skysight-inc/HackerNews huggingface dataset:
The money you are talking about belongs to pension funds, sovereign wealth funds, university endowments, etc. If the money went missing, people would notice. People wouldn’t be able to retire, schools would shutdown, countries would face hard times, etc. The idea that institutional investors get their money from primarily individuals is a common misconception.
I poked around a bit to figure out why this was even posted and there was a new release 1.6.0 on November 22nd which adds support for jdk 11, among other minor things. ABCL provides a java class which can load/eval lisp code, and the ability to call java classes from your lisp program, stuff like that.

https://abcl.org/svn/tags/1.6.0/CHANGES

As an "old" I learned LISP in college but have never had the opportunity to use it in my career. Still on my todo list!
That's a generally correct statement, but the comment you replied to mentioned a specific case for which it's false.

If you can reduce the trust problem by requiring every person to verify out-of-band the identity of every one of their contacts, it becomes a lot simpler. For some Signal users, such as the person you replied to, this appear to be the case.
It's more classic quid-pro-quo than corruption, which the impeachment hearings should reveal, is completely normal diplomatic behavior, and only problematic when wield for personal again at the expense of national interest. Which pushing Huawei or Boeing is not, which is why this headline reads as wildly sensationalized.
Atlanta is full of new town homes which are essentially row houses.
Just 3 words will not make a safe password. People are asking in comments why, so let me try to offer an explanation.

First of all, we don't know how large is the dictionary. @Symbiote mentioned 132k words, but typically for diceware method (a method where you randomly select words from a dictionary) only 7776 are used (why so few? because then it's easier to select the words by rolling an actual dice). Nevertheless, let's assume 170k for now. Nowadays you can crack 100-500 GH/s (100*10^9) [1] at home (you need $25000 for the hardware, but let's assume a rich household ;))

So we have (132k^3) / (100 GH/s) = 23000 seconds [2]. That's less than 7 hours!

You could argue that nowadays everyone uses bcrypt, so such speeds are not possible. The question is: are you really sure that no one uses md5 any longer?

[1] https://gist.github.com/epixoip/ace60d09981be09544fdd3500505...

[2] https://www.wolframalpha.com/input/?i=%28132000%5E3+hashes%2...
This is a new art form. I love it.
Sorry but I can't and won't trust anything that has anything to do with Zuckerberg. This year I have fully deleted my Facebook and Instagram accounts and WhatsApp is going by the end of the year when I visit family for Christmas and can help them switch over.

Sadly they won't be ditching WhatsApp themselves but if I can get them using something else to communicate with me and my wife hopefully over time they will see there is a world without WhatsApp. Small steps and all that.

As for what we are switching to that is where I am still undecided. Signal seems the obvious choice but I want to look at all the viable options so I am open to any and all recommendations. Must haves are E2E encryption out of the box, group chat, voice and video (person to person, groups calls not needed).
I actively used 3

Do you want to search person's email address, phone number and address? Like Arthur Williams https://www.checkpeople.com/search/name/arthur-williams
The expiration mechanic is how Swiss Francs work and we believe a necessary tradeoff for decentralized cash issuance to work.

Validation can be performed with any smartphone. Notes are issued in blocks so technically if you downloaded the 2019 Kong Registry contract you would not need connectivity to validate a note. Purpose built hardware can also be built or existing android based POS systems updated to support kong-like validation. Other anti-counterfeiting techniques have been explored but it the only thing that really matters is securing the root of trust.

Technically with Swiss Francs, the notes have no value after their "expiration date", with Kong the escrow contract unlocks and the token can be claimed off the notes but the precedent made us comfortable enough with this tradeoff.

Alternative implementation 1) notes are not escrowed and funds can be claimed off the bills immediately - this is effectively how paper wallets, java smart card wallets, and trezors work. This is a gift card instrument not a cash instrument.

Alternative implementation 2) funds are locked up into perpetuity - all tokens are eventually lost to breakage.

Our back of the envelope expectancy was 10 years for these notes. We wanted the majority to be reclaimable well before their anticipated breakage so we set a claim date relatively soon in the future.
I love the Z80 too, and Turbo Pascal! In 1980 I was writing custom comm software for TRS-80 then Kaypro and Vector Graphic model 3. I wrote in assembly a CP/M TSR that loaded, hooked BDOS and allowed any existing program to transparently "encrypt" to and from disk by opening files matching a selectable mask (like !???????.???) so you could save "encrypted" docs from any app like WordStar. I use "encrypt" in scare quotes because it was only a snake oil XOR proof of concept... I had DES flowcharted out but saw right away that proper implementation would murder the TSR's size and throughput with 4MHz Z80 would be dismal.

Too bad, lost interest. Only a few years later with 16bit and MSDOS and faster CPU it became practical and I could have been the first such product to market but I was stupid.

I also had written a Turbo Pascal TSR program (using a 3rd party TSR toolkit) that was like strace on linux, writing system calls to disk in the background. I used it to troubleshoot many application program mysteries.
Yes, they do. CalPERS is way larger than any college endowment....but it also has obligations that are way larger.
Yes. Do the best you can. Especially if they use something like paper_trail on Rails or other soft deletes. Maybe ask to the vendor to search/purge databases/files and overwrite free disk space manually too.

For certain types of data and with experise, it might be wise to run your own servers (colo) and encrypt the drives. After surviving to a certain scale, you'll want to save money by running hybrid bare metal+cloud anyhow. Then, you'd have control to nuke your servers (DBAN), local snapshots and encrypted backups. Hybrid infrastructure should allow pinning systems to prevent migrating to or sending snapshots to third-parties.
My boy Levine strikes again! Truly the greatest guy on the internet!
What is CISO Magazine? Does anyone actually read it or is it just yet another nonsense "industry publication" for CISSP-folk?
Summary of USMCA provisions regarding digital rights
Ignored updates:
(
"macOS Catalina"
)

the thread is a godsend for that piece of advice.
Religions dictate and have been dictating policy since forever we had governments and even before that. It's what people understand and mostly everyone seems to be ok with it.
Christmas Appreciation
This isn't "Software" It's hardware (well both but lets not get too pedantic) and everyone was throwing cache and speculative exploits by the shovelful at both AMD and Intel. AMDs are indeed at the very least, "Less insecure."

Way more shit stuck to Intel for one reason. The speed advantage Intel had been lording over AMD (Besides compiler shenanigans) was all the corners they were cutting with there speculative execution, et al.

Amazing timing that; AMD closing those benchmark gaps and the mass meltdown mitigations in Intel products... all in the same decade Intel was court ordered to fix their unfair C compiler. Intel's domination is simply over...
IT Executive Salary Report
Dirtyid posts many comments disagreeing with various criticisms of Chinese government actions, but that doesn't mean they're the official CPC line. The difference is that dirtyid usually agrees on the facts but interprets them differently, whereas the CPC line on many topics is that there's no such topic and you definitely shouldn't try discussing it.
How does the speed measure up to theoretically emulating 16 Z80 cores on a Raspberry Pi?
I don't want to think about it.
Sen. Mark Warner must tell us how many of his colleagues in Congress have gone to jail over far serious crimes.
I really like the concept of physical electronic cash, but in practice nobody has figured out how to make it work.

There are many attacks to consider. The most obvious is to obtain the private key. If you did so, you could give the note to someone else in an environment lacking network access. This would enable double-spending - the main problem Bitcoin solves.

The attack can range in complexity from breaking into the secure element to physically separating the element from the note. The latter approach was used way back to pull private keys from Casascius coins by dissolving the adhesive on the security sticker.

I suspect not all of these kinds of attacks have been considered by the creators.

If it becomes necessary to verify Kong with a network connection, the main value proposition disappears. That can be done already without a physical note.
Comcast actually gets around this problem by restarting all of the boxes in your house at 2:00 AM local time, I believe, at which point it will grab updates for the applications on the box.

Of course, if you like to watch TV late at night, it’s a problem, but I bet they did the numbers on that internally before people called angry because their PPV movie went away.
Have you guys considered decoupling your physical cash technology from the underlying token?

Physical DAI or ETH would be most excellent.
I was trying to narrowly critique wang_li's comment, not debate the main issue.
I don't get it. Do Russian propagandists hibernate semiannually?
A little OT, but I'm surprised the Faroese Islands and Greenland economies would be big enough for China to care a jot - what am I missing?
"Professor salaried[SIC] have risen,...."

This is untrue. If anything, the rapidly growing pool of poorly paid adjuncts has lowered the median salary. Perhaps you could take a look at this book for a deeper understanding of the issue.

https://www.insidehighered.com/news/2019/04/16/herb-childres...
Seriously, I do not want to read German or French source code. Please write all your code and documentation in English.

And while you are at it, why not read the material in English in the first place? That way you are using the correct terminology.

My mother tongue is Dutch, and all my systems run in English. The silly words people come up with translating things to their own language is weird and confusing. I remember Excel having Dutch translations for their functions. WTF!?!?! Try to guess the Dutch version of things you already know.

You are working in the technology industry, learn English! (not directed at the above poster :))
People have already been lying [0] to the public about vehicle to vehicle communication protocols for a while now, saying that the radio signals will not propagate over long distances. Everyone who knows anything about radios knows that you can make the antenna more sensitive or directional on either side of a transmission.

If this stuff ever makes it into vehicles, it will be used by criminals (public and private sector) to track victims.
Multiple Git vulnerabilities in 2.24 and older
Top 100 Sci Fi Books
Interesting. Thanks for the info.

If you left the MacBook connected to the power supply and it is a 2016 model or later then it likely isn't really hibernating, even with the lid closed. By default, most of them remain active when connected to power.

However, you can disable the Bluetooth connection. Go to System Preferences > Bluetooth > Advanced Button and deselect "Allow Bluetooth devices to wake this computer."

I wonder who does the advertisements here. In BtLe the standard is to have the Peripheral (i.e: the headphones) doing proximity advertising and the Central doing the scanning. But, in principle, anything is possible.
I am super passionate about the technology and able to put the work in, just not always sure how to get people excited. If you are interested in getting involved or have feedback I would love to hear it!

thanks for checking out the project
Quitting My Cushy Job to Start a Short Sleeve Button Down Brand
Norway doesn’t sink 1 trillion into the S&P 500.

And why should Saudi Arabia to that? It’s a terrible idea. 100% exposure to US equities is a bad bad idea. Ideally as an investor, you wsnt to build a portfolio of uncorrelated assets.
I wonder if there's a good way to think about the relevant counterfactual: how happy would PhD students if they did not pursue a PhD? The post assumes that depression and anxiety rates would be very different absent the PhD, but I'm not so sure.

It would be interesting to see response data for the same people during both their undergraduate and PhD programs. But even this is compounded by the quarter-life-crisis issues that are common at PhD ages anyway. Plus, the pool of PhD students consists entirely of people who said "yes, working in relative isolation, for years, with little pay, on a topic most people don't care about, sign me up!". As one of the people in that pool, I'm not so sure we'd be way happier in the other pool. There is a consumption value to doing a PhD and taking the path that interested you. And there is consumption value to not having a normal office job.

To be clear: I think we (professors and current graduate students) should make sure applicants understand what a PhD is like and best practices for minimizing the probability of a bad PhD. Even after controlling for intelligence and ability to work hard, it is definitely not for everybody. But likening it to a public health crisis on par with HIV, acknowledged clickbait or not, is a bit much.
Two points. Qt isn't using every C++ feature - it works fine without exceptions and generally feels fairly pedestrian to use (that's a feature). It is very much not a template hell like some parts of Boost.

Second, it has QML, which is a declarative UI framework with great runtime performance.
Editor looks great, very performant! Is there a way to integrate this in an existing webapp? E.g. open pixlr in a new window, do some edits, get the asset back?
so, that workgroup has an admirable goal, and such a guide is what I do crave, and I confess to being basically ignorant and having difficulty in comprehending all the folders full of linux and legacy STUFF in alsa ... where are the drivers? what even is the driver? lol.
what interfaces must a driver implement?
what parts of ALSA are required when opening, configuring, and streaming to/from a device and what parts are ALSA itself and what are in the particular driver? (not at all helped by having arch's on the top folder level, right next to transports/busses)
and core having been called the heart of ALSA but yet all I see there is oss ioctl and something about a sequencer!? huh? sequencer? )

Opening a device, configuring it, registering a callback function, this is all standard across API's and people are used to PortAudio, SDL, etc.

I've hooked up audio converters to microcontrollers, fpga's etc and am familiar with the hw signals entailed for interfacing over I2S, TDM over I2S, control interfaces via SPI and I2C, the timing of these signals, and the particularity of crystals such as the venerable 11.2896mhz, and I would go so far as to swap out a different crystal and force a singular sample rate on the entire system forever, yes I'm a fanatic, lol... but I digress... I have no notion of what the host side of an audio interface looks like, and have never seen the "other side" of the mcu/fpga in your blackbox usb soundcard. (xmos? some glorified ftdi chip?)

Am I to understand that ALSA only knows about the precise sample-clock-timing at each full audio buffer interrupt or period?!

What does the host side of an audio interface look like? (some pcm_stream's? any control interfaces? is the sample clock not passed onward to the host from the device (mcu+codecs)?)

I guess what I'm fundamentally puzzled about is how all these folders of ALSA "stuff" inter-relate and how the heck the sprawling collection of related modules actually relate to each other, and what one must actually do in order to bring up new hardware under ALSA...

any advice, psychiatric or audio hardware related, taken to heart.
The fact that some houses with shared living space in the past had health hazard is not a good argument for banning all such houses. We don't ban Chinese restaurants because some violated health codes, we don't ban station wagons because potheads disproportionately own them, etc.
This is a security issue. Part of the solution is legal, part is technical.

If a type of house lock or alarm system is defective, it's still important for the problems to be fixed in the next generation and for owners to upgrade or patch the problem.
Besides clojure, might be worth noting;

kawak - scheme for the JVM
https://www.gnu.org/software/kawa/

bigloo is a scheme can compile to C. I think it can also make java class files with bindings
https://www-sop.inria.fr/mimosa/fp/Bigloo/
I wonder if any candidate for the democratic nomination would ever date to bring this view up for discussion.

My feeling is even bringing it up for discussion could be an automatic DQ, sadly.

I’m for pay equality, we all benefit, but I’m also for finding out what’s what.
My bad, I didn't realise this is an old article. Sorry.
How do you decide which SQA tests or processes to automate?
What criteria do you use to decide what should be done manually, and what should be automated?
That's a pretty mild threat.
iTerm 2 can do that and even restore running processes. In my experience that feature works well enough.
As far as I know, Ubuntu is still the only one that can livepatch the kernel in the background without bringing down the whole system. (Maybe RHEL 8 can now too?) I think the “system restart required” message means that something was running that it updated, and the only way to guarantee that it stops and restarts is for the user to restart the whole system.
Are you implying that royalty likes to lose money? Morever, thr Sauds run a massive welfare state, so it’s a little unfair to claim that Norway’s and Saudi Arabia’s funds are so different.
A friend is remodeling (drastically) their house in Mountain View. Some of the code stuff seems crazy. Bathrooms must have motion sensor and humidity sensor enabled fans? Bathroom lights must be motion sensor enabled?

I’m sure there’s something driving all of this that has some basis in a real concern (similar to sprinkler systems and networked smoke detectors) but it seems like the complex and higher cost code-driven housing requirements is basically unbounded.
How are the fast pixel-wise operations (color transformations, alpha composition, etc) coded? Is this something that WebGL or Canvas supports?
Is there any hope that trying to learn this stuff on my own will help me get real work to do / a real job? Granted, I have a ton of academic accolades that I've never been able to get a potential employer to even glance at, so maybe the skills will help. I just doubt I'll learn anything well enough on my own...the best devs learn in pairs it seems. I wish I had a mentor here or something.
We have considered both of those attacks and address them in section 2.2 and 3.2 of the white paper respectively[1]. The short version is the key extraction attacks on this specific hardened chip are more expensive than the value they escrow, and in the event a key was extracted it creates a race condition at the period of claim not during the lifetime of its use - still providing some utility. What Kong does that Casascius didn't is provide guarantees that the minter never saw the private key.

[1] https://ipfs.io/ipfs/QmRNRCocj4PwKMXrd1jeUGw7ASQSuEk7BDJu5Ks...
Question: since bills can be either loaded or unloaded (either because they haven't been put in circulation yet, or because they're counterfeit), doesn't that mean that e.g. a vendor taking my Kong who has no trust in me would have to individually check each bill via NFC or i2c to make sure that the contract backing the bill is valid (and the correct amount, etc.)? And that I would have to do the same for all the bills I get back as change? As a completely trustless transaction, this seems like it could be entirely too slow for most applications, without some kind of device to quickly verify multiple bills.
I think a lot of this is due to people in the neighborhoods not wanting the neighborhoods to change. It's this way in the USA precisely because of citizen control. Single family home neighborhoods are some of the nicest places to live in America. Why shouldn't the people who have invested in the community get to decide how the neighborhood evolves?
> that is not exponential, that is actually factorial, which is superexponential

Fair point; I should have given:

whoops(n):
if(!n) return
for i in 2: whoops(n-1)

I think it's clear that it is "trivial to go exponential", though. And for that matter, also trivial to go superexponential apparently.
After I buy a grilled cheese sandwich with Kong, how do I handle my taxes? It makes every transaction have possible capital-gains tax implications.

The taxation difficulty is the single biggest reason why I stopped making small transactions with Bitcoin. The paperwork, come April, was awful.
> Out of curiosity I tried out a BLE scanner, finding 14 devices in my immediate proximity. Something I'd never really thought of before.

I love to play with BLE scanners. It is interesting how the pattern of devices changes on each environment. On malls you'll see a lot of Windows computers and beacons. On school libraries you'll see a lot of Macs. At the gym you'll see iWatches, Fitbits and Garmins.

But the overwhelming majority are iPhones. Android are very quiet.
>If you can’t make money from Qt, it’s not because of the license.

QT stock is up 124% this year, +247,06% last 3 years.

Qt has de facto monopoly in embedded, medical, automotive, appliance and industry automation. It works in Embedded Linux, INTEGRITY, QNX, and VxWorks.

Qt just launched Qt for MCUs (bare metal toolkit for low end microcontrollers). It runs on Cortex-M with several different 2D accelerators. It's yet another market with no serious competitors.
Only 31 days? I've been doing it nearly every working day for years. And I actually install my updates fairly frequently. That doesn't really help, because there will always be more updates.
Russia banned for four years to include 2020 Olympics and 2022 World Cup
America blows past the world in oil and natural gas
So, I'm Scottish, and still often have problems in London (and indeed abroad!) when I hand over a Scottish bank note. Scotland and England are of course both part of the UK, and while, yes, technically Scottish bank notes are not legal tender, they have been defacto legal tender since forever.

How do you plan to tackle this mentality, where there is such hostility to anything in the slightest bit unusual?
Thanks! Yes it support the same api as the old ones, will update the site with more info when we leave beta in January. Simple load and post with the image asset.
Why don't the workers unionize? Oh, because Amazon is run by a bunch of amoral people. The leadership is inhumane.

https://gizmodo.com/amazons-aggressive-anti-union-tactics-re...

https://www.vox.com/2019/3/22/18277322/amazon-fired-warehous...

https://www.cnbc.com/2019/08/22/how-amazon-is-fighting-back-...
You wouldn't happen to have the tools to still do that, would you?
Who doesn't? Sure, not everyone runs the same software on different premises or shards by customers, but even just staging/production does benefit from it. And these days, each dev having their own db is quite common.