skysight-inc/HackerNews huggingface dataset:
That consequence doesn't follow. Capital intensive mining does not make the blockchain any more decentralized, as long as miners doesn't collude enough to form a single majority. Game theory suggests that financially motivated attackers would do best to avoid that however.

Even if ASICs were not mentioned by name, Sastoshi wrote about how mining was expected in the future to be the work of large bank-like organizations, but apparently did not worry that this would harm the project.

What he may not have foreseen was the emergence of mining pools, separate from miners themselves, that in certain ways can behave like cartels. That could have been avoided with a mining pool protocol where miners are the ones to form blocks, but the software included no possibility to pool mining power at all.
A little context: https://en.wikipedia.org/wiki/Joint_Enterprise_Defense_Infra...
If we ever end of doing the deorbit, I really want to see a video of the impact. That would be intense.
That Algorand paper suggests a way of scaling consensus to large numbers of nodes, i.e. by running a consensus algorithm on a random sample of nodes. It doesn't address scalability with respect to transaction volume, which is what people usually mean in the context of the blockchain trilemma.
> It's a massive combination of luck and being at the right place at the right time selling an okay thing

Yes that, as well as: having a secure attachment to primary caregivers (Bowlyby & Ainsworth) and live in relative security, have encouragement and patience early on from parents or other guides to help you manage complexity and 'learn how to learn' autodidactically from a very early age. The people who do well in school inherited a calm nervous system.

Honestly I think 99.999% of what people attribute to 'hard work, or call 'success', purely has to do with the state of the nervous system of the individual. Unlucky? You'll face systemic disadvantagement.
OKRs are useful at the level of the company that has medium and long term goals, not merely keeping the lights on and reacting to short term emergencies.

An OKR is about a paragraph of text per quarter, hardly seems cumbersome.
Universal media access should be a thing. The government could demand access to entire digital catalogs, compensate and resell to front-end streaming providers.
> Godus. Yeah. Good concept, I played > 50 hours on it. but it never delivered at all.

That was a painful year or so. So many restarts and hopeful explorations only for it to.. never in any useful way ever give the game it promised.

A shame, as the basic mechanics were seemingly all there - I never could wrap my head around what went wrong.

The worst of it though is I now can't stand to listen to a childhood hero's bullshit.

It's ok, I still have Populous II and Syndicate on WinUAE
Tesla makes far less money than Ford but has a far larger market cap. What competitive advantage does Telsa have over Ford to justify the market cap?
Now I want a burger, but it’s midnight. Thanks
A pepper is essentially a secret encryption key (it's a long secret string that's added to the password and the salt to ensure more entropy). With cloud key management services (e.g. both AWS and GCP have a KMS), I think it's more beneficial to just encrypt the hash before putting it in your database. Process looks like this:

Upon password creation:

1. Generate hash as hash of password + salt.

2. Encrypt the hash with a public key from KMS (you can store the public key in your server code).

3. In your database store the encrypted hash, the salt, plus some "key ID" that identifies which KMS public key you used (this is so you can rotate keys later).

Upon user login to verify the password:

1. Retrieve the user's encrypted password hash, salt and KMS key ID from the database.

2. Make a call to KMS to decrypt the hash (KMS internally stores the corresponding private key but never lets you access it).

3. Then hash the password the user entered + salt and compare it to the decrypted hash to see if there is a match.

Benefits of this are:

1. If an attacker steals your database, they can't decrypt any of the passwords or the password hashes.

2. KMS never exposes the private key of the async key pair, so you know this won't get exposed either. The only way to decrypt something is to make an API call to KMS.

3. Thus, the only valid attack really is if the attacker is able to gain the same access privileges as your server. But even then they still need to call KMS one-at-a-time to decrypt hashes, and all of those KMS calls are logged in an audit trail, so it should be much easier to see if you have anomalous calls to KMS. There is a huge benefit here in that it is impossible to do bulk decryption without a giant audit trail.
It would be helpful if research papers included the publication date prominently displayed in the header/abstract of the paper -- but none of them do.
You can get a idea by looking what the paper itself references in the endnotes, but that varies.

It would be a useful search-engine feature or plugin to derive the pub-date information (and possibly the source journal(s), if appropriate) from meta-data elsewhere and/or by cross-referencing the papers that cite each other and include dates.

It's also very annoying that one can usually find a free version of most papers, but I need to wade through gobs of hits first where they want me to pay for it -- and it's not always obvious w/o following each link.
I never knew about Zuckerberg's interest in Roman Emperors, but it sure fits now that I'm thinking about it. One more parallel would be Augustus dressing in plain outfits, much like Zuckerbergs's jeans and hoodie. I'd guess there's some pretty effective signalling there: making them appear more relatable to the masses, while also letting elites know that they are above their normal formal-wear rituals.
Except when you hit a website that refuses your auto-generated strong random password, which happens to me with shocking regularity.
As a quad 22 owner, alas broken, I can recall running the quad 33 skin.
Hah, creating your own search engine has its advantages doesn't it.

Or if you don't own Google, you can just claim something related to the search term to hide what you want to hide: https://www.wired.co.uk/article/boris-johnson-model-google-n...
It's really hard to store pepper in a system meaningfully more secure than the password hashes themselves. For any suggestion of a safer way to store pepper my response is "store the password hashes there instead". Until you get to the point of decrypting password hashes in a TPM I don't see any benefit and at that point you've switched to a hardware solution.
Hi @kgwgk can you please help me understand the value in posts like yours?

This article seems to do nothing but sew fear among the population and to what end?

What is the informational purpose of this story? Aren't cases rising everywhere?
> There are a bunch of existing extensions for Gmail UI tweaks, but most are just too heavy to me.

I went down the heavy customization path, and eventually came upon the profound realization that I was going the wrong way. I ditched all the extensions and went with the simple gmail[0]. No breaking changes to extensions over time. Less CPU load. Cuts out all distractions. Simple. Fast. I'm in and I'm out.

[0] https://mail.google.com/mail/mu/mp/
Exactly.

'Can you please not confidently project what is at best hindsight-bias? This isn't a palto alto meetup aka signalling-fest'
Ahh that takes me back. For the kids, here's how you use those things:

You slide back the metal shield to expose the surface of the disc. Carefully, you engage the read head or "needle" as we used to call it - a joke riffing on those archaic record player things that mum and dad danced to. We would of course be listening to our modern cassettes in our dodgy knock off Walkmans and rubbish headphones.

You will notice that there are two small square cut outs on each disc. That means that grumpygamer had access to the latest double sided discs. When you got to the end of side A, you turned it over and engaged side B to continue loading.

That thing is known as a floppy disc, which was pretty rubbish marketing, given that the 5 1/4" effort was actually ... floppy. I don't miss them at all but I still have a few around the place.
It has to implement all the old versions of USB too
If you are feeling less charitable: the Eye of Sauron looks into a particular corner of Mordor and the orcs in that corner suddenly start scurrying harder.
He points out that a wealth tax compounds. It doesn't kill compounding, it just diminishes its effect in the same way that the TER for a mutual fund does.
I think the music argument is somewhat valid, there's nothing like "rock" and "hip-hop" anymore. We have a ton of different styles but nothing groundbreaking. It's to be expected though with how the music industry evolved. Conservative investments and volume instead of quality.
I think this is what they really intended Godus to become - a sort of idle clicky grind game with pleasing, but essentially shallow, interaction, and no more.

Unfortunately, some of us were caught up in Molyneaux's breathless inflatory hype and thought it was going to be Populous X.

- ed
Wouldn't it be only expected that cases would rise as testing increases? The number of "cases" in fact stays the same, it is just that more of the cases are exposed with the increased testing?
Totally agree that matinee prices are not low enough to match demand. I defended the MoviePass business model vigorously, see my comment history. (with that said, they do have to reimburse studios for each ticket sold, so the theater doesn't have full discretion)

But that's totally irrelevant to this conversation. If the theater is charging $5, or $2, you still can't just sneak in the back door without paying.
Monkey Island and its sequel are some of the defining games of my childhood. My brother and I played all the Sierra Games, and Lucas Arts games, and while we have many loves (Heroes Quest/Quest for Glory, Indian Jones), Monkey Island was by far our favorite.

We few years ago we were lucky enough to meet Ron at PAX when he was there promoting Thimbleweed Park. Since then, I saw him fairly often at a neighborhood coffee shop here in Seattle.

Earlier this year, at the start of the pandemic, my brother and his partner ended up making an adventure game in the style of Monkey Island. It's almost an homage and has a few shout outs to those in the know. Check it out here:

https://www.landlubbersgame.com.

Thanks Ron and team for the good times!
>If you followed his MS days closely, like many in this community, I doubt you'd change your mind about him

As in, he was a good fella on the net?
Because while service oriented architecture is currently "hot" it's not a requirement for many systems and monolith is still king in most corporate environments.

It's not just because the decade counter changed that everyone must rewrite their systems using the latest fad.
> The problem with merge is that it fails under contention, not under simple testing.

that depends on so much else going on with your database - fine policy but when I said "test" I didn't mean whatever you mean by "simple testing".

> caused by the usage of MERGE statements

"exacerbated by" is probably more accurate - just because replacing a merge statement with something else alleviated an issue doesn't mean that the root cause was some bug in SQL Server.
2009 era YC was epic. Literally once in a century.

I was happy to be around, if not involved. Startup School afterparty at Anybots was a dream. Trevor even pinched me with his new robot (at my request).

There were posers even back then, though. I remember one guy getting very drunk, saying “Ok, this is it,” and walking up to pg to pitch his startup. I’m not sure who I felt worse for, him or pg.
Not at all, I am protesting an abuse of the language that makes for a nearly Orwellian level of nonsense in thinking and speech.

‘Most of the protestors were non-violent’ is an intelligible and probably accurate statement.

‘Mostly peaceful protests’ first of all intrinsically refers to the protest as a singular entity, not addressing the individuality. That’s not my doing, that’s in the phrase, making the protest the subject, as opposed to the people.

Secondly if you reread what I wrote, my main complaint is that the word ‘mostly’ is what journalistic editors refer to as a ‘weasel-world’. Weasel words make a statement that sounds descriptive but in fact could apply to almost anything.

https://en.m.wikipedia.org/wiki/Weasel_word

Moving past semantics, it is worth noting that the violent protestors would be completely ineffectual without masses of nonviolent protestors to hide among.

Anyway, I would love it if this writing falls on receptive eyes, I am concerned that the implication you made: that what I am writing is bigoted, could indicate you are not very interested in what I actually mean.
I think Satoshi didn't know that Bitcoin would not be a medium of exchange. It will remain digital gold. Bitcoin cannot fulfill its original promise to be electronic cash. This is the hardest hurdle for bitcoiners to understand. They think that sky high value of Bitcoin would transform it into a medium of exchange. But I think it's a false promise from Satoshi.

https://bitflate.org/post/2019/11/24/bitcoin-will-not-be-a-m...

The biggest hurdle for cryptocurrency adoption is a medium of exchange. Most investors waste their time playing around with buzzwords like DeFi.
I haven't tried the Pico but the Vive Focus is not anywhere close to the experience of the Quest, especially when it comes to tracking.

The Quest stands out because the tracking is as accurate and consistent as on desktop class VR headsets. The software and user experience is a clear notch above any other standalone headset.
CBN Can Improve Your Sleep, Mood, and Health
> so why would anyone use it

Because once you salt it (use a different salt for each hash, which solved your collision issue) and purposely slow it down (through multiple rounds,etc) it effectively ruins precomputing the hashes because of how many permutations there are.

Of course this depends on which hashing algorithm you use. Md5? You can do millions a second. Bcrypt? You can make one hash take 100ms, that’s 10a second. They also use a random salt for each hash - so precomputed hashes will only work for that hash.

The issues you highlighted are very real for md5, but there’s a reason md5 is not recommended for passwords.
The first time I heard a musician refuse to interpret their own song, I found it odd. It made a little more sense as I got older and heard more examples.

When I started seeing people talk about the personalities behind video game franchises, it made a lot more sense. We don't need all of your vision, just some clues.
Wow, the skin I made is in there:
https://skins.webamp.org/skin/20b66bbd0313e399e8981ead0b0bd2...

I haven't seen this in what feels like forever. I use Foobar200 now.

I made this using Dreamweaver when it was still popular and useful. It had really nice slicing features for graphics at the time.
Salaried employment doesn't mean unscheduled.
A Society of Tinkerers
The world literally collapsing would be much bigger than an economic problem. Yes markets would fail along with it, but the world wouldn't end. The US isn't the first with major economy or currency and its arrogant to think it will be the last.

The Roman Empire was unstoppable until they over extended themselves with endless war and tried to solve it by debasing their currency. It may not happen anytime soon, but America won't lead the world indefinitely forever, its only 244 years old for shit sake.
I wrote a summarizer which (when using the right settings) performs unsupervised key phrase extraction using language models. It is available here: https://github.com/Hellisotherpeople/CX_DB8
It seems that it would be very useful to you.

Like most data science code, it's non-trivial to install (it used to be when it was still updated)mostly because some dependencies are out of date and I will not risk a lawsuit from my current employer due to the similarity between this work and my day-to-day work. There is a jupyter notebook available which will allow you to use it without an install
All you've managed to do is further reinforce the mental gymnastics necessary to justify getting something for nothing. :shrug:
Thank you for this. I'm shocked, I had no idea! I wish he would have put a What-If blog post up pointing people to this column.

It's pretty telling that What-If has 573 subscribers on Inoreader (the RSS feed reader), but Good Question only has 3!
Sure it's probably more about his ego and his belief that FB is somehow a net positive force in the world. To me that just implies that he wants to steer Facebook and with it some portion of the world which just sounds like applying "power" to me.
I think you don't quite understand the purpose of a salt. Pepper and salt protect against very different things. And frankly, salt is much more important.
> What are you talking about? You can't tariff yourself.

The Constitution prohibits tariffs internally:

"No Tax or Duty shall be laid on Articles exported from any State.
No Preference shall be given by any Regulation of Commerce or Revenue to the Ports of one State over those of another: nor shall Vessels bound to, or from, one State, be obliged to enter, clear, or pay Duties in another."

That clause is in the Constitution for a good reason.

> Well china is great at industrial goods

Only after they switched from communist industry to free market industry.

I'll let the rest of your post speak for itself.
Is there any evidence at all that Amazon initially corrupted the contract?
It’s my opinion but that was a very one sided view. And I need to read more on this but I don’t think the way he pointed it out is how anyone is proposing wealth tax.
Location: Geneva, Switzerland

Remote: Open to it

Willing to relocate: Yes

Technologies: Linux, Python, Git, Docker, Jenkins, CI/CD, Cloud Platforms... (SRE related tech)

Résumé/CV: https://shreyan.sh/res/hn-www.shreyan.sh.pdf

Email: hn-09@shreyan.sh

Hello HN,
Are you looking to hire for an SRE or related position?

You may consider me. Here's why:

* Proven work record. I've previously worked at Y-Combinator backed startups (Observe.AI and RedCarpetUp) and now at CERN.

* Well rounded profile. Notice that I have proven experiences from building systems to hacking them.

* My open source code is being used by Mozilla's WebCompat team and CERN CSIRT (open source libraries in point: Flask-Firehose and Django-Forwarded) in production internet-facing services.

Thank you and I look forward to hearing from you.
It's nothing more than a joke. You have no way of knowing what the true majority opinion is, nor does that translate to real trades which involve a lot more parties and money.

And being the contrarian isn't profitable except in rare scenarios. The dips this week were a minor pullback. Anyone who kept going short while waiting for this would've been insolvent by now.
Try these out on VLC using these instructions: https://www.hacktrix.com/how-to-apply-winamp-skins-on-vlc-me...
I wonder how much more would that be if the median carbon-tax proposal was added?
> Monetary inflation

It's incorrect to refer to monetary inflation as just "inflation." If you're talking about price inflation, we're not seeing that yet - although 5 year inflation expectations are popping back up again [0]

So far, it's looking like the Fed is doing as best as could be expected.

[0]: https://fred.stlouisfed.org/series/T5YIE
Troy doesn't understand users. I know how this stuff works and the blog post had me snoozing.
Users don't have room in their brain for both "encrypted" and "hashed". All they care is if they are secure, and if some pro tells them the vendor is lying.

Why should they be expected to know?
They are receiving an email from a professional IT specialist who couldn't even figure out how this stuff works.

It's the vendor's job to get it right, and lawyers and activists's role to hold them accountable.
subsequent gradient updates would probably wipe out the manipulation
Perhaps a bit off topic but "Jedi" in the title should be uppercased to emphasize that it's an acronym.
Of course the traditional answer to this question would be to do a Ph.D. in physics.

If that isn't an option there are usually more specialized books in specific research areas beyond the level of undergrad/beginning grad-level texts. For example if you search for "quantum dots" on Amazon you will get a number of hits.

That said a significant part of learning a field of research is becoming familiar with the primary literature of that field (ie. published papers). In fact if you were in a Ph.D program you would probably also have to spend quite a lot of time and effort reading papers to get up to speed.

If you encounter an equation you don't understand there is undoubtedly some paper where it was first introduced. If it's widely used there may also be review papers which attempt to give a broader understanding of that equation in context. Usually finding these is a matter of doing a literature search (Google Scholar is quite useful for this) and tracing references in papers once you've found them.

Have you tried asking your contacts to recommend a list of books and key papers in their field ?
If you have a single database, located on a single server you have a single security domain. No amount of hand waving is going to create a magic security boundary that will not be crossed by the most banal part of the application.
No bedrooms?
At a given instant in time, each unit of currency has to be owned by someone. So if the money supply increases by 10%, by the pigeonhole principle, there is at least one entity with 10% more money in one of their accounts.

Now I'll buy the idea that isn't necessarily going to cause shortages and price rises in consumer goods, but the idea that it doesn't cause changes in asset prices is too much. Are these rich people supposed to be idiots? There is no return on cash and new money is being created at a fast clip.
Every time I want to use the service I have to go through this? I don’t think I would like that. Much easier to just paste in my password. Plus these emails are like sending passwords in plain text. If they are intercepted someone can impersonate me.
Amazon must be quite sure of the polls.
There's a great deal of communication that happens outside the operating system, and a bunch of different multiplexing modes and things like that. There's at least 4 different speeds it's going to need to talk at (1.5mbps, 12mbps, 480mbps, and 5gbps) with a good deal of synchronization and other bits. There's a rather decent amount of logic that has to be implemented, and I wouldn't be shocked if you end up needing what basically amounts to another CPU for the controller itself to manage the entire connection and negotiation. Depending on the physical construction it might also need some decent power transistors if it's also handling the 2 amp current limit on usb3.0 internally (rather than signalling ones outside the chip).
Is this Amazon? It sounds like Amazon...
>It doesn't address scalability with respect to transaction volume.

For scalability with small transaction volume, Coda[1] is the best.

[1] https://codaprotocol.com
that's a mature and very reasonable perspective. There's an incredible amount of circumstance and luck involved in success, the right ecosystem, the right people, and so on.
Lin Wood is a lawyer defending a boy against a politically-motivated prosecution. The event was a clear case of self-defense against a murderous mob of felons. It's nearly all on video, usually from multiple angles, and the court filing even includes a reporter's witness statement that supports self-defense for the one part of the event that isn't on video.

Twitter bans it, yet Twitter does not ban similar efforts for other people. It's political discrimination, clear as could be. Facebook did likewise.