skysight-inc/HackerNews huggingface dataset:
Terrible crypto design is a recurring feature of Microsoft products too, e.g. the original LANMAN password hash has a maximum password length of 14 characters and just treats all passwords as two separate 7 byte values to verify.

If we use MD5(password) then brute force of a 14 character random password (say using a 64 symbol character set) isn't really viable because you need to try about 2^84 values. MD5 isn't an acceptable password hash, but using a strong random password was enough to save us.

But if we use LMhash(password) that same password can be brute forced in just 2^43 operations. This design is so bad that there's no way for the user to protect themselves.

This popularized Rainbow Tables. You may use a time-space tradeoff for any hashing scheme that doesn't have salt, or doesn't have enough salt compared to how much it's used, but for most schemes a strong random password overwhelms the power of the time-space tradeoff anyway. Rainbow Tables tilt this tradeoff so that it's more favourable in exchange for a modest reduction in effectiveness† and for LANMAN they're enough to turn it from "If you had a super computer and hundreds of gigabytes of disk space you could crack any Windows password hash near instantly" to "If you have a mid-range PC with 5GB of hard disk space and download this software you can crack 99.9% of Windows password hashes in a few minutes".

†For a lot of pre-computation effort you can get all the effectiveness back. But that's not important here.
Well, I'm personally happy for you to not invest in the social contract if you're happy to not use any infrastructure or services in our country, including our power, water, internet, etc. and including our legal system after I stab you in the eye and steal all your shit, while I'm happily being protected by Her Majesty's Army, Navy, Airforce and our Policemen, Firemen and NHS.

That sounds totally fair to me, be free little anarchist! Wallow in your shit without sewers or water. Sounds delightfully rustic, but not for me.
Clojure is already good at that- at conditional pipe / filter / aggregate semantics, bc it is a lisp. Specter is for a different problem. When you have a data structure that has some semantics and is deeply nested (and you aren't discovering the structure, like getting size from a node via a function call) Specter has a declarative set of operations to navigate and extract on that data structure, extremely efficiently.
Remember StumbleUpon?
Amazon already has GovCloud and C2S. If they also got JEDI, they would have complete lock in / monopoly for all of the federal government's cloud services. And with the length of all these contracts, they get guaranteed lock in for a long time. There needs to be competitors in the space to prevent complete lock in. Otherwise the price of re-doing all the systems for a different cloud would be immense. They could basically set whatever price they want on their services, as long as it cheaper than the cost of moving they will keep the contracts for decades to come.
Welcome to every Vitamin D study done ever. I follow some PHD/RD combination researchers on Twitter and they all get together each time one of these studies is done and bang their heads against a wall.
> Why can’t they link it back to his exact IP?

Because permanent logs don't contain full addresses, because of GDPR.
> I don't think being a hardass in the board room disqualifies you from being a generous and caring person in your private life.

No, but it also doesn't somehow wipe away the actions he took to make that money.

He didn't just attack other businesses, he attacked open source, and would have destroyed it if he could have.

By all means, you can think whatever you like about the man. Gates has done some pretty slimy shit. Being nice now is nice, and I applaud him for it, but nobody is obligated to develop amnesia.

Further, there is no obligation to politely applaud the rich person picking and choosing who should benefit from their largesse. Nor in noticing the massive PR campaigns that go along with it.

He's buying what he wants with his money.
Surprising since Keepass has had that for years
"Amazon checks boxes. Microsoft solves problems. "

Please.

"The Government is, and always has been, for better or worse, a Microsoft shop."

So MS Government Monopoly is a great reason to use MS? Really?

"And, frankly, its better this way. The biggest cloud provider doesn't need to get bigger."

This is the wrong answer.

" if not most, teams across the entire org are heads down on JEDI right now."

This is not relevant if MS doesn't have the right solution.

None of what you have said really changes the situation, other than possibly Active Directory, but I don't think so.

Amazon has made some serious claims about lack of oversight and those should be looked at.
I love his earlier games (especially DK), and his games deeply influenced The Sims (especially Theme Hospital, which I stayed late at work playing obsessively into the night while working on The Sims architectural tools), but how Peter Molyneux neglected that poor kid who he promised to make a god was unnecessarily and unforgivably cruel. How hard would have it been for him to simply pick up the phone and apologize?

>The Game Designer Who Promised to Make a Man God. It's not going so well.

https://www.vice.com/en_us/article/nze9gg/the-game-designer-...

>The God who Peter Molyneux forgot. For Curiosity winner Bryan Henderson, the prize inside the cube has been anything but life-changing.

https://www.eurogamer.net/articles/2015-02-11-the-god-who-pe...

>The god who Peter Molyneux forgot wants his cut of a new game bundle to go to charity instead. "It felt very bizarre to me."

https://www.eurogamer.net/articles/2016-02-26-bryan-henderso...

>The Man Who Promised Too Much

https://kotaku.com/the-man-who-promised-too-much-1537352493

>Serial over-promiser Peter Molyneux promises to stop over-promising. Designer breaks a year of self-imposed press exile with reflective interview.

https://arstechnica.com/gaming/2016/02/serial-over-promiser-...

>Peter Molyneux's God Game Is Looking Like Yet Another Disappointment

https://www.wired.com/2015/02/molyneux-godus-kickstarter/

>Peter Molyneux interview: 'It's over, I will not speak to the press again'. The veteran game designer is at the centre of a raging controversy over his new game Godus. He says he is finished with the press.

https://www.theguardian.com/technology/2015/feb/13/peter-mol...

>The Lesson of Peter Molyneux. “Sooner or later the bullshit has to stop.”

https://techcrunch.com/2015/02/15/the-lesson-of-peter-molyne...

>Why Peter Molyneux's Godus is Such a Disaster

https://www.techspot.com/article/964-peter-molyneux-godus-di...
This was probably true in the earlier days of Facebook.

At this point, Facebook isn't even about Facebook. Facebook is a typical giant that acquires other companies. I would argue WhatsApp has more impact on the world than Facebook. Zuckerberg can't be proud of WhatsApp though, since he didn't build it.

To me, there is clearly no higher purpose here besides power.
Unfortunately not purely based on Free and Open Source software:

> Exceptons (sic): foundry related IPs and high-speed commercial interface, but gradually reduce close source (sic) usage over time

Wonder what the FSF will make of it. They've long lamented that Raspberry Pi depends on non-Free software.

https://www.fsf.org/resources/hw/single-board-computers
I run my own using https://mailinabox.email/ - not everyone's cup of tea.
Can you out-Vizzini your adversaries using level-k thinking?
Flood is treated unfairly. It has a nice difficulty increase and is an enjoyable platformer with a few twists. Water fills the levels gradually and you can stick on most of the walls. It has a really neat aesthetic too.

I've actually gone back and played the game and it's held up surprisingly well.

Long play video of the game : https://www.youtube.com/watch?v=8EbGjm_x808
The problem is that these platforms have, in a very meaningful sense, taken the place of communications infrastructure. The bulk of us use Messenger or iMessage/FaceTime or some other over-the-top service for things we would have otherwise texted, or sent over email, or called someone about using a dialer, and that contributes to the vendor lock-in that they have. It's the new IRC, or AIM, but with an even wider capability gap and a userbase billions deep.

Even RCS doesn't solve this, because they're still a technically inferior spec - they don't support E2EE, and they still depend on phone numbers, with the terrible user experiences of arbitrary last-century identifiers and the phone companies you (generally) have to subscribe to to get them.

Until social media companies or their chat protocols are forced into some sort of interoperability - a thing we can do, under antitrust law - no amount of data portability will fix this. Because it's a consequence of their owning our networks, not just our content.
> If it really sucked then people wouldn't use it.

What if they never give an alternative a chance? Then that scenario could happen quite easily.
This was feasible here in Poland and some other European countries managed to proceed with exams seemingly safely as well.
Except the dosing in this study is a massive supra-physiological bolus that's something like 50x the daily RDV.
Depending on your definition of the term, OOP can imply parametric & ad hoc polymorphism. Sure. But that in no way implies that all languages with that kind of polymorphism are OOP. That's gotta be, like, the first logical fallacy one learns about...

By your logic:
1. Ducks have feathers
2. All birds have feathers
3. Therefore, all birds are ducks

In any case, Haskell didn't get its polymorphism from any OOP language, so the point is moot. ML was first to introduce parametric polymorphism in 1975 — Java/C#/etc with their "generics" came later. Even ad hoc polymorphism with type classes was proposed 7 whole years (1988) before Java was even released (1995). And sure, the paper mentions that OOP has to solve similar issues, but "solving the same problem" ≠ "being the same solution".
"While NPR does not receive any direct federal funding, it does receive a small number of competitive grants from CPB and federal agencies like the Department of Education and the Department of Commerce. This funding amounts to approximately 2% of NPR's overall revenues."

https://en.wikipedia.org/wiki/NPR#Funding
How Detroit Pulled Off a Covid Memorial Like No Other
I think the core issue here is not the quality of marketing , but simply the fact that it exists. People need some database, and nobody is spending money on advertising Postgres, so they don't know anything about it.

Also Mongo wins by a large margin on "how little you need to know to get started" with any relational db.
Perhaps, but this article is celebrating an ancient cookbook from Korea and not England.

Not only that but: "Some historians even believe it could be the first cookbook written by a woman in all of East Asia."

I am not familiar with the sexual politics/subtleties surrounding food, let alone writing about it, in East Asia. I suspect, given what I know from these parts (England), that women in East Asia had few opportunities to express themselves in any form, let alone a book that comes down through the centuries to today.

I suggest that Jang Gye-hyang did remarkably well and ought to be thought of as one of the fore-founders of a part of modern food. Here in the UK we have Mrs Beeton as a similar example (albeit rather later.)
Melting Glaciers Are Filling Unstable Lakes. and They’re Growing
If that’s true, can you please share a link to your website so that I can stop using Dropbox and migrate my encoded data to be stored in your password field?
I like them. Also the $1 pizza places. Good shit
Also just having your child survive is not raising them, people have gone from having an educational input from a trained teacher to being the sole carers _whilst they're working_. Sure whilst the kids aren't fighting/breaking stuff/eating badly they really like sitting on the couch all day but that's terrible for them.

I love home educating (far better when museums/parks/venues and things are open mind you) but I'm at work .. there's no education, not even childcare, it's babysitting level of care at best.
In a standard commercial pwr the containment building is a steel shell surrounding the entire system, then there is a void of varying width then that large cement building that you can see when driving by. That building is called the shield building.
Gloves marked for tig welding are actually really awesome high dexterity leather gloves. That provide enough thermal and abrasion protection for most activities aside from those which need more thermal or abrasion protection
Update on Adobe Flash Player End of Support
I guess the bottom line is, does he deliver the value of that salary?
It's a good thing we have a laundry list of his dastardly deeds so we don't go off what he "seems" like.
The origins of XXX as a FIXME comment marker
Yes I know, no one is rich, we're all just various layers of middle class - even if we're hiring landscapers and pool service and think of ourselves as supply-side jesus.
The Pi Zero is single core at 1GHz so it's not a totally fair comparison. There are plenty of times I wish I had more cores, even if they were half the speed. Compiling anything on the zero is incredibly slow. It also has slower DDR2 RAM and no USB3 (which makes a big difference for many peripherals).
Toward a machine learning model that can reason about everyday actions
Speaking of weird old and unique games, does anyone remember Lords of Chaos?

Its a 1v1 Wizard game where you spend the early game summoning creatures, exploring the map and picking up ingredients before brewing potions and fighting your enemy before the map explodes around you.
Would they protest if they had won it?
Some passwords are too long - I wouldn’t expect any website to accept a gigabyte long password - and I wouldn’t judge a site that doesn’t accepts \0 either.
I have the local equivalent. Meaning that, yes, I personally probably benefit from these sorts of very large government contracts. I’m not sure that justifies it, though. There’s a decent argument that these mega contracts are a bad use of taxpayer money; some of them work out, but the bigger the contract, it seems, the less chance that it actually delivers in the end.
yeah it's a dating app
Pizzagate and qanon stuff is all bs. They're not specific enough to ever be disproved, and when they are, they are summarily dis-proven. e.g. the guy who broke into Comet Ping Pong to save the kids, only to realize there are no kids.

Epstein was convicted in 2008 of procuring an underage girl for prostitution and of soliciting a prostitute. So, I don't think that anybody was surprised when it turned out he was still a pedophile a decade later.
You do have a single point to enforce everything: code.

In most cases it is only a single web app connecting to a database and in micro-services architectures you can enforce it through a shared database access library.

And any company that allows users to make direct changes to a database without going through some security layer is pretty incompetent. Quite sure you wouldn't be able to get PCI/HIPAA certified with that sort of behaviour either.
Any 2020 MacBook with 4 Thunderbolt ports and 16 GB of RAM or more should be pretty great (I really like the Touchbar though).
The Nazis would have loved this thing :D
That world still exists if you'll just get off your phone. Not only does it still exist, but the Linux version of it is better (and wilder, in the important) ways than anything from the 90s.
Computing Professor's App Manages NJIT Converged Learning
Yeah, I know. Actually meeting other people IRL is so 2019.
It will cost a lot more than trillions. Just like the US has lost its Textiles, Paper, Automobile, etc. industries, it seems hell-bent on throwing away its semiconductor industries as well.

Companies like Huawei were perfectly happy buying their semiconductors from the US.

Banning the sale of those semiconductors will hurt the US in several ways:

First, the loss of billions in semiconductor sales in the short-term. That won't be good for the likes of Intel, AMD, etc. There won't be ready capital to build new hi-tech fabs.

Second, Huawei and other other Chinese companies will set up their own semiconductor manufacturing which save them money by buying the home-grown product.

Thirdly, With those Chinese semiconductor manufacturers online, the sales of US semiconductors will be adversely affected by stiff competition from cheaper Chinese manufacturers. That would probably sound the death-knell for those US semiconductor companies, as has happened with the other industries mentioned above.

The US is hamstrung by preference for short-term thinking instead of long-term gain.
Yes. Additionally....

There are a lot of older people who are intelligent and uneducated but have a really tough time distinguishing "fake news" from "real news."

My sister is in her 50s, is intelligent and kind-hearted, and winds up linking to fake news sites alllllll the time.

A lot of those sites are absolutely insidious. They look like reputable news sites: your same basic layout as any mainstream news site. Frequently updated with multiple news articles per day. Many even sprinkle in a lot of innocuous syndicated stories from the Associated Press or some other press service.

But... look a little closer and all of their original content pushes some particular agenda.

For example, my sister linked to one that looked pretty legit. Had a bunch of soft news stories. But, look a little closer.... and there were thousands of disturbing articles about how it was harmful to have abortions or be LGBT.

If a publisher has an agenda, okay. That's fine. We all have viewpoints and agendas. But masquerading as a neutral mainstream news site, so that you grasp for some unearned credibility from folks who aren't tech-savvy enough to know the difference? Yiiiiiikes.

Some folks will point out that this criticism could be applied to Fox News or MSNBC as well. I wouldn't totally disagree, but what I'm saying is that there are fake news sites out that that are waaaaay more extreme and insidious.
Please read the second part of my comment before just repeating what you already said
Robot Trucks Are Seeking Inroads into Freight Business
ITT: People in privileged bubbles being irritated the article suggests they live in privileged bubbles.
"Our client-side Javascript should be enough to prevent any SQL injection attempts" /s
I don't exactly disagree in one sense, but this argument seems like it kind of generalizes to the idea that "better is worse", which I can't agree to.

The more technical details of recordkeeping or surveillance that there are, the more likely a frame-up will have flaws that people notice.
> Also it was great at sharding and scaling horizontally when first released, and one of the few options available at that time. It's since been eclipsed by much better systems that don't have such a convoluted and fragile setup.

What applications are much better in your opinion?
Other quotes from the same article:

"NPR differs from other non-profit membership media organizations, such as AP, in that it was established by an act of Congress[2] and most of its member stations are owned by government entities (often public universities)."

"Typically, NPR member stations receive funds through on-air pledge drives, corporate underwriting, state and local governments, educational institutions, and the federally funded Corporation for Public Broadcasting (CPB). In 2009, member stations derived 6% of their revenue from federal, state and local government funding, 10% of their revenue from CPB grants, and 14% of their revenue from universities.[24][41]"

Depending on whether the universities are public or private, this accounts for something approaching 30% of their budget.

So that 2% figure doesn't really give the full picture.
I think he means that in technical analysis, they trade based on price action. Thus, insider trading gives you a peek into something that the fundamentals haven’t revealed yet (the price will change to reflect the secret news).
His essays were what attracted people to YC (and HN) in the first place.
Balloon Theory of Quantum Collapse
De Broglie theory of matter waves suggests a particle is guided by a "pilot wave".

Aspect did an experiment that claimed entanglement collapse occurs at distances faster than light can travel.

Maudlin ("Quantum Non-Locality and Relativity") discusses super-luminal particles (tachyons) and discusses why, if they existed in general, they would undermine a lot of theory.

Consider a balloon. Starting at a point it expands when inflated. A puncture relieves stress all over the balloon very rapidly.

Now consider the point of entanglement of two particles. Assume that there is a "balloon-like surface" that connects the two particles no matter how far apart. Observation of one of the particles causes the entanglement to collapse into a definite state (aka, the balloon pops). Now assume that super-luminal "stress relief" occurs ONLY along the surface of the balloon. Then the other particle would also collapse into the same definite state.

So the De Broglie "pilot wave" is now a "balloon wave" in entanglement. The super-luminal assumption only occurs "on the balloon surface", a surface that only exists while the particles are entangled.
> , I feel like I can confidently say structural typing, in practice, is MUCH easier, better and fun to work with than nominal typing. I can think of times I literally spent days trying to work through some refactoring in Java that was a nightmare because of the constraints of nominal typing, where the structural typing approach of TypeScript makes it trivial.

The obvious takeaway here in some respect is gradual typing is better and nominal typing is annoying for little gain.

What if the true answer were you need a more flexible and powerful type system.

I think that moderate so-called "pragmatic" languages are the worst experience because of their lack of guiding principles.
Unless you've got a source for that, I think you're mistaken. The Army wouldn't operate on US soil, that sort of thing would be the job of the National Guard. The Posse Comitatus Act specifically forbids the US Army from doing that sort of thing. If you told me Trump is upset at the National Guard for this reason, I'd believe that. I think I recall reading headlines to that effect.
I think it took me a while to understand (after being told by native speakers) that Korean and Japanese are a bit of a linguistic evolutionary puzzle, especially if you thought that because their characters look like Chinese, their spoken languages are related to Chinese.

They are not. The languages must have come first / evolved independent of China, and then a wave of foreign commerce / scholarly / government influence over centuries propagated Chinese writing to them.

So the spoken language uses Chinese based characters to record the sounds in writing, but it may not necessarily have relation to what the sounds are in Chinese if someone were to read the characters as if Chinese. And the spoken language is not at all related to Chinese (aside from some imported words). As if someone encountered English alphabet words being spoken with totally different sounds assigned to them.

That was very interesting to finally understand -- if I've even gotten it all correct...
https://en.wikipedia.org/wiki/Why_Zebras_Don%27t_Get_Ulcers
I had to check twice if it was really the title of the official blogpost. Amazon isn't being very diplomatic, taking a cheap shot at Microsoft.
Wouldn't it be best to have your own domain and use ProtonMail to deal with the mail? That way, your address is portable and you have far more flexibility (catch all addresses, custom security, etc.) Domains are cheap.