skysight-inc/HackerNews huggingface dataset:
Yes, the original article is long, but it has some paragraphs where all the claims of the Meow authors are quoted precisely.

They have indeed claimed some cryptographic qualities for it, which have been shown now to be false.

In any case this article is interesting for anyone who enjoys cryptanalysis, because it describes in great detail how to break such a hash function or message authentication code.

Meow has serious weaknesses so breaking it is not a great achievement, but the very clear and well illustrated explanation of all steps is quite valuable.

This reminds me of FEAL, one of the earliest proposals (1987) for a cipher to be used as a replacement for DES.

FEAL was proposed by a Japanese company, but it was immediately broken. It was revised a few times, but all revisions were also broken easily.

While FEAL sucked as a real cipher, it was great as an example cipher for teaching cryptanalysis.

Meow belongs to the same class, it is easy to break, which makes it good for demonstrating how to do it.
But this is why you have to determine variances and homogeneity of the samples first. Also, different formula apply depending on this criteria. You can't just do a T-test without any knowledge about control and test groups. (Or you would have to assume the worst case, anyways, meaning, you'll need huge amounts of data.)
This is so close to the plot of the movie Juggernaut[1], and occurred only 4 years after the movie's release -- I can't help but wonder if the bomber was inspired by the plot. That movie had bombs (on a ship, not a casino) with multiple triggering mechanisms: some behind flathead screws, movement switches, photoelectric detectors/triggers. So similar. A really good movie, by the way.

1. https://www.imdb.com/title/tt0071706/
5 figures is the minimum for good ones. $10k ain’t much.

Guess you need to meet richer criminals.
People like to shit on Telefonica/o2, and after half a year of trying to get my bills corrected I can see why. But I've had dual stack on my DSL for several years now without issue (caused by them).
> installed wind power cost per year was 4 times the latest price of installed nat-gas per year

I don't know which state you are in, but for the US as a whole "recent [2018] wind farms have gotten so cheap that you can build and operate them for less than the expected cost of buying fuel for an equivalent natural gas plant."

https://arstechnica.com/science/2019/08/wind-power-prices-no...
> Basically, you get infected, you die.

Avoid cannibalism and you should be fine.

https://www.npr.org/sections/thesalt/2016/09/06/482952588/wh...
Librem Power Banks
> I spend a significant amount of time trying to respond to something in good faith and then someone comes along with their four accounts and downvotes every comment I got because I'm not sufficiently ideological,

As someone who's been in academia for a while, you should be amenable to the idea that unless you have actual evidence as to the single quadruply-accounted person and their ideological motivation, your statement of the case here is with considerably more certainty than is really warranted.

Speaking in general, I've noticed that people are very willing to assume they have intimate knowledge of the circumstance under which their comment / post / etc. got one bit's worth of negative feedback when in fact they have very little to justify their assumptions.

Some time ago, I came to the conclusion this is really a variety of projection, but you could simply see it as symptomatic of the very human tendency to fill gaps in knowledge with imagination in accordance with pre-existing bias.

Unless we communicate perfectly in the difficult medium of online text-based discussion, it's best (IMO) to allow for the possibility that the particular form we chose to state our views or conduct a debate is deficient in a way we hadn't perceived, take the negative feedback, and look for ways to improve it, rather than impulsively reject the feedback by making hasty assumptions about why it occurred.
Number of searches will correlate, but they also have the black box of Quality Score (essentially a proxy for CTR, but they can manipulate CPCs/CPMs other ways), where they can arbitrarily set price floors for given auctions.

There are other considerations, too. Different types of ad clicks are going to have different CPCs. Think map ads vs mainline search ads vs Shopping carousel ads or click-mix by types of queries (home service queries with $15CPCs/high CPMs vs ecommerce type queries with $0.50 CPCs/low CPMs).

Non-commercial queries may grow (or shrink) at a different rate than the ones that are monetizable (pesky freeloaders! why even offer them service if they aren't able to be monetized at every interaction /s).

Maybe search volume growth is coming from APAC countries with lower CPCs/CPMs due to fewer auction participants. When you look at search/search partner CPC over time, decreases due to this may become apparent.

Or simply the CTR on ads is outpacing search volume growth (this is likely-- more clicks from the same pool)-- searches are a finite pool. Make the ads look just like content and more people will click them. Ads used to have a yellow box around them, vs now they match organic results much more closely. I had guessed maybe 5 years back they would start putting ads interspersed with the organic results like Baidu-- they're not there.... yet.

Or tricking people into initiating subsequent searches. The last few times I've used Google for commercial searches with uBlock disabled, I've been dumb enough to misclick on the related items/people also search for cluster instead of going to the subsequent page.
Respectfully I don't really agree that this is a thing. There is an element of discerning that a person is just a jerk, misguided, dumb, or just shitposting without consequence due to anonymity or whatever and learning to disregard their opinions as irrelevant. That is, a lot of internet randos fall into this category.

But I also think if people don't trigger a warning as someone worth shunning that their criticism affects us, especially irl.
I think this seems kind of anti-empathetic. What the author proposes is that being an ineffective remote worker is entirely the lack of real-time comms, unless someone needs the author in real time in which case they are not available without strict time boundaries.

This is not the secret to remote work. The key to remote work is empathy towards the situations that other people are likely to be in. People come to the door, kids are home, problems arise. Flexibility is important.

To be an effective remote worker, you must have a personal queue that allows you to continue doing work when otherwise planned activities cannot happen on time. Work to make sure your calendar isn't full of dependencies, etc. Telling other people how to do their jobs (and how to behave in their jobs) is not helpful.
Interesting. You wouldn't expect that given these pictures[1] and phrases like "creating a five-story chasm in the casino".

[1] https://archives.fbi.gov/archives/news/stories/2009/august/a...
At what point do your clients typically need to go from the Bubble app to a coded app?
Elon is too busy making coal powered race cars and putting military weapons in orbit.
Two explanations come to mind:

1. easier routing tables if you can add meanings to specific bit ranges of your ipv6 address. In the tightly assigned ipv4 networks we have arrived at this is a bit annoying.

2. If the ipv6 conventions were that you set, say the highest 5 hex groups to 0, and use the lowest 3 hex groups for addresses, it would still be 65536 times as large as the ipv4 space and would suit most needs for the mid term future. You could even write ipv6 addresses nicely using e.g. ::ef13:2.1.7.100. This is a valid ipv6 notation! If this space ever got too tight one could open another one of the available hex groups and use two hex group prefixes. But I think when this happens, a lot of configurations would break because they'd assume that only 48 bits are used of the total 128. To prevent router,switch,firewall, etc. vendors from putting any such assumptions into their devices, using the full 128 bits from the start is a good option.
You raise some valid points. All the more reason to remind people exactly how evil those companies are, regularly and loudly.

I'll say this though: I don't think tobacco companies would win in a fair fight, and I don't think they have any intention of fighting on level ground.

They will bribe lawmakers, try to bring in regulation that cuts out private / small growers, and quite possibly do worse. They might add chemicals to enhance addictive qualities, they might shortcut steps and mask the results with chemicals, etc etc.
Part of a process audit is to check compliance, e.g. by counting if there are enough metal gloves per employee - including measuring all hand sizes to check if really every employee even has access to a fitting glove -, by checking if supply orders for PPE match expected consumption, by interviewing current and especially former employees and by checking emails for evidence of staff complaints.
A different opinion:

I think that some of these habits are actually examples that regularly apply to mid-level management.

Mgmt being oversubscribed to meetings, or needing to ensure that work has someone on it, or stepping in and out because of meeting conflicts we view as normal. Additionally, a typical role of mgmt is around barrier removal, and prioritization of existing workstreams, and no novel work unless truly needed. I don't take it as highly ineffective though because it works in our system.

My work also eschews video feeds since we use Teams, and Teams performance seems so bad at scale on VPN........
I like the spirit :)
Is there some specific reason to think that prions are harder to denature than other proteins? It seems like mad cow disease could also spread simply because meat is not normally cooked to ensure that 100% of the proteins in it are denatured.
This is great news! I have been a fan since around 2006 when I was just a teenager.
> I literally can’t remember certain details as if I suffered from trauma.

Toxic workplaces can literally be trauma. I went for therapy at one point, and got a formal diagnosis of PTSD, traced back to my work environment. It is an area of our industry that I feel needs more recognition, as there are a ton of miserable software people in this world. Not all of us, to be sure - some places are terrific, successful, and people really do love it. But that is nowhere near universal, or in my experience even common.

I do feel we need to step up and be more demanding for healthy environments. We get healthy salaries and perks, but wads of cash don't fix trauma. Bad management is not just harmful to the business, it harms us as people. And we need to set boundaries on what is/not acceptable.

Since I've started being downright harsh with my boundaries at work, I've been happier. It also has forced my employer to recognize that they cannot just run me into the ground. I do less. I drop things. Stuff doesn't go as well as it used to - but I'm healthier, and the leadership is actually talking about how to make the environment sustainable. And ironically, I'm getting just as much if not more respect now than I did when I was getting more done.
So all of the manufacturers are doing this? Why is only John Deere (Apple and Tesla for some reason) brought into this? If it’s a industry wide problem in farming shouldn’t we be discussing the issue in farming and not just three companies, two of which aren’t in the AG business?
That "micro" part there implies that the thing is not team-sized.

Libraries help split your project for teams, as do SOA. Microservices are just extraneous splits added into it.

What microservices help with is making data-based native applications and those single page applications for the web. But the usual patterns people push around only make those tasks harder. At this point I believe the entire microservices knowledge base is bullshit.
I was about to comment the same thing. I’ve always hated medium and refrain from reading stuff there when possible (Medium required me to unblock too much on my Adblock) but lately they’ve been outright refusing to show me the content without

“To keep reading this story, get the free app or log in.”

No thanks. I’ll pass.

Personally, nowadays, I think people should just use a static site generator like Hugo, Jekyll, mkdocs etc. They’re pretty easy to use and you can host for free on github pages, digitalocean app platform or even cloudflare worker sites. Yes it’s a little more effort getting started and I guess it’s scary for non-technical people, but at least programmer/tech people who occasionally write an article should do it.
I grew up on a farm in north central Montana. EVERY farmer, even the bigger wealthier ones, all ran at least some equipment that was 30+ years old. We were a mid-sized operation and ran equipment that was at best between 10 and 40 years old as our primary equipment.

A classmate of mine, who now farms their family farm, still runs a large 4WD tractor that must be 50+ years old at this point. They have newer equipment, but the old stuff still gets used.
> Hey, how’s it going? Do you know where I can find X?”

This is BAD advice. Always start with something generic. 99.99% of the time it doens't matter, but you need to be in the habit. Otherwise you will be in that .001% of the time where you send "Hey, how’s it going? About the plan to fire lay off Joe" and it turns out Joe is physically standing next to your target and sees the message. Maybe it never happens to you, but better to give the other person time to respond "in a meeting" letting you know not to discuss a sensitive topic right now.
I think that's going to fall into an argument of semantics.

Can you give an example?
"cryptographically secure" is not necessarily a binary, it depends on the context, and which attributes we are considering. There is no singular "security context".

Meow hash never claimed to be cryptographically secure in the general case, but they did make claims about certain specific security properties (which the article discusses).
What tools did your agency use before Bubble?
Agreed. It’s very out of the norm on HN.

On Reddit though, it’s the standard.
Historians putting down the dark ages is (IMO) a game of Hegelian tennis. Someone has to hit the ball, so that you can refute it. If the previous historians had not framed the dark ages this way, modern historians would be. The process of erecting and dismantling such frames itself is just a way of doing history.

Here's my dismantling... The Carolingian Renaissance was not a renaissance. Frankia had never really been a part of the ancient civilization of Greece, Rome and "eastern lands." It was a roman outpost, for a time, but they never had urban civilization, widespread literacy, political unity or such. Same for the "Scottish Renaissance" or whatnot. The term makes sense for Italy, but that's about it. Before this period, it's all darkness... apart from an occasional roman flashlight.

In any case, the term "dark ages," at core, just means the absence of historical records.
My main issue with downvotes is they are almost always used incorrectly. Including here at HN. They are not meant to be an "agree/disagree" button, but rather a way to filter out content that is not relevant to the discussion at hand. Disagreeing does not mean it is irrelevant, especially if it is well written and in good faith. We should allow all viewpoints that are put forward with proper intentions.

Upvotes are even trickier, almost always people use them as a way to say they agree and people don't react negatively to that. But really they should be "this is well written, and adds good discourse, more people should see it", regardless of if you agree with it or not.
>I just wish a downvote required a comment stating some kind of reason for it.

Could be interesting if it were applied selectively. If a user had a higher number of downvotes to upvotes over a sustained period of time for instance.
I use home and end a ton, but I didn't until about a year ago. They're fantastic, and it's a bit faster than Esc + Shift-I/A in Vim, plus it works on everything (except on MacOS).
Especially when questions from point 1 are not answered.
On their website they refer to multiple certification [0].
One of them is the CISPE and on their website, it is stated:

"Requirement for CISP:

(a) Security measures

The CISP will implement and maintain appropriate technical and organisational measures for the CISP’s data centre facilities, servers, networking equipment and host software systems that are within the CISP’s control and are used to provide the CISP’s service (the CISP Network). Those technical and organisational measures should (a) be designed *to help customers secure personal data against unauthorised processing and accidental or unlawful loss, access or disclosure*, and (b) address the security responsibilities of the CISP as set out in Annex A (Security Responsibilities)." [1]

I do not know about others certifications, but this situation seems to be a clear violation of one of the requirement for CISP. Answer to this requirement is disk encryption. Moreover they are authorized to store medical records and data. I can't imagine that they do this without providing proper disk encryption. in the light of this event, I'm not sure they qualify for all these ceertifications.

[0] https://www.scaleway.com/fr/a-propos/

[1] https://cispe.cloud/code-of-conduct/
Submission flagging is the main place it happens and I personally wish HN will not treat flagging as downvotes, or would just call it downvotes, or would have some sort of penalty for obvious cases of mis-flagging.
We have a dual uipv4 and ipv6 address at home. But both are CGNAT'ed, which really annoys me.
This article demonstrates the key idea that I learned about teaching: the best teachers form-fit their teaching to the students specifically.

It’s your first job as a teacher to (1) listen and understand where your students mindset is, and then (2) teach from that mindset.

Using their vocabulary, their analogies, their interests, etc is super key.

I was a Graduate Student Instructor in college and I LOVED this because to me it was like a puzzle: (1) try to figure out where a student took a wrong turn when learning a complex topic, (2) take them back to the wrong turn and walk with them down the “right turn” until they finally have that lightbulb moment. The key to all of that was speaking/explaining in their language, not mine.
The level of coupling doesn't depend on the deployment architecture at all. It is entirely a function of how much modules know of each others API's.

If I have a monolith where each operation synchronously delegates to other modules within the same process, then this system may be tightly coupled. However, even if it is, API calls are fast and predictable.

If I rewrite the same monolith into microservices, where the same API calls are replaced with HTTP requests to the other services, my system is still tightly coupled. Each API call now incurs xx ms of latency and risk of transient failure. I could deploy each module independently, but doing so would cause other modules to fail. Arghh! Arguably the degree of coupling hasn't changed here, but the implications are that much more severe.

Loosely coupled microservices usually use some highly available message queue or streaming system so services can operate independently. You can still be tightly coupled in this architecture though. If you issue a message, then immediately wait for a response message, you're in pretty much exactly the same situation as above.

Actually loosely coupled services usually issue and consume messages separately. In this case, if one service goes down a backlog builds, but the other service can still push messages on to it.

Some loosely coupled microservice architectures (Starling Bank comes to mind) do use synchronous HTTP messaging. Sometimes you want the services themselves to ensure delivery of messages.
CDC: US STD Rate at Record High Again
You're absolutely right, but it's also true that the phrase "never been shown to" most often functions in a sentence more like "doesn't/can't happen" than "we have no idea."
Microsoft Rushes Fix for ‘PetitPotam’ Attack PoC
It seems to me that in an adult, it may already be too late. How would you remove the existing protein?
> Sure, but there is really no shortage of known unsolved crimes.

That's certainly the nice way to put it -

"If you're murdered in America, there's a 1 in 3 chance that the police won't identify your killer. To use the FBI's terminology, the national "clearance rate" for homicide today is 64.1 percent. Fifty years ago, it was more than 90 percent." ... "Criminologists estimate that at least 200,000 murders have gone unsolved since the 1960s"

https://www.npr.org/2015/03/30/395069137/open-cases-why-one-...
I don't know about this. Most psychiatrists I've known have always recommended to meet in person rather than holding something over call. Always set up extra appointments and made time for them at no expense. The ones who would do anything lower than that would come off to me as sub par (and I've had online psychiatrists too, and all of them were subpar).
Didn't Ubuntu make a phone ten years ago that did that? But they gave up on it. I also thought Samsung phones could do that, too.
> building structures to enforce their own morality

You mean, applications that people voluntarily choose to use? You still haven't pointed out any authoritarianism from Atmana.
Can’t say I really agree that everyone needs their camera on all the time, or that chit chat should be eliminated.

This person should try some % of async remote and then rewrite their post, it comes across as probably well intentioned but a bit inexperienced.
Even Jeremy Clarkson has 1000 acres, and that's in the UK
It’s MIT licensed, so there’s nothing stopping someone from getting it, making major changes, and releasing it as proprietary software for consoles and make a lot of money in the process.

This is why I’m always sad when I see a project opening as MIT instead of GPL.
What is your most complex Bubble app? How hard is it to make changes to it?
n=1 so take it as just that, but I left my dad because we were broke. I suspected a gambling habit after he got evicted from the tiny apartment we grew up in, in the years after my mom passed away and her medical expenses had wiped us clean (cancer).

One day I just stopped returning his phone calls. I was about to fail out of college, broke myself, and couldn't take another phone call from him asking for money.

Anyway, I can imagine someone staying in the picture with their difficult parents if there's an inheritance involved.

In my case, I dipped in large part because of poverty.
Slow Air Travel Recovery Continues: IATA Air Passenger Market Analysis (June 21)
Bipedal Robot Completes a 5K without a tether
Zk-SNARKs, FreeTON and OCamlPro
Online Ad Blocking in the UK- Presentation from the Search Advertising Show 2021
https://archive.is/4a0q8
Contraction or portmanteau?
Major cyber attack could lead to a 'real shooting war'
A real life pro tip is to turn off desktop notifications for chat messages so this sort of thing is impossible.
Maybe a rollout thing, to make sure it's working well and avoid taking down all regions at once?
Regarding #5, for me it depends on the size of the meeting. A large 100+ group meeting? Nah. Small group/team meeting? I think having it on is a good thing.