skysight-inc/HackerNews huggingface dataset:
You're right.

CityLab researchers exploited MD5's weakness to answer questions about the system. While not a real problem in practice, it seems clear MD5 was not an ideal choice.

From the article, the researchers generated forbidden and allowed images with a colliding hash to prove WeChat was using MD5. The allowed image was banned in the future as a result.

However, MD5 collision generation has some constraints. It's very hard make an image collide with a particular known hash, but it's feasible (5 hours with a large GPU) to take two images and modify them until their hashes collide. Practically this means exploitation opportunities are rather limited, but a forced collision being possible at all seems non-ideal for an adversarial use case. There's also the risk that future cryptanalysis will further weaken MD5. Seems clear to me WeChat just should have used something like sha256.
Why do you say "obvious choice include medium or static systems" ? Even though this is HN, I would argue that majority of blogs are still setup in WordPress and it works well. We host ours on Self Hosted WordPress and would never ever give control of blog to a 3rd party (so Medium is out). Using static site generators are cool and all but when it comes to asking other non technical team members to work on the blog, you again cannot beat WP. So 1 more vote for Self Hosted WordPress.
It's not just any propeller:

https://en.wikipedia.org/wiki/Scimitar_propeller
> The new Mac Pro only shows me a trend towards more impractically expensive, locked-down hardware, designed basically to increase Apple's year-over-year instead of provide year-over-year excellence in their products.

Literally nothing has changed for the last few decades! I'm not defending Apple. However, if you think this is anything new you're crazy.

I avoided getting on that bandwagon in the first place and my wallet and my sanity is happy with the choice.
Jupyter notebooks are risky business for reproducible work. No dependency data means they're highly prone to bit rot. Stored results and out-of-order execution means they're prone to subtle errors. Environmental leakage is relatively high.

Literate programming suffers from this in general because you don't want to clutter up your document with noise about versions and so forth - even as appendices, including package information and build instructions is a lot of noise.

Requiring that papers making claims about some code base publish that code base simultaneously with the paper via the peer review process should be sufficient to improve the overall state of affairs.

Don't underestimate the value of demos and competitions with companion papers either, those tend to get a lot more notice.
Thank you, I'll be watching this tonight after my SO nods off.
Amazon may sue Surescripts after threat to cut off data from PillPack
Ah yes. I remember all those 8GB NeXTStations.
It is actually the Mongolians took Tibet, then the Chinese ruler simply inherited it
I don't know the specifics, but presumably this is what a patent treaty is designed to cope with?
If we look at all the college administrations that quickly crumble after students protest that they might have to pass past a building in which, had they gone inside, they could have heard something they would not like, this dismissal rings quite hollow.

And once we look at riots in Berkeley, the guy who went a-shooting congressmen, or fine folks who had beaten up a gay POC journalist (a Quillette journalist, but still), well, not all of them are students, but they are doing just fine inflicting violence on whoever they designate as "Nazis", or "Fascists" or whatever the scare word is today.
When would refugees fleeing violence with only the clothes on their backs find the time and money to pop into an internet cafe and fill out the application?

Or do border guards have a stack of asylum application forms to hand out at crossings?
Advertisers pass their costs onto their customers. Everyone is hurt by fraud.
> The standard approach is more robust and predictable - if we are building for X, then xyz.h must be present. It's a stronger invariant.

I'm not sure if you presently maintain any popular cross-platform packages (e.g. source code + build scripts) but that hasn't been the case for a long time. With all the different fringe distributions, bastardized kernels, mix of packages installed via the preferred system package manager vs 3rd party package managers like npm, pip, and homebrew, newer versions of libraries built and installed by hand from a tarball or git checkout, etc. all modern build scripts have switched to feature detection rather than (exclusively) platform detection (which I still favor, when I can get away with it).

autoconf, cmake, meson, etc. all recommend testing the toolchain for a feature (e.g. build a one-liner that tries to call a system API linking first against x, and if that fails, then y, then z) and go with whatever succeeds first (in the order suggested by the developer) leading to horribly complicated messes with infinite permutations.. but generally significantly less user issues when attempting to build a package or library.

However, I do feel that I may have misunderstood you and this is the approach you are suggesting?
Performance of ML for classifying Crohn Disease patients using genotyping data
I was simply alluding to this :

"Roger Penrose and J.R. Lucas argue that human consciousness transcends Turing machines because human minds, through introspection, can recognize their own inconsistencies, which under Gödel’s theorem is impossible for Turing machines. They argue that this makes it impossible for Turing machines to reproduce traits of human minds, such as mathematical insight."
This article mentions the expansion pak but this wasn’t even released at the time of the game. The sequel, Perfect Dark, relies heavily on the expansion, while Donkey Kong 64 requires it due to a game breaking bug.
Ich liebe diesen Tag so sehr
- ich würde gerne mehr Hochzeiten wie diese sehen, eine so schöne und persönliche Aussage für das Paar und ihre Liebe zueinander. Vielen Dank an Sie beide, Diane und David, ich bin sehr glücklich, Ihren kostbaren Hochzeitstag mit unseren Lesern teilen zu können. https://www.mekleid.de/abendkleider-g22
About the security content of macOS Mojave 10.14.6
Nobody except Apple bought the Intel parts anyway (possibly because they were absolute flaming garbage relative to Qualcomm’s products), which is why we’re in this position in the first place.
The Russians were working on the same problem and were so confident they refused Kennedy’s suggestion they do a joint effort. You can’t blame them either - they beat the US on every milestone except a manned moon landing.

Any attempts to change the game would have been seen for exactly what it was: weakness. He may have hated Kennedy but he loved the US more.
I am expecting that they'll rewrite it into a proper native desktop client. :( Anyway, I'll just use the browser version.
Yeah that’s all really bad, but the worst I ever saw was some c with the comment at the top

/* converted with f2c dec 2001 */

I had to to fix some buffer overflow and int overflow issues flagged by an automated scanner. 2000 line function with about 50 labels and gotos in there.

Working on it was actually kind of zen, it was just one file though, any more would’ve been unbearable.
> This was a surprisingly good read. However it's pretty long, so a table of contents would be useful for navigation and future reference.

Agreed. I read through the introduction before realizing that the fabric descriptions was when I began learning something.

I'll definitely try to remember the quick and easy spot check techniques the article mentioned, e.g. holding cotton fabric up to the light to see how tightly woven the yarn was.
I don't get why you're downvoted. You're telling the truth about human rights abuses. Who the hell finds this objectionable?

I guess the "head underwater" thing is a little extreme but there are people getting the shit kicked out of then right now for peacefully protesting in favour of democracy.
Flagships have been skyrocketing in price and are losing marketshare to the midrange segment, which almost always has removable storage, and often has a swappable battery.
https://anuschkarees.com/blog/2014/05/04/how-to-assess-the-q...
interesting read. Here's how I understand the outline

* transition version control to Git

* Removed commented out blocks

* Add clang-format to the codebase

* remove support for old operating systems

* fix clang warnings and memory bugs

* reorganize sections of code changing behavior minimally

* add unit tests

* update compiler to clang++

* refactor and add new functionality
This has been my preferred approach for multitargeting since day one (long before there was even a unified interface for creating cross-platform synchronization primitives, let alone filesystem and hardware access), but unfortunately I think we lost that race a long time ago.
It's not though the crystals are used to determine the structure of the molecule itself through XRay crystallography. We have to grow larger crystals that are then used to determine the shape of the individual molecules. Some crystalize easily and we were able to study them using crystals grown here on Earth but others were more difficult and had to be grown in space. Just because the research takes place in space doesn't mean it's only applicable in space!
Textbook example of: GOOD_IDEA < GOOD_EXECUTION
The purpose of my question is that a 4 byte hash is only privacy preserving if there are substantial number of collisions.

Since I’m replying to you, I might as well ask, is Google planning on creating a locally cacheable DNS scheme that includes safe browsing information?
Edit: I thought you were OP I replied to. Apologies for the confusion (about the contact lenses comment).
Who the hell finds this objectionable?

The Chinese?
What makes you think its relevant now?
It's worth noting that Istio has built-in support for failure injection (i.e. without needing to run a separate service to return 500s): https://istio.io/docs/tasks/traffic-management/fault-injecti...

As far as I know Linkerd does not (yet) have such a feature though, so this post seems like a reasonable alternative.
Forget detailed blackbox telemetry, perhaps a more pertinent question to ask is why aircraft location data is not transmitted at decent frequency (60s?) via sat comms in a manner that is not able to be disabled via the aircrafts controls.
see: https://en.wikipedia.org/wiki/Analysis_of_Malaysia_Airlines_...
and:
https://en.wikipedia.org/wiki/Malaysia_Airlines_Flight_370#S...

Also for the other respondent about internet access, direct access is not required in many places as there are already extensive radio ground stations in use for aircraft telemetry.
It couldn't be tax cuts, low interest rates, or forcing the proles to capitalize the market with their 401Ks.
That's what I've been trending toward as well.

There's a tremendous amount of work out there for how to get redux to completely handle async and branching methods, and I think the best solution for most cases is to not have it handle any of that.

Keep your data fetching in normal everyday functions, have react components call those and funnel the data you need in the global store back to redux, and then have the components that need that data read it from the global store.
They say the async is operating on a timescale of seconds (presumably long enough for the batch OCR jobs to get around to it), so you can bypass it, but that won't do you much good.
We have yet to duplicate anything even near human intelligence or introspective abilities with computation. We therefore have no existence proof that human mind is purely computational in nature. I think we can safely say that computation is necessary to produce a mind, but we cannot yet say for certain that it is sufficient.

Mind may require something else that we don't yet understand. (Not necessarily claiming it would have to be supernatural, just not yet understood. Perhaps quantum computation or some other kind of quantum effect?)
Actually the microSD Express spec was announced recently.

https://www.theverge.com/circuitbreaker/2019/2/25/18239558/m...
> I wouldn't be surprised if you could generate signatures from the timing patterns of text input events in javascript, too.

If I remember correctly, some MOOCs make their users type out an honor statement in lieu of a handwritten signature, and record the timing information as you suggested.
Aren't there open-source OS floating available that one can install into an Android?
https://www.ipwatchdog.com/2017/07/05/americas-industrial-re...

https://www.smithsonianmag.com/smart-news/how-industrial-esp...

https://foreignpolicy.com/2012/12/06/we-were-pirates-too/ (this one is specifically in context of China)

This was before patents were well codified - instead it was trade secrets and guilds. It was still intellectual property theft.
Check any zippers it may have.

Does it say YKK on it, does it move freely and is it sturdy and made of quality, tough materials?

Or is it flimsy and prone to binding, can the pull tab be manipulated into some strange position?
I'm surprised that eMMC hasn't seen more of a price drop off like SSDs, mSD and other flash storage. The OrangePi PC+ does include 8GB of eMMC, but I think that was the largest they could get for a cheap price...
> But who cares?

Anyone who wants to know where this magic foreign money is coming from. Personally, I'm not judging anyone. At the same time I don't like living in ignorance.
$100K/$50K/five years, two jobs
I’m a bit confused about what is free and what is not
The cause of inequality is a combination of inherited wealth, workers not having control of means of production, and a lack of real direct democracy in how we make decisions as a society. This inequality is enforced with violence by those hoarding all of the wealth and power. Both capital and the state are to blame here.

Interesting mental exercises aside, this article is hard to take seriously.
I think it's useful if you have a rule at the outset of a project that rejects things longer than X where X is the 99% percentile length of a method.

I ran the stats retrospectively on a codebase I once worked on to derive sensible values for max class length and max function length. To be honest, they came out at some fairly sensible values and I would be happy putting a blocker in place to say "if you are doing anything more than this, you shouldn't be". I think it was something like 200 lines for a method and 3 or 4 thousand lines for a class.

If you can do it at the outset what you'll find is that the vast majority of the time the rule is never triggered. In the majority of cases that it is triggered, it's trivially easy to break the method up a small amount to be under the limit. It's very, very rare to feel like you're having to break it up unnaturally and it feels very forced, though it happens on the extremely odd occasion. I'm OK with that trade-off. The benefit is you never wind up with the 5k line long methodzilla that someone thinks is a good idea and everyone laments forever.

Every code base I've seen has one godzilla method. I'd prefer we avoid godzilla methods at least. You don't need an 18k line class. Nor a 5k line method.
CareRev (YC S16) Is Hiring a Senior Marketing Manager
I should've expanded on my example more, since Anglo-American history is not universally taught around the globe.

The Puritans were a more radical branch of the Church of England, famous for their early role in the American colonies. "Puritanical," according to Wiktionary, has two meanings: one referring to things related to the aforementioned group, and the other to "Precise in observance of legal or religious requirements; strict; overscrupulous; rigid (often used by way of reproach or contempt)."[0]

Of course, one could argue that this is an adequate synonym for the word "devout." However, saying the Pope is devout is very different from saying the Pope is puritanical (and, given the word's history, somewhat ironic). It is technically correct, similar to your definition.

> The only bait-and-switch here would be if I sometimes pejoratively referred to policies as "politically incorrect" which did not in fact meet the definition I provided

Why would you pejoratively refer to something as "politically incorrect," if you think political correctness is bad?

[0] https://en.wiktionary.org/wiki/puritanical
"We want legislation requiring that publicly financed software developed for the public sector be made publicly available under a Free and Open Source Software licence"
> and because there's no modern conservative that isn't altright

This is a rather amazing claim, I would be very interested in seeing some supporting evidence, since alt-right has far more in common with the left than with any proper and traditional conservatism. Unless, of course, you define "people I don't agree with" as alt-right with no regard for what they ideology might actually be.
So this isn't about moving the market itself with the orders. There are numerous exchanges on which shares are bought and sold. They aren't just traded on the NYSE and NASDAQ. In fact most large investor institutions have their own Dark Pool exchanges.

What Robin Hood does is sell the orders to high frequency traders, which then front run these orders and can great a small incremental disparity per trade. It's not even .01 per trade.

However, the benefit is that every trade is done at a profit to the high frequency trader, because they are simply fulfilling an order, and not holding the stock.

And to the regular small investor, the price movement is inperceptible.

The actual work of high frequency traders was discovered by large institutions because their order volumes were much higher and because they were much more price sensitive, and they saw a much larger swing in their price from which they were closing transactions.

This was all detailed in Michael Lewis' book "Flash Boys". So if you liked "The Big Short", this one is a must read as well. So in this case they are giving from the poor to the rich, but it's really a small imperceptible amount and because of the vagueness of what's happening most retail investors are completely unaware nor that much interested in what's happening here.

You are getting a zero commission trade, which may cost you $7 somewhere else, do you really care if someone tacks on a $0.50 cent charge? You are still up $6.50.
Police using gangs to suppress dissidents is not complicated.

It's authoritarian, deplorable, contrary to the common good of the people and in every way wretched.

With that said considering the current movement and public enablement of the PRC and Winnie the Pooh's iron fist, nothing you've said or what we have seen in Hong Kong is a surprise. Never the less, the entire situation is an incredible backwards step for common kind.
Technology for "more housing units on a given plot of land" is in widespread use Hongkong, Singapore, Shenzhen, Seoul, and many other parts of Asia. It's even used in parts of the USA like NYC.
Towards integrated tunable all-silicon free-electron light sources
You're absolutely right. It's basically lies to children (https://en.wikipedia.org/wiki/Lie-to-children)

Their mental models aren't sufficiently complex enough to truly understand the truth, so don't bother peeling away the layers of abstraction, just teach them what they need to know to be successful. Eventually, as they advance, they'll gain a more complex understanding, and get closer to the truth.

When teaching physical computing I use a python library called gpiozero (https://gpiozero.readthedocs.io/en/stable/). This lets kids write code such as:

from gpiozero import LED
red = LED(17)
red.on()

to light an LED. They don't need to know that the led class is inherited from a generic output device. They don't need to know that the `on` method means the gpio pin they are using is `high` or that it's outputting around 3.3V. They just need to know that when they run the code, the LED turns on.

When/if they go on to learn more, the layers of abstraction can be removed and they can learn more about what is going on under the hood.
I agree. China has little rule of law. It runs mainly on nepotism now even more than pre-XJ. That said, I'm still guessing that most of this money was made illicitly.
YKK doesn't mean quite as it did. More an indicator of probably adequate than quality these days.
> 90% confidence [0] that creating a self-sustaining nuclear reaction with Uranium was impossible

But the fact that Fermi was doing such a calculation in the first place proves that we knew in principle how a fission weapon could work, even if we didn't know "how far off [they] were". As soon as we figured out the moon was just a rock 240,000 miles away, we knew in principle we could go there, even if we didn't know how far off that would be.

By contrast, we don't know what consciousness or intelligence even is. A child could define what walking on the moon is, and Fermi was able to define a self-sustaining nuclear reaction as soon as he learned what nuclear reactions were. What even is the definition of consciousness?
Gut bacteria may have motor neurone disease role
The post shows a wireframe that says it is still an Electron app, which blows my mind because the last language anyone should use to build a native app is JavaScript.
I'm really hoping it gets watered down by the European Court of Justice, but that would take a long time.
Meh. The point being that the internet need not be an authoritative system of damning evidence, but more honestly a constant runoff of disgusting effluence and neutral solvent, laced with a minuscule fraction of redeeming nonsense.

There’s lots of plastic wrap that encases huge blobs of bile and rancid offal, an interminable off gassing of useless ticker tape and discarded life lines once marking points of reference and benchmarks, but here and there you’ll find a chunk of pristine vegetation, still edible and unspoiled amid the heap of trash.

Read all my every blurb and the sum total of my stream of consciousness if you must, but I apologize not for my transient moods or default, unscripted blather. Sometimes I drink. Do what you will about that.
> Uniquely Quebec manages its own immigration

That Quebec is the only province that avails itself of the opportunity to attract immigrants to itself rather than relying on the federal government is to its credit. If the Anglophone provinces don’t feel like exercising the powers they and Quebec share that’s their problem, not Quebec’s.
You will probably get up and running quicker with an IDE.

That said, the 'e' in emacs is "extensible", and it is IMHO a big deal.

Although it takes a long time to learn (and personally I still wish elisp was python), the extensibility is something that you can build on over time and make the editor your own. You can hang onto it all your career.

An analogy to all this is craftsmen who build up their tool chests over time. They probably start with a "one size fits all" sort of tool set, then over time add and replace the pieces they use, and iterate.

A few humble emacs things I use:

- tramp mode: edit files on any system with ssh access

- compile mode: take any compiler output and step through errors in each source file one by one

- compile mode: I actually have non-compile things like custom searches where I can search for something and step through the found things one by one. Just output <filename>:<linenumber> from a script and you are productive

- version control: software archaeology

- diffs: so many kinds of diffs/merges are possible

- custom keys: put a function on a key. modify how a key works. bread and butter stuff.

- smart search and replace: sky is the limit

- modify what you don't like: if emacs doesn't behave the way you like, either customize or replace the offending function and make it work "right".

some sites:

https://emacsformacosx.com/

https://www.emacswiki.org/

oh, one factoid - on sunos/solaris years ago, their IDE was emacs (maybe xemacs based?)