skysight-inc/HackerNews huggingface dataset:
It's fundamentally the same attack as the plaintext case, although here it's breaking signature verification.

Here, the computation is

real_sig := Sign(msg)
Cmp(real_sig, provided_sig)

For a fixed message, Sign(msg) is constant time. So, with enough attempts you can create a high-resolution timer to tease apart subtle timing differences in Cmp.

You're correct that if the computation is

provided_hash := Hash(pepper + pw + salt)
Cmp(real_hash, provided_hash)

then the comparison is Hard (tm) to break.

(But this relies upon transmitting the plaintext password, you might say! If you transmit the hash directly, then you're again hosed. One option I've seen previously is transmitting a hash of the password, then hashing + salting it once more, which relies on avalanche effect as you suggest. I provide no guarantees re: the security of such an approach, though -- talk to an actual cryptographer!)
Jigsaw SRT Magnesium twice a day has solved my anxiety, muscle cramps, and heart palpitations. It’s one of the only “slow release” formulas out there. Magnesium normally can cause a laxative effect.
If Russia attacks the British navy in Ukrainian (according to everyone but the Russians) waters which the British navy has permission to be in, that's just an outright aggressive act of war. Britian, and/or other members of nato, might well decide to shoot back.

They might not too, it's borderline, but no one knows quite where that line is. If forced to bet on an outcome I would bet on nato sinking a Russian ship of comparable size also in Crimean waters.
That's what they said back when butter would kill you and margarine was the solution.
> but it's not the product of the craft of software engineering

Sure? This seems pretty no-true-Scotsman to me. If you want to define some the things I need to do as not real software, feel free. But they're still things my team has to get done. To me there's a spectrum of domain stability on which the code rests. It's frequently not possible to know in advance which bits will be long lived and which won't be. So whether or not one of htose bits is the true "craft of software engineering" in somebody's eyes has very little interest to me. Especially when it's an anonymous rando.

> people who work with good statically typed languages can prototype quite well using types to drive their domain modelling.

I can certainly believe that's possible. Hopefully some of them will interview with me so I can see how they work. I'm just reporting the data I have.

> that's not really the kind of 'production code' that any reasonable person

In startup contexts I will quite often try an experiment that is quick to build. A few hours is not at all uncommon. That you consider me unreasonable is a sign I can better spend my time elsewhere.
Then do it. They are desperate for tech employees. As it stands, taking the European offer is not rational even after taking into account the value of the welfare from the state.

The only people it makes sense for are those with other reasons to go (culture, family, etc).
You could achieve this with CSS by using “vw” units for everything, including font sizes
Brick in Seattle is not great because we get earthquakes and brick tends to crumble.

There are some brick buildings, and there are some things you can do to reinforce them in preparation for an earthquake. But in general, wood is better.
I agree with you. I have seen major mixed use projects get a lot of resistance by NIMBYs in the Bay Area though.
If you are going to involve more people, just use multisig.
Not a whole lot of comments on this one, but to be expected I suppose, given the degree of niche it is. I enjoyed it, it reminded me of my early days of hacking video game stuff, which practically began with Nintendo DS stuff, including some LZ77 variants that were, at least at the time, not documented or implemented anywhere.

If you’ve never engaged in this kind of reverse engineering, I’d recommend it. It’s fun. It feels a lot like sorcery once you succeed, and that can be pretty rewarding.
Firefox 89 Proton UI Tab Styling – Raymii.org
> You haven't really refuted anything here, and your reference to Occams Razor should come only after clear logical steps from evidence to conclusion, which you do not have.

I listed 4 bullet points. You've agreed with 2 of them (the first, that a russian-state associated IP was used in the hack), and 3, that the data if published would be beneficial to russia (by being beneficial to trump). Those 4 evidence based claims, some of which you've admitted you agree are true, point to a simple answer: Russia was the culprit.

Yes, there are other alternative explanations, but all are vastly more complex, or fail to sufficiently address all of the evidence presented, hence my reference Occam's razor.

> Now, however, any time anyone discusses the content of the emails, true believers such as yourself will interrupt to talk about how Trump won only because of Russians.

I've never said this.

> I get it. You don't want to steel-man alternative ideas, because "Russians" is what you have been told and "Russians" is what you believe. But almost any other explanation is as plausible as Russians.

No, that's my point. That was my steel man. Your argument is incoherent. You're free to prove me wrong. Its easy: provide the alternative explanation that is more likely than it haivng been russia. Provide an explanation that better explains the facts we agree on:

1. A russian state-affiliated IP was used in the attack
2. The data stolen and leaked was geopolitically beneficial to russia.

Again, here's my simple explanation of these facts that we agree on: "A russian state-backed attack stole and leaked these documents". What's your simpler explanation? Prove me wrong. It should be easy.

Looking directly at the evidence, the simplest, and far and away most likely answer, is that Russia was the culprit. Other answers are, perhaps, possible, but that doesn't make them as likely, unless you want to pretend that two explanations of the same phenomena are always equally likely. That's simply a failure to reason correctly, and I'd expect better of someone who wants to bring up fallacies.

Put another way, there's some evidence that supports the claim that it was Russia. There's no evidence that supports the claim that it was the Ukraine. This doesn't mean that it had to be Russia, yes, alternative explanations are possible, but looking solely at the evidence, all of it points to Russia, and none of it points to anyone else.

You can create alternate hypothesis, but they all rely on the evidence being somehow misleading ("The US government is lying", "The Ukranian teenager spoofed a Russian attack"). By Occam's Razor, those explanations are less likely, because they are more complex. You're welcome to present some additional evidence that makes those explanations more likely, but you haven't presented any, you've simply said the evidence we have isn't conclusive (which I agree with), and because of that all possibilities are equally likely, which is terrible reasoning.
Another option for those that don't want to do hardware hacking is to use a Z-wave garage door sensor and a smart hub that allows programmable alerts (like the Hubitat). Then you can set up a rule that alerts you if the door is open too long.
If you are very well paid you likely are the investor class. Nearly every tech company that pays well does so via equity.
booooooooooom
Tractor Gadi
Everything about tractors in India.
Why not just identify it as the function text at that point?
Quit drinking (at 34, am alcoholic)
Quit smoking (at 33, smoked pack a day for 10+ years)
Started exercising regularly in my mid-thirties & consistently get 5+ hours of moderate exercise a week now (am 40)
Picked up a piano practicing habit a year ago, just 10 or 15 minutes a day but I have multiple 50-day streaks of it now
> The possibility that they might object to this status isn't even considered.

Presumably because, as you quoted:

> 22 percent of this year’s offers are going to White students — a number that is largely consistent with the past four years

The author for this article has concluded that something changing is more likely to stoke controversy than something remaining more or less the same as it has been for a while.
Why does bringing up the menu to eject a USB disk take so long? Maybe 5s on my PC.

It's been like that since Win7.
Never connect traces at 90 degree angles.
Black Hole Photoshopped
My house actually backs up to a 10 lane freeway. :) But there is a huge difference between being on the ground floor behind the wall where the freeway just sounds like a river, and being on a higher floor where you can see, hear, and smell the cars.
Speaking for Japanese, there is certainly an "order" for words, but that order is based on the readings of words, which may be difficult to ascertain from just the string.

https://en.m.wikipedia.org/wiki/Goj%C5%ABon

Eg. Words starting with 一人 can be read as both いちにん (ichinin as in 一人前 - food for one person) or ひとり (hitori - 一人暮らし - living alone)
Green Cbd Gummies UK
According to the case of the authority site and maker, Green Cbd Gummies UK is a high level relief from discomfort CBD recipe that can be devoured by clients as chewy candies or confections that have a sweet and heavenly taste. It contains THC-Free CBD extricates with the assistance of which shoppers can undoubtedly have helpful advantages and complete and normal elements of CBD or cannabidiol.

https://www.bignewsnetwork.com/news/269821943/green-cbd-gummies-review-best-uk-cbd-bear-gummies-dragons-den

https://www.homify.in/projects/962473/green-cbd-gummies-dragons-den-uk-don-t-buy-it-s-scam

https://twitter.com/GreenCBDGummie8

https://www.bulbapp.com/u/green-cbd-gummies-dragons-den-uk-official-website-shocking-reviews
A dedicated hardware wallet like Trezor or Ledger is likely a much better setup than a homebrew setup on a general purpose computer.
> If you are very well paid you likely are the investor class. Nearly every tech company that pays well does so via equity.

Getting paid in equity doesn't make you “the investor class”, aka the capitalist class, aka the haut bourgeoisie.

Having the overwhelming share of your support coming from capital returns rather than pay for labor does that, but equity as a component of labor compensation doesn’t, alone, do that, or even move you out of the working (primarily dependent on labor income) class into the middle (split dependency on labor and capital with neither dominating) class.
No, they don't concentrate in the ovaries. That's choice morsel of bullshit antivax disinfo.

For a backgrounder of what actually happens, see Derek Lowe's recent blog[1]. Most of the lipid nanoparticles end up in the liver, which is exactly what you expect. There's a detailed debunk of the ovaries issue in [2].

Thanks for being curious about your part in spreading covid misinfo. I suspect most people aren't aware of what they're doing, just repeating stuff they heard from people they trust but probably shouldn't.

[1]: https://blogs.sciencemag.org/pipeline/archives/2021/05/04/sp...

[2]: https://byrambridle.com/
This point in particular makes me wonder about how it can get applied...

> In addition, the hate speech would need to be communicated in a context where it is likely to foment detestation or vilification of an individual or group on any of these prohibited grounds.

Any communication that is negative about a certain group, or even overly positive about one with the implication that it's considerably better than another's could end up contributing to this effect... Who gets to decide it's "likely"?

The right and the left really can't agree on the balance between equality/equity for who's actually vulnerable enough to need these laws to protect their human rights. This will be applied unevenly, maybe even arbitrarily.

When the government collects 16,000 dollars from every person it can fine for this, would social media even be worth the risk, for a poor person? Some rich kid with the right connections could pull some strings, and financially gut a person they disagree with who said something "likely to foment detestation" on their worst day, putting them 5 figures deeper in debt and driving them off social media. And then the ensuing storm foments hate between both groups. Maybe the poor kid gets a gofundme that won't get shut down so he doesn't have to pay it back over the course of many years, if he's lucky.
It's too bad the new hardware I'll have to purchase to run it isn't free.
Heh, yeah. Around floor 30 the noise is basically all gone.

I don't know how some people live next to the subway though. That is super loud IMO
I brought it up mostly because I was hoping someone would point out how typing can easily fix such timing attacks, but yeah that was a legitimate issue. [1] shows a walkthrough of one attack.

In the particular case of password verification, I don't think it'd be that bad. It simply gives attackers more information than they should have. The issues are obvious if the hash doesn't have perfect diffusion. It also allows you to begin reconstructing the hash and performing offline attacks e.g. to avoid (already too-lax) rate limits.

https://medium.com/@TamasPolgar/can-timing-attack-be-a-pract...
> I can't think of an instance where an operation would fundamentally require a fixed relation in the concrete types of different routes. For instance, when routes overlap you can derive a priority value for each one to decide which one to use, rather than directly implementing some kind of function whichIsBetter(a, b) which relies on knowing what concrete route kinds a and b are.

Any routing logic which makes routing decisions based on information nested arbitrarily deep into your packets.

Is this an IP packet containing data; or an IP packet containing an HTTP GET request to www.google.com?

You have to do arbitrarily deep type inference in real time.

The the data has no semantic content until you infer some! Is just a bitstream!
This perspective is completely alien to me. What misery and violence is the state uniquely causing that wouldn't be recreated by other forces in a non-state society?

That's putting aside all the generations, centuries and millenia of lessons learned that are enshrined in how a government-run state runs. It's hard to guess what alternative you're even imagining, but do you think some anarcho-crypto-decentralized-eco-intentional-autarkic commune where all internal "violence" has been eradicated can live in a bubble detached from the rest of the world?

What is your workable alternative to the state?
I do a ton of cold outreach, and in my experience, the difference is in the way you communicate.

In each of my follow-ups, I mention that I am reaching them because I did not hear from them the previous time, and ask them to reply one way or the other.

It communicates to them that if they just reply a 'No', I would stop,

Also, I do not persist forever. My follow ups are always 4 levels deep, and in the final mail, I make sure I tell that it's the last one and I won't send another one.

So anyone like OP who's delaying it simply because they are busy tend to reply.

Again, I am not sure if these are ideal tactics, but they seem to work for me.
I highly dis-recommend this product, particularly if you want to use it with something like Home Assistant.

First of all, their app usually takes about 30-60 seconds to load up which is pretty frustrating when you're waiting outside your garage and trying to get in, just waiting on a spinner as it has to go talk to some cloud server somewhere.

Second, I use Home Assistant for pretty much everything, and Chamberlain has a habit of breaking their API every few months. From what I've gleaned they seem to change how they allowlist user-agent headers to try to intentionally break things like Home Assistant.

Eventually I got tired of it constantly being slow and/or not working, and I threw it away. I replaced it with a programmable Z-Wave contact relay (Zooz ZEN16). It works much better now.

Lastly, the newer Chamberlain motor units actually don't use simple push buttons anymore, so what I've done isn't even an option. I believe it's some kind of PWM over the wire to the wall-mounted buttons. I would recommend not buying any Chamberlain product because of their anti-consumer behavior.
FWIW, I don't mind the KYC concern. I even provided my identification documents to facilitate the process. It's the we-only-do-business-with-exchanges angle that irks me.
LOL. Who do you think you’re buying the gas from and who sets the price?
Know your product.
Qualify your prospect.
Present your solution.

Prove value.
Overcome objectives.
Ask for the sale.
If you've lived around government circles for long enough (in my case, merely existing in Canberra for a decade) you inevitably hear stories of senior public servants running through airport terminals, briefcase with classified documents in hand, because the Minister is going to get a plane in ten minutes and their signature is needed on an order for some critical law enforcement or defence matter that has arisen in the last couple of hours.

(I've also been told by government friends that there are plenty of very significant government locations where you would assume they have a Top Secret classified, airgapped network, but they don't, even though they have appropriately classified rooms for storing and reading Top Secret print documents.)
Go takes an alternative approach:

https://www.youtube.com/watch?v=wWApoImHuf8
https://archive.is/bJ0jN
Disconnect the statement from actual politics and think about the concept in a more local setting. Here's a somewhat contrived example.

There are two engineers in your company trying to work out the best way to reduce the rate of bugs being introduced into a system. One of them is advocating for pair programming, and the other is advocating for a dedicated testing team. Both are trying to convince the other engineers that their method is best.

They may argue in good faith. They may resort to calling the other silly names. This is politics on a local scale. There's nothing to imply that the other side is evil, immoral, or even wrong. The fact that current democratic politics has devolved into mudslinging isn't an inherent fact of politics - it just seems to be an effective way to win these days.
Depending on your interests/needs, you might not find yourself actually writing network code, but dealing with it tangentially when things go weird. Programming blogs where people detail one of these weird edge cases and explain how they debugged them are super interesting and might be more relevant to your day-to-day work.

Here's one I really like, you could learn a lot just reading through all the networking-related posts here:
https://jvns.ca/#computer-networking
How does this compare to vscode-neovim?, which is a FULL neovim embedded instance. Wouldn't this be enough?

https://github.com/asvetliakov/vscode-neovim
This is very upsetting. The liberal party is giving me reasons to regret voting for them, but I suppose we'll see if they can pass it in a minority government. If the NDP also back it along with the conservatives, I may have no political alignment left.
Sibling poster is unnecessarily certain. Craving and satiety is not going to be well covered by macronutrient RDAs. There are interactions in the small intestine related to digesting plant fiber that produce serotonin, for example. I could find details on request.
If you only ship the default collation it is already well under 1MB. DUCET [1] for example is 406 KB in a naive format [2], which gzips (-9) into 164 KB and Brotli (-q 11) brings it down to 76 KB. Other Unicode tables combined, even in a directly-accessible form, do not exceed 200 KB with an appropriate encoding in my experience.

[1] https://www.unicode.org/Public/UCA/13.0.0/allkeys.txt

[2] Encodes `XXXX; [.AAAA.BBBB.CCCC] [*DDDD.EEEE.FFFF] ...` into three-byte code point and seven bytes per each collation element (`.` encoded as 0x01, `*` encoded as 0x02, the end of elements signalled with 0x00); everything is in big endian and sorted by code point. This is not suitable for direct access as is but close. (The only reason I've used a naive encoding here is that, I have never tried to compress DUCET in a directly-accessible form so I couldn't give an educated guess at all.)
Yes. But a reversible connector beats them all.
hahahaha you are a fucking loser, that’s not going to happen
You seem to be under the impression that anyone here has an obligation to make sure that you're adequately convinced.

You clearly won't believe that most drug transactions are done in cash unless you see incontrovertible evidence. That's fine. But no-one cares, so I don't know why you expect demands for a source to be met.

If this was an even remotely controversial or decisive topic, it's worth providing sources, because they convince not only the person demanding it, but also anyone reading. But in this case, it's such a well-known and obvious fact that there's no such benefit.

You can ask for sources for "the sky is blue" all you want, but I'm happy to just stick my head out the window and go "yep, I'm pretty sure". I'm not too fussed if you still don't believe me.
HackerNews has sure gone downhill. The top voted story is a detail-less story about using autocomplete for a launch config.
There's no reason for Russia to take over the entire Ukraine. Ukraine is a failed state, poorest country in Europe, it is drowning in problems. Just look at the stats from ukrstat.gov.ua

It was a dream of US and EU that Russia would take over the entire Ukraine, so that Russia would have to feed the hostile population and at the same time suffer more sanctions. But thankfully we didn't pick the bait. Now Ukraine is like a "suitcase without a handle" for EU and US: too inconvenient to continue carrying and seems too valuable to simply throw it away. They have to feed it to prevent a complete collapse, but they don't have any more gains from having Ukraine under control.
Miami’s mayor to woo Chinese Bitcoin miners with low energy prices
huh?

I've been using Netflix without a care in the world on Firefox for ages. DRM allowance is up to the user.
Like "Aalborg" being after "Zaragoza" in a Danish sorting. And that's more tricky with "aa" being treated as a single character in Danish.
Yeah its true but disappointing. I ported some email parsing code from C to wasm a couple of years ago and ran into this problem. Emails are encoded using all sorts of different character encodings. Canonicalizing them to utf-8 is important for consumers, but the libicu database for character encoding is several megabytes. So I'm left with a sad set of choices. I could:

1) Not support character encodings outside of ASCII, utf-8 and utf-16

2) Ship a huge wasm bundle or

3) Call back into javascript from my wasm module and use the javascript wrappers around libicu. This would make it harder to use the library outside of javascript.

I'm not sure what the right solution is here. If the character conversion databases can be shrunk to <500kb then I could just ship them with the module. Or if wasm had a better standard library, I could use that. But right now the whole situation is unfortunately awkward.
No new symbols in english? How about emoji?
I'm curious about this for tangential reasons. Does it allow you to pass through actual raw storage and network devices to the container?
The UK does not have South African capital controls. Unless it's for proceeds of criminal activities, in which case you don't really want to enter every transaction in a global immutable ledger!