skysight-inc/HackerNews huggingface dataset:
That's an interesting point I hadn't thought of before. If someone says "I want < 1% chance of an attack" then 128 bits of collision resistance will be stronger than 128 bits of preimage resistance.

On the other hand if someone says "I want < 99% chance of an attack" then 128 bits of preimage resistance will be more secure. But people probably don't have this goal, so 128 bits of collision resistance is better overall.

But another aspect is once you start finding collisions, you're likely to find more faster (whereas with preimages they keep coming linearly). This would actually be a worse point for collision resistance.

> (finding 1 key among N is N times easier than finding any specific key)

Yes, but only up to a point. You have to compare the cost of computing a hash vs comparing the hash. If the time to hash is 10000x the time to compare, then no matter how large N is, you'll never get faster than a 10000x speedup. This is essentially Amdahl's law. But this speedup is still quite significant.
> Ooof...some of the liberals you see these days (I consider myself liberal) would be outraged at "Blazing Saddles". I re-watched it recently and wasn't sure if the film would survive today.

No it wouldn’t survive today. Too many people would have their feelings hurt and we can’t have that - even if it’s just for laughs. I recently watched it with my 13 year old daughter and I was shocked that she loved it (surprisingly) - after which I explained to her that these kinds of movies can’t be made anymore because too many people would be outraged.
I use a tool called zim wiki. Its less of a wiki and more of a notes app with a tree sidebar for navigation and linking between pages. Everything is stored as txt files which works awesome.
The vast majority of Australia's fires were caused directly by arson, so much so that the NSW police are starting a taskforce to tackle it while publicly saying it's the primary cause. How would a carbon price help arson, considering that it'll likely have a negligible impact on temperatures and therefore intensity of bushfires? Arson is also getting worse and more severe.
Even beyond entertainment, when working hours in an office, I'd rather look at a beach or fantasy landscape with a nice ambient sound than a dull wall with rain under a greyish light outside. I'd likely spend most of my time in VR just because it's nicer.

Life-like VR fundamentally holds the promise of being one more great social equalizer if you can essentially simulate material wealth (objects, locations) like a video game, even just the visual part of it. E.g. IKEA is all over such research, with good reason.

Most people also don't realize that in terms of communication, any non-physical interaction (so excluding sex and hugs) would be just as good in VR as in reality, thereby making face-to-face meetings the norm anew (like before any form of distant communication existed, save for mail). That's bound to be a healthy change, a welcome improvement from text, audio and even video.

It's just a little bit too early indeed, and probably headed for a (shorter) winter I agree. Come 2030ish we should have much more decent options to move forward (from current specs you'd estimate a 10x at least to reach 'acceptable' capabilities, and more like 100x if you seek visually life-like sim, i.e. ~250px per arc minute at 100Hz or more over at least 180° field of view).
agree, but it's the best example we currently have of a global scale decentralized digital network. (crypto assets aside, which aren't really a good analog to what i'm talking about here) would be happy to make a better one tho!
"Developer" is a word that requires some context. A stranger might not know if you worked in construction or on computers.
That's about as practical for me as giving up my local water utility as an inner-city dweller. I mean I definitely could. I can get large bottles of potable water delivered quite cheaply, and I guess I could setup a system so that that's what came out of the taps.

But what I really want is for the government to intervene so I don't need to give up my local water utility, by guaranteeing minimum levels of service, and providing solid regulation.
Presumably because Signal doesn't have the install base to make that realistic.

I do hope that the people taking real risks are doing their most sensitive communication on something better like Signal.

But for mass reach using another tool seems necessary as of now.
Reverie Labs (YC W18) is hiring DevOps Engineers to build infra to cure cancer
Any internal correspondence can become public information in a disclosure proces.

~ first rule of corporate communications
Compression and encryption have been implemented, but not snapshots and RAID5/6.
Geez.

> "Would you put your family on a Max simulator trained aircraft? I wouldn't," says one employee to another, who responds, "No."

> Peter DeFazio, [D-Oregon], called newly released documents "incredibly damning"

That's hard to argue with. You'd like to think this kind of thing would... leak. Who said conspiracies involving hundreds of people are impossible?
Also, notably, it does nothing to impact arson rates - which are the primary cause of the crisis.
Open source possible?
I guess it depends if the question was a more general "how do I project myself from zero day" or "how do I protect myself from this specific zero day". For the latter, yes someone could've been exploiting it in the past, but right now, it's been patched for some months and if you're up to date, you should be safe.
Most (maybe all) good comedy comes from a dark place. Comedians can have profound demons driving them. Mel Brooks is no exception, I think in their attempt to make us laugh is to try and escape their personal hell. I know this may seem a dramatic sentiment, but really look at the best comedians and it’s full of really messed up people.
therefore, i have to spend time to read the update changelog, and make a decision to update.

If it was possible to rollback, then i would be inclined to enable auto-update. Case in point - i used to really like the youtube app on android, but newer versions have usability issues, poor video playback on 2x speed (this didn't happen on an even older phone on the old version of the app). And i cannot get the old youtube app version, even if i try to factory reset (it's literally removed from the OS image when i updated android).

It's these reasons, plus more, that i distrust auto-updating.
A good way to measure outcome is to watch how many people are using a new feature (or a new version of an existing feature) successfully and how often they use it. The key word here is “successfully”. Don’t just measure how many people tried to use a feature. Define and measure success with a feature.
Oh, no. People thinking thoughts and expressing them. Oh, my!
The thing about you deciding what goes into you is that it is harming other people. Your rights stop once you harm others.
System run by a "power Macintosh G4". Not clear when that web page was composed, but G4 was introduced in 1999 and phased out in 2003.
My condo-block has a 7-11, a gym, a hairdresser, and a massage place, and we get FoodPanda and groceries delivered. Some of my friends also live in the condo-block. I could easily go a week without leaving if I didn't make an effort.
That is in fact a common topic on Gelman's blog, if you go through the (large) archive.
Thanks for this. I remember being at MacWorld and watching a movie play while holding down menu items. On Classic Mac, which I was used to, this would block the entire OS (almost). BeOS seemed space-age.
Big Data and ML Digest [Telegram Channel]
Show HN: An Insta/FB/Twtr Marauder's Map. Easy Stories with Google Analytics
The Benefits of a Lunch Hour Walk (2015)
I was studying in Kowloon City, the area where Kowloon Walled City is located at. I met a girl who was exceptionally hardworking as she told me she needed good grades to get good grades and hence earning money to get a better living for her family in the future. We were around 5~6 at the time.

Later I learnt that she lived inside the Walled City and her father was an unlicensed dentist. Drug addicts and dealers were so natural to her as she walked pass them everyday on the way back home after school.

20+ years later her dream come true and now she is a specialist. I wonder if the poor living standard inside Walled City somehow has a positive impact on her personality. Anyway, she told me that it was a truely amazing experience to have lived in the City, but she would rather not to if given the choice.
> The company official said the language used and sentiments expressed in these communications "are inconsistent with Boeing values, and the company is taking appropriate action in response."

Do you think this means:

a) Change the environment that fosters those kinds of messages?

-or-

b) Punish those who wrote those messages?
yup, true enough. You can accomplish great things with a combination of zfs send/receive and time. ;)
ha, the metric system strikes me again!
Thanks for taking a look, and I appreciate any feedback or feature ideas.

Features:
Get the exact location of all traffic(even if they never log in).

Drive ~4x more traffic from users who don't log in and can't access private stories on other platforms.

Add google analytics tags directly into your story.

Add swipe links from cold start without 10,000 followers.

Easily create and share stories to all platforms, and consolidate your social traffic into measurable funnels.

Unlimited swipe links out like Linktree, but you get google analytics directly unlike linktree.
I don't see which Facebook product you can't live without.

Facebook? Who needs it!

Whatsapp? Signal!

Instagram? I don't know... Read something?

How are their services like water?!
Huh! I thought it was the Danger Sidekick crew
The latest Apple platform security doc (fall 2019, available as pdf) does a half-decent job of explaining their key distribution mechanisms (iCloud Keychain, they call it) too. They are doing some pretty complicated stuff under the hood to support multiple devices (trust circles, they call it).

I just wish I could read the source code to make sure theory and practice are reasonably congruent.
> The only problem is that you need a language with a sufficiently powerful type system

why is that a problem?
Being paid from 10AM to whenever is exactly what the OP implied. They were not paid for setup time as far as I can tell from that text. Are you able to glean more?
For reference, Redux doesn't "do anything" internally. It only calls the reducer function _you_ provide, and you are supposed to follow the rules of immutable updates inside that reducer:

https://redux.js.org/recipes/structuring-reducers/immutable-...
Blow your whistle all you want but until something catastrophic happens, the whistleblowers would turn out the way the whistleblowers for the 737ng airframe cracking came out: fired and then ignored.
Any luck looking for those A/UX materials? I have no way to contact you outside HN. Please drop me an email or a tweet.
Sometimes Names and occupations are a weird (and amusing) mismatch.

Lester Freundlich - the name literally meaning 'Friendly' in German - having to be the ~bad guy~ in this context, going after a private person selling some map online..
Boeing is saying the language used and sentiments expressed are bad.

They're not saying that releasing a plane that employees were sounding safety alarms are about is bad.
Yup. Talk as much crap as you want in person, but what goes in email and web messages and pull-requests and code comments must be immaculate.
It's useful in the compiler. For instance one optimization I haven't seen but would like to is going from

if( value1 < 0 || value2 < 0 || value3 < 0 ) {

to

temp = value1 | value2 | value3;
if( temp < 0 ) {

Taking a sort of hardware, Boolean logic view makes this possible, as VHDL generally does this when synthesed.
Wow... talk about cutting off your nose to spite your face. Oracle ended up abandoning OpenSolaris within a year or so.

Edit: Nevermind, debunked by Bryan Cantrill. It was to allow for proprietary drivers.
How many people in the government knew about the NSA spying on citizens before Snowden finally spilled the info? That was a massive effort involving many (thousands?) of people. Then when Snowden reveals it, his life is destroyed and he’s forced to live in exile. Sends a very strong warning to any other potential do-gooders considering telling the truth.
Free Icon Font of All Things Taiwan
>security level is half of its output size

A hash can have different security levels against different attacks. BLAKE3 appears to have 128 bits of security against all attacks.

SHA3-256 was originally designed to have 128 bits of collision security and 256 bits of preimage security. NIST then made a change to it giving it 128 bits of security against all attacks. A lot of people got mad. Then NIST caved and changed it back to 128 bits of collision security and 256 bits of preimage security.

It looks like BLAKE3 agrees with how NIST wanted SHA3 to be. I wonder if people will be mad at BLAKE3.

https://en.wikipedia.org/wiki/SHA-3#Capacity_change_controve...

For a more fair performance comparison against SHA3, you should compare against SHAKE128(256). That is, the version with 128 bits of security all around and a 256 bit output (how NIST wanted it). Although maybe it's pointless, because according to Wikipedia SHAKE128(256) is only 8% faster than SHA3-256 for large inputs.
This strikes me as mainly a lot of malarkey from a person who will happily earn more billions in coming years trough the monetized distraction of a another final generation.

But I’m dumbfounded by the private network reference. Zuck sees people trying to circumvent oppressive regimes as some sort of emerging market opportunity? Or does he think you and I would pay to use “FB Private” if they promised to turn off everything about normal Facebook’s current business model?
Huh, I just want my heads up life display because...why not? Maybe I won’t trust Facebook to give it to me, but if the tech becomes good enough, I’m definitely going to embrace it.

Is it really a dystopian future? We’ve adjusted to the telegraph, camera, telephone, radio, TV, cell phone, smart phone and...why are AR glasses going to be the tech to bring society down?
Hey, consider yourself lucky you did not need a boot floppy :D
Elephants get much less cancer than their body size suggests. Lots of articles but here's one: https://www.sciencealert.com/elephant-cancer-resistance-nonc...
The implications of Amazon illegally sniffing data from partners to use for its retail business are apocalyptic.

They are risking 1 Trillion dollars in lawsuits, for what?

I don't think that this is happening in any detail, however, maybe some high level things, such as account size, configuration etc. - that information could be leaked. But some category manager at Amazon.com husting the logs from Nodrstrom on AWS ... I don't think so.
Synopsis – Open-Source Computational Cinematography
What's the incentive to go to cellebrite rather than Apple? Cellebrite offers more but Apple does lump sum, from what I can tell.
My understanding is that most people roll their own (for the minority case of users not logging in via Google or Facebook identity).

This is why, for example, most sites will confirm/deny the existence of an account for a given email (provided by an attacker) during password reset flow. There simply aren’t great prepackaged solutions for the part beyond “hash it and put it in the db”.

This is also why sites that do 2FA frequently fall prey to the “steal the SIM and you can reset the password with no other factor” attack so commonly.
Those are different things.

A thuggish business, I can see doing the above.

But Amazon hacking logs of customer data to get a leg up in some category, no way. That's a different ballgame.

Every retail org would have to immediately leave AWS hands down.
You should read "Cities without Suburbs" if you want to know the politics around consolidation and how hard it is in most of the states.

A lot of it boils down into tiny municipalities being able to avoid a cripple larger metros that the littler metros hem in.
I think this is maybe the most egregious instance of this, can’t imagine how this case was decided the wrong way.
This class of automatic, best-effort optimizations is actually bad!

Say the compiler discovers an optimization like "we don't have to copy this giant array". Now either you care or you don't. If you don't care, it was wasted work. If you do care, now you have some fragile, implicit set of preconditions to maintain the optimization. How do you document these, how do you test it?

Instead, in a high performance language, we should:

1. Make the language do the algorithmic heavy lifting. Rust's annoyingly explicit affine type system enables its deterministic memory management and various safety guarantees. Its generics are explicitly monomorphic, which enable aggressive inlining. etc.

2. The compiler's optimizer sweeps up just the details. Register allocation, constant propagation, inlining, all the classics. But not inter-procedural stream-fusing tail-calling Haskell-heroism.

The idea is to make the important optimizations explicit, and allow the compiler to make things faster on the margins and avoid the obviously wasted work.
> Plenty of places have undocked bicycles...

They certainly do: https://lh3.googleusercontent.com/-J_4_SQmUNQo/Wuwwsp5w6BI/A...
There are lots of communities and events that are organized through Facebook. Also lot of my friends are on Facebook and they organize gatherings etc through it.
> CNNs only make sense when working with image data anyways

Not true, N-dimensional convnets, 1-d convnets (for NLP and time series analysis), spatially sparse convnets, graph and non-Euclidean space convnets, ... exist and are used.

CNNs are akin to multiscale wavelet transforms. They can be applied on different spaces (just as graph wavelet transforms exist).
Ask HN: What are your best tips for conducting technical interviews?
Tech interview are notoriously bad. I don't think I've met anyone who has enjoyed one or thought it was an accurate assessment. I'm curious to hear your best advice on how to interview candidates to test both technical proficiency and general fit.
That’s what digital signatures are for. So yes.
Human Bodies Have Steadily Grown Colder over the Past Century, Evidence Shows
I really don’t think he did, just that is what the Chinese wanted to think for face reasons. He seemed very much like the average foreigner leaning it because he thought it was cool, because he had some family connection, and so on. Even him jogging in smoky Beijing is something a fresh off the plane foreigner would want to do (like I did when I was newly arrived to Beijing).
Ask HN: What is your favorite cross-platform terminal emulator?
I've been using Hyper for a while. I love its general philosophy and its configuration style, but it falls short on some key features like scrollback and consistent unicode rendering. I use macOS and Linux and prefer tools that can run on both environments using the same configuration files. What are you using? Do you like it?
Highest-Grossing Media Franchises of All Time
Cool how Boeing's response appears to be to find and punish those responsible for the communications, not those responsible for deceiving the FAA and regulators in order to certify an aircraft that never should have left the design phase.
My favorite quote:

>The company official said the language used and sentiments expressed in these communications "are inconsistent with Boeing values, and the company is taking appropriate action in response."

Values? Your values appear to be maximizing profits at the expense of human lives. Your response to: "the guys developing our simulator were emailing back and forth they'd never fly on this plane" shouldn't be - let's fire them. It should be: how did management fail SO HORRENDOUSLY that the feedback from these testers wasn't pushed up the chain so we could build a reliable product?

The fact that we're this far removed from the accidents and they still don't get it tells me the company probably needs to just fail.
I wouldn't call that what's left after elopcalypse "alive" and "around"
Each their own. In general, I'd also like a away of knowing when a SIM swap attempt occurred. An SMS would be fine.

And I'd like my bank to know when a swap occurred for basic fraud detection. Don't need them to know necessarily which mobile provider, but I'd appreciate a way to prevent all my accounts being cleared out the same or next day as a SIM swap. Even the simple act of the bank being able to know so they can temporarily raise security requirements for a few days. A way of registering who to notify on SIM swap would actually be useful.

SIM swaps are only part of the picture. Still have PINs, authenticators, photo ID etc.
Tech industry layoffs rose 351 percent in 2019. Is a recession looming?
I’ve been using my Quest daily for working out since I bought it in May, hard to argue with 30 pounds of weight loss. On the other hand, I’ve never actually gamed with it, or used it for anything other than about an hour of fitness daily. Totally worth it for me, I can’t wait to see what comes next.
Both, but as a higher priority, c) punish the exec team on whose watch it happened.

Bring back the concept of responsibility. They are paid to be in overall responsibility for anything that happens under their remit.

Time was such a behaviour in the department, or under their leadership would have ended a career. Realising the actions of a lowly engineer or janitor can end their gravy train, they might implement adequate oversight.
Hitman 2 New Contracts Coming in January 2020
I went to wikipedia to look up coal gas, which you mentioned in the video but didn't link to: https://en.wikipedia.org/wiki/Coal_gas

My dad's house was built in the mid-1990's. It has custom fluorescent bulbs that are probably rated at 5000K. They're "okay", but only because the bulbs are entirely hidden on top of cabinets or high in the ceiling, and filtered through the tan paint on the walls. I found some 2200K COB LEDs that I intend to install on those light circuits, as the other lights in his kitchen are a case study in poor lighting practices.

His kitchen has canister lights. The stickers say "max 40w", but he had 75-watt equivalent 5000K CFLs in those canisters. They were terrible. I found a box of 2700K 60-watt equivalent LEDs in his laundry room, and switched them out while he was traveling. At the time he was like, NO I'M OLD I NEED SUPER-BRIGHT LIGHTS, but now he uses those lights instead of ignoring them. They're still too bright, but at least they're usable now. I recently found some 15w and 25w incandescent bulbs: the canister lights directly above the counters would be fine with 25w bulbs.

In your future videos, I'd be interested in comments on the dark-sky movement, efforts to prevent skyglow, how people commonly use too much light at night, and the abandonment of good lighting practices in the name of energy-efficiency: glare, "daylight" LEDs, broad-spectrum streetlights, etc.

OH, and I'd be especially interested in the difference between 5000K fluorescent and supposed-5000K LED bulbs. I'm sure the spectral power distribution of the supposed-5000K LEDs is totally different than 5000K fluorescents: lots of blue with just enough ROYG to trick people into thinking it's 'white' light (LED) vs. a relatively-flat power distribution (fluorescent)?
I tried 'Kakeibo': The Japanese art of saving money
FTC is supposed to enforce truth-in-advertising laws regardless of the medium (television or online).
couldn't agree more.

when i read Zuck's post, I thought to myself he has a solid vision on how to compete with the Chinese companies that have huge overlaps with how he thinks mobile will be used in the coming decade.
anda great entryway for a budding insurance startup to get customers
The responsibility of the map has many different states based on the situation (long-term resident, tourist, disabled business visitor, non-English speaker, etc.)