skysight-inc/HackerNews huggingface dataset:
The idea of layering security is very powerful, acknowledged in this "Network Operations Division Cryptographic Requirements" document

https://wikileaks.org/ciav7p1/cms/files/NOD%20Cryptographic%...

> Certificate validation must not be performed against any standard SSL root CAs.

> implement an inner cryptostream within the SSL tunnel transfer

People often state that you should not roll your own crypto. Definitely, you look foolish for making a mistake doing your own thing. However, adding your own layer on top of a standard one seems safe and likely to slow an adversary down considerably. Adding a layer below to encrypt data before the standard algorithm gets it has some risks (e.g. could leak in some complex way like a timing attack) but it also protects against a compromise in the implementation of the standard algorithm.

Adding the Horcrux layer of multiple channels does seem to increase security at the cost of creating a new unvalidated magic wand that then becomes the attack surface - and another significant cost in that it is not user friendly and involves considerable effort per message. There are ways of implementing greater security at high cost, e.g. point-to-point communications off network. The question is if the extra effort confers any benefit. Sometimes just the fact that two parties are communicating is valuable knowledge and this Horcrux mechanism actually makes that easier to detect as it occurs across multiple systems.
Eh IDK. Leetcode type questions are starting to slip into many industries and types of companies. I recently interviewed at large finance (not trading firms, retail banking/investment) and insurance companies. They both asked LC medium/hard.

I was honestly taken a back. These companies aren’t known for “high” standards and make up for the lack of interesting work with WLB (or at least it comes across like that.

Just like how everyone copied google Qs a decade ago (how many toothpicks can a tree yield...). I’m fully expecting everyone to copy FAANG like interviews because someone in HR thinks it might signal better hires, and why wouldn’t you want better hires right?
I am convinced The Universe is an enormous fractal. I always wondered if you 'zoomed out' of the Universe far enough, would you encounter more matter or a separate Universe co-existing next to our one? Keep Zooming out and you could probably see /infinite/ Universes that go on for eternity, as one long fractal journey.
Logically solid points, having at the basis an axiom with which I definitely don't agree: in my opinion having a car does NOT have to mean using it for everything. Given the alternative of a usable public transport, of course. You're correct that the prices must be comparable, of course, but otherwise the car usage can be kept for heavy groceries and road trips - neither of which happen every day.
Firefox Developer Edition, with uBlock origin installed. I don't see anything you said.
Lying about your address is tax fraud, but no one is talking about that...
So picking up trash is a religion. Lax definition is as bad as no definition.
I am curious to know why their GitLab instance reports the size of the repository as 336.6 GB of storage when there are only 286.6 MB of files.
Building your business while working full-time [audio]
> Side effect: I also fluently speak german.

May have been useful living in Austria!

> everything is synchronized to german

I suspect that's not the word you were looking for.

PS: I guess that explains it: https://de.wikipedia.org/wiki/Synchronisation_(Film)
>Mr Thiel said: "I want to publicly tell you that I'm not a vampire. On the record, I am not a vampire."

>When questioned further on the matter, he denied that he has ever injected himself with a "young person's blood,"

https://www.independent.co.uk/life-style/gadgets-and-tech/ne...
> I can't stand Windows and it hurts me to see people using it

There's an entire industry (pc gaming) that is still a pretty piss poor experience on other platforms. This has been true for 25 years and isn't showing any signs of changing. And the current direction Apple is taking is going to ensure the iPhone with all the impressive hardware is going will only be utilized to play candycrush and scroll through instagram photos, because quality games (and applications, e.g. Spotify, Netflix) rightfully don't want to give Apple 30% of every dollar they earn.
Isn’t this how high end michelin restaurants work? You sit down, eat the chef’s daily menu, and drop a few hundred dollars per person. You are there for the art of it and you trust the chef’s choice.
Not "if no one dies" which was part of GGP's claim.
> Imagine the progress we would have made if our industry was forced into making sure that tech is extremely reliable and highly functional.

Do you remember the progress of landlines? In 2000 (and beyond), some people were still paying extra per month for touchtone dialing. Extreme reliability comes at a large cost.

If everything had to be reliablr before it was released, we'd have a lot fewer things to try, and a harder time deciding what we liked. By shipping half broken stuff all the time, we can figure out what we like, and then make it reliable if it's warranted, or throw it away if that's the right choice.
Ask HN: 3D Modeling Tools for Woodworking/Furniture?
I have the idea of making some simple furniture with some of the extra time as something semi productive to do.

Are there decent to use OSS tools? I see some SkethcUp and others recommended.

It doesn't need to render things realistically but would be nice if it can tell you that some pocket holes are going to run into each other, for example.
Two things: if you believe system-required packages should be separate from user app packages you should check out the BSDs. Also, why do you like openSUSE the best? I've never tried it.
I'm with the dad. Not necessarily for the specific choices but for making a choice. Author should have waited another 10 years because this is a shallow and still-immature perspective that underappreciates her dad's principle and integrity. Why should a company that demonstrably sucks for you, continue to get your money? (So your teenage daughter can be like the cool kids?) It's called voting with your wallet, and a lot of problems would just vanish if more people did it. If you keep rewarding a company, they assume they're doing it right. And you have this entity in your life that is bullshit, and if you accumulate enough of those, YOU become bullshit.

Edits/Addenda:

Live your truth. (Once you have your own money that is, because beggars can't be choosers.)

"Hmm I can't help but notice that the people this company hired specifically to talk to me are rude AF and my very first contact with them included statements that were verifiably lies." [0]

"Hmm this company takes advantage of me by collecting & selling my personal data, some of which I consider private and might not have consented to if I had read the privacy policy." [1]

"Hmm this company does provide the service I want from them, but I've heard they treat their female & ethnic-minority employees like shit, don't consider a lot of their workers employees at all, and they seem to break local laws a lot." [2]

"Hmm this registrar uses deceptive phraseology in its communications, e.g. referring to an expired domain that I intentionally didn't renew and on which I owe nothing, as an 'overdue invoice.'" [3]

[0] Comcast

[1] Facebook

[2] Uber

[3] Namecheap

A person for whom principles aren't important, lives with and financially supports things like this. It's not necessarily weak, but it doesn't take any particular strength of character either. Only a tolerance for cognitive dissonance. Someone for whom principles are more important, gets out of that relationship and finds another. Someone for whom principles are paramount, might just do without that product or service entirely, if unable to find a satisfactory provider of it.
Chill out a bit... Like I said, Signal (and everything else) has the same exact vulnerability, it must since I'd be sending over Signal. And if it doesn't, then this attack wouldn't be possible....

The whole point of using these existing schemes is to inherit at least the security properties of those channels, and then augmenting them and mitigating some threats.
Control burns look to me just like blood letting - a thing from the past when we didn't know better.

how to prevent megafires? How about extinguishing them while they are just fires? A fleet of 100 tanker planes is just a few $B investment with couple hundred $M/year maintenance. Several round trips of those 100 tanker planes in the first day when these fires have just started would have solved the issue. They would have solved the similar issues back in 2018 and 2019 too as well as the coming issues in 2021 and so on. Thus they would be paying for themselves each year over and over again.

Not surprisingly, the situation is similar to covid - an initial investment (orders of magnitude lower than the losses otherwise) and a bit of rational thinking would have prevented the covid "megafire", yet here we're... The current human race inability for even minimally rational system scale action is astounding.
> The case insensitivity is just a horribly bad idea, and Applie could have pushed fixing it. They didn't. Instead, they doubled down on a bad idea, and actively extended it - very very badly - to unicode. And it's not even UTF-8, it's UCS2 I think.

> There's some excuse for case insensitivity in a legacy model ("We didn't know better"). But people who think unicode equivalency comparisons are a good idea in a filesystem shouldn't be allowed to play in that space. Give them some paste, and let them sit in a corner eating it. They'll be happy, and they won't be messing up your system.

Linus Torvalds, 2014, https://web.archive.org/web/20150112214037/https://plus.goog...
Buy Azure Solutions Architect Expert Certificate
This is the fastest and the easiest possible way to get Azure Solutions Architect Expert certificate
You could do that on VPS or your machine but heavyweight plugin like Woocommerce can incurred performance and memory issues that they can do little to improve if you’re referring to benchmark with CMS.
Thanks! I do not have kids. My old roommate has a daughter and he and his wife lived out of an RV for several years. He got cancer though and had to buy a house near a treatment center (he's find now; full remission for 5+ years) but they still home school.

Another friend I graduated with, still does the RV life. Although they bought a house recently as a home base, but still RV a few months every year. (They're also homeschooling their youngest; oldest went into the military).

I also had a friend who was an English teacher and survived off <500 euro a month in Germany, so even though I had saved up a lot, I've seen people live this way for way less.

There are things that make this kind of lifestyle more challenging for sure (and I'm not about to buy an RV; I do not like driving large vehicles at all), but it's possible if you put your mind to it.
> I wouldn’t lie to anyone (my employer, the US government, nor the host government) about where I live.

How though? You have to claim a local US address for your payroll though. right? What will that address be?
Yes, I think you put your finger on it. As the observer is part of the system, his "reality" is as much superposed, entangled, etc., as the quantum events that compose it (himself and his observation too).

That would give credit to the multiverse interpretation of quantum mechanics then.

Maybe the observation process of a quantum phenomenon by a human observer is akin to the orthogonalization of a matrix:

as the observer becomes entangled with the observed particle, each possible observer-eigenstate (i.e. any observer in "his reality") ends up observing an eigenstate of the observed quantum phenomenon, instead of a dirty superposition.

To call it "orthogonalization of the observer-observed system" would be more descriptive than "wave-collapse", but the main difference is that the orthogonalization treats in parallel all possible outcomes, each linked to a different state (outcome) of the observer too, whereas the "collapse" view insists on the fact that the observed eigenstate is unique. And moreover, at least in mathematics, there are conditions for the orthogonalization to be possible at all, so that should be interesting.
> ok i work 100% remote, can I claim my sisters address in Texas in texas for my payroll and actaully live in new york?

That’s an entirely different issue. Yes, New York state will likely take issue with the scenario you describe, but not at the federal level (what this thread is about). Further nobody, but you, was indicating lying about their address.
Especially when many people will never use them in prod. My organization asks questions about DS and algos in the interviews now.

Has complexity or efficiency ever come up in a team discussion? Nope. Do we have use for high efficiency solutions at scale? Not particularly. But we judge candidates on it.
I don't really care what OS people use, they might have reasons I don't see after all.

On the other hand I did work in an IT department and saw people getting 3k€ devices where I know there is no way on earth they are going to need that horsepower, and I knew because I helped them using it daily. And guess what: it is usually Apple. The shiniest new thing just for the good of their own souls.

3k+ devices for sending screenshots wrapped in docx as a mail attachment.

And yes I get judgemental there. That doesn't mean all the people with an expensive Apple machine are status driven egomaniacs, there are people where these 3k+ are more than well invested — but over here they were too few..
I couldn't agree more, I started building a ML hosting platform to solve your second point. I'm thinking of building a managed NN service as it is a common pain point.

https://inferrd.com
That name doesn't really distinguish this feature from the normal store-to-load forwarding from the store buffer that processors have been doing for decades, though. I think memory renaming is the probably the best name for it.
Apparently the GP is part of the "PC Master Race" and will not tolerate "console peasants" in the house.

https://en.wikipedia.org/wiki/PC_Master_Race
"We equally distrust all channels a bit"

The problem is you're proposing a scheme that's completely insecure if all channels are being watched by the same entity. The fact you're not employing public key encryption to mitigate this issue is really weird.

"expect them to be exploitable by different non-overlapping parties (see Venn diagram)."

Don't. NSA knew about the Sony hacks because they had hacked the systems of North Korea's cyber army. There's no telling if they're inside e.g. WeChat's servers.

Cryptographic security is on so different level it's hard to emphasize it. Perhaps a comparison to computational effort would suffice:

Let's say a zero-day exploit to compromise one server costs 1,000,000 USD. Let's say brute forcing an 80-bit key also costs 1,000,000 USD. Let's say you're using two servers to deliver the alone unbreakable horcrux halves. It's costing exactly 2,000,000 USD to recover the message

This is the equivalent to brute forcing an 81-bit key. My point is, it's much cheaper to break the channels than it is to break the encryption keys that start from around 128 bits and go up to 256 bits.

"In old times you couldn't do this since there weren't so many ways to communicate, and they were all insecure except one very very expensive one."

In the old times there was no encryption whatsoever in Yahoo Messenger, MSN messenger etc. In the old times there was no E2EE so you only had to hack the servers to get access to massive amounts of user data (this still holds true for some shit services, e.g. Telegram).

"--except for some very specific vulnerabilities and state-sponsored attacks"

State sponsored attacks are about hacking endpoints, like Besos' WhatsApp. And Horcrux doesn't solve this in any way. Even if your magic wand is an airgapped device. See

https://ieeexplore.ieee.org/document/7122176

and

https://www.computer.org/csdl/magazine/co/2015/07/mco2015070...
Multiple words <----> modal logic; possibility mode <----> monad.

Your friend is in the monad, now you are too. No big deal.
I am not a crypto maven, which means my ability to analyze the strength of various crypo systems is poor, although people say PGP is good at encrypting files and messages. I also had the thought of encrypting a file with one encryption scheme on top of another one - encrypting my file with one encryption scheme, and encrypting that encrypted file with another encryption scheme - although that idea is so obvious I am sure it is not a novel idea.

What is slightly novel is if I use a system with some tested (but uncertain) strength like PGP, and within it encrypt something with my own rolled crypto - this might protect me somewhat. Outside is the battle tested crypto of something like PGP. Inside is my own crypto system which might have some weaknesses, but which will probably take some hours of people working and analyzing it. Even if it can be cracked with 24 hours of analysis by skilled cryptographers, it still means it is not just spewed out of some computer somewhere as a trivially cracked message. Skilled cryptographers do not grow on trees, so my bet is that

#1 - Odds are something like PGP is not cracked, or at least a superpower can only crack a small percentage of messages a year in terms of computing power, so I am relying on it not being cracked or being hard enough to crack that my message is not deemed worthy

#2 - If it turns out PGP is quick and trivial to crack, I am relying on my message still not being deemed worthy enough to merit a few of the scarce labor hours of skilled cryptographers.
What's the process of finding P99? Is it taking a bunch of samples, getting the standard deviation, and then calculating the value at which 99% of all possible samples would fall?

This also assumes O(1) I assume...

(I'm thinking of how to apply reasonable timeouts to background celery tasks)
The first steam engines spontaneously exploded. The first internal combustion engines spontaneously exploded. I'm sure the first helicopters did also. Nobody has really tried to advance rocket technology since the early 1970's. That's only 25 years after Sputnik and 40 years after the V2. 1970 is 50 years ago.

SpaceX was founded in 2002 to start advancing rocket tech again and has made amazing advances so far. I agree that the West's safety first environment of today that rocket travel seems way too unsafe for most, but there still plenty of people that don't have that mind set. I would say too each their own, but would you advocate that no one should even try?

This transportation idea with rockets is also just a side business opportunity for the Starship. If the Earth flights work out then many more of them can be sold and launched, bringing down cost and increasing the rate of improvements. The main reason for building it is to dramatically reduce the cost of putting things into space and traveling to and from Mars.
All the companies I've worked at have a dedicated Platform team that does all of the things that you mentioned.
Yep, this happened to our ORG a while back, and Sendgrid took no responsibility. Wish I could go into details, but... they're finally implementing 2FA and revamping how they deal with identities.
IMO your identity is how people think of you. You might think of yourself as an credible person, but if other people don't think so then what's your identity? You might think of yourself as a safe person, but if other people don't feel that way, then what's your identity?

In this perspective, identity is about relating to other people, whether on matters of Chevy, Apple, or skin color.
I am a bit like the author's dad :). But sure, just like everyone we have our own reasons and it's hard to argue against personal preferences.
I will mention that the leaf suffers from another problem that sets it apart from more recent ev's like the tesla.

I don't really think it's as much temperature management or some defect.

I think it's the size of the battery - it's small. You can figure out the lifetime with simple math. A tesla with 250 miles range with 1000 cyles would have gone 250,000 miles. A leaf with 75 miles range * 1000 cycles will have gone 75k miles.

And telsa recommends keeping the battery between 20 and 80% and I believe the slider says "daily" is 60% and "trip" is 90% (for occasional use)

A 2012 leaf will default to 100%. There is a way to change this to a lower value, but it's well hidden in the system settings and I believe you have to agree to telemetry to set it.

And if you DO set it on the leaf, you will limit your range to about 45 miles (of ideal driving)

Anyway, the idea is that newer cars have bigger batteries, a much higher lifetime mileage, and no need to cycle the battery charge so high, so low, or as frequently.

(a tesla driven 200 miles a week might cycle the battery once while a leaf would cycle every day)
This was the impression we had 20 years ago looking at RMS talking.

It felt like a cult, we felt he asked to us make completely unpractical sacrifices purely in the name of an ideology, the Free.

In hindsight he might have been right, but there clearly was a communication problem, and our kneejerk reaction was to take distance from anything that looked like a cult.

That’s still how people react when they’re just told Apple is evil and they should give up their iPhone for some open source hardware phone or they’re sheeples.
Shoutout to all of the TOR and Firefox users who have tirelessly been doing captchas for the last few years to make this possible!
I've been sick to death of it since the days of Nintendo vs Sega, but I'm starting to come to terms with these being relatively benign outlets for tribalism.

I'd much rather people burn off that kind of tribal or religious energy via PS vs Xbox and Red Sox vs Yankees than Left vs Right, which is an unfolding disaster.

“This is a war universe. War all the time. That is its nature. There may be other universes based on all sorts of other principles, but ours seems to be based on war and games." - William S. Burroughs
Mojaloop Foundation
My thought is the purpose of a job interview is to weed out people who are an obvious poor fit for the job temperamentally, and to verify that the interviewee has a working understanding of the relevant skills that they listed in their resume. Beyond that, actual job performance depends on a lot of factors that are very difficult to assess in an interview.

I think a lot of companies have deluded themselves into thinking they've designed some sort of unique interviewing system that can guarantee good job performance (instead of reducing the incidence of catastrophically bad performance), but honestly, job performance itself is very hard to measure in any objective way once you disregard the extremes.

Just because a misused tool is bad at doing the thing you're misusing it for doesn't mean that it doesn't have utility when used for its actual purpose.
Some kids today are lucky was my initial thought, mine wouldn't get a phone-line after the film Wargames came out.

Though that era was also the days when a child could buy a knife, matches, all sorts of chemicals and even glue. Oh and chemistry sets with chemicals that would get you upon a terrorist watch-list today :(. Today's kids are with that all in mind - perhaps not as lucky in hindsight.
I have issues with some colleagues who are very opinionated about which language/tech to use. Overtime, I learned to value more pragmatic people who can get work done without going into sterile religious discussions.
Hmmm, released in 2016 though? A good choice for then (that I missed), but a 4 year old Android seems like a poor choice for today.
Until it is a fraud: https://en.m.wikipedia.org/wiki/Hot_Lotto_fraud_scandal