skysight-inc/HackerNews huggingface dataset:
Using a large nonce is possible but would add protocol overhead, and we intend ZeroTier to be a very low-overhead high performance protocol

No?

"Large" in the context of nonces means "larger than the headroom GCM provides". To get to a place where you can safely use random nonces, you're talking about just a couple extra bytes.

This is neither here nor there, since the actual problem this system has is a marketing decision to simultaneously comply with FIPS and use a nonce-based AEAD (which means, in practice, using GCM). But "larger nonce" is, I think, the general "right answer" to this problem, and the logic used here is alarming.
want to report back that i can't write good code either!
斗争 means conflicts, not struggle.
By that definition, Allbirds, Away Luggage, and any number of others aren't tech companies that deserve 20-40x revenue run rate multiples either...
Yes, that is still a thing.
> it really sucks to get ads targeted at my mental health diagnoses

I am extremely cautious to never look up health info without using a VPN and to never discuss health in email exchanges.

After receiving a diagnosis from my doctor some years ago for a condition, a week later I received a targeted snail mail ad for the condition using my full legal name, which only the DMV, my doctor, and the property assessor use. All web stuff, purchases, email, use a nickname instead.

I discussed it with the doctor's office. They said they are HIPAA compliant and wouldn't say more other than referring me to their privacy policy. The privacy policy like ALL medical privacy statements these days contains vague information about "sharing" with third parties and partners in certain circumstances which as written don't appear to be selling private medical data for advertising, but clearly do.

Currently when seeing new doctors I use a fake name, pay cash, and give them a phone number to a phone separate from my normal one, which I bought with cash and never associate with my own name. Works for prescriptions for the most part too since I pay cash for that as well and id is only required for narcotics.

Since then, not so many targeted ads.
That depends on the page of course. This behaviour lets advertisers cross-correlate users.
What’s the problem? The study is crazy-well powered (0.90), which is way above the “industry-standard” (and often not achieved) 0.80.
Ever tried keeping a server cool on a satellite? It's not fun.

If underwater cooling is way better than air cooling, air cooling is absurdly better than vacuum cooling in a sun oven...
As an ongoing telnet BBS user...

Text selection isn't generally necessary; but in a pinch, one can put a little more effort in to extract and format it.

Font support is excellent if you desire a single font and want it to look one way, all the time, and not be subjected to the whims of the data-provider.

It's true, in a TUI you almost _never_ experience the abhorrent pain of the Window system thinking it knows better than the user, and so your focus remains where you wish it to be, at all times, always.

The best argument in favour of TUIs is that the user is always the primary focus, their current application focus always remains so long as they desire it, the content restriction limits the visual variety, and the limitations coerce the interface to providing only necessary information.
Well, the rest of the code is also correct on its own though. If I tell the function to allocate X bytes, it should either fail or return a buffer that has space for X bytes. If the function returns less than X bytes if X happens to be a large unsigned int (that is a negative value if interpreted signed) then that is a bug and is exploitable.
I want to be able to tell customers that my service is GDPR-compliant. (Plus I'd rather not pay fines!)
Some of your comments, like this one, have been breaking the site guidelines. Would you please review them and use HN more as intended?

https://news.ycombinator.com/newsguidelines.html
Tic-tac-toe? :)
SEEKING WORK | Remote, Europe | Full Stack Web Developer with product skills

Hey I'm Vincent, a full stack developer with strong product focus and startup experience (founded my own in 2015, quit in 2017). 10+ years experience in all kinds of orgs from agencies, startups, corporates and non-profits.

* Skills: Ruby, Rails, Elixir, Javascript, Postgres, MySQL, Heroku, AWS, Product Management, UX, Customer Development

* Resume / CV: https://vincentoord.nl/resume

* GitHub: https://github.com/vindia

* LI: https://www.linkedin.com/in/vincentoord/

* Clients: https://veen.xyz

Send me a message at vincent@veen.xyz
Clonaid
The status quo. You’re condemning men for maintaining the status quo in order to agree on something going forward on a handful of issues when every other word was essentially revolutionary.

This is prior to the Article I branch of government, Congress, abdicating much of its power and creating this myth of coequal branches of government, and when House districts were a lot smaller, and you and your neighbors has to decide between yourselves who was in charge of certain functions of keeping society going. You know, who was going to be the local Sheriff, who was going to run the local court, who was going to deliver the mail and so on. Many of these jobs were boring and without glory, but someone had to do them.

Had Madison’s Virginia Plan been implemented in full and the Connecticut Compromise wasn’t implemented, it would likely have been more democratic still.

Structurally, the United States constitution is overwhelmingly democratic, and especially for the time it was written and ratified. If it has grown less democratic at all, it is due to factors the signers and ratifiers of the Constitution could never have predicted that occurred in the 230 years since. No one could have foreseen Congress would abdicate much of it’s power and responsibilities in the 20th Century, or that the Industrial Revolution would lead to the single greatest explosion of the human population in history, or that we would choose to let in so many foreigners. Nobody thought each House member would be representing a district in the hundreds of thousands at a time when they thought one House member per 50K might be too few.

Is it democratic? Oh yes. It is the most democratic document of its time, and few legal documents written since then could plausibly claim to be more so.
Counting based on problems is tricky, as it depends how hard the problem is. When I implemented, I got about 4x faster with bit packing.
I ran a study to see who has fastest page load times: static or dynamic sites
The reality is that both engineers and sales have their own respective forms of myopia. Engineers often bias towards elegant code and architecture, salespeople bias towards whatever the last sales lead said on the phone. Both have some value, but neither one will unlock a massively scalable market. To do so you need some vision beyond what the sales lead is saying on the phone or what is easy to design elegantly. Not just that, but you also need rapid iteration and not to fall so in love with your early thinking that you can't effectively capture new insight along the way.
Yup, my definition of interpretation was limited for pedagogical purposes, but I should have been clearer. The propositional logic version is much simpler to understand, but the implications of the theorem are much more interesting in first-order logic, so introducing all of this nomenclature may be too much for someone who isn't motivated yet.
Show HN: Outcode – A freelancing platform ran by humans
Thanks. I was wondering what he was ~pointing at.
If it makes you feel any better, I worked at the "sales company" and they certainly aren't winning big. I think you're just underestimating the amount of factors involved in determining business success.
I don't know where the parent got their info, but I learned this through the original Portal's in-game "developer commentary" system. If you turn on the dev commentary in Portal they talk about this fact during that level.
You’d be surprised how many studies have subjects well below the 1 ns border..
They could also do both.

I'm _really_ tempted to write that they could use the fine to finance the information campaign, but I know that government finances doesn't work that way.
My media server is currently a FreeNAS system from iXSystems. It provides about 26TB of RAID-6 protected storage and relies on open source products so if iXSystems goes away I can still maintain/upgrade it. My "management" consists of some Nagios scripts that tell me if it is complaining about anything (disk goes bad, scrubs haven't completed, ECC errors have spiked, etc).

In its "media" volume it holds my movies, books & papers, and music that have been de-DRMed (if necessary, I always prefer buying non-DRM products). Each medium has a slightly different method of de-DRMing. My toy search engine only indexes the books/papers though.
Pilot here. IIRC the moment an aircraft leaves the ground it leaves local jurisdiction and enters federal airspace and federal jurisdiction. So even if you're flying between two location in the same state where cannabis is legal you still have to travel through a jurisdiction where it's illegal.

I suppose this rules out cannabis drone deliveries too :)
Yes, but parent is arguing that the feeling could be what is affecting the test results more than any cognitive abilities or enhancements as a result of playing the game. I.e. if you "won" the Lumosity games (which normally get harder until you fail) and "lost" at Portal, is the effect the same or is it reversed?

A very valid question indeed.
Portal 1 and 2 have amazing in-game developer commentary modes. Would highly recommend a replay with the commentary enabled to anyone interested in game design at all.

Can't watch with sound at the moment to confirm it's a good video, but this comes up in youtube

https://www.youtube.com/watch?v=x0uVg9nuaS0
Hawai’I: Eight Hundred Years of Political and Economic Change
I've worked on a system where almost all of the business logic was handled as stored procedures (apart from things that belonged at the UI level, of course). Worked fine, was easy to debug , and performed great. Sure, you had to know how to actually write good SQL, which threw off kids who think programming equals using JavaScript framework du jour, but I don't see it as a shortcoming. No XML anywhere either.

At some point they rewrote it as a web app with NHibernate and all that. Took them literally many hundreds of man-years, and it still runs like molasses. And profiling whatever crap NHibernate emits is rather joyless enterprise.
I'm curious why pay for your product, when I could just use Hasura for free + the instance it's running on?

Edit: I might use it if it had a freemium model not just trial. I often play w/ new technologies, forget about em, come back try em again and stick w/ the ones that stick in my mindshare, but a trial doesn't allow me that freedom -- at least for hobby projects.
How they feel could very well matter.

I forget the behavior / explanation but if you take two groups and have one successfully complete tasks, and another unsuccessfully, and then test them both you'll find the folks who just previous to the test successfully completed tasks will do better than those who were unsuccessful.
>According to Wikipedia One WTC cost 3,9 billion USD to build. It's 325,279 m2 floor area, or 12 000 USD/m2.

That doesn't include land value, does it? A significant chunk of the lease is to pay for the land value.
Is it just me or there an elephant in the room no one is talking about?

To me, so much blame lies with C's arcane rules, in this case for forcing you to declare variables earlier than you need them. If the compiler hadn't complained pointlessly and just let the programmer declare variables where they're needed, people wouldn't have had to try to "fix" it to begin with.

Apparently people would prefer to blame the kernel developers than the immaculate language that is C though...
Lol. I totally misinterpreted your question. Answer: Webflow.
He already sold $700m of stock for real money just before the IPO.
Never heard of one being implemented. Maybe that’s because you can’t store a googol in a floating point?

I’ll see myself out.
https://github.com/ihabunek/toot
Furcadia, Tapestries, online forums, nowadays also Discord as many forums died out.
Mine aren't entirely unlabeled. Pax Era batteries are specifically made for cannabis and their pods have strain names on them. Many of the standard cartridge batteries also have brand names on them. I doubt most TSA agents would recognize something like that, but it's always possible.
> to falsly claim that they've removed "Don't Be Evil" when it's clearly still there makes it just a straight up lie.

I wrote, ". . .relegated to more minor places. Last I heard 'Don't be evil' was buried in an HR document", which doesn't claim they've removed the phrase. It seems consistent with the link above, https://abc.xyz/investor/other/google-code-of-conduct, that shows the phrase at the bottom of pages and pages of bureaucrat-eze (mentioning HR several times), like the ark at the end of Raiders of the Lost Ark.

You seem to imply that I "literally" spread a lie and falsely claimed a "straight up lie." Did I misread?
Maybe this used to be true (I am not making a claim one way or the other) but it seems unlikely they would have that approach and end up with their latest offering - Artifact. I realize not every game is going to be a hit but that game doesn't seem to be liked by just about anybody.
Sorry, I misinterpreted your comment. Never mind.
> it remains largely invisible to the people

No, it's certainly not visible to the people. If you are talking about Chinese people, not HK people.
> I know that successfully completing a task(s) just before a test will result in better performance on tests

From his comment
> DRM made a promise to business that it would control content in ways that would let them extract more money from users and make it much harder for them to copy or use the content outside of approved uses.

1. If you think it's harder for users to copy or use content outside of approved usage, choose your favorite TV show, and type the name of the show with the text "s01e01" into Google. You'll find links to stream it in low quality or torrent a high quality MP4.

2. Meanwhile, try downloading a book from Amazon and transforming it into epub so you can read it on a different reader. If you manage to figure out how to do that, please let me know.

It's not at all clear that the minor difficulty of 1 prevents so much lost profits that it outweighs the profits lost from 2. So it's absolutely not clear that DRM has resulted in extracting more money from users.
If only they had a puzzle franchise begging for a third game that would be amazing (okay, maybe a little nauseating) in VR.
I guess. But what would the average citizen use? Cash? Seems likely that somebody would step in to be the de facto online transaction provider. And the government probably would want some way to financially tie HK to the mainland.
The Greeks and Romans used to eat lupine seeds (it's a legume, they look a bit like edamame, but very, very, very high in alkaloids).

The simplest solution was throw them in a bag with a string and soak them in a stream for a week or two. The labor intensive solution involves boiling and rinsing them three or more times.

Legumes are good protein, but come on. Lupines do self-sow though, and you can probably get more than a cup per plant, so I expect you could be looking at an entire field of lupines and thinking it would feed your extended family for a week.
I think you can do simple and powerful web programming without pursuing the latest front-end or back-end frameworks. Just use jQuery and frameworks like symfony or django, or others depending of your favorite language. Those are mature technologies that have been there for years.

Mobile might be less complex if you stick with the default native language and tools.

I'd say maybe embedded programming is the field where you have the least plumbing, but is more complex on other matters (chip power and consumption).

I wouldn't recommend machine learning, computer vision, and certainly not robotics, which is tedious to make it work.
Definitely a genuine comment. I think if you check out my participation on dev.to, Hackernoon, Medium, etc, you'll see I am actively engaging in the developer community as a whole.

I also happen to work on numerous other projects and felt my contribution to this thread was helpful. Appreciate the concern, though. Happy to let others engage!
No you wouldn't.
I wonder if they were promised cake upfront :)
A long time ago I did high school math instruction. I used Sudoku for an initial introduction to proofs - something where the student knew they were implicitly going through a "proof" process.
I wonder how long they are going to play test half life 3? Infiniti?
There is a collection of benchmarks of the fastest sudoku solvers here: https://github.com/t-dillon/tdoku/tree/master/benchmarks

How fast they are depends on the difficulty of the sudoku and on your machine, but it's typically a few thousand/s on the hardest known and several 100k/s to a million/s on very easy.
US only rem0te? Also, is Verizon a rem0te friendly company in general?
If they were, it was most likely a lie.
I do not represent an NVLAP lab, but I'd question whether this would pass strict muster for FIPS given IG A.5: https://csrc.nist.gov/csrc/media/projects/cryptographic-modu...

(Disclaimer: author of AES-GCM-SIV. Not casting shade here, it's a fair idea! But not sure about the specific FIPS claim.)
From [the guidelines](https://news.ycombinator.com/newsguidelines.html):

> Please don't comment about the voting on comments. It never does any good, and it makes boring reading.
http://harddrop.com/wiki/Tetris_(Game_Boy)#Randomizer
Typescript was created to solve big issues internally at Microsoft, to deal with JS at scale. Microsoft has huge JS codebases, almost all of which are Typescript today. Office.com (including in-browser, online versions of Word, Excel, PowerPoint), Outlook.com, OneDrive.com, portal.azure.com, dev.azure.com, and so on. Microsoft may not be as recognizably a "web applications" company, but they do have a number of really big web applications, and they had real scaling problems with JS that Typescript was directly built to help with.

VSCode was started to see if they could build a good web application for development. Portions of it directly power a number of tools of Azure (on portal.azure.com), portions of it also directly powered the Dev Tools inside IE10+ and Edge "Classic". Bundling the web app into an Electron container after it had already paid for its own engineering efforts several times over as reusable sets of components for multiple large web apps Microsoft needed hardly seems like a "trojan horse" to me.
A little nauseating? It was giving me motion sickness on just my screen!

If they give us Half Life 3 in the form of a VR game I'll be extraordinarily disappointed.
I still maintain Portal 2 has the greatest narrative in all of video games - it’s expressed purely in gameplay, it’s funny as hell, and has a surprisingly deep emotional core.
Light Phone 2 “dumb phone”
I don't see how the supercar analogy is any different than the standard use case of a phone camera vs a standalone.

Sure, a standalone gets you higher resolution, optical zoom, etc, but consider where those photos are most likely to be viewed - you can't get the most from them without going to a special place (printer). You can't make people view them on a PC. Realistically, most people are going to be viewing their photos on their phone, whether they originated there or not, after they've been mushed through facebook or insta's compression anyway. People who own cameras try to rationalize this away but it's true.
Some of this stuff is common sense—it’s amazing what length people go researching certain subjects. For instance, if your brain does a particular type of action (like tracking fast moving objects) it gets better at doing that in general. Same thing with studying math, people get better at solving problems.

Now, if those problems being solved in games or otherwise are limited in scope, well so are the gains achievable.

So, the question then is, how to APPLY that to a general set of problems. Not how it affects the brain doing a particular task. For instance, teach a man to fish salmon then ask him to take that knowledge and figure out how to catch whales or even plastic pellets in the ocean?

Or how about if one study math how can it increase ones art ability or vice-versa? It changes perceptions etc. Seems common sense to me I dunno.
In India galaxy S10 is cheaper than US. And cameras are expensive as most of them are imported.
The point of the article is that this argument wasn't what the corporate backers were saying back then -- although of course, it was their true motive, as the article points out as well.
I guess the immolation would come after the playing?
The problem is that you're often showing those lines of code to someone who became an auditor because they're incapable of authoring or even understanding what those lines of code are doing.
I get the feeling these are just general websites with mental health information, articles and little tests, but not actual health providers. If it's just a directory and not your health insurance company or doctor, they don't fall under HIPAA. HIPAA only applies to the US. EU laws and the GDPR, which this article are discussing, are very different.
Mind explaining the concept of the marginal investor in this context?
It's ok to occasionally link to one's own site in relevant contexts, but only as a small part of using HN as intended—i.e. for gratifying intellectual curiosity: https://news.ycombinator.com/newsguidelines.html

But it looks like you've been using HN primarily to do this. That crosses into spamming, so please don't.
Bandwidth will be abundant, and this kind of problem will be moot in 10 years.
Super interesting read.
The geometric growth of deps problem seems like a natural consequence of having a good package manager. In languages like C/C++, libraries often include all their code - there are no transitive dependencies.
There is nothing in your statement above that seems remotely surprising to me. Now, I'm extremely bearish about WeWork, and their financials (not to mention their governance) look horrible at least from my layman's eye, but you seem to be arguing above that WeWork is overvalued based on the comparison to a real, physical asset.

If there is anything the Internet has shown, it is (unfortunately, IMO) that all the money is to be made in marketing, not in actually building or selling things. I mean, Google absolutely rakes it in with AdWords, while all the businesses actually buying AdWords to sell real products often lose money (Mary Meeker's latest report showed how customer acquisition costs are starting to exceed the lifetime value of customers!!)

Thus, in and of itself, I don't find it odd that a marketing and management company like WeWork is worth more than the products they rent.
That's great news !!! Congrats to the Containous team !!!

Using Traefik for more than a year now, working like a charm.

I wonder if SO_KEEPALIVE is implemented ? I ask this because we have funny devs that don't know how to implement SO_KEEPALIVE on springboot projects correctly. That can be annoying for an Operation Team....
Report says Apple to release new ‘iPhone SE’ with 4.7-inch display in 2020
Fair point - yes, but only to a certain extent.
"There is no denying that a decent image resolution is quintessential to achieve professional results, but it would be misleading to trust in the resolution as the sole indicator for a camera’s quality."
http://www.exclusivearchitecture.com/?page_id=657