skysight-inc/HackerNews huggingface dataset:
"Please chill out with the attacks"

I'm not attacking you, just the concept. The goal is not to hurt you, but to protect others. Please don't take it personally!

"What is TCB?"

https://en.wikipedia.org/wiki/Trusted_computing_base

"One set of threats this protects agains is any for which people would use Signal for: encrypted security."

Well, yes, confidentiality is the desired property of encrypted messengers.

"Also consider the threat in case a Messenger is compelled by the its local government to leak keys on the client (say through an app update) or server by warrant"

I'm not sure what the EARN IT / LAED bill's status is, but for now what holds is US vs Bernstein that established code as speech, and thus protected with 1st amendment, which includes backdoors (effectively compelled speech, also protected under the 1st). Also, Signal has pledged to move abroad if the bills pass. Given that the clients are reproducible and FOSS, I'm going to take any claim that the US government can just force a die-hard cypherpunk like Moxie to add a backdoor and keep that quiet with all his contacts at the ACLU and thee EFF, with a truck-load of salt.

"rogue employee at Messenger company who compromises."

The git tree is a rather permanent log for who merges a backdoor into the code. Also, there's most likely some form of code review especially wrt security critical code.

"Often a high security environment will compile its own version of Signal's open source client"

Citation needed.

Also, why wouldn't the independently compiled client also update itself automatically via Signal's servers? It's not like the APK version (https://signal.org/android/apk/) doesn't also update itself.

"Horcruxes would allow the high security user to send 1 horcrux on the custom compiled Signal version, and another horcrux on the public app store version"

The thing is, Signal can only be compromised by hacking the endpoint, as can Horcrux. If you're relying on the secrecy of the CT delivery mechanisms, you're essentially attempting security through obscurity that only adds log2(n) bits of security where n is the number of possible delivery paths.
Absolutely. There's no reason to do this. No one has written code on a whiteboard at work. To do this just for interviews is very silly. You've to also second guess what the interviewer expects from you. Not every interviewer is calibrated the same way.

If I could it my way, I'd start with a 30-minute briefing session on the coding test that's to follow. 1-1.5 hour coding project - implement an API or something. 45 minutes where you review some code (maybe intentional bad code). 1 hour writing a design document. 1 hour presenting the design doc to a couple of team members. Couple of behavioral sessions with team members/manager.
Well that's rich, coming from people who can't even stick with one system and have a weird mix of imperial, metric, and various archaic units - which is IMHO worse than just being on imperial.
A Children's Book on Computers
Is this true in Japan or China where reading direction changes?
What would the goal be; for the compiler to warn if a type requires a method to be called on defer? What if you want to let the caller of the caller handle that? You would then need pragmas to silence the warning, which is something that the authors specifically don't want.
> If you're consistently getting rejected for positions for which you believe you are qualified, maybe you need to get better at interviews, or maybe you're not as qualified as you may think.

This comment represents everything that is wrong with your technical interview process. Big yikes.
Note, trustworthyness jumps off of being a technical problem, and becoming a human/people problem. Level 8 as someone mentioned, or GIGO (Garbage-In-Garbage-Out) as others may know it.

To safely use a system, your operator needs to be 10% smarter than the system being operated. It is clear that we have problems in that department with certain AS's. This is about, what the third major outage attributed to CenturyLink in the last handful of years? I have no idea what exactly their process must look like, but good heavens, a better look need be taken, as this is becoming a bit regular for my tastes.
> But hasn't Free Will been recognized as nonsense for at least two centuries by now?

Among some, sure and it's not just physicists [1].

Acknowledging that the concept we've called free will is not likely to be real has some troubling implications regarding how we've structured our society which is likely one of the reasons it's not talked about very often.

[1]: https://www.youtube.com/watch?v=ihhVe8dKNSA
Single menu item steak frites restaurants are available in NYC and London and apparently Mexico City - https://relaisdevenise.com/ They import the secret sauce from France.

These restaurants also make it easy to split the bill as everybody has the same thing!
The camera stuff is beyond creepy. But the name discrepancy seems like it's getting blown out of proportion. Ray is a common nickname for Ralph...
Ah yes, third world countries. That's what Musk is after, that great philanthropist.
I didn't say it was a vaccine, but some recent studies have shown promising results when the correct dosage is used. (30% drop in mortality, which doesn't sound amazing as far as I am aware, flu vaccines are only around 50% effective). Despite having been around for years it is only now declared to dangeorus to treat covid - that's what I don't get (without going down the narrative of "no money to be made that way").

https://www.youtube.com/watch?v=-7za_j7f3L0

https://www.youtube.com/watch?v=SBn4e69tGlg

At the moment numbers are going up in Spain, but the hospitals are not overloaded and the deaths are staying pretty low. At the point I am not sure why we are pushing so hard for a vaccine.
Really shocked by this. I had no idea there are employers who doesn't adjust your salary from US salary if you move to an entirely different country.

all the examples i know of like gitlab, mozilla ect adjust it to local country comp.

anyone know if such an employer actually exists in US?
Because often enough there is only one dominant service in the region who has no pressure to compete from anyone due to regulatory capture (esp. regarding right of way on utility poles) and so has no incentive to upgrade their offers to the customers.
Very handy!

My right wrist used to pain a lot because of excessive mouse usage. I had tried out various keyboard-driven apps but I didn't find any app practical enough for my needs, so I made one.

I'd like to share here my "generic" keyboard-driven navigation app for Windows:

https://github.com/ndandoulakis/SlickCursor
Cheesecake Factory's menu is a monument to excess. It's ridiculous.

But, then again, so is the rest of the restaurant.
When we go to listen to a doctor or lawyer, do we do so because we know the reality inside a doctor's head, or because the doctor relates to the rest of society through high credibility? To what degree does being a doctor affect your relations with the rest of society?

If a doctor knows they're good enough, is that good enough?
Neil DeGrasse Tyson Explains the Tides
Books have printed the recommended price on the cover for decades. So have many snack foods.

It's very different than disclosing your revenue split on the packaging. Apple lets you set the price on your app store page. And no one will have to pay more. They would object if you mentioned your revenue split there.
To be fair, when combined with your next sentence after the one you quoted, it was a bit flamebaity, but I agree otherwise.
The only irrigated fields I know of in the Midwest are for water hungry crops like melon (my background; I grew up in the Midwest, I’m the first generation on both sides of my family not to grow up on a farm, I spent most of my summers on the farm where my mom grew up)
read the last 26 years of NANOG archives
Interestingly, in the observable universe there seems to actually be an end to structure or "fractalness" at a certain size: https://en.m.wikipedia.org/wiki/Observable_universe#Large-sc...
Well-explained and easy to follow!
agree 100% and made roughly the same point in a reply to someone else.

The father was accused of fanboyism, but my takeaway from the article is just that the father had high expectations and when those expectations weren't met they refused to continue giving them money.

If more people were like this, these companies would be better.
In San Francisco everywhere has QR codes and the same format.

I've had wine and charcuterie: food and separate drink menu on two different QR codes.

It's not perfect, many times the checkout system is haphazard, doesn't make use of Apple Pay or anything built into the phone. Requires user to input their table number into the checkout process.
So nothing has been gained by doing these experiments and publishing the results? I find that hard to believe.
Named Entity Recognition Using SpaCy
Just another thought, although IANAL: while it's probably OK to use the word 'horcrux' in casual discussion, for an actual product, even if non-profit, it may be unfeasible to use that word because it's part of the Harry Potter IP.

Maybe I'm totally wrong because it's a different enough industry to be able to use it, but what happens in practice however is another thing. Remember Jo Rowling is a billionaire, hehe. Also, it's a completely unique word that she proudly invented. She said before creating it she checked and Google had zero results on the word.
In Mainland China reading direction is mostly left to right, top to bottom now, just like in most European/American countries. I should go and see if the top right menu item is the one with the highest margins.
Visualizing and Modifying Rasa NLU JSON Data
My guess is parent lived in another country bordering to Austria. Italy? Hungary?
Creating Rasa NLU Data for Model in JSON Format
What does that entail? Are there interesting stack choices? Best practices? Pain points? Dont-use-X-in-your-stack-you-will-regret-its? Gotchas (that they'd be willing to share)?
If someone involved in the project sees this,

* I would really like to install PleromaFE and use it *

But your download links are broken ... come on
Great video. I have a question though. Is there a non zero probability that any two versions of the same person in many worlds could interact with each other?
Isn't this essentially annotations hidden in a comment?
This is an excellent writeup. I'm going to give this to an employee I'm training on container tech to read.
That's an interesting point. Supposing the goal is actually to maximize bottle returns and that getting people to not just throw them in blue bins is for some reason an impossible task, are bottles likely enough to be damaged in transit that fishing them out of blue bins is still preferred to, e.g., just hiring those same people to sort through recyclables searching for bottles at a central facility?

I ask because with the current system those individuals have basically zero protections -- they aren't guaranteed at least minimum wage, they have no compensation if they aren't working (e.g. if they were stabbed by something in the blue bin), they generally have no other benefits (more of an issue in the US with healthcare, but this isn't a peachy situation elsewhere either), and so on.

The fact that the current incentive structure makes rifling through refuse attractive points to some sort of deeper issue. While I'm spitballing a bit with ideas, do you agree that something seems off with the status quo?
Ask HN: Best public-facing issue trackers?
we've all struggle with issue trackers, and sometimes it's hard to find just the right one.

I'm struggling to find one for my start-up that is public (customer) facing for closed-source projects that allow users to submit and track bug reports.

Trac has been the go-to for many people for a long time, but it is somewhat long in the tooth.

so, I ask you HN, what issue tracking software do you use for customers? I'd prefer to find something that I can self-host.
There's diminishing returns when you cook the same thing over and over. People that are excellent cooks on round 1 aren't going to be a whole lot better on round 500 than they are on round 100. Also, they often rotate the short menu.

It's about efficiency.
Nope. This is really just making your GUI work better with the keyboard. Editing text is fundamentally different than manipulating a graphical interface, so this doesn't mimic any vim functionality (with one exception: when this app is in scroll mode, you can use HJKL keys to scroll windows contents.)
There’s an interesting protocol for splitting a Go or chess game over multiple days so that neither party has the entire time to think about their response to the last move: at the end of the day the final move is made by one player but is sealed, not to be revealed until the start of the next session.

For this to work on an internet competition, the judges would need a backup, possibly very low bandwidth communication mechanism that survives a network outage.

This wouldn’t save any real-time esports, but would be serviceable for turn based systems.
I'm guessing that if Cisco has a documented/known security issue they are more liable in case of future lawsuits. If they simply don't know about it then they are less liable. Someone did the math and found that non-liable lawsuits are cheaper than paying to have security issues addressed properly.
Japan and China both read left-to-right, just like we do. While some traditional texts are written vertically with lines proceeding right-to-left, that doesn't really carry over to general UI conventions. A set of three horizontal images would typically be understood as proceeding from left to right, for instance.

Arabic and Hebrew, on the other hand, are primarily RTL, and this does carry over to UI conventions. Menus might be laid out differently there.
That's really cool. Do you have to pay income taxes in Spain if you do that?
> I’m not sure why this is being downvoted. A huge consideration into whether Apple is truly anti-competitive should be if this has caused harm to consumers.

Prior to the 1980s, monopolies were considered bad (or at least extremely dangerous and suspicious) by default, and leveraging one to privilege your entry into another market was a huge no-no (though I'm not sure leveraging a monopoly to create a monopolized adjacent market would always have been seen the same way).

Robert Bork's theory of "consumer harm" as the guiding light of anti-trust enforcement (and further conceiving of "harm" mostly in the form of higher prices, or at least "value for money") has given corporations too much wiggle room and consequently led to a lot of contorted legal and economic arguments, substantially reducing antitrust scrutiny and enforcement (which was the whole point, AFAICT).
"the threat model was looking at observing text, not changing it."

Encryption aims to provide not just confidentiality but also integrity and authenticity. Three guesses what the integrity means.

"I haven't heard about anybody making things tamper-proof from a government that has got your keys."

Ok seriously reconsider taking a course or two on cryptography before venturing any further. The malleability of Vernam ciphers like stream ciphers and OTP -- even when the attacker is not in possession of the key -- is a well known thing.

"if you have 3, 4, 5, horcruxes, then they would still all need to cooperate to get the messages in order to do this perfect XOR"

Nope. It's enough they change one of the ciphertext parts if they can guess the plaintext for whatever reason. This is known as a known plaintext attack or KPA. You should address it as part of your scheme, look into one-time MACs and Carter-Wegman MACs.
Ask HN: Good Browser Plugins for Dyslexics
I'm dyslexic and reading documentation can be a real pain if the lines are long (I'll get lost in the middle of a sentence and loose what line I'm on, in particular the transition between lines is really rough). In the past, I've been saved by the ability to resize my browser window or the fact that man pages are 80 chars wide. Unfortunately the docs I've been dealing with at work lately don't re-flow when you change the size of the viewport, they just gain a horizontal scrollbar, which is less than helpful.

Does anyone have any good browser extensions for dyslexics? Specifically any that help with following a line to the next one down.

I recall seeing an extension in a thread on here about Dyslexia in the past few months that really helped. It would highlight the last word or two of a line and put a matching highlight on the first one or two words of the next lines.
macOS 10.14 or later required. (Still on 10.11 here)
The consensus is that cryptography works. Even the NSA can't get past a properly encrypted message with PGP (assuming you use PGP correctly, and I've heard its UX is horrible). So, one layer of encryption is enough. No need to make your life more complicated.

The biggest fear is not that the crypto itself breaks, but that implementations don't actually implement the crypto correctly. At this point it's mostly a matter of being reasonably sure the software is bug free. Exacting, but not impossible, especially if it's kept simple.
This is so well articulated. Thank you.
Surely the mistake was case sensitive filenames. I can't think of a single end-user use case where this behavior is desirable.
This reminds me of an incident on the early internet (perhaps ARPANET at that point) where a routing table got corrupted so it had a negative-length route which routers then propagated to each other, even after the original corrupt router was rebooted. As with AT&T, they had to reboot all the routers at once to get rid of the corruption.

I can't remember where i read about this, but i recall the problem was called "The Creeping Crud from California". Sadly, this phrase apparently does not appear anywhere on the internet. Did i imagine this?
I used to do dinner parties like that at restaurants: remove choice from my friends and tell the server a list of things we'll get, and then we have a bunch of things on the table family style.

Don't worry about what can go wrong and live a little. It is an amazing experience for many.
I mope at the lack of the latter, and it kept me off linux for twentysome years. Only now that I do most of my work in a GUI and I just click on filenames rather than typing them, does a case-sensitive filesystem not grind my gears. Every time I have to cd Downloads instead of cd downloads, I wonder who thought that was a good idea.

Case-sensitivity is a classic case of users being forced to comply with the computer's needs, rather than the other way around. I contend that that is Wrong, period.

To put it another way: Unicode is the opposite. It is computers adopting complexity to serve the needs of humans. If we can do unicode, we can do case-insensitive filename matching. If we're going to insist on case-sensitivity and ignore the needs of human language, we should just go back to plain old ASCII and force the humans to comply with that too.
It's very much like Vimium, which is nothing like Vim, so no. I see Vimium being referred to as "vim bindings" for chrome which I never got. Maybe someone could enlighten me on this.
> There is no requirement that a US company can only employ US residents to the best of my knowledge.

I understand this, obviously. You seemed to have implied that you would still be paid 'cushy us salary' in ireland, thats what i am talking about. does your current employer still pay you US salary if you live in ireland?

I would love to work for such an employer, i want to move back to my home country and still keep my US salary.
As an extensive ranger user, some of the features which lead to me not even running a graphical file manager:

> Using ranger to change directories (see: https://github.com/ranger/ranger/wiki/Integration-with-other...)

> Launch ranger using a keybinding from my shell (`bind` or `~/.inputrc` for bash, `bindkey` for zsh), which when combined with the previous technique allows me to very quickly switch folders (also combined with bookmarks) and get my bearings

> `:filter` to filter the items in the current folder (supports regex and has a live preview which updates as you type, can get laggy in large folders)

> `:flat` to flatten directory structures (-1 for infinite depth)

> `m<key>` to bookmark something, which you can jump to with `'<key>` (apostrophe)

> `om` to sort by last modification time, `os` to sort by size

> `dc` to recursively find the size of a directory (can be slow)

> `C-n` to create new tabs and `gt`/`gT` to switch back and forth between tabs which can be useful for copying/moving files
Flash Bainite Maximum Strength Steel
Cache Invalidation
The Rust answer would be that you implement `Drop` for your type, rather than asking you nicely to remember to close everything properly.
If you leave your front door unlocked that doesn't mean a burglar is free to steal your stuff with no consequences.
In the interior of British Columbia we had massive forest die-off from Pine Beetle, that was caused by a lack of fires combined with warmer than normal winters. All of that fuel came down to the forest floor where it was a huge fire risk and was cleaned up manually. Now we have some newer growth but way more open grassland. Fires here move a lot faster but don't tend to be as dangerous and controlled burns are much easier. Trees that survive are younger and much thinner coverage, way more deer and cougars and less bears; a lot more birds. It's been pretty unique to watch an entire ecosystem change in 10-20 years; much less than a lifetime. Plus it turns out that historically these areas were predominately grassland not forests!
We have no real way of knowing. AES is considered secure because, as far as is publicly known, it has sufficiently withstood attacks performed by many, many skilled cryptanalysts. As far as I am aware there is no reason to believe that AES provides anything less than its stated level of security. But again that isn’t to say it’s impossible.
Interesting phenomenon how western knowledge and machinery has caused a shift in their reading methods.
If I tell you just two things: Person A is a software engineer making a US salary. Person B is a software engineer making an Indian salary.

Do you have any reasonable suspicion as to which person is making more? I think most people do.
OPs website is really interesting. She is doing some amazingly cool things.
Hey, author here! Just wanted to add that you can write your slides using Markdown (most of its features are supported).

Also reposting my comment from the asciimatics post that was here yesterday:

I made this on top of asciimatics, which is awesome! I had a lot of fun making this thanks to all the effects asciimatics already has.

I was also able to extend an internal asciimatics class to add a feature for pre-recorded playable code blocks. It lets you play code in your terminal presentation like someone's typing it! You can learn more about it here: https://present.readthedocs.io/en/latest/codio.html
Yea some queer bloggers are going to help me find a better name too since we don't want the association with what JKR is talking about these days

This doesn't help but XORcrux would also work maybe
It depends on your scale of course. It’s not like “the industry” just wants to make things complicated for the fun of it. There comes a point where you’ll need more than one server to host your web app and when you do Kubernetes provides a nice abstraction in addition to providing a ton of other useful things at scale like infrastructure as code to zero downtime, continuous deployments.