skysight-inc/HackerNews huggingface dataset:
That's a general description of the problem, but the more pragmatic question to ask is "why do we support explicit curve parameters at all?". In practice, nobody uses them; virtually no organizations are even qualified to use them. Many platforms don't support them at all; it's not as if there's a serious compatibility argument for them.

The right response to this vulnerability is to jettison support for anything but named curves.

This is probably an inside-baseball argument for people who don't pay attention to elliptic curve implementation details. But it's easy to quickly understand.

Go to SAFECURVES.CR.YP.TO; you'll see a big long list of curves, each with their parameters and some implementation details. In reality, only a subset of these curves are commonly used (P-224, P-256, Secp256k1, and Curve25519 probably account for 95% of all curves).

Further, most specific curves are implemented not as parameters plugged into a generic elliptic curve scalar multiplication routine, but rather as curve-specific code (one of the major reasons we have different curves is to allow specific implementation optimizations). A browser that supports Curve25519 certainly uses Curve25519 code, not generic code.

The "explicit curve" feature that blew up on Microsoft is designed to allow people to specify their own parameters, not for well-known curves but for curves they themselves generated. Nobody does that. There was a time, in the long long ago, when people thought that might be a good idea; nobody thinks that anymore; everyone thinks the opposite thing. If anything, we're trying to get rid of a bunch of curves. Certainly we shouldn't be randomly supplying new Weierstrass curves.

So that's the problem here. A lot of cryptography engineers were probably surprised this CryptoAPI feature even worked. We had considered it awhile ago as a cryptopals challenge (and Sean actually did add it as one in Set 8 a few years ago), but we never dreamed anyone would be crazy enough to let this bug happen in the real world.
Did they land with a USAF major missing as well?
I already use a Kinect for full body tracking in VR Chat lol
Some more backstory and an interview with the guy who compiled it for those interested:

https://ww.9to5mac.com/2020/01/15/the-unofficial-apple-archi...
the existence of the && and || operators (not to mention the true and false utilities) would indicate it's more than just a convention.
Everything is "trivial" when it's someone else's problem.
Somewhat less serious suggestion, not aimed at OP, but this whole thread:

How about everyone with less than two years experience with both IDEs and editors stand back so we grown ups can sort this out ;-)

On a more serious note and as someone who has been on both sides of the fence:

How about we accept that people are different? Some people like Mac, some like Linux and some - gasp - enjoy their Windows desktop.

That said, and as someone who has extensive experience from both sides, I think that if people put the same effort into learning and configuring their IDE as they put in learning and configuring vim then that might very increase productivity a lot more than last ten years worship of vim.

(And: do learn a bit of vim. It comes in really handy sometimes, just don't fall for the idea that some people sell that you cannot become a good developer without using it all the time.)
Fail Safe is was based on a book called 'Fail Safe' while Dr Strangelove was based on one called 'Red Alert'. It's an easy mistake to make as they have incredibly similar plots which really hurt Fail Safe (which I agree is a great movie)
> but much (most?) of the most important work in modern astronomy is satellite based.

You're going to have to point out which source you pulled that out of! As a simple example, more than half of the Nobel prizes awarded for astronomy since 2000 are for discoveries made with ground based detectors. And of those awarded to satellite experiments, none was actually competing with a ground based experiment, so satellites mainly bring different, not better, capabilities.
Do a search on that handle in connection to Brave/me, notice patterns. Also I do not take ascribing motives to be a sign of low intelligence, per se.

Product and design people who were involved in our blunder had the best of intentions, and I'm not saying they were stupid either, but they missed the mark and we corrected within a month.

To say "fraud" is to accuse us of a crime, deceiving for gain, which we did not do. We were the source of funds, we did not take anything due to anyone. But the product design was on edge of infringing rights to publicity, even if by scraping, and the appearance of donation fraud was bad. Sorry again for this error. The team learned from it.
This is super common advice but it is generally wrong, at least the second part.

Comparing floats is more subtle than most programmers realize, and there really isn't a one-size-fits-all solution.

Things to consider due to the nature of fp representation
- comparing results close to zero is different (i.e. "is a small" needs a differen test than "are a & b close"

- the distance between fp numbers depends on their magnitude, so comparing two large numbers to each other shouldn't have the same bounds as comparing two numbers near 1, say[1].

- if you aren't quite careful you can easily create tests where a == b but b != a , which can cause sorting issues, etc.

Hand-wavily speaking if you want to do this "right", you should probably look at doing the analysis in ULP (units in last place) rather than directly on the floats. Don't do it for values near zero though. And have a fast path for differently signed values.

The above doesn't even get into denormalized values.

[1] note that what people usually mean for epsilon is the version of machine epsilon that is the difference between 1 and the next representable float above 1 [2]. So by definition this is smaller than the representable difference between any two numbers in larger decades

[2] MS .NET somewhat confusingly defines Epsilon as the smallest representable normalized number.
If you want to get into IoT, invest into security hardware to stay secure.

I prefer TOSIBOX but I'm sure there are other solutions that work. https://www.tosibox.com/products/
First, satellites are only visible in the optical when they are illuminated by the Sun, which is only for a fairly short window after sunset and before sunrise. The exact size of the window depends on how high they are, but most of the good "dark" time should be unaffected.

Second, astronomers already use image stacking to reject any number of transient artifacts, like satellites, airplanes, cosmic rays, etc.

Third, while these constellations are going to greatly increase the number of satellites in orbit, it's only by about an order of magnitude. Yes, that's worse, but it's not like it's a problem that hasn't existed before.

The type of observations that are likely to be most affected are surveys that actually search for moving near-Earth objects, especially near the Sun (and radio astronomy which apparently can detect terrestrial emissions scattering off of satellites) but I fail to see how this will mean anything like "the end of astronomy" (and I have a Ph.D. in astronomy.)
Also dangerous and inflexible.
I watched "Laundromat" (*movie about the Panama Papers), towards the end of the movie, Antonio Banderas says: "In... In retrospect, uh... I think we... we could have spent more on cyber-security."
I'd personally avoid SICP unless you have an interest in writing programming languages or solving math problems. I personally found it really boring, and couldn't get through it.

My own personal taste also leans towards Scheme (especially Chicken Scheme), so that's what I'd recommend. To me it feels more elegant, more modern, and of lighter weight than Common Lisp. I'm also kind of allergic to the JVM and Clojure's non-lispy innovations in syntax, so I'd personally avoid it too.

That said, I myself started with Common Lisp and then moved on to Scheme and then Emacs Lisp (which is a decent choice of Lisp to learn, in that, despite some shortcomings, it puts the entire Emacs ecosystem at your fingertips). Once I'd learned Common Lisp, I found learning the rest to be quite easy.
You've really never looked into a night sky and seen a satellite? Unless you live underground or never leave a big city, it's quite easy and there are dozens of apps that will help you understand what you're looking at.
wikipedia.org/wiki/Ant_colony_optimization_algorithms
I don't need to speculate on this. There is never anything "specific" as any one of these things individually and all things combined are a death sentence.

With a 9 degree temperature increase a large amount of the planet simply becomes uninhabitable during the summer, period.
WASHINGTON, Dec. 1 — The Department of Energy said tonight that approximately three‐quarters of the A‐1 model Polaris nuclear warheads deployed on submarines in the mid‐1960's were probably “duds” because of mechanical defects.

https://www.nytimes.com/1978/12/02/archives/early-polaris-mi...

To be fair, the Japanese had really good torpedos at the start of WWII, but there were other things which were just as unproven and wonky. For one, the proposed tactic of letting battleship shells fall short, to target enemy ships underwater, was pretty much useless.

(Come to think of it, the initial performance of Sidewinder missiles in Vietnam was another example of this sort of military equipment failure.)
this is a pretty naive approach to aging.

you can age gracefully or you can age terribly. there are many things entirely in your control that can shift you one way or the other.

there's dozens of studies that show very strong correlation between calorie restriction and longevity.
also: https://web.archive.org/web/20041024212043/http://www.kx.com...

> i call most of my languages A but to avoid
confusion i switched to the phoenician aleph.

(h/t chrispsn)
I'm currently doing this and am in the middle of chapter 3. So far, everything has worked fine with guile.
> N=1, of course, but I have had an extremely cynical view of charity events ever since. There appears to be an entire industry built around siphoning away 90%-99% of every dollar adjacent to charity.

Kubernetes appears to be built around siphoning away 90%-99% of my CPU when I tried to use it to manage a 100 item todo list on my Chromebook.

N=1 of course.
Yes, you still have to know kind of how it was named and kind of how it was used. It is just the rest of the details you can forget (or likewise, don't need to remember). It is really useful when you have to use libraries that are kind of similar but not exactly.

Anecdotally, I use Typescript and code completion is exactly how I discovered Javascript's "some" and "every" methods. It involved lots of scrolling because I didn't know it would be named like that, but based on the presence of other list comprehension methods I had a good suspicion that they were there somewhere...I still often mistakenly write LINQ-named "all" and "any", but the online type checking quickly snaps me out of it. Code completion can actually be improved to deal with these cases with more utility, by not only matching on the parts of the member's name, but a system could also match on synonyms to parts of what you typed as well (or document aka's in the interface that play no other role than hooking into code completion).
Climate change may reduce alpine skiing 'supply', but I also think that 'demand' may also be shrinking.

My main reason for not caring about alpine skiing, anymore, is the advent of Personal Electric Vehicles (PEVs). An electric unicycle (EUC) can feel a lot like skiing, especially on a mild, grassy hill. An electric skateboard (Esk8) and a Onewheel both, to a reasonable degree, simulate riding a snowboard. I don't have to travel for these thrills. I don't need a lift ticket. I don't need to freeze my feet in hard plastic boots. These devices are not cheap, but neither is skiing.

I expect that there are others that feel similarly -- that the fun of electric rideables have adequately replaced the thrill of alpine snow sports.
A Modification of the Halpern-Pearl Definition of Causality [pdf]
Carbon-negative like in reality, or by outsourcing dirty jobs like how Germany is the greenest country by dumping their garbage in Poland?
Just make a simple bash script that goes:

open -n /Applications/Google\ Chrome.app --args --app="https://gmail.com"

Add shortcuts to that.
Remote Team Meetups: A Complete Guide
Aging is basically cumulative damage to your body and its' ability to repair itself, especially mitochondrial DNA
Education has many goals and one of them is to teach them spelling. The fact that fourth grade homework is spelled correctly does not matter at all - the goal is not to produce correctly spelled homework.
There's a comment elsewhere in this thread that suggests there's no link between spelling and higher intelligence.

I disagree. Spelling ability doesn't develop in a vacuum. It's the result of an individual's having seen the words before. Reading develops spelling ability. Reading also develops the imagination and one's ability to reason about abstractions. Reading may not have any influence on spatial reasoning or math ability, but I think it's the primary driver of verbal intelligence.
Coal will be shut off "later", the nuclear plants are shut down now, and the idea to reduce the overall energy budget to make up the shortfall hasn't happened either.

So, yah, basically Germany shut down nuclear plants and replaced them with natural gas.

Good job Germany.
Previous Discussions:

https://news.ycombinator.com/item?id=13051974

https://news.ycombinator.com/item?id=8576707

https://news.ycombinator.com/item?id=7109345
For anyone looking at picking up Ramda, the docs at ramdajs.com are great API docs, but don't tell you a thing about how to actually use lenses, transducers, and point free data last functions with pipes. Randy Coulman has a great list of guides on how to actually use Ramda on his blog[1]. Start at the bottom with the introduction and work your way up.

https://randycoulman.com/blog/categories/thinking-in-ramda/
Insulting someone because of his/her mistake is of no value, no service to he/she who made a mistake. Much better is to teach the right way so that the person is given the opportunity to learn. If yes, everyone wins. Insulting the person could work sometimes, but then you're just adding up to hatred and fear. Which the world is full of;
Why should they? It's not Microsoft that's emitting in that case. Employees have several public transportation options, including Microsoft-run buses.
or it could be actively suppressed:

[0] http://911blogger.com/news/2007-09-09/nuke-flight-major-issu...
I use this thing: https://insomnia.rest/
Wikipedia Game
I made a game. Try to guess the title of wiki page from its description, tell me if you like it (https://gitlab.com/Beetsaber/wikipedia-game)
Wow. Bellingcat, but for stalking and sexual assault.
Oh, I don't disagree. There's the entire burgeoning field of nootropics from which you can pick and choose as many supplements / drugs as you could want to test. An interesting point you might find, is that the nootropics which often have the greatest effect are the ones that help to deal with one or more of the items listed above.

For example, looking at some of the most common "life-extending / anti-aging" supplements people use which might hold promise of clinical efficacy:

[melatonin] -> proper sleep (usually there's an underlying issue of anxiety, stress, bad posture, sleep apnea, etc. that's being supplemented here)

[an innumerable count of different micronutrients] -> complete diet (those that see the most benefits are people that have deficiencies in those areas whether due to poor diet or genetic mutations from birth that lower efficiency of production but perhaps aren't so noticeable that they result in life threatening effects)

[metformin] -> intermittent fasting (which really ends up being the process of autophagy that you want to occur)
Natural and artificial systems have difference sensitives to perturbations.
I don't know how I feel about labeling achievements, grinding, and leveling up as dark patterns

I guess they do technically exploit people's psychological weaknesses to make games more addictive than they'd be otherwise.. if you take all of those out, though, the classic Final Fantasy SNES games are basically just pixel art comic books
If the actions are actually taken, I don't care if they were taken for propaganda purposes.
That isn’t at all what happened.
This is totally false, the solid angle subtended by the satellites is tiny so the effect of their obscuration is totally negligible.
https://outline.com/zZhZLU
As best as I can tell, this is missing my favorite video, “Jaguar on the Loose”. Really reminds me how things felt back then. I’m on mobile though where the experience isn’t fantastic so maybe I just missed it on the site. Provided below:

https://www.dailymotion.com/video/x2zfnka
> The thing I am missing the most is HDMI video out, as my retired Nexus 5 could do with MHL and a simple dongle on the USB micro port. That dongle could also provide power and another USB port for a mouse or keyboard. Very few modern phones seem to have any video out other than casting. I do see that DisplayLink does support Android, but I've yet to find a dongle that also provides USB C power delivery in a nice portable package.

Many phones support USB-C's DisplayPort Alternate Mode which basically does HDMI over USB-C and allows for power and data, a cheap adapter [0] is all you need.

[0] https://www.amazon.com/dp/B07R7PD8TR
Shrink Your Raspberry Pi 3 into a 40x25mm SoM (2019)
I used to read a lot, basically all the time, and was never good at writing or grammer. So I don't think it is so easy and clear.

I got better at writing when I took lessons and read books about how to write.
Records Come to Java
Yeah it is interesting that people are more willing to sacrifice the night sky then exert political pressure to get the horrible internet situation in the US fixed.

Also interesting how people who could not find the big dipper think that removing the streaks is "just basic image processing" without knowing anything how modern astronomy is done. Never mind that professional astronomers are complaining. Oh and of course you get suggestions like "you can just fill a 30 km bubble with gas in space and use that". As another commenter put it nicely "everything is trivial when it is somebody else problem".
See also: Arthur's version. http://nsl.com/k/ray/raya.k
If it's been a while, I'd recommend re-reading this site's guidelines:

> Please don't comment about the voting on comments. It never does any good, and it makes boring reading.

https://news.ycombinator.com/newsguidelines.html
Well, it does cool people walking on the sidewalks. It is also more comfortable to breathe than 120 degree dry air.

Wasteful of energy? Probably. But the water evaporating into the atmosphere is not really lost either. It's short circuiting one major step in the water cycle to become usable (by us surface dwellers) again.
Couple quick clarifications:

BFR isn't a name that's still in use. Poster you're responding to was correct in calling it Starship: "SpaceX's Starship spacecraft and Super Heavy rocket (collectively referred to as Starship)" (from https://www.spacex.com/starship).

Starship projects to be significantly less expensive than Falcon Heavy _or_ Falcon 9. With total reusability of both stages and a construction built toward little to no refurbish or rehab, the cost per launch is nearly completely dictated (order of magnitude) by fuel costs, and project to be ~$2 million. This is an order of magnitude reduction in $/kg over the Falcon 9.

https://www.space.com/spacex-starship-flight-passenger-cost-...

https://www.thespacereview.com/article/3740/1
There was a great HN comment a few years ago that broke down the "Charitable-Industrial Complex" using The Real Housewives as an example.

I found it:

One thing I've learned from many so-called "philanthropists" is that hosting charity events can be a great status and money making/saving opportunity for those in the business of it. If you've ever watched a "real housewive of ..." episode, those wacky ladies are constantly hosting charity events and provide a pretty good example of how this works:

Full comment here:

https://news.ycombinator.com/item?id=6113969
While I agree with the point you are making, it must be noted that garbage is not "dumped", like someone is throwing stuff across a wall. I am sure Poland is paid lots of money to take the garbage.
> Should I be satisfied if you're doing the right thing for the wrong reasons?

I tend to think YES, assuming you're actually doing the right thing instead of just saying you're doing the right thing. For example, when good ideas happen to coincide with profit motive, I think that's a wonderful thing, and really the best-case scenario in a market economy. Apple's seemingly genuine focus on privacy is a perfect example: many people criticize it as being driven only by profit (perhaps as a way to compete with Google), while I say it's great if that's true!
Azure datacenters are worldwide.
red meat is a good source of heme iron and vitamin b12. I agree with my coworker, a little steak a few days every month is good for you.
How to generate UI-ready web apps, coded with basic modules
Then I wouldn’t worry about any of that. You could put an htaccess file in front of the api so you have to enter a known in / pw - but that’s handled by the browser. Just do the absolute simplest thing you can do until you have more complicated requirements.

Edit see other comment (don’t want the thread to get unreadably deep!)
Bombs were not purposefully DROPPED on Goldsboro. The B-52 transporting those broke up in mid-air and as a result lost the cargo of the couple of megaton-range bombs. Thank you for purposefully misaligning the actual event with your words of intent attack on the city.
It doesn’t need to. The OS could download ads and show them in—app and report back impressions through the OS. And, Apple doesn’t make much money from iOS ads.
Even if you're trolling, I suppose you're technically correct in that this is "good" for stalker-rapists, and maybe analysts of the cam-modeling industry.
Eh, as a kid in the 80s and 90s, we were by far the biggest consumers of console games which cost up to $50-$60, in 1980s dollars, and Nintendo had no problem making money.

Maybe it would be a good thing if children couldn't wantonly download adware without their parents inspecting it?
People's charity preferences are very different from their tax preferences. In particular people prefer their tax money to be spent on their own country, while often giving money to foreigners.
Do you have interactions to worry about or are you just loading some data to display on the page once with no further behaviour?
VW CEO compares company to Nokia, says will cut fuel cells to accelerate EVs
Are 'tech collectives' or 'tech volunteers' a thing? If so, is there a list?
For those of us that have tech jobs that enable us to work remotely, are there collectives targeting our profile? I'm thinking everything from apartments to semi-hostels, that enable you to travel to another country and work for a longer period of time (1 month+) while meeting other people in a similar situation?

I realize you could just look for "normal" housing but I imagine that living together with people that have similar ideals and jobs could make the whole thing a lot more interesting.

As a tangent, I'd also be curious if there are tech equivalents to something like WWOOF, where instead of working for "free" on a farm (in exchange for food and housing), you do the same for some kind of NGO needing tech assistance, in exchange for food and boarding, just to help out and connect with new people.