skysight-inc/HackerNews huggingface dataset:
Not quite correct. Grover's Algorithm is provably asymptotically optimal for quantum attacks. That is, you'll never do better with just a quantum computer than Grover's will, unless you can also do better without the quantum computer. (One caveat is that Grover's has substantial low-order terms, and one could come up with an algorithm having the same big-O complexity but better practical efficiency. But they don't seem to be claiming that.)

It's not known that there are no classical attacks on AES. Just that a lot of people have looked quite hard for over 20 years and haven't found anything useful.

Terra hasn't provided any evidence of their attacks. Lots of claims, no proof. That doesn't inspire any trust in their claims, especially since proof would be easy. They claim to have found a way to "invert" MD5, which probably means a second preimage attack. If they had that, they could release data which hashes to an all-zero output. If they were ethical and telling the truth, they'd provide proof. If they were unethical and telling the truth, they'd generalize it to find second-preimages on double SHA256, and have a vastly more efficient way to mine bitcoin (and/or forge bitcoin transactions) and make a bunch of money instead of or before putting out a press release. Neither of these things (or anything similar) has happened, so they're almost certainly lying.
The only middle-way sort of solution I found a long time ago, even before joining the company, while looking where to host https://jdsalaro.com was to use GitLab, they being open-source and quite public about their, now our, values.

Nowadays I'm planning on writing again and have tried a setup that seems to be alright:

- migrate from Pelican to Hugo since the community is more vibrant, responsive and the themes much more mature and well maintained.

- Use a mature, well-maintained documentation-oriented template as base (I based https://jdsalaro.com off Pelican's bootstrap3)

- Create an Obsidian vault out of the posts/ directory to improve note-taking and editing capabilities.

- Host same as before on GitLab

- Deploy via CI/CD copying the posts/ directory to a public repository

- Probably mirroring to GitHub

I'll be able to report back once I've gotten the above fleshed-out :)
There probably are outlets out there doing that rather than engineering trust. It's just that you haven't heard of them because guess what...definitionally hardly anyone trusts them!
>you believe that Soldiers on the battlefield run around randomly shooting wherever and whatever they want.

That's ludicrous and exactly what I'm pointing out as strawman. I will not repeat myself. I especially did not mention soldiers are not responsible for their rounds.
Maybe this video can help: https://youtu.be/vQkngZ2OsA0
I have a branch and remote called "publish", and a branch and remote called "draft". I suppose if I ever accidentally pushed the draft branch to the publish remote, I'd just delete the branch from the remote.
I worked on a wiki that fell off the web; I've thought about recovering it from scrapes, and rewriting entries so that search wasn't needed, so that the Wayback Machine mirror worked better. Maybe using Kiwix tools to make a self-contained, downloadable backup, too.
What Fun T-Shirt
> build higher altitude solution that could leverage git/MD/whatever but with free/opensource/selfhosted/alternative tools

Not that I disagree with this, but that goes almost directly against "Mak[ing] that source public via GitHub or another favorite long-lived, erosion-resistant host. Git’s portable, so copy or move repositories as you go."

Any self-hosted service or solution is going to not be erosion-resistant by virtue of not being for-profit.
Interesting, I wonder if deliberately getting one's account flagged as a bot is the best (and quickest) way to get "deleted" from FB?
Did you read the article?

All of the use cases of blockchain have other solutions. Blockchain is just not that interesting, except as a social phenomenon. So many smart people so confused.

This is not so much a emerging technology as a giant Ponzi or Pyramid scheme. The only way to get your investment back is if a "bigger fool" buys you out.
According to Porsche, Porsche Automotive had a profit of €4,110 million in 2018, whereas Porsche Automotive and Financial Services had a profit of €4,396. [1] This means the financial services branch contributed 6.5% of the profits.
[1] https://annualreport2019.volkswagenag.com/divisions/porsche....
Soon after starting work on what later became Flow-Based Programming (FBP), I decided that I should leave the block layout entirely up to the application developer... A few years later, James Martin (1981) was working on what he called 4th-generation languages, and the blocks were prone to moving around unpredictably as the text was changed... Very confusing, as people do like things to stay where they are put! This actually fits in with the idea of "loci" alluded to elsewhere in this page. In FBP, "stepwise refinement" is a key part of the design process, so you get a hierarchy of simple structures... I agree that you could add a function to "prettify" your diagram(s), but this should still be under the developer's control. And if you make it simple to move blocks around (as in DrawFBP), it's probably not worth the trouble!
Man arrested and charged in Scotland over tweet
Something that I feel is missing here is the problem with dead links. Even if the same content is still available on the very same blog, links might change when you decide to change your stack.

I might still be able to get around it, but it's still a pain.
I knew someone would say that. It's not about imperfections per se; more that I sometimes write stuff that I then reconsider and delete before it ever sees print. Admittedly nowadays I mostly self-censor that stuff before even starting to write it, but a few years ago I wrote a lot more stuff that, after reflection, I considered it would be unwise to go ahead and publish.
Wiki Masterclass: Getting Started with Wikis
Not sure if it's the best source, but according to a "Youtube laywer reacts" video [0], it's a common tactic but you can complain about it to the judge and request documents in a more appropriate form.

[0] https://youtu.be/spr5smxuO5E?t=1284
It's known that Grover's Algorithm quadratically reduces the difficulty of breaking AES and nearly all other symmetric encryption systems, as well as nearly all hash functions. So it reduces AES 128 to O(sqrt(2^128)) = O(2^64) difficulty, (brute forceable) AES 192 to O(2^96) difficulty, (brute forceable by major state level actors) and AES 256 to O(2^128) difficulty. (secure)

It's possible that they re-discovered Grover's Algorithm, in which case this is a big fat nothingburger. If/when quantum computers become widespread, we just switch from AES 128 by default to AES 256 by default, and talk about other things.

On the other hand, it's possible that they invented a new quantum attack on AES, which does an exponential speedup, as in AES 128 can be broken in O(log(2^128)) = O(128) time, AES 256 can be broken in = O(256) time, etc. If that's the case we get to reinvent symmetric key cryptography, similar to what we're currently doing with nearly all public key encryption schemes. Shor's algorithm does an exponential speedup on many classes of discrete log problems, which breaks encryption schemes based on integer factorization, elliptic curves, discrete log etc. All standardized public encryption schemes are broken by Shor's algorithm.

Note that when we say things like "AES is secure" that's shorthand for "AES is not known to be insecure". We don't have a proof that AES is secure, and if you did prove that AES is secure, that would probably imply P != NP which would be pretty neat. If someone proves P=NP, then all known encryption schemes except perhaps quantum encryption (which is unworkable at scale) is broken, and e-commerce as we know it is basically fucked.
The whole point of this discussion is that this trust is being largely misplaced.

A lot of forensic science in itself is essentially phrenology (tooth prints, hair analysis - the non DNA kind, even fingerprinting is of exaggerated value). A lot of labs systematically turn out biased results with generally no expectation of risk, either personally to researchers and definitely not to higher ups.

Ultimately, forensic evidence should be seen as a signal, but not nearly as trustworthy as witness testimony (which in itself is not very trustworthy), despite what many believe.

And this is important for the general public to understand, the people who will participate in juries. The mystique that forensic experts have can make juries give extremely wrong decisions (even bad aquitalls on lack of forensic evidence).
I think part of the appeal of walking is that you're away from screens. You're in action (even if it's as simple as putting one foot in front of the other), not just passively receiving sensory data.

As Baudrillard put it: "Travel was once a means of being elsewhere, or of being nowhere. Today it is the only way we have of feeling that we are somewhere. At home, surrounded by information, by screens, I am no longer anywhere, but rather everywhere in the world at once, in the midst of a universal banality - a banality that is the same in every country. To arrive in a new city, or in a new language, is suddenly to find oneself here and nowhere else. The body rediscovers how to look. Delivered from images, it rediscovers the imagination."
Hilariously in the US the ACA (Affordable Care Act) polls better than ObamaCare - there is a large portion of the population that has experienced the benefits of the ACA and support that act while also continuing to advocate for repealing ObamaCare.
>The article has a good message, but the title is absolute click-bait.

Well, it is a demotion, though: "reduction in rank or status".

And it's interesting here exactly because it was by choice.
> This is why managers often get paid more

I think we are disagreeing because we're talking past one another. Hopefully the following observation helps make my point:

The average base pay for a manger in the USA is much lower than the average base pay for an engineer in the USA.

I'm talking about management as a discipline in general and engineering as a discipline in general.

> A good manager is worth 10x a good developer, and a good developer managed by a good manager is 100x base developer value.

Can you define "good" in a way that would allow us to empirically test this statement that doesn't make this statement a literal tautology?
I see a lot less value in these benchmarks than I did 6 years ago or so when they first started appearing. Maybe I'm showing my age but the speed argument just isn't that important to me any more.

These days when I'm evaluating a framework, I look for strong documentation, integration with tools for observability and deployment, and compatibility with a well understood runtime that makes operations easier.

These things are way more important for building software that works, that scales, and is operationally efficient for a team of engineers to work with for several years.

Everything else is just vanity metrics.
If you are mainly focused on power consumption as Apple is you dont want to add more logic to squeeze out the last bit of performance the way Intel and AMD does. The last 20% is a lot more expensive than the first 80%. It its amazing that AMD and Intel are beating Apple (even if its not by very much) given what they have to work with. Its takes A LOT, to make x86 to run fast.

AMD and Intel, doesn't tell me about their secret sauce (And I'm under NDA) :-( I know they have crazy good branch prediction that apparently uses machine learning, and a lot of other tricks that takes a lot of gates to make work. If they could leverage that technology on a better ISA they would get a lot out of it.

If high performance is what you want, you move to a chiplet design so that you get higher yield, you have a separate GPU, you add more IO and things like that. I think going forward, that Apple will continue to take design decisions that favor low power consumption, and that means they wont be able to scale that design as well to the high end.
Extract from the guidelines[1]:

> Please don't comment on whether someone read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that."

[1] https://news.ycombinator.com/newsguidelines.html
Dang misses nothing. Dang sees all
> Why don't journalists from e.g TechCrunch or the Verge confront Sundar point blank and ask him how can stuff like this happen and why is the only solution to blow up on social media?

Journalists like access. Confronting Sundar and making him feel ambushed even for a second means they won't get the access for the rest of their career.
Hypocrisy is being kind to people's intellects

"Damn fool delusion" is that any better?
> I've watched the first, and consider it to be 13 hours of my life completely wasted

I really enjoyed the first season. I've "trained" myself to enjoy TV / movies that "get nowhere" as long as they manage to keep my attention. And "The OA" does that.

> Does it get better in the 2nd season?

Regarding the 2nd season, I'm my opinion, there are _a lot_ of scify TV series that start more or less well /interesting (Colony & Falling skies are 2 examples of this). But - I take it to get people interested fast - make big bets in their first season, and then keeping that rhythm proves an impossible task. Falling Skies, for instance, was a complete disappointment. It's like you get people to invent nukes and in the next season they go back to fight with bows & arrows.

I want to keep this spoiler free, but let me tell you this: The 2nd season of "The OA" gets effing weird.
Like, really.
It's not as hardcore as "Legion", where you need to grow a 2nd brain to understand what the heck is going on, or high fantasy tune as "American Gods" but I found it really entertaining - although at points the story drags a little - but they managed to build / invent a rather interesting universe, that unfortunately we'll never get to see again.
That would be a good argument if there weren't public conferences, discussion panels, and work groups that these companies send representatives to in order to coordinate their efforts in "combating the rising threat of <insert boogeyman>".
"free/opensource" -> !M$
I agree with you on Back and Finney and I apologize to whoever was offended, it was not my intention...
The tone of this thread is leaning to "forensics evil, government lackeys out to get the little guy".

In the USA, all sides can call and rely on their own forensics. There is no government mandated & approved single-source-of-truth (with some minor exceptions).

> Forensic labs and companies are expert witnesses with black box processes and the incentive to protect the authority of their profession.

This statement is at minimum an extreme generalization. Forensic field is a very large field, with many government and private "forensicators".

There are no "black box processes". The very word "forensic" is based on presenting in full view, front of the fact finders (jury & judges usually).

How deep this gets dug into depends on the fact finders and attorneys.

In all court cases the forensic examiner can be called to demonstrate with extreme nuance how they performed the procedures. Any tools used are can be requested to be examined, including software. Vendors that I have worked with all have experts on staff specifically to appear in court and detail the inner workings of their tools.

Not only tools, processes, and environments, but the examiner can be drilled on their experience, education, degrees, previous cases, failures, etc. They do call it "voir dire" for a reason.

This does not negate the fact that there are some bad apples, bad prosecutors, and bad judges.
Correct, which is mentioned at the end of the post.
I am not sure how well it generalizes, e.g. to multivariate functions that are defines as solutions of some thing like a differential equation.

Maybe it does? I don't know.
yeah we agree on that and I don’t find it surprising after what I quoted in the article

I think its sad that startups and entreprenuers are tasked with both identifying a problem and a solution. They should be different people because the competencies are very different, and the possible solutions are much more numerous than the one team will come up with. But you cant woo investors or customers like that, you pretty much have to be indistinguishable from a grifter and if you fail you’ve officially become one.
if you already have a modern/decent computer,

- get as much RAM, as fast as your BIOS allow.
- swap your drive for a nvme.
- get a better/bigger 4k ( or even 5k ) monitor.
- get a nice "cloud storage" data backup plan ( i like wasabi ).
- have some reserved money to buy a new machine "on the spot" when you main machine dies on you.
> You can forward mail to your personal Gmail account.

1. You need to pay for a mail server, and then you lose the benefits of gmail's spam filters, and also you start having deliverability problems.

2. You lose the benefits of some of gmail's features as they don't classify forwarded emails the same.

Because as a person I have some rights under GDPR, as a business I don't really. Business accounts are even easier for them to shut, and using a business account for personal things sets off loads of red flags. You can't review products, you can use family features, your google home products get messed up, etc.
Pizza Hut Hopes Drop Zones Can Help Bring Drone Delivery to Fruition
While I agree with you in general, I don't think it is 100% true.

Currencies of smaller states have been target of speculative attacks (https://en.m.wikipedia.org/wiki/Speculative_attack).

But actually being a fiat currency gives the central bank the means to counteract that, which bitcoin doesn't have.
E.g printing money to buy foreign currency bonds to lower the exchange rate.

I fail to see that a disadvantage.
Note that I didn't just adopt the build system to build container images. There are also lots of other build steps that I wanted to do (compile Protobuf & gRPC definitions, build a frontend web application and build it into the binary, etc.).

If I already want to do stuff like that and Bazel does that well for me, then at least in my case there was no incentive to use any of the tools you listed.
Just-JS – a small V8 JavaScript runtime for Linux only
Comments merged thither. Thanks to both of you!
> all the one's dismissing the professor have not explained the acceleration and change of trajectory

This is the "God of the gaps" argument[0] - "Alien of the gaps".

"Aliens" is also in need of explanation, more-so than an unexplained acceleration.

[0] https://en.wikipedia.org/wiki/God_of_the_gaps
A lot of people respond to this as if the fact that it would be nice if forensics worked justifies treating them as if they do. 'What do you want them to do, stop looking for fingerprints and DNA evidence?' Yes! Just like I don't want them to use 'lie detectors' or hire psychics.
It’s a tool to help solve inverse problems.
This seems fair. I need to do the same when picking up a parcel from the shop. Just an easy way of seeing your Alice or Bob and not Chuck.
Husky, a popular JavaScript project with 4M weekly downloads, drops MIT license
In a very google move, Google goggles was rebranded as Google lens and the Google goggles app stopped doing anything. As far as I know Google lens still does everything goggles did, including bar code/qr codes.
no, but TSLA is, and you're not supposed to make jokes about investing a billion dollars of your company money.

Or better, you can _joke_ about it but if turns out you didn't joke, then that may be problematic.
Side note - big fan of your blog. You're killing it at SEO.
Real applications don't hit CPU walls, they're bottlenecked by I/O more often, and the biggest CPU wall is memory accesses. There is a lot of room for innovation there if you shirk off POSIX compatibility.

Also, state is not a problem for functional semantics. Remember "functional" is a semantic distinction, it doesn't imply a ton about optimized implementations of those semantics. For a stateful system the only thing different about a functional approach is the programmer cannot express a program where yielding next state invalidates current state. Most of the time a sound, functional program can be compiled into in place (mutable) operations on the state, the difference is they're free of logical errors.
Absolutely. Early 30's co-worker, in good health and fit, slipped on a sidewalk and sustained a spiral fracture of her right humerus near her elbow while trying to catch herself. Spent a long time in cast, a longer time in a brace, and still has range of motion issues. I think about her experience and take extra care when I walk on ice / snow.
OP here, founder, and YC multi-time reject, lol!

This is a training video for wikis, especially ones based on Wiki.js, like our product[0].

For folks new to the concept of wikis, see our intro video, What a Wiki Should Be[1].

[0] http://miki.mimix.io

[1] https://www.youtube.com/watch?v=-Qy9axexxgM
But surely it’s possible to use methods other than what currently seems to be the first and only solution: “your account has been banned, bye”.

For example, if an automated system thinks an account is sending spam, enforcing a (very low) outgoing email rate limit would be a much more reasonable first step.
I have used Automatic Differention used extensively to "optimize" simulations. This is problem is know under many names such parameter estimation, local sensitivity analysis, optimal control ...

Having access to something the resembles the derivative of your code allows you to use optimization algorithms that converge faster (Newton or Gradient descent vs bisection methods) and you don't have to specify the derivatives by hand (which gets really bothersome when you have to specify a hessian matrix (2nd derivative information including all the mixed terms)).
I thought this was the best ad of the superbowl. Probably the only one I actually remember. I've heard a lot of people say the commercials have gotten worse over time, but I think it's actually just that we hate commercials a lot more than we used to.

One thing I really hate which is growing in superbowl commercial ethos is the advent of meta commercials, and expanded cinematic universe commercials.

On the other hand, the superbowl is the only event I watch for an entire year that has actual TV-style commercials anymore.
I read it as a reference to the problem of maintainer burnout in the face of unbounded input from users and collaborators. This is something the Rust project has been dealing with and thinking about for a while.
The EU recently proposed The Digital Services Act, which is a DCMA like legislation (with both copyright infringement and other illegal content like CP as targets).

Part of that draft law pretty clearly states that companies must have a proper appeal process for banned accounts. This would apply to "decisions taken by the online platform on the ground that the information provided by the recipients is illegal content or incompatible with its terms and conditions", which in practice covers basically all bans except for Age restriction or non-payment based bans.

They must provide details of what part of the Terms of Service they claim you violated: "where the decision is based on the alleged incompatibility of the information with the terms and conditions of the provider, a reference to the contractual ground relied on and explanations as to why the information is considered to be incompatible with that ground".

If the internal appeals process fails, the consumer can take the company to online binding arbitration (with the consumer's choice of accredited arbitrators certified by the member state). The company always pays its own costs in the process, and must reimburse the user's costs if the company loses.