skysight-inc/HackerNews huggingface dataset:
Ask HN: Looking for feedbck on the cryptographic design of my open source projct
Hello everyone,

I'm about to release the new version of my open source project Bloom[0] (encrypted Notes, Calendar, Contacts, Files…) which will feature end-to-end encryption.

I've published the cryptographic details online and I am looking for feedback by the community before launching it:

https://gitlab.com/bloom42/bloom/-/wikis/security

Any feedback is welcome :)

Best regards,

Sylvain Kerkour

[0] https://bloom.sh
A common misconception, but no, AWS AZs are not DCs. A single AZ may be composed of multiple data centers[1], and a region may incorporate facilities that do not serve a public AZ[2], or that supply other capabilities[3].

[1] They'd be necessarily close together due to speed-of-light constraints.

[2] You may infer this from S3's triple-zone replication, which is still somehow magically fulfilled in regions that only have two public AZs.

[3] most obviously, Direct Connect.
The government of Vietnam has assured everyone that their news is real news. You are fake news.
Ask HN: Post Covid Dining
What are your predictions of in-restaurant dining in a post COVID world? How long will consumers be pro food delivery before gaining confidence? What will restauranteurs need to do in order to build confidence?
Ferrite Bead
Track your cat's activity with a homemade speedometer
Automated License Plate Readers, the Mosaic Theory, and the Fourth Amendment
This URL is partially wrong, although maybe not intentionally. Clearly not focused on the technical audience.

The Xbox One uses basically a form of USB over WiFi Direct, the same trick (although an incompatible implementation of) that Logitech leverages in their not-Bluetooth 2.4ghz gaming keyboards and mice that require the dongle to work.

Newer XBox One controllers also support Bluetooth to connect to PCs and Phones and set-top boxes on top of the native Xbox One protocol. The Xbox One itself has no need to use Bluetooth for controllers, as it is an inferior protocol, and simply does not need to support it: all XBox One compatible controllers implement the native protocol.

On top of that, I can use Xbox One controllers of any revision via USB cable, powered entirely off the cable (no heavy batteries required), on everything, including the Xbox One itself. Uses a standard MicroUSB cable, no special parts required.

On top of that, PCs also have the Xbox One adapter[1] to use the native XBox One protocol on your PC, and this extends to both controllers and native XBox One headsets. Microsoft designed the audio part of the native protocol to work around Opus, as they lifted Opus usage from modern Skype for their Xbox One game SDK (thus, really damned good in-game voice chat, as good as Discord and Teamspeak and whatnot is today).

Furthermore, native XBox One headsets use the native protocol, streaming uncompressed PCM (stereo 48khz playback, mono 24khz recording) instead of dicking around with backwards Bluetooth codecs that only garble sound and increase latency. The PC adapter also adds the ability to use these headsets.

I can basically walk across my house and not drop signal on native XBox One devices. Bluetooth, otoh, can drop because I have a wireless earpiece in left ear, and my phone is in my right pants pocket.

[1]: https://www.xbox.com/en-US/accessories/adapters/wireless-ada...
All the great things said about it are probably true. It probably is an amazing package.

... But the thing I get the most excited about is how amazing the frame with the integrated lights looks.
It's very nice they have adblocker and full released the mobile browser!
We've had a few incidents of idiocy in the far reaches of the state but it soon gets dealt with.
It's weird how this reminds me of the last two years of the newest changes in UIs. I think it was Windows 10 that brought back minimalist borders (as opposed to Windows 7)? I am not sure whether I am imagining this.
People have been saying that about Sweden for a long time.
My money is on all other countries doing something closer to the swedish model when the next wave hits in winter.
That may be, but I'm wondering what the reasoning is in Sweden, not the US.
I love it. But we’ve got

man tar
Well, he did openly support a Congress candidate in national elections.
Some feedback: it's really unclear what your mission is. Your "what we do" section does not illuminate what you do:

> This is our mission – to preserve and provide perpetual access to the digital legacy of all people for the historical and educational benefit of future generations.

Okay, if that's your mission, how does "secure cloud" come into that? How will future generations benefit from my data if it's secure? Do "future generations" include the present NSA and advertisers? What's your actual use case?

There are a lot of ways this could be good or bad, and without some clarity people are going to (perhaps correctly) assume the worst (as is evident in this thread).
And maybe I’m just messier than average, but that means tidying up every little thing, strap, shoelace, etc that might be on the floor multiple times a week so the roomba can run. And lifting up my area rug because the roomba thinks any dark stripe is a “cliff” that it’s about to drive over (no way to tell it you live in a single floor unit and turn that off).

I’ve really stopped using mine for the most part, the continuous overhead of babysitting the roomba is more work than just vacuuming once a week with the cordless vacuum.
It's great, I love it! It's quite similar to this project on iOS: https://github.com/Baddaboo/ClassicKit
They even went as far as building a fake Internet Explorer app.
We are drowning in cynicism these days. Let's make an effort not to add more.
I dont know about the second part... but i'm sure glad I didn't jave illiterate trouble-causers in my class (as i did in elementary school (7-15yo)).

One such disrupter can take away easilly 10 minutes of a class hour, and 1/3 of the class not understanding basics, means the teacher has to try again and again to teach them the things they should already know, while the rest of tle class stagnates.
Deforestation solutions, anyone? Machine learning can help
Hmm yes. Could be good. We are trying to build this "study group template" library. So we are putting the notes and flashcards from our university lectures up for free in the platform. Maybe asking students to do so too for their lectures and then giving them money based on how many people use it would be nice.

It could look like this (mockup)
https://imgur.com/JVdhnco

What do you think? :)
* trans women are women
"since all news sources are government approved then there's no fake news to worry about."

"you don't have pseudo-science crap on your feed (since sharing that stuff is a fineable offense)"

As a westerner, these phrases give me pause. It sounds like Facebook has become a profitable arm of the surveillance state.
So what about all the weddings workers that cannot pay their mortgages now?
List can be edited, you can add your ad/tracker lists, remove the built-in ones. But you can't choose page elements yourself. Anyway it's really good!
I can second this anecdata as extremely accurate. Actually I can second this anecdata three times. But never again, never again.
Misinformation is nothing new and just as the amount of misinformation has increased, the amount of information has increased too. I would bet that the average citizen is better informed overall today than say 50 years ago.
I am in a similar situaiton. Really enjoyed my job until 3-4 months ago when there was a major reorg and we've gone back to the drawing board with a new product owner who is out of her depth.

It's not necessarily my career choice but rather the current working environment (scrums, daily standups etc.) and the underlying desire to make everyone as replaceable as possible although I can understand the business argument. Possibly a start up environment with some substantial upside would be better.

Our direct management layers are at best semi technical with limited coal face experience as a result I find it difficult to believe in their ability to deliver.

I won't be going anyplace for the next few months due to the virus.
Well, that's not an excuse, laws can and should change as needed.
\lambda x. 6 was also surprisingly difficult for him to guess... It simply hadn’t occurred to him that the machine might not care about the input.

One Christmas when my whole family got together, I made a "stink detector" which consisted of a USB cable stuck inside a ziplock bag. My nephews were invited to put anybody's sock in the bag, then enter some parameters (like sock color, how long since it was washed, and, crucially, the name of the sock's owner) in a GUI.

Under the hood of the GUI was a grep engine that checked for a whitelist of names and titles ("uncle" among them to be sure), and assigned those names the lowest possible stink number. Whereas my nephews of course were guaranteed to get a high value. That result was fed through a random number generator, to produce a fuzzed-up normal distribution for display on the screen.

They spent a long time varying the parameters, trying to figure out how they affected the "analysis" before figuring out it was all driven by the name.
> Don't understand how people are happy to listen to the same old stuff

When I find something I really like, I most likely will enjoy it long after. I'll listen to it a lot when it is fresh, and then come back at it every now and then.

Just yesterday I had a listen to some of my trance/club CDs from around the 2000s[1][2]. Back then that was the kind of music I listened to all day err day, but these days not so much. But a few times a year I come back to enjoy it again.

> Bandcamp is great for this

Yeah love Bandcamp, their discover mixes are also quite nice. The variety, everything from heavy riffs[3] to otherwordly things like this[4]. And the artist actually gets most of the money, unlike with CDs or Spotify.

[1]: DJ Tiësto & DJ Montana - Space Age 2.0 https://www.youtube.com/watch?v=ED9yN7lkWpw

[2]: DJ Stein H - Connected Vol. 1 https://www.youtube.com/watch?v=KsVLPQGqWZA

[3]: https://firebreatherdoom.bandcamp.com/album/under-a-blood-mo...

[4]: https://dakhabrakha.bandcamp.com/album/the-road
New data details the decline in Silicon Valley's Q1 venture activity
Just use the cli - it’s faster and more productive
This has absolutely been my experience. The minute anything weird happens or I need to do something unusual I have to drop into the CLI anyway. So I just learned the CLI. YMMV.
The whole thing is clearly an attempt at a graceful exit.

The original strategy was herd immunity. The argument being made was that Sweden was gonna get infected anyways, so better to get it out of the way sooner rather than later, while protecting the at risk. And this would reduce economic harm as well.

However, the Swedish decision makers seemed completely unaware of asymptomatic carriers, which led to the at risk (largely old people) being heavily exposed anyways due to the asymptomatic younger workers around them infecting them.

Further, the Swedish people, reflecting normal human behavior, shut down economic activity anyways.

The result was a slight linear short term economic benefit but an exponential, potentially long term, downwards public health situation whose economic effects itself will likely dwarf the direct economic benefit anyways.

So now that their plan has failed both in concept and execution they are changing their story saying that it was a Swedish cultural thing, where they trusted individual Swedes to take personal responsibility, because of the exceptional Swedish character.
> Lack of regen braking is a bit of a downer...

The mass of a bicycle and rider is relatively low, so there just isn't much energy to recover. It's not worth the more expensive motor and controller required to do it.

https://www.pandaebikes.com/regen-braking-ebikes-worth/
The global digital advertising market is some 240BN and expected to grow to like 500BN by 2024, 550M is an incredibly tiny portion of their overall earnings from digital advertisements. Google's share of that 550M, for instance, would be less than 1% of its revenue from digital ads in 2019. That's not a lot of money for either of those companies.
It reminds me of a great bit from Yes Prime Minister:
"Coffee at the University"
https://www.youtube.com/watch?v=WW7mhtp5a5E
Ah, good catch. I skimmed for the Bosch product but didn't see it the first time.
"lose revenue". Also known as financial disaster for most employees.
I don't think I'll be rushing to volunteer. Things done in a hurry have a tendency to go wrong.
I think it's changing quickly. Not sure if you remember the movie 22 Jump Street? The old guys show up at a high school to be "undercover" high school students and it turns out that the "cool" kids are who used to be the nerds. They are vegan, don't make fun of gay kids, stand up to bullies...and wear backpacks with two straps (lol).

I think that image of high school has some truth to it, as I graduated high school a couple years before the movie came out and it was already beginning to change. Kids playing pokemon at lunch were the same kids on the varsity sports teams. It was okay to like video games, and to be upset about getting a C on a test. The image of bullies as "cool kids" was changing to "kids whose parents probably never told them they love them" - and everybody knew it. The cool kids are nice now. Not totally sure if the shift has continued in the last 7 years, but it is definitely happening.
That's an even more interesting thought when you apply it to one-man bands. If the only employment is someone self-employing, then presumable the client can discriminate in such ways.

I suppose if you try to do it at scale though there are other mechanisms for calling you out on deliberately circumventing the spirit of the law.
The unnecessary lack of visible scroll bars is super annoying to me, too. UI fashions at the expense of clarity. And let’s not even mention scrolljacking...
> They want the world to be healthy, too. They don't want to endanger you or themselves.

From outside the USA watching these protests -- it's possible more weight is being given to certain (less favourable / sensible) aspects of the message they're trying to send, but we're seeing things like 'If you're sick - come along to the protest' and 'We don't want people wearing masks'.
> This might be a good time when a representative democracy, composed of people who are willing to listen to experts and make the hard, unpopular, decisions, would be the best choice.

So basically, you want a return to some form of Aristocracy?
>They justified this by citing his use of a racial slur in a YouTube video

They're not consistent with this though, Jim Sterling is in their top 50 earners and said the same racial slur in a podcast

https://archive.org/details/Podtoid/Podtoid189.mp3 @ 4:30

Not defending Benjamin, because he's said some disgusting things but they obviously only have a problem with it when it suits them.
> Intentional or not, this to me is no different from a scam.

You don't get to redefine a word and then claim it fits the definition. Scam is intentional deception, which is most certainly not what's happenning here.
There may be a constitutional or-- as it's often put in Europe-- a basic law issue. But, I'm wondering why it is that we haven't heard about a debate to change these laws.
I value integration flexibility and want to control or at least know exactly the spaced repetition algorithm I am using. Additionally, I believe a hosted service without trustworthy end-to-end encryption is a no-go for personal knowledge management. So far I’ll stick with org-drill and Anki, it works for me (not using any add-ons).
I have used broadband from MTNL (another state telecom operator) back in the day. I still rue those days.
Earth Day
Determining the next Busy Beaver number. Every time you determine one, a harder problem takes its place. And eventually the problem becomes unsolvable, as only finitely many values can be determined.
I am absolutely hopeless YouTube addict. The first review says you can set breaks compared to other blockers. I have Leechblock setup in a way with dynamic "breaks" I give myself 1,5 hours on YouTube and other blocked sites every 4 hours. Problem is I cheat myself by using the "overwrite feature to give me another 9 minutes again and again. I caught myself just switching to another browser its really really bad. How could this be different?
That is a bet quite many people would take. There are very few indications of that Sweden will go full lockdown any time soon. Something would need to radically change first.
To add more color, the top few high schools in Bucharest at the time were all highly competitive, with low % admission rates. So the student body was naturally skewed towards more academically inclined students. In a sense, if you made it in you were more or less a "nerd" compared to the general population.
So it's a ponzi scheme for cloud storage dependent on people continuing to pay to store new items in order for them to pay for their current costs.

Although the idea is to create a fund and operate off the interest. Let's look at their prices.

$1000 for 100 Gigabytes or $100 for 10 Gigabytes. Basically it's $10/GB. With like a very safe dividend allocation they can probably get a 2% annual return on their investments, which means they need to only spend $0.20/year on my 1GB of data.

They say their plan is perfect for phone or hard drive backups, and they offer continuous file migration. Let's say I completely replace the contents of my GB every 3 months. We can't use AWS S3 One-zone because they advertise "Redudant backup".

S3 Standard Infrequent access is $0.0125 per GB per month, so that's $0.15/year/GB. Maybe they can use AWS S3 Glacier although I'm not exactly sure how it'd work with the continuous migrations. That would be $0.048/year/GB which is a lot more feasible. Data ingress into AWS is free, but egress isn't. If we download our GB 4 times per year that's $0.04 in egress. There's also some costs for PUT, COPY, POST, LIST, GET, SELECT requests, so let's say that for our 1 GB it'll amount to $0.01 per year.

That means it'll cost us $0.098/year/GB for our storage service that we can only download from 4 times/year and does not give us millisecond-access to our data.

I'm sure they can find a storage solution that's cheaper than using AWS S3 Standard Infrequent Access so they still have a good response time for data, but overall it seems feasible.
> Most of the outages have been located at the intra-Asia segments between Hong Kong and Singapore, with most problems occurring in the Vietnam section, while the segment between Hong Kong and the Philippines seems to have fewer problems. The segments between the Philippines and the United States are quite stable.

If you can go thousands of miles across the Pacific and be "quite stable", and a shallower, shorter run through similar ocean floor and ship traffic conditions between HK and the Philippines suffers fewer outages than one to Vietnam, yeah, censorship seems like a pretty reasonable conclusion.
Yes. See any given posting for a federal job. Strict age restrictions are imposed universally. Federal positions should not discriminate on age.
> free money is free money

I disagree. In this case, "free money" is actually being shouldered by the entire country (including those who aren't even paying taxes yet).

Whether or not the OP should take that money is of course a different question.
Exactly. A very little of it is basic and vast majority of it simply usual development projects that you have to do anyway. This is similer to big tech who oftne claims massive expenditure in "R&D" but R part typically gets 1% and D part gets 99%. For reference NSF is less than $8B, a chump change for US GDP of $18T.
Tech jobs generally don't care, but traditional management and those tracks really care about that.

Because getting a job in those areas is about abstract abilities that can't be (somewhat) measured with code tests, technology signifiers, and tricky questions like tech interviews.

So a certain school is a "class entry cue" for such tracks.
> This combination of "Nonprofit" and "Permanent" is an oxymoron.

"Non profit" has nothing to do with it. Thinking any service is permanent is pretty naive.
At worst, some countries get communist revolutions forcing distribution of wealth. This is the path of least death.
> she was not tested because seeking testing is discouraged

Can you elaborate? Is testing discouraged by the government? Medical professionals? Social pressures? Do you think the discouragement stems from a lack of available testing kits or from a place of fear/issue avoidance?
Just about every Windows program I use is styled differently from the others.

Right now I'm running Outlook, Firefox, Solidworks Electrical, Solidworks, Skype for Business, and ECi M1. Outlook uses the latest style ribbon and flat UI, Firefox uses its own style for everything, Solidworks Electrical uses the old style ribbon UI with panes and stuff from I think .NET toolkits, Solidworks uses its own ribbon and UI theme that's unique to it, Skype is inexplicably blue with its own blue icons, M1 uses its own ribbon style and has somewhat standard controls on a gray background, with a custom tree view that scrolls horizontally when you click on things...

I also have PLC and HMI programming software. Omron CX-Programmer, Sysmac Studio, and NB-Designer, which all look different from each other and any of the other software I'm running.

I think it's harder for me to pick two programs that look alike than it is to find ones that look different.
Do you have any references about these spying breaks? This is the first I've heard of it and it is fascinating.
Either that or this is a blog post about `Things that didn't happen.`. If OP is claiming a 6 years old understands what `He gasped in astonishment at the idea of putting function machines into function machines` means then he is lying.
Reading about this I was reminded of this blog post by Backblaze when they announced they were raising their prices.

https://www.backblaze.com/blog/backblaze-computer-backup-pri...

Backblaze does do more than "just store data" but that is their core business and operational concern. Just glancing through this it's easy to see that just retaining data at scale is difficult and expensive.

> By making this decision [to raise prices] now, we are ensuring we can continue to offer unlimited backup and keep improving our Computer Backup service.

I'm doubtful that this organization could generate enough passive income through an endowment to sustain itself. They do have a chart on endowment growth relative to storage growth. I wonder if they've hit the point where the endowment return is greater than their total expenses yet.

A one-time-payment like this would seem more possible if there were any restrictions on who's data to back up and how much. You can't just look at the interest of a one-time payment and say "yup that pays for storage on those bytes indefinitely" because for every byte of storage someone paid for there might be many more that are used for free.
The 3 Stages of XAI: How explainability facilitates real world deployment of AI
This comment is far more racist than the article.

Every wedding and funeral has flowers - this has nothing to do with race.

... it is also a reflection of the declining comment quality on HN. Please go back to Reddit.
'Innovation departments' don't innovate – here's what does
But how would you go about implementing insurances for the fraud-free part?
We End Up “Confined” on YouTube