skysight-inc/HackerNews huggingface dataset:
Whether "Salvator Mundi" is hiding in a freeport, or hiding on one of MBS's many many walls, either way it still wasn't painted by Leonardo da Vinci.

(There is some controversy about this, but the side I take is taken by more than the press lets on, because the auction houses have taken the other side and pissing them off can be career-ending.)

https://news.artnet.com/opinion/kenny-schachter-on-the-missi...
Seems to be a rather disingenuous view on who is responsible for the rampant spread of covid in the US.

Rather than placing the blame on NY, where there were at least some efforts and still are to control the virus, Let's look at states where there were no efforts or active denials that covid was even a thing.
20 years ago my boss orders my to work from home the next day because it was important for me to finish a critical piece without the distractions of the office. Of course as a programmer we have always been on the bleeding edge of this just be the fact that until our tools work we can't make anyone else's work.

100 years ago people regularly ordered things for delivery. Sure it wasn't online, but all online gives you is some time.
Oh wow, editing a hard coded list. Does one need a chisel for that?
> Let's apply that thought process to climate change, condoms, and surgical PPE too! Don't you dare impose reality on me!

Or drunk driving.
I view it more as it being evidence that relying on text interactions is more powerful than folks acknowledge. It can be slower, for dinner things, but usually is more resilient than binary integrations. If only because it is easy to see what it was trying to do.
I think the unusual part is that it is not a limit of communication, it is time itself. With a tape, you know that it happened in the past, for this, both are experiencing their real present time, but they don't agree with each other.
Right, and at some point you have to choose to live your life assuming there isn't an undetectable asteroid about to wipe out all human civilization, even though you don't know the probability of it happening.
Some UK woman did research causing a WhatsApp group in South Africa to question the vaccine, and this is the fault of the president of the US? That is quite the stretch considering none of the players are citizens of the US.
Cool article, love the insight into the thought process and best of luck.
But that name HelloHailey seems like literally an insane choice. I would never use it. As far as I know I’m the target market so may want to look at changing it if others agree!
totally. today if folks. need txns, they wouldn't be a good fit for us. What we found is about 90% of use cases are covered by the base api. For reference w/ all of the versioning there is something like 144 api calls you can make to kafka, most ppl use a small subset of those via high level clients. (java, python, librdkafka, etc)
In the process refuting "No one listens to techno"
At least with Linux you can actually fix it
The ironic thing about that suggestion is that if you’re reading that article, your Mac is already non-functional anyway, so good luck doing a backup :)
I noticed in your video instruction for doffing (removing) the mask, the lady pulls it up over her face.

I wear a 3M 6800 full-face respirator on airplanes, and the instructions I got were to pull from the back and down when doffing, to avoid possibly spreading virus across the face.
Short range, blocked by most materials, this seems not too much better than running a cable indoors or point to point laser transmission.
Some probably think they are "protecting content creators" or some bs
Get more Sunlight if possible to get Vitamin D produced by your body. Unfortunately not enough sunlight in Northern latitudes at this time.
Vitamin D + Fat should increase Testosterone.
Maybe Testosterone is what helps but they don't want to communicate it like that.
I am not expert, doctor, scientist nor politician.
> Everything is low fat and uses high fructose corn syrup to make it taste good.

No, all the crap food fits that description. A chicken breast and some broccoli does not.

Again, it’s a decision that must be made - eat crap food and struggle with a healthy weight, eat healthy real food and proper portions and (usually) be a healthy weight.
'Fraid not: https://plugins.jetbrains.com/plugin/164-ideavim.
Often the primary answer is photos. My experience with Google reviews having enough photos to find the dishes I'm considering is much more hit or miss.

But your question is fair. I often ask it myself as I'm exiting the site.
Lyft introduces offers with a single year of vesting
i wish travis jefferies would finish his jocko project. it's in go, single binary. would be pretty sweet but he gave up on the remaining 10% for some reason :(
I would say there's no moral difference between a human operator and a mechanical operator whose behavior is controlled by a human. Configuring the operator to drop calls from a particular area code would be an example in the case you provided.
In Hindi, Chota means short. Apologies to South Americans.
You are spot on. The big advantage Apple had is slowly fading away: quality control. First the keyboards, now this.

As a freelance developer, my MacBook Pro is my livelihood. It’s dependence, great support and MacOS / Linux CLI was it’s main feature. Now it’s gotten to the point where you’re better off waiting 4 years before buying a new product line so the general public beta tested it long enough.

I’m getting a lot of Microsoft in the 90’s vibes from Apple these days. Anyone else as well?
> use grocery delivery and similar services that essentially transfer disease risk from privileged groups to poor minorities

Is using a grocery delivery service a greater risk vector than making a trip to the store in person? That's not obvious to me, certainly poor minorities can work at grocery stores too.

Is is it necessary true that grocery delivery service providers are poor minorities? At the risk of revisiting the Prop 22 debate, my downstairs neighbor is a college student who's happy to go out and do some deliveries as time allows.
I had this crazy idea I would go it alone and that if I would just keep working on it until it was a success regardless of how long it took. I spent 3 years on programming it to get it the way I wanted it, starting development in 2001... I still have it set up and one day I plan to convert the design into Bootstrap and try again but going after niches this time. But at this point I am not stable enough financially to work on it the way I want to just getting it all into Bootstrap would take months.
There was an xkcd about this, but i've found anything below 4.5 stars is mediocre. Above that you find a better probability of a good meal, but it's still just a probability.

I find it servers as a good filter for the awful stuff, which is what I really care about when travelling.
I know threads change over time, and it's dangerous to write a comment in response to the perceived gestalt of an HN thread, but, I have to say, it's pretty wild reading a thread on this site arguing so strenuously against the premise of secure messaging.

In messaging cryptography, non-repudiability has for almost 2 decades been considered a vulnerability, not a feature. The OTR protocol[1] takes the step of publishing its used MAC keys --- it releases private key material! --- to ensure that random people can forge messages once participants have authenticated them. Signal came up with a novel deniable AKE[1] that is one of the more famous parts of the protocol; by design, you can forge a Signal conversation from someone's private key even if you've never talked to them before.†

When you think about it in the abstract, it's easy to understand what's going on, even if you don't take the time to read the OTR paper. Once counterparties have authenticated each others messages, authentication has served its purpose. To allow a stranger to authenticate a messages is to concede information to them, and avoiding concessions is the point of messaging cryptography.

If you believe non-repudiable messages are necessary for public policy, it's hard for me to understand how you'd support the rest of secure messaging. Most secure messengers also have "disappearing messages", which have an even more powerful impact on the public's ability to read your (or some disfavored other's) messages. In fact, keeping the public from reading stuff is... kind of the obvious point?

Maybe it's just email, and the belief that email should not just be insecure, but be deliberately insecure? But, you all get how weird it is for me to read that after getting yelled at for writing a blog post about avoiding secure email, right? 547 comments[3]! Many of them very angry!

[1]: https://otr.cypherpunks.ca/otr-wpes.pdf

[2]: https://signal.org/blog/simplifying-otr-deniability/

[3]: https://news.ycombinator.com/item?id=22368888

† I'm always looking for this triple-DH blog post and never able to find it, because it doesn't contai the word "triple", and it never occurs to me to search for "deniable", only "repudiability" (which also doesn't occur in the blog post) so I guess I can thank this thread for fixing my bookmark.
To complement this, I recommend installing `pgcli`[https://www.pgcli.com/]. It's a near-drop-in-replacement for psql, and gives autocompletion, syntax highlighting, and semicolon forgiveness.

Even as someone already comfortable with psql, pgcli is extremely handy.
> 100 years ago people regularly ordered things for delivery.

E.g. "milkman" is a word in English. Today, most people haul their own milk home from the supermarket.
What is it with the obsession over vitamin D on HN?
It's not impressive until you consider the difference in power draw between the discrete laptop GPU version of the chip and the entire M1 SOC.

>The power consumption of the GeForce GTX 1050 is roughly on par with the old GTX 960M, which would mean around 40-50 Watts

https://www.notebookcheck.net/NVIDIA-GeForce-GTX-1050-Notebo...
> Exactly. If one enters into an contract using an e-mail, then DKIM can be used as a proof to the court of law that the contract was accepted by both sides.

It would make a good TV drama plot, but courts don't work this way in real life. If that were the case, courts wouldn't be able to enforce contracts with wet signatures (which are straightforward to forge), or verbal contracts (which are valid contracts and regularly enforced).

In practice, you don't need to check DKIM in order to use an email as evidence of a contract, because the courts would more likely just use the many other threats and tools at their disposal to ensure that the email is not fabricated.

This is why, even though most contracts are not executed in a cryptographically secure manner, most contract disputes that land before the courts hinge on matters like breach of contract ("we agree on the original terms, but disagree on whether our actions upheld them") or disputes over the intended vs. actual meaning of the contract ("we agree on the text we both signed to, but disagree on the correct interpretation of that text").

Disputes over whether the text of the executed contract is authentic are rare in real life.
It doesn't hurt to explore different ideas. Who knows what you may find.

One thing I might try is looking at different religions and seeing what they have in common and what's different, what you like and don't like. You can select one of them, or none of them. You could also mix and match aspects from these religions for your own faith/moral outlook. For example, many faiths share some common principles that manifest in reality such as charity, treating others with kindness, supporting one another in a community, etc. So you could find actions/attributes of a religion to be helpful, or the community aspect of a faith-based congregation. You may not need to fervently believe in a higher power/being to benefit from these. Many faiths welcome skeptics and encourage questions and discussions for learning. Of course you may encounter pushy or dismissive zealots in any of them.
A cashier is interacting with tens or hundreds of people per day, they aren't taking part in individual interactions.

Like I said, you're parsing my comments with an agenda. Please stop.
> So the author's central thesis essentially seems to boil down to that leaked emails were able to be cryptographically verified, because of DKIM and so we should prevent that so people can't use email to blackmail politicians? Ultimately I prefer the more information that we can get on politicians available.

I don't think Matthew Green is arguing against transparency. What he's observing is that non-repudiation is an unintentional byproduct of DKIM's design. Because it's a byproduct, DKIM's users have made implementation decisions that make it susceptible to weaknesses in the unintentional non-repudiation property.

By 2030, a motivated nation state will probably have the ability to crack the 2048-bit RSA keys that Google is currently using for DKIM. Do you really want someone in 2031 to be able to contrive fake signatures for the emails of politicians in 2021?
I doubt Google will publish old private keys that were not designed to become public later. I would guess that it's too dangerous or cumbersome to do the security analysis.

What if someone realizes that Google uses a broken cryptographically secure pseudorandom number generator (CSPRNG) à la Debian ? Unlikely but the risks exists, so not going to happen in my opinion.
Ironically my own HS curriculum had us both read The Adventures of Tom Sawyer and watch Gone With the Wind precisely because of their racist content (that is, as a way of understanding and critiquing racism in everyday culture).

I can totally understand bringing TKAM down a few notches in the canon, and bringing some of the many, many neglected works by authors of color to the fore. But even the thought of outright banning from the curriculum would have been seen as quite regressive indeed, at the time.

It's ironic to think "how far" we've come since then.
Yeah, people die every day from all sorts of things. I'm still not sure why this particular cause of death is so terrifying to the world compared to every other cause of death out there.

Now say, were those numbers reversed and only 1 million out of 55 million recovered, I could see this level of panic and hysterics.

As it is, i've got a better chance of dying crossing the sketchy ass road I have to cross every day than dying o. covid.

Those elderly folks and people with pre-existing conditions, well if it's not covid, it'll be something else.

That's just kind of how it is when you're old or have pre-existing health conditions.

The thing is, if you have a pre-existing health condition, you're likely already used to being cautious. If you're old you already know even a cold can kill you.

Why is it the entire world must react and compensate for two specific groups of people who are already high risk and who already (hopefully )take precautions for themselve?

They're not children, they're adults.

That's the thing about living, one day it stops, whatever you do.

Honestly, it's selfish of those people to expect the entire world to cater to them so they feel a little bit safer.

It's insane. People can't work, can't run their businesses, told to stand in line like sheep, told who they can bring into their homes, who they can associate with, where they can go, to take some vaccine because...

A small percentage of the population is high risk?

That's justification for ruining the lives of countless people?

Yeah, I do know some people who died, not of covid though. My friend died of his cancer after being unable to go for treatments during covid and another friend with a heart condition who had their regular checkups repeatedly delayed due to covid and ended up dying of heart failure in their sleep. Again, this person did not have covid.

These people were supposed to be the people we're protecting through these.measures?

They died because of these measures.

They may have died anyway, they may have gotten covid and died without them, but that's not what happened.

It's completely fucked to make the majority of the world suffer in the name of protecting a tiny percent of people.

I don't give a fuck if it's selfish, it makes no sense. The cure should not be worse than the disease.
I have found that lichess has a more intuitive interface but the lessons and puzzles on chess.com are far superior. The explanations are clearer in the lessons, and I think the puzzles are less confusing on chess.com.

To each their own, though.
That would be my expectation. I was unaware that these businesses had preexisting business relationship with Grubhub. Still shady.
Just out of practical curiosity, how long, about, is: "a long time." ? (Minutes, hours, etc.)
What great post. Thank-you from everyone who may need it.
The Philips bulbs are much better. Ikea also doesn't dim as low as the Philips Hue. But the Ikea bulbs are cheaper so I still use those for storage rooms where the quality is less important.
As a security professional I 100% agree with the author.

The comments here on Hacker News seem to have tripped on the examples given (keywords: politicians, journalists) and turned this into the more generic and politically loaded discussion whether it's desirable to "cryptographically verify" what politicians write.

But that's not the point! The point is that DKIM is technically not designed for this use case and the way people misuse DKIM for this unintended purpose is highly problematic from a cryptographic and engineering perspective.

I think the best way to think of DKIM is that it's a "cryptographic protocol" in the sense that git is a "cryptographic protocol" because it uses SHA1. If you think "PGP" (not the best example :-)) or "Telegram" you have the wrong idea: DKIM is a bunch of cryptographic primitives haphazardly bolted on email to solve a specific problem. It's not good cryptographic design because good cryptographic design anticipates unintended usecases and deal with them appropriately.

1) Read the DKIM RFC.

First of all the only field that it's required to sign is the From: header (see RFC, section 5.4). So you could still forge an email but have it pass a DKIM signature check.

If people believe that DKIM "cryptographically signs" e-mails in the sense of PGP, then that's a problem, because that's not true. A DKIM signed email doesn't actually say anything: you have to look at the signature which part of the message are signed, which is not standardized.

So you could have this situation when people, like journalists or even people on Hacker News, think a forged email is valid because it has a valid DKIM signature (but the signature is over the From: header only). E-mail is complicated as it is without having to explain to people who have binary classified an email as "forgery" or "not forgery" based on a specific combination of email-headers and DKIM signature specification. Let's not do that.

2) Look at what mail providers actually do with their DKIM keys.

For legacy reasons due to DNS providers and length of TXT records, many large internet providers use DKIM keys that are 1024 bit RSA.

Already 10 years ago, most standard bodies started to recommend against the use of 1024 bit RSA. It's deprecated. Like MD5-deprecated.

The fact that many service providers use the same key for all emails for all customers and reuse that key for years, increasing the likelihood of the key being leaked, is another case against trusting DKIM for this purpose.
I know, I'm not from the US but I tried to follow the US development closely. Many other countries have furlough-like systems where workers get money in cases of force majeure like floods or a factory burning down, without losing employment. One usually gets payout as a percentage of regular wage (depends on the countries, I'd say it usually lies between 60 and 90% of net income). These institutions were already in place, and when lockdowns were ordered the government just had to inject more money into them. All the red tape and all logistics were already in place. Most countries also allow soft fade-outs (I'm lacking the proper word here, sorry), i.e. 80% furlough and 20% regular work in month 1, 50/50 in month 2 etc.

The big advantage of this approach (in addition to the obvious advantages for the workers) is that companies don't lose the organizational knowledge held by the workers: With whom to speak in case machine X fails, whom to approach in customer company Y for a new deal etc.).
What are the best replacements of Yelp?

As a user, their “sponsored” section showing me Subway ads when searching for something in an entirely different class is starting to annoy me. If I missed their “Sponsored” title, I would assume there were no results matching what I am looking for.
No, you have confused messaging cryptography with "all of cryptography".
Let me see... hu... Interesting example of fragmented pressure-group politics, not ? More generally... a few days ago, I watched TV (the old linear one... ^^) and sure there were some ads, mainly about food, caring (clothing, hygiene, room) and somehow 'imagecare' (cellphones and magically 'digital identity') ...um (to keep it short)... so let me ask, were all of the polarizing only serving as a use to sell something like "Inseldenken"? (-;
> It seems like EFF fought for youtube-dl and GitHub used their letter as legal firepower to bring the repo back online.

I'm at least one of those who requested EFF to take a look on "The RIAA’s attack on YouTube-dl is not a DMCA 512 infringement" thread.[0,1]

[0] https://twitter.com/app4soft/status/1320617082866847746

[1] https://news.ycombinator.com/item?id=24888234
If lawmakers cared about lives, the USA would already have some form of universal healthcare system
Right. GitHub seems to have made up a 1201 notice-and-takedown mechanism out of thin air, with this mechanism serving as Microsoft voluntarily doing favors for other big corporations rather than the fulfillment of some kind of legal obligation.

I find the GitHub announcement deeply unsatisfying for that reason: GitHub is unilaterally inventing a body of "law" that's going to meaningfully govern the lives of tons of developers in the future. This body of rules is "law" and not law because the entity doing the enforcement is GitHub and not some government, but GitHub still has enough power to cause injury if it decides it doesn't like you.
So if a program used a licensed browser as an intermediary to obtain Widevine-protected content, would that be circumvention?
I think it wouldn't have been as big of a deal. Most people had their minds made up about severity in early 2020 after seeing Wuhan and Italy. No amount of new data pointing to the fact that _those_ were in fact the outliers, and that COVID-19 is bad-but-not-apocalyptic will change their mind. I attribute this to the speed at which information travels now, and the way that social media works to reenforce existing beliefs rather than encouraging a constant reassessment.
Why on earth is this project still hosted on Github? There are plenty of non-US based git providers that would be happy to have them on board.
Show HN: Online STEAM education tool for programming – “Bit by bit developers”
Picked up doom-emacs last month for org-mode, and am slowly getting into it. Then a couple of weeks ago started using beancount, with the emacs mode.

So far I'm still far more comfortable in vim and the terminal -- even, for instance, switching back to my terminal to do `bean-check` rather than doing it within emacs itself. I could see myself keeping my use of emacs pretty limited like this indefinitely, and still finding it useful - I'm unlikely to give up these uses of emacs. Maybe over a long enough time horizon emacs will feel a bit less strange to me and I'll find more places it fits a niche, or maybe not. Either way, it's a nice addition to my tool set, and I'll be curious to see where I land with in in a year or so.
No, she said it was a populated island, I’ll bet it was Peak’s. Lots of people live there, lots of lobster fishermen, real estate is a bit expensive but not California expensive and they have a little school house.
thanks! let us know how the testing goes :D