skysight-inc/HackerNews huggingface dataset:
Layman's question: I don't see how this small reactor is so unique or why it took so long to be developed for regulatory approval. The article claims it produces about 50MW of power with a planned 60MW version. Well, there are already very compact reactors in use on today's aircraft carriers (the A1B and A4W) that produce a much larger 500 to 700MW per module and are also relatively small (after all they fit on individual ships). And obviously deemed quite safe for the exact same reason -they're on ships that travel to all major ports and contain thousands of crew members right inside the same metal hull that the reactor is in. Even more compact and fit into an even smaller vessel quite safely for the crew: submarine reactors like the S8G, which produces over 220MW and measures only 42 x 55 feet in size, with a weight that's not unreasonably greater than that of the NuScale

Basically: What's so dramatically difficult about doing the same for a terrestrial compact reactor to make something like the NuScale take so long to get approval?
At what point have people become so entitled that they think they should be able to consume all the content they want for free because they are slightly inconvenienced by price or availability.

If you don't feel like paying, don't watch it.

If you don't feel like finding out what service a show is on, don't watch it.

If you don't like the fact that you need to subscribe to multiple streaming networks to watch the shows you want to, don't subscribe and don't watch the shows. Having 5 streaming services to subscribe to is still infinitely better than cable.

If you think piracy "sticks it to the man", you'd do a better job by not watching a show and not talking about it. Pirating the Mandalorian and gushing about it to friends, family, and the internet just helps Disney.

Edit: Please downvote me, I enjoy finding out how many people consider media consumption a fundamental human right instead of the luxury good that it is.

Regardless, ask yourself how you'd feel if the film, video game, or book you pirate was made by a close friend. Would you tell them you pirated their product? And if so, why?

As a video game creator whose digital games cost nothing to copy and distribute, I can assure you that piracy directly affects my ability to continue making games.
Interesting - I also disable custom themes, maybe that's why I don't see that button?
Others have already said it, but that name is for a type whose values are intervals, not a type whose values are numbers within an interval.
Unfortunately, SQL Server's merge statement has a LOT of issues. One of the worst being that it is isn't atomic (without non-SQL-standard hints)[0]!

It really feels like it was a half-assed feature.

Great that they followed the standard, not so great that they made it nearly unusable with such a poor implementation.

I was super excited when we got SQL server 2008 at work (since upserts are a relatively common issue) and was devastated to learn all the issues with MERGE. I didn't care that the syntax was funky, I just wanted to avoid needing to manage transactions/locks/etc.

[0] https://weblogs.sqlteam.com/dang/2009/01/31/upsert-race-cond...
This seems odd, especially coming from Troy:

> Take, for example, the following password:

> P@ssw0rd

> This is a good password because it has lowercase, uppercase, numeric and non-alphanumeric values plus is 8 characters long.

Calling it a good password, even with the later caveat that "hackers have worked [character substitution] out", does not seem to make sense:

It's Time to Kill Your Eight-Character Password https://www.tomsguide.com/us/8-character-password-dead,news-... "Any eight-character password hashed using Microsoft's widely used NTLM algorithm can now be cracked in two and a half hours."
How to forecast armies’ will to fight
> For example, if you bought it before date x then you don't need to create a facebook account, etc...

They let you use the device, but you cannot accept friend invites, even from other people "grandfathered" in

A little frustrating to say the least.
Likewise, if I need to change my public ip to access a service it's far easier to just download the content and serve it myself.
Tech Face a Stark Choice Between China and the United States in New Cold War
> why would I buy stocks based on a company's ability to make the world a better place

I'm precisely proposing that we change the incentive structure in a future version of the economy such that it would benefit you to invest in a company's ability to make the world a better place.

That would eliminate OP's problem, among lots of other things.

I'm proposing that the role of investors should be fully aligned with the role of scientists and engineers, and the incentives should be designed such that that is the case.

Captialism 2.0, if you will. It's a quarter-baked idea, and there are lots of questions to answer, but I'd like to kickstart and encourage more thought and discussion about a future revamped economic system that aligns incentives better than what we have today.
> Basically the DOM update loop that's popularly associated with languages like elm and frameworks like react

Have very little idea, I don’t do web development.

> That's similar to gaming right?

There’re differences e.g. games render at 60Hz, games don’t run CPU-bound jobs which load all cores of all CPUs for minutes to hours. But overall, indeed it’s much more similar to games than to web.

> Graphics

I would estimate graphics is 25% of code complexity in games (however most modern games are using off the shelf engines who implement major parts of that), and 10% of complexity of CAD/CAM.

> the majority of programming nowadays is Web sites

I think the majority of programmers nowadays, and have been for decades, working on internal line of business applications. No reason to generalize their experience over the rest of the software development.

> Even so JS and functional programming is powerful enough to drive 3D graphics on web browsers.

JS is merely passing data to WebGL APIs. These APIs are implemented in web browsers, and underneath browsers in GPU drivers. Both modern browsers and GPU drivers have millions of lines of code written in C or C++, and JS is not performant enough to replace these, not even close.

> What's the difference between a function that modifies state and a method that modifies it's own internal state?

Visibility of that state. Usability of the API. Composability of the overall thing.

> The method cannot be used outside of that context.

Yes, and that’s usually a good thing. Here’s a method: https://docs.microsoft.com/en-us/uwp/api/windows.storage.str... You can’t write bytes to a stream without the stream. From API design perspective that’s a feature, not a bug.

> What's the difference between a function that modifies state and a method that modifies it's own internal state?

For some cases, runtime polymorphism helps a lot. In that case, neither you nor compiler knows what’s in the state or how’s that implemented, it only determined in runtime. Take a look at this toy API in C#:

https://gist.github.com/Const-me/0745e09695e8e8615c14b18fc3f...

The internal state of the object returned from setupConnection method can be just the TCP socket, or it can be a socket + AES decryption + a decompressor.

The decrypt, decompressGzip and decompressLz4 functions are usable for any streams not just TCP sockets, you can pass them a file or any other stream and they’ll work just fine, despite their internal state changes to something completely different.
Works for some I suppose. I have long fingers. It's hopeless.

And aren't most outdoor brands elastic? Not good especially in the cold, where it constricts blood flow.
FBI examined Google records to see if anyone had knowledge of Guccifer persona
I did the exact same 2 years ago and haven’t looked back. Development feels fun again.
Fixed that, thanks!
A complete history with all the data ... unlike MongoDB. Boom tish etc.
I think the major hangup for this discussion is that each of us probably have a different definition of what counts as a friend. I think there's certainly a gradient between "friendly"
and "friend", but I honestly don't think the exact label matters much. For the sake of my discussion, I will consider a "friend" someone that I would want to hang out with 1-on-1.

But I think there are certain boundaries that both sides must be respectful of. For example, as a manager you need to make it clear to your employee/friend when you are communicating as a manager vs as a friend. That distinction should not be left ambiguous as that will make things potentially awkward if there is a disconnect.

As an employee, you need to respect that fact that your manager cannot tell you everything, and understanding that being their friend doesn't mean they will give you any special treatment. You should be extra careful to avoid this, as your manager will be sensitive if they notice you are trying to take advantage of the friendship in any way.

In the end, I think these boundaries can cause the friendship to not progress past a certain point if you are actively working together, mainly because it is just extra work to move past a certain level of friendship if so.
This website was a delight to view on mobile. Perfect use of space. Infinite scroll. Search. No wasted space with nonsense. Wonderfully done.
It took me a while to realize that all the skins are interactive and playable--not just animated. The playlist is the same for all (and includes the llama soundbite), but all the buttons and equalizer sliders work. Really neat (and in-browser capabilities never cease to amaze me).
Sweet. I'll monitor this an order a non-gpu version when it comes out. Most of my stuff just needs a serial console.
If that gets leaked the attacker could brute force that, and match the results to your entire list of hashes. If they're salted, they would still have to brute force each password individually.
People don't seem to realize how much things have changed on this front. Facebook now uses a whole lot of techniques to monitor new accounts, important aspects of which are that you post things, add realistic (and connected) friends, etc. If your new account does not do those things it will be locked and you will be asked to provide government ID to prove it is really you.
Ask HN: Bridging the gap between formal physics education and research?
I finished my undergraduate education in physics and computer science not too long ago, but have been working in FAANG ever since. My passion has always been physics but unfortunately to pay off loans/medical bills/etc I was more or less forced into software engineering.

I took the standard undergrad physics 'core curriculum' in college (e.g. Griffiths quantum, e&m, K&K mechanics, etc). I've been keeping up with my studies since then by slowly working my way through various 'graduate texts', e.g. Sakurai's text on quantum mechanics and Kardar's on statistical physics of particles.

I'd like to do some side work in an experimental quantum computing lab and have been in contact with various universities; however, what I'm finding is that there's a large gap between the material in the papers being read and written by the groups I've spoken with, and my formal education. The papers are constantly referencing ideas, equations, and experiments that went unreferenced in all the texts I've read thus far. Trying to Google and understand these ideas and experiments one-by-one from Wikipedia and articles has been inefficient and ineffective so far for me.

Moreover, since I have no university affiliation, it seems like these groups are not particularly motivated to help me bridge that gap; I have not received much in the way of advice in terms of getting up to speed.

Has anyone else experienced and/or solved this problem? Ideally I'd like to be able to (a) understand at a high-level the current state of the field, since there seem to be a myriad of different research directions all aimed more or less at the same objective, and (b) understand open problems for at least one of these directions (e.g. open problems in quantum dots or ion traps).
Correct, but not 100:1 hedging.
Lately, I thought a lot about an anecdote we used to tell in Germany about business consultants. It goes somewhat like this: A consultant meets an old fisherman at a small port. The fisherman is done fishing and enjoying himself. The consultant asks why the fisherman isn't taking a loan to get a bigger ship and fish more. Because he would make a lot of money to do whatever he wants. The fisherman said that he is already doing that, fishing in the morning and enjoying the sun on a bank at port in the evening.

I came to realise, that I'd rather be the fisherman. Which doesn't mean the other approach is wrong, so.
If the pepper is stored as an environment variable, adding it in addition to the salt can be a minor increase in the password security. The thing is it often isn't that hard to get if someone has access to your server.

If it's just the db that is exposed though, it could be a small added layer of protection.

And yes, I would not ever do it instead of a salt.
Tried, they ask for phone verification
> large volume OTM calls causing MMs to buy stock and inflate price

I’m a former options market maker. Seeing large volumes of retail flow is very different from seeing a giant institutional order. It affects what goes into the market versus gets internally crossed and what gets hedged and to what degree and how.

Individual investors have a moderately bad track record day trading. They have an abysmal one with options. I’m a decade out of the business, but we almost always defaulted to taking retail flow at risk.
How does that help? They can iterate through possible passwords and generate md5(pepper + md5(password)) just as easily as md5(pepper+password). The point is that they can iterate ONCE and match against all passwords in the DB. With salt they have to iterate for each row in the DB which is much more time consuming.
My current manager was a peer until we decided to combine teams and for me to back to more of an IC role.

It's been weird for me ever since. Not friends. In fact, sometimes I've felt he's had the exact opposite of my interest at heart.
> The only caveat is that your database isn't coupled tightly with your application code, so your pepper remains secret even if your DB is breached (which is usually the case).

There are many attack scenarios in which storing a secret separate from the DB doesn't get you much at all. Suppose an attacker finds an RCE vulnerability in the application – then they can slurp up the contents of the DB, but they can read the pepper from the configuration too.

Suppose they just have a SQL injection – they can't directly get the pepper from a SQL injection, assuming it is being stored somewhere outside the database. But, it may help them do it indirectly – for example, they could UPDATE their account to have admin privilege, and then access admin-only features of the application which may end up revealing the pepper. I've seen many apps which have admin-only screens to run arbitrary scripts, view configuration files or environment variables, install plugins, etc – those kind of features are helpful in supporting the application, but can be used to turn a SQL injection into more complete control over it
>> Oof, GPU by Imagination Technologies.

My first thought as well. On the other hand... baby steps. We need a chip like this very much. If the first ones are slow or too proprietary that may be OK, it is still pushing the RISC-V ecosystem in the right direction. It will help validate a lot of software which will enable more open designs by having things ready to go.
Triplebyte Engineer Genome Project (2016)
We built this to consolidate our own understanding into a visual format, and we're pretty happy with the result! It's still a work-in-progress, so if you have questions, comments, or concerns, direct them to me and I'll be happy to answer them or incorporate changes into a future revision of this graphic!
For real-life trolling fun at a university, head over to the people who are really complaining about the lack of women in STEM. They'll be in Gender Studies or something like that. Suggest that they can take action against the problem by changing their major to something in STEM.
Show HN: Know when to give up on a TV Show
What are your thoughts on 360 reviews? I've heard the process can be very devisive?
GitHub's Arctic Code Vault [audio]
Pretty simple stuff, like a hat or a triangle.
Please not md5. Please.
I like to think of my manager as working for me, rather than the other way around. I never receive orders from them, nor do I feel I need to impress or “perform” for them. But, they do have go out and find information for me, or do stuff to unblock me. Plus, it’s their responsibility to keep me around and keep me happy. At the very least, it’s a partnership, so that makes it easier to have a personal relationship.
If you are doing this isn't it pretty much the same as encrypting it with a key?
I think the magnetic shield would still be needed, though, since the solar wind would otherwise just strip away the new atmosphere.
I try to fight my primal instincts of jealousy, etc. but it really feels like a lot of the 'butts in chairs' type people like human resources, various managers, etc. have slowly cut back to basically responding to emails/messages and maybe working a few hours a week. If that is your definition of WFH being great than it is definitely going great for them.

As a dev it has kinda shredded my desire to do large scale unpredictable projects and made me pick up predictable boilerplate type work. One is easy to demonstrate progress on, the other is more abstract. This is also slowly eroding my passion for engineering so I may need a rebalancing.
This is something i despise on HN. By normal standards, 10 points within 1 hour would've put this post on the front page.

See for example https://news.ycombinator.com/item?id=24378758, with 8 points on the 9th place at the first page, at the time of writing 59 minutes ago (this post having 10 points, 1 hour ago, on the 3rd page).

Here we have a peer-reviewed, credible, scientific report of a probably uncomfortable truth, and it has to hide on page 3.

In the spirit of HN I admit I probably have a biased opinion, but I don't want to incite a flamewar. I am sincerely interested in the reasons - @dang, would be nice to help here.

And sure, vote me down to oblivion. But at least provide a reason.
Totally agree with this, hence the caveat that the code doesn't get leaked/compromised :)
Anyone know which WWII british cookbook contained the recipe for "life sustaining glop"?
I know this is just a comment on HN, but I want to point out that MD5 is not a password hashing function, and is broken even for a number of other hash purposes. For passwords something like argon2id or another modern slow hashing function is appropriate, and for general purpose, SHA2 and SHA3, as well as BLAKE2 (and maybe BLAKE3) would be good choices.

Further, there’s so little reason not to salt, so you ought to do it. It’s built in to the hash strings in most modern pw hashes. Peppers are also a great idea. Defence in depth!
am I missing something here? the attacker still only needs to know the pepper to brute force all the passwords with this scheme. Since the pepper is deterministic, and especially with md5 which is already extraordinarily quick to reverse, the attacker can just take md5(pepper) then do the extremely quick operation of the hash extension md5(password)
I wonder why it isn't best practice to hash with a salt and then encrypt the passwords using something like AES.
The encryption key can be stored in the secrets manager and be injected via environment variables.

Unlike a pepper it is possible to change the encryption key if it is leaked. I don't think changing a pepper for existing hashes is possible, but if they are encrypted you can just reencrypt them with the new key.

So is there an obvious downside I'm not seeing to hash with a salt and then encrypt?
Worked great for imperial Rome for a while - they let the the CEOs of the day (military generals) fight amongst each other and fight/conquer the Gauls, Franks, Teutons, etc. The generals and armies got to keep status and power if they brought the spoils back to Rome. Once in a while, one of the generals crossed the rubicon and the Senate called on the other generals to suppress that one.
I won’t call Bitcoin a success as long as its value is measured in dollars.
We can do better than anecdote. 74% of the largest tech firms executives are white [1]. This perfectly reflects 1990 demographics, when the US was 76% white [2]. A 30 year lag between arriving to a country, and becoming an executive, seems more than reasonable.

[1] https://phys.org/news/2018-06-diversity-silicon-valley-tech-... - using weighted average of the histogram.

[2] https://en.wikipedia.org/wiki/Historical_racial_and_ethnic_d...
Leagally no.

They legally require you to give them honest/correct personal information.

Practically maybe.

But there is all the pairing with phone etc. requirement.

There are also all the information they likely will collect about usage patters, interactions and your PC. So if you don't also use a isolated throwaway PC/console account and don't use social features you can be sure they will be able to somewhat link your information anyway.

It not just about forcing increased FB marked share.

It's also about an additional source of information they can link and combine.

(Due to GDPR they are quite restrict about what data Oculus can share with the rest of FB.)
I'm not sure of the kind of plastic, it usually feels like some kind of HDPE.

I and others have had inconsistent results with SharkBite fittings for long-duration uses, for example see [1]. I suspect their O-ring is a potential weak link over a decades-span. YMMV. I like them for temporary (a few weeks to a few months) scenarios, but I haven't seen enough field experience like with PEX to know its design limits. I might use BoatLIFE Life Seal sealant in the future for the silicone if I run into another already-installed mini-split because I've seen it stand up very well to a massive amount of marine abuse in the short-term (3-5 years), but they don't warranty the sealant for longer than a year because of how much abuse it is normally put through, so I'd just be an n=1 experiment.

Personally, the next time I will install a new mini-split or similar that has such a alternate drain arrangement, I'm going to do the following before the installer arrives. Flip the unit upside down so the pipe points up, drop some JB Weld putty into the bottom of the pipe, then fill the rest of the pipe with West System Epoxy to make it truly permanent and out-of-sight-out-of-mind for any possible extreme lifecycle of the unit.

A friction-fit drain plug pointing out with the pull of gravity in a thermally-variant environment is just asking for trouble. If I had the right tools I'd probably fab up a replacement drain pipe out of stainless steel with threading to accept a silicone plug, and West System epoxy the pipe to the body of the unit, and see how that works.

[1] https://www.contractortalk.com/f9/sharkbite-fittings-do-they...
It sounds like a great idea on paper, but pools arent something people get really into when compared to sonething like home brewing or aquariums.
Won't you add a seed before hashing. With a 8 byte seed that's 16 effective characters, probably impossible to crack.
>Blacks in the US are less likely to have the resources at their disposal to enter our field.

What is "our" field? Food service? Car repair? Carpet cleaning?

>to be able to afford college on their own

No college is needed to be an entrepreneur.
To my knowledge there is no performance management as such (at least in my subsidiary). We have a mandatory quarterly review, but it's intent seems to be to maintain the manager-employee relationship to at least a bare minimum, and to offer a platform to collect data if someone is really, really not pulling their weight.
Biafra, Katanga and ISIS forgot about the superpower part.