skysight-inc/HackerNews huggingface dataset:
so let's say the encrypted volume is 1GB. let's say there's 250MB stored in the hidden volume. Can't you reveal the existence of the hidden volume by writing data to the 'outer' volume until it is full? If you can't fit 1GB of data in the 'outer' volume doesn't that mean there must exist a hidden volume?
taken from https://threadreaderapp.com/thread/1404293557087707137.html which has some excerpts from other articles about him.
> Around the world, there is now a contest between freedom and tyranny, between the rule of law and the arbitrary exercise of naked power.

Yeah, right. And the glorious state named US is leading the contest.

If political bulshit is not allowed on HN why is such a story with such comments not dead ?
a better way to say what you might be saying is, "without locking your feet to the pedal, you expend significant energy with lateral muscle movements to keep your feet on the pedals"
> If it's OK if you just get anything and not the article from Wikipedia, why even look at Wikipedia at all?

This is probably the argument I hear most often. But it completely ignores the fact that for the last 20 years, when I wanted to grab a Wikipedia article, I got it in 100% cases, whereas the number of broken HTTPS websites (usually because of expired certs) is non-negligible. You can blame "incompetent admins" as much as you want, but with HTTP this particular problem simply doesn't exist.
>HTTPS prevents ads/trackers/malware being injected into the page by unscrupulous ISPs.

If you are in a legal/political environment that allows active attacks by an ISP on their customers then you have a much bigger problem than just this sort of thing.
It’s almost like Russiagate and a new digital Cold War happened…nah, that’s too simple an explanation.
I think it’s worth than that for bitcoin as bitcoin relies on a connected network for security. The risk of forks is too high without that. For other cryptocurrencies based on BFT at least the network would come to a stop and safety wouldn’t be violated (no double spending).
> it may well make sense for us to enable them to restrict themselves in the future. In this world, Stripe could tell their customers that the business doesn't have access to the raw details

This sounds great -- I don't want to be handling sensitive data of users, and I don't want to give sensitive data to businesses. But I'd rather this be a separate Verification product, with different branding, docs, and UI, so users and businesses are all clear on what's happening to user data.
Compare to the Valerie Plame leak by the Bush administration: https://en.wikipedia.org/wiki/Plame_affair
> t also helps that self-recorded MDs were the more common option, so the discs aren't covered in labels/printing.

I hadn't thought of it, but you are right.

(Then again cassettes were also mostly always used "naked" - as in, copied and devoid of labeling ...
... and they never reached MD-level cool :)

... though they might have seem like a very futuristic thing when first introduced.)
A Time to Poast and a Time to Log Off
If your "couple hours" take-home test has a significant difference in results between 4 and 40 hours of work, you probably made a bad test.
> It’s important to be aware of it, to realize that there are limits to what we can do with AI. It’s great for computation and arithmetic, and it saves huge amounts of labor. It seems to me that it lacks humility, lacks imagination, and lacks humor. It doesn’t mean you can’t bring those things into your interactions with your devices, particularly, in communicating with other human beings. But it does mean that elements of intelligence and wisdom — I like the word wisdom, because it's more multi-dimensional — are going to be lacking.
Seems a little biased since they don’t even talk about its advantages. AFAIK not many companies use OCaml in practice but it is used quite a bit in academia in Europe.

That said (I may be biased as well) I was taught OCaml in uni and enjoyed its succinctness and expressiveness.
> what was it like in the age of MS Access, Visual Basic, and how do the new low code tools address those?

What they all have in common, in my experience, is that they make simple things very simple, but difficult things impossible. If you needed to put a form on a user's desktop and capture what they typed into it, VB was the quickest way to do that. If you wanted to make sure they only put valid dates into the date fields and numbers into the numerical fields, you could do that with a click of a button, too. If you had to do any sort of contextual validation or cross-form validation, or long-running workflow or approval or any of the sorts of value that automation actually promises, it took much, much longer to figure out how to force that square peg into that round hole. It could be done, but it was nearly impossible to test, broke for mysterious reasons under real-world conditions, and was noticeably slow (as in, go get a cup of coffee and come back slow) in use.

When I think of "no-code" tools, I think of Salesforce.com, which to me was "Visual Basic for the web". If you wanted to put up a form on a website and capture what the users typed into it, SF made that simple. But anything beyond that, you were going to spend a lot of time fighting with the undocumented parts of the system.
Do you personally feel that it would be valuable to have the high authority/rote people in place to execute and low authority/creative thinkers in place to plan?
if $rando_journo did the same, I'm pretty sure that under the UK Official Secrets Act failure of a inescapable duty of care that takes effect from the minute you believe that you are handling classified material, makes the deriliction of protective measures a serious crime. The UK used to be blanket overkill, however some things must have loosened up because Johnson wed in a Catholic Church and I have no doubt that any affiliations to any religion not Anglican / Church of England, was treason even in Tony Blair's day, and possibly the reason why his ministers seem to concur in memoirs Tony wasn't running the show. I upset who they said was.

But looking at this as a human being, if I'm still capable, I am just not capable of understanding anyone who wants to deal in state secrets with so little care. I have been pounded into a unrecognisable life by nonsense not incomparable and the only result has been a hardening of my views on the punishment for genuine traitors and wastrels with the security of others.
Can't OP move to Cloud Identity Free to keep access to most of the free services[1]? They wouldn't have access to Workspace-specific services like Gmail and Google Calendar, but they would still have access to Google Drive, Docs, Sheets, Slides, Keep, and Meet. I assume other non-Workspace services like Google Play will also stay available.

1. https://support.google.com/cloudidentity/answer/7319251
d3 and observable is closer to the essence of KISS than "unnecessary complexity".
He wrote an earlier article (2019) in the NYT on crypto helping there https://www.nytimes.com/2019/02/23/opinion/sunday/venezuela-...
One of the videos has a kid read off a thermometer at 79 degrees (with snow on the ground). You can judge for yourself the size of the fire in that video.
This is all in the same county, Fulton, and the northern part has voted to extend multiple times. The current Marta line stops about 8 miles from the top of the county.

Even other counties, Gwinnett and Cobb have recently voted to extend but that’s sort of a separate point.

My complaint was that Fulton county sales taxes support Marta, but Marta service does not extend all the way through the county.
I can say without any worry of being proved wrong that it is very easy to warm that tent to 80+ degrees with even a small campfire like the one seen in the video with my grandson bouncing around inside it.

I use a layer of thicker branches about 3" in diameter first, then I use smaller diameter sticks in layers on top of that. When you light that off the smaller sticks burn down and create a bed of coals on the first layer that keep fuel burning as it's added.

By design that burns low and slow. I'm also burning deadfall from hardwoods, Oak and Hickory by choice, and because that's what's growing in our forest here.
No No No

There is such a thing as software literacy just as there is a thing called literacy. We spend the first 15-20 years of life teaching literacy so that a young person will be productive in life.

What makes us think it's going to be different with software?

The idea of low-code is like the idea of writing a novel by cut and pasting loads of blank comic book panels carefully crafted by Marvel Studios.

This job used to be called Analyst-Programmer - and nothing in low code will stop the analyst part from being needed. As for the programmer part, it is way way easier to express yourself in code once you can code than any of these blocky tools.

Yes we desperately need new and better tools and languages and processes and so on. But not dumbing down - skilling up
ripgrep always stroke me like the "industrial strength faberge egg" of Knuth/McIlroy fame [1]

Yes it's an impressive achievement to make it that fast, but you could get the same or better performance by just using an index to search. I've been using GNU id-utils [2] for a long time, that is using an index, and it gets comparable performance for a fraction of the source code and brain power, and likely energy use too.

[1] http://blobthescientist.blogspot.com/2017/10/knuth.html

[2] https://www.gnu.org/software/idutils/
I mean, it was war. Conventions are nice, but my read on both world wars nobody actually cared, they just practiced tit for tat.

The comment I was responding to made what I interpreted as a false equivalence.
Almost. It was Google's attempt at cloning Facebook by cloning Diaspora.

https://diasporafoundation.org/
An opinion piece on the matter of being clipped in vs street shoes: https://www.rivbike.com/pages/the-shoes-ruse
The fact that you're being downvoted by stating simple truths that go against the accepted MSM narrative just shows how bad the problem is.

And HN is supposed to be where the more informed crowd hangs out.

One quibble, though. It wasn't inauguration day. It was on 1/6, the day they were to certify the vote in Congress.
PoS is more secure in general, also PoS and BFT-based cryptocurrencies in periods of network partitions will rather come to a stop instead of allowing safety to be violated (double spending).
Ok. I'm not even claiming you're wrong, but again, if we can't trust anyone to determine what truth is, why should we believe you?

How can you prove you're right without invoking exactly the same sources of truth that are being discredited as untrustworthy due to their biases?

Once you play the "Who controls the truth?" card, it applies as much to you as anyone else. That argument becomes infinite and recursive when the implication is that no one can be trusted. Otherwise, the implication is that only certain sources of truth can't be trusted - which itself is simply a statement of bias. Just tell us which side you're on, in that case.
I don't think you understand. It naturally happens as people create money (debt) to purchase things on their own volition. If people seek goods and services, debt will exist, and money supply will grow, devaluing the currency naturally. The only way you can avoid this is with a fixed money supply (e.g. the gold standard.)

And when you fix the money supply, the owners of capital, versus a central bank, control the effective market average interest rate. Thats absolutely not a world you want to live in.
They have been saying this for years. I’ll start believing it once I have been replaced by some no-code hack that graduated a 2 week boot camp in <insert some “low code” company here>.

Anybody remember “dream weaver” for front end development? Thus was supposed to change the game, yet all we got was unmaintainable, and bloated code.
> Induction stoves are the highest EMF polluting device in a typical household. In particular they emit a large magnetic field.

And? You say this like the problem with this is obvious / self-evident.

(Feel free to get technical: I have an EE.)

The author of your source:

> My interest in the topic of EMF radiation is two-fold:

> I have studied Information Science and worked with router communication, Wi-Fi network, and fiber optics communication during the last 5 years. So I consider myself well-educated on parts of the technical aspects of the problem.

> I am married to a wonderful girl who is hyper-sensitive. She can literally feel high levels of EMF radiation on her skin when she is near strong Wi-Fi signals or other sources of electromagnetic fields like induction stoves.

* https://emfcaution.com/about-us/
Equilibrium Effects of Pay Transparency
Cassette Tape
"The Compact Cassette or Musicassette (MC), also commonly called the tape cassette, cassette tape, audio cassette, or simply tape or cassette, is an analog magnetic tape recording format for audio recording and playback. It was developed by the Dutch company Royal Philips in Hasselt, Belgium, by Lou Ottens and his team. It was introduced in September 1963. Compact Cassettes come in two forms, either already containing content as a prerecorded cassette (Musicassette), or as a fully recordable 'blank' cassette. Both forms have two sides and are reversible by the user."
I'll dig around and see if anything comes to mind later. I love stuff like this, so I'm happy to provide some feedback.
I bumped into three blog posts a while ago that listed similar modern alternatives – lots of overlap:

https://darrenburns.net/posts/tools/

https://darrenburns.net/posts/more-tools

https://darrenburns.net/posts/even-more-tools
And just like the internet, the 'generation' is getting closer and closer to the customer. As netflix installs appliances in my region, we're also generating electricity at the rooftop or regional cogen systems.

That parked electric car may very well back-feed into the grid to shave the peaks of demand.

That clothes dryer might run 'slow' until it's peak pricing time, same with EV charging.

My 'smart' thermostat already does it for HVAC. Everything else will too.
Does it really matter? Unless 1 extra mile per hour will make or break your commute or you're racing, just go with the most comfortable choice.

I've been planning an E-Bike conversion and it looks like wider tires would be a better choice, as would shock absorbers which everyone says are less efficient.

I'll give up that efficiency in a second if it means my ass and legs aren't sore when I get to my destination.
That's fair; I was assuming that the fork would be renamed substantially enough to obscure the origin.
This is really informative and helpful, thank you for taking the time to share! Interesting that they use the tax law as the hook. It certainly makes me feel a lot better about our chances of staying competitive.
Things change over time, including APIs. Most of these low/no-code tools offers integrations, using APIs. You'll get something setup and working and then one day it breaks, because the API for your integration changed. Now What?

Now you wait, without your no-code tool working, while someone that actually writes software gets around to fixing it for you.

We'll have 80% of solutions failing sometimes and no one can that help in a timely manner. We'll see how long these solutions last.

What if you need something the no-code tool cannot do? I've used one where you could add your own formulas, much like you can make formulas in Excel. I don't want to work in a tiny edit box to create a giant nested call in your proprietary formula language. Ever had a bunch of nested if statements in Excel? Its real joy, not.
Now you have your answer: Just instead of deploying to an app server you deploy to your db server. Yet for some reason people forget everything they have learned once the term SQL comes up.
It seems to me that culture war posturing is one thing, a deliberate source of divisive power that some milk for outrage.

It seems to me that there are some issues with a clear right and wrong: the climate emergency. We essentially cannot overreact, we should be doing 309% of what we are currently doing to go zero carbon. In such a case as the “real world outside our society” id involved, it would seem that there are objectively right and wrong courses of action, in addition to many complex calculi that can have mixed value even if implemented with purely good faith and intentions. (Aka actual error)

It would seem that legions of conservative and prudent scientists from diverse fields are to be considered “political radicals” for merely telling the truth.
There is a law that Federal government workers must not work during Christmas, however. You are legally barred from having employees who report in to you come in on Christmas. If you’re a Muslim, Hindu, or Buddhist you will be given Christmas to celebrate. Come on, this is blatantly non-separation-of-church-and-state.

It’s not anything that upsets me but observationally it is so obvious. M
Just Do the Work
> That is too simplistic view of the economy. You can't allocate all revenue to payroll.

You may be right about this. In fact I'd wager that you are. But the problem isn't that part of what you said; it's this:

> That's not how business or the economy works.

You're probably right about this too! The problem is that, in these conversations, we usually just stop here. Whereas more and more, I'm finding myself asking "can we citizens find ways for business or the economy to work in some other way, even just a little bit? Are we willing to just creatively try and answer some of this stuff?"

I think, if you just stop at "that's not how ___ works" without pushing things further, well, it feels like rolling over. The way "business and the economy worked" in the American South as recently as the 60's was that, if you had a certain skin color, you were relegated to a shitty part of, say, the restaurant, or you were prohibited from participating in the economy in any meaningful sense at all. But then some people asked "is there a way for things to work differently?" It's far from sunshine and gumdrops 55 years later but you can't be chucked out of a lunch counter for being black anymore.
Where is the line, and more importantly who decides, between laws to protect secret documents, and the right of the public to know of wrongdoing?
Author here. As one of the other comments mentions, afl++ (and to some extent vanilla afl) already has capability to automatically scrape magic values from arguments to special functions like `strcmp` and the like. The older technique is called libtokencap (https://github.com/AFLplusplus/AFLplusplus/blob/stable/utils...), but afl++ also has a newer feature called AUTODICT (https://github.com/AFLplusplus/AFLplusplus/blob/stable/instr...).

But this only solves the problem of magic constants expected in the input. If the check depends on dynamic properties of the input or happens deeper in the code after the input's already been through some transformations, it can't be solved like this. There are other techniques to help with this, though. One of the earlier attempts to solve such types of more complex checks is called laf-intel (https://github.com/AFLplusplus/AFLplusplus/blob/stable/instr...) and boils down to transforming a more complex check into a nested series of simpler checks. This makes it more probable that the fuzzer's random mutation will be able to solve the outer check and hence hit new coverage, enabling the fuzzer to detect the mutation as productive.

afl++ has a more modern variant of this called CmpLog (https://github.com/AFLplusplus/AFLplusplus/blob/stable/instr...) which is based on the RedQueen technique. The paper for RedQueen is a really interesting read: https://www.syssec.ruhr-uni-bochum.de/media/emma/veroeffentl...

The problem of checksums is at times also solved by simply modifying the binary so that the checksum is neutralized and always succeeds, especially if you have access to source code.

As for the problem of fuzzing stateful things like the double ratchet, one way of tackling the problem is to think of the input to the fuzzer as not only the raw bytes that you'll be passing to the program you're fuzzing, but as a blueprint specifying which high-level operations you'll be performing on the input. Then you teach your fuzzer to be smarter and be able to perform a bunch of those operations.

So, let's say you take 512 bytes as the input to the fuzzer. You treat the first 256 bytes as the message to decode and the latter 256 bytes as the high-level cryptographic operations to perform on this message, each byte specifying one of those operations. So you could say a byte of value 1 represents the operation "ENCRYPT WITH KEY K1", 2 represents "ENCRYPT WITH KEY K2", 3 represents "DECRYPT WITH KEY K1", 4 represents "DECRYPT WITH KEY K2", 5 represents "PERFORM SHA2" and so on. Now you can feasibly end up with a sequence which will take a message encrypted with key K1, decrypt it, modify the message, then re-encrypt with key K2. Or, in the case of the double ratchet algorithm, have it perform multiple successive encryption steps to evolve the state of the ratchet and be able to fuzz more deeply.

Of course, the encoding needs to be rather dense for this to work well so that ideally each low-level bit mutation the fuzzer does on an input still encodes a valid sequence of valid high-level operations.
I do not understand why you were greyed out because you make a real point. I have decided to forego AstraZeneca myself due to the reports of deaths, I will wait until my country makes Pfizer or others available (I am not anti-vax by any means).

I think there are many financial interests and psychological phenomena going on behind this intolerance to vaccine skepticism: people are afraid of COVID-19 and do not want to hear any possibility that the vaccines will not bring them immediate safety from this horror, along with not wanting to be "wrong" on this debate.
Strongly implied by saying "we don't comment on who our sources are"?

It's not clear that Wikileaks even knew who their source was.
Those aren't contradictory, and both are supported by the evidence.

Which do you actually disagree with, or do you simply not see how both can be true?

Affecting the outcome of an election is not inherently wrong. Foreign countries affecting the outcome of our elections is dangerous, and has historically been very frowned upon. There's reasons that only Americans are allowed to donate to election campaigns. Our elections are supposed to be for _us_. If whatever countries want a particular outcome start having an outsized voice, our elections will be even less connected to what's best for Americans than they already were.
To your point, stated desire (filling out a survey) isn’t as strong as revealed preference (people switching).

Stated preference is much noisier.

My observation is there are a lot of people who have learned to hate their boss while remote. My SF friends may be surprised that wages are resetting to Chicago and Texas levels for new workers. That may slow down some of the movement.
I just have a separate alias for rg --no-ignore
They generally do a terrible job representing anything inside America as well.
Yes - most U.S. post-degree jobs require background checks which will almost certainly require giving your SSN to the employer.
Doesn't DoH/DoT centralise a decentralised protocol though? DoH is great but then you just get Cloudflare knowing all the DNS calls.
I am definitely slower - 4.5mph or so - on my 42mm gravel bike on road than I am on my 32mm road bike.

But my road bike has slick tyres and the gravel bike’s tyres are more knobbly, and I run the gravel bike’s tyres at much lower pressure. (And there is the difference in geometry of each bike, too.)

I’m not even sure you can buy 42mm slick tyres, so a like-for-like comparison is probably very hard.
I care. I thought HN would as well.