skysight-inc/HackerNews huggingface dataset:
Same. I can read quickly, and when suits me. Video I have to be sat at a computer paying attention which is time I can use for other things, and go at their speed.
You’re saying because I wrote a book and sold it I have credentials?
> almost every movie

Your kidding yourself. We could limit to movies released in U.S. theaters in the past 20 years and you'd still be completely wrong.
That seems to be the case with most corporations: one executive glance or quip -- and thousands of employees scramble.
My read from dvt and
ishansharma is that they're just being political.

Basically when PG was writing about stuff they considered part of their in-group then it was great and wonderful.

When he writes about stuff that's no longer aligns with their existing political in-group's beliefs (his arguments against the wealth tax [0], his essay about conformism [1], his essay about economic inequality [2]) - suddenly he's 'disconnected' and they're 'disappointed' in the essays.

I thought those essays were great and the points were interesting/well argued. I liked his old essays too.

I find the tribal responses to them (and the comments here) to be lame.

[0]: http://paulgraham.com/wtax.html

[1]: http://paulgraham.com/conformism.html

[2]: http://paulgraham.com/ineq.html
It's either a bad bet or it isn't.

This encompasses both direction and duration, so getting one of them wrong, is still wrong.
So much of the financial "froth" could be elimanated by a law that taxed taking speculative positions in a punitive way and relatively rewarded buying and holding. If you compare the function of the market 100 years ago (owning significant stock mean't you had some degree of interest in the long term prospects of a company) versus today you can see the problem. Financialization of the economy actually doesn't produce much. It mostly transfers money from productive uses or away from more equitably income distribution in the population to speculators and irresponsible parties like Softbank and the harebrained ideas they invested in.
was thisboardgamedoesntexist.com already taken?
Tldr; GPT-2 trained over the rules of 2000 boardgames.

Unfortunately the AI doesn't know what a boardgame is, what rules are, etc. and it shows. As the site says, the rules are often nonsensical and must be adapted. This and other domains require 100% precision and consistency and a purely statistical algorithm can't get there.
You didn't even say permissionless in your post.
Ripple is a company you mean the XRPL.
The XRPL is permissionless in every aspect.
You can insert transaction without anyones permission.
You can run a node without anyones permission.
You can fork and create you own version without anyones permission.
You can change code and create an amendment without anyone's permission. It needs 80% favorable votes for two weeks to become active but it doesn't need anyone's permission. There is no entity that can vote against it and prevent it.
I should of clarified, it would of been nice to see an example using an ESP variant (since its cheaper and has wifi) pushing to an IoT dashboard. I haven't looked into the class file and how easy it is to port to micropython/cython.
> the website has a chance of seeing it everytime one signs in

Indeed. I don't understand why challenge-response auth isn't more widely deployed, or even part of the web APIs.

Sure, it doesn't mitigate ALL attacks, but it does mitigate SOME attacks even if you're already on TLS.
I love that it updates every second. It makes it that much harder to actually use.
Tom Scott https://www.youtube.com/user/enyay

He has a series called "Things You Might Not Know", where he spends 5-10 minutes talking about some interesting oddity or other, often but not always computing-related.
You are very (very!) generous with this. Tokyo ain't CA (for example, I can't imagine he would want to drive anywhere for a good while). There are more forgiving environments (and processes!), but it sounds as if he's going to have to spend some time on the ground to figure that out. It can be a weird place for six-or-so months.
Not sure if there is any merit to this article.

The author thinks passwords are not encrypted on Wattpad, because they ask you to change passwords on other sites where you have used the same password. The reason is more likely that Wattpad uses a common encryption algorithm. The hackers chance of gaining access to your other accounts using the same password is now much higher, especially if you use a relatively easy to guess string. Because using a fast computer they can run through common encryption algorithms with each guess of your password at their leisure... Once they have a match, they can login to your other sites.

Also hashing is nothing like encryption. To clarify hashing, is used to map very large data types to far smaller ones of just a few dozen (or few thousand) character strings, for the sake of speedy lookups. Hashing algorithms are not one way, you can determine the possible input values used to generate the hash. In the case of (relatively speaking) very small input data types like passwords, there is likely a 1:1 ratio of input password to hash, making it effectively a plain text password. So why would anyone use it? What evidence is there to suggest Wattpad would use an obviously ineffective method for encrypting passwords?

So the statement, "a password hash is a representation of your password that can't be reversed" and other statements about the security of hashing, is just incorrect - for passwords. I agree that hashing is statistically 1-way for large inputs like big strings or images, since then the possible inputs that match to a particular hash is very very large. It is not so for small ones, like passwords, where the data type is smaller/similar in size to the hash range.
His pronunciation of the Chinese word is actually pretty good.
Was it the Pirate Bay? https://www.google.com/amp/s/www.thelocal.se/20070112/6076/a... I remember this but I felt like there was a floating boat nation plan too.
I'm good friends while I'm getting raises.
The difference between hashing and encrypting that I did not find quite spelled out enough in the article is that with leaked hashes there is a risk of cracking proportional to the password strength. High entropy passwords will not get cracked even if they are hashed with the MD5 which pretty much represents worst case scenario[1]. With encryption, it is very much all or nothing scenario; if the database gets cracked then all of the passwords get revealed.

[1] Napkin math: Single Titan RTX does some 65GH/s of MD5, so if you have 80bit password it would take in the order of 2^80/65e9 seconds = 500e3 gpu-years to crack
Unfortunately, email is not a unique salt in the context of the internet. If the owner of the email uses the same password elsewhere (very likely), it's probably already in a rainbow table.

So just generate and store a random salt instead.
hashing is like a meat grinder

grind up a cow. store the ground beef somewhere

when a user wants to login, grind up the new cow in an identical manner.

compare the new ground beef with the stored ground beef.

if match (the new cow is a clone of the old cow), authenticate
Yes. Suck up to the boss, then say you're interested in a new opportunity at Team X, or, sadly, you've accepted an offer to work somewhere else, or, you are quitting for personal reasons.
Hollywood accounting reminds me of condominium developers and property developers that form a shell LLC for a single project, so that if something goes terribly wrong with the build quality and new-property-warranty lawsuits and such, the entity created for the project has no assets to give up when sued.
Grid5000
Dedupe massive wordlists quickly, without changing order
You also gain by executing one less transaction at the times of successful update.

Quite a good pattern actually.
I tried arguing with a "Bill Gates wants to kill Africans", and "there's an online furniture store peddling kidnapped teenagers to pedos" girl once, and she thinks I'm the one being brainwashed by MSM and snopes.com (and that they're controlled by the Rotschilds and Rockerfellers), and she thinks she's the one who is enlightened. If I asked for proof, she'd link to some random blog she read and trusts where some lunatic (from my point of view) is asserting some lie. And if I sent her links to MSM sites debunking things, she's claim these are the lies. I posted a link to Snopes and of course she had a link ready showing how Snopes was paid off by someone.

How do you win? In the end I felt like she was just being narcissistic, I couldn't be bothered continuing the discussion, because I knew it would just piss me off...
FWIW, I purchased it for exactly this reason. My goal is to end up with a URL that I can hit on my LAN that tells me the PH of my pool.

I don't need perfect accuracy, and checking it manually isn't overly time-consuming. It IS tedious enough that I only check it about once a week though, and I'd prefer to be checking it more often. And bonus points for being able to automatically track it & easily graph it, too!
Here is a nice glove related rabbit hole to venture into

https://www.lovethegloves.com/

https://www.vice.com/amp/en_us/article/3kxb9n/this-late-nigh...

(forgive the amp, am tired)

Tons of anecdata on Reddit and such surrounding the dude as well.
It can go out of use but it won't be due to competition with Bitcoin. A digital currency that did what the dollar does but better could give the dollar a run for its money. No such currency currently exists and I have a hard time envisioning one right now. Maybe something based on kWh as the unit of account.
People like to magnify fringe conspiracies while completely ignoring mainstream ones, when the mainstream ones are actually dangerous for democracy. The police power of government was leveraged against a political rival for explicit political reasons and no one has been punished for it. Extremely dangerous precedent.
Okay, so you're trust is completely in one person having perfect design decisions and that he chooses to continue to maintain these tools in perpetuity.

You also state that tool may or may not be able interact with past files. Which means it might be useless.

Git is in the process of deprecating sha1, and you end up having the put flexibility in after a tool expands. It will likely keep supporting sha1 even after it is much more trivial to create collisions.
i thought about this but ultimately decided against it because of at least these several reasons

• squashed commits

• arbitrary thresholds of session durations
Amazon casting its vote early in this election
I can only think of two things, and they're manageable.

One, slightly longer password checks. And two, the temptation to lean on the AES key and set the cost of the hash too low. In the case the key does get out - we had an entire era where people stole environment variables from servers - then you decrypt the entire password file once and have cheaper guesses per second.
Ask HN: What usable mobile phone do you recommend for privacy conscious users?
I looked into pine64 and purism, they both look impractical for day to day use. I have bad luck in the past picking android phones and finding out the custom ROM route was difficult or impractical. I wanted to know if anyone on HN had any success stories with recent phones.
> in what sense was the South "not free market"?

In the sense of 4 million slaves. Slavery is the antithesis of free market.
What's the problem with reprovisioning? Don't you have two that you're switching between?
Eh. We have subscriptions to 4 different video streaming services, and still sometimes download TV shows directly to ensure we can watch them e.g. on holiday in a different country without VPN backflips. Even more so if they have ad breaks (e.g. GoT on NowTV in UK); I don't mind paying, but I do mind ads. Not to mention higher quality due to bandwidth dropping lower at peak times, if the service can't keep up (I'm looking at you, NowTV).

I've bought Thief 2 & 3 and bunch of other games twice now, on original CDs / DVD and on Steam or GOG, and used No-CD cracks for the originals for convenience.
Most paintings don't, but that standard came from top thread and not from me. Imo it us ok for majority of them to not be that special.

Most paintings are ideally fun to look at and then get forgotten. Others have some practical purpose (showing war at the time with no photos, celebrating personality for propaganda purpose etc) or are simply moving craft to higher level.

The human conditions ones were the ones in what I called practical category. For example when I was reading about John Brown, that famous painting of him helped me to keep in mind the personality. I have some more examples like that but way more obscure.

I think the best of contemporary writing (whether fun or human condition level) is in movie series. That is format that is currently at the top, having the most complicated and touching and what not storylines. None of that was possible before streaming services.
> App engine is a PaaS that has various limitations and constraints that can take significant amounts of dev time and customer support time to get through

What limitations/constraints of App Engine have you run into?
"I can't find any news about him since he left Google." Not even Google can find him.
Longer version: https://bemorewithless.com/the-story-of-the-mexican-fisherma...
This is so awesome! I really love the nonsoldering setup (it's not hard to solder, just annoying in a small apartment with kids). I'm going to see if they're equivalent parts with Qwiic / STEMMA connectors instead of header breakout.

Edit: Did not notice you were OP! Do you have more clarity on the calibration? Is there a buffer solution you can recommend?
It's possible to change the pepper during login (same as adjusting parameters).

The downside for the scheme is complexity and limited upside; complexity gets a lot more attention when it comes to security considerations.

Best practice especially needs to be simple; it's easy to mess this stuff up and hard to understand. A lot of the comments on this post betray a very poor understanding of password storage; they simply haven't come across the correct information.

Overall pepper is good as long as you include salt. There are times when the db gets leaked and the env variables don't.

There's nothing wrong with your scheme if it's implemented properly, but being able to change the site-wide key is a limited upside compared to using a pepper. There is an upside though.

And all of this doesn't matter much as long as you do the bare minimum of using a tuned pbkdf+salt and keep your stuff patched.
> taking speculative positions

It's hard to define what a speculative position is. Incentivizing buying and holding would just be intentionally make markets illiquid, which a. let's bigger players take larger profits more easily and b. leads to inefficient pricing
This makes a lot of sense, thanks for the explanation!
I don't, mostly because he's a celebrity character and anything he says is a PR release from his business. He just seems to trend up with various viral moments or activities like recording/streaming inside a bathroom full of people at a convention. It makes sense that someone who lives (literally) on hype and attention would generate that whenever possible to further their brand, just like a Kardashian. With that in mind, some unspoken ban, real or not/insinuated or not, is an excellent chance to set up a big story when you're back in the office and working again. Easy cover for time off and solid cash back once streaming again.
In fact hashing the password is better than encrypting them!

If you encrypt a password, it means that somewhere you have a key that you use to decrypt it to check if it's valid on the user login. It means that there is a way that you (or more importantly an attacker) can use to decrypt the passwords.

Instead if you use a good hashing algorithm is practically impossible to find the password given the hash. Yes if the password is really simple you can get it, but come on, if the password is really simple what's the point of protecting it?

By the way I think that we should phase out password anyway, I mean that I prefer to implement in the applications that I develop a password-less authentication: when you want to sign in a mail (or an SMS) is sent to you, you click on a link with a temporary token and you are authenticated.

No password to remember, not having to implement forgot password, change password, recover your password, not having to store the password, not having the user have to choose a password, and I hate choosing password (in fact I ended up using a password manager that generates random passwords for me, but it's not the ideal solution, because then password have to be synced on all my devices, not all websites/apps have forms made correctly to support password manager, and the password manager extension (Bitwarden) goes in conflict with the integrated Firefox password manager so I end up having password saved in the password manager and other in Firefox and it's a mess).
"baked into the binary" covers a lot of ground. You've got to get the initial contents of .data initialized somehow. In a typical microcontroller that's a copy from flash to ram.
"It's not a coincidence that Go doesn't have zero-cost interoperability with C, and Rust has (including cross-language inlining."

That's more of a money issue. Google has the resources to rewrite the lower layers in or for Go. Mozilla doesn't. Mozilla was trying to retrofit a single existing program, too.
"We currupted the selection criteria fair and square! How dare such a currupt contract get awarded to anybody else."

Signed your neighborhood indie bookstore; Amazon.
Free markets rely on free choice. Slaves do not have free choice, or any choice at all. The dominant industry in the South was cotton which was entirely based on slave labor.
Pepper, encryption, they both guard against drive-bys, which can happen for sure (missing backups anyone?) but they're not the only thing that can happen.

Like any disaster preparedness situation, make sure your strategy doesn't count on an asset you've already listed as unavailable.
would be cool to run against a git branch
>but it’s basically been free money for the last several months.

What does that even mean... lol

Rise != 'free money'.
One of the comments I made to myself was that on the die shots, USB3 part is as big as a CPU core ! What would need so much silicon ? Isn't USB3 hardware more or less a serial bus? Is it logic or memory or analog interface parts here? I am curious.
Working on Monkey Island Special Edition in 2009 while at LucasArts is one of the highlights of my career. I have really fond memories of my time there on the team (Team 3!). I wish I had worked on the original but that was way before my time.

The game is actually running the full original code alongside the new Special Edition stuff. We didn’t want to disturb the original codebase, so we ran it basically unchanged on another thread and the new game loop would surgically peek and poke some state every frame (animations, etc) to get synchronized. That’s how we essentially layered all the new art and sound on top of the original game. There was a lot of reverse engineering of data and asset formats that we had to do because all the original authors had since left, perhaps with the exception of EJ.

The F10 hotkey to transition between the old and the new art was actually a debugging feature that our lead rendering engineer wrote during development, but everyone agreed that it was too good not to ship it as an actual feature of the Special Edition.
>There is a recurring pattern to the way President Trump behaves when he’s called out for doing something egregious: first he denies doing it, then he looks for ways to push it off to the side, to distract attention from it and delay efforts to investigate it (so people get bored and forget about it).

Regardless of what you think about Amazon, this sentence alone is incredible.
How would the fisherman feed himself if he broke his arms? Alternatively, what if he wakes up one day and finds that all the fish near his village have been fished out of the ocean by other, more entrepreneurial fishermen?

If had money saved up, at least he could buy food for him and his family.
Thanks for the information and links, looks like a great way to spend some downtime.
Well, there's any kind of person anywhere, anyway.

I think it's not wrong to be pre-emptively wary of that (and prepare arguments for it), considering the way F.U.D. about "cookie banners" [1] got many people worked up against a supposedly useless and clueless law that (again, supposedly) "forces" sites to show such banners -- because their desire to track, which is the first link in this causal chain, is being ignored or assumed as given and benign.

[1] banners sites put up because they would prefer to track everyone on the first visit, rather than having an opt-in link somewhere in the footer for example.
I mean this in the most endearing way possible...YOU MAGNIFICENT BASTARD kiss! I've been looking for this forever. Thank you, thank you, thank you.
Why is the froth/volatility bad though? You're not forced to participate and there are other investments for every risk level.
If you followed his MS days closely, like many in this community, I doubt you'd change your mind about him. But I imagine large part of the public knows about him mostly from his philanthropy. Heck I bet some people only know of him from whatever that 5G conspiracy was.
MD5 is broken, but HMAC-MD5 is still impossible to break afaik. And md5(pepper + md5(pw)) is basically HMAC.

Not commenting on the overall idea, just pointing out that the criticism of md5 happens not to be valid in this case. I was surprised too.
DeepMind Uses GNNs to Boost Google Maps ETA Accuracy by Up to 50%
Sure, if there's evidence that the author is not really who they say they are, by all means go ahead and point it out. However, you just seem to be making vague accusations about some grand conspiracy by corporate real estate developers, rather than addressing the article's very legitimate points.

I think all of your points are completely fair so I don't want you to feel that I am being obtuse or overly pedantic. You're correct that I have not provided any evidence to indicate the author is not authentic. However, you made me curious so I decided to open the article in a private browsing session with no ad blocker enabled.

Maybe everyone sees a different advertisement, but what I saw struck me. The article is peppered by advertisements from facebook.

"Support Small Business Together." Is the tag line of the facebook advertisement.

What I say next is facetious of course. This article isn't part of a grand conspiracy by corporate real estate developers, it is a grand conspiracy by one of the largest advertising platforms in the world, facebook. Remote work is hurting facebook's advertising revenue because small business are dying off.

Again, entirely facetious. Still, The Atlantic is partially supported by advertising and I found this particular advertisement to be interesting given the content of the article and the discussion on HN.

Draper's eyes gleamed as he delivered the line that would seal the deal. "We'll make them nostalgic for their offices and that is how you will sell more advertisements to small businesses mister Zuckerberg."