.
What is cmail19.com ?
> The burden of proof rests on those asserting that something is true.

That's nonsense. I'm sure you can re-write most if not all assertions that "something is false" as equivalent assertions that "something else is true," therefore the burden of proof rests equally on everyone asserting anything.
Moore’s Law and AGI Timelines
>If I'm worried about Facebook's use of my data the answer is simple: stop using Facebook.

Don't forget to stop using every website that embeds facebook buttons (or block the scripts). It's not exactly easy to prevent facebook from gathering information either.
When a bad event happens, whatever laws you have already, no matter how strict they are, are always seen to be not enough, because people buy into the idea that if they were enough then the bad thing would not have happened. Putting into place strict laws before an event does not stop over-reaction after it.
Why not linux? :(
Oh, sure, yes, absolutely, software updates is one of the cases where you probably just want an (asymmetric) signature. (And probably TUF.)

But my alternative suggestion also addresses that: in a model where you don't trust the host with the key but you do need to help it make a determination if a particular thing is valid or not, you could just go ask the server you got it from instead. Basically: the key doesn't have to live on the machine doing the validation.
It does change something. DoorDash's old policy, weird as it is, reduces variability of daily pay for the Dashers. It literally put a derivative structure onto the Dasher pay that reduces volatility -- the pay was cash plus a call option on the tip. Now they will get cash plus the tip. Obviously DoorDash will tune their base pay, but they can't meet the prior model's mean and variance at the same time. How Dashers balance those two is unclear, but generally people need a higher mean to accept higher variance.

The problem is that the old policy only works if the customers don't understand it, and maybe even seems generally unethical.
Is there any attribute of a person for which this is true?

I think what you're asking for is that any piece of data stored about someone be extensionally equivalent to "this is a human being" and no more which is not very useful (in an information-theoretic sense it has exactly zero use).
>You did give them explicit permission by participating in the modern financial system.

That sounds like implicit permission at best.
I have a need to provide an update service where client software (that I control) can request download files, but any other clients cannot download the files.

Currently using a terrible method with hashed query strings based on date, path, and a secret, which are then validated and have an expiration. Also, HTTP, so yeah it’s broken, but it at least prevents drive by scraping.

At this point we have no need for assymetric (don’t need to identify the requester, just need to prevent spoofing). What method of securing would you recommend?
Talk about straw-man. I never said "no human i've met",you interjected that to make yout argument. I did generalize but you seem to be missing what i was trying to say.

To rephrase: based on my own experiences I don't believe a human can achieve inner peace and happiness without at least some social contact once in a while.
DoorDash CEO: "our average contribution to Dashers stayed the same"

What weird, coded language. They're not "paying employees." They're "contributing" to "Dashers." At first, I figured this was just a way to avoid saying that they're independent contractors, but this seems even more vague than THAT.

Why, legally, would they say "contributions" rather than "pay?" It seems like there's a different distinction from the independent contractor one.
With how prevalent parallel construction has become it seems obvious that any encryption backdoor would be immediately exploited as soon as law enforcement had even the slightest justification to poke around. If they find something, you can be sure they'll come up with a legal way to arrest you for it. If they find nothing, oh well, better luck next time. Not like you'll ever know they were even there (probably).
The pizza driver does not get the delivery charge. Generally that goes to the pizza shop itself. It's covering the overhead of maintaining a delivery program.
Wired has completely gone down the toilet compared to its glory days.

This article is just another example of how their thinking is political points scoring first, journalistic quality second and technology detail last.

Sadly politics is infecting everything now including HN.
RIP Floris!
Ethereum Co-Founder Gavin Wood’s Polkadot Comes to China
I've lived in Japan, and you notice the lack of tipping culture. Service is a lot worse. Go to any restaurant, you won't get service, refills etc. You have to yell or get it yourself. That's what the service would be like without tips. Servers have no incentive to take care of your table if they get paid the same either way.

I'm fine with that system, as long as it's setup that way. Give me a way to refill my drink etc. But sometimes it's setup where they have to do it, and you're either waiting an hour for a drink or a check.
There's an awful lot of "we can't do it, and if we did it'd definitely be bad" in American political discourse that can be pretty conclusively proven false by just looking at a few other OECD states.
Scooters should have docks or designated parking areas.

The concept is cool but, like dockless bikeshare, the execution has been a mess resulting in littering all over public sidewalks and also apparently over private property.

I’m not sure I trust repo guys and tow companies not to fraudulently tow the scooters though.
That's naive. Academia isn't some perfect system with perfect incentives.

There's plenty of incentive to dress something up as more complex and impressive and using more high powered machinary than needed, e.g. impressing reviewers, qualifying for a particular conference, convincing the funding body that your pet technique can actually be useful etc

I don't think you'd find many academics that dispute this, though hopefully they'd think a lot of people are trying to do good research.

It'd be like open source software if it was done as a hobby; a lot of academics get public funding.
More of the same is definitely something people want sometimes -- but other people want something new (or more-of-the-same of something else that hasn't been done as much, e.g. a sequel in a smaller series). The article is about (among other things) the stagnation and general tendency of big developers towards increasingly-stale safe bets.

Mario Kart is an example of that: Nintendo is perfectly willing to make more-of-the-same for Mario Kart, but when asked in interviews about the possibility of a new F-Zero, the answer has generally been "we don't want to just release more of the same, we want to come up with some new twist on it". It's not about novelty (or if it is, their standards for novelty are inconsistent), it's about one being a cash cow and the other not.
Breaking encryption for the government is so furiously stupid it blows my mind every time it is suggested. Especially here, where people actually give the idea merit. It makes me miss oldschool /. where 100% of everyone was on the same page. Your point illustrates a huge reason as to why.

Backdooring stupid.crypt and forcing law abiding people to use it just insures that big badguys will use any other kind of encryption. All you've really accomplished is adding an extra charge of illegal encryption use at the expense of security for every human.

This potentially creates all sorts of pathologies. Is it illegal now for me not to update an old computer? If your backdoors are implemented in hardware, is it illegal to use old computers?

When people are against gun control, a common thread is "make guns illegal and only criminals will have guns." This argument has merit, but if we DID amend out #2 and make guns illegal, over time firearm proliferation would decrease.

Not so with encryption. Other, more free countries will constantly be developing better security methodologies, and reproducing those methods is effectively free. "Fuck up encryption, then only bad guys will have encryption" is a much stronger argument, because it's emphatically true.

The ignorant hubris of this is massively disheartening.
Perhaps what this article talks about should be reframed as actual (literal) theft, like the way a burglar or pickpocket does: same as if an employer broke into your home, found your wallet, and removed $20 from it that a customer had literally handed to you as their gift to you. Literal burglary/theft/etc.

That would frame it in a way that doesn't somehow legitimize it, and would make employers seem, and be, far more criminal after they decide to reach into someone's pocket and steal cash.
Isn't that what the Software Freedom Conservancy does?
Can a foreigner work in the EU without a CS degree
Hello everyone!

I didn't go to college with a major in CS, I studied all the same knowledge as a Bachelor CS degree from OpenCourseWare

I currently live in Asia and work as a developer with 5 years of software and open source experience

Someone can tell me which countries in Europe can hire developers without a degree.

Thank you
Yeah, it's an insult that's pretty indiscriminately thrown around.
Two projects I've been watching with interest are https://kyso.io/for-teams and http://reviewnb.com.
Alibaba opens its B2B e-commerce platform to US sellers
Those were invalidated in 2003 by the Supreme Court

https://en.wikipedia.org/wiki/Sodomy_laws_in_the_United_Stat...
As someone who recently taught himself programming later in life, I would strongly recommend the "Learn Enough" series by Michael Hartl and "Python Crash Course". Both are very approachable and provide an excellent intro to programming.
So, not that different from AT&T's infamous Room 641A (https://en.wikipedia.org/wiki/Room_641A).
Paying at the end of the meal allows you to order additional drinks or desserts after your initial order.
Being able to push software installs is a pretty basic feature of MDMs. Is that not the case with G Suite?
Theses are pretty good ways to anonymize theses fields, but they are still just good if only that field is used.

Let say that you got 20,000 inhabitants, you'll only need about 14 fields that are binary, much less fields if they are not binary (which is quite likely to happen). You'll most likely already got the gender... Even if you limit the age to 10 possible values, that's equivalent to 3 binary fields!
I could be wrong, but I believe the statistics show you're much more likely to be killed in that car than on a bike.
Thanks for that link. That looks awesome, especially compared to an OpenVPN setup (and yes I am aware of the fact that this project is not as sophisticated by far, but the default use case - VPN - is covered good enough :)
N=2 implies nothing statistically.
I suspect you are being downvoted because people don't realize you are quoting the document. It's a shame that HN features articles that are written in a style that doesn't follow the basic standards of civility and quality that is expected of comments.
Android as well, it can allow starred contacts through.
I wish laypeople hearing this stuff realized how easy it would be for the "bad guys" to use one time pads.

It would be trivial to have terror cells be distributed a USB with several GB of a OTP, and that would be unbreakable even into the age of quantum computing if used properly.

Thus isn't at all about terrorism or the "really bad guys." It's 100% about accessing the average Joe Blow's communications.
> Regardless of our views on encryption, we need to have a conversation about that shift. Refusing to have that discussion

That discussion has occurred several times. The government keeps talking after they hear the inevitable "no", at which point it's no longer a useful discussion.

There are no possible alternatives. Every possible alternative is equivalent to a backdoor. Any continuation of a discussion leads to "can we have a backdoor".

"Can we continue the discussion" amounts to "you haven't given us a backdoor yet".

There is a useful distinction to draw, though. There are two versions of "no". Some people use "no, that's not possible" (e.g. for technical reasons or because it'll break security properties), in which case the response either involves asking someone else or trying to legislate without knowledge. And some people use "no, we won't do that" (because it's working as designed and we're not looking to reduce security), in which case the responses involves anger and something roughly equivalent in content and tone to "why do you hate (insert country name here)".

Other useful variations on "no": "and what would you have us say when a country you don't like comes to our offices in their country and asks the same question". That one seems to produce slightly more thought, but ultimately an entitled response suggesting there should be some way to prefer their particular jurisdiction over all the others.
In Mongolia in rural areas people eat just meat. Dearth from heart decease and liver cancers are leading causes of dearth there. On the other hand, life expectancy in Mongolia is 70 years, while in mostly vegetarian India it is 69.5. Just from that one can easily see that blaming one particular food group is not productive.
They used an open dataset (danbooru2018) which was scraped with a gold account.
This assumes that OP wants to get VC money, which might not be everyone’s cup of tea. If anything, you’ll have much more leverage in negotiating a VC deal if you have actual paying customers.
I'd go one step further: If you're in the situation that allows for HMAC over asymmetric signatures, you might as well go all the way with authenticated encryption instead of purely a MAC. Even if you have TLS, you still gain a minor benefit of having black box tokens to everything outside the system, in particular if you have to let untrusted or semi-trusted clients hold on to signed data that they needn't know the contents of. Yes, security through obscurity is not sufficient on its own, but can help stall analysis and exploitation efforts,
> Regardless of our views on encryption, we need to have a conversation about that shift.

I agree that this is the real discussion, but I think that there is indeed a vibrant, worldwide discussion happening on this topic with more frequency and intensity than has ever been the case before.

The writing on the wall is unambiguous: the internet is an evolutionary force whose trajectory and destiny are to deprecate monopolistic government. This has already been shown convincingly with respect to censorship. It is increasingly obvious with respect to intellectual property and remix art. On the horizons are monetary policy and policing.

The humane and sane approach here is to get out of the way and let evolution run its course. Every time the state insists on pre-information age norms, it sounds to me like a whining adolescent, surprised that some of its childhood toys have broken.

The old model of investigative surveillance is broken - broken because of cameras which can reveal the conduct of (uniformed or undercover) state agents, broken because instantaneous worldwide communication moves much faster than bureaucracy, and yes, broken because cryptography.
The actual packages are from Debian, and Debian keeps them updated. Debian stretch (2017) is vulnerable, buster is not. Ubuntu 18.04 LTS is based on buster (https://askubuntu.com/questions/445487/what-debian-version-a...) so compatibility isn't the problem. Judging from bugs like https://bugs.launchpad.net/ubuntu/+source/libebml/+bug/14120... the problem is just that nobody at Ubuntu is responsible for keeping it updated in LTS releases.

tl;dr Avoid Ubuntu LTS because they don't maintain their packages properly.
Cryptocurrency loan site YouHodler exposed unencrypted user credit cards
An Introduction to Svelte
In spanish it is Ácido DesoxirriboNucleico. It's very easy to construct, given that "ácido", "des" and "nucleico" have latin roots.
Maybe check out pilot.com? (Disclaimer: haven't used them, but have heard good things.)
eBPF is not Turing-complete, but static analysis can absolutely prove things about individual programs in Turing-complete languages.
I got my seed round from acclaimed angel investor FF&S

Friends, Family & Savings

Don't let startup cash kill your idea before you give it a chance. Creative people can test an idea for next to nothing.
What are you talking about? Tipping makes servers actually care about doing a good job. Servers in Europe in my experience almost never care about you or the service they're providing you, because it doesn't matter how good a job they do. I've been flatly refused service at a restaurant because they were "too busy" - the three people working were overwhelmed with waiting on 10 tables and didn't even have a wait list because that was too much to manage. If that's what you mean by "fewer and better trained" then, well, I'd rather eat at the restaurant I choose than get turned away because they can't afford enough employees to run it.
Bench-marking a fat native call, rather than a purely-interpreted function, is a bit bait-and-switch.
Processed food makes us fat
Object-oriented programming in C: a case study of Git and the Linux kernel [pdf]
Well (one of) the arguments has been that it's possible to put in a secure backdoor such that only folks that should have access has access. In this case the government. In China the backdoor as far as I know is only accessible by the government and hasn't been otherwise exposed yet.
I am going to be downvoted, but this needs to be said: mate, your horse is so damn high!
So, human drivers are terribly impatient and reckless? This is one of the reasons we need to take cars out of human hands. Cruise cars could integrate better with traffic, no doubt, but you can't blame Cruise for humans being impatient and shitty drivers.
The nice thing about HMAC is that it's so bulletproof and easy to use. There are no footguns you introduce by using HMAC directly instead of using HS256, and there are plenty you introduce by using HS256 instead of plain HMAC.
As one of the people that built a alternative implementation, this is completely true, but also much worse, cause there were 2 things around crypto, signing and hashing, and one encoded it one way, and the other encoded it a different way (encoding as far as utf16 and such) which meant that for ascii, everything just worked fine, but as soon as you started using non-ascii, everything got 2x as complex.
I tend to agree. I found the article unconvincing. Perhaps Chalmer’s statement is true, but I’m not yet convinced that it is.
Lockdown – iOS Open Source Firewall (Local VPN Profile Based)
> Your own examples of tables, lists, and block quotes would look a lot better if they were, you know, actual tables, lists, and block quotes.

I would agree with what you said about tables (which, in my experience, is an uncommon use case), but the rest can easily be rendered in plain text. Block quotes, in particular, could be done by indenting the text by several spaces (or a tab), just like it's done on HN.
If I could suggest my company's own tool as an addition to this list, https://ReferDigital.com is an affiliate marketing platform without any signup/monthly fees, and no volume tiers at which this phases out. (It earns money as a fraction of any commission earned only - no sales driven by affiliates, no fees due).
> You could use the exact same argument for why you shot a police officer who broke down your door after securing a warrant.

No, I couldn't. The operative word there is not "shoot", it's "warrant." The fourth amendment explicitly makes an exception for warrants. If the government has a warrant then I am legally bound to hand over my keys. If I don't, they can put me in prison for that.
The problem is that different kernel configurations end up changing the layout of important data structures. Basically, you need to change the offsets that the eBPF uses.

There is another proposal that uses BTF to do the fixup at load (not compile) time, but that ends up having it's own complications.
What do you mean by "turned off"? Did you turn notifications off? Do you not open the e-mail client? Do you no longer have a valid e-mail address with big corp?
Came in expecting Emacs. Noticed a sidebar, icons, bold, separators, user profile photos. Not quite minimalist yet! At the end of the day, Twitter can look like IRC.
From the article: "Nikon’s P1000 has a 125x, 3000mm-equivalent zoom lens for example"

This new camera has a 1000mm-equivalent lens.
I loved using Winamp over say Windows Media Player in the early days of MP3s.

You could throw hundreds or thousands of tracks into your playlist and could scroll incredibly quickly through them, even on relatively slow PCs of the day. In an age before Spotify where to have vast collections was appealing, all my friends could scan each others' playlists and immediately start playing a song.

The speed of the software really did help discover new music. Scroll, double-click, scroll, double-click, scroll, double-click.
How to model version and temporary state in noSQL
Find a way to nullify a nuclear strike and then we can talk about getting rid of nukes.

Once we get rid of nukes we can go back to killing each other like civilized people.
Why are we Conscious? I think the answer, at a very high level, must be that evolution followed the path of least resistance: consciousness has high value per amount of energy expended on it and is easy to achieve.
What is consciousness?
Am I crazy for using email to send memos? Those serve as reference documents too, while creating a papertrail.
> If consciousness is a boolean, then at what exact moment did I become conscious?

There's a simpler answer: there was never a state in which you were not conscious. And yes, that would apply to literally everything in the universe, and in every grouping of such things imaginable, and in fact 'you' are neither a single entity, nor a gestalt of several, nor merely a component of another, 'you' are all these things at once.

But the real point I'm trying to make here is that these questions are literally meaningless if you insist upon empiricism because they are untestable.
> instead spent in memorizing and rationalizing virtually unrelated minutia about largely outdated and mostly unverified beliefs.

That’s not what my religious studies degree was about. It wasn’t expensive Sunday school. They didn’t teach apologetics. They taught scholarship, empiricism and critical inquiry. Philosophy and theology were taught from a historical/critical/contextual perspective, not a devotional/didactic one.

I remember one asking a RELS professor about his internal religious beliefs once (in private) and got a stern talking to about how deeply inappropriate that was.

I appreciate and agree with your comment generally, but your characterization of my degree is not factual.
where should they send the check to so i can get my payout?
Do terrorists even use it now? As far as I'm aware, the 2015 Paris attackers used unencrypted SMS and burner phones. Despite France supposedly being on "high alert" over Charlie Hebdo, they still evaded detection. But the anti-encryption handwringing brigade didn't let truth get in the way of a good story.
From what I've heard about the studies done, you're still liable to live longer with the extra exercise from biking to work even given the increased odds of being killed in traffic.
HTML has a hierarchical structure.

<div class="quote">
quoted content
</div>

It's far better than trying to keep count of how many ">" are in play, and deal with the vagaries of soft linebreaks and hard linebreaks and wrapping of plaintext.
Have you tried reddit.com/r/programming?