skysight-inc/HackerNews huggingface dataset:
Not by having them do the exact thing we pay them not to do. In the EC case, we pay them to develop bird habitat, yet that habitat doesn't get developed. If we'd pay people to not grow palm trees, we expect that there isn't some metric loophole like that makes it so that we don't achieve the goals set out.

I mean, it's a matter of clearly defining goals and KPIs of course, but that's easier said than done.
Quoting efail.de:

> However, we found that several clients only gave a warning to the user for invalid MDCs, but still displayed the modified plaintext. This allowed the CFB gadget attack despite the MDC

No, the problem was that clients would render a plaintext known to have been tampered with. This was exacerbated by a zero click gadget, but would still have been an issue if images weren't loaded and a malicious link was clicked.

You're right that Gpg wasn't shown to be broken, but pgp was. (This is the CBC attack, not the direct attacks on clients which are just client bugs, which themselves aren't direct evidence that a protocol is broken)
Terminal Velocity: Wired article on Michael Bloomberg (1999)
No, this is infuriating, but we must not forget that they “built an ML engine to automatically optimize bla bla bla.” But really, pretense should be off. Stripe is nothing more than a PayPal clone. Even the refund policy is now perfectly cloned. Someone here said that the only way our discontent can be heard is for us to switch between platforms regularly. Right now, PayPal does not look so bad. Their API and documentation has also become pretty good. Of course, the better thing would be to just get a merchant account and drop all these middleman leeches. Apropos, don’t get me started on the AppStore were we only pay 30% for the privilege
txcwpalpha mentions one common path. It is also a pretty standard practice for law enforcement to perform forensics on seized C2 components (sometimes even replacing them with emulators or continuing to operate them for some time in order to collect additional data), so that they can identify and notify victims.
Sadly, in practice it often was?
I once had some lead glazed plates that I only discovered when I microwaved one with crack halfway through. It heated up blazing hot and the food remained frozen. That was the last time I ate off those plates.
How do you ensure persistence in production?

With postgres I just buy a managed setup from heroku, GCP or AWS. Backup is automatic, and there is a follower to takeover if the leader does/crashes.

It's easy to backup an sqlite snapshot, but you can't do that after every operation.

Curious, how do people solve this?
HTTP: //buddysupplement.com/rapid-fast-keto-boost-reviews/
Rapid Fast Keto Boost Reviews is a weight reduction supplement and you may have gained from the name. While numerous individuals really go on keto diet, there are other people who search for less difficult other options. At the point when you are searching for options to keto diet, the main thing you see are keto supplements. There has not been a lot of research on keto supplements yet individuals will in general think everything that the organizations state. This is on the grounds that the organizations put forth their defense convincing and they reveal to you that their enhancement will cause you 'to get more fit like enchantment.'

How Does Rapid Fast Keto Boost Work?

The working of Rapid Fast Keto Boost is very like that of ketosis. The essential point in both the cases is to build fat substance and fat digestion in the body. Presently, this may sound conflicting to certain individuals. For what reason would the body need to amass progressively fat on the off chance that it likewise needs to lose fat? Let us clarify how this functions.

http://buddysupplement.com/rapid-fast-keto-boost-reviews/

http://supplementsworld.over-blog.com/rapid-fast-keto-boost-reviews

https://medium.com/@supplementsworld/rapid-fast-keto-boost-reviews-update-2020-price-does-it-really-work-scam-or-legit-diet-7ed4c5e9fc86
> A stock can only have a single holder of record, and only one dividend payment should ever be made to whoever the holder of the stock was at the time of the payment.

Yes you are right with this. I have suggested a way to handle this to my colleagues informally, but I don't work with the tax offices themselves. What I would do is to have each share at the atomic level as you mention to have a serial number. If you reclaim for 100 shares then you need to supply 100 serial numbers.

With regards to the banks, absolutely, they are the critical step in this kind of fraud.

The serial number solution does have one weak point: You can use "unused" serial numbers for your reclaim or you can use serial numbers from someone who lives in a country that does not participate in the bilateral treaty that allows the reclaim. This latter example is also essentially using "unused" serial numbers. Typically there are many billions of dollars of withholding tax that remains unclaimed for whatever reason, sometimes even just ignorance. But at the very least this allows you to be better off than today. The tax offices, if they are competent, can even try to attach each serial number to a person, but there are privacy laws that can prevent this. Another subtle point is that a dividend payment event is not the same thing as receipt of the dividend in your account. Typically, the receipt of the dividend is the critical point that tax offices want, not proving ownership of the dividend. This is why the banks have so much power here. They essentially prove payment receipt, not dividend ownership. The logic is that you can't have had the payment into your account if you didn't have ownership of the dividend. There are also other examples of fraud such as forging the country of residence of the shareholder.

Oh yes, and then lastly: Apparently around 2009 some countries turned a blind eye to cum-ex because they saw it as a way to "boost the recovering economy" by pushing up bank revenues... ¯\_(ツ)_/¯
FYI, Last week, before I unblocked my firewall, when I tried to get certs from LE, it tried to knock me some 5 or 6 times from different IPs. Checked some ASNs, one was from AMAZON, the other one I don't remember.
> So the only possible limiting factor that might not scale is TAs. You can render this irrelevant by having high enough standards for entry, like GA Tech's OMSCS, or you can work on scaling it.

They said bootcamps don't scale, not that education or schools as a whole doesn't scale. And your solution of raising the entry requirements so only people who can teach themselves can attend is proving their point. Someone who can teach themself isn't going to pay to go to a bootcamp, but people who want to switch careers and can't figure it out without help, will.
> I can't think of a single time it has served to increase unity or harmony

There basically would be no country without it.

If we got rid of it today, every state that relies on equal representation would be in their right mind to secede rather than be legislatively bullied by the more populated coastal states.
The First Molecule in the Universe
> having them do the exact thing we pay them not to do.

Well you left that bit out of your comment!

You just said they took the money and managed to make money with their land anyway while meeting the agreement, which sounded like a perfect situation!
Yes, exactly! One of the winning entries at http://prize.hutter1.net/ (challenge to compress English Wikipedia) is/was a LSTM that predicted the next character then used arithmetic coding on the final bitstream (correct bit / incorrect bit).

Specifically, see https://arxiv.org/abs/1609.07959
I've been in the C#, Java, and Rust world for so long that every time I come across C/C++ library source it cracks me up that an image compressor has to have functions to redefine basic concepts like memory allocation, assertions, and threading.

Reminds me of a "lightweight" zip compression library that I recently used that was literally 98% overhead and 2% actual compression code. It had its own definitions of everything: integers, integer properties, memory allocation, streams (as in sequences of memory blocks, not even real I/O!), error handling, progress notifications, etc... Pages and pages of conditional macros and compiler-specific hacks. Just to call a single a function that took an array and returned an array. Ridiculous.

https://gitlab.com/wg1/jpeg-xl/-/blob/master/include/jpegxl/...

https://gitlab.com/wg1/jpeg-xl/-/blob/master/include/jpegxl/...

https://gitlab.com/wg1/jpeg-xl/-/blob/master/jxl/base/compil...

https://gitlab.com/wg1/jpeg-xl/-/blob/master/jxl/base/os_spe...

https://gitlab.com/wg1/jpeg-xl/-/blob/master/jxl/base/arch_s...

That last one is trying to work out the NUMA topology in a portable way... good luck with that! That's not something I expected from a JPEG library. Like memory management, they'd actually be better off requesting thread-management function pointers from the hosting application. Otherwise, this would not be a "good citizen" in constrained environments such as embedded in a web server or database engine.

Random examples of silliness from just this one file:

They ignore the first 2 cores on 3+ core systems: https://gitlab.com/wg1/jpeg-xl/-/blob/master/jxl/base/os_spe...

They'll be limited max 64 threads (Half the threads on the larger single-socket AMD EPYC 2 CPUs!): https://gitlab.com/wg1/jpeg-xl/-/blob/master/jxl/base/os_spe... because they're not using the Processor Group Aware API: https://docs.microsoft.com/en-us/windows/win32/procthread/pr...

Sure, 64-core monsters are still somewhat rare today, but 16-core/32-thread desktops CPUs are now affordable and the TSMC 5nm process will likely result in 96-128 core monstrosities this year. That's 384-512 threads for a dual-socket server or workstation! If you're making an image codec library "for the next decade", a little future-proofing might go a long way. Look at it this way: Image decoding throughput is one of the main performance issues I have right now with Lightroom and I work with "only" 36 Mpx images. There are 80 Mpx cameras just around the corner...

For example, there was a blog article a couple of years ago basically saying that the major Amdahl's law limitation to decoding formats like JPEG is the Huffman bitstream decoding, which is Step #1 in the process. The author pointed out that simply restarting the Huffman bitstream a few times for a typical PNG or JPEG file would increase the size less than 1%, but would allow truly parallel decoding for every step.

For all the apparent effort to make JPEG-XL parallelised by default, it seems odd that there doesn't appear to be any mention of parallelising the ANS bitstream decoding...
I did not tell them about it. Signal has received a lot of press coverage. They use it because it's what they think they're supposed to use.
To best honest I don't see the point of this. I tried Pioneer and all the updates people wrote were vanity updates designed to look impressive and impossible to validate. I used the platform for a while with the hope of perhaps winning some perks in the future. But then I found myself spending all my time on trying to market my project and present my updates to be appealing to the rest of the "contestants" rather than... you know... working on the actual product. Like, what is the point?

If you're working on highly technical problems no one is going to understand what you're doing anyway until you're basically at the stage where you're so polished you can spoon feed people everything... By which point you probably don't need any outside assistance. If you look at what goes on at Pioneer it's basically the startup equivalent of Instagram: lots of glamour shots with no actual substance. And at the end what do you get if you do manage to "win" something -- nothing that would help you out beyond what you can already do mostly for free yourself.

I found the app more useful as a diary than anything related to its intended purpose. And I don't really have the time to dress up boring engineering challenges to "advance" in the tournament. For what it's worth, I've checked out a fair few of the projects part of that tournament and there are some gems there. But I'd say the quality overall is low and the platform is more geared towards marketing bros than complex research or engineering projects.
Which is why I monitor the live certs expiry dates as well. But that’s a bug with the client then with LetEncypt.
Insofar as the presidential election is concerned, the electorate is the 538 people in the electoral college. Trump was more popular among the electorate not HRC.
Hmm... if their ethics are as good quality as their garbage "VPN" software, it wouldn't be surprising.
It solves the problem of your power disappearing every eight milliseconds.

No rectifier, no higher voltages, the ability to use capacitors that are a thousand times smaller.

And even if you did use a resistor, it wouldn't have to be too wasteful. If you use normal 14 gauge wiring, your resistance is probably half an ohm. At 48 volts, with a dozen 60-watt equivalent bulbs, your voltage drop is less than one volt.
I would like to find a reliable software watchdog that kills a process when a timer expires (for preventing zombie processes from violating lease timeouts).
Other interesting radioactive glass variant: thoriated glass, which has been used in photography lenses:

https://en.wikipedia.org/wiki/Thoriated_glass

https://camerapedia.fandom.com/wiki/Radioactive_lenses

Those lenses have good metal encasing and the radiation is so small that there’s no real problem except the lenses start to turn to yellow with age.
Jeb Bush spent $130 million to lose the Republican primary. Hillary Clinton spent probably an order of magnitude more to lose the general election. Both outspent Donald Trump just to lose to him in their respective races. Money isn't everything and Bloomberg is risking alienating voters with his ham fisted advertising. His ads on YouTube are non-skippable. He paid extra for that yet it's more likely to anger viewers than to get their votes. If his social media army is just as obnoxious in their campaigning for him, well, a fool and their money are soon parted.
On the authors Twitter, he comes across as having an axe to grind:

"lmao I woke my boy up" [1]

Sounds like he's keeping score of something, which isn't a quality I necessarily want from my "journalists".

[1] https://twitter.com/fulligin/status/1230251533951889409
Bitcoin Cash Developers Fork ABC Reference Implementation Client: “BCH Node”
That's an interesting paragraph. I wonder why they didn't write an article about it?
Australia's NSA plans to hack Australian PCs
Yesterday it struck me that a quality i look for in a leader is integrity. E.g. their unwillingness to be bribed by wealth and luxury.

I think some Americans might be misinterpreting Trump's and Bloomberg's position. Their personal wealth made them jaded, not immune or uninterested in the idea.
> A fuse should be put on the hot leg as close to the power entry as possible. The reasoning being that if the fuse pops it removes the hot voltage from as much of the assembly as possible.

This only works if the power system has a defined neutral and live wire. European Schuko plugs do not - as the plugs are reversible - so you need to break both wires to safely cut power to the device.
Conversion of McDonald’s Waste Cooking Oil into Biodegradable 3D-Printing Resin
For poor people there is very little that matters other than getting enough money to survive and maybe send their children to school.
I'm sorry that happened to you. Could you email me at this handle at stripe.com? I want to look into why we didn’t auto-detect that surge in suspicious transactions.

We’re here to support startups. If you ever have a unique circumstance, write us; we’ll try to be reasonable, in the same fashion that your hosting provider will try to be reasonable if an engineer e.g. fumble fingers a deploy and briefly turns on a larger fleet of servers than they intended.

(It's worth noting, for precision's sake, that a refund is not a chargeback. Chargebacks are when the person who actually owns the credit card calls the bank to complain; they're strictly worse for all parties than simple refunds.)
I worked on the crypto team at Microsoft, which Peter Montgomery worked with to integrate various algorithms. He was quite nice and also quite unforgettable. RIP
Hinge has unlimited swipes...
One could also use the phrase "cargo culting", perhaps -- carrying out actions that seem associated with a good outcome in a context that provides none.
A bit more pro-market than the French. Hardly hard-core.
Also, here's the former head of the ASD warning of the dangers of proceeding in this direction: https://www.smh.com.au/national/spying-on-our-own-citizens-d...
Its by airframe, not by military or civilian. The military airframes are made in the same factory as the corresponding civilian airframe, its just flown to a different facility (In Seattle or such) to be built out with the required military hardware.
I'd love to know what you thought I got wrong.
Never in my career have I ever heard of any other term used than "kicking" the watchdog. Are the other terms popular in America?
On a lesser scale, I know that some companies have issues with emails that end up being sent up to huge mailing lists ballooning into huge chains when people try to get removed from the list and decide the best way to do so is to reply all to the email.
I have heard from union members about union pushback on such things, but that may be anti-union sentiment or rumors.
Show HN: Coddle.app – Keeping a watchful eye on all your precious sites
There's actually counterproof that it must have been copied locally.
Couldn't you reserve, say, 2% of memory and process ids for root?
>list of norms involving software security

These norms are already well-known. However they are never followed 100% because they all rest upon a sandy foundation of:

"Don't be clueless."

Social engineering/phishing will always eventually work on someone somewhere in a company with more than 20 employees.

Not to mention the other part, where passwords are allowed to be a vital link in the security chain, yet software vendors like Citrix simultaneously discourage password managers by getting in the way of using them and by forcing perfectly good passwords to be cycled endlessly. Resulting in people using passwords like Citrix20! (will change to Citrix21! in 90 days... iron clad security there guys.)
Or just extend the same privacy protections to all your users globally and implement the same functionality once. Honestly, the PaymentIntent API is not difficult to wrap your mind around when you dive into the documentation, and it has you covered on 3D secure payments.
Hey guys, this is a side project I've been toying with the last 2 months or so. It's in beta, se please let me know if you find any issues, bugs or typos.

Any feedback welcome too!
> back in those days, there were honestly a lot fewer NSFW images floating around

How far back would this be? The people I know who lived through the '90s don't seem to agree…
Unfortunately in my experience people aren't fond of the more correct explanation, which is that entities on the atomic scale don't behave in ways directly analogous to anything humans are intuitively familiar with.
> But how does a single particle create an interference pattern when there's no other particles for it to interfere with?

The particles aren't interfering with each other. A wave is interfering with itself due to the two slits 'splitting' the wave. The presence of other particles has no baring on this.

> And how does covering up one slit destroy the interference pattern when there is only one particle going though one of the slits in the first place?

With one slit you don't split the wave so there is no interference. The particle doesn't go through one of the slits, it goes through both simultaneously in 'wave form', this is the mystery.
Using Redis as the main/primary datastore?
I have been following Redis since the 2.1 days on and off. As opposed to viewing Redis as a cache, especially with the 5.+ releases, I am strongly considering Redis as my main datastore, regardless of the use case, except some core corporate use cases such as banking, healthcare, ads etc where trillions of dollars are at stake. This is for several reasons:

1. Redis eliminates the cognitive overhead of learning another database language or data structures. What you know in your programming language can be more or less replicated in Redis. For anyone who does not come from a database/SQL background this is huge. Also you don't have to learn a new system or paradigm.

2. Speed - Hands down, Redis is the fastest datastore out there, at least going by practical experience. Forget about benchmarks and all that.

3. Resilience - Redis got a lot of flak for the AOF bugs that are mostly sorted out now. You have Sentinel, replication and what not. At least DR is not a concern anymore.

4. Plethora of clients - this was never a concern but, the client support has vastly improved in the past couple of years. We even have Async clients now.

I am glossing over the details, and am happy to jump in if required. Given all this, is anyone using or even considering Redis as their primary datastore or is Redis still seen as a cache for most use cases?

It'll be cool if we can have a constructive debate around this topic.
Isn't a better and "simpler" explanation, Pilot wave theory?

Particles are like boats on a lake - they both cause waves when they move and are moved by relfections of their own and other boats' wakes.

Interference is simply waves generated by a boat interfering with other waves from the boat.
If you used that dinnerware every day, you've received about as much radiation from the dinnerware as you have from the potassium in your body (about 400µSv/year).

You'd need about 100,000 µSv/year to get heightened cancer risks.
The tool crib checkout is done on computer at least. The toolbox inspections might be fudged.

It also might be downstream or upstream of the Boeing factories, like at one of the companies that manufactures major components (example: Spirit AeroSystems manufactures the 737 main fuselage and I'm told Section 41/cockpit of many aircraft) or at one of the maintenance facilities.
What Is CSS?
> It works perfectly well for my threat model.

What threat model is this?!

(In all honesty, I don't believe you. I presume you're paying those invoices, in which case whatever attacker you have in mind can just follow the money and monitor the metadata to learn everything they need to know about those invoices. Or, more likely, your threat model is "nobody's seriously gonna snoop on my payments to this supplier; I just think it's fun to play with PGP.")
This sort of flamewar stoking is not welcome on HN. Please do it elsewhere, or nowhere, but not here.

Using HN primarily for ideological warfare will get you banned, regardless of which ideology you favor or disfavor, so please don't.

https://news.ycombinator.com/newsguidelines.html
Formal proof and analysis of an incremental cycle detection algorithm
Also from 2016, didn't get a notification. Just confirmed I am still getting refunded. I guess it could be decided by volume or another factor?
"he wasted no time in killing them and replacing them with himself."

ooh ouch that's a sharp, and understated, line!
RIP Larry Tesler.
I rather feel a worm for not being aware of him till today. Nevertheless, hearing the many personal stories here on HN of his work, humility and graciousness, make me thankful for him and his tribe that have made the software profession so much more richer.
Well, your coworker surely would have proper backups of all the important stuff, wouldn't he?

Snark aside, I agree. Accumulating 'sleep 1' in their login-scripts is more fun anyway.
>To prevent riots government needs to produce better policies

Apart from better policies, they also need enforceable ones, where local law enforcement is empowered to deal and contain where necessary.
Nature bats last.