skysight-inc/HackerNews huggingface dataset:
I apologize for the delay, I don't come here all the time.

"E2EE's security is based on the use encryption and secret keys, which must remain secret -- there are a variety of ways that secret keys could potentially be compromised,"

The argument can not be "anything can be compromised with sufficient resources, _therefore it does not matter if you don't follow best practices within limitations of the architecture_".

"Most of these attacks are out-of-band."

Agreed, but you also can't argue "the rest of the entire software stack isn't perfect, therefore I don't have to follow best practices". If E2EE fails because of vulnerability in OS, you aren't responsible. If it fails because of vulnerability in your app, then you are responsible. The same way, messaging app vendor is responsible for not using E2EE protocol which eliminates a huge gaping hole: e.g. the entire crypto community has criticized Telegram cloud chats that leave plaintext copies of messages on the server. Not knowing this is the same as not doing your job.

It's also the case you can design your software around more secure architecture to protect against remote key exfiltration, see my work on TFC for example: https://github.com/maqp/tfc

"All I know is that if I ever created an app and ran a company and acted with the best intentions for my users"

The question is, with E2EE becoming almost ubiquitous, would you really think not implementing modern encryption protocol is the same as acting with best intentions.

"That is why I give ToTok the benefit of the doubt"

I can see where you're coming from but having worked with secure messaging so long, to me it's the same as surgeon not verifying they were using industry standard materials for medical screws they use. Were they really acting in best interest of client? You can't excuse not verifying (industry best practice) just because you're "trying your best to minimize other complications".

You're working with sensitive data. You have industry checklists available. If you choose the business, there will be obligations. You don't get benefit of the doubt as a participation award when it's effin obvious you did not use the checklist.
The patent office specifically looked at Signal and other implementations and states that the Examiner "has been unable to locate prior art that would suggest that the device sending a message in a particular epoch require its own private key in generation of the shared first refresh key and first state with the recipient device. Although using public keys to securely transmit data is known in the art . . . ." The patent Applicant states "Sarafa fails to [suggest each and every step of] 'generating on the first device, a first epoch key . . . transmitting, from the first device, the first epoch key . . . generating, independently on each of the first device and the second device, a first refresh key . . . *wherein the first refresh key is generated on the first device without requiring a private key corresponding to the first epoch key"
Well-written books like K&R or the GO-Lang book by Google are much better than their online/kindle versions. The only problem with books is their weight.

Plus, reading a book on a tablet or reading a physical book - who looks smarter? :)
On this point,

> But for me, I think a couple of quality books per month is already a ton of good input, and I hope people don’t get caught up in “# books read” as another metric to simply pump up.

Schopenhauer puts it well:

"As the biggest library if it is in disorder is not as useful as a small but well-arranged one, so you may accumulate a vast amount of knowledge but it will be of far less value than a much smaller amount if you have not thought it over for yourself."
Obvious to your mind, huh? Great news! You don't have to wait for the Gate foundation or your government. You can donate directly:

http://polioeradication.org/financing/donate/
There is no need for a dictatorship. You just need a president that focuses on climate change for 4 years, makes all the painful changes at once and then is thrown out and forgotten after his time is up.
Yes. Start with our lord and savious @zerohedge and go from there. He has a bunch of twitter accounts in his follow list. If zerohedge follows someone, they're generally either important to the news, or they're tweeting about the market every day. You can cull his list and find the gems pretty easily. From there, the list will grow as your interest in the markets grows. Twitter is pretty good about exposing you to the people followed by the people you follow. Easy to expand the network.
Unicomps are covered in the video, including the backstory.
United States as a Developing Nation
Many people think that you really need to see a photo printed to get the whole experience. Seeing it in a screen isn’t the same. I suspect resolution is part of the problem.
>Basically, any attempt would go about as well as someone walking into the middle east and trying to set up a secular dictatorship in the style of the USSR.

Maybe I'm not getting your point, but Assad regime is secular dictatorship, more or less? So if you wanted to say that this is something completely impossible, well, the metaphor is not quite correct. And Iran before 1979 revolution could be considered secular dictatorship as well.
While it's true that Unicomp have purchased all the rights and equipment to make Model M keyboards, the quality doesn't seem to a candle to the original. I managed to break two in the span of two years. At which point I gave up on them and simply built my own. This could just have been catastrophically bad luck. Or like Linus says in the video, maybe it has something to do with their version being based on the newer, cheaper Lexmark version and not the IBM original.

Model F was a very interesting keyboard. I was rather fond of the 24 function keys on mine. And I now regret not having taken mine with me when I moved out at age 18.
Anarcho-capitalism -- er, "libertarianism" -- at its finest. It's a deeply nihilistic worldview.

Almost all these things are biologically addictive, and furthermore the companies selling them have long known about their addictive qualities and then built marketing campaigns to ensure the public was not aware of the risks.

Taxation is how you recognize the externalities of this behavior while maintaining a free-market system.
Stealing oil from the Iranian people was/is the priority. Just like stealing lithium from the Bolivian people is.
I say that because I'm a big fan of all your recommendations, and also think you recommended them in a way that doesn't come off as patronising or condescending. Idk what your preferred method of communication is, but if you can do Twitter, please drop me a message on Twitter @samiur1204.
> As if the time to manage servers is free.

I work in projects which make heavy use of function-as-a-service, and I have first-hand accounts of how FaaS offerings have lead developers to waste a couple of weeks getting FaaS to do what could have been done in a couple of hours with a tried-and-true web service.

> But lambda is far from expensive.

Relatively to the cost of a VM instance? Yes, it's expensive. We're in a day and age where a vCPU with 2GB of RAM can be had for 3€/month, and the pricing examples posted on AWS Lambda's page show a scenario where slightly over a month of function run time requiring 512MB of RAM would cost around $18.

In addition, AWS lambda usage is rounded up in intervals of 0.1s and 128MB, thus inexpensive function calls are way overcharged.

> If you’re spending even $100 a month on lambda, you probably have a successful business.

This assertion is missing the fact that those $100 a month on lambdas might be handled by $10 worth of computational resources in the cloud and a software architecture that isn't convoluted or tied to a single vendor. Thus the fact is that a fad is being pushed without technical merit or sound operational reasoning.
Changing the context is one of the many well respected ways to solve a problem.
If you’re interested, here’s some info about how I listen to content: https://medium.com/@elof/listen-to-this-f5faace03302
I think it's less a matter of motivation than of means, which is itself not merely a matter of access to resources, but also of risk tolerance.
In most of the English speaking world a degree in English would include no linguistics[1] and courses in historical literature would not be offered in the History department nor would the History department accept them for credit.

Look at the Oxford curriculum. All literature.

https://www.balliol.ox.ac.uk/admissions/undergraduate-admiss...

[1] Unless you think studying only English grammar, morphology, syntax etc. qualifies as studying linguistics, in which case you’re wrong. Linguistics is about the study of language, not the study of a language.
> Except when we do.

Yes, sometimes. Dark Forest seems predicated on the idea that it is mathematically impossible to ever not be committing genocide because it is the one and only correct answer. Yet here we are existing in a world where genocide is not the goal of every living being.

> As the orthogonality thesis states, intelligence is orthogonal to values. You could imagine smart bears whose values and ways of thinking could be completely alien to us

Irrelevant to their ability to reason. They will undoubtedly value something, else they will not have motivation to take up arms in the first place. Sure, it is possible that they value our extinction as their highest priority, but that seems incredibly unlikely because it would mean that their own survival is less important. If they at least value their own survival higher than our demise, then there is basis for reason.

> I'd argue, because of the first axiom: inability to establish trust due to communication delays.

What does that have to do with trust? Communication delays are equivalent to distance, and being far away from potential dangers has a way of making them less threatening, not more. At interstellar distances you can afford to be patient.

The biggest problem with the Dark Forest concept is that it is predicated on this insane notion that the most important thing in the entire universe to anyone is the continuation of self -- and where mentioned before that self is defined to encompass exactly your own species and no more or less --, which is directly contradicted by both the long history of human and animal behavior and by the fact that everything dies including the universe. In other words, if continuation of self is your highest priority, and you're forward thinking enough to see other species lightyears away as a potential threat, then you're also forward thinking enough to see quite plainly that you have a 100% chance of failure in the long run.
That goes on the "entertained" part.
Aha, you mean dedicated security scanning / intrusion detection systems.

I use none. I use static websites, Heroku and AWS Lambda for all work. So all of the network, vulnerability etc. worries are of loaded to the provider. No user data is stored on our backend: that’s all in Stripe and Auth0.

We encrypt some sensitive data (not PII) in the database and in flight.

I guess for now the use of various 3rd party services negates the need for dedicated “security stack” products. This might change in the future.
My Year of Flops #49: The Brady Bunch Hour
Where are they in Adelaide?
Magazines and blogs/articles exist to keep you coming back. Same with serial television shows. The content is not self-contained, or particularly high quality. Only enough to bring you back for one more episode or issue.

Books (and movies) on the other hand, are generally self-contained. The book is the product, not your subscription. The quality is often higher
Was that really HoMM? IIRC that's a HoMM-lookalike that's basically Farmville.

Sidenote, I absolutely detest the modern trend of games that push you to buy things every five minutes or watch an ad every half.
Anymore? Did it ever?
Just a friendly reminder, since I've worked with SES in the past: Don't forget about bounces when using SES [0].

From [0]:

> If your bounce rate is 5% or greater, we'll place your account under review.

To sum it up, try to keep track of bounced e-mails by using the SES notifications [1].

[0] https://docs.aws.amazon.com/ses/latest/DeveloperGuide/e-faq....

[1] https://docs.aws.amazon.com/ses/latest/DeveloperGuide/monito...
wouldn't just giving all of the mirrors survey quality GPS do the same. you'd be able to then just have them work out the angles as it relates to them and the target.
It doesn't really seems like and AI problem.
The intentions of laws vs the real world implications are so often disconnected. There's been a million cases where the mere side effects of laws have caused more trouble for the intended target of the good intentions than it actually helped itself (see rent control laws in NYC and Toronto ultimately significantly reducing low income housing for over a decade in the 70s and 80s because no developer would build there, significantly increasing average rents by reducing supply).

Thomas Sowell wrote a quite a few good books about this.

I have no doubt it applies equally to export laws.
Imagine a world where your project dependencies can be deprecated by import/export law.
Theory vs practice.
I feel like this is kinda cheating though - “Gaussian in the limit” is not the same as “Gaussian”.
"nerd", "computer guys bad at..." it feels like you have an irrational axe to grind here, when a simple solution presented causes this line of argument.
Aren't most modern spinlock implementations are ticket-based, which ensures fairness among waiters (FIFO-like)? The linux kernel implementations most definitely are.

I agree that the naive implementations are not.
I've been there and done that for better and worse. It sounds like the author wants to create their own agency which is a different game than being a solo consultant. If you really want to be a solo consultant...

Lessons from 20+ years as a solo consultant:

- Customers rarely know what they want.

- Customers always change what they want.

- Change control in fixed bid work is vastly more important than how smart or productive you are.

- It takes an extraordinary amount of effort to find customers.

- One gets customers by searching, networking, having other good customers and mastering useful technologies.

- What matters long term is consistently making money every month.

If you truly want to be a solo consultant:

- Maintain good relationships with your customers.

- Bill hourly and get paid no later than monthly.

- Be willing to work with consulting agencies and accept their markup on your rate.

- Always be learning and using new technologies.

- Always be looking for the next opportunity.
I always took this to mean break your unit tests and fix them before anyone else notices, but that just may be the software developer in me.
> Choose your poison: bomb them to oblivion or sanction/starve them to death. That is why this is a failed approach.

>That's not my plan, it's yours.

Really? If you want to try and give your argument legs at least try not to contradict yourself in the same thread. And please don't state I made a claim falsely.

Also...

>China is on track to double its emissions by 2030

This isn't actually true [0].

[0] https://climateactiontracker.org/countries/china/current-pol...
I expect China, Russia, India, the US and others to lie. I expect them to steal. I expect them to sabotage. I expect them to wage economic and kinetic wars. I expect them to do everything in their power, evil or not, to give themselves an economic advantage.

Tariffs of the sort you're talking about are a great way to nudge countries in the right direction. China is already the largest polluter and is on track to double its emissions over the next decade. Stopping that will take quite a bit more than a nudge. It will take destroying their economy. Except they have nuclear weapons. I'm sorry, but we already can't get them to stop stealing our intellectual property, stop sending us products laced with lead, stop mass murder for organs, stop putting Uyghur men in concentration camps and then assigning a rapists to live with their families, stop sending fentanyl illegally the US which kills thousands every year. The idea we're going to apply enough pressure to China to turn around this boat which is going to double its CO2 emissions in the next decade seems like a complete fantasy.
No it isn't. Are you counting the total lines of library code you're calling also? Total number of machine instructions generated? This attitude you have, that only the Y lines of code in your high level language floating way up in the clouds is the only thing that matters, is one of the key reasons why bloated, shit code is being constantly written and shoveled upon the masses. You don't know about the underlying complexity, and apparently don't care to know.
To be fair, an audio ‘book’ is no longer a book - in a very important sense. Reading is not a strictly linear process, while listening (to a recording) most certainly is. (And no pictures.)
> people use the amount of books they read to value-signal their intelligence

Good shout, reading isn't a competition! For me at least, it is firstly a hobby, and secondly an opportunity to build upon the ideas of those who came before you.

Because books tend to explore a topic to a high degree of depth, they cover a lot of ideas including things you might have thought about yourself. I've always found new perspectives on ideas I had before to be very refreshing.
Yep, that's the underlying principle behind Mellor-Crummey Spinlock: https://lwn.net/Articles/590243/.
Can't you then solve this by having a bunch of photodiodes under the edge of each panel, indicating if the panel is placed correctly?
The GISS temp data has been manipulated [1]. We don't have global temperature data for the land and the sea going back to 1880. The satellite weather era began in the late 70s. Even for land based records, outside of the first world they are very sparse prior to the 1950s. The temperatures had dropped so much by the 1970s that there was an actual ice age scare. They even hired Leonard Nimoy to pitch it. [2] The GISS data set shows this as a blip and it's a sad joke.

1) https://youtu.be/spyJhgVbvVY
2)
https://youtu.be/mOC7ePWCHGk
I still don't get the appeal of vim or modal text editing in general but I'm glad you can close vim with shift+zz
Please change the title back. While the new one is the same as the source, it is less descriptive of the content of the actual article.
How much data is being generated by your logs?

If it’s less than 500MB/day you may use Splunk for free forever.
For one, it's a lot of text for the myriad of ways you can moderate your server/chat. It's just a paragraph for kicking "a nazi out of the cybersecurity chat."

And two, "In Riot, Admins are shown in the membership list with a golden shield, and Moderators are shown with a silver shield. Other clients use similar metaphors."

If you actually used Matrix, you'd notice in whatever client that you're using that it's actually very easy to see who the mods are.
His biography is really fascinating and inspiring too: http://foreignlanguageexpertise.com/about.html
Ask HN: App for CO2 Impact of Food?
Do you know of an app that computes the CO2 impact of food? Like MyFitnesspal but for CO2 instead of calories/nutrients.

Thanks.
Teraloop flywheel energy storage solution
Depends on how you define "Uber". If you mean the construct and it's continued existence, then the jury is still out on that. For all the early investors and employees (the ones that facilitated the "move fast" attitude), it looks like it worked pretty well.
Genocide is mass murder. You seem to be saying that the normal process of people dying is a form of genocide. I disagree. We can reduce our birth rate to below the natural rate of death and start fixing the population problem. We do that naturally by reducing food production. Just take more land out of production, reduce the amount of water poured into deserts, reduce subsidies for quantity. There are lots of options.

Let me ask you this, is it humane to do things to increase a population to unsustainable sizes such that they collapse in famine? When for whatever reason, war, interruptions in trade, etc, thousands die of starvation? Why is that ok in your mind?

Did I say electric prices must skyrocket? If you don’t believe these problems can be fixed with gradual change, then you don’t truly believe in the techno utopia.
> It's true that it's not widely used now, but every product has to start somewhere.

Fair enough. If it grows, it grows.

> You say that as if creating an automated decentralized bank that generates an asset pegged to the US dollar is something that just anybody could do.

If you have 100% collateralised loan, yes, anybody could do it in this day and age. Money can actually grow in an automated fashion without a central authority if we accept the inevitability of economic crashes and depressions.

Here's my thought experiment - say DAI suddenly overnight replaces the dollar. I don't know enough about the system, but I know finance very well. Next, say the day after the economy starts crashing. Manufacturers cannot see any orders coming in, consumers don't want to spend money etc etc. Run of the mill crash. What would DAI do?

I'll tell you how this works out in an uncontrolled money system - the crash goes on for more than a couple of years. People lose jobs, companies close etc. The federal reserve's one and only job (the regulation part is hogwash, they can't regulate for shit) is to cushion such an economic crash. What happens without it? Will the benevolent DAI system controllers step in?
Yes I am arguing that point precisely because that's what thermodynamics dictates.
As I wrote in another comment, there is a world of software outside of web development. And I'm not especially fearful of being left behind. I spend almost all my free time learning new things. But I wouldn't really jump at the opportunity of learning something that locks me into a single company's services. Learning the fundamentals of computers seems like a much better use of my time.
Scrum is more or less a time & materials approach.

Agreed. If it's small and finite - similar to an oil change - then a fixed price is doable. On the other, if the resuest is "the engine sounds odd and acceleration is off" then it could be anything.

Anyone who is the latter but expects a fixed price must be avoided. They'll cost you more than you'll make.
If I don’t have any messages in my queue/request to my API/messages in my stream, I am not paying for VMs or networking.

If I have thousands of messages in my queue, enough runtimes are started to handle the messages with the throughput I configure.

And as far as worrying about one vendor, the lock in boogeymen is vastly overrated. Once you have any type of scale, even if you are just using a bunch of VMs (and if you are you’re spending more money for a cloud provider than just using a colo without any of the benefits), once you have your data in the databases, network configurations, your security rules, your connection to the cloud provider with sitters Direct Connect, a site to site VPN, client to site VPNs for all of your developers, you’ve gone through security audits, etc. you’re for all intents and purposes locked in anyway where the pain of migration will be a multi month project with little to show for it.

It’s like all of those bushy tailed architects who are going to use the repository pattern and not use any database specific SQl just in case one day the CTO decides to move away from their six figure a year Oracle installation to Mysql.
A little-known US-Canada border dispute
I can definitely commiserate and started the ClimateList.io as a result. Still just a small step, but better than nothing. Here's a db engineer opening:

https://climatelist.io/job/786/senior-climatic-database-engi...

YC has also been supportive to climate engaged startups. Probably worth keeping an eye on this as well:

https://www.workatastartup.com/