skysight-inc/HackerNews huggingface dataset:
At the time 40 bits was not considered a backdoor, it was considered a weakness that would allow folks like NSA (with big budgets and intercept capabilities) to wiretap the way they had other communication approaches.

Some situations, rather than designing new codecs, they would just weaken key gen side. The IBM effort there was public to allow for easier export, but also an approach that could be used to hide the weakness which in other settings may have been beneficial. It's possible however that folks involved understood what was going on to a degree but that it was seen as necessary to avoid export / import restrictions.

More recently I think places like China ask that the holders of key material be located in country and make the full keys available or accessible to their security services. Not sure how AWS squares that circle unless they outsource their data centers in China to a third party that can then expose the keys for China to use.
One possible hypothesis is that spacetime itself is being warped in such a way that no significant forces caused by interaction with the atmosphere are being generated.

Kinda like how because you ride an escalator people no one ever hears you climbing stairs.
This is why substantial organizations have 3rd party audits and reviews.

All of this stuff has known solutions, but people don't like what the solutions would show.
This paper is interesting as a followup: Molecular basis for cis-urocanic acid as a 5-HT2A receptor agonist [2009]
https://doi.org/10.1016/j.bmcl.2009.07.143
Yeah, in reality it's not what happened. Exchanges don't instantly margin-call positions, they have to use time-outs and do it slowly (or there simply isn't going to be the liquidity).

So it's pretty easy to get the price of tether on a single exchange to momentarily hit $400, just blow through the order book. However no one is getting margin-called just yet, so the trick is to sustain that price, which means buying tether at $400 a piece. Unless you've got hundreds of millions of dollars to blow, it's simply not possible. And something as obvious as that, manual circuit breakers are going to be getting hit before they let margin calls cascade.
Rate limits are of course fine. I think token level limits make more sense, because application level limits force the consumer to either to track a rate window across asynchronous processes or make the calls synchronously. But, I mean, that's fine too. Think it's just like OAuth1a, fine in itself but add enough of these things on top of one another, and you've created a technical hurdle that's just too difficult to leap.
I would say the logical thing to do for the doctor is Not to trust the patient peer until AFTER the doctor has actually read the article himself. The problem here is the doctor will likely trust the patient without ever reading the article.

There has to be some degree of verification regardless of how complex the world is. At the very least he should read the paper. Because not doing so is hypocritical. Doctors treat patients as dimwitted idiots but suddenly the patient is smart because he has a paper? No, you can't make that judgement unless you read the paper.
In the bloom filter example, what device calculates the hash inputs for the bloom filters? If it's the server, then the server needs a copy of the image to check. So is it the client? If so, how can you prevent a malicious client from forging their hashes to be those of known-safe images?

Not saying it's not possible to build an E2E image storage service that also has the protections society tends to demand. Just saying that I haven't seen anyone do it yet, because these problems are subtle.
Dynamical Independence of emergent processes in complex systems
I think Apple would need to ship a different OS in China.

Cloud services offered there must store data in the country and be operated by Chinese companies. (Apple is complying with this)

But Chinese companies HAVE TO assist the authorities in obtaining systematic access to private sector data. (This is not possible with E2E for backups and photos)
Hahaha @ "just apply"

I think you mean

"just repeatedly throw your resume into a black hole"
That's not quite true. For example, a standard prayer among Buddhist sects opens with a wish for peace of mind for all living animals, followed by a similar wish for the souls of all animals that have passed. Its only after that they wish the same for all humans alive and dead (technically humans would be subsumed by animals category). The person listening to or chanting the prayer comes last.

I found this to be such a welcome change from "me me Me, Hey There, look here its ME" religions. I am not a Buddhist.
The fun thing about freedom of information is that it ceases to be that way when you act as a gatekeeper. Poor little Julian had political axes to grind using information that didn't belong to him and thought that to be a journalist, all he had to do was claim to be one. His ego outmatched his wits, and that's why he's in the situation he finds himself.
I liked this little article as it reminds me of when the Web was still young and mainly just text with no formatting or graphics yet. Takes me right back to 1991!
Yeah any time someone brings up the FLir argument I have to remind myself that even something that can exhibit IR can also be something that is not really there as a physical mass. What interested me is that David Fravor was specifically asked by Lex Fridman in his podcast if he thought these “objects” were projections and his answer was that he wasn’t a physicist and didn’t really know for sure but didn’t think so. As such the idea of a projection cannot yet be ruled out. I actually can’t believe that projections aren’t more closely scrutinized to explain this whole “phenomenon”.

[1]https://youtu.be/sZoH5jr4P9I

[2]https://sites.fas.harvard.edu/~scidemos/LightOptics/InfraRed...
Of potential stock value, not actual money. As is touted so often when talking about Bezos, Musk, and Buffet: stock value is not real money.
I don't use Google but as far as I can tell the behavior is very similar on both sites. (right click -> open image in new tab) on Google links directly to the image like DDG, though some are links to a data URL or cached versions of removed images on encrypted-tbn0.gstatic.com
> You make this sound like a boring dystopia

> Don't complain about ads the next time you stand in line and whip out Instagram rather than an ebook.

I can think of nothing more boring or dystopian than Instagram.

> And, shocking to some, most people are not an empty shell inside, although they have desires and things they want.

Happiness levels in the US are at an all time low:

https://worldhappiness.report/ed/2019/the-sad-state-of-happi...
This week I told iOS safari to block all cookies.

It’s really not that awful. In fact, it’s kind of fantastic. I use a second browser (Google Chrome) for “signed-in stuff”.

Try it.

(Although the fact that I just posted this from safari reminds me I’m not 100% up to speed on which-browser-for-what-activity discipline.)
> The guy is a good writer and storyteller but he seemingly prioritizes good writing and story over telling the most honest story. That isn't an unusual trait among pop-non-fiction writers.

It’s not fair at all to cast Malcolm Gladwell as typical of pop nonfiction writers—there are tons of great and serious writers in the genre. It’s truly a shame that Malcolm Gladwell, an utter hack, has been consistently publishing garbage for decades and that he has such a wide audience.
Carlin spends a lot of time telling you where he gets information, who he's quoting from, how reliable they are, what the historical consensus is, etc. In a word, historiography.

That's not to say he never gets anything wrong, he and his researchers aren't steeped in the subject for their whole careers so they'll miss things. He is biased towards the exciting stories and sources, but usually qualifies them with "I'll tell you this fun story but historians disagree about X Y Z because of A".

I'll have to look into the criticisms but my impression just from listening is far better than any other pop history.
I'm not sure if information availability has ever been this high (before modern era). When everyone in your town believes the same thing and only the most wealthy people can or have any reason to send a letter to another country, sustained misinformation is a lot easier to justify without recourse to anyone's preferences, at the top or bottom of society.
That’s correct.

https://github.com/firecracker-microvm/firecracker
>I deprecated SMS

Lucky You.

I cannot do bank transactions,

Book travel tickets,

Order anything online,

.
.
.

Book vaccine appointment to save my life, If I depreciate SMS.
We're among friends here, so I didn't even give it a 2nd thought... :)
Eliminating Data Races in Firefox
They're dividends taxed at lower rates.
>>When it comes to scaling, we might need to think about:
fast INSERTs and UPDATES for write-heavy workloads

If you want to scale database, all your write operations should be immutable and therefore you should rarely need UPDATE statements.
Yes but those "solo devs" are assessed externally usually from open source development etc. They haven't gotten where they are by saying they're really good. It has always been other people valuing and praising their contributions that gives them perceived value.
Don't think this is new either. Before we even had internet access at work people would ask me for help with excel or some other program and the first thing I would do would be to use built in help. Many folks just don't understand how much help a book/helpfile/internet can be.
Mastering List in SwiftUI
Fair enough, I think I just lack this feeling that Coca-Cola taints something by association. But I suppose if Blackwater filmed a series of commercials in my neighborhood, I'd be unhappy with that association too, so I think I get the logic now.
Yeah, that was a smart acquisition. They have hundreds of thousands of robots working for them now [0]. The Kiva Systems founders were inducted into the National Inventors Hall of Fame last year [1].

It's interesting to read in [1] that one of the founders is working with RightHand Robotics [2] on picking. I wonder if RHH would be another acquisition target for Amazon if they solve that problem.

[0] - https://en.wikipedia.org/wiki/Amazon_Robotics

[1] - https://www.therobotreport.com/kiva-systems-creators-inducte...

[2] - https://www.righthandrobotics.com/
I'm not sure if this is standard for SEC press releases, but why do they include details such as, "he was a school teacher" and, "he owed gambling debts"?

I've always suspected the SEC investigations regarding things like insider trading are typically the opposite of justice and designed to go after the smallest possible players while giving the illusion of enforcement. And these details in an allegedly serious investigation just seem to make the whole thing reek of small time gossip material.

It's just kind of surreal seeing this type of language in an official SEC press release regarding what I'm sure they would like us to believe they consider a serious crime.
Haha, that happened to me with my current job. The HR guy told me to my face that he thought my resume was unprofessional and if it were up to him I never would've gotten the interview

"Good thing nothing is up to you, then"
Isn't the DAI better describes as semi-stable since it holds reserves in Ether and other cryptocurrencies but is pegged to the dollar. This exposes it to systemic risk in the way that stablecoins backed by reserves in their pegged currency are not. The degree of excess in their reserves does cushion against a lot of violatility, but that cushion is finite and could easily vanish in a cryptomarket crash.
BitChute – Policy Changes – first June 2021
It's not a blind contrary statement.

It's a statement of fact.

That you don't like it doesn't make it less factual.
Those dummies. They had perfectly good time machines in 1999 and they didn't even use them to visit our enlightened era. I bet they did all their calculations on some old Windows 95 system instead of investing in solid multiple core machines.

Still, they don't hold a candle to Gregor Mendel failing to incorporate DNA in his genetic work, if you can believe it.
> So in other words: GPRS was intentionally backdoored.

Note that this high level insight isn't really a contribution of the paper, given that the authors of the algorithm basically admitted this themselves. Excerpt from the paper:

It was explicitly mentioned as a design requirement that “the algorithm
should be generally exportable taking into account current export restrictions”
and that “the strength should be optimized taking into account the above require-
ment” [15, p. 10]. The report further contains a section on the evaluation of
the design. In particular, it is mentioned that the evaluation team came to the
conclusion that, “in general the algorithm will be exportable under the current
national export restrictions on cryptography applied in European countries” and
that “within this operational context, the algorithm provides an adequate level of
security against eavesdropping of GSM GPRS services”

Basically, export regulations from that era implied that you had to make your algorithm weak intentionally. The main contribution of the paper was to give a public cryptoanalysis and point out the specific location of the flaw. I think it's highly interesting. Another excerpt:

Further, we experimentally show that for randomly chosen LFSRs, it is very
unlikely that the above weakness occurs. Concretely, in a million tries we never
even got close to such a weak instance. Figure 2 shows the distribution of the
entropy loss when changing the feedback polynomials of registers A and C to
random primitive polynomials. This implies that the weakness in GEA-1 is un-
likely to occur by chance, indicating that the security level of 40 bits is due to
export regulations.

Also, even though operators don't deploy GEA-1 any more, according to the paper many semi-recent phones still support GEA-1 (e.g. iPhone 8, Samsung Galaxy S9, OnePlus 6T, ...). The paper describes a possible downgrade attack that allows the session key to be obtained which can be used to extract prior communication that happened under more secure encryption algorithms (section 5.3). This is big. The paper authors managed to get a test added to the conformance test suite that checks that GEA-1 is not supported, so hopefully future phones will drop the GEA-1 support.
> What percentage of tether doomsayers here have ever traded a significant amount of tether?

"But what percentage of people who say that dioxins are dangerous have ever jumped into a big swimming pool full of dioxins?!"

I mean, if you think tether is a scam, you are probably going to refrain from going anywhere near it.
Build a Helm Plugin in Minutes
A -harmless- backdoor in mobile phone encryption from the 90s still exists
> When Wikileaks revealed the DNC gamed the 2016 Democratic Party primaries, the punditry judged democratic derailments not newsworthy when the higher good was resistance to Trump. Media ran faster with narratives ripping Assange than questioning or correcting them.

And rightfully so. Leaking classified government information about war-crimes is fundamentally different then hacking into the private email correspondence of organizations with the explicit intention of damaging them politically. And conflating the two is absolute madness and is antithetical to privacy advocacy.

We have a right to know if the American election has been the victim of a CIA style mis-information campaign from a foreign government. Assange's ability to be an absolute hippocrate about transparency and play a dangerous shell game about where the emails came from has convinced me that the only people Assange believes deserve privacy are the people useful to Assange.

I support Wikileaks. I do not think I support Assange.
40bits was "export level" encryption, i.e. stuff you could safely export to foreign enemy countries. Because western secret services were certain they could decrypt that if necessary. So this is malicious without a doubt.
I am hereby offering the planet earth (NFT) for sale. It features billions of semi sentient primates, a somewhat impaired climate system and an 81tn usd GDP.
There is some movement in this direction: e.g. it's possible to do `ip -j addr` today.
The problem is that those UX designers only think about colors and rounded corners. This is what the "design" is for them. Making things usable is not part of their design.
When running for president, her policies were at least significantly left of the Republican party's platform. She's firmly in the authoritarian end of that axis, but also a bit to the left.
Isn't ALL written history somewhat revisionist?

Well it sure is hard to tell because, of course, I wasn't there of course, but isn't that exactly the problem here?

For my entire life I've heard the bot mot that "History is written by the victorious"...well doesn't that mean at its base level that ALL of it bathes in its own bullshit?

I like Malcom's writing and his pod...and at least he has the honesty to call it "Revisionist History" as he is obviously telling us that HERE, yes, narrative story might win out over historical accuracy (which, once again, we have been taught is BS anyway).

Why shouldn't non-textbook history reflect the shades and biases of its author? As long as its well written and presents fair reflections upon this history, why should the author be pummeled by critics for doing so?

Too many questions and not enough answers...as usual.
A slightly different strategy with less counterparty risk

- Borrow USDT with USDC as collateral

- Sell USDT for USD, put it in your regular bank account (you'll end up with slightly less cash than you had originally, since your loan needs to be over-collateralized)

Outcomes:

- USDT collapses, USDC does not: best outcome, buy USDT for pennies and use it to get your USDC back

- Both collapse: pay back your loan only if USDC > USDT

- Only USDC collapses: just don't pay back your loan. you lose whatever "extra" collateral you paid
We are thinking about this the same way. Individual sessions don't do you much good, but there is traceability iff both parties keep complete logs. Which seems unlikely unless coerced.
I don't know if "technology" is limited to digital tech, but I am having a lot of fun working on vintage analog gear, specifically tube amps. It helps me think about totally different types of engineering problems than my day-to-day work.
Calling it an awful example of science seems a bit extreme.

There is definitely something to learn from such an experiment, albeit not what was intended.
Earth, pollution is concerning on that planet
I suppose it depends on how much time the bullet spends in the barrel. For a .50 BMG, this might be on the order of a few hundred microseconds.
Nuclear is orders of magnitude safer than what? Fossil fuel, yes, but not renewables? (https://ourworldindata.org/safest-sources-of-energy)

It's hard to say any one technology is "greener" than another when they have vastly different types of impacts...

* Nuclear waste remains a big issue for all except the newer reactors, which are uncommon, with little to no planned upgrades to existing generation or storage facilities

* Solar runs into land use concerns & endangered species, along with battery-related supply issues (child labor for mining minerals, political issues for where those materials are usually mined from, etc.), waste issues for end-of-life panels and batteries

* Large hydro devastates river and riparian ecology, not to mention local human communities all up and down the watershed. It has non-negligible greenhouse gas emissions too, between altering river carbon stores and using a metric asston of concrete.

Most of those concerns can be improved upon in human lifetimes. In terms of climate change though, arguably the priority should be to get "good enough" technologies deployed widely and quickly enough to change the emissions trajectory ASAP, if it's not already too late (it probably is). In that sense both nuclear and renewables are a net positive (in an off-the-cuff cost-benefit analysis weighing the urgency of climate change vs future issues).

But of all the types, nuclear alone leaves behind a non-trivial issue for thousands of years into the future. We can fix most other energy mistakes within a decade or few; not so much nuclear waste creation and storage, especially in an era of increasing geopolitical instability and waning democratic checks & balances. Stable and safe nuclear power relies not just on technological and economic factors, but also on stable and safe world regimes and balances of power that can limit both combat and proliferation, especially to non-state actors. None of those can be guaranteed in this century. Domestic regulations aside, existing nuclear powers have a strong vested interest in limiting nuclear access to nations outside of existing blocs/alliances.

I would be strongly pro-nuclear in an idealized world run by sane scientists and engineers, but that's very much NOT the world we live in.
"Linux ISOs" has been slang for a very long time:

https://www.urbandictionary.com/define.php?term=Linux+ISO&am...
> Just FYI that's why I (and I assume the OP)

Exactly, whenever I see "newsletter" I think spam.

Because clearly your content isn't good enough that people will come back on their own.
Did Coca Cola also suffer from their critical race theory courses (be less white)?

https://www.newsweek.com/coca-cola-facing-backlash-says-less...
The real interesting question is the proprietary crapto in 4G and 5G. How long until that backdoor is proven?
In an area where basic retail wages ~$10/hr with some experience, my no wife with no experience was netting $15-20+/hr after tips. This is despite her scumbag employer making her work an hour before and after service prepping and cleaning the dining area.

I was working 2x 20hr/week jobs and making less than her working a Fri/Sat/Sun..
Today’s Matt Levine post on this is a must read

https://www.bloomberg.com/opinion/articles/2021-06-16/don-t-...
Let's not bring one side of a social media dispute that has nothing to do with tech to HN, please.
They're not backed by an imaginary law, they are backed by an outstanding portfolio of expected loan repayments, the ability to borrow all the short term cash they need at lower rates, and ultimately you're backed by the FDIC even the people the bank loaned out to all default.
Very true. "Just google it" works for a very specific subset of problems. In most disciplines, especially "real world" ones outside of computing, there is no easily googleable answer to most problems. Lawyers get a hard time for answering every question with "it depends" but unfortunately, that's the domain a lot of people work within and it's the right answer most of the time.
> hence one of the reasons it's actually illegal for individuals to store large amounts of physical cash for long durations

What county are you referring to? This is not the case in the US [1].

[1] https://josephhollander.com/illegal-large-amounts-cash/
This works great for me in NE USA. We have two large filters. Usually keep one upstairs and one downstairs. They make a noticeable difference. But they were about $250 each.
It's really disappointing to see this happen—especially from a website / community that is so widely advertised on sites like YouTube.

Although I understand their struggle to support their community section given their limitations, it seems as though this change is less focused on the satisfaction of the users of the site (despite their claims otherwise) and more focused on increasing revenue.

Does anybody have any recommendations for alternative communities that focus on a similar area of interests? I personally enjoy the challenges of Project Euler, though that doesn't quite fulfill the same role as Brilliant's community did. I'm always on the lookout for new and interesting ways to learn more!
JPMorgan is hoarding cash because 'good chance' inflation here to stay