skysight-inc/HackerNews huggingface dataset:
Also, the chance that a site will refuse a strong random password is directly correlated to the importance of the account. Case and point, the appointment site for my barber happily takes a 30+ character randomly generated password. My old bank would not allow you to have a password longer than 12 characters and only recognized 4 special characters. That is why they are my old bank.
I use old reddit redirect. If old.reddit ever went away I would stop going to reddit completely, similar to what happened with the digg bar.

I don't use reddit on mobile specifically because I don't download apps on my phone (outside of a few small games such as bejeweled), and I think surfing the internet on the phone is miserable regardless. The only thing I ever crack my browser open for is to look something up while at the grocery store, etc.
Everyone got a 3 rating every quarter. Pointless.
Philisophically or sociologically or ecologically, fiat money may be bad, but economically it's a clear winner.
> My understanding is government itself directly uses just the AWS and now Azure isolated regions.

This is not true, at least based on the discussions I've been involved in with AWS reps (while my employer is a state government entity, how the feds use AWS has frequently come up.) There are US Government customers without the requirements that are only provided on the isolated regions that use the commercial offerings that have the appropriate guarantees for their data, and there are non-federal customers that use the isolated government regions for data which has the higher-level federal requirements that require those guarantees. FedRAMP isn't the only force here, but it's a key requirement that drives the choice. (Also, GovCloud was cleared for some requirements before commercial offerings, so some customers, including some federal ones, are currently on GovCloud with workloads that could be served on the commercial regions now.)
Have you been able to find a high quality subbed version of this anywhere?
You're assuming fiat currency is reliable, which is proven wrong in many jurisdictions.
I also sent a physical letter to Lucasarts when I got stuck as a kid. They kindly sent me back a full walkthrough! I wonder how many other kids must've done this...
Ah! Hence the federalism and checks and balances, the two we widely derided concepts.

We already know ways to prevent the majority from imposing tyranny on the minority, we just decided that more absolute power is convenient.
Only with the benefit of hindsight. I made significant money the past few months trading, but I would be a fool if I claimed it wasn’t without significant financial risk.
It’s a numbers game.

On by default -> financially the same as always on

Off by default -> financially doesn’t exist
We hackers are naturally inclined to look for technical solutions to social problems but more and more I think this very rarely works. It's too easy for people in power to twist any particular technical solution to their own ends so the really important thing is controlled who holds power in the first place.
The link is not to Reddit, it's to their new site. You'd think people could decide for themselves if they want to go to the actual forum, but Google doesn't think you're bright enough to make your own choice, apparently.
As far as I know the efforts in this direction only worked for Raspberry Pi 1, not the subsequent ones - or are there some news for later devices too?
I'd love to write a version of this book for Rust with the examples translated as close as possible within the constraints of the two languages.
National Semi merged into TI in 2011, so I assume the TRI-STATE trademark is owned by them now. I would say the word ‘tristate’ has basically become just about completely genericised by this point though.
You're twisting everything to suit your narrative.

> Where is the false information

You're pretending as if Modi govt did not intentionally bankrupt BSNL.

Your so called.package is bogus. ET calls it "lacks teeth"

https://telecom.economictimes.indiatimes.com/news/is-modis-b...

How BJP is dismantling BSNL

https://www.newsclick.in/how-centre-dismantling-bsnl

So both the package is fraud and BJP intentionally dismantled BJP to favour Jio

And here you're pretending that BSNL's downfall was inevitable. They pushed BSNL into a ditch and now they're not helping it come out of the ditch

It took me a second to google "BJP announced package but didn't give" first result?

And this wasn't the only result.

18months on but 125k crore package was not received by Bihar

https://m.hindustantimes.com/india-news/18-months-on-bihar-y...

Also the 20.lakh crore for corona is also a fraud

https://www.indiatoday.in/news-analysis/story/covid-19-packa...

Fitch Solutions said the actual fresh money in the Covid-19 package is only about 1% of GDP

Modi declared that package was 10% of GDP. But actual money given by him was only 1%

They included "income tax refunds" in this package, also "Selling ISRO" was a part of the package under "privatising space travel"

The actual money given my BJP was negligible compared to other countries

https://www.thehindubusinessline.com/opinion/covid-19-india-...

> Please keep this kind of rhetoric out of HN and discuss in good faith

You'd do better to follow your own advice and stop your malicious intent.
I used to visit /r/amitheasshole for a bit until I realized that subreddit was just porn for a certain type of personality. I found it super distasteful and left.

I don't even understand why people would live their life with that much anger and hatred. I would literally see what was obviously just a miscommunication or bad actions with good intentions that could be resolved by communication and people would just vilify the person.

yuck.
Exactly, why shouldn't I? Therefore, I can and I will, simply because there are no real, direct consequences to doing so. This is best argument for piracy as you say, which it seems most people who pirate use.
> The USSR provided little to no assistance to revolutionaries in Central and South America

So I guess Cuba does not count? Sending missiles right at the doorstep of the US and constant financial aid seems to counter your point.

> The US has fomented violent coups and interfered with legitimate elections all around the world in service of exporting capitalism and free market imperialism (e.g., in Italy, Indonesia, Iran, any number of countries in Central and South America).

Every major power does that, but they are not all equal. The British empire was in comparison a lot more violent that the US has ever been. And people who lived under Soviet Rule (even outside of Russia) also know very well it was far from a peace-loving, people-respecting regime.
Well this recent time you have massive inflation in speculative assets being offset by deflationary forces from massive layoffs so not much inflation overall. A huge transfer of wealth is occurring.
"Asking politely" is a euphemism. The company has a desire to receive government contracts, or to not be subject to adverse regulations, and is thereby given the choice to submit or be the subject of retaliation.

In reality it's an end-run around the court system. If the government officially penalized them for not complying, various parties would have standing to assert their rights. So the punishment isn't officially tied to the failure to submit, but the threat is still there.

https://en.wikipedia.org/wiki/Qwest#Refusal_of_NSA_surveilla...
The housing market is roaring now. Here are the worries that reveals
It was a very important part in the Indian culture.

From what I have experienced writing was important yes, but what they usually say is to have a teacher or a Guru.
Whenever I read/recite the stotras/mantras the interpretation and the recital of it is so important that I feel a Guru is very important to understand the deeper meaning even though a description of it is present. In the modern world I listen to youtube to get the recitals/rythm right.

This is the same with cooking. My Grandmother had I think just one cookbook all her life. All that she learnt was practical by doing it from a very young age. All measurements and learning was from memory and if there were variations it would be derived from her already base cooking knowledge. Her memory of all these would be refreshed periodically because of the necessity to celebrate festivals with different types of dishes specific to the festival. For this it would not be one person slogging but a group of women get together to make the dish and information exchange would happen.
For every innovation, there's will come a pack of naysayers without the talent, tenacity or luck to accomplish the same feat who will claim (usually long after the fact) that 'anyone' (usually implying themself) could have come up with said innovation. It's a good sieve to weed out folks not worth wasting time on.
It's not really a problem. There's lots of energy around, and consuming energy isn't bad per se.

Most Bitcoin miners run on renewables nowadays, because renewables are the cheapest sources of energy when miners can locate to them.

Also, the main assumption of Bitcoin's security model is that it's rather impossible to centralize energy production on this planet (or in the universe). Proof-of-stake assumes decentralization of ownership, which is a flimsier assumption, and will fail asymptotically.
I’ve seen a horror story in the form of “[HELP] sysadmin wont give encryption keys” post to a forum. Mid-2000s, non-English so I’m paraphrasing.

The sysadmin resigned, no tech person anymore. The boss got a lost password inquiry from a customer, panicked, called former admin for help, not a single word he understood, hit the forum.

And in the forum post he said the admin “wouldn’t cooperate”, “very adamant and confrontational” about “giving out encryption keys” to “decrypt valuable customer database we can’t afford to rebuild but might have to” and how it’s driving the company towards bankruptcy over last few days etc etc.

Eventually forum members realized he’s talking about a password reset, and convinced him it’s actually impossible to recover hashed password nor it’s necessary which is the point, you just verify identity and let them change the password etc etc, but it took hours for the community, on top of a day and half or so of tense hours for the boss guy’s company, to just understand the situation and act accordingly.

So I think it might be worth communicating how passwords work every once in a while.
From the Seabed, Figures of an Ancient Cult
L1 vs. L2 vs. L3 Cache
well, there's the JSON standard, which does not define "false" and false as equivalent.
An urban location won't be more then ten minutes away from a park by foot. A 30 minute drive means exurbia.
Many here would find ampleforth.org's redbook fascinating.
I think it is more complicated that. It's more like asking your neighbor to borrow some sugar. Nothing nefarious, but your neighbor might later ask to borrow your ratchet set. The concern is how strong is this relationship and if there is real quid pro quo going on. It gets gray real fast when you are your neighbor's boss and control his raises.
Hackers foiled in attempt to steal $90k from abuse survivor in email scam
"Need I remind you that the world has been running almost exclusively on gold,"

Actually that is not true. Gold by weight as a currency has been used at times, but many other forms of currency were used historically even by people who had gold available to them. There is a lot of historical precedent for credit money (i.e. people using debts owed to them as currency) and for coins minted with non-gold metals like iron and bronze. The earliest known currencies were "virtual," taking the form of clay tokens that were used for accounting in the ancient near east -- a civilization that was well aware of gold but considered it to be more useful for producing ceremonial objects. Shortly after inventing paper the Chinese started using paper money.

Gold is actually a terrible currency that makes trade much less efficient. Historically gold was most useful as a currency when empires were able to procure a growing supply of the metal, and when the gold stopped coming in people would switch to some other currency (typically some form of credit money).
> The US intelligence community agencies can access the data directly from Google via PRISM without a warrant

No, they can't. That's a bunch of conspiracy theory gobbledygook not supported by any documents. https://www.cnet.com/news/no-evidence-of-nsas-direct-access-...

If you are an American or in the US, they must obtain a warrant to get your data from Google.
Riese and Müller Superdelite E-Bike
This reminds me of reading “Abraham Lincoln, vampire hunter” where they used his real correspondence to make it look convincing like he was some kind of American vampire hunter. It was amazing.

The reality is that when you have unrestricted access to anyone’s life, you can make them a criminal, whether by framing or surreptitiously surveillance. There’s a reason why a principle of our legal system is that you must first have reasonable suspicion of a crime before you investigate.
I don't disagree, especially about "stack ranking" which is, I believe, ridiculous and I've pushed back hard on it whenever it was suggested.

That said, I think calling them "performance reviews" to be a disservice as well. (I prefer 'Focal Reviews'). I try to stress in reviews a write the ways in which I feel the person is making progress against their medium and long term goals, and where they are perhaps stuck.

In terms of promotion and pay however, we may disagree. I try to distinguish between someone improving as an engineer and someone doing a good job. It is a subtle difference but it is an important one to me.

Using the example of a fictional programmer, if they get their part of the projects done on time and their code is of high quality and reliable. Then I think they have done a great job and if I can I seek to give them a bonus of some sort to reward that.

If this same programmer gets their part of the project done, and helps others getting their stuff together, and perhaps refactors the project so that everyone has an easier time integrating and testing? Then they are a better engineer because they are acting as a force multiplier for the entire team. Those are the people I try to promote.

I'm not a big fan of raises for "time served" as one manager I knew put it, although I do believe you have to adjust to the market so if salaries are going up across the board you should reflect that in the pay of your engineers.

It is always my goal that annual focal reviews are not a 'surprise', rather they are a summary of the previous 12 months.
My contribution to the genre of reviews of terrible books on C: https://www.amazon.com/gp/aw/reviews/B00NYBRH30/ref=cm_cr_un...

(“This is a terrible book ...”)
Pro bono doesn't always necessarily mean "for free" or "no fee" - could be reduced fees.

Besides this, there's probably filling fees to the court; I also suspect there's outside work required (think research for current or prior cases - PACER comes to mind), which is not necessarily covered by regular "lawyer fees"
Hmmm...

> With BASIC, the key thing to know about most implementations at the time is that there were no functions and no scope aside from the global scope.[2]

Take a look at DEF FN in the Applesoft Basic Manual:

https://www.landsnail.com/a2ref.htm

(To be fair, it wasn't used that much, but it was there.)
Well, your example kind of proves my point as society has improved by not thinking incest is great.
Not really. I put together a few github projects and was approached about two jobs over a few years just under 200k... I said no, because even though my github projects were simple when I wrote them, reading them later was insane. Reopening my java projects after years is the exact opposite - my IDE tells me everything I need to know and reminds me along the way. It's like a warm fuzzy blanket.

I'm almost 99% sure both jobs were places that bought into some dynamic developer who promised unicorns and rainbows and then left them with a huge clojure project have their eyes bleed to. No thanks.
From that URL:

> In response to outcry over PRISM, the U.S. director of national intelligence has released some details. Among other things, he says the government "does not unilaterally obtain information from the servers of U.S. electronic communication service providers" and that PRISM-related activities are conducted "under court supervision."

“unilaterally” is how the first is true: the providers participate and generate the data dumps for them. “supervision” is how the second is true: supervision is NOT a warrant.

You have to be careful with the wording. I never claimed they had direct access. PRISM is a program that allows them to download account contents via a special app, which is integrated by these companies, with the cooperation of the companies participating.

Google joined the PRISM program on 14 January, 2009, and were assigned the identifier prefix P3.

PRISM collection does not require real search warrants, as it falls under Section 702 authorization, authorized by congress in 2018 until 2023 presently.

https://www.eff.org/702-spying

They do indeed get the account information downloads directly from the participating companies. They do not have direct access to the companies’ servers (outside of the servers that run the PRISM integration, and perhaps not even direct access to those other than being able to submit PRISM data request jobs).

The net effect is the same.

Note that being American or being located in the US is insufficient protection against PRISM due to the way Section 702 works in practice as applied by the NSA. This is one of the reasons cited by Snowden about why he came forward: this secret new interpretation of FISA gutted previous warrantless search protections for Americans, sidestepping them entirely.
I use https://www.softcover.io/

Fantastic support and it works great.
There are two (well, lots more than two) different problems with email. DKMS solves spoofing. That isn't a more or less "wrong" problem than spam. The latter just needs a different solution (and Google etc. have become pretty good at it).
> People are not their governments.

Especially in dictatorships like China and Russia, indeed.

> Viewing competing governments as competition between their countries

I don't understand this comment. So if a foreign government is opposed to you, it's OK because it does not represent its people and therefore you should not do anything about it? As far as I know the government controls the use of violence force so in the end of the day governments matter over people when it comes to foreign relations.

> During the cold war all sorts of things were justified because they made sense from the perspective of US (governmental) interests. The Vietnam war, the Mujahideen, the toppling of free and democratic governments.

This hardly happened in a vacuum. In case you missed an episode the whole of Europe and several parts of Asia were threatened to be taken over by communist rule, in a violent fashion - the US acted as a counter power to that.
And I would argue that Muslim scientists such as Ibn al-Haytham employed the scientific method before Bacon.
"going back to 2017" is a very short window. The European excess mortality data I've seen does show COVID as a fairly significant spike in a 5-year context, but even just "zooming out" to 10 years makes it fairly insignificant.
Hey! We have built a skill assessment platform. Would you like to give that a spin?

https://bit.ly/iview--ai
Rome quite literally wiped entire civilisations off the
map. Sure they didn’t use nukesc but what’s the difference when everyone in your culture dies?
this is great! thanks for all your hard work and for sharing, snori74!
US dollar will never crash. It is defacto the currency that runs the world.
It's a bit like saying the lake will overflow because millions of people are pissing in it.

And crash against what? Other currencies are faring far worse.
but one is not carrying around a very heavy engine, gearbox and tail structure.

(no heavy tail structure because there is no rotational torque from driving the blades around against the tail rotor only gyroscopic precession when changing direction/ tilt etc)
The reason this is a problem even for new applications [1] is that it's the result of a leaky abstraction in common password hashing libraries which forces the site operator into a tradeoff between login service reliability/consistency and security.

Iterated password hashing algorithms like bcrypt [2] use a parameter tuneable by the site operator that drastically varies the computational cost of calculating the hash, so a brute force attack on the hash could be required to use orders of magnitude more computational power to crack. The tradeoff is that it will make users wait longer to log in, and (might) incur additional operational cost to the site. This is why it's a tuneable parameter: Up increases security at the cost of user delay and operations.

In theory. In practice, the user delay and operational cost are also proportional to the user's password length, which you don't control. Observe, the leak. This can cause wildly varying response times for authentication attempts, and opens your authentication system up to a DoS attack. The only reasonable solution is to put a small cap on password length so that the longest passwords don't take more than 2-5 times as long to compute, as per each site's tolerance of variance.

So why does the runtime of the iterated hash function depend on the length of the password? In each iteration the user's password is joined to the previous iteration's hash, and hashed together to get this iteration's hash. The runtime of any hash function is proportional to the length of the data fed in, the data fed in includes the user's password, thus the runtime of an iteration is proportional to the length of the user's password. So the runtime of the whole iterated password hash is `O(Iterations * PasswordLength)`.

There are various schemes one could come up with to change the time to `O(Iterations + PasswordLength)` ~ `O(Iterations)`, such as concatenating the first hash of the user's password instead of the password itself on all successive iterations, so all iterations but the first are independent of the user-chosen password length. There could be some security/entropy-based arguments for avoiding this solution, though I don't know what that could be.

[1]: https://news.ycombinator.com/item?id=22749706
The best argument against this, and for leaving the * by the variable name, is this declaration:

char* a, b;

Now a has type char * but b is just char. It’s probably not what the author meant and it’s definitely ambiguous even if it was intentional. Better to write:

char b, *a;

Or, if you meant it this way:

char *a, *b;

“Well, don’t declare multiple variables on the same line,” you respond. Sure, that’s good advice too. But in mixed, undisciplined, or just old code, it’s an easy trap to fall into.
'But, as usual, government employees/agencies have “sovereign immunity”, which means they can get away with doing a bad job any other type of private employee would get fired for, without repercussions.'

It's not too clear what you mean by this. Patent examiners can get fired, right? Or are they elected/appointed for life in your country's system?
> Although implementing a maximum password length does reduce the possible keyspace for passwords, a limit of 64 characters still leaves a key space of at least 2^420, which is completely infeasible for an attacker to break. As such, it does not represent a meaningful reduction in security.

https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...
Something to rewrite articles without the spin? That would be awesome.

I'd love a ublock origin style plugin for identifying submarine advertising, astroturfing, etc. Could feed it press releases/advertisements and the like from major corporations.