skysight-inc/HackerNews huggingface dataset:
> Well your understanding is wrong. Both SCCA (Fred Hutch in Seattle) and City of Hope in Los Angeles have dedicated nutritionists on staff that advise patients on diet for best outcome.

I fail to see how that addresses his claim that doctors do not retrieve nutrition training.

I did a bit of Googling. It looks like most doctors probably do receive some nutrition training, but not much, and even that seems to focus more on biochemistry than diets and food choice. Some results:

> Despite the connection between poor diet and many preventable diseases, only about one-fifth of American medical schools require students to take a nutrition course, according to David Eisenberg, adjunct associate professor of nutrition at Harvard T.H. Chan School of Public Health

...

> “Today, most medical schools in the United States teach less than 25 hours of nutrition over four years. The fact that less than 20 percent of medical schools have a single required course in nutrition, it’s a scandal. It’s outrageous. It’s obscene,” Eisenberg told NewsHour.

https://www.hsph.harvard.edu/news/hsph-in-the-news/doctors-n...

> Part of the problem stems from the fact that doctors don’t know how to provide information beyond the basics.

> Inadequate instruction during medical school, residency and other additional training is a primary reason for this dearth of expertise, according to an American Heart Association science advisory published Monday in the journal Circulation(link opens in new window) that looked at gaps in nutrition education over the decades.

https://www.heart.org/en/news/2018/05/03/how-much-does-your-...

> Modern medicine maintains the importance of proper nutrition, yet on average, U.S. medical schools only offer 19.6 hours of nutrition education across four years of medical education, according to the perspective authors. “This corresponds to less than 1 percent of estimated total lecture hours,” they wrote. “Moreover, the majority of this educational content relates to biochemistry, not diets or practical, food-related decision making.”

https://www.ama-assn.org/education/accelerating-change-medic...

> A total of 106 surveys were returned for a response rate of 84%. Ninety-nine of the 106 schools responding required some form of nutrition education; however, only 32 schools (30%) required a separate nutrition course. On average, students received 23.9 contact hours of nutrition instruction during medical school (range: 2–70 h). Only 40 schools required the minimum 25 h recommended by the National Academy of Sciences. Most instructors (88%) expressed the need for additional nutrition instruction at their institutions.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2430660/
I agree that we can build better tools. I think what is missing in software is wholistic developer tooling and longevity of that tooling, such that we can invest in mastering them. UPM is a great example of a step in the right direction I think.

When you go into a carpentry workshop, there are hundreds of tools, all designed to work on wood, and a carpenter will know the majority of their tools quite well. They can invest in a tool knowing they can re-use that knowledge for the rest of their career.

When I inherit a software project, it can often have two, three, even four different language ecosystems involved with hundreds of libraries and tools as dependencies. In software we have to accept that we will be surrounded by dozens of tools we need to work with but will never have time to fully master.

Most people I meet are only proficient in many of their tools enough to get the job done and no more. Soon enough the status quo will change and the software industry will happily drop thousands of man-hours of learning right into bin.

The finer points of library X, framework Y, or tool Z are almost ephemeral. Even a company's core software product could just be thrown away and re-written in the new-hotness at the behest of a PM meeting, often losing nuanced domain knowledge in the process.
Faster is always a good thing for a hashing primitive.

For hashing passwords, you should not directly use a hashing primitive but instead stretch/iterate it through a higher-level algorithm, such as Argon2, that will (1) slow it down and (2) salt it.
> I admit the above is a bit much for most people.

True, but it's not just the UI: this also requires discipline and constant synchronisation in a team. Pijul achieves the same without much discipline.
I invested in this interesting investment trust back in February last year when it was featured the investors chronical and late last year when they had an offer for subscription at 100.

I look at it as an alternate bond like investment that is not corelated with traditional bonds - target yield is 5% I think
But this is begging the question. The author uses the definition that numbers have infinite decimals, and all you are allowed to do is ask for decimal n to find out a number. You can never grasp the full number, since you are given a finite amount of time (compute) to discover an infinite sequence of decimals.

From that definition, it's quite obvious that everything you compute has to be continuous, because you are never sure of what other decimals may be coming up, so whatever you compute has to be close enough.

That sounds more like an argument that representing numbers that way is not particularly useful since you can't do much with them (you can't even provide an equality operator).
Indeed, other hospital chains do as well, which is why we viewed it as a good option and went down that path to begin with. In the case I'm referring to, everyone at the hospital already had badges and the thought was that removing password requirements and using the badges that everyone already had as a login would work well.

It didn't work, not because of technical issues, but because we didn't anticipate the high number of doctors that apparently had lost their badges and had never faced consequences for it (the culture at this hospital was "oh you forgot your badge? no worries, I'll just open the door for you"). When we then asked the medical staff to keep better track of their badges (not just for the login system but also because of general campus security) we received incredible pushback, and that's when we had to roll back the program.

IME, and as evidenced by the VA using a similar system as you mentioned, doctors are perfectly competent enough and able to use these systems and do just fine once they get used to the system. The issue is that they put up a fight more than anyone else when introducing something new, and oftentimes IME the new system never gets a chance before it's shot down.
Indeed, Statins seem to be handed out like by doctors as a fix for high colesteral. I recall that the final verdict is they increase life expectancy so they're effectively just a treatment for a disease marker.
A forest will be carbon negative regardless of how the harvested wood is used. Forests increase soil depth through dropping leaves or needles, and by light-starving prior growth. The trees also leave behind roots, a substantial fraction of the total organism weight.

The vast majority of carbon in a tree is from the air, so the sum is a net win. Most wood is also put to long-lasting uses, or made into paper which is eventually buried.

But even burning trees for power, while short-sighted, is net carbon negative, due to the first set of reasons I've mentioned.
I agree with you in terms of there are bell curves for innate athletic ability etc etc. but for the vast majority I would say that if it takes you more than a season to stand up on a surfboard or parallel ski then there is probably a fundamental blocker somewhere up the chain. Either a mental block or an area of training deficiency that can be much better remedied with a focused effort in that area.

In these cases I feel trying to do a complex, nuanced, full body sport is akin to doing Calculus without grasping Algebra. You can take that Calc I class 100x and you will still fail.

I am not trying to be critical of those who struggle to learn but suggest that there is often a way to shortcut that frustration. I love seeing people "get" a new sport and despite how inspiring their persistence it is really disheartening to see people fail unnecessarily for years.
There's a port of Ubuntu available. It isn't yet complete but it does boot on Windows on Arm devices.

https://github.com/aarch64-laptops/linux
Rogue?
I find that with `--first-parent`, my history looks reasonably linear, assuming the typical workflow of having each merge commit merging a topic branch into master.
You are an antisemite, a monster, and a true Nazi.
Speed comparison from the BLAKE3 authors: https://github.com/BLAKE3-team/BLAKE3/

I hadn't heard of BLAKE3 before (I thought BLAKE2b was the latest and greatest), judging by commits from the repositories of that user it's about half a year old now.

Paper's abstract starts with:

> BLAKE3 [is] an evolution of the BLAKE2 cryptographic hash that is both faster and also more consistently fast across different platforms and input sizes. BLAKE3 supports an unbounded degree of parallelism, using a tree structure that scales up to any number of SIMD lanes and CPU cores. On Intel Cascade Lake-SP, peak single-threaded throughput is 4× that of BLAKE2b, 8× that of SHA-512, and 12× that of SHA-256, and it can scale further using multiple threads. BLAKE3 is also efficient on smaller architectures [like] 32-bit ARM1176

In the introduction, the reason for BLAKE3 is described:

> A drawback of BLAKE2 has been its large number of incompatible variants. The performance tradeoffs between different variants are subtle, and library support is uneven. BLAKE2b is the most widely supported, but it is not the fastest on most platforms. BLAKE2bp and BLAKE2sp are more than twice as fast on modern x86 processors, but they are sparsely supported and rarely adopted. BLAKE3 eliminates this drawback. It is a single algorithm with no variants

Paper: https://github.com/BLAKE3-team/BLAKE3-specs/ (By the way, the download doesn't work for me in the latest Firefox on Linux and GitHub's rendering is plain awful. Not sure if anyone else can reproduce that or if my Firefox is broken.)
I think a better way to put it is, "People like programmers are prone to underestimating the amount of detail in things". "Amount of surprising detail" is relative to the assumed amount of detail.
The changing Amazon delivery dates
Is it better in preventing hash collisions?
Types of Organizational Structures for Entrepreneurs
Exactly back in the 50's 60's performers got ripped off left right and centre.
When I read a tweet like that, I have to ponder the actual,
underlying belief (at a personal level) versus the public image you must present as a function of your role, in this case, C-level executive.

It's like you have to be completely blind to anything critical of your business. Your investors expect it. Your colleagues expect it.

It appears to be a genuinely unenjoyable position to be in. Lambda School is even 1/10th of an Apple? It's mind boggling.
Fullstack Reason–native-compiled server and ReasonReact client and code sharing
This is technically true, but the most likely scenarios that result in the discovery of your secret key (128bits of entropy) + master password (?? additional bits) involve things like a device compromise. If your machine is compromised, you’re probably already exposed to things like session cookie stealing. At that point your attack surface is already blown wide open.

The biggest thing 2FA protects against is credential stuffing. If you’re using a password manager and have high entropy site-unique passwords, the additional entropy by TOTP is mostly moot anyway.
Which the Beatles lost due to some super scummy tax dodge
Then the biz parks need to hire more people to do the job!

Under no circumstance should a business wanting a clean landscape overrule the peace and serenity of dozens, perhaps hundreds of people.
I think they have taken privacy enhancing steps, though public perception isn't easy to change. A lot of people (including HN users) still mistakenly think that Google sells user data, or medical history is being used for ads, etc.

Disclosure: I work at Google, but my opinion is my own.
Doesn't that mean it doesn't stick immediately?

I've always assumed that's because you're sort of mulling it over in the back of your head.
Well would ya look at that... The Iranians shot the plane out of the sky after all.

Looks like the crash had nothing to do with the model number of the aircraft after all.
Not really its why TV shows have to be careful with the budget for licences - though this can work very well "sinner Man" as used in an episode of Person of interest.
Using an SRS like Anki will be more effective than any note-taking system, assuming that you do the cards everyday.
Different hashing functions have different purposes. More specifically a hashing function used for authenticating data must be fast, so should never be used for password hashing.

Password hashing should always be performed using a hashing function designed specifically to prevent high speed execution - for that reason modern password hashing functions are both computationally slow (because of course), but also use large amounts of memory (to inhibit parallel execution).
I think people that have condescending attitudes towards developers/coders are going to have that attitude anyway.

That being said, the importance of naming can not be overstated, you want people to want to talk about whatever it is your team is working on without making it sound like you are a bunch of misfits.
This is a bit pointless, since it does not say on which platform the comparison is made.

In any case, KangarooTwelve [1][2] (on AVX-512) is also 10x faster than SHA-256.

KangarooTwelve is a fast hash function of the Keccak family (from which the SHA-3 derives from), and it is clearly what BLAKE3 tries to catch up with.

However, KangarooTwelve probably benefits from the more extensive scrutiny that SHA-3 has received and will receive, and (from a performance standpoint) from future HW extensions that will speed it up even more (the first one appeared on ARMv8.2).

[1] https://keccak.team/files/KangarooTwelve.pdf

[2] https://www.cryptologie.net/article/393/kangarootwelve/
Tiobe again.

Things just do not flip-flop that much in the programming world. What does happen is the indicators Tiobe uses are unreliable, seemingly selected as giving the most churn.

Generally almost any measure is more reliable than Tiobe.

We can say reliably that attendance at costly C++ conferences is soaring. New such conferences are appearing frequently. Each ISO C++ Standard meeting has had higher attendance than any previous one, for the past few years.
> That said, I agree PG's essay isn't intended to be about people like Carreyrou, or the SEC investigators into Madoff, etc – I am confused about which real-life people of consequence he's actually thinking of, because it's strange to write an essay about such an abstract strawman.

The whole point of his essay is that haters are inconsequential and can safely be ignored. If you don't think these are real people who exist, spend more time on social media and they'll inevitably appear.

I think his essay is explicitly addressed less to those of us here in the peanut gallery and more to the people who accumulate haters.
This just happened with my AWS account. Changed phones and forgot to update the number. Didn’t realize it until it was too late. Their recovery process without the phone is incredibly onerous (as it should be) and way too much hassle for me to go through for a small personal account. I just deactivated the credit card that was getting billed and let the account get cancelled. That was a hassle, but not nearly as much as getting back into the account.
AGDQ is very much on my calendar, don’t worry.
It might be slightly worse as it reduced the number of rounds from 10 to 7.
That's the great thing about surfing - no matter how much you suck, it's still a blast.
Does anyone know the reason for all the Redacted entries on the interactive datasets?
LEDE merged back into OpenWRT https://en.m.wikipedia.org/wiki/OpenWrt#History
yeah I caught that as well. "less than men" is a pretty good tell that this is going to be pure wankery. I appreciate his lisp books (I've told him so, publicly, in a room of about 2k people) but this is laughable. Of a piece with the "I wouldn't hire women who might have children, if I could get away with it" take.
so this is LXC based or is it something else? trying to figure this out as well.
I spoke to the guy behind boardgame.io a few months ago. Awesome engine but it's more geared towards building out the rules / mechanics of a specific game vs a sandbox approach.
That would just be a giant middle finger to people who manually type URLs.
What are the criteria for choosing an integrity checking hash? Speed is always desired, and longer output makes collisions due to random bit swaps less likely.

Even CRC32 is still used in embedded systems for short pieces of data.

Is there anything else important for detecting transmission errors if the data was sent encrypted, or is something like MD5 still sufficient for such uses?

Is Blake3 even worth considering for such a use case?
a) how often and for how long, and what impact?

and

b) yes, you should write a blog post on it
Guarantee, I agree.

Resistance to quickly creating a rainbow table with significant coverage, however, is a reasonable property.

The mentioned bcrypt library allows you to “tighten the ratchet” over time as average computing power increases to make hashing a single password in 2010 take about the same amount of time on average modern computing hardware as in 2020 (assuming you correctly increase the number of iterations)
I don't personally think the theory that we likely live in an artificial sim is true.

But I also don't think it's 'obviously' untrue. Yes, the level of detail is mind boggling. But quite a lot of that detail follows naturally from the framework itself: The complexity of an object moving through space and time, interacting with heat and light and atmosphere and etc. is huge. However once the framework is in place (physical laws, light models, properties of materials and so on) everything happens 'naturally' provided you have the processing power to render all the variables.

It's not difficult to imagine a point where a detailed enough framework, and the processing power to render it, could exist. Not soon, but eventually.

Add to that the established tendency of our minds to normalize (ignore things that don't seem to fit, rationalize and otherwise edit reality for palatability) and the power of our neurotransmitter systems to override rational thought... The biological interpreter of the theoretical simulation is well designed to be fooled given a deep enough understanding of it's workings. Which is also not difficult to imagine as a future possibility.

Still, not likely, but too compelling a thought experiment to call bunk IMO.
I think it is at this part of the debate where the ship of Theseus becomes interesting.

The sequence of events in the brain are what make up the mind. But, if you replace the brain while keeping the sequence of events continuous, you have a new brain and the same mind.

Or maybe just the same brain. Ship of Theseus and all that.
> do not appear to have submitted an application

This is nuts.

Does Lambda School market itself, and/or have students in, New York State?
Great article, but I was bummed it didn't cover Giordano Bruno. Most famous for getting burned at the stake in 1600 for his ideas. He wrote:

"I got me such a name that King Henry III summoned me one day to discover from me if the memory which I possessed was natural or acquired by magic art. I satisfied him that it did not come from sorcery but from organised knowledge; and, following this, I got a book on memory printed, entitled The Shadows of Ideas, which I dedicated to His Majesty. Forthwith he gave me an Extraordinary Lectureship with a salary."

https://en.m.wikipedia.org/wiki/Giordano_Bruno
You're being pointlessly pedantic.

The commenter above obviously meant "slow to brute-force".

You're pedantically interpreting it to mean "slow for a given implementation, even if there are some scenarios under which it would be faster to brute force".

What the parent comment meant is clear enough I think, and it's accurate in that context. The whole point of modern hashing algorithms that require memory and have scaling difficulty factors is to make it slower for an attacker with certain kinds of resources to brute force it.

If you have a very slow hashing algorithm implementation of a fast hashing algorithm (say 'sleep 5, echo 1'), that's not slow by the parent's comment definition because it's not slow to brute force.

Similarly, if the hashing algorithm has predictable output that allows the attacker to derive information about the input, that obviously is also faster to brute-force.

That sort of pedantry is arguably somewhat useful if you also choose to provide a more precise definition or explanation. It's definitely not constructive if you just add a little smiley face and do it as an asinine "hah look at how smart I am".
Yeah that works, if people are disciplined (no merge origin/master into master ...). You don't see individual commits from feature branches though.
Never use MD5 except for compatibility.
Wage disputes? Do you mind sharing/linking please?
I meant that he's a genius at the whole stack machine / language shaman thing.

32 bits are unnecessary?!? I suppose a 18 bit machine would run a lot "faster" than a 32 bit machine given certain data sets and loads, but I wouldn't want to do any audio DSP with it.
Because when you simply accept the world as is, it looks a lot like you're endorsing the status quo

It looks that way only to a particular subsection of society (leftists). Given your staunch defence of unions the other day I guess that's very much consistent with your expressed outlook here.

For conservatives accepting the world as it is doesn't automatically imply endorsement or support for the status quo. It only means you accept that the world is big, you are small, and for almost all problems on a social scale there's either nothing you can do or - just as likely - any attempt to fix it via social engineering will make things worse rather than better.

This is because they view most social problems as inherent to human nature and human nature as essentially fixed. If you can't change human nature then many apparent social ills are unfixable, and indeed can't even really be described as problems to begin with, no more than people's inability to fly by flapping their arms is a "problem".

To leftists this conservative acceptance often looks like coldness, lack of compassion or outright support for the existence of problems, a view which unfortunately can often then be used to justify nastiness, no platforming, aggression or even violence against them. But it's not any of those things. It's just acceptance.
> > It's not some special thing that sits apart from it.

> Except it is

I'd half agree. It is a special thing, but it doesn't sit apart from the rest.
Deadmau5‘s Cube v3
This joke is also very deep. "You" might tear "it" a new asshole.

Almost as if, in some important and meaningful way, "your ass" was a fundamentally different entity than the "you" that has agency to act
A constructive response is that the ability to examine a real number to arbitrary precision is already highly idealized. In the real world you will quickly exhaust your ability to measure a real quantity to ever higher precision.

> you can't even provide an equality operator

If you are given two rods, there is no way to tell if the two rods are of the same length.
The reason you haven't heard of it before now is that it was released 2020-01-09, last Thursday at the time of writing, at Real World Crypto.
Life Under the Ice
Vevo actualy
Isn’t there a contradiction between the constant complaining about paywalls by the HN crowd and the same crowd’s dislike of ad driven platforms? Someone wrote this - don’t they need to get paid for it?