skysight-inc/HackerNews huggingface dataset:
That would be RFC8463 "A New Cryptographic Signature Method for DomainKeys Identified Mail (DKIM)" [0]

The biggest improvement on using EC over RSA in DKIM is that the public key will fit in a single DNS TXT rr.

The problem here is that email servers are often horribly outdated, so don't expect widespread adoption of the new RFC anytime soon.

The suggested transition method would be include both a EC and RSA signature in the email, and publish both keys under separate selectors. The receiver should ignore the EC signature if it doesn't support it, and when it is supported the receiver should only use the EC signature. However, it wouldn't surprise me of this is going to be poorly implemented and you'll en up with the receiver validating both signatures, thus performing multiple DNS lookups.

I'm planning on doing a write-up about support for RFC8463 in popular email services.

Disclaimer: Founder of an email hardening service.

[0] https://www.rfc-editor.org/rfc/rfc8463.html
At some point I almost went down the fountain pen rabbit hole but never managed to buy one.

Here are some nice recommendations for beginners, including the Lamy Safari: https://www.jetpens.com/blog/the-best-beginner-fountain-pens...
I've been doing this for 10 years, but as a 10x ninja I clearly have racked up 100 man-years of shitting out c.

Jokes aside, i wish I worked with guys who have so much experience. I'm sure it would be humbling.
Throughput used to be a problem (looking at you, Hype), but the differences have become smaller as everyone upped the9r game.

This is obviously subjective to some degree. But I used to frequently get annoyed at various terminals until two or so years ago, and have just forgotten about the issue since.
> The more they expect to be held accountable, the more likely they will refrain from violence.

The thing is people are already being held accountable for their skin tone, and the likelihood of changing your behavior when you have lived your entire life in an environment of constant oppression for fear of being identified in a protest is marginal, specially during catharsis, otherwise you wouldn't see for instance people burning police cars in front of a camera.

Keep in mind also that many (most?) of these "violent protestors" are simply reacting against violent cops in a power trip. I can't say I wouldn't react violently against a cop intentionally running over me and others with its SUV, but I can say that I would be thankful if my face was anonymized no matter how I reacted.
Ask HN: How do you store the key or emergency kit of 1password
Hi Hacker,

Once setting up, 1password generate some kind of master key and store into an emergency kit. We will either need an existing 1password installation or this emergency kit to set it the account on another computer.

But given I'm storing my secret in 1password, how can I save this file(emergency kit is just a PDF file) securely?

Emergency kit seems not store on 1password cloud, only store locally I think.
Yup, I'd love if we were able to be a unified front and collectively say the mayhem will not stop until all four involved are charged. And if they're not convicted... 1992 will look like a joke.
I'm sorry, but if you require the deletion of what you said to protect yourself from the people, then you shouldn't be in a position of power.

In reality if a politician makes a genuine error or prediction that turns out to be wrong he will face demands that he resigns for deliberately misleading the public. The media have created this toxic environment where normal debate and discourse is impossible
I guess it need not be the case that generics will slow down compilation that much.

Problem with C++ template generics is that they are reinstantiated per type __per compilation unit__.

I think they can

* Use dynamic dispatch liberally - such that one instantiation per object size in order to avoid boxing. That said, I don't know how the experimental generics work. And this will obviously prevent some optimizations, notably escape analysis.

* defer compilation of generic code to the end i.e "just before linking" phase instead of eliminating duplicates at link time.

* Some kind of caching mechanism for generic code such that you `sed` the machine code / plan9 intermediate to replace it with type specialization wherever required - should work if you are willing to sacrifice some optimizations, As majority of time is spent in code generation. On the flip side, Go team can come up with different optimization strategy for that part of code because Go doesn't do many optimizations in current form.

I am no expert on compilers / optimization. But generics will obviously reduce the total code one needs to compile. And combined with some techniques I guess they can control compile times from regressing.
It's sad how many music venues are closing recently in the UK's cities. Licensing issues don't help and apparently these days young people prefer trampolining [1], but I'm not sure recreational trampolining contributes to culture in quite the same way.

[1] https://www.theguardian.com/music/2018/dec/31/uk-nightclubs-...
Does anybody have any evidence they are connected? I’m not saying thy are or aren’t, but it’s at least worth noting what the police say.
Show HN: Automatic cleanup in C using with-statements
The assertion that shooting someone on their own porch is wrong doesn't invalidate the claim made by the OP's friend. I completely agree with you that an unnecessary amount of force was used though, to the point where it almost seems criminal.
I found this out recently when playing wow classic I somehow fell out of the sky, and survived when on a computer "controlled" Griffin, if I had any control of the bug I could use it to drop off in more convenient locations
iPhone metadata includes several fingerprints that can be used to differentiate between different devices, including a serial number, uptime in seconds, and shutter release count (depending on the model of iPhone you have).

(source: me examining as many different iPhone models and instances to build deduping heuristics for PhotoStructure)
As someone who mainly used VS and Pycharm in the past and who knows only enough VI/VIM to get things done on machines remotely, would you still suggest getting more proficient in VIM in 2020?
While I can't make useful comments on protests or strong anonymity, wrt photo metadata, I can say that I scrub metadata from photos that leave my possession, as a matter of course, using 'exiftool'.

Here is how you read the existing metadata:

exiftool -a -u -g1 IMG_0708.JPG | more

... and here is how you scrub it:

exiftool -all= IMG_0708.JPG

(you could read it again, after scrubbing, to demonstrate it is gone ...)
> Now I'm neither an Apple fan nor Microsoft fan (don't like their business decisions at all), but I have been required to deal with their customer support at times. It's actually possible to get your hands on a real human to get support, so you can solve stuff.

Did you actually get customer support for Apple Maps? Because they've been completely ignoring my updates to their mistakes in my area and have been pretty much the same as Google in that respect. Except that at least Google Maps are correct.
For those unfamiliar with Rawls: Dershowitz's application of the veil of ignorance is astoundingly facile.

As the article correctly observes, the VoI is not the Golden Rule: it does not ask us how we how we would feel if the thing we advocate were done to us, but whether we would accept a course of action or policy were we to know nothing about ourselves.

Applied correctly, the VoI encourages everybody to be against political corruption, regardless of political orientation. But this runs contrary to Dershowitz's own political goals, and it's easier to co-opt your dead academic colleague's system than it is to excuse criminality from first principles.
What about Japanese culture would do injustice to the potential of this chip? I’m curious..
My only fountain pen is a Pilot Metropolitan and it dries out crazy fast. A cartridge lasts me around 3 weeks max due to evaporation.
Isn’t the point of civil disobedience that you know what you’re doing could have consequences? All I’m hearing is “we should let people trash entire cities and not be held accountable.”
- SourceForge?

- Savannah?

- FreshMeat?
This past year, on my Thinkpad P50, I've switched between Ubuntu, Fedora, and Arch; Arch has by far been the least buggy. With Ubuntu, things would go haywire when docking/undocking. With Fedora, putting it to sleep was always a risk because after putting it to sleep I would sometimes I would open up my laptop to a black screen that I couldn't recover from. I was fine with that and just wouldn't put my laptop to sleep but eventually I started using Zoom and Fedora would crash within an hour and a half of using it. This pushed me over the edge to wipe my laptop and install Arch; I'm really glad I did.

I still have an issue where the system is not detecting when my laptop lid closing but at least it's not crashing every day or two.
God forbid we put blame with the person whos job it is to submit the claims. 'Random staffer made a mistake, no blame here' is the oldest cliche in corruption.
I have tattoos and went to some very nice public Onsen in Japan. It's more work to find them, for sure.
It's always a good idea to end up with fewer dependencies
Its cheap light and easy to haul a half dozen humans home in a capsule, but its complicated and heavy to haul down immensely heavy satellites with a decent cross range such that you could land next orbit on friendly territory at all times.

Remember the shuttle "had to" be all things to all people, and the military demands ended up being VERY heavy and expensive.

At this time AFAIK nobody has the technical ability to snatch a Soviet spy sat and take it home, or haul strange and heavy (many ton) electronic warfare payloads over a target and land next orbit on NATO turf. Now, WHY you'd want to, or SHOULD you want to, are outside the bounds of this discussion, but the shuttle certainly had that kind of military stuff as a very expensive and very heavy design req.
Personally, I despise how the file header moves around as you scroll over the files.
As far as I can tell the Analog Discovery you mention is quoted by Digilent at $279 and for this price you get two 100MS/s analog inputs, so that means that you can't sample anything above 50MHz max (and in practice you probably won't be able to do a lot of useful work above ~40Mhz). With modern circuits routinely having signals in the hundreds of MHz that's fairly limiting for me.

This comment dismisses a lot of measurement use cases out of hand, at least as far as a hobbyist or rudimentary manufacturing test case is concerned. An input bandwidth of 50MHz is still more than sufficient to evaluate all kinds of useful circuits - a few I can think of offhand:

* Buck regulator loop compensation and transient response
* Large signal audio debug (not suitable for small signal just due to the limits in the analog frontend and the number of bits in the scope ADC)
* Basic digital protocol debug

If you're tuning a PLL, or need to evaluate DDR signal integrity, or trying to design an audio system with -120dB of THD+N, then yeah, an Analog Discovery is probably not the right tool. Then again, if you need to do any of those work items, then you probably already know that.
Redux is a really small library. I think using it would easily be in the spirit of frameworkless. It also pulls in only two dependencies itself, total—one, which depends on another, which has no deps.
Why do you regret not finishing your PhD? I’ve gotten mixed reviews on if the effort was worth it for those I know who did it.
I'm guessing for things like package-lock.json.

Though it can certainly hide much more relevant-to-reviewers changes easily.
Someone once explained it to me like this:

Let's say 1% of the population commits crimes.

Let's also, for the sake of argument, say all crimes are committed by black people.

Of the general population, 10% is black.

If you profile all black people, you will indeed profile the 1% of the population that commits crimes, but you will also profile 9% of the population that does not commit crimes.

And before you say "not the entirety of the 10% black population is profiled": maybe ask some black people about this. It's not 100% of the black population that gets profiled but certainly a very significant percentage.

And even if it's just half or even a quarter of the black population that you're profiling, you're still profiling a lot of innocent people.

This is the reason why profiling is bad.

(and note that in reality the figures are even worse).
As part of the purchase, you are given the deed restrictions and you contractually agree in the closing process to follow them. We once backed out of a purchase when we read the overly strict restrictions.

You also contractually agree that the association has the ability to fine you for violations and put a lien on your property if you don't pay. There are plusses and minuses. The minuses are obvious - PITA, picky busybodies, limited paint colors, landscaping restrictions, etc. The plusses are that in general, the whole neighborhood is typically better maintained - paint, lawn, general upkeep, etc. which affects your property value.
United States of America Will Be Designating Antifa as a Terrorist Organization
If he manages to make humans multi-planet species he’ll be the greatest man who has ever lived.
Also sound/unsound
Was that the hardline or did they reroute through RF and/or "Big Loop"? I heard the loud and clear (and earlier about the cameras possibly interfering) but missed if that loud and clear was through the hardline.
Is there ANY company that will do that? Can you sue the yellow pages if they're wrong? Or a wrong map?

Or even your own projects - are you willing to put your money and perhaps even criminal record on the line if your company sells data that's not accurate for a percentage of customers?
Nope. Not a charitable interpretation; not necessary by any means to 'correct' what is obviously an anecdotal comment in the same vein as the OP. Not even correct to call the commenter a non-programmer - assuming things not in evidence.

A question like "But have you been continuously employed as a programmer?" could be reasonable and not mean-spirited.
Cool, yes we also add similar random (Gaussian) noise to image data before the networks see it. The decorrelation theory comes originally form signal processing field like your example shows. Old wisdom in new bottle.
> But New London police interviewed only candidates who scored 20 to 27, on the theory that those who scored too high could get bored with police work and leave soon after undergoing costly training.

It's easy to think this is some weird quirk of police recruiting, but the concept of "overqualified" candidates is common across many job roles. I've heard plenty of hiring managers talk about candidates that they've rejected because they thought they'd get bored quickly and move on.

It sucks for people who have had an impressive career trajectory (or in this case high test scores) but want to shift gears a little to focus on other things like family, hobbies, or just want to avoid burnout.

There's an implicit assumption on the part of these hiring managers that everyone should be working at 100% of their capacity, and that flexibility shouldn't be given to those who want a different balance in life.
I've never found a USB scope that I particularly liked working with.

Gauging from the job postings on their website, I have a hunch/dream that the folks at Saleae are cooking a decent USB scope up as their next product offering. Would love it if they did. Saleae's Logic Pro 16 is without a doubt the best designed EE tool I've ever used.
If you model your gradle (or bazel, or maven, or sbt) project as many smaller sub-projects, then the build tool can run a pool of compiler processes in parallel. In the case above, the repo I compiled was broken down into 200 gradle sub-projects. Bazel builds tend to be finer-grained still.

Also gradle 6.5 fixes a scala compilation performance regression that was introduced in gradle 6: https://github.com/gradle/gradle/issues/12591
You can do that by clicking in the middle of the controls.
Eastern european reading: something about Trump... Oh it's about philophy - maybe it's interesting

> A Theory of Justice in 1971—came to take over academic philosophy, particularly via “a small group of influential, affluent, white, mostly male analytical political philosophers

Nope. Close tab.
Seems like a safe bet!
Would be neat to do font recognition against available web fonts to try go find a match, then convert the web font to truetype or whatever format the pdf used, and re-embed the front.
Its also not even inefficient. Jet pilot courses reject people for arbitrary reasons. Because they have a limited number of jets, and a surfeit of applicants. At some point you 'weed out' even good applicants, if you have more than enough of them.
What LA Paul takes from this is that since you can’t predict what will happen after a transformative experience, the question you’re left with is, “Am I the kind of person who wants to find out what it will be like to have kids / get married / move to Borneo / etc?”
uriparser 0.9.4 released
If you have the time, please do write up what you mentioned. I'd love to read about it and learn. Thanks!
Overall there have been a lot of great content from teen vogue especially over the past five years, despite the connotations associated with the name.
I'm not really sensitive about this issue, but recently had an experience that has raised my interest: after making some regretful mistake, I had to use an an UEFI shell to shuffle some boot settings around (the one that comes with the Clover bootload).

And typing was..noticeably more "immediate". It was bewildering, sort of like wearing prescription glasses for the first time.

I like all the extra stuff editors and the OS do these days and don't wish to turn the time back, and I doubt it's realistic to achieve both. But maybe someone like Apple, being fully integrated, should take a shot at it. It'd be the sort of polish that makes using a computer enjoyable.
I suspect one of the things that people with high IQ are bad at is listening to orders and issues with authority.

Their theory that people with high IQ will get bored is plausable until you think of them progressing to detective. This is a very strange thing. Never imagined there would be a job where you get rejected for having high IQ.
Sourcegraph might be better: https://about.sourcegraph.com/
I have not heard of this one but there's a similar robotics implementation of a network based on the connectome (neural circuit wiring diagram) of C. Elegans brains(the only complete connectome we have so far). Its still in preliminary phase of doing cool stuff though but the idea is interesting.
I’m not disagreeing with anyone about the inappropriateness of the police actions, but the account is not claiming that those shot in the video are rioters. Simply that the police we see were actively clearing rioters from the neighborhood and the porch people were caught up in it.
I think GP means the UI is slow.
EVE Online is still primarily one single shared environment, as far as I'm aware. They added instances for some content back in 2018 (from a quick Googling), but otherwise it's not sharded in any way, to my knowledge.
Sure it's possible. From evidence in your life of previous adaptations. You could be a very adaptable person, and very likely to be happy after another adaptation.

Sounds like LA Paul wrote some sort of soft self-help book, to be throwing words around like 'impossible'.
Americans are entitled to stimulus checks if you can find them
Nobody managed to get a video of the rioters? Doesn't that seem odd to you? Additional context is welcome as long as it's either verifiable or doesn't serve an obvious agenda.

Here's some additional context that's just as valid as yours: the "rioters" were actually defending the neighborhood from the police who had been there before your context began. The police were beating random people and shooting pets. The person that told me this lives in one of the houses in the video and she's a retired nurse who volunteers to care for hospice patients.
Reminds me of https://github.com/atomix/atomix
The issue here is that the stated motivation, 'overqualification' is likely a justification to obscure the real motivation: ensuring obedience and conformity within the force, especially when it comes to the day to day reality of ignoring or colluding with corruption, participating in unnecessary and biased use of violence, and facilitating enforcement of systematic oppression (e.g.: destroying homeless encampments).
Well shit. That would've been useful to know. Time for some speed-running!
MUNI Hosting: A safe haven for phishing and credit card fraud
> we now have better ways of dealing with short Weierstraß curves

We do? The complete Renes/Costello/Batina formulas for point addition are significantly slower at a factor of 1.4.[1] The complete formulas presented by Hamburg are still somewhat slower than what you can get on twisted Edwards and almost certain to be patent encumbered by the end of the year.[2] Did I miss something?

SafeCurves discounts Renes/Costello/Batina and the like because “many of these formulas are considerably slower and more complicated than standard incomplete scalar-multiplication formulas, creating major conflicts between simplicity, efficiency, and security”.[3]

[1] https://cryptojedi.org/papers/complete1-20191011.pdf

[2] https://eprint.iacr.org/2020/437

[3] https://safecurves.cr.yp.to/complete.html
Why is this a hard sell? How many people does this really affect? And why disable JS on GL?
What about radiation hardening? Or do we just rely on ECC now? What about ECC for flops?
No you are not missing something. This is, I think, correct. I haven't tried it but it seems possible and possibly very effective.
Implicit string to number conversion is more like C in terms of memory management, in the sense that it's a huge footgun that you will definitely shoot yourself with. I have never seen it prevent errors, only make them worse by hiding them from QA so they can reach production and ruin your weekend.
It can't, but blurring might remove less data than what you want.
I've done something kind of similar (but much less low-level) using the nRF24L01+ attached via SPI on the GPIO pins of a Raspberry Pi Zero. I'm in the middle of writing it up, but it will probably be a couple of weeks.
What fork are you referring to?
So it better to target 99% of the population that don't commit crimes rather that 9%? You haven't convinced me. Interesting that you chose black people for your example, its almost like you are profiling them.
I get the issues with ipv4 and agree there needs to be a replacement.

One of the issues I have with ipv6 is the sheer length of them. You don't really want to type/copy them manually any more. This isn't really due to their nature as 128 bit numbers. It's more an issue of how they are being assigned. If we kept the 128 bit addresses, but assigned them more like ipv4 today, we'd have gotten a much more handleable addressing scheme.

E.g. we could have set the first 5 blocks to 0 for the time being and used only the last three until we exhausted them. This would have meant we'd have more handleable addresses like ::1337:120.43.88.10 and still yield us enough addresses for the forseeable future. We'd need to do some testing to ensure that all hardware/routers/ etc support the full 128 bit for future extensions, but this is an implementation detail.

But you can't even address a device in your local network using ipv6 because the numbers are just so long. I don't need it to be globally unique. Why not have addresses like ::42 for devices in your local network?
Tattoo regret? I regret not getting more. I got a sweet piece in San Francisco it was a good trade-off for leaving my heart there.