skysight-inc/HackerNews huggingface dataset:
> otherwise, we just forward the encryption request to the slower, generic C-based xts(ecb(aes-generic)) implementation

This seems like at least something of a bad idea, because that implementation (if my search-fu is correct) is:

https://github.com/torvalds/linux/blob/master/crypto/aes_gen...

Which is obviously not constant time, and will leak information through cache/timing sidechannels.

AES lends itself to a table based implementation which is simple, fairly fast, and-- unfortunately-- not secure if sidechannels matter. Fortunately, AES-NI eliminated most of the motivation for using such implementations on a vast collection of popular desktop hardware which has had AES-NI for quite a few years now.

For the sake of also being constructive, here is a constant time implementation in naive C for both AES encryption and decryption (the latter being somewhat hard to find, because stream modes only use the former):

https://github.com/bitcoin-core/ctaes

(sadly, being single-block-at-a-time and constant time without hardware acceleration has a significant performance cost! ... better could be done for XTS mode, as the above algorithm could run SIMD using SSE2-- it isn't implemented in that implementation because the intended use was CBC mode which can't be parallelized like that)

Can't the kernel aes-ni just be setup to save the fpu registers itself on the stack, if necessary?
Burnout Barometer - Mindfulness throughout the day
>I don't have any idea about how mobile browsers behave for the scenarios stated above.

That's the problem, it won't work there. Apples support for PWA's is frustrating to say the least.

It's fair that you might need consent from the user before storing and keeping large amounts of data, but by removing the option you are forcing a bunch of developers to make a native app instead of a webapp which I find quite infuriating.
Our suggestions are not mutually exclusive options. Both can coexist if the developers are ready for the implementation burden.

The issue with the permission model is there has to be a mechanism to prevent overuse which I believe is always worked around by annoying the user with the prompt as often as possible until they concede.
One difference is the timing. Lockdown in Spain and Italy happened too late. Also is it still spreading or are the new cases the result of the incubation period for the disease?
I'm puzzled by the intense focus on whether someone who dies had a pre-existing condition. It's like people want to convict the person for their own death, make it look like they were irresponsible, as a denial mechanism.

By blaming the person for succumbing to the virus they can fall in to the US-centric mindset of blaming people for their own disfortune, poverty, illness, accident, lack of whiteness, etc.

It's really stupid, unless you are a physician treating cases, to focus this way. It keeps us from dealing with the reality of the pandemic.

Edit: for those objecting to my observation, see the responses linked below, which were the only ones present when I replied. I've seen this pattern often enough over the last few days to realize that it's not simply people seeking information about the nature of the disease, it is something else, more reactionary and emotional.

https://news.ycombinator.com/item?id=22684440

https://news.ycombinator.com/item?id=22684570

https://news.ycombinator.com/item?id=22684817
>You can always add an interaction to your app which exports the stored data into a file which then can be saved by the user.

But... why? Drag the user through some dialogue to save a file locally / manage / be responsible for that and then deal with that whole deal? That seems like very... old / unnecessary.

The fact that applications store some random things locally to me is neither surprising nor a hassle. Browsers already cache files and etc. Unless I don't know something... LocalStorage and other non cookie options seem just fine / safe.

I get the concerns about cookies and such but this seems a step beyond what is needed into the realm of unnecessary / a hassle for the user.

Maybe I'm missing some bad patterns / dark patterns using LocalStorage and etc but it seems to throw them out with the bathwater.
The OS also never relinquishes/turns off the microphone.
> I’ve filed https://github.com/andybrewer/mvp/issues/1 about this now.

Thank you! I'll take a look today.

And pull requests are always welcome.
There is also that whole getting no food, no sleep, and otherwise compromising your immune system thing.
No, let's not prematurely chalk up to ideology what is more reasonably explained by a capable government and a smaller country. Autocracy didn't help China nip the pandemic in the bud. Conversely, democratic Taiwan is managing the crisis excellently as well.

I observe this reaching for ideological explanations extremely frequently in US media and citizens, and these lazy rationalizations seem to me to be one of the ways the US public sphere collectively hallucinates that that they are the freest and first in the world, while promoting ideological tribalism and partisanship, as citizens vote away their interests to protect their ideological delusion.
> People have valid reasons to use a fake name on the internet; […]

Here is a more exhaustive list: Who is harmed by a "Real Names" policy?

https://geekfeminism.wikia.org/wiki/Who_is_harmed_by_a_%22Re...
It always makes me a little sad that we have explored most areas of the planet and there isn’t much mystery left. It would be so cool to find an area where there are still dinosaurs or another unknown life form.
> this so-called virus

It is a virus, isn't it?
Trying to understand the risk factors is not blame.
43 Easy 3-Ingredient Recipes
Cookies are a lot safer for authentication than localStorage. The only problem with this change is persisting data for offline use, not authenticating the user.
I don't think you're missing anything, except maybe just that closed-source is the default on macOS and Windows so the marginal loss of safety from one more closed-source privileged app isn't so high there.

For the moment maybe the best we can do is trying to use apps with screen sharing support included, e.g. Visual Studio Code's sharing.

Your mention of VNC reminded me of some work I did in 2008 :) https://blog.printf.net/articles/2009/01/26/multi-pointer-re...
Huh? It's well documented by now that comorbidities increase the risk of death from COVID considerably. Articles like this make the news because they're fighting the myth that the young and healthy cannot die from it.
Interesting. We solved the problem of file management and versioning by having the designers use Github Desktop. Tracking files, changes, versions, commit messages, etc. is a solved problem.
Underwater avalanches are trapping microplastics in the deep ocean
Any chance of this patch making it to the mainline kernel?
The current situation implies that not holding cash for 6 months and using loans for day-to-day operations was a premature optimization. Essentially corporations assumed that in the time of prolonged crises they would be bailed out by taxpayers and optimized for an extra profit for shareholders. The profit that was extracted from all taxpayers.
> Without it it could be just Blink everywhere at this point.

In what reality-distortioned universe is that worse than having a crippled web?
More like COWEED-19
I absolutely don't have that expectation. I built a comic reader app that I use on my Android tablet, which saves files to IndexedDB. I've been using this for over a year and no files have ever been deleted, even after I stopped using the app for a month or so.

If Apple provided an alternative this would be ok. An alternative such as the native file access API (still a WIP). Or a prompt so that the user can allow long-term storage. Or supporting the web app manifest so that users confirm they want to "install" a web app, granting it greater permissions.

But they've offered no alternatives here, that I can see. They've determined that client-side web apps are simply not important.
Do they take donations? I'd be happy to chip in a $1000 to help destroy these scumbags.
It's not victim blaming. It's trying to ascertain whether or not young people that don't have a health condition are at critical risk of dying if they catch the disease, which until this story, many believed they were not.

If they already have something like a compromised immune system and die from the coronavirus, then it's not really surprising. if they were perfectly healthy, it's a bit more interesting.
It takes like two weeks between measures being taken and them having an effect on the number of confirmed infections.
The existing Linux system is useful for hardware that does less than 200MB/s, so you should be fine with HDDs.

Cloudflare is optimising for SSDs.

They don't talk about latency: all their crypto benchmarks measure throughput. Near the end they hint at response time for their overall cache system but there's no detailed discussion of latency issues.

The takeaway for me is that I'm OK with what's currently in Linux for the HDDs I use for my backups but I'd probably lose out if I encrypted my main SSD with LUKS.

At the end of the article they say that they're not going to upstream the patches as they are because they've only tested them with this one workload.

I'd also be interested to see a benchmark comparing SW AES with FPU-saving + HW AES. Unfortunately their post does not include stats for how often their proxy falls into the HW or SW implementations. Whatever those numbers are, I'd expect FPU-saving + HW AES to be somewhere in the middle.
Maybe you would be interested in this:

https://www.oxygen.protofy.xyz/
If there's an oncoming car with high beams on a straight empty road I'm more inclined to speed up so I pass them by faster.
Coronavirus causes Waffle House to close 365 locations
By most of us you're referring to a minority that use iPhones?

That's a very US centric view. And even among those, most iPhone users aren't tech savvies.
And here I was just amazed from the blog post at the Windows support in cross compilation in either direction.

I find it hard to believe that someone could be capable of writing a non-trivial program but not able to change their text editor settings to use \n.
Another one:

https://www.oxygen.protofy.xyz/
Rules of censorship:

Censorship is OK when it helps making money.

Failing that, censorship is OK if we dislike the content being censored or the people posting it.

TikTok doing this is Universal Chinese that is understood all over the world. No need for translation.
> By blaming the person for succumbing to the virus

Intelligent people just want to know how severe the corona virus is, and what the risk factors are.

I can't speak for other people. :)

I was reading about the 1918 Spanish Flu (H1N1) today, and it sounds a lot like severe corona virus - blood frothing from lungs.
If you've ever looked at user analytics you know this is absolutely not true
These things used to be critical elements in optical transmission for circuit switched telephone networks (SONNET/SDH). The old "5 9's" Reliability commitment ment your Stratum clock was working across the whole ring. Now you just throw a GPS antenna on every base station !
I am just a mechanical engineer but I remember really well when they introduced three dimensional differential equations. I realized that I had hit the limit where math for me would be hard and not easy like it was until then.
The article discusses this in the conclusion:

> We are going to submit this work for inclusion in the main kernel source tree, but most likely not in its current form. Although the results look encouraging we have to remember that Linux is a highly portable operating system: it runs on powerful servers as well as small resource constrained IoT devices and on many other CPU architectures as well. The current version of the patches just optimises disk encryption for a particular workload on a particular architecture, but Linux needs a solution which runs smoothly everywhere.

That is, they think their current patch is too specialized for their own use-case to warrant inclusion in the mainline kernel without significant adaptation.
So it's not about what's best for the user but what's best for Apple? I wouldn't call that "understandable". All this is doing is contributing to webkit monoculture.
These are workarounds for a problem that shouldn't exist in the first place.
Breaking the AGPL
I don't think it's about blaming the victim this time. Instead I think it's about being able to say to oneself, "well, unlike them, I'm basically healthy, so I don't have to fear that the same will happen to me."

It's probably not wise, but it's very understandable.
I'd argue that Occam's razor would state that this article is inaccurate rather than the plethora of sources about age and pre-existing conditions.
50% of deceased in Italy had 3 or more chronic diseases
It never fails to amaze me that I've been doing this for a decade, and I keep learning things that seem basic at first glance. I have literally never heard of this at all.
Of course, I can make my backend service well-behaving. But offline first is privacy by default, which I'd argue is a better approach.
Yes -- please update. And thanks again for producing this great resource (from everyone here in my local community).
I don't know if you meant from the consumer perspective, but if my bank started telling me what kind of a phone or computer I needed to have to use their services I would definitely find another bank! I'm not sure if clout is the right word for what what banks have, it's more like a kind of lock-in because of having to sign a million pieces of paper to change banks, that makes people put up with a certain amount of IT inconvenience, coupled with the fact that usually the competition is equally inconvenient.
I don't think that's it at all. It's the 'normal' person being concerned whether they are at risk.

While lots of people 'know old people' or with pre-existing conditions, many people have youngish parent with already passed grandparents, who have trouble understanding why this is a fuss for them, since they imagine that it'll just be a cold (for them). Cases like this one are 'scary' because it shows that they might still be at risk. Which, in some sense, is good if it makes 'normal people' scared enough to actually stay home/self-quarantine.

I really don't think this has anything to do with the "US-centric mindset of blaming people for their own [snipped]".
No known pre-existing conditions.

The body is a large and extremely marvelous yet complex piece of machinery, even with self-repairing mechanisms.

Everyone is at risk even if they're healthy, it's just that the risk rates vary and for some groups are incredibly low based on the data. Knowing your risk rate is nearly impossible, but you can try to estimate based on how it effects larger subgroups of the population. That doesn't mean you're not at risk, it just means you're less likely at risk or were not measuring a risk factor you happen to be highly susceptible to.

Even run of the mill drugs have rare reactions that can lead to death. Across a large enough population and enough time, those rare reactions will occur. New unknown and unpredicted issues may even manifest.

People like to think in absolutes: I will die from this or I'm immune to this. Most of life isnt discrete (at least at our scale) and falls in some continuum between extremes.
The answer being sought is just how deadly is this virus? Knowing that helps everyone plan, and thus far, mortality rates haven't been very high at all except in very vulnerable populations.

However, should the virus mutate, or otherwise start posing a larger problem to the general public, the calculus of just how under-prepared are we radically changes.

It has nothing to do with blame and everything to do with dealing with the reality of the pandemic. Are we facing an extremely contagious flu, or are we facing an extremely contagious 1918 / Spanish flu? There is a pretty serious difference between the two in terms of preparedness needed.
Yeah, I'm mostly saving money instead of spending it and buying index funds.
What a critical story that's not been propagated yet.
Agreed. I have some friends here who are fairly certain they had it, based on symptoms. However, the hospital refused to test them because they were "young and healthy" (i.e. no underlying medical conditions to complicate things). 2 of the 3 family members recovered with no outside assistance; the third worsened, so they took her to the ER. Only then did they run a test on her.

The number of infected is way off, which will throw everything else off. You can't figure out mortality rates, infection rates, etc if you don't have an accurate number to start with. Garbage in, garbage out.
So after you try to belittle me about not understanding 4^x vs 1^x, you are now talking about future efforts, hopes how an entire medical community can be retrained, etc. Let's stay focused on the real world and not some hypothetical past where we were like South Korea. None of your comments apply to a 1^x spread in the current system since we aren't testing many people, and in hot spots, we aren't testing hardly anyone outside those in hospitals.

Here's where we agree. We agree that the only way this can be contained is massive lockdowns, and I believe this particularly true in the face of unreliable and unavailable testing. I also think it has to be coordinated across the country to prevent constant reseeding. We agree that testing everyone would've been good, particularly in the containment phase, but that ship has sailed.

My original point is that under the current system where we are occasionally testing the public at large, and also using swab RT-PCR just after suspected infected contact (way before symptoms like Pence, etc), the variable sensitivity is troubling.
After the number of times my Firefox and Chromium profiles have been wiped clean due to browser or packaging bugs it's become clear to me that localStorage is not the end-all in terms of data persistence. It's always been a "best effort" rather than a guarantee.

Browsers offer a lot of useful functionality, but people increasingly expect them to be a replacement or substitute for an operating system, and in terms of being operating systems, they're all pretty lacking. Mozilla learned about this with Firefox OS (it was pretty cool though, RIP)
I think the point is that FB could change to a contextual model. E.g. after seeing a post of a news article by Tractor Daily you would see an ad for a new John Deere.
Or, what we've all heard is correct, and that's why the first story of this type has only hit the news several months and over a hundred thousand confirmed cases into the pandemic.
This is just a rehash of this article: https://arstechnica.com/gadgets/2020/03/reports-google-lg-do...

Maybe it would be better to link the original source.
Tangentially related to underground rings: SK has heavy censorship on a lot of things: https://en.wikipedia.org/wiki/Censorship_in_South_Korea#Subj...

Details on the great content firewall: https://www.bleepingcomputer.com/news/security/south-korea-i...
Or it's correct and this person was one of the unlucky ones. The more total people are infected, the more statistically improbable deaths we're going to see.
Reminds me of the questions people make here in mexico when someone gets murdered: was he in drugs? Was he in as bad place? Surely he was onto something? Was he showing off?

Human brains have to justify things to try to disassociate the bad events with their reality. It is difficult to accept that calamity is very close to them.
Bernanke: Coronavirus ‘much closer to a major snowstorm’ than Great Depression
On top of what others have said it protects, for example, from governments of all countries you have servers in and their law enforcement coming in taking the servers, extracting keys for mitm, installing malware and backdoors, placing some child porn on the servers, etc., from staff from various companies in various countries that maintains and deploys the infrastructure or just has access to it doing similar nasty things, and so on.
Spending money on healthcare would have helped. Actually would help now currently in the us doctors and nurses are complaining about lack of protective wear. In reality it is available but hospitals are not buying and providing them to it staff as they are expensive. Had US been investing on healthcare hospitals would not be worried about running out of funds and not protectings its doctors and nurses.
On the other hand, there is evidence that some of the patients die due to an excessive response of the immune systen: https://www.vox.com/2020/3/12/21176783/coronavirus-covid-19-...
And here I thought that it was Common Knowledge that gang members were young and stupid. Looking at this .gov site I just found [0], it appears that 30-60% of gang members are under 18, and I imagine the remainder isn't going to be over 30.

So maybe criminals in general wouldn't be younger and healthier, but there's a really strong chance that gang members are - and it would likely be gangs running black markets anyways.

0: https://www.nationalgangcenter.gov/survey-analysis/demograph...
It's not about metadata or "web games". It's about apps/games that can be used offline. For that to work, all the data needs to be stored client-side.

> My browser storage is not a game developers long term storage, its a cache.

IndexedDB is explicitly not a cache, it's long-term data storage for significant amounts of data.
The pedant in me says technically the name of the virus "SARS-CoV-2" but lots of people are referring to the virus by the disease name of "COVID-19". Maybe that's why?

The pragmatic side of me says "Yeah, what the heck. It's clearly known"

Edit: Rereading it, the quote is directed at people who are skeptical of it's existence. So it makes sense in context.
It seems that anecdotal evidence of young people dying of COVID-19 is the trend of the moment. Not sure if it's just cheap clickbait or the goal is to make younger generations to actually care about social distancing.

The deal is that we are dealing with the power of large numbers. You can cherry-pick whatever case you want to fit your narrative. It does not mean its relevant information.
> If 1% of that 60% die, as will happen with COVID19, that's a lot of deaths.

I remain astounded by the level of certainty people can have about things which they barely understand at all.
Does it really matter? What is the difference between propping up someone's retirement fund and giving them the money directly?
>Pixar's Wall-e.
This is such a great way to describe the cruise crowds - really captures the commercialised, tacky, pseudo-luxury essence of cruises and their bovine patrons.
Using a plugin for OBS (Windows at least), you can absolutely output to a virtual camera, and use all of the compositing, filters, scenes etc in OBS. You don't get audio output, but you could probably solve that with a virtual audio cable. I do the video thing with Workchat and Bluejeans without issue, and just use my headset for audio.

I currently composite a view of my local harbour, my webcam, and a chroma-keyed nyancat gif, with a second scene for full-sized webcam. Works a charm, and actually uses less CPU that Chrome does when Chrome is routing that video to the VC.
Why Half-Life’s City 17 was pivotal to gaming’s post-Soviet obsession
Wasn't meant to be
For those not aware, Waffle House is so well-known for keeping its stores open in all kinds of disaster situations that there's even an index based on their closures used by FEMA [1]. Closing this many locations for any reason is unprecedented and speaks to the severity of the current situation.

[1] https://en.wikipedia.org/wiki/Waffle_House_Index
Mammal study explains 'why females live longer' (BBC)