skysight-inc/HackerNews huggingface dataset:
Secure systems cannot use either a signature or authenticated encryption. Signing a message is not sufficient to prevent tampering that leads to an attacker reading the message by seeing errors in processing the tampered message. You need either authenticated encryption or signcryption.

Suppose your format is ciphertext || signature. An attacker can strip off the signature, modify the ciphertext, and then sign the modified ciphertext as coming from an attacker controlled account. The recipient will then accept the ciphertext, decrypt it, and parse it. Errors on decrypting or parsing induced by mutations can then be used to get the plaintext.

This isn't theoretical. It happened to iMessage[1] and GPG[2]
And no, you cannot just include the sender inside the ciphertext. iMessage tried that. It didn't work. In general, there are two problems 1) the ciphertext is malleable and the id can be changed. 2) the error could happen before you can read the sender id from the ciphertext.

Signing and authenticated encryption really don't do the same thing.
[1]https://www.usenix.org/system/files/conference/usenixsecurit...
[2]https://efail.de/
Zuckerberg consistently shows support for the far right. Look how he had his Girl Friday bankroll research on anti-Semitic conspiracy theories against George Soros.

Any normal company would fire everybody involved in some situation like that, but at Facebook it is just normal.

Right-wingers have deliberately waged war against the media with the 'conservative bias' claim precisely to open up spaces like the one they have on Facebook.
Association of Daily Wear of Eyeglasses with Susceptibility to Coronavirus
Possibly recommend changing link to the proposal itself[1]?

Both pages link to each other, but the discussion is unlikely to be of very much note unless one has already read the proposal being discussed.

1. https://github.com/ghc-proposals/ghc-proposals/blob/master/p...
Maybe it's better now, but CUPS used to be a nightmare. I still avoid it whenever possible. Eric Raymond did a good job of describing just how bad it was.

http://www.catb.org/~esr/writings/cups-horror.html
That wouldn't be too far from truth. 75 percent of people started their addiction from prescription medication who then turn to the black market to maintain their habit. The big pharma is loosing a large profit. They heavily opposed marijuana legalization, their role in the war on drugs is quite clear to me.
On the other hand, I used to have a microwave with a "nag timer" that would continue nagging you until you took your food out.

Saved (fallible) me from a lot of cold meals.

My current microwave doesn't have that and in ascending order of silliness I have 1) forgotten food and eaten it cold 2) gotten hungry and gone to heat up something only to find there was something already in the microwave 3) (worst) opened the microwave to find something there from the night before.
I really wish Let's Encrypt had a solution for those of us with lots of "internal" devices that neither need public access nor are capable of running an automated renewal job (routers, switches, IoT gizmos, etc).

All of these things come with half-baked self-signed certs, and web browsers and mobile devices these days are making it increasingly difficult to actually stomach such certs for anything at all.

I wish the "SSL All The Things!" crusaders would consider this use case once in a while, and actually offer a usable solution.

(Some of us could go through the trouble of setting up a private CA to deal with this issue, but getting everything to trust your own personal CA root seems like almost as much of a hassle at times.)
Whether std::vector holds three pointers or a pointer and two sizes is entirely irrelevant. Either way sizeof(vector<T>) does not vary depending on T.
Ent – An entity framework for Go (a powerful ORM for modeling and querying data)
Agreed. Master being a bad connotation to some people are not the problem of the word itself.

Some time if `main` turns out non-inclusive, changing it to other term is counter-productive.

They must change to the source of bad connotation itself if they want to really contribute to those they claim they are helping. If the bad connotation `master` comes from slavery, then fight slavery or slavery-like acts to get rid the bad connotation from the term `master`.

I don't understand why this is not a common sense. Smh
I'd ask that rather than assuming malicious intent, give your comment another read from a different perspective and see if you can understand how someone might see it as gatekeeping.

(If you kept the first sentence but dropped the last 3 the post takes on a much different meaning).
If this is true, just wearing masks isn't going to be enough to protect against covid infection.
Dipshitize.com

Awesome.
I haven't shared them -- they're interesting and valuable to me, but I don't think they're polished enough to be interesting to others.

Actually I had a conversation with someone on HN who had made notes over a similar time period (16 years now for me), and some of the topics even overlapped (CS, programming, etc.) They are hyperlinked as well.

So you could simulate the experience by reading some of these notes, which are published in a raw form:

https://gitlab.com/kragen/dercuano

Personally I found it compelling enough to browse through about 20 notes over an hour or three, but no more than that. It didn't hold my interest -- not because the topics aren't interesting or they're not good notes, but because of the "shorthand problem". Notes to yourself have a lot of shorthand that doesn't need to be expanded, which makes it hard to read for others.

If you actually spend a lot of time reading those notes, I'd be surprised and interested to hear it :)
What “rampant” criminal behavior?
I’ve always found it better to avoid concurrent mutability as much as possible. That has worked very well for me, and I don’t generally have the negative experiences other Go programmers have complained about. Not as nice as static type system guarantees, but it’s available today.
That's why I see webasm as a bad thing
I actually went back into academia to try and maximise my utility. I am not particularly interested in forging my own path in enterprise or as the head of a laboratory. Instead I try to be a helper within other people's teams. This seems to work pretty well for me so far. Some might think I am "not the master of my own ship". However, I would argue I have chosen this pathway into high utility subservience because it does achieve my goals.
I (hobby gamedev) moved from Rust to C a few weeks ago, here's something that made me switch:

1. Compilation time (no more words needed)

2. Forced to use Cargo for managing dependencies. The downside of a good dependency toolchain is that people will use it and there will be tons of indirect dependencies. For cross-platform development it's very common to see one of your indirect dependencies doesn't support the platform you wanted, and there's no way around it (even you know how to fix it you'll have to submit a pr and wait till the merge and crates.io release (takes years), or download the whole dependency chain and use everything locally which is a total mess)

3. Too strict. As a hobby gamedev the thing I value the most is the joy of programming, I don't want to spend all my time trying to figure out how to solve a borrow checker issue (you'll always face them no matter how good you're at Rust, and I don't want to use Rc<RefCell<T>> everywhere), and I just want to be able to use global variables without ugly unsafe wrappers in my naive single threaded application.

As a language I love every aspect of Rust, just ergonomically I don't want to deal with it now.
I love this: Simple and entertaining, not to mention the creative utility.
It is extremely relevant when responding to the claim "std::vector consists of three pointers".
Yeah. Not great on iOS Chrome, fwiw...
In my experience, reddit and other online discussion forums have been just as bad as Facebook at times.

Online communities like reddit and, yes, HN, are echo chambers to varying degrees. They can also elicit a sort of inhumane treatment of others by depersonalizing them, sort of like what happens when people get behind the wheel of a vehicle.
Secret documents show how North Korea launders money through U.S. banks
Every company dreams of turning their device into basically a cash register. And some have pretty much done it.
I am. Though it's hard to overcome the constant drumbeat of ads that exploit baser instincts. And while education is part of the answer it clearly doesn't work quickly or as thoroughly as regulation to protect the commons.
In modern times, the keys on a SSL certificate don't directly encrypt the session key used to protect communications between your browser and web-server. Instead the key only signs the diffie-helman share that a web server uses. Web-server operators are free to use 25519 for their ECDH shares if they want to, the curve used there does not have to match the certificate's curve.

Even if the NIST curves are backdoored, the backdoor wouldn't be able to passively decrypt TLS sessions. At best it might allow someone with knowledge of the backdoor to impersonate a web-server, but that's an active attack and it would be very risky for the attacker. They'd run a huge risk of disclosing their back door capability.
FinCEN Files: HSBC moved Ponzi scheme millions despite warning
look into Cloudflare’s cfssl. it’s really great if you just want a simple internal CA.
Oh yeah, not endorsing law breaking in any way or form, following the laws is very much a think everyone should be doing(for the communal reasons you called out among others).

Gatekeeping is holding up one aspect of the community as more valid than another and I've seen it drive away many people who would be active or interesting members of the hobby(they usually go over to the ISM bands where there isn't any stigma about what is "legitimate" ham radio uses).
Interestingly enough, many commercial microwaves are like this, with detents at 1 minutes increments. Being able to load and set a microwave in under 5 seconds without paying much attention is really crucial in a busy kitchen.
He’s used a Japanese concept with a well designed venn diagram. He must be very insightful though.

I agree with you, this isn’t a helpful or useful article.
I imagine because ASAN and UBSAN are dynamic analysis, while Rust's philosophy is to offer static guarantees.

I guess the problem is "unsafe" blocks. Someone else can probably elaborate better, but if you have pure Rust code with no unsafe blocks, you shouldn't have any memory errors. But large systems written in Rust might still benefit from finding memory errors dynamically rather than statically with something like ASAN.
Is it better than television or games?
My wife pulled out dusty old binder of my sports cards. Readin thru those things was a trip. On one page with bball cards I had 90s Shaq w/ orlando, very early AI, kukoc, and pippen. Those cards (and sportscenter) were how you got stats and knew shit about sports. Now you have every possible statistic at your fingertips. In my day (90s) us kids had to memorize stats on the back of baseball cards!
Thanks for this. I was watching it yesterday and thought 'there is no way everyone was ok with bicycles' when he said that. It is not human nature. I also think a healthy dose of skepticism is good as long as we fall back to scientific data.
If I'm reading the chart right, jet fuel prices are currently negative? Is this because they keep making it and have nowhere to store it?

Also,

> very low-sulfur fuel oil for the maritime industry

I thought the maritime industry didn't care one bit about the environment and would use nasty fuel once in international waters?
Thank you for writing that. The "everyone's life has difficulties" is true and often said, but it's such a platitude without someone providing a concrete example.
I don't think people here appreciate you pointing out their hypocrisy. HN is different in many ways(not tailoring content based on profiles, not trying to maximize engagement, etc), but it still has many problems (groupthink, suppression of contrarian ideas, karma whoring, inconsistent fact checking, etc).
That's worrying. Jet fuel is hellaciously toxic and I wonder how prepared shipboard operators are to handle the proper safety precautions.
Did he forget about pulling the cord out? Lol
Congrats bud. As a bit of an introvert, getting married made a significant improvement on my life. I'm much calmer and happier. My then recent occuring panic and anxiety attacks even disappeared. I hope yours is enriched similarly.
YouTube website now blocks iOS 14’s picture-in-picture mode for free users
> It's wealthy lobbyists who want to oppose immigration

That is funny, I would have never thought that wealthy lobbyists would ever be against easy and mass immigration policies to dilute the labor supply. Much better for corporations to hire people who are willing to work either more cheaply or out of a sense of desperation because job demand is lower than the available/willing worker pool.

Do you have a sound logical reason for why wealthy lobbyists would go out of their way to spend money on opposing immigration?
I have written a _lot_ of business logic in go, and I can say that imo it is a superb language for doing so. Vastly better than C, and I’m coming around to it being better even than my beloved python.
I don't really have the money for that since I also pay all the bills while my wife spends her income on hobbies.
How does what gp wrote steer people away from reading the whole thing?
So far the only ones it has generated for me resembling English are quite NSFW
Hopefully this site will pump fake some domain squatters into buying these..? Jk of course I’m sure these are direct Whois queries, and I know namecheap doesn’t practice that if the site is using them for the searching/ai.
The movie consulted (and interviewed) the guys from this podcast Your Undivided Attention https://www.humanetech.com/podcast

It has nice episodes with deeper discussion of the social network social problem.
Maybe CS Class Isn't the Best Way to Expose Most Kids to CS
We're launching our product, Commons, to give people a place to start and grow their own online communities. It's honestly pretty hard to start a community dedicated to your interests. Reddit, Discord, and online forums don't really enable communities to have more meaningful and connected discussions. Our product helps you with that, so please give it a look! The core functionality right now is to allow you to create your own mini-forums (Commons), create threads, and make posts, while also subscribing and participating in the Commons of others.

I've linked to a "Common" where I explain the concepts / goal and how to get started with your own Common.
Yep, the science is in. Lead, asbestos, DDT, PCBs, and PTFE/PFOS/PFOA.

3M Scotchgard (spray-on water-repellent for materials) was mostly PFOS, now it's PFBS.

Hipora, OTOH, is silicon-based. SympaTex is polyester-based.

On another note: I felt extremely stupid paying $300 for a Columbia Elite running rain jacket with Gore-Tex, with a lifetime warranty and bought from their store in Seattle, that subsequently disintegrated into god-knows-what and they wouldn't honor it. Never again: Gore-Tex or Columbia.

Comparison table of water-resistance and breathability of water-resistant fabrics:

https://www.sierra.com/lp2/waterproof-guide/
Price is relative to shipping fuel, not absolute values. So it's not negative!
Ok but finding teams like this in the real world is not simple. Half the roles billed this way are cynically lying. The other half think that because they’re struggling to stay afloat, they must be swimming in the ocean, but they’re actually in backyard kiddie pools and just not very sophisticated.

Maybe I am overly optimistic about academia, but my understanding is that your advisor, funding agencies, journals, etc. know the layout of the field and make sure that what you’re doing is both interesting and novel - even to a fault.
> (even you know how to fix it you'll have to submit a pr and wait till the merge and crates.io release (takes years), or download the whole dependency chain and use everything locally which is a total mess)

For what it's worth, cargo supports patching dependencies without maintaining the whole dependency chain locally. See here: https://doc.rust-lang.org/cargo/reference/overriding-depende...
Comparing newspapers to Facebook is likening a cup of water to the ocean ("just water, scaled up"). People aren't reading an ever-changing, infinite-supply, A/B tested, microtargeted newspaper.
> Ideally you have an engine and lua/scripting layer anyways.

Honk
Serbia and Montenegro are a federated country and Montenegro has a coastline.

https://en.wikipedia.org/wiki/Serbia_and_Montenegro
No the commenter you're replying to, but I've actually looked into Scala a few times and while it has some big criticisms I don't necessarily disagree with, there we're many things I actually liked about the language. I briefly considered picking up for a side project, but ultimately went with something else that provided more relevant features and abstractions.

Sadly, in the real world, it seems that Scala is mostly relegated to the Spark world.
maybe when the patent expires in a few years this will become common then.

Funny that I didn't see one from surefire. They should be cleaning up.
A life spent on a backup system is unproductive? Ha ha, if only mine had been so productive. I'd say the majority of code that I've worked on was dubious in the first place, and decommissioned by now.

Thankfully I'm a nihilist and don't have any expectation that my life will be meaningful. I happily work on things that most people would consider pointless and a waste of time.
Found two cool ones. loopsister.com and misexpose.com ... hah
Understanding the Transformer Architecture
How is it that sociologists know these things about anons?
Basic training ensures that some of those risks do not apply.
> This is a different GC design than V8 and Go, which use older collector designs with high overhead.

I think this information is a bit dated. Go has a highly advanced concurrent collector with very low pause times (~1-100μs). V8 also has incremental marking, concurrent marking, and parallel compaction. Its pause times are more like 100-1000μs. V8's GC has been tuned more and more to save memory (i.e. smaller heaps) because people have so many tabs open these days.
Trampling on WeChat users' first amendment rights would be a violation. Many of the users are American citizens, like myself. I'd like to talk to my grandparents and cousins in China. They don't or can't use other social networks, so WeChat it is.
From what I can see this takes at least four forms, multiple years, and possibly a significant chunk of change to a lawyer. Could you explain the process more since google is telling me it looks like a pain in the ass?
Baeldung's content is IMO uniformly quite deficient. If you want examples of how to do things poorly, which examples may or may not compile, or if there's no other alternative, then I guess read the Baeldung article.

Try Scala instead of Kotlin, it's much more powerful, and you can safely avoid the mad Scala libraries jam-packed with symbol infix notation.
I believe it has been backported to JDK14 (and JDK15 was released this past week). Also Shenandoah should be production ready in JDK15, so you might want to give it a shot.
I use mkcert [1] with great success - it's easy to setup locally trusted certs which I load onto my router and other devices.

[1]: https://github.com/FiloSottile/mkcert
Advice for the Young and Ambitious Seeking Great Success
Unknown city / fortress of similar magnitude to the Great Pyramid, constructed maybe 200 years later, built by no one knows who to defend against ... no one knows who else; a half millennium before civilization was thought to have started in China. Obviously this is not the first thing they built.

It gets increasingly easy to believe in other undiscovered civilizations.

Insisting there aren't any is now the extraordinary claim that needs extraordinary evidence.
Oh dang!
Bunker fuel is usually awful too, and this stuff has less sulfur at least.
Oh, I see. Was very curious how it could be negative for months at a time…
For some reason this one won't start up on my macOS, gave some error dialogs on first time but I didn't get a chance to see what's exactly said, looks like a wine issue though. However I really like what I saw from the short video, I can smell some alternative / interesting gameplay there, it reminds me of some of Michael Brough's games. (I'll try download the windows version and use the maybe newer version of Wind on my system)
I'm thinking specifically of something like Google's C++ or Go style guides, that focus on content rather than formatting. Go in particular like Rust has a standard formatter.

https://google.github.io/styleguide/cppguide.html

https://github.com/golang/go/wiki/CodeReviewComments
This is what I mean by the Overton window being shifted so far right. There are no "extreme socialists" in the Democratic wing. AOC is center-left, Bernie is pretty much center.

"Extreme socialist" would be arguing that the state should own the means of production. Until AOC starts arguing for nationalizing Google as a means of making core internet infrastructure public, for instance, I wouldn't worry about the "extreme socialists."
Maybe I'm wrong, but it comes across as encouraging knowledge-hoarding, omitting documentation, and other job-securing, second-stringer games like writing obscure code no one else can understand. That would be the mark of the unprofessional Milton jerk to be eliminated at the first opportunity. In general, always be working yourself out of a job so you can get promoted or find a better job elsewhere. Corporate employees retreating into their own worlds are a dime-a-dozen, professional badass go-getters are the indispensable ones.
The committee was always out of the mind. In the past years they have neglected compile times, debug build performance, error messages or sometimes even performance.
Pelophile.com
This is an awesome service. However, the menu items are slowly consumed by dots and dashes to the point where they cannot be read after a few moments of being on the page.
Really! So now we have personal attacking shit instead of talking about technical info.
beemods.com, severestimation.com, sculpabag.com, polysemaphores.com, brimlet.com, lungocephalographic.com, saltcoatedoak.com, backalache.com, whiffard.com, haggitygoosey.com, externist.com, trunche.com, globefluid.com, hackergater.com, quagmosis.com, glooshy.com, punctualize.com, cheeziness.com, wristfist.com, redactal.com

(five letters is the shortest I got: rohvy.com)

I offer up these domains to my fellow HNers, to utilize in the pursuit of billion dollar dreams.
They charged him on multiple charges * illegal possession of firearms, distributed a few kilos of Xanax and also lots of marijuana over 2 years or so. If he sold pot only he'd probably get a suspended sentence as a first time offense.
I think he got a bit greedy, had he stopped short at some point and went on a year long vacation around the world he would probably be still free now.
Corkmonger.com is my favourite.

Rothole.com another one.
That's very good to know! Thank you. Yes such feature is very needed for a package manager
Big fan. I'll try to find something, the next re-watch. Jack's cabin seems difficult, I guess there's some giveaway, like mountains. Or the lone fish jumping.

While we're at it, I should mention that I lived one year in Theed, but honestly, the real Seville is nicer than Naboo.