skysight-inc/HackerNews huggingface dataset:
> this shouldn't be considered a problem unless it accepts invalid programs

I mean, a compiler that accepts no valid programs is problematic is it not?

The way that the Rust compiler does its thing does not really work for a garbage collected language, and the comment that I was responding to, which was itself responding a restarting of what I just mentioned, said that you'd want Rust-style verification anyways for those things, which is not really an answer to the question because that kind of thing is not something that Rust can do.
This is true regarding "next-gen" firewalls. But, if you design a plain old segmentation strategy with simple but well thought out allow/deny rules, then a firewall will be pretty valuable in many situations.

Extreme example: you can think of an air gap as a "firewall" with all deny rules. Air gaps are pretty secure. (Yes, there are still way's in but finding them will be many orders of magnitude harder than finding a 0day in a "next-gen" firewall).

Another example: I put all printers in a dedicated VLAN and block all traffic in and out except specific print ports from the print server IP only. In practice, way more secure than any "next-gen" firewall will ever be.
Yep, I'd say it's all about learning some accounting. Get a beginner accounting course, not sure where to go. Lots of terms to understand, assets, cash, capital, depreciation, revenues, taxes, cost of goods, expenses.

In layman terms, it's all sorts of revenues and expenses, short term or in the future, interacting together. Ask yourself, how much do you pay for salary? for office? for equipment? for materials? when? and a hundred more questions...

A good chunk of it is rather straightforward really, yet it takes a course or a discussion with an accountant to learn the proper terms and the broader concepts formally. Seen all of that in university long ago, to be able to make our own companies when we graduate.

That being said, I am not sure this would help to talk to the CEO. I'm not sure CEO generally care or understand about this sort of this. Just outsource accounting.
Create an Internal PKI Using OpenSSL and NitroKey HSM
The protections I am talking about are already somewhat present for public employees, you can't fire a public employee for some random Twitter comment they made unless you show it is interfering with their ability to do their job, so I don't think the proposal is ridiculous at all.

As for your argument that, "We may as well as make it impossible for any business to fire people for any reason, then", I don't see how that follows from what I am proposing. Firing people for reasons that relate to their work makes sense, firing someone for making an OK sign to someone on the highway does not. Someone says "Studies show that violent protests decrease support for the protestors' cause" at work, feel free to walk them out the door for their hate speech. If they say it on Reddit, maybe that's not the hill to die on.

I don't think whether a job is a right or not is the question we should be asking. People have obligations, both to their families, and to society. Someone can't get a job because of something they said on the internet and now they contribute nothing to society even though they are perfectly capable of being productive. That doesn't make sense. I pay more taxes now because they aren't working?

You're going to tell some kid, "Your mom doesn't get child support anymore because your dad said something mean on the web"? How does that even make sense?
From a skim, that article doesn't seem to suggest that DE Shaw has done anything illegal. In fact, the paragraph after the one you quoted from makes it look like they work hard to stay within the bounds of the law:

> This secrecy and vigilance extended to the company’s extreme caution on legal and compliance issues. One of Shaw’s common sayings, repeated at an annual training session by a compliance officer, was that it was important to avoid risks and legal trouble because Shaw wanted to make sure that his kids could go to college.
Wouldn't it make financial sense for the great majority of people to take as many loans as possible and then immediately declare bankruptcy the day after graduating? Most people don't have any meaningful assets at the end of university, so bankruptcy would be about as painless as it's possible for a bankruptcy can be.
Thanks. We’ll sort that out.
I've used GH Actions to replicate LinkedIn's Endorsements feature on their new Profile Readme feature: https://github.com/sw-yx/sw-yx
Lindy Hop?

In the states the biggies are:
Camp Hollywood (lotta pool time, lotta drinking)
Lindy Focus (christmas -> new years, it's nuts)
Nevermore (my personal favorite)
Camp Jitterbug (used to be super relevent as the contest weekend event, sorta on the decline/ not sure)
Lindyfest has some nice peeps at it
Camp

the biggest is Herrang in sweden, it's the lindy hop mecca trip.

Also check out:
https://www.swingplanit.com/
I love stuff like this, I’ve learned so much over the years doing things like this outside of the work environment where everything needs a reason e.g. https://github.com/CraigJPerry/home-network - junk hacking for fun

Prioritising time for this kind of thing seems to go in cycles for me. E.g. i remember spending a few weeks back around 2005 setting up a home lab “just so”. I still have the notebook i wrote up at the time. Loads of knowledge in there i’ve since forgotten about setting up lvm on aix hosts with smitty and pinouts for converting cat-5 & db9’s into null modem cables for managing cisco ios on old switches. I can barely remember config t and enable mode these days...

There’s a real satisfaction to be had from this kind of thing. Serial consoles on everything, jumpstart configs dialled in just right to be able to rebuild any node on the home network hands off.

Then it was around 2013 the next time i got an urge (the ansible repo above) then most recently it’s been k8s experiments. Interesting it’s about 7 year cycles.
Source Code Obfuscation Patterns
The network was infiltrated in December, the attack happened in March. So the last clean backup was from November. This would be a very old backup. Not sure how useful that would have been.
No.

I am saying that money market funds that buy short-term treasuries ("government funds") have the same level of safety as insured deposits. Because of this safety, they have lower yields than prime funds which invest in unsecured short-term corporate debt.

It is unfair to the careful people who invest in government funds to bail out prime fund investors every time it looks like they might lose 0.5-1%.
Typometer: A tool to measure and analyze the visual latency of text editors
I can’t recommend How Finance Works by Mihir Desai enough.

There are a few cool things about it:

1. You get the feeling that the author has developed a deep sense of how learning works, and is using the same teaching methods in the book that have been honed over a lot of in-person classes. For example, having you puzzle out which balance sheet belongs to which company early on in the book, and it being surprisingly doable.

2. There are different levels of abstraction discussed in close proximity - the math, then the account from a cfo.

3. It’s concise. That lets it cover a pretty wide range without feeling like a textbook, and I think that helps a lot for developing an early understanding.
First, you have to persuade people it is needed. But 100,000 fake people will crow that it's not. Now what?
You’re right, but, at the same time this is an extremely puzzling phenomenon. We have millions of people out of work whom we could be paying to do contact tracing, and, yet, we don’t. Even if the states are low on funds, the federal government could either subsidize or fully fund such programs. Doing so would be a huge step toward dealing with COVID-19, as well as providing a partial solution to all the unemployment that’s been created by the lockdowns.

Why don’t we do this? It’s a jobs program, not an entitlement, so, theoretically, Republicans should eat it up. And, I don’t see Democrats opposing it, either. Instead, we’re pointing fingers, calling it the “China flu,” or the “Trump virus,” while over 130k have died, and many more get infected by superspreaders who could easily have been identified and isolated were there enough contact tracing in place. Even California, which I thought was handling the crisis well at first, has faltered by prematurely reopening sectors of the economy.

I’d like to say it’s a lack of leadership, but I think it’s more that our leaders are serving interests that are not ours. This is a nonpartisan statement — Trump is to blame for a lot of it, but Democratic governors and mayors, by and large, haven’t stepped up, either. It’s time to ask cui bono? It’s time to really drain the swamp, instead of continuing to vote for the mosquitoes who suck the life out of the American people.
> It is amusing that the BLE tracing toolkits were sold as a way of not having to expose your location data to Google and Apple, the exact entities who already have fine grained location data on most people.

I think they were sold as a way of not having to expose your location data to government authorities. Also, Apple makes a fair amount of noise about not collecting fine-grained location data and other PII on their servers; as far as I know, at least, they simply don't do the kind of server-side logging that would let them do the kind of historical reconstruction you're describing in your first paragraph. I'm not entirely sure Google does, either, for that matter, even though they keep a lot more server-side.

(Foursquare, of all companies, could probably do it. But only for a too-small subset of people.)
The majority of hacks that companies suffer will be 'yesterdays' hacks. No one is wasting a zero day to get the droneparts.com database.
Is there not a website, either state or federal, where one can go and report contacts?

Why does the roll need to be performed by boots on the ground (exclusively?).

I could just be ill-informed here. We have one active case in hospital quarantine here is Tasmania who is a resident returning from Victoria, and I’m not really paying much attention so.
https://consequenceofsound.net/2019/05/synth-repairman-lsd/
If you want to be incredibly angry at the ineffectiveness of the current testing regime that we as a country are heavily investing in, listen to this episode of the This Week In Virology podcast:

https://www.microbe.tv/twiv/twiv-640/ [TWiV 640: Test often, fast turnaround, with Michael Mina]

The way to beat the pandemic is to have cheap, disposable instant tests that anybody can take in their homes, everyday, to see if they have a large amount of virus in their system. These instant tests will not have the sensitivity or specificity of the PCR style test, but it doesn't matter. The PCR style test can test for levels of virus that are billions or trillions times smaller than necessary, yet we disqualify other types of tests because they aren't as accurate as the PCR tests. So we set an impossible standard that all other tests, no matter how practically useful they could be, fail to reach.

We all could have cheap, accurate enough instant tests, but do not because they aren't as accurate as a test that is ridiculously accurate but takes so long to get results at scale it becomes completely ineffective. It's complete madness.
Ask a Lead Dev: React Native or Ionic?
It seems to me that it's probably a money issue. States can't run deficits and the Federal government hasn't stepped up to backstop municipalities, just private corporations. Extend the states an unlimited line of credit from the Treasury for contact tracing and most of the states would probably ramp up.
I've looked into doing this. At the moment I've been connecting friends with employment opportunities for free for years (especially my friends in Canada who don't want to leave with remote friendly opportunities in Los Angeles).

To get you first paying client, is it as simple as finding a payment agreement online (something like "If the employee stays at company for 90 days company shall pay %x fee")? Did you start the agency while still working as a VP of Engineering and slowly switch over?
Do SnapChat Ads Work?
Decentralized Anonymous Credentials (2013) [pdf]
You're right, but in the context here, there isn't any significant difference. A pseudonymous machine account that is indistinguishable to a human carries the same type of risks to online discourse as an anonymous account.
Synth repairman accidentally gets high after touching old LSD on’60s synthesizer
The future won't attack your freedom of speech. It will attack everyone's attention limits.
Very nice explanation! Very nice!
Yes. Protecting privacy is a better cause than most wars have been fought over.
You cannot have massive job program without state financial going into red. And states have to balance their book every year.
Here's a chart of the historical real price of books in England which showed that paper decreased the cost of books by a factor of 2.

https://aiimpacts.org/wp-content/uploads/2019/10/RealPrice-1...

Then later the printing press decreased the price by another order of magnitude.
Oh? https://www.thecloroxcompany.com/covid-19/learn-about-covid-...
I've attended a workshop of a world-known dancer. They were saying that some dancers who got good quickly, were sports people prior to dancing.

I personally support this theory; ultimately, in a very basic form, both dance and sport are grounded on physical coordination.
I can't say for US, but yes, both WHO and local government health figures were spouting that masks don't work. LAter they recanted that the reason they said that was because there weren't enough, but the initial dialog was they were ineffective. (from a previous discussion, I think France was the same)
Elon Musk (profiled by The New York Times)
Only a strong sense of purpose and an equally strong will to sacrifice everything we use to evade oursleves from our own lives will keep procrastination at bay. Nothing else creates deeply rooted meaning. Nothing else really works.

Putting hurdles between us and our distractions will, at worst, start a vicious cycle of circumventing them and putting them up again; at best, make us dependent on them so we resort back to our bad habits whenever we can't make use of those mechanisms--back to square one.
Started building the houses for needy folks!
Definitely,

Moreover, the claim that GPT-3 is a good tool for astroturfing is unproven so far and I am extremely skeptical. I don't think the supply of trollish garbage has even been the barrier to troll-speech shutting down constructive speech. I don't think even the limit on the ability of individual, "real" people to spout Trollish garbage has been the limit.

In the GPT-3 text I've read and the GPT-2 systems I've played with, what I read is a system that "weaves" a group of sentences that seem "well written and plausible" on the surface (maybe more well and more plausible than a lot of trolls). But any detailed look seems to show each reason step as both implausible and "weird", senseless. It's impressive but it's got the "talking dog effect" - people are going to be impressed by a talking dog even if the dog's statements aren't impressive otherwise.

Moreover, I think most would-be astroturfers have very specific aims. "Because of value X shared by group Y, group Y should hate group Z and like group Q", "Politician X violates strong social taboo Y" and similar formulas. Fifty people in boiler room in a third world country can be hired to make variations on the basic "payload" the astroturfer specifies for less than one silicon valley data scientist customizing GPT-3 and they have less chance of producing GPT-3 weirdness IMO.

Some even larger-scale hybrid system might automate the process further. But for the purposes of the astroturfer, it's hardly necessary.
archived: https://web.archive.org/web/20200725114603/https://www.nytim...
Two anecdotes from 10+ years argentinian tango dancer.

1. I dance leading part, and I found myself more self-confident in my engineering leader and manager work. Giving team a direction became more organic and easy. I actually had to start restraining myself to motivate people's creativity. It is actually kind of dance move too: stand still and give my follower firm support to decorate her part with small movements with music.

2. One of my fellow partners is playing intellectual games (local franchise of "Jeopardy!" and several others). She says her performance degrades with her progress in tango, because the follower's part in tango is to listen and not to step by her own, but only when and where the leader leads.

I also believe in neuroplasticity and overall positive impact of creating and cohesion of neural links.
The Cult of Differentiation
I won't say much. I want to read opinions.

These days you don't have to go much farther than Amazon to see, quite literally, exactly the same product sold by multiple third party vendors. Dozens.

One of the first questions an investor is likely to ask an aspiring entrepreneur is "What differentiates your product?". I have to admit, this sometimes feels like a cult rather than an absolute necessity of business.

The Amazon example might be on the extreme end of the scale. These third party sellers all import exactly the same product from exactly the same manufacturer in China and list them all under different bar-codes.

Strictly speaking speaking, when all the smoke and bullshit clears out, what you are buying is exactly the same product. The smoke and bullshit is the packaging and mostly on-listing marketing (pictures, bullet-points, product description), etc.

Price? Sure.

It's the same product. The buyer doesn't get any more value because the packaging is prettier. If you are buying an avocado peeler, and it is exactly the same avocado peeler, well, it's the same avocado peeler.
As far as I know you can block certain subreddits, yes.
TBH while a lot of people say the shortage is a myth, I am not so convinced. I wouldn't personally hire most people in infosec because I think the industry has the wrong idea of what the career should look like.

Most people in infosec have no coding skills. That isn't their fault, they aren't told it's important. I think it is, so I won't hire them. That just cut out the vast majority of candidates with a single criteria, and I believe a lot of the criteria is broken.
Duality to develop data privacy, security tech under DARPA contract
Dropbox is ramping up the sleaze with misleading spam emails
Great thoughts. What changes in the industry are you expecting from GPT-3?
It's unclear what the parent intends with "competent", and also not clear what "weekly" means (once a week? three times? daily?).

I've been an amateur dancer for years, and definitely, for what I personally intend for "competent", it takes 2/3 years at least, with multiple times per week of practice, a few workshops every year etc.etc.

There's certainly some people who dance pretty much daily and gets good in less than an year, some people with background in physical activities (sports or arts) who also get good quickly... but they're exceptions.
That's not how reducing your taxable income works.

If you earn 50K, you net 37640. 51K and you get 38220.

If you earn 51K and donate 1K, you net exactly the same as if you just earned 50000. i.e. 580 less than if you had just kept it (If you had put it in your pension instead, you would have kept the whole 1000)

There may be some circumstances where it makes a difference, where certain thresholds could be crossed, but AFAIK, the way they all taper prevents that.

You can only get a tax break on 40K of pension contributions, so if you earn 91-101K and claim child benefit, without another pre-tax vehicle to soak up the rest, you'd have to pay the clawback charge. However, I doubt that would work. With 3 children you'd have to donate 10K to save about 2.5K.

If you earn something around 300K, it might do something because of the tapered pension allowance. Again, I doubt it. At 250K, if you donate 10K, you can put an extra 5K in your pension. Above that, I don't think there are any more thresholds.
> Using an example of IV reuse in AES-GCM:

Yes, that one wouldn't be caught by corrupting inputs. You need to make sure you don't reuse the IV in the first place. And that's indeed a cryptography related bug.

> I assume your answer would be to say this would be a matter of correctness

It would be.

> where I'm coming from is that the majority of devs don't have the skillset to be correct

Unfortunately, I can believe that. Correctness is hard. Or expensive. Let's try with this example.

If you're designing an AEAD yourself, you can notice the error by trying (and failing) to prove IND-CCA2. If you're implementing or using AEAD, code review should the problem… unless this is a bug like you've shown before. Tough one to spot.

One way to avoid the IV bug with a reasonable degree of certainty would be to use a counter or a ratchet. Don't send the IV over the network, let it be implicit. Then write two implementations in two very different languages. It is very unlikely that both happen to repeat the same hard coded IV.

If we still want to use random IVs, we probably need to mitigate replay attacks: have the receiver store the last few IVs of the messages it received this session, and have it compare any new IVs with this set. Won't stop all replay attacks (the attacker could wait until old IVs are forgotten), but it will at least catch the accidental reuse.
Scale has a quality all of its own. While I disapprove of government and business propaganda, I’m a bit more worried by the idea that any nut who takes a personal dislike to me or any group I just happen to be in, could single-handedly wage a propaganda war against me as competently and effectively as any of the government-led campaigns which led to the disappointingly large list of post-WW2 genocides.
https://ncase.me/remember/
That's very surprising. I don't have a degree and at Dropbox, the last company I worked for, dropouts were more common than those who held a bachelors.

Maybe there's something else going on?
Whether or not politics is interested in me (it isn't, just in my subservience and tax dollars), the market of people who write about politics is saturated by people who look, think and act the same as you.
I am not so sure if Europe in general and Germany specifically could not be hit with similar situations again.

- After the April lock down it is clear, that we cannot repeat this economically again.

- Population becomes tired of maintaining the hygiene regiment. Improperly worn masks are on the rise. Dining out is increasing / bars/gyms/pools are reopening and are starting to get crowded.

- Decision making is pushed down from Federal to State and local levels (at least in Germany) causing a lack of cohesion of plans and making it impossible for the public to understand what policy is enforced where and why. One good example of this is that the general mask wearing mandate is still in place but many states have allowed for employees (e.g. in stores) to forego masks.

- Schools closed for summer have paused a likely source of many transmission routes.

After going below 2000 infection per week, we are set to hit 4000 per week after the weekend in Germany.
States and cities can't run deficits and so can't create the funding for this out of thin air. Republicans have campaigned for years on a platform that "Government doesn't work" and have been remarkably committed to providing evidence for that claim when elected. Both hiring people and solving a crisis with government intervention go against their instincts.
Threads vs. Processes: A Look at How They Work Within Your Program