skysight-inc/HackerNews huggingface dataset:
The article appears to say that you must sign your requests with a symmetric key. To verify the request, the server needs the same key, right? So the server needs a copy of every single user's encryption key.

The server _could_ just store the keys plaintext in a database but I'm assuming we can agree that's a horrible idea. The best it can do is encrypt them symmetrically before storing them, using an extra-special secret key that needs to be protected very carefully.

With username/password authentication, we don't store symmetrically encrypted passwords, do we? We store a one-way hash of the passwords instead, because symmetric is deemed not-good-enough.
Glad they changed it, but it's pretty damning that this was the model in the first place.
> What's bizarre is that beef burger makers see this as a threat worth addressing... like, nobody's accidentally buying veggie burgers.

If they force the sellers of veggie burgers to come up with, and popularize, another term, they cost those guys a little money. There's no principle involved here.
> It's all vague at this point, and several vendors and at least one analyst say they're seeing no such migration.

Seems the answer is a no.
Couldn't help but notice that your ad hominem attack was conducted entirely in plain text.
The list of recommended mail clients had nothing for mobile. Is it because good ones don't exist?

I'm a happy GMail (android+webmail) user because the usability is good enough and I don't need to install and configure stuff.

If I wanted to send plaintext email from my Android phone, is there a reasonably easy and usable way to do it?
They're viscously coupled to data. This is what enables them to slip through the cracks:

https://giphy.com/gifs/film-terminator-2-X9o7FpxErqKje
You can always mountain bike!
If an HTML phishing email is hiding an obviously malicious URL behind an image or button, then yeah, that URL would be more visible in a plain text email.

But it's also visible in the address bar of the browser after you click it... and people will fill in the form anyway.

Plain text doesn't solve complacency and distraction, it doesn't solve URL composition tricks and redirect wrappers, it doesn't solve spoofing, and it doesn't solve malicious attachments.

If Google's account emails were all plain text, I'm sure phishers would figure out how to make them look as identical to Google's emails as possible, and still get some people.

IMO we already know some good ways to mitigate phishing, but their implementation is spotty: DMARC, hardware token 2FA, and good IT practices in terms of patching, privilege, and backups.
The cat's out of the bag. All this would lead to is law-abiding citizens having their information at risk while criminals continue to use crypto without backdoors.
Wage theft is distressingly common. The biggest thieves are businesses (stealing from workers) and not some cat-burglar in a striped shirt:

https://preview.redd.it/grnr8kxbl6zz.jpg?width=960&crop=smar...

https://www.epi.org/publication/employers-steal-billions-fro...

https://www.currentaffairs.org/2017/11/abuse-by-bosses-comes...

This is why unions and collective bargaining are so important. The power of an individual is almost meaningless versus a business of any size.
What do say Lawyers, doctors and Traditional engineers Get ?
Randall Munroe was onto this years ago: https://xkcd.com/504/ I think the case is strong that encryption is equally protected by the 1st, 2nd, and 4th amendments.
“Fails to be as anti-democratic as the remaining remnant of the US Constitutional design to protect slavery” is an odd criticism of another government’s structure...but okay.
Facebook Agrees to Pay $5B in FTC Settlement
As a bicycle, I can’t wait for self pedestrianing drivers.
Did Boeing Secretly “Bet the Company” yet Again on an Airline Project?
Tipping just needs to die. If your business model demands that customers pay your price + 20% to pay your employees a wage they'll accept, then just increase your price by 20% and pay your employees that wage to begin with. Don't lie to customers and tell them the price is 20% lower than it really is when they're expected to add on more.
I’m not seeing that. Are you by any chance on mobile?
What you want is a plain old music generator app. Search for "generative music". Drop the Ai, it's overkill. Also with the amazing tech these days anyone can be a musician. It's basically push-botton.

Bloom on the iOs app store. https://apps.apple.com/us/app/bloom/id292792586

Someone's cloned Bloom: https://github.com/generative-music/blossom

Wotja too maybe. Here's their FAQ about rights: https://intermorphic.com/wotja/faq/#faq-recording-ownership

Wired can point you in more directions: https://www.wired.com/story/generative-music-apps/
When my company wanted to issue me with a work phone, i looked for the most pager-like thing around. The only reason i would ever use it is to receive alerts when i'm on call, and to do 2FA to connect my laptop to the VPN, so i would like it to have small size, long battery life, and a loud speaker. I couldn't find anything at all like that.
And my point was that linux users depend on such repositories all the time.

There will probably be quite a few wake up-calls where this is exploited.
Revving the Innovation Engine
More meaningful than the $5b fine, Zuck has to personally be responsible for any privacy related regulations
Agreed. It's better to have the conversation now because if we don't and the "event" does occur those who support encryption backdoors will use it as the basis of their argument in all possible manner.

"We must do something now, it's clear that we need backdoors because of X!" <- That's a much worse position to be in during a debate.
It is quite certain that law enforcement has more capabilities than they are willing to reveal in courts. Even if encryption backdoors were available, it is dubious they would routinely submit it in evidence.

Encryption is not an impediment to an investigation into an ongoing activity, files need to be decrypted, there are side channels everywhere, etc. Metadata and physical surveillance is enough to convict or put a person in a position where they could be convicted under some other law if there is no convincing explanation for why they were where they were.

Usually the point of mass surveillance is to retroactively look up a person of interest and blackmail them.
In Finland it is common for people to remove shoes indoors - I guess walking through slush/ice/snow in winters makes that a good habit - and that often extends to company-offices.

Of course outside there it would seem a little odd to many, I'm sure. Though sliding around polished floor, in your socks? Never gets old. Maybe I'm just a child..
I assume the endgame for the scooter companies is to get big enough before regulation kicks in and they're forced to add docks of some kind, but so are potential competitors. That would be a nice little moat for them.

I wonder therefore how long it takes before one of the companies thinks they can gain an advantage by getting first dibs on dock locations.
A Microbial Ecologist Reflects on Sylvia Plath’s “Mushrooms”
You have a point. By decree what I meant was that in the event of a disaster and panic the public will back any law that forces, say, Apple to give unfettered access to law enforcement. By then it's too late to engage in debates. The public became interested and very unforgivenly sided with law enforcement. They'd have prioritized their safety over being able to send cat pictures securely. Similar to 9/11.
This advice is great not just for bootstrapping your own startup, but for selling yourself in life (interviews, dating, etc).
The stories I've heard from CPAs and other friends is that it it's amazing for small companies < ~$300K annual revenue and then falls apart pretty quickly once you need to do something other than just basic reconciliation and pay taxes
As someone who uses w3m to read HTML emails sometimes, it's very hit and miss. Perhaps 50% of emails are easily readable in w3m, on a good day.
Anyone with a CS degree will be able to tell you there's a huge difference between being a programmer/coder, and being a Computer Scientist.

Yes, most people can learn to code without a degree but to be able to fully understand the scientific/mathematical foundation of why things are the way they are, and to use those skills to create something scientifically new, probably requires a degree.
It's even easier to just have preshared phrases that have unique meaning.

"Your rental car payment is due."

"OK, I will pay it on Wednesday at 10am. Stop nagging me."

I would imagine that if enough people knew everything had lawful intercept, then they would just obfuscate their communications.
Looks like perfect fit, I wonder why I never stumbled at it before. Thank you!
Peter Norvig had a point several years ago regarding the power of data. For instance, he mentioned some of the data Google collected could measure the effects of relativity. So in some ways, having the data makes it easier to “discover” something versus one genius toiling away in a room. This seemed to be where the lowest hanging fruit has been, particularly at grasping human or social behavior. Due to the need for data and tooling initially, research and discoveries shifted from academy to corporations. In some ways though, FOSS packages and the cloud are bringing research back into academia. In some ways you could make the argument that the government with the Manhattan project, NSA, etc. has driven technology more than academia for the last 70 years. I think you also could make the argument or an interesting research project could be investigating whether there historically has been cyclicality to theory and then practice, ie french enlightenment movement vs. US founding fathers.
Focal lengths are, by convention, stated in millimeters even though most are at least a centimeter.
I don't think that's really an accurate portrayal of what happened with AES and 3DES. NIST (aka the US government) were the ones that introduced AES and recommended everyone switch over to it.

3DES was kind of a quick hacky extension to DES after it was found vulnerable to brute forcing in the late 90s to have something 'good enough' until a more suitable replacement was developed (which was AES). By the time any practical attacks had been developed against 3DES (Sweet32 from 2016 was probably the earliest) almost everyone had long since stopped using it other than in old legacy systems.

Firefox still uses 3DES to encrypt its password database though... it's probably not a major issue because all of the publicly known attacks on 3DES require gigabytes of ciphertext. Wikipedia has a 'citation needed' claim that "the whole 3DES keyspace can be searched thoroughly by affordable consumer hardware as of 2017" but good luck searching a 112 bit keyspace.

I certainly agree with your general point though.
Used to work at a company that was using Gusto, much prefer them to the payroll my company is currently using, ADP
Black Holes Shape Galaxies
This should also apply for work slack.

At this point, especially if I’m working at a company that isn’t a startup, I will not work somewhere that expects me to have slack available at “all times”. After hours if I’m not on call I simply do not respond.

For this reason I’ll never do dev ops work haha
This is why the 2nd amendment is still there, and will remain there.
He doesn't have to: https://github.com/cosmos72/gomacro
I hear what you are saying.

I guess my question is whether ‘harassment’ (the levels at which we are perceiving now) is a function of society rather than a function of human nature.
Stick 2.0 Is Just Launched
Amazon Primenow unfortunately does the same thing. I wish that would become a story as well.
Are you asking us to explain or generalize the behavior of billions of people? How much time do you have because there's about a billion reasons
True. And even if we stop them now, we must be prepared to fight the battle again, because after a major incident, people will be screaming "See, we really need them! Give them to us so it won't happen again!" And we will have to explain, again, to people in panic, or people looking to exploit panic, that it still isn't a good idea, even after a major incident.
There's more to it than that. Traffic is as safe as it is (I won't call it flat-out "safe"), in no small part because people can anticipate other drivers. A _predictable_ driver is a safe driver. Having self-driving cars randomly stop short is a quick way to rack up a lot of "not legally at fault", but perhaps morally at-fault, accidents.

FWIW, if you've ever done car/bike track days, this is a huge reason why it's so safe. People are split into groups according to skill level, with restrictions on passing (normally "only on the straights") for the lower groups. Much of the "skill level" here is actually just being predictable, not being outright fast. Someone can be in a Miata getting passed with a 50mph speed differential on a straight _because everyone is being predictable_. That same Miata might pass the same car with a huge speed differential at 90 mph in a turn, and it works because everyone is predictable.
Attorneys for the United States "can and must" build a criminal case starting from "reasonable suspicion", through "probable cause", all the way to "beyond reasonable doubt", without violating at any step the Constitutional protections put in place for the express purpose of limiting the government's power to reshape or destroy the society it purportedly serves.

We say not to roll your own encryption, but it's one thing to build a lock that is easily picked, and quite another to build one that instantly and silently opens to a key held by a stranger, outside your supervision. Even if there weren't open source crypto projects out there, some managed on servers outside the US, just because I don't roll my own, doesn't mean I can't.

I wrote a paper while in high school on the Clipper Chip, explaining why it was a bad idea. I have learned a lot since 1994, and these folks have apparently learned nothing. Backdoors are inherently flawed. DRM is inherently flawed. You can't create security by trusting an untrustworthy party, or by declaring the intended recipient to be the eavesdropper, or by redefining up to be down.
Just keep repeating “you lost all the SF-86s, but you want us to trust you with everything in everyone’s phone?”
You didn’t answer the question - what does this slur “chud” mean? Is it a catch-all slur for those critical of journalism? Or only those who are proven to be motivated by your laundry list of regressive attitudes?

I think it's fair to watch the watchmen. Journalists and outside observers shouldn't be demonized for being critical of media, and likewise people shouldn't be demonized for being critical of journalists who err in their duty in some way.
We can't defer to people's judgement of themselves and their intentions. The law and the courts make an independent distinction between legal and illegal.
> once.

At least twice.
> People use [...]

Not in my experience. They hit reply, type something at the top with whatever the defaults are, and hit send.

> Is it really that hard to wrap your head around the fact that formatting is useful for communication?

I have all of Edward Tufte's books, as well Bringhurst's Typographic Style, and Chicago: I am aware of the usefulness of typography. I simply have not seen it in my day-to-day e-mails at work or in personal life (except for marketing spams).
If you need to explain to non-technical friends and family exactly why this is a terrible idea, CGP Grey offers an easily digestible 5-minute primer: https://www.youtube.com/watch?v=VPBH1eW28mo

Computers either have unbreakable locks, or no locks whatsoever. There's no stable middle ground.
Monthly-Connected VR Headsets on Steam Pass 1M Milestone
> a support layer for Emacs

The best part of this joke was that I can't tell if it's shade or earnest appreciation.
I think this is a matter of personal preference. At work my primary language is Python and I rarely use the REPL, and when I do, it's a regrettable experience--can't use up arrow to get previous command, can't use arrow keys to move cursor, entering tabs after the `. . .` makes it hard to figure out how many tabs to enter, etc. And of course you can't visualize the whole "program" at a glance like you can in a text editor. Not sure if Python's REPL is just subpar among repls or if I just don't understand how to leverage REPLs for my benefit, but `$EDITOR /tmp/foo.py` just works so much better for me.
Your ideas pair well with what Austhrow743 said above. Self driving as a complementary endeavor so Lyft's core isn't jeopardized by releasing the data.
That’s an interesting theory.
The visual presentation in this article is very similar with how small children are taught the theorems of multiplication and distributivity and simple series sums like triangle numbers.
Define “use”. I have several email accounts that I hardly ever use, and it’s the same case for many of my peers. Most people over 45 I know have email accounts they do check regularly. Yes, more young people are aware of and connected to modern technology; but I would argue that older people who use it, e.g., for their jobs, make much more substantial use of it.
Wouldn't that be easy to discover using the same method the NYT used to find this in the first place [1]?

> DoorDash offers a guaranteed minimum for each job. For my first order, the guarantee was $6.85 and the customer, a woman in Boerum Hill who answered the door in a colorful bathrobe, tipped $3 via the app. But I still received only $6.85.

> Here’s how it works: If the woman in the bathrobe had tipped zero, DoorDash would have paid me the whole $6.85. Because she tipped $3, DoorDash kicked in only $3.85. She was saving DoorDash $3, not tipping me.

[1] https://www.nytimes.com/2019/07/21/nyregion/doordash-ubereat...
And since discovery processes are often leaky, pPart of the onboarding at my company is the lesson that you shouldn't write anything in an email that you wouldn't be happy to have splashed all over the Wall Street Journal.

So, for example, we try to choose names for applications that aren't going to give people the wrong idea, eg don't call your market manipulation tool TurboMarketManipulator, call it EnhancedOrderManager.
Very much this. I travelled around Europe and what's left to me of these trips have almost nothing to do with being exposed to other cultures and that stuff. I agree that a bunch of weeks of traveling, especially if you don't know the language, is very superficial.
My memories of these are mostly about the time spent with the people I travelled with —mostly family.
I love when these stories pop up because I get to see HNers grind their axe against the general practice of tipping. You all never disappoint!
That's a good question. But as long as you don't save any files on your personal computer, it is just a transport device like a car that gets you to work.

I'm guessing the law isn't that forward thinking though. Maybe I should keep a <$200 mini-PC, just to RDP into work so I have no problem giving up that machine.
I prefer a scratch file and send-to-repl. Common in e.f. F#
I think a fallacy, and this is not aimed at your comment, of intelligent design people is that because humans can't really comprehend the complexity of cells, biodiversity, and life chemistry, that it couldn't have arisen from somewhat basic preconditions and "bioalgorithms".

It's really a condescending bias in disguise. Because I, who consider myself awesome and smart, cannot decipher how this could have come into being, then it clearly must be the work of a deity.

To me, once you have mass scale evolution, such that you have ?quadrillions? of individual organisms doing their own survival calculations and experimentation over billions of years, then the amazing powers of the forms of life don't seem impossible.

It remains to be seen with all the habitable-zone worlds being discovered what is out there.
I concede the point on mouseability/clicking-and-dragging, but I respectfully disagree with your other points on what GUIs offer.

Everything else you described is easily available via already-existing CLI wrappers for git. I described my workflow in another comment[0] here. It is incredibly easy to search for specific commits and branches with instant live-previews using tools like forgit, and these tools are only possible because of the composability of command-line programs.

[0]: https://news.ycombinator.com/item?id=20516798
> In deciding against Rawls, the court of appeals found that the constitutional rights against being compelled to testify against oneself were not being breached. That's because the appeals court, like the police, agreed that the presence of XXXXXXXXXX on his drives was a "foregone conclusion." The Fifth Amendment, at its most basic level, protects suspects from being forced to disclose incriminating evidence. In this instance, however, the authorities said they already know there's XXXXXXXXXX on the drives, so Rawls' constitutional rights aren't compromised.

> ""Forensic examination also disclosed that Doe [Rawls] had downloaded thousands of files known by their "hash" values to be XXXXXXXXXX. The files, however, were not on the Mac Pro, but instead had been stored on the encrypted external hard drives. Accordingly, the files themselves could not be accessed.""

A good guess can figure out what I've redacted.
Pyrasite: Tools for injecting code into running Python processes
Care to elaborate? Not being snarky, I've also been at companies using both and have had no preference.
Sure, but I can just refuse to decrypt my data. They can just break physical locks.
Ah twitch is German explains the poor UI - they really really need some UX
For one meaning of "test", sort of, but repls are useful for far more than "do outputs match what I expect". Test writing is not very good for exploratory programming.
People can keep denying this until they are blue in the face but it doesn’t make it false.
Your proposed solution is obviously untenable. The danger I’m describing is that not all cars are self-driving and the way human drivers react to these cars dramatically increases the danger around these cars. Drivers in SF may already know what to expect, but in every new city they roll out in, the human drivers will react rashly to these cars as they are frustrated with the unpredictable, inhuman, and incommunicable (no eye contact or hand waving) decisions they make.
I generally concur. Living in Japan for a month, attending budget and 5-star accommodations and dining, it was very streamlined to have minimal tipping expected [or unexpected].
The other thing I do is to separate my personal and work email accounts. I’m signed into both on my phone, but I only get push-notified about personal mail. I want to know if a family member is in trouble; servers burning down can wait until tomorrow.
Generally the Go runtime (garbage collector, scheduler, allocator, etc) alone is 2-5MB, for additional context.
Logically, to me, it doesn't count. But lawyers and courts have a real twisted sense of logic and will indict their way around this to get your data off of your personal device.
What the heck is it? No description on site?