skysight-inc/HackerNews huggingface dataset:
Diginotar and Symantec ended up like Diginotar and Symantec. Even Let's Encrypt backed down. There seems to be strong pressure on CAs to not do the secure thing when they've made a mistake.
Another option for Chrome/Windows is to open a Guest window or an Incognito window, which is treated as a separate window-group.
Covid-19 impact on the Agriculture Analytics Market
>Same with office spaces. It's not like the need for office space will disappear indefinitely.

There is an arguable difference here, a lot of people were willing to WFH before the crisis, but most businesses didn't allow it. A crisis like this, forcing businesses to accept WFH, has the side benefit of doing a large experiment where business owners see whether WFH works for them, maybe even has good sides to it, but also what's negative about it.

Before, many employers were just apprehensive and would only think about this in theory. Many now see in practice what they were afraid about, and maybe they're not as afraid anymore.

So maybe office space will rebound, but maybe not. I'm quite sure in my city most office jobs are doable from home, however for meetings we might get back to some balanced level of WFH + office work. But it may never rebound to pre-crisis levels.
> For the U.S., this is a potential disaster. If China marches into Taiwan, the U.S. will be left with no advanced-node manufacturing and it will have lost the technology race.

The real disaster is the loss of untold lives defending an independent nation and full-fledged democracy.

Strong parallels to Europe in the 1930s. Looking back, no one cares much about the technology giants of that era being shut down, but rather the lives that were lost in the invasions, and the mass murder of civilians that followed.
Sorry to say, this example has nothing to do with the halting problem. Rather, I would say, it's a reformulation of a(n unsolved) mathematical problem to the question whether a certain function halts on a certain input (being "no input", as the function is nullary). Or, if you insist, we can regard it as a trivial instance of the halting problem.

An instance of the halting problem asks, given (a partial recursive) function F, whether there is an decision algorithm A (aka. Boolean valued algorithm) on the universe of inputs U of F that calculates the domain of F (those inputs where F takes a value, ie. halts; ie, A(x) <=> F halts on x, where x in U).

For any finite subset S = {s_1, ..., s_n} of U, there is a trivial decision algorithm on U that calculates S:

def A_S(x):
for s in (s_1, ..., s_n):
if x == s:
return True
return False

Therefore if the domain D of F is finite, the answer to the halting problem of F is trivially yes: A_D is a decision algorithm for F. (This has noting to do with the question whether we know D or not!)

If U is finite, then D is finite, so the answer to the halting problem of F is trivially yes.

If F is a thunk (nullary function), then U is finite, ie. the singleton set of "no input", so the answer to the halting problem of F is trivially yes.

odd_perfect_number is a thunk.
Haven't touched it in a few months, but here's a fax machine (powered by Twilio) that runs on a Raspberry pi.

https://github.com/fastily/fax-machine

I challenged myself to make the operating costs as low-cost as possible. It costs $1/mo (for the Twilio number) and a couple cents per page.
The most interesting use of my fingers for numbers and computation were for playing perfect strategy in the game of Nim (back in high school). I just represented numbers between 0 and 15 in binary on one hand by slightly bending the fingers corresponding to bit positions for binary digits.

Nim is a simple game played with coins or markers distributed into a number of piles. Players alternately remove one or more markers from a pile of their choosing. The player removing the last marker loses. The game starts with any number of piles, typically 3 or 4, and any number of markers in each of the piles.

Using one hand (and knowing binary) it’s easy to mystify opponents.
We like fwknop a lot for its cryptography implementation which can prevent MITM attacks. However, we don't like it for relatively complex client setup. (For example, there is no official iOS client).
So we built our own cheap version of port-knocking and called it "doormand". It's just a HTTP server (behind nginx) listening for a POST request from clients. If the request is valid, a new iptables rule is added for the knocking IP for 30 seconds.
It supports users with secret key (think API token) so we can knock from our workstation easily. It also supports Timebased-OTP (we can even setup so user is required to enter 2 different TOTP's when knocking) so we can knock from mobile devices.
All messages are hash'ed with timestamp making it harder to re-play attack.
It works great for us (a small team) because now we can knock over HTTPS on our phone/ipad and then SSH-connect to servers.
To add further perspective into the reply above, TSMC is expected to ship more 5nm this year than All of Intel 10nm has ever shipped to date.

Intel's current form of 10nm is roughly equivalent to TSMC's 7nm. What that basically means is TSMC is about a generation ahead.
Thank you! Feedback always welcome btw. I get my data from https://iexcloud.io/, but I plan to extend to other data sources as well, since you can't really get all the data you need from one data source.
Expanding on that substantive critique, i.e. complexity. Port knocking strips you of the benefits you get from session protocols like TCP.

- Fails when packet loss is high.

- Fails when lags make the attempts arrive in changed order

- Fails when multiple people try to execute the sequence at the same time (yes, you can track source IPs, but then it doesn't work from behind a NAT)

Agreed, none of this is a problem on a small scale. Agreed, you can work around that but it's a PITA.
fail2ban should be avoided. It does not support IPv6, so should be considered legacy software.

EDIT: Source: https://github.com/fail2ban/fail2ban/issues/1123

It appears they have moved forward a little in supporting IPv6, but it's still incomplete. It's unacceptable to not support it fully in 2020.
The rotor is upwind because the blades would be subjected to frequent jerks when they enter and leave the wake of the tower otherwise.
Right paddle controls are backwards compared to vim.
Cooking with Husband Ep. 1
It is like asking should we stop wasting world resources and set the priorities accordingly ? Yes we should. And then what ?
Port knocking is stupid. The only possible real reason anyone should have for actually using it is if they really don’t want their logs to be flooded with the normal internet attacks. Logs which the SSH daemon really shouldn’t (by default) be creating in the first place, since what’s the use? It’s like having a weather station on your roof which always says “it’s raining”, since you live on the ocean floor. It’s the internet, SSH will be attacked; there’s (by default) no purpose to logging this.

For actual security, though, it’s also woefully inadequate:

1. It adds very little security. How many bits are in a “secret knock”?

2. The security it does add is bad: It’s sent in cleartext, and easily brute-forced.

3. It complicates access, since it’s non-standard.
This is soo cool Adam! Well-done

Might consider this in the future for my local community
That was my first though, I also use "company@mydomain" sometimes. Too many to go through... if only I could get hold of my record....
Given that this is, to the best of my understanding, one of if not the only things Arc is doing.

No.

It probably could be done in the current version, just not done well.
40‰ = 4% < 15%
I presume this connects SSH clients, and serves a fake web page to browsers?

Sounds pretty cool, but do SSH clients (e.g. PuTTY need special support for it)
I heard COBOL skills are in demand these days in the US.
https://newworldfans.com

It's a website for Amazon's New World MMO that I started before the quarantine, but I have been able to work on it a lot during this time. So far the project enabled me to use and/or learn: Kubernetes, Discord.js, Twitch API, Nuxt.js (not the main site but an upcoming tool), and a whole bunch of non-coding tasks.
> An instance of the halting problem asks, given (a partial recursive) function F, whether there is an decision algorithm A

> so the answer to the halting problem of F is trivially yes.

The answer is "yes, there is a decision algorithm"? What would that decision algorithm be for this particular function (odd_perfect_number)? And what is its answer?
Dupe: https://news.ycombinator.com/item?id=23190026
The land is in limbo: it's abandoned pine plantations currently being used by joggers, dogwalkers and (to a lesser degree) cyclists.

I can highly recommend trail building (both walking and cycling trails) as a combination of physical, aesthetic and intellectual challenges (figuring out how to use the terrain to be both fun and interesting/possible to ride and then moving tons of earth and vegetation to make it happen).
Doesn't matter. Doesn't have to be the executing source, can work with compiled representations; the original Turing paper "compiles" every program to a single giant integer.
I can see that. I definitely prefer my code to run even while broken, since I find it makes it easier (overall) to write - particularly when I don't have great docs for the data I'm getting from web hooks (I'm looking at you, Slack Actions), where it's useful to just pop into an in-situ REPL and poke around.

Although - waaay back in the day, I was very gung-ho about using C++ template shenanigans to enforce code correctness at compile time.
exactly what I want to check. it's almost expected that at some point my email address is going to end up in a breach, but there is a chance that by reviewing the data I can ascertain where it came from, at least in part .
What prevents them from running updater unprivileged and asking for root before installing the update? Or better - why can't it be installed and run under the user. Most other apps are simply copied to Applications and run as the user. I can imagine they want Windows-inspired multi-user install. But still there is no need for running the updater full time with root privileges.
It is not binary because 1 through 3 and 7 through 9 bend the same finger but at the different joints. As a result it is much more awkward to bend than binary counting.
I think that ISIS behavior was almost there compared to
the Nazi. They even had genocide of their own. Rwandan genocide was in 1994, long after WWII. Mao Zedong ruled between 1958 to 1962 and his Great Leap Forward policy killed more people then Hitler or Stalin.

The difference is that non of these happened in Europe and United States.
Work in progress, but a couple of friends and me are making an online chat for small groups of people - just a quick place to have a random conversation, although if you come back we try to put you back with the same people if available

Online but still under development: https://dotdot.im :)
I started an Agora: https://anagora.org.

The Agora is an enhanced social contract for the internet: https://anagora.org/wiki/Agora

The site itself is just based on MediaWiki, no ad-hoc code for now. In the future I hope to be able to port it to AthensResearch: https://github.com/athensresearch/athens.
I believe HIBP offers domain admins a way to get all their pwned users after domain verification.
> through the poorer countries

and German universities: https://www.timeshighereducation.com/news/china-influence-sc...
But now a lot of the comments from old thread are speculating whether the move was right. When the actual news here is the confirmation of the move.

I find that a little confusing just reading the comments.
The point of the honeypot is that there's no heuristic causing any delay or elusive attacker being missed (e.g botnet trying once per IP). You don't even need any processing time, nor even complete syn/synack/ack: any TCP connection attempt to that port triggers an instaban.
I use unique emails. My record in this breach is just a generic "contact@" address.
Can Kaggle Achievements Alone Be a Good Metric to Hire Data Scientists?
Sorry, it may not be the right word. I mean the effect that clicking on the little "[-]" does. A way to automatically clic this for all second-level comments, so that only first-level comments that directly answer the "Ask HN" appear.
Mind describing why you dislike thunks
Could it be from whois data? Seems like a reasonable place for which to submit such a generic address.
Germany is more than happy to trade with Russia breaking sanctions https://www.dw.com/en/siemens-to-hike-russia-investment-desp...
Not to mention NordStreamII
It has been presented to me as an alternative to GSM. It's short for Long Range. They marketed it as a product for smart city, not smart home.

But of course that doesn't mean you can't use it that way.
The reason was easy integration with PostgreSQL over PAM. I will check if the same could be achieved with Wireguard. Technically, already deployed devices can switch to other VPN tunnel, so there is nothing preventing us from the change.
This sounds good!

But I would not call it finished, as of today, apparently only one person can make changes to the filesystem. That does limit the use cases.

"In v10, we don't go all the way to a general multi-writer solution; solving multi-writer scalably, without incurring major performance penalties or confusing UX, remains a research question for us. "

.. so, give them some support, so they can solve this.
Digital Pollution from Modern Data Formats
> The memorandum was originally signed by three nuclear powers: the Russian Federation, the United Kingdom, and the United States.... included security assurances against threats or use of force against the territorial integrity or political independence of Ukraine, Belarus and Kazakhstan.

https://en.wikipedia.org/wiki/Budapest_Memorandum_on_Securit...
343 Industries confirms Halo Infinite showcase in July at Xbox 20/20
Algebraic Geometry in the Time of Covid
What do you mean? The author (say wikipedia owners) can change the db as they usually would change (using UPDATE queries say). Those write queries will result in the least-amount of disk-pages updates. In the torrent world this equals a minimum set of pieces modified and needed to be downloaded by users.
I dont think Iraq war was noble pursuit of democracy. That on itself is one of narratives - in which American wars are good and just regardless how self-serving and sociopathic people pushing for them are.
That assumes two finger states - extended or bent.

Introduce half-extended as a state and you have 3^10 = 59049
Looks interesting. Have you heard about the picloud (not in business now)? The concept looks similar, and promising. (they were acquired and shut down, i hope you will stay in business)
The Curse of Knowledge in UX
I have a dream that the world will stop using "Africa" as a catch-all phrase for "some African countries".
Yes, and you reveal your keys for the past when you are diagnosed, and then you go inside, stay inside, and do not reveal any further keys.

This is not useful for stalking.
It was a very limited reopening on April 24. The full reopening didn’t happen until April 30.
> That should terrify everyone

No, some of us on HN are adamantly against abortion. I'm far left on almost every issue except that one.
> The response to 9/11 seems so disproportionate because it presupposed the existence of thousands more plots, which never materialized.

Did they not? There have been several attacks by al-Qaeda on foreign targets annually since 9/11, most of which targeted the US or its allies. I think it's reasonable to assume there were many more plots that either didn't materialize or did materialize and were halted. While I don't support the measures because I still believe they are disproportionate (at least in the US), there certainly isn't a complete lack of a threat.

https://en.wikipedia.org/wiki/Timeline_of_Al-Qaeda_attacks
these are pretty low effort and these don't even give an indication you found their SUPER HIDDEN /career page by typing "shitty company open positions" on a search engine or by analyzing their header
I will like to participate. You will hear from me soon.
I see it as just one part of the story tbh, a deployment itself means nothing.
Systems of Philosophy: On Robert Brandom’s “A Spirit of Trust”
The Art of Code
Incredible presentation about the art that is programming.
Not "knocking" the idea but to be honest using someone else's API key and expecting that no one is going to notice sounds really dumb. I guess if that is the level of intelligence you are up against, then "winning" can indeed be quite easy. Although I would argue if the goal is to restrict access and they managed to gain access then regardless of what they do next, whether it is smart or stupid, they have "won".
User Management React Template
Line Up Your Insurance Strategy with Technology
Basically have fun playing around with it in the same way as with a real IMSAI8080... As an example look at this video on how to enter and run a small assembler program using the switches. https://www.youtube.com/watch?v=xYNAMKPBSFI
For all who would like to know before trying to read:

The 14MB pdf linked is actually titled:

"Tech in 2020: Standing on the shoulders of giants"

Benedict Evans, February 2020

In his words:

"Every year, I produce a big presentation digging into macro and strategic trends in the tech industry. This year, ‘Standing on the shoulders of giants’."
I would like to get involved.
Define valuable, ideally without invoking Marxist labour theory of value.

The vast majority of jobs have nothing to do with, what I'm assuming you're implying, healthcare and food - the compensation should be set by those who pay for it not someone else.

There are countless jobs that neither you nor I have ever heard of let alone thought about that society needs to function.
Firstly let's start by making all bad things illegal.
Well said. And the thing with vitamin D is:

1) A whole lot of people are deficient so could benefit from supplementation anyway, and

2) Supplementation is safe and inexpensive.

As far as potential treatments go, sure, it could turn out to be nothing. But the risk/reward ratio is favorable.
Really nice. Your daughter love using it? Feedback: I would make background color of buttons with answers slightly lighter to make text easier to read.
Reproduced papers from MLSys'20 are available online with code and data
BTW, since many people don't seem to be aware of this: If you have your own domain, you can get informed by haveibeenpwned automatically if any mail address from that domain is in a breach. All that is required is that you're reachable on that domain through an address like 'postmaster'. This feature can be found under 'domain search'. Since I use a new address for pretty much anything this is very handy.
For player 2, 'J' goes up, while pressing 'L' goes to the left from the perspective of the paddle. This feels like made in purpose to hurt vi users.
> Back in Feb, Dehashed reached out to me with a massive trove of data

I guess searching on https://www.dehashed.com/ should give you some additional data.
Value is subjective. There is no "valuable for society." There is value for individuals, and nobody is more capable of making the decisions about what is valuable than those individuals themselves. Attempting to have some entity decide what is valuable on everybody's behalf is incredibly stupid.

The way to have compensation re-evaluated would be to completely scrap existing regulations which interfere with the ability of individuals to set or request the compensation they determine to be worthwhile for the work performed in a free market. Scrap minimum wage. Get rid of all regulations which protect established companies from competition. There should be no reason you need a barber's license to cut hair.

The labour theory of value has been debunked. Just because it cost so much to produce something, does not mean people are willing to pay more than that for it. All subsidies to enterprises should be scrapped. The market can only operate efficiently if there are accurate price signals. Government intervention in the market distorts the realities and ends up taking money from hard working, low earners, and subsidizing high paying workers, whose products or services are not providing the level of benefit to individuals that they would otherwise voluntarily pay for if they weren't involuntarily subsidizing through forced taxation.

The way out of the mess is to assert your monetary sovereignty and to be the dictator of what you deem to be valuable to you, to your family, to your neighbours, to your country, and to the rest of the world - in that order.

In order to do that, you need to be able to protect your wealth against unwanted theft. Fortunately, there's now a way you can do this: bitcoin.
Industry 4.0 Can Be a Game Changer for Businesses in Low-Income Countries
Ttrive for Breakthroughs in Unity2d as High-Performance
Just a change in who is President is all that China is waiting for.
Stocks to Add to Your Watchlist During the Coronavirus Pandemic
If you have those resources, there are far more effective ways to track people that do not require relying on the contact tracing system.
Right. And we are realising now how dependant we are on the Chinese supply chain.
Correct me if I'm wrong, but the UK is still part of the EU and thus subject to the EU KYC/AML laws requiring people who want to open a bank account/credit card to undergo identification with a government-issued ID?
I think the biggest strength of base 10 is not hand-counting (the OP and the Babylonian/Chinese base-12 method are both superior in that regard), but ease of performing pen-and-paper operations. You can literally teach a 6-year-old to multiply huge numbers effortlessly.
I am also free. You got opening
> The answer is "yes, there is a decision algorithm"?

Indeed.

> What would that decision algorithm be for this particular function (odd_perfect_number)?

Either of

() => True

or

() => False

where '()' represents the empty input.

> And what is its answer?

I'd be a Fields medal candidate if I knew ;)
> I guess the Google dataset made it a puritan at soul.

It has, indeed. Oftentimes, these systems get trained with people with very fundamental religious beliefs in the Philippines [1].

[1]: https://www.wired.com/2014/10/content-moderation/

[2]: https://www.abc.net.au/news/science/2018-09-29/the-cleaners-... (full story)
Off topic.

>Nevertheless, the late 90s was a great age to be alive with that dream.

Music, Art, Tech, everything seems to be better in the 80-90s. An era, just like the article shown and described where people put heart and soul into it.

I have been thinking a lot about this, still not entirely sure why. And this isn't nostalgia, I have seen many not born in the era thinking they missed the "golden age".

Live is definitely better in post 00s, but something is different. Something is missing.
Surprisingly enough searching my pwned address in this breach doesn't bring it up on Dehashed.
GIMP handles PSD, no?
I was surprised to learn a few years ago that saunas might actually have significant health benefits.

See the references below from The Journal of the American Medical Association (JAMA), The New England Journal of Medicine (NEJM), and Dr. Patrick who has interviewed the original researcher.

[1] https://media.jamanetwork.com/news-item/sauna-use-associated...

[2] https://www.jwatch.org/fw109897/2015/02/24/sauna-use-linked-...

[3] https://www.foundmyfitness.com/episodes/sauna-heart-presenta...
Which lamp/model do you use?
A Death-Bed – James Aldrich
UCLA and CMU Researchers Develop First Realtime Physics Engine for Soft Robotics
Notably, reading lines of text with bash's "while read" will skip the last line if the last line does not end in \n.
The Ax Is About to Fall on Nissan
Vint Cerf suggests GDPR could hurt coronavirus vaccine development
Hydro isn't quite so fungible, I think a couple areas account for most the hydro generation.