skysight-inc/HackerNews huggingface dataset:
U.S. Senator Says Zoom Deceived Users over Its Security Claims
It's definitely not about the hardware, given that the iPad has. mouse/trackpad support now. It's about the software.
Ok, thanks. I'll try to remember that if I get around to trying OpenTTD again at some point.
Sounds like ready player one before the contest. When did it come out?
Promoting MyDef: https://hz2.org/blog/mydef_general.html.
This is lovely to hear, I'm so glad it was helpful!
Ideally yes. However, the quality of the books, and the reading space provided by libraries are largely dependant on government budget. Those would be nice if you live in big cities. In a small ones? They really depends.
I've been learning Rust. Reading "The Rust Book" and "Rust By Example" gave me a similar feeling as reading this blog post.
That may have been the 'second code' referred to as a typo by the article, but was perhaps the standard 2fa token that came in after the original password change token? Nice catch.
Mashinky is (way) more casual than OpenTTD but it's a really nice game made by a solo dev.

The vibe is similar though and you can even take a break and ride your trains. I strongly recommend giving it a try.

https://mashinky.com/
We had quite a few old Rails 3 apps at work and had to create a gem to make sure this change didn’t break them - when they start rolling it back out it might be helpful for folks:
https://github.com/concord-consortium/secure-samesite-cookie...
US accused of 'modern piracy' after diversion of masks meant for Europe
Apple introduced Apple Arcade because of the horrible state of games on the App Store.
I've been curious on this. Do you have numbers for people that have been put on them?
Clean-room reverse engineering doesn't require that. If someone were to read the existing drivers and write documentation explaining how the hardware appears to work, that documentation would be unencumbered, and a freely licensed driver could be written based on that documentation. The only methodology that would be questionable would be a developer writing a new driver while referring directly to the vendor driver.

To put it another way -- the IP protections on the current library are a matter of copyright law, and the protections are on the code itself. The facts of which bits do what -- which are embodied in that code -- are not protected (or protectable!), and can be reused freely.
I really recommending upgrading your internet connection.
So “real software” is just development software?
Why I'm building a new async runtime
Zoom went from being a sort of innocuous alternative to Hangouts to being the most scrutinized piece of software in a matter of weeks.

Glad to see people digging into the security of these tools.
I'd ask your company if you can expense a mobile hotspot.
I work for a large multi-national media company, and we've been using BlueJeans for video conferencing for the last few years. It's been very reliable, but I haven't heard of very many others using BlueJeans. I'm curious if the security issues in Zoom vs its competitors more have to do with the amount of people using it and putting eyes on it.
On generic traits and associated types in Rust
Of course, by that standard, someone with an iPad with a keyboard attached (the ones that are part of a case/cover) could just as easily consider their keyboard "permanent".
Except the search space is much, much, larger.
At least in my country, publishers get a bigger cut when you buy your books in indie/local than amazon. They demand bigger discounts, are relentless with penalties, accounting maneuvers and all sorts of schemes to undermine payments, and authors get the same royalties whether the book is sold by amazon or other channels. So, yes, it makes a difference.

Please support your local bookstores and your indie publishing houses.
I understand and agree with your point but I think this site overvalues CS graduates by a lot. There are bright minds everywhere, doing math, physics, literature, medicine, law and a long etc. That "some" minds, because of greed/need-to-subsistence or whatever the reason choose that path is a shame but hardly a loss in the great scheme of things. Most intellectual pursuits are already fiercely competitive as it is.
Startup Is Trying to Ease the Ventilator Shortage in Hawaii
And my argument is if I know the video encoding and compression sequence, I wouldn't depend on AES-ECB. I know the patterns that show up.

If I am encrypting something, I only want to depend on the strength of the encryption. I don't want to hope that something else ensures that an adversary cannot figure out my ciohertext. That is a very bad idea.
Exactly. All they had to do was send the full, nuanced message rather than treat the public like toddlers who need to be lied to and told fanciful tales in order to be kept in line. They may have directly killed people with this "noble lie". It's truly disgraceful.
UI Driven GraphQL Design
> 3M said the administration had also told the company to stop exporting masks from US production sites to Canada and Latin America. The company said the demand raises “significant humanitarian implications” from stopping shipments intended for healthcare workers, and warned it would backfire by triggering retaliation from other countries.

Watch the future unfold, there's an idiot in the president's seat :(

What if other countries would do the same. Although the masks are produced in China, they do it with German machines.

Germany could do the same when they ramp up production and ignore the US because of previous stupid behaviour.

Dumbest action of any president ever.
> I haven't heard of very many others using BlueJeans

I'd think more eyes on Zoom right now will be better for it in the long run. Anecdotally, security aside, I've found Zoom to be about one step ahead of BlueJeans in pretty much every way.
I don't know how much free time they have over there, but snooping in on courses that a relative outside the country is taking and storing all of them... I mean, if you want to peg someone's social credit score, just stakeout their house and wait for them to spit outside or something. Hell, just make something up and dare them to come argue. Why go to all that effort?
The future of mind control neuron like implants
Personally, my policy is not to talk on the phone except with people who are close to me. All of the people who are close to me know that I prefer not to talk on the phone. Ergo, anyone who calls me is not someone I want to talk to.
> However, the quality of the books

I think in most library systems you can demand literally any book you want that has ever been published in the modern age and have it delivered to your local library. They often don't advertise it - but ask for it.
Perhaps, but I think it's more likely that the only feasible option was to use VBA with excel, and excel is the "default" spreadsheet application used everywhere. It nearly the same reason why JavaScript became the default front end language thanks to Netscape, which was the "excel of browsers" during the dawn of the internet.
Protein capable of blocking novel corona binding discovered
https://en.wikipedia.org/wiki/Onavo#Facebook_Research this should provide some background; this is the software referenced in TFA. Facebook bought a massively popular VPN service specifically to monitor their users' web traffic and app usage.
It’s a good thing they’re trying to break it on the ground, PR be damned. Better they than hiding failures like Boeing
Free alternative to Zoom with no central server
> authors get the same royalties whether the book is sold by amazon or other channels

If the authors get the same, what's the problem? Everyone else is a middleman.
Designing a New Old Home: Part 2
I'm not sure you've followed OP. It could well be the case that his workplace and school activities are communicated via WA. His "playing dumb" results in him cut-off from valuable information he actually needs.
Interesting idea, thanks!

I tried my cell phone's hotspot the other day and it was actually a little better although still unstable. I imagine a one of those hotspots specifically designed to provide internet would be better, I forgot those existed. Will do some research on the different options!
Commercial Roofing Tucson Az
We also need to adjust for the supply of gold available at the time, which I would think is much less than the amount available now. That way we can estimate a reasonable percentage of global wealth. Though it's still a guess, since gold buying power fluctuates and then we are back to trying to estimate a basket of goods ala CPI.

Also, this guy is a G and reminds me that my life has no meaning. Or at least less meaning than a dude who rode a chariot and chucked spears at dudes.

Edit: Oh, looks like he didn't even chuck spears, just raced. I assumed gladiator for some reason. Didn't even know this chariot racing thing was a big deal. Interesting.
Make sure to check the Specialty Coffee Association of America's Water Quality Guide first. In there they explain what the differences between waters with different TDS levels are for coffee brewing and its taste. They also used destilled and deionized water.
Do you not see how terrible of an analogy that is?
If two friends both had that policy, it'd be a standoff. They'd never get to talk on the phone.
I'm CTO at a startup here in Brazil. I'd love to chat with you guys about potentially being a beta user of your platform. Let's connect!
Out of curiosity, what guide did you follow? I followed the docs right on github for synapse, and it was pretty easy. That being said, It was awhile back, and it looks like they've updated the synapse guide.
I've used BlueJeans extensively and I completely agree. I believe that it doesn't have a free tier though and this limits its adoption.

I also do not believe that it claims to have E2E encryption or anything like that.
A personal productivity framework for the obsessive
Except waiting rooms have a separate security problem https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto...

HN thread https://news.ycombinator.com/item?id=22768494
Doesnt go exactly like that. More like: CCTV captures someone going to an area where known rebels or political activists live. (Look up videos on chinas face recognition, its insane.) Police decide to look through the person's zoom meeting transcripts, making a search on certain keywords. They find evidence of rebellious activities, and order further surveillance on the individual or arrest them.
Internet 2030 [pdf]
The author is Rob Griffiths of the venerable Mac OS X Hints (http://macosxhints.com) and Many Tricks Software (https://manytricks.com/).
Coffee is actually not supposed to be bitter and has more aromatic compounds than wine. The bitterness in commodity coffee comes from overroasting and overextraction.

https://sca.coffee
Coronavirus may be most infectious when symptoms are mildest, small study finds
The Covid-19 Recession May Not Be as Bad for Landlords and Owners as 2009
I know that math can be challenging for some, but I'll try to help you through this. Say we follow the Kundert Methodology. Intentionally get 100M people in the US sick in over 2-3 weeks. Of those, approximately 15% are requiring hospital care. 15M people. Guess how many hospital beds we have in the US? According to the American Hospital Association, we have roughly 900k beds. So 14.1M patients aren't treated. Not good. Leads to complications, and a higher fatality rate. Additionally, 5% of those infected require ICU. That's 5M patients. We don't have the capacity to handle 10% of those cases. Because we've crashed our medical system, 4.5M Americans just died.

So at the end of the day we have the following:

4.5M dead.
500k with long term health issues

And this ignores the fact that we wouldn't be able to keep at risk "and any scared people" in a safe isolation. Inevitably, a decent percentage of them would get infected and have worse results.
We've built this "masks should be saved for healthcare workers" strawman ourselves with bad policy.

Masks should be plentiful. Citizens wearing masks also saves healthcare workers!
The latter, and while agree, it doesn't equate to being f'd
Be the change you want to see in the world, open source doesn't work off magic and candy.
Who are you hoping picks up this little unit of opinion? Are you hoping to see it quoted, or just vaguely referred to as "growing discontent" and know that you were in there?

Such a strangely extreme viewpoint to suddenly jump to.
I'm in the USA. He paid us for some work up front and agreed to pay the rest on delivery of the key. He expected to spend most of the $100K he'd budgeted on GPU costs, so we got much less than that for the work; we took the job because it sounded like fun. We didn't need the information in the archived files, just the encryption headers, so he set most of the bytes to zero. I couldn't have spent the coins even if I wanted to.
Huh. That's actually pretty close to the naive approach I used in Foldit for some of the earlier coronavirus puzzles. Take the protein the thing already binds with, and just swamp the bloody thing. Wasn't terribly great scoring, but I got it above the the threshold for the cellular receptor.
I was sent a link for them about a month ago. On Mojave the app kept crashing. I couldn't figure out how to join via the browser, so we switched to zoom.
I'm not sure I understand what your opposition is to at the same time keeping employees above water, and preserving their place of work. It'd seem to me that it's the _workers_ who are getting a bailout here, by design, not corporations. In fact companies with more than 500 employees or above certain revenue threshold aren't even eligible.

The OP is railing against corporations (such as e.g. Boeing) which he/she think are getting trillions for free on taxpayer's dime.
He actually tried that without success.
Wait they’ve patented the use of this drug to treat Lyme disease? That’s something you can do?
I'm pretty sure the GP was referring to total team size, not the number of participants in any particular conversation.
bookmarked for later use
You might want to read OPs's CV before dismissing his brightness
Please abide by the guidelines in your comments.

> Be kind. Don't be snarky. Have curious conversation; don't cross-examine. Comments should get more thoughtful and substantive, not less, as a topic gets more divisive.

When disagreeing, please reply to the argument instead of calling names. "That is idiotic; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."

Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.
levels.fyi.

Unlikely OP earned only $300K/yr
Of course if we had a vaccine for Lyme, which already exists for dogs, this wouldn’t even be necessary, but hey, cures are more profitable than prevention...
It wouldn’t make sense to build on top of TCP— a protocol which achieves reliability through packet retransmission.
Had to squeeze in th PhD after

> Biosimilarity, LLC: Partner. February 2013–May 2014.

Developed a decentralized massively scalable database based on the π-calculus
and a secure distributed social network
At 1200 sest. per year, a 3M sest. villa would be 2500 years of labor.

A $7M villa, on the other hand, would be only ~230 years of labor for a US solider paid $30k a year.

A pound of pork at Safeway today is ~3/lb. 100 pounds would be $300, which would be quite a meager yearly pay.

My main takeaway is that pork has likely gotten much cheaper, but not seaside villas.
> donate them

I’m predicting that if you want to donate, you should donate directly to front line workers, since a hospital wouldn’t use masks of unknown origin, and I’d be concerned about thefts and scams from charities. Anyone who really needs them will just accept a donation gratefully, and can share with others on front line.
https://tools.ietf.org/html/rfc7234#section-4.2.2

Since origin servers do not always provide explicit expiration times,
a cache MAY assign a heuristic expiration time when an explicit time
is not specified, employing algorithms that use other header field
values (such as the Last-Modified time) to estimate a plausible
expiration time. This specification does not provide specific
algorithms, but does impose worst-case constraints on their results.

The standard does not say what heuristics should be used, so Firefox’s heuristics is no more “legitimate” than Chorme/Safari’s heuristics of expiring immediately when Content-Dispostion is present.

“Firefox legitimately treats...” is highly misleading, making it sound like Firefox is more standard-compliant, but it’s not; it’s just different.
who cares? oh right.. 3% user share; nobody
This article is a) very long and written mostly as a whitepaper/opinion piece and less of a journalistic report b) it's very likely a paid hit piece against bug bounty companies.

However, I'm not surprised as the timing makes sense. The COVID-19 situ has impacted a lot of pen-testing firms [canceled testing contracts/security staff augmentation, longterm security audits] and it's expensive AF for these companies to keep their consultants on bench.

Bug bounties are by no means perfect, but whatever this article is trying to point out isn't going to stop CISO's from doubling down on bug bounties. In fact, CISO's who've been skeptic about BBs will be now be pressed to explore this option even more.

About Me: Sold a few security startups, before that worked as the head of app sec testing for a bailed out british investment bank.
OP actually did a lot of bright minded work on the side of the Ads stuff.
Coinpayments.net – Bitcoin and altcoin payment processor
Could you disseminate free thought with a website if there were but two massive corporate hosts?

Does it matter if anyone can be bothered to interact with your free thoughts, or only that you're free to post them?

Perhaps it is sufficient that we're all free to shelve our free thoughts in the closet?
They got in trouble for embedding IE4 into Windows and supposedly eliminating user "choice". Now nobody will care if they do it again.
A ”Final” Security Bug [pdf]
The dirty secret of database engine development is that all the things that are hardest to do in the database proper are super-easy to do in the application, given a few judicious architectural choices; but despite that, nobody can count on app writers to do them right. So, DB engine developers have to bust their humps to cover for users' incompetence.

A database for competent users can be amazingly simple and fast. But the Market Has Spoken, loud and clear: databases must absorb an indefinitely large amount of complexity to make the job of app writers a tiny bit easier.
There's nothing unfairly wrong with Google Ads. It's the trackers that are bad.
I'm curious why the same tricks can't be used on discarded multiple values?
Hopefully they do this for existing users as well. One of my fellow teachers' classes got bombed today even after we were all sent instructions about securing our meetings, enabling waiting rooms, etc.

She didn't follow the recommendation because she "didn't think someone would join" because she hadn't posted the meeting link on social media. You have you protect your users that won't protect themselves.
And it's allowed to treat it differently than the other browsers. That's what "legitimately" means. And that needs to be pointed out, because Twitter was very careful to avoid saying it wasn't a Firefox bug.
I bought a book on bookshop last week. It was $5 more than on Amazon, and bookstores got $1.80 from my purchase. I should have just bought the book on Amazon and mailed four dollar bills to my local bookstore—everyone would have come out ahead.
and look at that... haha
At my university that was explicit policy. If you needed a book for academics and they didn’t have it, they’d order it.
That little animation was put there by the guy who hired me. We got rid of it in the Password Recovery ToolKit that combined all the modules I'd written into a single tool. In that one, we had a big list of any encrypted files we found and their passwords. With enough modules, it was entertaining enough to watch the list grow. And it was very satisfying when the user reused a password on something trivial to crack that let us open a Word 97 file.
You say "The issue here is precisely is about recalling the syntax of a low-level approach, not whether you understand it conceptually" and in a scenario where an interviewer blindsided a candidate with such expectations I would agree, but that's not how we got to this topic.

The parent says, "Candidates were using their home computers had access to any reference material. There was no hurry. They could look things up," which is the opposite of that.

It even says they let candidates know ahead of time that's what the interview was.

I mean come on, people are on here and Reddit all the time acting like it's reasonable to grind leetcode for months to get a job, but a Saturday afternoon of studying the basics for an open book quiz on Monday is too much?
So the highest paid provincial governors were typically getting paid $3B over 18 years? Sounds kind of high and makes me rather dubious of how the $15B figure is calculated.
And I literally virtually buy things online with BTC (not drugs unfortunately)
ChibiOS' CDC works great. Don't know about licensing, but it's fine for non-commercial use.
How to trim video clips instantly without reencoding
Okay but how many people run iPads with keyboard attachments yet don't have a desktop or laptop that would be better for the purpose anyways? I'd wager few.

If that market were larger it would be catered to.
So attackers have now ~24 hours to exploit this unpublished security issue before the second stage, required passwords, becomes active.
If you click through to KCP's Github repository, the README does discuss enet.
Look into Bitpay and others. Square has it built in too. It's rare but it's around. Look for the sticker next to Visa, MasterCard. Ever head of Diners Club? Ever heard of buying a sandwich with stock shares? Me either.
I have a handful of apples and peaches bearing fruit. Yeilded 50 peaches and about 5 apples. The trees are 8 years old now, planted when they were 4.

Also hundreds of raspberry canes and strawberry plants. About 7 grape vines at year 5.

Top setting onions (walking onions). Parsnip, leaks, potatoes, lettuce, raddish, and snow peas.

Have some Wineberry and autumn olives that pioneeres on my land.

I'm hoping my 8 year old plum trees and 5 year old pawpaws bare fruit.

I'm my living room I have about 250 tomato plants, 50 eggplants, few hundred hot peppers.
You got the top level bullet wrong. KCP runs on top of an unreliable packet model (and only provides value in that model); implementer's choice as to the actual mechanism, but that usually means UDP if you want to get it across the existing internet infrastructure.
Slightly offtopic, but I always laughed at these types of animations in hacker movies. Until one day I made a tool to extract strings (mostly passwords or hashes, purely for academic purposes!) through SQL injections in SQL Server when the error message did not return anything useful. I scanned each character bit by bit and depending on the value, I would either return control immediately or delay the response by a couple of hundred ms. That allowed me to reconstruct the string bit by bit, and as new information was acquired for each character - it would change on the screen. It looked exactly like some of these hacker movie scenes... =)
I don't really know what you're trying to say.

Most independent bookshops don't solve the problem you're describing. They just buy the same books from the same publishers as everyone else. They don't create any variety. It's the same books!
>The facts of which bits do what -- which are embodied in that code -- are not protected (or protectable!), and can be reused freely.

Though given Oracle's current legal proceedings that might change...