skysight-inc/HackerNews huggingface dataset:
> Using AES in ECB mode is clearly a bad choice, but honestly it's not that horrible for high entropy data like compressed audio/video. I'm sure someone could prove me wrong one day, but it seems hard to extract any useful patterns out of compressed audio/video.

...you're joking right? The Wikipedia example for why ECB is not recommended is literally an image:

https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation

Edit: This applies to compression too. Please refer to Shannon's source coding theorem.
Compressed anything is high entropy
Thanks to Bookshop, indies stand a chance against Amazon
Right, but does robocall imply spoofed or no info? Can't they just include authentication?
58,000 businesses are about to get free money. Even if they don't "need" the money, they are cashing in on the deal.
Article dances around and equivocates. Simple answer is "no".

Whole purpose of E2EE is to assume server is untrusted, but build a secure system anyway.

Zoom can watch & read your content whenever they want to. Full stop.
The article gives an explanation. Maybe you don't believe it, but it is plausible.
I wish replacements like these would be practical, but the problem is that they all have flaws for many use cases, while Zoom just works.

Jitsi Meet is the best I've found so far, but even that has some issues — I did a quick test with myself and the Android client wasn't able to send or receive audio. It also doesn't have any notion of a "host", which is normally good, but it doesn't work for a school setting where participants can't be trusted to not kick others.
Search for images encrypted with aes-CBC. This is pretty much the definition of rolling your own crypto.
One thing I don’t understand is why Zoom is more popular than Jitsi. Zoom charges a subscription fee for meetings longer than 40 minutes, where Jitsi is free for unlimited use. What does Zoom offer that Jitsi doesn’t?
These two options for saving the economy: corporate bailout vs social safety net essentially correspond with belief in trickle down vs Keynesian stimulus. Stated even more bluntly, it is essentially whether you believe customers or assets are most important for business.

It is why the current path begins to resemble 1929 where consumer buying power spiraled downward. If the social isolation period ends with millions of consumers cashless, and in debt then there will be no one for businesses to sell to. In this cases, businesses would have to use any bailout money to employ people unnecessarily for the months it would take until consumers have spare cash: The months of paychecks it will take for them to pay outstanding mortgage payments, back rent, personal loans, credit cards etc plus interest on those. Bailing out consumers/employees avoids this convolution, does not assume that business will act in this uncharacteristic money losing way and, avoids extra expense/risk since consumer loans are higher interest rates/risk than government borrowing.

Furthermore, the trend away from brick and mortar toward online consumption may be enormously sped up by this social isolation period. In this case, many of the businesses bailed out will never fully recover. Consumer spending power is a much better way for the market to evolve than a government guessing which companies are will be viable at the end of this.
I'm actually not sure - that's a good point. The whole point of compressing audio for video conferencing is to preserve human speech, so things that produce radically different waveforms but "sound the same" to us might show up as patterns. I guess it's better to avoid the question entirely and use an appropriate stream cipher!
Bluntly, your "us or them", your (or at least your candidate's) "they're a basket of deplorables"... yeah, you're contributing to the problem.

What this should be teaching you is to not write off people that you don't agree with. They're still human beings. They're still Americans. You think they're wrong, and that's fine, but regarding them with contempt does not make it easier to persuade them to agree with you.

You may say that the contempt originated with them. You may be right. But be better than them, not just like them.
Windows version of Zoom is vulnerable to attackers
Fringe theories generally can't be conclusively disproven, so if that's your bar, it's an unachievable one. E.g., are infectious diseases really all caused by evil spirits? Maybe! Might it also be miasmas? [1] Could be! But now that we have ideas like "bacterium" and "virus", we we don't need those models to explain and treat diseases. So the "evil spirits" has mostly (but not entirely!) faded, and I think miasma theory is wholly dead.

Another thing that has faded away is the 1970s notion of ESP. E.g,, consider the history of Zener cards, which had at least two waves of popularity: https://en.wikipedia.org/wiki/Zener_cards

In the 1970s ESP got a lot of attention. As did things like remote viewing. There was a definite fad for those concepts, and there was significant academic interest and funding. But nobody had any replicable results, so it all faded away, just like the UFO craze did.

And sorry, but as I said, I have no interest in Radin's work. As I said, you haven't grappled at all with the long history of fringe-science failure and the many commonalities between the failures. If you can't do that, you can't say why Radin might be different from all the similar guys I wasted time on in the past.

[1] https://en.wikipedia.org/wiki/Miasma_theory
I genuinely don’t know: how common is it for an American that lives in a home (rented/owned/subsidized) to not have a hotplate, fridge/freezer and random assortment of plates, cutlery and pots?

Rentals usually include appliances in N. America.

Thrift store are usually full of small appliances (people shy away from used blenders or used kettles), unmatched cutlery and plates. Pots may be harder to come by, but a large and small one covers most use cases.

Used appliances are usually cheap because of the upgrade treadmill. I understand that coming up with $150 for a fridge or $25 for a hotplate. Maybe we need a better system for those capital costs.
if the compromise made by congress is that it should not cover 100% needs, then the program is supplemental by definition. it doesn't matter what each party would prefer the program to be, only what is passed
I remember even 20 years ago, it was guaranteed 2 and for certain cases ppl would get an after school meal.
There are several virtual whiteboards to choose from
I wanted to be productive this weekend. Shit
ShareMyCheck
I think it's more interesting on an openttd server, because you're competing against other players, so the graphs inform you about their actions and how well you're keeping up with their economy.
Could not wearing a mask also be a civil crime? Could I be sued by some nut that managed to get video of me going into a grocery store without a mask? Who wins? Would people be likely to settle to avoid the hassle despite being unable to prove I infected them? Has this already happened?
Should you wear a face mask? Here’s all the data we have
I must be very naive, but I also don't understand why general lockdown has to have negative consequences. Couldn't we stop most non essential activities for a few months, feed everyone in the meantime (thanks to the work of essential workers), and just start again exactly like it was before the shutdown?
That article is now being discussed at https://news.ycombinator.com/item?id=22768494. Not sure whether to try to merge these threads.
Ask HN: If you were a small yoga studio, what would you pivot to?
I help out at a few yoga studios and I am worried.

They started streaming online classes and trying to charge a fraction of what they usually charged for classes and that is not working out.

We put on a live streaming class this morning and asked for a donation of $5, I made the payment experience seamless, and the streaming video quality was great.

We only received a single $5 donation... from about 20 students who practiced... which is a decent number for our smaller studio.

Worst of all we now find ourselves in direct competition with hundreds of other much more professional online yoga/fitness streaming services. Like yyoga who only charges $8/mo for hundreds of pre-recorded yoga classes. Or glo.com who charges $18/mo for thousands of pre-recorded classes of all kinds.

The studio owner has negotiated the studio's rent to be cut in half for the next 2 months which is great!

However, the studio wasn't profitable to begin with, and the owner is being forced to eat 100% of that rental cost out of her own pocket.

Yoga teachers are not employees, so at least up here in Canada, there is no help from the federal government to give money to yoga studios to subsidize employee wages.

That's another discussion in itself, yoga teachers should definitely be employees with full health benefits imho but they're not and here we are.

Case in point... we have a group of 10 yoga teachers all teaching for free, a small staff of energy exchanges who work for free and are currently helping setup the online streaming classes, and a studio owner who is left footing 100% of the bill for rent... with the occasional $5 donation being thrown her way.

This is not sustainable.

The teachers will get tired of it eventually, and the owner simply can't afford to shell out the entire $2,000 check she will be getting from the government (that is meant to cover her food and living expenses) paying rent on the studio building.

What would you do?
The article is quite direct: key directly sent to client in USA directly from a server in china. what is unclear?
Right, but I'd also say that where E2EE is not available, there is a strong incentive for companies to go with something self-hosted rather than SaaS.
Here in the US, we don't generally have unlimited data, but have unlimited phone minutes.

Also, cell audio is much more reliable than cell data.

I call into meetings with my phone all the time. Especially when the meeting is an emergency, and I'm not home (obviously not applicable now).

It's a lot easier to pull out a phone and dial a number than to find my laptop, set up the hotspot, fire up the videoconference software, and then worry about running out of hotspot data in the middle of the call.
I live in Western PA and work with people in NYC. Hard to quantify this, but I felt about a week behind New Yorkers in getting serious about it, and about a week ahead of people around me.

Gotta be harder to not see it at this point, but don't count out the inability of people to comprehend big stuff that doesn't happen in their backyards.
Yeah, 28x the engineers for research at Google makes sense -- I'd say the work Google is doing is at least 28x more expansive, complex, etc. 700 engineers is quite a lot for a company of this size!
Websites to Make Money Online for Free
>or if you think that blacks make for better jazz musicians.

But it isn't racist to suggest that they may be better sports players, right?

Look, none of what I'm saying justifies discrimination against individuals, because we are still dealing with probabilistic distributions. What it does suggest is that inequality of outcome can be explained without resorting to racism and sexism. Further it suggests that our goals of gender and racial parity in industry cannot occur without some penalty to merit, which may be worse for society.
New York is merging all its hospitals to battle the coronavirus
Top+5+cheapest+Android+WiFi+portable+projectors+(2020)+-+Reliable+Sprout
It's actually incredibly easy to print money early on.
Take a loan, build 2 airports reasonable far away from each other in the larger initial cities. setup 2-3 planes between them. Wait 15 minutes -> money printer.

Money earned is based on distance and speed. Planes are incredibly lucrative in the early game.
Apple: "let it rot until it dies"
Google: "just kill it and put it out of its misery"

I wonder what results in these dissimilar approaches? Are these cultural? are these youthful company versus decades-old bureaucracy?
On a side note, I find crazy this obsessive-compulsive behavior to use `const` everywhere in modern JS codebase (even in Webkit now).

It solves really no problem (I mean, Python, Ruby and almost all other programming languages are doing fine without preventing against variable reassignment, and we can still reassign function parameters and object properties in JS).

So much brain power wasted on this useless thing.

Also using `const` everywhere is semantically misleading and ugly. It's not what you would expect in 99% of other programming languages out there.
It's definitely a terrible choice for uncompressed images or video. I'm arguing it probably isn't that bad for highly compressed video. That being said, if you're encrypting any data stream you should use an appropriate stream cipher.
Can you be more specific about the peculiar way in which CL manipulates the stack? Where to find more details about CL internals?
And here is one reason why they should not exist:

https://www.wsj.com/articles/oregons-coronavirus-education-l...

The Oregon teachers union is blocking student transfers to online charter schools for fear that the students will remain in the charter schools and won't return to public school next year.

It would be much better if we instead broke down the barriers to moving between jobs like portable healthcare benefits so companies have no leverage to keep employees around and employees can easily change employers if the employer doesn't treat employees fairly.
That and people have completely switched to MDMs to provide a lot of the old functionality that macOS Server used to provide.

The popular ones for macOS are Jamf and Mosyle. There are some other ones as well that are more cross-platform oriented, but both Jamf and Mosyle more or less cover the features that macOS Server provided for administration of a set of devices.

Tbh, I don't think Server was popular as a NAS service ever. The only thing I've ever used Server for was managing devices.
Not much surprises me about Facebook any more. The leadership is tone deaf.
> It was part of Operation Plowshare, a program designed to find peaceful uses for nuclear explosions.

I don’t know how that would ever be possible.
>Companies get a bailout based on how big the fallout is if they fail (lost jobs, lost value for the economy, etc.) or how much value is expected they'll bring if they're saved

It's more like, they get bailout based on how big they can convince lawmakers, in an environment of little public debate, that will be.

I know, it sounds like a nitpick, but sometimes the distinction is big.
OTTD hat UI scaling and font scaling for HiDPI displays. Just need to enable it in the settings.
What your schhool didn't told you was that if you have super sized credit card, you can make friends in government and then you do get a free bailout provided you have few minimum wage workers you can threaten to layoff.
Zoom made a lot of features like passwordless meeting links and join-by-phone the default, most likely to help with early adoption. Now they are working on making them optional and even making some runnable on-prem. I think thats fine if you let users opt in and clearly explain the tradeoffs. But it was risky to make so many security tradeoffs in the name of ease-of-use. Somebody at Zoom has the fundamental belief that these services are over complicated but lacks the empathy of having been a victim of a major hack.
There are very few physicists who don't know how to program.
You can, albeit 70%+ retail businesses no longer exist and their former employees don't have jobs.
There's a bit of a gamble that your planes will crash though.
I think it's more like metal fatigue, so Mountain Rock Fatigue Syndrome might be more appropriate?
This is an interesting concept. Fulfillment is handled through wholesaler Ingram, which works if the book is in Ingram's catalogue, but not for titles gathering dust on the shelves or in a back room.

Also, my experience with shipping via Ingram is it's slower.

Certainly not an Amazon (books) killer, but it certainly gives an option to indie bookstores which can't bother with their own website.
For folks who read the release notes for Safari Technology Preview releases, you'll find no surprises here:

> Changes in this [13.1] release of Safari were included in the following Safari Technology Preview releases: 90, 91, 92, 93, 94, 95, 96, 97, 98.
I don’t feel like time is the major issue. But fridge/freezer space definitely is.

You can prep in bulk and fridge/freeze, but you need that space to do it.

Then again, I’ve been eating a lot of rice, dried pulses and stew of whatevers left/on sale lately.
Was this done in the interest of convenience, as most Zoom appologists have been clamining?
Stockmarket is like 25% below its ATH weeks ago.
Depends on the compression. Lossy compression discards a lot of noise vs the signal we care about and would in a sense reduce entropy.
Disappointing, but makes sense, thanks for sharing.
I haven't read any of his work..but surely there is some aggregate voice made up of the shareholders right? Do you think the shareholder votes are meaningless?
DEF ÇALAR, Oynar Bambala AYI
The Tor project. Millions of users who care about their privacy or live in oppressed regimes rely on it for unrestricted access to the internet.

https://www.torproject.org/
Yes look at it, Cuba has the best public health service and the lowest child mortality while in Chile people flee their college debts and there is no public health system. Nevermind the thousands of tortured, murdered and kidnapped children caused by the US baked dictatorships.
This is the job I want. If you're absurdly wealthy and have an estate in the greater PHX area, would love to offer my services. I have my own druid robe.
I once developed a tiny single-file bash script to do dumb string substitution for arbitrary files and arbitrary strings, and I used this exact Lua mechanic to avoid escaping issues if the delimiters I chose collide with the syntax. It's a pretty great mechanic.

My script is here if you wanna check it out https://github.com/luizberti/templ
It made me quite happy to be able to leave the meeting entirely. Do you think you could turn this into an Ad-hoc D&D dungeon so that when you leave, you could take a party out into the rest of the "office" and fight mutated paperclips, overstuffed file cabinets, and disorganized supply closets?
What about Mashinky?
Sorry :)
I wonder what it would be like (in a fantasy scenario) if everyone had their needs provided for at a basic level, and they could choose to spend their time doing whatever they felt passionate or curious about.

For example, some people might learn to play one or more instruments; others might become gardeners; others painters, tinkerers, makers, hackers (as in builders), cooks, and so on. I don't believe most people would just sit on their asses and do nothing. Some people really enjoy business and trade, and they would probably just work on creating some kind of business that they enjoyed (like procuring and selling high quality lamps!... and eventually designing their own).

We know that people tend to work harder at something they care about. So if we all got to work on things we cared about instead of what was available or what paid (or paid best), it's fathomable that society might have a higher and higher quality output.

It's impossible to know since we can't really test it, but I like to imagine that scenario.
These types of pleas to emotion really should be saved for other social media venues like FB, Twitter and Reddit.

Defend your position with facts instead of ad hominems (e.g. "you are the enemy").
That's the average per recipient. The average per household is higher.
I agree completely. I wasn't trying to make any judgment in my post though, I was just acknowledging "barely put a dent in our military budget," because my math assumes the extreme case that every American takes the $5/day.
The original report is from Vice:

https://www.vice.com/en_us/article/pke9k9/facebook-wanted-ns...

"The Facebook representatives stated that Facebook was concerned that its method for gathering user data through Onavo Protect was less effective on Apple devices than on Android devices," the court filing reads. "The Facebook representatives also stated that Facebook wanted to use purported capabilities of Pegasus to monitor users on Apple devices and were willing to pay for the ability to monitor Onavo Protect users."
It mirrors real life, if you believe Piketty. The more money you have, the higher RoR you get on average.
I feel bad for Zoom right now. They had a great product that people loved, and now all of a sudden they are having an explosion in usage and scrutiny.

And the worst part is that all of this scaling work will be for only a temporary increase. Once everyone gets called back to the office and people can see their friends in person, their traffic will go back down.

Usually if you have an explosion of popularity like this you at least know that your work will be going towards continued growth and revenue.

Having been on the other side of explosive growth, I can empathize with the engineers at Zoom who have to deal with this.

To their credit, they seem to have built a system that can scale pretty well given how well the product has just kept working.
It's possible some protocol issues prohibit the use of other stream cipher modes like AES-GCM. I can't think of any but maybe:

* Dropped packets/out of order packets. You should be able to include the IV/counter with the packet but maybe the protocol prohibits that.

* Avoiding reusing counters between participants - seems like you could just use the participant ID as part of the counter and avoid this

* Concerns about partial packet loss - shouldn't happen with UDP and GCM would handle this just as well

I'm trying but I can't think of a good reason to do it this way.
Loaded for me.
I don't think people appreciate how many businesses literally go into a death cycle the minute that cash flow is cut by any significant percentage. With this shut down, it's like, 90+% of revenue cut off for entire industries. This is going to trigger a series of defaults and bankruptcies that are incalculable. These SBA loans are a bandaid. They won't prevent massive bankruptcies and economic depression if these shut downs continue for any longer.
Capitalism is itself a pure unadulterated implementation of Matthew's effect. If you have capital of $X, you automatically are entitled increase in that $X. If you have $0 then you work day after day to find your share of global wealth keeps dipping. This is typically gets sold as "risk vs reward" system while the fact is that if you had invested in S&P500, your investment is practically protected by the US Army and its arsenal of nuclear weapons. The risk of your $X reducing to $0 over any conceivable long term is practically nonexistant. You simply see your wealth grow unbounded without you doing anything at all. You can count of US government to get you out of ditch even though the vast majority of the population has no investments in S&P500. Sure, folks screw up as always but that's the capitalism in essence and it gets better as $X gets bigger.
Kelsey Hightower Interview
> non skippable register prompt

Trivial to skip, had you bothered to look into it, or understand how it works. Why even reply if you hadn't read TFA? What value does that have? The very definition of 'off topic'
And here's the Facebook response from that same article that you neglected to include:

"NSO is trying to distract from the facts Facebook and WhatsApp filed in court over six months ago. Their attempt to avoid responsibility includes inaccurate representations about both their spyware and a discussion with people who work at Facebook. Our lawsuit describes how NSO is responsible for attacking over 100 human rights activists and journalists around the world. NSO CEO Shalev Hulio has admitted his company can attack devices without a user knowing and he can see who has been targeted with Pegasus. We look forward to proving our case against NSO in court and seeking accountability for their actions," the statement from a Facebook spokesperson read.