skysight-inc/HackerNews huggingface dataset:
>I must rely on encryption algorithms that are designed with subtle flaws that can take years, if not decades, to come to light.

There's Dual_EC_DRBG . Are there any other instances where this happened? And I thought barely anyone even used Dual_EC_DRBG because it was super slow. Did the author ever use it?
There is a position at MIT called associate prof without tenure. So just because he was an associate prof doesn't necessarily mean he had tenure.
C# is one of the best choice at the time (and still). Adopting Windows at the time is trade off.
The author claims that, but I don't know of evidence of it being at all widespread. Dual_EC_DRBG is the one instance I know of, and I thought barely anyone used it.
After Building Google’s Ad Business, This Founder Is Creating an Ad-Free Search
Super Mario 64 has a character named MIPS the Rabbit[1] named after the N64's processor architecture.

[1]: https://www.mariowiki.com/MIPS
It's simple. Tech pays well, so that's where people feel there is the highest leverage to change outcomes.
A push in the right direction.. But I have been waiting two years after payment at this point.
Tell HN: 2D Doesn't Exist
Sqlectron – One single DB client for any relational DB
ohai, I make "if you can call it" music
https://behlo.bandcamp.com/
We try to make “not attending top schools” not as important. We most often fail in doing that, of course, but the thought at least should be there.
Here is a funny one: antifa means "anti-fascism"
Laptops do not have absurd cost now. There are good options from 300$ upto 2000$+
New report finds clear and convincing evidence that China is committing genocide
And every other country's government to not spy on internet traffic crossing their borders. Good luck communicating with somebody in China. If you use TOR or a VPN or any kind of tunnel over some other service, they'll figure out what you're doing eventually even if they can't read the content.
Maybe it's more about adapting quickly to a new situation
I’ll add another ‘absolutely!’. The anecdote I love telling that is somewhat related: my grandfather started medical school at 38 in 1959 (and with 5 kids to boot). He went on to be chief resident at UW and a stellar Cardiothoracic surgeon. Times were certainly different then, but if he could do that I’m certain almost anyone could then and now. His background was being a farm boy from North Dakota and doing flight training for the military. Then he saw a career he wanted and went for it, starting very late in life relative to the norm.
"Try X!" Not if you're young, old, or male and eat a Western diet. smh. Look at the DALY of iron-deficient anemia, which I had growing-up; it's very low compared to many other conditions, it's noticeable, and easily treatable. Iron overload, OTOH, is a much bigger problem because there is no direct, excretory pathway for iron to take. You're suggesting a much more harmful panacea to prevent a hypothetical risk. That's the definition of insanity, ignorance, or both.
Excel never dies, but BOY does it get worse with each iteration.

It often feels to me that in the last several releases all that's been done is apply more and more lipstick to a pig that's already 90% lipstick.

I recently fired up excel 2003 on a whim (yep, I'm that much of a party animal.)

MY GOD. It was blazingly fast. Beautiful. Usable.
(If you ignore the fact that the one good change in the last 2 decades is the XLOPER12, allowing >255 rows and lots of columns). (X)

(X) Yes, Lambda looks interesting, but HOF aren't really necessary in basic sheets, I'd rather they got it usable first.
There's nothing wrong with doing anything, just hope (expect?) compensation to match. If this is something anyone can do, expect compensation to be low; If compensation isn't low, expect the task to not be something anyone can do (whether you know why, or not).

To add a few spicy observations:

- I'm often unsympathetic to complains of low pay by artists (or people complaining on their behalf). It's well know art comes with a high risk of low pay, it's a difficult endeavour - any adult should know this going in.

- not to say that investment in arts isn't low - it's a different thing. But it's also the same thing: the idea of investment is upfront capital today, payday later, to get over that "initial hump" of high overhead art. If there is no later payoff proportionate to upfront costs, it's logical that something is underfunded.
I've heard it based on Minix, believe it or not.
While being a diversity hire is understandably awkward, I'm not sure what the author expects? She supports the idea, but doesn't want the feeling that comes with it.
it doesn't seem so... can't either selection strategies be used independently by specialists and generalists?
Unfortunately, that’s only your word. The way this system is designed, nobody will notice if Amazon chooses to be less obsessive about it. Or if their systems are hacked. Are you certain that these web services are secure? I’m not (one obvious vulnerability has been reported). If someone compromises one of these services, the results will be disastrous.

Note: I am the author of the article above.
That depends on whether you're in a position to set priorities. I can tell you that something will take a week, but I can't tell you that it will be done next week unless I'm permitted to work exclusively on it this week.
I work in digital marketing so generally I make purchases for random ebooks, courses etc. Chrome tells me that basically every major website has been hacked or exposed.

But here is my PIN **
It's almost like venerating selfishness and calling it individuality is a recipe for a society that malfunctions in some pretty key ways.
If a party candidate pledged to address quality control problems with software or "tech" companies such as Microsoft, then yes, that could potentially influence my vote.

The canned response for every problem with Microsoft today seems to be "Well, nothing more can be done, except what Microsoft (and other "experts") tells us to do." The company that creates the problems is deemed to be the only one who could ever attempt to solve them. This is pure nonsense. With few exceptions, this goes virtually unquestioned,

The "experts" have perverse incentives. Business is good just the way it is. If problems are actuallly solved, business would likely decline.
Never underestimate our fascination with blowing shit up, nor our penchant for making sure the "wrong" people don't get access to things.
Can we please opt-in? The data is valuable etc... but it should be be voluntary.
Today in Tech History – The Homebrew Computer Club
India’s finance minister reconsiders a ban on cryptocurrencies
Card not present is the bane of the ecommerce world. Which is how most fraud is done but it makes it very easy for banks to recover it.
Yeah, I have a story about that: in one of my first software projects, a freelance contractor told me on my first or second day over lunch how he did semi-professional alcohol smuggling on RV trips to Norway.

Come next week, the project manager called an all-hands meeting to tell us that guy had been fired because he cheated on his reported hours.
That looks promising. Make me think of my favorite tool rundecks...
How does LaTeX compare to software applications like
Scrivener
Have been writing songs since more than 20 years now, and got into producing around 2007. Genres range from singer songwriter to electronic and orchestral and anything that materializes really

Here’s my latest released track, an instrumental piece trying to capture the strange time we live in now:

https://soundcloud.com/squirenetic/squirenetic-covid-19?ref=...
Chinese consumer goods companies continue growing at internet-company speed
Congrats on the launch! It definitely seems like it is a deficiency within the current suite of communication tools. I saw you mentioned in your post that you use Ping Pong and slack, and that ping pong will eventually have text and file sharing. Just curious, what are scenarios when you need to use structured text? Is it more for documentation purposes e.g. lists, tasks, etc.? I see the value in both, but it definitely makes sense to lead with video to prove out that value. I almost feel like 50-75% verbal communication better mimics an in-person office setting. But still gives you the opportunity to plan out what you will say before sending it.
I'm no power engineer, I'm just assuming that the people pouring literally $billions into huge-scale solar infra in my region know what they're doing.
> Timnit Gebru—a giant in the world of AI and then co-lead of Google’s AI ethics team—was pushed out of her job in December.

No.
Bitcoin reaches an all-time trading high of over $33 (2013)
Huberman Lab, A neuroscience podcast with focus on how to improve your life
Huberman Lab is a podcast from Andrew D. Huberman. He is a Professor of Neurobiology and of Ophthalmology at Stanford School of Medicine.

The focus of his podcast is not only to give you information on how our brain and nervous system works and interacts with our body. He also provides you with usefull tools to leverage the scientific findings to your advantage and imroove your everyday life.

The topics so far include improving/optimizing sleep, learning and focus, managing pain, traumata and stress. If you look into the comments on his videos you'll find many more interesting topics to come in the future

If you can't find value in his videos you're not a human!
Ask HN: How are you monetizing your APIs?
1. Pay for a hosted API management suite such as Apigee[1], 3scale[2] or wso2[3] with API monetization capabilities so users can register, try out and purchase APIs all in one website automatically.

2. Self-host an open source API management portal such as the ones from AWS[4] or Azure[5]. Both will allow users to register and try out APIs in one website but you will need to customize the code and database to purchase APIs automatically.

3. Use an API marketplace like RapidAPI.

Option 1 appears to be cost-prohibitive for smaller companies and Option 2 requires development work. Option 3 allows users to browse other API offerings. Are there any options that have a lower cost more suitable for smaller teams / companies that doesn't require development work and is dedicated to a single company API?

[1] https://cloud.google.com/apigee/

[2] https://www.redhat.com/en/technologies/jboss-middleware/3scale

[3] https://wso2.com/api-monetization

[4] https://github.com/awslabs/aws-api-gateway-developer-portal

[5] https://github.com/Azure/api-management-developer-portal
excellent, thanks for sharing.
Tetrik is a great track and the visualisations are great.

For me having visuals nicely synchronised to the music is adding a lot.

Now that you have a nice custom tools to produce video you should build on it and produce more of them. You have a fan here!
I wonder if Professor Kunin would have felt comfortable writing this essay before he was tenured?
> Never struggled to find a toilet in the US.

On the east coast I've been able to find toilets just fine, especially with the wealth of subway stations and indoor malls and other places that typically have restrooms.

California is a hell hole though. You can walk miles across town and find zero restrooms, sometimes an occasional locked restroom, and maybe some restaurants and coffee shops whose restrooms are almost always for "customers only". It's a pity because the weather here is great for long walks. You can pee in random bushes I guess (?) but there's no place to poo.
Thanks, and I'm glad to hear you've found the same thing! So including the article, that makes at least three of us, it seems.

I agree that it might not be terribly important practically, but I think it's interesting because it might hint something about the underlying nature of task planning. Sort of like how if you were measuring radioactive decay times and found a Poisson distribution, you might learn something about the underlying nature of radioactivity.

What it is exactly, I'm still not sure, but I do think there's something there to poke at.
> Even in the case of passing on a two lane road (a situation where I doubt emergency braking would trigger erroneously), you've already made a mistake if a rapid acceleration is needed to avoid a dangerous scenario.

Are you talking about a road with each lane in one direction? Outside US that is the most common way to travel between cities.

It is easy to say that acceleration shouldn't be needed, but that's life right now. When somebody starts overtaking, the better acceleration he has, the safer he can do the maneuver. At that point the car behind the car that takes over may have closen the gap to go back, and emergency braking can be fatal.
Long live the nameless hero fellow Piranha Bytes customer!
It tend to especially on traditional companies, but YMMV. I believe very few traditional company allow BYOD.
I had no idea, good to know!
Upthread someone linked a comment saying the she also cheated on her personal taxes.
Does anyone know how big are the constant terms here?

A few years ago I studied and partly implemented an earlier (related?) work by Peng (on graph laplacians and SDD systems: https://epubs.siam.org/doi/abs/10.1137/110845914 ) and the big-O improvements did not seem to compensate for the larger constant.
It's not that straightforward. There's two types of chosen ciphertext attacks: IND-CCA1 (non-adaptive) and IND-CCA2 (adaptive).

There are in fact FHE schemes for the former such as https://www.iacr.org/archive/pkc2017/101750203/101750203.pdf

The problem comes in the adaptive case. In the distinguishing game, an adaptive adversary can have the decryption oracle decrypt any ciphertext after it receives its challenge ciphertext (besides the challenge itself, as that would be trivially defeatable). However, if the adversary receives Enc(m), they can just compute Enc(m+m) and ask the oracle to decrypt it, thus winning the game.

No FHE scheme will be IND-CCA2 secure by definition, but that doesn't mean that they "leak information" in the applications FHE is being proposed for. As long as you're not decrypting arbitrary ciphertexts for the server you just uploaded your sensitive encrypted information to, you can have your delegated computation, as a treat.
I would suggest looking into Sharkbait[1].
Although full-disclaimer, I like to say that I am a part of the team and we are lazily trying to self-host Android.

[1] https://wiki.gentoo.org/wiki/Android/SharkBait
It's more connected than just that - people can't afford housing and food, let alone computers. A small sliver (~2-5%) of people can afford to do e.g. organics, fair trade commodities, free range animal products, small business, locally owned/sourced, etc.

Of course, not to say the above are all panacea, but something much more directly measurable and visible, like your health, local economy/ecology welfare, people can barely afford. The invisible, like the privacy affecting where your precious wallet gets spent, the habits which can be used to target and manipulate you, that's the invisible hidden behind marketing promising "great performance at a low price".

You get what you pay for, and the moral of this story is that what most people can afford, shit, is what they get (shit).

At least, until people decide to take control and dethrone the tyrants from their thrones. That's why govt and big biz can't stand a message to be private, they are well aware they stand to lose, well, everything, from anyone ever bothering to unseat them. Not to lump all biz or govt together, there are some worse than others.
True but software/firmware on such device is tend to considered to second citizen.
Ask HN: What changes did you make that improved your life siginficantly?
I haven't used Excel heavily in at least 5 years. Google Sheets is much better in most ways, especially sharing and collaboration.

Google Sheets has a killer feature that few know about: you can attach Apps Script (JavaScript) to a sheet [1] including a "fetch" function to make API calls [2].

While Excel has a show-stopping preposterously ridiculous behavior: auto-converting long number strings to "scientific notation" (and even data loss rounding!!) [3].

1: https://developers.google.com/apps-script/guides/sheets

2: https://developers.google.com/apps-script/reference/url-fetc...

3: https://excel.uservoice.com/forums/304921-excel-for-windows-...
Sticky Notes and Notepad, To do list and Widgets 2021
Never heard this before, and I love it!
They probably want to do a more thorough audit for similar bugs before saying more.
I work on a shopping assistant type browser extension and I am very confident that if I proposed an architecture and implementation such as the author identifies here I would be turned down immediately: having good intentions around privacy is one thing but deliberately designing your application in a way that allows to bypass almost entirely the review process required on submission to the store is something that should be answered for.
I'd like to quickly plug Fairphone here. They've made a phone which does everything you'd expect of a smartphone, but is also very easy to disassemble. Replacing the battery is extremely easy, same with the screen itself. The other "modules" tend to have a few different components on them, e.g. USB plug and vibration motor are on the same module AFAIR.

I've been using the Fairphone 2 for a bit over 5 years and while it's not an outstanding phone, it's lasted well enough. The challenge for me in Australia is getting spare parts, as they only ship to Europe sadly.
I don't get it... Isn't this stating the obvious?
Let's assume you have a dice, if you roll a six, you get 5 times your bet.
If you win on a first or second try, it makes sense to stop, from an expected value(EV) point-of-view.
But in most of these systems you cannot stop betting forever... So you would start again when things get interesting, which might be the next roll if it is truly random, right?
So the only thing they say is to temporarily pause when you are above EV. But when is the best time to start again?
The skill required for a particular ELO is relative to the strength of all the other players. More learning resources that are available to everyone can't provide a comparative advantage, which is what you need to move up. Part of the reason the Soviets dominated for so long is they had developed a training program that the rest of the world did not have access to.
Zapier buys no-code community, Makerpad
Untrue. Google launched Engineering Residency to advocate for those people.
Food: A Bittersweet Affair, Can I Program Out of My Food Problems?
One of the points in the interview that stuck out for me -

>> It's the age old question of build vs buy. I like to tell people that I don't sell anything that you can't get as an open-source extension somewhere. Github has a vast array of third party Sidekiq plugins. What I do sell though is a dozen plugins which are all integrated well together, and maintained. And that's what you can't get with open source - you can't get good maintainance and good support.
We became exposed to this mentality and reluctance to adapt when exploring solutions to our son’s cavities. There is an amazingly effective treatment called SDF that arrests cavities with no need for drilling by painting it on in a procedure that takes about 1 minute. It’s proven to work, is non invasive, and much easier to use to treat a squirming small child.
It’s been used for decades in Japan. Only recently did it become allowed in the US. Yet a couple of years ago it was still shockingly difficult to find dentists who knew about or approved of its use. I was also surprised to find very little literature linking particular bacteria to tooth decay.
I think Bristle is on to something here, and I am glad that they are pushing this research forward. Tooth decay seems to have many of the hallmarks of an infection, yet its primary treatment is still to remove damaged portions of teeth with a drill. It feels remarkably primitive.
So only 8% of bridges are in poor condition. It looks like most places are doing fine.
Cool stuff :) Been listening to a lot of synthwave recently, and love how you’ve worked the metal guitars into this
JavaScript Non-garbage-collection in Objects
A major utilities provider (A2A) of the Milan, Italy area uses LoRa-enabled (~865MHz) meters to get automatic measurements from the customers
> Orwell was unable to conceive of computers or robots, or he would have
placed everyone under non-human surveillance. Our own computers to some
extent do this in the IRS, in credit files, and so on, but that does not
take us towards 1984, except in fevered imaginations. Computers and tyranny
do not necessarily go hand in hand. Tyrannies have worked very well without
computers (consider the Nazis) and the most computerised nations in today's
world are also the least tyrannical

I bet they must be shocked to learn how we are living in their nightmares where big brother government continues to grow with all the help from Computer, AI, Virus ....
> One fringe punishes any criticism of the establishment view viciously (the epidemiologists & medical experts who weren't for lockdowns comes to mind),

This is rewriting history. At the start of the pandemic the position of "lockdown is a bad idea" was taken very seriously. Only when it failed to provide results and some people still clung to it they got called out. That's literally the opposite of what the article describes (holding on to outdated science, because of "momentum").
aws does this every 24 hours for a normal setup and that's pita. They just don't care what their users are doing. Yes I was on middle of something and suddenly saw that I had to log into their web console again. w???
Shades of the 6502, where 0 was BRK
I can also get second instance with singleton. In reality singleton doesn't enforce anything. It's a only a convenient way to make global scope in inconvenient languages.
I don’t get this obsession of removing all textual elements. “Muted” wouldn’t be that bad would it?
Mate, its very obvious.

So obvious in fact, that they removed the text labels.
So insanely obvious that it made sense to reduce the size of the icons to like 20px x 20px.
So inexplicably obvious that they chose two basically identical icons to convey the message.

So obvious!
One of the best things I've done was to change icon buttons to text buttons in Gmail. No icon hell for me!
most recently: https://soundcloud.com/dphon/leviathan
I don’t understand the graph at all. Which line is the purple line? Is it labeled?

It seems like real emissions should end at or before 2020 and none of them do that. They all seem to be projections of some sort?
Solzhenitsyn’s In The First Circle is also important for people in the tech industry to read. The book takes place in a Sharashka, a prison-within-the-prison-system for talented engineers who get (marginally) better food and conditions in exchange for doing the State's bidding.

The sad part is that they end up rather excitedly reinforcing the very regime that put them there and, towards the end, are instrumental in thwarting one of their country's best hopes at throwing off the yoke of Stalinism.

If you do read it, make sure you get the uncensored version. The chapter making fun of Stalin's working habits is hilarious.
At least since the 20th century I haven't been able to find an exception. Even GMs who did not get their GM titles until late in life were very strong players as children. For example Ben Finegold did not get his last norm to become GM until he was 40, but he was a USCF master at age 14. All the other stories I've seen are similar. I've also yet been unable to find more than two or three people who started playing seriously after age 25 and ever broke 2000 FIDE.
Your holding Damore to a far higher standard than th non-reproducible psych studies he was responding to, which were endorsed by the paid staff of a multi billion dollar corporation.
Color Blindness Simulator – Upload an Image
When you tell a company that your design is too obfuscated and you're also a Perl hacker is like: the biggest burn I could possibly think of. Chapeau mjd.