skysight-inc/HackerNews huggingface dataset:
If someone wants to home in and destroy you, they've always been able to do that without total surveillance.

If the records exist, and you're not guilty of the crime, hope exists that you could be cleared.

Doesn't it make more sense for one's worst fear to be accused of something for which you are innocent but have no alibi?
The Boeing-Lockheed example isn't the best. Most defense contractors subcontract portions of the work, even to companies they competed against.

But I do agree that a systems thinking approach is usually taken, contemplating the N-order impacts. Also, I'm pretty sure that some agencies do use AWS already (or recently did). So I don't think it's fully exclusive.
Here’s what non-evil thing to do with this information is: don’t collect it. If you collect, don’t store it. If you store it, try to de-identify it.
Ask HN: Have you moved to another country?
Hi! I'm a fellow hacker from Buenos Aires, Argentina. The country is in a long process of continuous decadence and this pandemic made the things even worse. Along with the daily changes of rules that we have to experience and adapt, the insane amount of taxes, the inflation, the devaluation against US dollar and the growing insecurity it's becoming a pretty difficult place to live.

I've a pretty good financial status here, I'm a contractor/consultant with a nice local network, I own a home and enough savings to last for several years without working. All my family is living here and leaving them would be pretty sad. Those are the things delaying my decision to move to some place in Europe (I've Italian citizenship) and start a new life there with my wife and newborn.

Have you moved to another country? What was your experience? Did you move with a job lined up?
Seconded. Essentially hope that you’re such a small fry the machine won’t turn it’s gaze on you. Trying to vote for people who will curb it’s power and support those who blow the whistle or sound the alarm.
IMO they’d say that explicitly if it was the case. In reality I bet lots of people searched for those individual terms and linking a combo back to a pair of /24s seems iffy to me. Why can’t they link it back to his exact IP?

If the answer is that Google and Facebook have logs and the ISP doesn’t, that’s another whole conversation, especially if they can be linked back to a specific individual like in this case. I doubt anyone would be ok with having a lifetime search history.
The Lancet: World population projections by 2100
This study came out in 2020-07-14.

Link to the study can be found on the webpage.
I just noticed recently that in American English "bullshit" often means "unfair" or "trivial" where in British English it usually means "untrue".
TV budgets are higher than ever even while piracy is easier than ever before. The only thing that could possibly kill tv would be jacking up the costs enough to keep users from enjoying them legally. I myself pay for hulu and netflix and I figure that contributes sufficiently to the shows I enjoy.

It really doesn't matter what I do. My employment is an arrangement for services rendered same as yours. At the absurd limit where nobody paid for anything and absolutely everyone pirated everything nobody would be forcing you to work for free. Your employer in that scenario would have totally and wholly failed to secure an arrangement with customers to voluntarily transfer their money to your employers pockets and thus justify their existence. You wouldn't work for free you would just do something else.

In reality if its really easy to pay and even mildly frustrating to pirate it seems like a reasonable balance of paying customers and freeloaders is apt to make you all healthy and wealthy.
Idea Market Fit
> Here we have a peer-reviewed, credible, scientific report of a probably uncomfortable truth, and it has to hide on page 3.

What truth is that? An early stage vaccine produced an antibody response? Don’t see why that should be so uncomfortable; it’s what you want them to do. Lots of vaccines have done so.
AI researchers use heartbeat detection to identify deepfake videos
What was the search volume? That’s relevant and they should have to list it.
Modern c++ can get you 95% of what rust offers. It's just that the syntax is hideous, especially templates
Yet. :D
Some students look for answers in the back of the book and then figure out how to show work which gets those answers. If you do this long enough, it turns into a cult-like reverence for "the right/approved answers".

Thiel's reasoning on one thing or another may be flawed, but he definitely doesn't work this way. And he has a ton of money. So that can make the back-of-bookers both irritated and resentful.
Then the attacker will just add their ip to the whitelist?
Yeah, I've got a few gallons of 30% H202 sitting in the garage (because the 3.5% household variety was out of stock on Amazon, I ordered from a lab and we dilute it ourselves). Requires wearing some protective clothing when dealing with it. Even when diluted to around 5-10% it can cause irritation and burns. That said, it's also not shelf-stable. After about 6 months of being opened it'll just be a gallon of water. Still cheaper than buying the branded stuff.
Regardless of your personal feelings on the matter, the systematic forces involved would result the same problematic methods that it has employed in the past. It’s pretty much all the same people running things for the past 30 years.
In a state owned enterprise, the profits would generally go to the exchequer (assuming full state ownerships; otherwise dividends would be paid as normal, with the state owned portion going to the exchequer). If there were profits; in developed democracies, restrictions on state aid tend to relegate truly state owned enterprises to things like running the electricity network, which generally isn’t very profitable.
You cannot be truly friends with someone when there's an imbalance of power.
Hitler e Stalin cantano Video killed the radio star (deep fake)
To be fair though, the animation part of the content is only a minor part of it. The educational and entertainment value of what's actually said is much more important.
One concrete advantage RISCV has is its variable-length SIMD instruction set. The assembly instructions used for SIMD in RISCV can all operate on data sizes that are various powers of 2. All using the same instructions. You could even call it “SIMD with dynamically-sized data”.

Right now, x86 needs one set of instructions for each SIMD data size. That’s why we have SSE, AVX, AVX512, etc. This introduces complexity for both hardware designers and software designers. You have to actively update software to work with newer chips with larger SIMD registers. In the proposed RISCV design, you wouldn’t have to. It would just work on all sizes.
Reminds me of the Feynman story where he goes to Brazil. May be a southern/latin Europe thing?

https://v.cx/2010/04/feynman-brazil-education
Plus, it was designed by people with no database expertise. Lots of people were burned by MongoDB stupidity. I have heard the company hired competent people since. Once burned, twice shy.
Starlink internet private beta underway, low latency and speeds over 100Mbps
Does your app really need people to register an account? I’ve seen plenty of apps that make people sign up when there’s absolutely no reason to require it.
Nintendo back in 2001 came out with the e-Reader that would plug into a Gameboy Advance and read cards with data printed on them. You'd have to scan a few "stripes" of data, but it there were several NES games that you could run if you had the right cards. The cards held the data for the games, rather than them being already on the cartridge https://en.wikipedia.org/wiki/Nintendo_e-Reader
If you like maximum softness, then Maine Coons are the way to go! Mine are so soft I can't stop patting them.
Good luck. I wish I had the stones for that.
If you are at $BigCorp there's probably only a rough correlation between what you are paid and what you are worth.
my non-crypto intuition on hashes is that the key idea is that there should only be one hash that matches my password (no collisions i think is the word? )

So naively i understand that a non-salted hash for "password" is a terrible idea, since two peoples hashes for "password" will be the same..

but i still struggle with the practical safety this gives in db breaches where the salt is in the breach..

Troy seems to say that this makes the cracking process slower, which think i see...

but is it fair to think that the KEY ISSUE is the uniqueness of the hashing function for any given input string?
You may not be able to get your phone on the corporate network without installing their MDM, and you may not want to give your employer the ability to wipe your phone.
That's pretty cynical. Giving away your entire fortune to charity and convincing others to do the same isn't just PR, it's a genuine effort to make the world a better place. He was a cutthroat businessman and made millions at the expense of other businessmen, many of whom would've done the same to him if they could. I don't think being a hardass in the board room disqualifies you from being a generous and caring person in your private life.
Thanks for the taking the trouble to make such a detailed response. Very good points.
It's not guaranteed to be unique.You can have multiple things that hash to the same value.
It would be cool if you could also use the exact same interface for coverage based fuzzing, creating a unified property testing/fuzzing/formal verification interface.
Show HN: Sparrow – Fast Scripts Development Framework
You're right, but then you have the problem of credibility. If Google's records are credible for this, then what's the chance that somebody will notice if some of those records are manufactured? It's like forging signatures - it's a problem because we trust signatures to some extent.
Google Finance has a new look
That's called a BARF diet: BARF – Biologically Appropriate Raw Food

https://www.zooplus.co.uk/magazine/cat/cat-nutrition/barf-ca...

>What is BARF?

>The term 'BARF' describes so-called 'biologically appropriate raw food'. This feeding method is appropriate for the key reason that cats are carnivorous by nature. Raw food gives them just that – lots of fresh meat. In contrast to cooking your own cat food, BARF portions are given out raw and are not cooked or seared beforehand. However, this has also led to criticism of raw food, which is mostly unhealthy for humans and can lead to stomach upsets and intolerances. Does the same not also apply for cats?
Not having a salt means that hashes can be precomputed for common passwords and the exercise of cracking passwords is a simple text search in your precomputed table.

Having a salt means that the universe of password:hash correlations is different for each password entry.
Who are some of the other people you've learned a great deal from? I'm curious!
It is, however, member of EFTA, the Single Market Agreement, Schengen, and the European Conference for the Protection of Spotted Eels (but not the Customs Union, nor EEA). It also has a host of individual agreements to participate in Bologna and the like.

As a result, any given EU regulation, especially of the economy, is more likely than not to also apply to Switzerland.
It's served me fairly well so far. The key isn't to minimize my ask; the key is maximize my value and then ask for something where I'm making good money and the company is making that amount plus all the benefits and other costs plus a margin on my labor so everyone leaves the transaction better off. The last thing I want is for a company in the business of employing @sokoloff to be in a money-losing business thereby.
Ask HN: What are some email providers more people should know about?
I'm looking to create a new e-mail address for various reasons. Posteo and Protonmail were my favorites, but none of the variations of firstname.lastname@provider were available for me. What are some other email providers, paid or free, that provide a reliable service and ideally have a short domain?
>There is this myth that schemas must be enforced at the database level.

You must have single point to enforce anything. This is very rarely the case with the app, where a) there will be 20 places that access database and b) often some tasks are done by operating on a database directly

Some rules cannot be enforced by database, sure, but "a field must exists and be a string" is infinitely better than noting.
StevePerkins has already done an excellent job trying to showing you why you're wrong.

I don't know why this is so hard for you to grasp. For people who liked the way things were in 1990 (or whenever) all that technology is still out there and in use (with a few minor and largely unimportant exceptions). It's even better than it used to be! You can get an RPi system for HOW MUCH! these days. Internet service is often good enough to host your own (small) server if you really want to do that. If you don't, there are dozens of excellent cheap hosting services. Everybody uses open source compilers. Linux is everywhere, opening stuff up (not all stuff, but a lot of stuff).

Now, do the majority of people who use "the internet" use any of this stuff, or even care about. They do not.

I would suggest that what you care about is precisely what Steve noted: Eternal September. You're unhappy that the vast majority of users of "the internet" don't care about the sorts of tools, platforms and culture that you do (and to a large extent, I do too).

But those platforms, tools and capabilities have not gone away. They are all out there, and in most ways are healthier than ever. They have not become a part of the majority experience of "the internet" (Android doesn't really count, though in a few small ways, it's notable). That might matter to you.

But it doesn't mean that the things you prefer are gone, or that "the internet" has been turned to shit. It means there's more than one "the internet" out there, and most people interact with a version of it that you don't like. You can rail against that if you like, but please don't claim that it has destroyed the other versions, because it hasn't.
Interesting that the group behind this is Tsinghua-Berkeley Shenzhen Institute, which is sponsored by UC Berkeley as well as a major Chinese university and the Shenzhen government.

China is quite interested in RISC-V gaining traction as trade and security barriers rise and they work to build up their domestic technology sector.

Going into wild-ass speculation mode, if this board really is affordable, I wonder if it's being subsidized by the Chinese gov't to encourage RISC-V adoption.

If I understand correctly, it's hard to make a cheap RISC-V Linux board with a price in the same order of magnitude as Raspberry Pi, because the Pi benefits from the availability of cheap, powerful ARM-based CPUs that were mass-produced for the mobile phone market. Linux-capable RISC-V parts have nowhere near these economies of scale.
Think you could make it one day without using those acronyms?

Use of acronyms is usually an audience dependent thing. I am frequently in the in the audience of talks/papers where I don't know all the acronyms. I think the general rule should be, for writing, if there is a reasonable percentage (say more than 10%) of readers who don't know the acronyms, define it on first use. When speaking, give some context or define the terms early in your talk, to help folks along.

I say in a meeting the other day with marketing folks. They may be the worst offenders. Techies are pretty bad too.
I think the reason most people are fine is because they don't see the danger or don't feel that it's real. It's the "it won't happen to me" attitude. But when someone innocent gets caught up in it, then it's too late and there's no remedy.
I don't know. But everything the FBI got from Google was also given to the defense. If it was a popular set of terms, the defense would have raised that argument.
Naval reactors use fuel that is enriched to weapons grade. I'm pretty sure we don't want that sitting around in towns all over America.
Are we really that lacking in creativity that we can't imagine a world in between "Panopticon" and "Oregon Trail"? Legislation that makes this illegal would be a great (and really easy) start.
Compromising the hash and salt, since they must be stored close together, makes it possible to identify if the salted hash is a password in a corpus of previously compromised passwords. An attacker can do Hash(PW, Salt) for all PW in a list of leaked/cracked plaintext passwords. If they've guessed your password and it's shared across multiple services, lateral compromise. Salting only prevents the rainbow table attacks, where an attacker precomputes all possible hash values for a known keyspace (like, say, 8 alphanumeric length passwords) and just look up for a match. Encryption is concerning because it necessitates the ability to decrypt since they're often inverse operations of each other, and presumably there's a shared key stored somewhere to do the comparison, which means it's likely trivial to recover the password compared to hash cracking and undermines any strength or complexity benefits. This also likely points to other bad behaviors utilizing this "feature", such as helpfully emailing you your plaintext password when you forget it.
You aren't technically wrong (the algorithm can add some number of bits of effective security), but that's still horribly misleading. "P@ssw0rd" is emphatically not a good password, and "because it has lowercase, uppercase, numeric and non-alphanumeric values" does not (significantly) improve a password. See https://www.explainxkcd.com/wiki/index.php/936 for a specific example. (But note that you need eight or more words if the attacker has password hashes that they can attack offline.) Salting adds 0-2 words worth of security depending on how many users can (no longer) be attacked with each hash invocation and a good (slow and optimization-resistant) algorithm adds 1-2 words depending on how slow you're willing to make login.

Edit: I think TFA might be being facitious in the claim "This is a good password because it has lowercase, uppercase, numeric and non-alphanumeric values plus is 8 characters long.", although it doesn't communicate that very clearly.
That is what some people think, but the only thing we know for sure about the price of gold is that you have to pay its price in ounces to get one ounce of it.
Interesting. I'd guess it had partly to do with regulatory hurdles, accreditation and such. The other parts, acquiring the land, buildings, equipment, faculty are rather capital intensive. I suppose they could be rented at first.

Finally, that leaves the prestige angle.
Why is that the most likely explanation, rather than something you just produced from your butthole?

The FBI had already requested all Google records pertaining to Stone's accounts on May 4, 2018[1]. The warrant for the search records wasn't issued until June 18, 2018[2]. The FBI were not randomly trolling search logs; they were already on to Stone.

1: https://www.courtlistener.com/recap/gov.uscourts.dcd.204569/...

2: https://www.documentcloud.org/documents/6879593-180820-Stone...
This analogy didn't one-hundred percent land with me. There's a difference between security theater and 'health theater'. The probability of getting on a compromised plane is the same for everyone. The consequences for getting COVID are different based on personal risk factors. Framing the discussion with the phrase 'health theater' suggests one's personal risk factor is low (which is wonderful, it's great that we have low-risk groups), but it unfortunately doesn't apply to everyone. Our health policy shouldn't be based on notions of one's individual risk.
Haven't worked with these specific sensors before but I've worked with some microfluidics and other exotic ICs and in my experience, most niche sensors usually need to sell thousands to break even on the support cost of getting even one customer up and running with just a tweaked reference design because the engineers have a lot of competing responsibilities. Oftentimes these manufacturers are also competing for fab time against ICs with a cheaper setup cost and higher volume so theres extra pressure to get together as many big orders as you can, otherwise the extra setup overhead drives the cost through the roof. Hobbyists and small customers would drive most of these niche fabless companies to bankruptcy
Hilariously, on one of the slides posted to Twitter, the phase 1 chip won't have low-speed peripherals. But I'm sure they'll include at least one serial port. No one is going to get very far without even a serial console.

The phase 1 SoC is all I'm interested in for now. The lowest-size LPDDR4 part I could find is 256MB, which isn't a lot, but enough for what I want to do. Having that RAM, and networking or USB, will be enough for me to buy one. Assuming a reasonable price, of course.
This is one of best, perhaps the singularly the best, times in life to smile and go along with it. (She has a PhD in neuroscience; entering some kind of Statistics Olympics wasn't going to improve anything in my life at that moment.)
Interested viewers might also enjoy this free book: http://www.inference.org.uk/mackay/itila/

An early chapter talks about Hamming Codes.

I've only worked through the first few chapters, but I recommend it. It seems to be a unique book.
Smart writing tools +

With regards to myself having a Smart Grammarly tool where I can write a page of dot pints and provide a few web links and then run a browser extension that turns it all into a coherent logical article. That would be brilliant.

Even more fake content -

The more SEO optimised, computer generate, algorithm ready content that is produced the faster we head into control-based dystopian context.

You spend a month and write up your best distilled, researched, coherent new thoughts on where we need to shift as a society.

Other parties jam together 1000 response articles drawing on established thought with the intent to deceive and your message is lost in the noise. “It’s all fake anyways”

An acceleration of our information downfall.
Colin Lemahieu set out to solve at lot of the problems that Bitcoin suffers from by creating Nano (nano.org). He did this by having each account have its own blockchain, rather than using one blockchain for all transactions. The result is Nano transactions take under 1 second (fully confirmed) and there is no fee for transactions. It's also scalable with 1465 confirmations per second (aka transactions) reached on the test net the other day. There is no mining involved, so Nano is environmentally friend and voting is done using a system called ORV (open representative voting) which is similar to delegated proof of stake, but doesn't require actually staking and risking coins. Instead it is more like a liquid democracy system, where you delegate your voting weight to a representative you select and can change at any time. Because there are no mining fees, there is no incentive for centralization and for this reason it is expected that the Nano voting weight will become more distributed and decentralized over time as adoption increases. From a tech perspective, Nano really is amazing.
Not everybody who pays the taxes that fund JEDI do.
It’s 5 to 6 hours with another few hours of bonus material. The main thing I’m changing going forward is course structure so it becomes more like a self-paced workshop.

And to be honest it hasn’t been that bad, my main course has made $160k over its various iterations the past 5 years. The bigger thing is that I’m realizing the how-to style tactics course that is so popular these days doesn’t deliver what I truly want to teach.
One of the more esoteric security practices is client-side hashing, the mere mention of which tends to draw ire:

https://news.ycombinator.com/item?id=24026233