skysight-inc/HackerNews huggingface dataset:
> the old-timers would always trash on server-side javascript.

Plus ça change, plus c'est la même chose.
Jeffrey Epstein ex-girlfriend Ghislaine Maxwell arrested by FBI
Ho man, actually I understood both CORBA and DCOM well it was a lot simpler than today's nightmare mish mash of everything.
It's easy to be a critic, tell me, what have you done for the world that gives you that lofty moral high ground?
Sadly I don't think Android as a platform is less secure. but still, in comparison to iOS (the common comparison) or desktop platforms. Most phones stops getting security updates earlier than the other platforms.

I had a Nexus 4, Nexus 7, Nexus 5X. All which should get top notch security updates. stopped where other platforms kept getting updates.

Just a few days ago I saw on HN some great news for Android (https://news.ycombinator.com/item?id=23692257). but again, this isn't a security update. It a broader security improvement equivalent to a major update on other platform.

While my 1st iPhone SE will get iOS 14, my Nexus 5X is still on Android 8.
A question about upgrading work factors.

Let's say you have a secure password hash that includes a work factor, sph(pw, wf) (I'm going to ignore salt to simplify notation).

The most widely used ones such as PBKDF2, bcrypt, and scrypt do not include any good way to upgrade an existing hash to a bigger work factor.

The way that is usually handled is to flag passwords that are hashed with the smaller work factor and the next time the user logs on you can rehash the password with the new work factor.

I don't like that approach. If I'm raising the work factor it is presumably because I decided that the old one is not secure enough. I want to stop using it. I could just invalidate all the old passwords and make everyone go through password recovery, but that is not ideal.

Another approach could be to replace all the password hashes that use the old work factor, sph(pw, old_wf), with sph(sph(pw, old_wf), new_wf) and add a flag indicating that they are double hashed. Then update to sph(pw, new_wf) next time the user logs in.

I still don't like that. It does solve the problem of having insecure hashes while waiting for people to get around to logging in, but it still requires keeping some extra data around (a flag marking double hashed passwords--or worse if we have to deal with people who have gone more than one work factor upgrade without logging in).

What I'd really like is the password hash to be a pair of functions, sph() and sph_cont(), with the following property for integers 0 < wf1 < wf2:

sph(pw, wf2) = sph_cont(sph(pw, wf1), wf1, wf2)

With that, when I upgrade the work factor I can update all the hashed passwords to the new work factor.

So...why aren't the common secure password hashes designed this way? Does it introduce some kind of unavoidable security issue?

Just looking at some of them from a computation point of view, not from a security point of view, it seems doable. The general structure is (1) do some setup, (2) do some look wf times, and (3) do some post processing. If the post processing were reversible so that you could get back to the state right after wf iterations then you could do additional iteration to increase the work factor.

Is there something that makes it so that the steps between the final iteration and the output must necessarily be irreversible in order for the whole thing to be secure?
Synthetic data is huge right now! I'm currently doing work on synthetic generation with photo-realistic physical models to do inversion problems with CNNs (particularly in the surf-zone and nearshore area, paper coming next week ;) ), and eventually domain adaption. If you want to get your project funded make one of your keywords is "synthetic data"!
The Firefox OS but nobody is using it.
Elon Musk's Wealth Is Closer to Your Wealth Than Jeff Bezos' Wealth
>Personally, a system that generally rewards competency and is based on voluntary transactions to me is trending towards System A because people who amass power in such a system and maintain it generally do so because they are good at getting results through transactions that on the whole are generally voluntary and mutually beneficial.

It's easy to imagine systems which have more freedom and are better at rewarding competency. Like anarcho-syndicalism. If freedom and the rewarding of competency are what you value, why dismiss systems such as this? Throughout history humanity has gone through several systems. I'm not sure your justifications for believing the current one is the best would hold up to scrutiny.
Facebook is perhaps the most frightening for me, because for many people Facebook is the internet!

Something I absolutely hate is when I want to learn more about a local business and search for them on Google, but all I find is a Facebook page with minimal info - what happened to websites?!
RISC-V, China, Nightingales
Mitigating a real problem requires real resources. Printing money does not give you infinite access to real resources. Thus, there is a bound to what real resources you can apply to a real problem by printing money.

What's so controversial here?
There is absolutely no reason great typography should come at the expense of privacy, unless you are unable to upload custom fonts or have something against CSS.

You also don't need JS to support it, although you may have to give up on the idea that your site has to look the same in all browsers, because not all browsers can do things like automatic hyphenation.

And frankly I am happy that I don't have to read source code in Courier just because it is the only available monospace font.
Nova Credit (YC W12) | San Francisco, CA or New York City, NY | Onsite or Remote (North America only) | https://www.novacredit.com

Despite having built substantial credit in their home countries, millions of immigrants have difficulty accessing credit cards, loans, mortgages, and leases without domestic credit. Nova Credit enables newcomers to share their credit history from their home country with financial service providers and others, unlocking new consumers for lenders, and new futures for immigrants. The team is 30 people and has raised $20m+ in funding from Index, General Catalyst, First Round Capital, Nyca, and Y Combinator.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/nova-credit

Here are our open roles:

- Data Engineer: https://jobs.lever.co/neednova/e831babd-01d1-4442-849d-b0203...

- Engineering Manager - Credit Bureau Supply: https://jobs.lever.co/neednova/da9b7eef-0fd8-4c53-ba11-a7e19...

- Software Engineer: https://jobs.lever.co/neednova/7079e859-c78c-418e-82bf-f47da...

Tech Stack: Node.js, Postgres, AWS, Terraform, Ansible, React
You forgot one:

c) Minimalist-loving hipsters that read articles like this and bandwagon on Go just like any other trend (merits of the language aside). These are the same folks that use a hand crank to grind their coffee beans.
The spooks are the same government issuing the ID. They can just call up the department issuing the IDs and ask for a batch of new identities. No technical flaws necessary.
3: tax revenue

Governments can and do tax illegal drugs. Just issue tax stamps. If drugs are found without them, you also get them for tax evasion.

All drugs used to be legal in the US. There is a reason that they became controlled a hundred years ago or so, and it does not involve conspiracies by big pharma. Go research the history - it's fascinating.

Alcohol is one of the leading causes of death in the US. A large share of car accidents, suicides, crime, heart disease, and many other things is caused by it.
"Love maintenance work or at least learn to appreciate it" --- I _do_ love maintenance work. its like a massive puzzle / jenga-tower, have to be super careful about how to pull out and rearrange pieces.

Anyone know the best pay to stress ratio industry for this? Finance/Gov?
What's the ROI on learning Vim? Anyone?
What don't you understand about deals on shipping being dark patterns?
>But I’d bet there are many here with >$1M is assets and >50% of the public would find that outrageous.

171.6/137 is still $1.2525B. Lets say 15 is a fair P/E ratio, thats almost $19B. 1900 Million. People with >$1M is assets and >50% of the public still cant fathom the difference between a million and 10 billion.

And historically, despite having a high P/E ratio, Amazon exceeds growth expectations.

I don't know who is saying to tax his assets. But the laws, rules, economies of scale, feedback loops, and anti competitive behaviors that allow one person to amass that much money should be treated as glitches that need to be patched.
Gitpod now supports Bitbucket repositories
If the GPS module and Cameras were removed from the devices - how were there so many photos in the article?
Open Source UI Library for Flutter Development
Usually if the code is really single use then the optimal solution is to interpret before JITing.

The more severe case of this in modern JITs is inline cache repatching. That’s super frequent.
Show HN: Animation Creator Using Emoji and Simple English
At least in the States, pickpocketing has almost disappeared. Part of this is probably part of the general trend of falling crime rates, but also because people carry much less cash around and cel-phones etc. are difficult to fence.
In theory, yes, you would want just enough thermal paste to fill any gaps between the heatsink and die as the thermal conductivity of the heatsink (e.g. copper) is much higher than that of the thermal paste. Unfortunately, I haven't been able to find much on the internet beyond forum posts and anecdotal evidence regarding the pump-out effect. It would be interesting to see a more scientific study of this.
Means testing also creates a barrier because you have to apply. Cultural attitudes towards handouts prevent many people from applying, which hurts their children (in this case). At least some programs stopped doing means testing and made it universal because of that.
> C2 already does escape analysis, and scalar-replacement-of-aggregates to turn objects that don't escape a compilation unit into dataflow edges, which if possible is far better than the stack-allocation in this article because you'd rather not write out to the stack if you don't have to, and you'd like unused parts of the object to disappear.

Yes, and I'd also add that SROA typically enables lots of optimizations since it lets you treat object fields as though they were ordinary local variables.
It might be "secure", but almost every app is exfiltrating my personal information by using crashlytics, facebook and co.

Who needs security when the apps do it by design.

Check your firewall logs, or use a root/no-root firewall, it's frightening.

Edit: click the screenshots at https://play.google.com/store/apps/details?id=eu.faircode.ne... to see an example. Fourth picture "Access attempts"
It’s the author’s own headline
Thinking that compulsory id cards "Papers Bitte" are not a good thing is not an uncommon view.
Lol,

Comparing the two is silly. But let's do it. Head to head.

Bezos could hire a small army of mercenaries and defeat any cesar/king/emperor of the past.

Also Rome didn't own any of the provinces, they occupied, governed and taxed them. Its not like they could do anything with Egypt.
Understanding Algorithm Complexity and Big O Notation
I digress on my opinion on whether coding is hard or not, but it's certainly not as hard as other things.
What 70% statistic?
That's true for all the FAANGs except Apple and parts of Google. For example, a few dozen programmers can easily whip up a credible competitor to Facebook. The problem is getting enough users to compete.
I mean, strictly speaking I should downvote you for tone... but I am laughing ;-)

I know people who work at Capital One, I wonder how extensive Go usage is there...

I have started looking at job postings recently and I see a lot that have aspirational-Go in their postings. I have managed to avoid Go during my tenure here at Google (which isn't hard since it's not used much at all, despite what people outside of Google seem to think), but I'm starting to worry that if I move on I'm going to have to take a job writing it.

Who is hiring remote for Rust, Zig, OCaml, or Erlang? Those seem more palatable to me? :-)
I feel as though the improvements in security lend themselves to improvements in privacy, and vice versa, in a rather linear relationship.

That being said, privacy factors are primarily user-choice in that it is the optional apps and programs that compromise privacy, even if the privacy breaches are less-than-voluntary, as seen in the recent clipboard skimming scandal. Making an OS more secure by limiting unauthorized access to information like the clipboard is both more secure and more private.
I was using a mac pretty regularly until last year. I don't recall the Console app changing that much.
There's GrapheneOS. It's really good, but it's not really focused on not leaving a trace.
At the time, Borland and Watcom C++ just blew Turbo Pascal out of the water. There was no competition, feature and performance-wise. Also OO, which became another things..
Ross Ulbricht tried essentially that defense.
I completely disagree with the premise that a high-level language should be able to do substantially more work with the same amount of code as C. That is not the point of a high-level language, not even close. The point of a high-level language is simply to abstract away some of the more difficult problems inherent to programming closer to the metal.

And as far as languages go, JavaScript is not nearly so far removed from raw machine code as most interpreted languages.

100MB of JavaScript code is not “astoundingly huge” at all , considering the bulk of that is tooling. Compared to the tooling for many other commonly used C/C++ development environments, 100MB is pretty modest.
I didn't see this response for whatever reason so sorry about the delay.

I think the premise is a bit flawed here. An argument for reducing inequality isn't an argument for enforced equality. I would actually largely agree with you in that one of the main flaws of an extreme communist / no personal property approach is that it fundamentally isn't compatible with human nature.

However, that wasn't something I was arguing for at all either so I can't really defend it.

Just so I am not accused of hiding behind vague statements though what I am actually arguing for is more aggressive taxes on billionaires both in terms of real numbers but also primarily in addressing avoidance issues. I am also extremely in favor of the idea that workers should receive a living wage. I don't see any aspect of that which I would consider to be incompatible with a healthy and functional democracy / capitalist society.
I really don't see how improving security and reducing privacy are related: like generating fingerprints of installed programs, or scanning the memory, disks for malware and reporting results to the OS provider/device manufacturer and mapping the results to a user account or an ip address ?

For me improved security was more synonym to degraded performance.
It lives on as a fork: https://www.kaiostech.com/
I agree completely. Without CSS the web would be much more boring and visually dull.

The point I wanted to make with my comment is that the dullness also has advantages.
Some people are also so good at compartmentalizing that they believe this, but ask the right question and they realize they do in fact have (deeply shameful, at least to them) things to hide. Of course, you have to know the dirty secret.

Case in point: I had an ex whose grandparents lived in a mansion on a ranch in the Ozarks, and were very well off (some kind of corporate lawyers). Their public image in the community was one of great wealth and benevolence; due to some bad financial moves, they'd lost everything a few years back and their kids, grandkids, and great grandkids had scrambled to buy the house out from them, a loving gesture, so they could maintain their image. I learned of this secret (which itself isn't really shameful, people make mistakes, even big ones!) after a year or so.

They were both of the "we have nothing to hide," but one day I asked whether they'd like their neighbors to know about their penury; they told me to shut up and mind my own business.

Nothing to hide? Everyone's got something to hide, but for the most part we don't know it, because they're hiding it!!
One of the best twitter threads I have read about the enormous difficulty of shorting stocks.

As any experienced short-seller will tell you, to be successful at it you either must be very, very good at constructing portfolios that can handle the volatility, or you must limit your short-selling to situations in which you can identify a "catalyst" that will cause expiration within a predictable time frame.
Jeffrey Epstein confidante Ghislaine Maxwell arrested on sex abuse charges
Many people I talked to in the bay area temporarily left b/c housing is unnecessarily expensive and the apartments there are not great to WFH.

Most of those people fully plan on returning to SF once their offices open back up, because they feel that they need to be in the office in order to grow their career.

I think its a bit presumptuous that tech workers are perm leaving the city.
A logically defensible position against this is: "I trust those 400 people to do more good, to spread more wealth, to create more value, to create more jobs, to innovate more, than I trust the government." Its a calculation of best return on investment, and not just return in a dollar sense. It might be more efficient for those 400 people to dump all their money into a charity that redistributes the money, than it is to trust elected officials to understand how to handle it.

This isnt cash he has in a bank account. It's his money, reinvested into a conglomerate that builds, delivers, creates, serves.
I'm not familiar with the topic. How do you measure the quality of the synthetic data? That is, how close the synthetic samples are from the real ones. Moreover, can you control this quality while generating synthetic samples?
Ok so my heart goes out to the 5 possible business owners nationwide who that may have applied to, but that is a completely unserious argument.
Amen. My guess would be that 90% of Hacker News readers use a desktop browser ad blocker, but <10% have a tool like Blockada installed on their phone.
You mentioned Reddit being a graveyard, but is it true?

Check this thread someone linked above from 9 years ago:

https://www.reddit.com/r/todayilearned/comments/esxwd/til_th...

I clicked about 20 profiles, at least 70% are still active.

Actually, I think this phenomenon probably is pretty common for websites that are still on rising or at least hold still (like both HN and Reddit). Their initial users don't just leave for no reason. Less active, perhaps.
Go does have subtyping (unlike Rust and Haskell), which makes type system needlessly more complicated and type inference harder.
Im curious - if the skull itself is an obstruction... What kind of run-time are we looking for?

Would vibrating the soft-pallete be more effective for penetrating the skull for less bonemass being in the way? Or would the soft-tissue provide more insulation?

Perhaps... exposed bone would provide a better entry vector. The teeth? I wonder how far existing "sonic toothbrushes" are from accomplishing this. Would it be safe for teeth, at the power necessary to accomplish this ultrasound?
High-taxation states that rely on their highest-income citizens to pay for massive pension obligations and bureaucracy are in for a rude awakening. Short of making it illegal to move out-of-state, I don't see how they can stop this from blowing a hole in their finances. I consider this a good thing - it (hopefully) will enforce some fiscal discipline - and the fallout will be interesting to watch.
What the Doctor Ordered
New Frontiers in Life Sciences
Elon just can't help himself with stuff like this.
I didn't know they had a browser. I'll have to give it a try. Can't be any worse than Google's browser. Or their OS. Or their video monopoly. Or their search monopoly. Or their secret partnerships with governments. Or their ad monopoly. Or their email monopoly.
> There is no theoretical reason that anything is hard to change about software

There are practical scenarios where upgrading or changing software is logistically difficult. In those cases, a good design can really go a long way and last 10+ years.
I really don't think you can compare recreational experiences to professional experiences here. I see that you've done some cool stuff, but it really isn't the same as you can't always choose your team mates for a variety of reasons, which is why women have to take extreme care.
Odroids are consistently more expensive than nearest Raspberry equivalent, older Orange Pis (Orange Pi Zero) are even harder to find that RPi Zeros! "Harder" is the wrong word - Orange Pi Zeros are impossible to find. The upcoming wifi cam from Pine64 is the best-next-thing to the RPi 0 for my use case and price range, but its not yet out.

For now, nothing beats the RPi 0 on price, as well as features-per-dollar. The closest is an Onion M2, IIRC. It's $9 before shipping, but only has 64MB memory. I'm prototyping /piloting on RPi Zeros, but if I end up scaling to 1000's of sites (which is why I cant use a $200 SBC per site. It's a self-funded passion project), I'll likely have to switch to the Onions due to the limited availability of RPis you mentioned
That can work for drugs with low abuse potentials, like psychedelics. But why do you think drugs like heroin will benefit the society or the people who are taking them?
Yeah, I get where you’re coming from. So the case I was referring to earlier as a recent example, was Backpage. I think there are some key elements that need to be met, but you can see with that case where lines can be crossed. I’m not arguing encrypted communication companies should be liable for all activities using their service. However, if a company specifically markets to criminals, in my mind, that gets really close to crossing a line.

I think it’s the difference between facilitation and knowingly facilitating. With the gun store example, if the person purchasing the weapon said “I’m going to go kill someone, can you tell me which gun would be best for that?”, the gun store would be absolutely liable if they sold them the gun.
I have seen it put to decent use on Wikipedia where you could click on a person in a group painting and go directly to that persons article.
the issue is that if you tried to write it to last 10 years it would be a different code base and wouldn't necessarily have gotten used like the one you actually did write.

The real take away here is that real (objective) mess hurry-hackjob code bases are good enough to last many years so you probably did the right thing.
> the further implication of my comment is that societies are locking up their most entrepreneurial and productive members for creating too much value

This view seems flawed to me: "creating value" for the drug dealer by selling cut and fentanyl laced "heroin" is definitely not creating value for society. That said, there is no denying the entrepreneurial aspects of drug dealing.
The Open Source nature of Android might have something to do with it as well. It is interesting to compare iOS and Android in terms of how visible the source code is and how much vulnerable a system can be in effect.

Here's an interesting article that goes in depth about the concept: https://dwheeler.com/secure-programs/Secure-Programs-HOWTO/o...
Long story short, if you find yourself adding security features (for instance, peppers) to cryptographic tools that don’t accept them as clearly-labeled inputs, talk to a cryptographer first.

Concatenating raw inputs is virtually never going to be the solution they’ll give you.