skysight-inc/HackerNews huggingface dataset:
Obviously SIV is reviewed by people much more familiar with cryptanalysis than I am, but I am not sure how an IV based upon a hash of the message contents is any less likely to collide than an IV that is randomly generated?

Isn't the ideal case for a hash that two different inputs will generate outputs exactly as likely to collide as two random numbers?

[edit]

I found the RFC[1] and it explains it. In SIV mode, the inputs are a (Key, Nonce) just like AES-GCM, but the keys used internally are generated deterministically from the key and nonce, so that each nonce provided uses a different key for the AES primitive, and then uses a synthetically generated (from plaintext) IV as input to AES.

1: https://tools.ietf.org/html/draft-irtf-cfrg-gcmsiv-05
Out of curiosity do you have any particular examples other than the coffee lawsuit?
That's not surprising seeing as how GDPR was pretty much drafted explicitly against Google.
Great explanation.

I'm confused why the author would just assume their readers would know this without any kind of explanation.
The Apple Card: Why I won't be using it
"The more they overthink the plumbing, the easier it is to stop up the drain" -Scotty
So the result would then be something like the flash crash?

I share your understanding of the article, it’s not about “index bad active good”, it’s about, “is there a problem when a lot of investors have to move quickly”. I wonder if there is some analysis of this during the last crash.
I was thinking the same thing. Apparently tech means software now, at least according to the author.

For example, what about companies like DuPont. Surely they are a technology company. Are they also a tech company? The author provides no framework to address the question which, in my mind, means they were largely unsuccessful in their attempt.
While this is mostly from the content angle, dev.to seems to be one of the best places for developers. The comments sections of posts are engaging, and some posts are largely just questions like the one you asked.
Road traffic deaths has reached 1.35M annualy
I love being able to show the lines of code that say "This code cannot advance to a prod-deployable state if the tests haven't passed, because here's where it gets rejected".
In pre-Christian antiquity, the gods ruled all men absolutely, and the high ruled the low. It was simply not the place of commoners to dream of a better world. That was the purview of lords, of patricians, maybe of scholars. The notion of equality is very much rooted in Christian thought. Pre-Christian peasants might've thought that having very little was perfectly just and fair, because they would never question that they were born lesser than their lord or king. The insight the Christians contributed was that all are created equal before God, and that all had moral authority and responsibility for their own actions. The example, as the article says, is Jesus, an ostracized and dangerous radical of ignoble birth taking on a mighty empire and winning the war for hearts and minds. This was heady, revolutionary stuff to an ancient European.
Don't forget Mexico, Brazil, and a bunch of other Latin American nations.
I would be curious to hear more about both of these. I've often thought about setting up a private server, but the set up and maintenance seems like a massive undertaking.

And then being able to extract from a display buffer seems like a good skill to have.
>In 10 years people will be looking back at this in shock that it happened and there will be downstream affects on the kids exposed to it. It's literally programming weird stuff into the psyche of these young children.

~20 years ago people were deeply concerned about the impact and influence that sophisticated television and radio advertising campaigns were having on people, culture, and the economy.

It's gotten so bad now that we seem to have forgotten about how creeped out people were about the comparatively tame advertising through broadcast media. It's not safe to assume the world will march forward to be better or more moral as time goes on. We're just as likely to regress as progress, and the myth that progress is a passive endeavor makes it more likely that we won't.
Contrast this with the TDD approach: http://ravimohan.blogspot.com/2007/04/learning-from-sudoku-s...
The point is simple, though: they cannot do it to increase profits. Doing it for profit makes it more jarring than, say, collecting extraneous personal information through an error.

Your shoe size point is simply a strawman. You've chosen one arbitrary data point in order to make the argument look less important. In any case, I'm of the opinion that neither Google nor the governments of the world should be allowed to do this kind of large scale surveillance and profiling.

And finally,

> We should not send someone to jail for leaking who your favorite pop star is.

I agree with this completely. However if it's not just my favourite pop star, but it also contains all the articles I've read in the last two weeks, and my age, and what I've recently bought... All of these neat little data points about me, neatly filed in a profile made just for me, then the natural question that arises is: Why do you even have this? Who allowed you to start building this profile on me and on thousands of others? The systematicity and scale of it is hard to argue against.
DRM is just digital feudalism.
> it reinforces a false narrative that tech companies are bullshit.

They're not a tech company tho...
>A lot of people would be more empowered to become entrepreneurs and start their path to joining the capital owning class if there wasn't a disincentive to work.

OR if those people could survive on UBI and didn't have to work whatever menial job they could find just to live, they could spend their time freely doing whatever entrepreneurial thing they would rather be doing.
Are Credit Card Points Worth Your Time?
That's entirely different to what we're discussing. You will still be targeted based on sites your visited, but not based on emails you receive.
Raymond Hettinger has a great video introduction to SAT solvers in python [47m]

https://www.youtube.com/watch?v=_GP9OpZPUYc
What's funny is we are trying to Pierce through into a mirror dimension in Tennessee right now, for science, and you guys think this dude's a lunatic for his ideas lol.
> Just a slap on the wrist in the grand scheme of things, considering how large the children's ad market is

not even a slap on the wrist.. more like a disappointed stare
I would kill for Portal 3...

sigh...
> They're not - its clickbait sensationalism.

It's really not. The new mechanism for blocking ads is extremely limiting - not unlike what Safari provides. While Google's stated intention is to protect user's privacy it just so happens to cripple extensions that pose the greatest threat to Google's business. If Google wasn't one of the world's largest ad companies, perhaps their statements could be taken at face value. But perhaps in that case they would have taken the time to come up with an API that could achieve the goals of both Google and uBlock Origin.

Edit:

> Adblock plus works fine with the new changes, for example.

Adblock plus is an "ad blocker" who's main concern is protecting the interests of "good" advertisers, not those of its users.
The folks behind the Pistachio microkernel said they used C++:

https://github.com/l4ka/pistachio

I don't know if it has exceptions or an unusual style since I don't know C++. It is written by CompSci researchers which usually means a different style. Just throwing it out there for anyone considering C++ in kernels since the L4 kernels were all really fast and lean.
Is a Zelle account required to receive a payment?
From the article:

> In this study, we tested 77 undergraduates who were randomly assigned to play either a popular video game (Portal 2) or a popular brain training game (Lumosity) for 8 h.
Seems like that ones coming through on schedule.
You are positioning yourself as a Slack competitor, so I would imagine the most obvious objection is that "we have so much data in slack already". We have a bunch of bots that are useful like SecurityBot and VacationTracker, and our CI process sends out useful slack messages at various points. Those would be the minimum I would think for my company to switch. Of course the real stakeholders probably have higher demands
I work in a company that currently has 2/3 of the teams using Blazor because they aren't comfortable/familiar enough with JS. My team being C# backend and React/Redux/Material-UI front end (using node scripts for all orchestration and ci/cd).

It's a mostly MS shop and you'd be surprised how many developers in orgs really just don't do front end work because of JS.
>I grew up on Arthur, Mr Rogers, and Sesame Street. It’s certainly possible to have quality noncommercial children’s programming.

All of those were products of PBS. So it seems like if we want it to be possible it needs to be primarily funded by donors, grants, and public spending.
In mathematical theory, the variant type is actually the theoretical opposite of a "struct" type. Mathematicians know this through the functions that apply to each type.

Simply inverting the direction of functions that describe a "struct" type creates a structure that exactly describes a variant type.

The theory points to opposites but language writers, unaware of theory, more often than not leave out the critical primitive that should be intrinsic to all programming languages.
Agreed; the explanation does not clarify why the first snippet is considered "totally safe" and the second one is not. How does the second snippet introduce a new security issue? A negative value for num passed into the function will always be forwarded to malloc (after going through the size_t conversion), no?
Phaistos Disc
Have you ever stopped and thought, hm, maybe I'm perpetuating it?

https://www.youtube.com/watch?v=SD0apYFz5gg
I disagree. My own company in the very early days had an immense boost of productivity without tests, just by building the damn thing and failing loudly. Once we got everything wired up and errant semi-colons were blocking merges, testing was a logical next-step.
A serious 50 or the nifty fifty?
Fair enough - so it's fixed on macOS, but not on FreeBSD.

That they don't run into issues with this constantly on BSD is not surprising - it didn't always break in macOS, either. Syscalls just don't change that much, usually, so you can get away with it more often than not. The problem is that when they do change eventually, every precompiled Go app that used one stops working.
Judging from every time someone has advertised "don't need programmers" services/software has actually worked, I doubt it will ever really happen in practice, at least not in the coming century or more.
It’s refreshing to see a team deliver a high-quality user experience on an early version of their product. Day zero pixels and thread count separate the winners from the losers, in my humble opinion. You guys have clearly sweated the details from your website to the product. Well done 8base!
That’s a really great way to learn a new language. Maybe take a Swift 101 course and then drag through a sudoku solver. Very cool!
In a failed state scenario, as you mentioned, what's the recourse of the people?
The 45mm 1.8 is absolutely fantastic, too.
SIV-type schemes use the message content to guard against accidental message IV duplication, which can occur for numerous reasons including bad random sources, loss of storage, or just a smaller IV. They use the message content and message IV to generate a synthetic IV that is message-dependent so a duplicated message IV has no effect (other than revealing message duplication if the messages happen to also be the same).
NIH launches novel nationwide search for neuroprotective stroke therapies
Read the paper, the authors did a power analysis to arrive at their participant sample size. ( http://myweb.fsu.edu/vshute/pdf/portal1.pdf )

> We needed at least 34 participants per condition to estimate moderate effect sizes in our analyses, with a
power of .90.
Belated reply, apologies.

I read Social Architecture (after my Kuali experience). It's very good. In my head, it sits alongside Clay Shirky (eg Here Comes Everyone).

Whenever questions like "how do I make money working on open source?" and "which license should I use?" comes up, I expect Hintjens' wisdom to be at the top.

Alas. I'd cite Hintjens myself, but I have yet to put his wisdom to practice, so I'd be just another poseur.

I also read his writings about health and dying. I can only hope that I have such grace when it's my time.

His others are in my queue.
The idea of rounding up a bunch of test subjects and having them play Portal to collect data on them is hilarious to me.

Hello and welcome to the Aperture Science computer-aided enrichment center.

I wonder if there was cake at the end.
Foreman Dropping Support for MySQL
That seems like a great idea. I'll definitely see what I can do. Thanks!
This doesn't even get into the expansion, which I find odd. Sure there's aliens, but what about the Free Drones, or the Data Angels? It feels like there's a clear analogy to some of the discussion going on today (re: Google) where the morality of the DA might matter. Or, if you want to go environmentalist about it, the Pirates. The article talks about altering the sea levels, and there's a faction who actually prefers the ocean to land.

It is pretty telling to me what the devs thought that the Spartans canonically lose in their vendetta against the Gaians after the mind worms are controlled. And the Fundies can't catch up before that 10 year research prohibition bites them hard.
Visually intriguing, aesthetically pleasing, terrible UX
Though to be fair, Sony hasn't shown a lot of strategy in marketing any of their products in a long time.
Just a regular tipping of government out of some pocket change to keep doing things.
In Spanish (my mother tongue), the word is "masticar", if you're curious.
First 100M
The concept of "overvalued" assumes a valuation model that everyone agrees on. Large companies are complex organisms and equally complex to value. It follows, with ample evidence, that simple reductionist valuation models based on P/E, book value, and other easy-to-obtain numbers are going to be inadequate. And most valuation models are terrible at incorporating myriad risks.

Currently, I would argue that some large caps are clearly overvalued but others are also clearly undervalued, based on my own valuation model. The indexes are almost always a mixed bag but I buy individual large caps so that doesn't concern me much. It is rare for the entire market to become overvalued, in which case the smart move is not to buy in.
Doximity|San Francisco|Full Time|Onsite or REMOTE
- Sr. Software Engineer, iOS - https://grnh.se/wld8j31
- Software Engineer, Service Reliability - https://grnh.se/a303980d1
- Software Engineer, Data (Product Integration) - https://grnh.se/6pef3r1
Your statement applies to pretty much all jobs.
Thanks for the data point. Those aren't the same thousand files though.

If your project has a thousand source files of any programming language, it's probably time to quit and join a younger company.
More efficient still would be to replace income taxes with Georgian land rents.
I think it's important to be aware of conflicts of interest like this, but that's not what's being discussed, and the solutions offered aren't attacking this type of problem.
Good reminder I should be cracking the DRM on all my eBooks to take a backup again.

This is a perfect time for the companies to do stuff like make DRM digital goods go "poof" cause everyone (including the .gov) seems to have bigger things to worry about.
Is there any meaningful difference between what google knows about your modules and what npm knows about js modules? Or what a Debian mirror operator knows about your packages?

I get that Google changed the way go packages work, but I don't understand the difference between that and literally every package manager in existence.
I forgot xkcd had a forum. It hasn't been linked to the homepage in years.
WOW thank you. "Sweat" is a good word to describe how we got here, for sure. We really appreciate when people notice.
I don't have experience with Redux so I cannot comment on that, but I do believe my rewrite is equivalent to the ReasonML example (it should express the same thing and still be typesafe).

While I'm sure the author did not intentionally try to make TypeScript look bad, (imo) they didn't put enough effort to make it look good either. There's a lot more to TypeScript that this post fails to mention. ReasonML is a good language (I think OCaml was just fine though), but TypeScript is good too.

The author says "ReasonML is everything TypeScript tries to be (and a bit more) without all that JavaScript weirdness.", but I strongly disagree. Embracing "all that JS weirdness" is the whole point of TypeScript, and what makes it so successful. Unlike most typed languages, TypeScript (for better or for worse) adapts its type system to the developer's code, not the other way around. This is why its type system is much more expressive than many other type systems including ReasonML's.
Pays it to whom?
Note: Brave boasts itself with helping you against tracking. Yet they build their own crypto to specifically let advertisers TRACK YOU! Oh the iroty. They may newer get your name and very personal details but your interests and browsing habits are BEING SOLD by Brave if you use BAT. Its quite the irony really.
I get what you're saying and share your idealism. But you've been the beneficiary of many, many guns. And much violence. So while you may sound good, it's not based in reality.

Regardless, violence is relatively at a historically all-time low[1].

[1] https://stevenpinker.com/pages/frequently-asked-questions-ab...
Right but the type script version isn't type checked. You need explicitly check for those strings at runtime. The type checker needs to prove the program type correct without explicit input from you.

ReasonML has better theoretical foundation. The variant type is a primitive type that TS and many other languages miss.
Why? Does your CI do a clean build for every test?
It's unclear to me what the relationship is between treating women like people and fat stacks of cash.

It seems to me the former can be done without the latter, which makes me suspect anybody who asks for the latter as though it were a prerequisite for doing the former.
While I don't know much about the internals, I have used both syphon and spout. I can't comment about how well they work on latest OSes, but they seem to be buffer sharing implementations.

(Windows)

https://github.com/leadedge/Spout2

(Mac)

http://syphon.v002.info/
It's like he knows the company will collapse and is trying to milk everything until he can't.
This is only somewhat correct. Following the Revolution, some northern states abolished slavery almost immediately and the bulk of the North eliminated slavery by ~1810.

In the South, though, inventions like the cotton gin, westward expansion into the Mississippi river basin, and logistical improvements like steamships brought about significant expansion in the South's slave economy. British slavery (particularly in the Caribbean) was more focused on sugar production. Slavery in the United States was distinct from slavery in the British Empire, the fact that the former used to be part of the British empire notwithstanding.
Because that would likely cost money, asking on SO costs literally nothing... And surely all appropriate expertise either read SO or their blog, so no problems here!

To be fair, I see nothing obviously wrong with their solution, it's their approach that concerns me.
You know what, my bad. I don't think I ever tried to use inline JS in that era.

Thanks for that tidbit of info. I was picturing some horrific build script with the canonical JS stored in XML.
ELM really needs type variables and type classes.
I have thought about this quite a bit recently, sort of the "how?" of christianity. I can never shake that jesus' lifespan coincided with the formation of the empire. Augustus was in power for his childhood, and tiberius for the remainder. You had this seismic shift in social and political policy of the continent's dominant power that rippled out over the following centuries.

It's a topic that I've always been curious about, how the backdrop late-republic and early empire created conditions for christianity to take root? Were there, dare I say it, other people like jesus that didn't have the same impact because the conditions weren't conducive?
The tests for problem solving used were:

Raven's progressive matrices,
Insight Test,
Remote Association Test

Spatial cognition:

Mental rotation test,
Spatial Orientation Test,
Virtual spatial navigation assessment
So if experience has taught me anything, this just means that they made more than $170M on this. Cost of doing business.
I love this quote:
>> There’s a name for societies where a small elite own property and everyone else rents that prop­erty from them: it’s called feudalism.
Imagine someone giving a presentation to room full of co-workers and a web ad comes up saying something like "Resubscribe to Cannabis Weekly Delivery and get 10% off."

It's not hard to imagine a person's career being affected by something like that.
It's Not Just You: Software Has Gotten Far More Expensive
A JavaScript library that lets you use gamepads and controllers in the browser
Large companies have the means to pay for the manpower (lawyers/consultants, developers, etc) to certify compliance with GDPR. Small companies often don't.

I paid $2K for my first GDPR consulting session for a $7K MRR app and was quoted ~$25K for consulting while I would personally implement what needed to be done. $25K is nothing for a large company, but it's prohibitively expensive for a lot of small companies. This cost also doesn't include the (probably hundreds of) man hours required to implement and certify GDPR compliance, which are also disproportionately valued when it's being done by 1 person in a <5 person company versus N people in a >5K person company.

Hopefully these costs will fall as more people become lawfully knowledgable about what GDPR entails and the market of people available to help grows. Unfortunately there's no "feel free to wait if you can't afford it yet" clause in GDPR.
People are investing more in index funds because we've had a ten year bull market and index fund fees have dropped in an attempt for competition for assets.

Most active management is probably not appropriate for most individual investors because their investment needs and timelines are much different than high net worth individuals/pensions/foundations, etc.
Cerial Comercials on Barney Cartoons?? Somebody Call The Chairman Of The FCC!!!
I think it's incredible how naive people are; a lot of people just click the first search result without giving it much thought because they assume searching for "Basecamp" makes the first result automatically "Basecamp"; plus anyone with deep pockets can get the first 4 places even if their products is way worse and even damaging for the user.
The code is 'totally safe and secure' in a nasty, obfuscated way. It takes too much language / system knowledge to tell that negative numbers are covered. Plus, here isn't an extra block whose purpose is confusing that is responsible for negative numbers. Instead the behavior is hidden as part of another block that has a simple face-value interpretation. This is (1) fragile but (2) not self-aware that it's fragile. If you don't refactor to avoid fragility at least leave a comment. Or how about unit tests? If you don't question the motives of the author you should at least question their coding ability.
The negative number is multiplied by 64, so it can then underflow and become positive again.
Rich people are hoarding cash, and wealth managers are getting frustrated
And more Metaphysics & JS: https://youtu.be/5BuoDqVxvOM