skysight-inc/HackerNews huggingface dataset:
What? Who eats hotdogs and food carts because of the mystery? I eat hot dogs cause they are fast, cheap, and delicious tubes of fatty salty meat. I eat food cart food cause it's just fucking delicious. I don't know the exact spec, but the Halal meat-on-a-spit is almost always lamb and beef doner kebab. The sauce is mostly yogurt, mayo, dill and oregano. I make my own sometimes.

https://en.m.wikipedia.org/wiki/Doner_kebab
You may have missed the latest news. They’ve walked back from privacy, if not yet explicitly in their advertising.
Private solutions ≠ market-oriented solutions.
This looks like a giant variety of 'Pachyrhizus erosus' or Jicama, which is also a street snack widely sold in Mexico. I'v never seen ones as large as the one in the article, but the watery texture and how it's condimented (lemon, sugar, salt, chili powder) is exactly like Jicama. Seems wikipedia has a reference to ones as large as 2 meters and 20 kg https://en.wikipedia.org/wiki/Pachyrhizus_erosus so it may be like those tree trunk sizes in the article.

It's not Agave. Agave roots are very fibery and dry, there's almost no moisture in them and you wouldn't be able to cut such thin slices like the article points out, agave roots are mashed up to start the Tequila process, here are some pics http://www.todomezcal.com/Elaboracion/molienda.html

Source: I've cut open both Agave and Jicama plants, I grew up in Mexico. You can find Jicama/(fruit) street vendors in most Mexican cities main streets or outside Mexico a mexican market is also a safe bet. They have rough peel, like a potato but rougher, and they're about 90% water.
I’m so glad I started using the open source password manager Bitwarden years ago and haven’t had to think about passwords since. It auto generates a random 20-40 character string of letters, symbols, and numbers for every account (right click an input > Bitwarden > generate pw) and auto-saves/fills it. Can also store passwords for security questions in named sub-fields. The only password I need to remember is my absurdly long and complex Master Password when I install it on a new device. Then it’s just a PIN or Face ID to enable autofill for a session. Even got my whole family on it and gave them a piece of paper with my Master PW in case I die or something.
Alas, we don't live in an ideal world - in fact, I'll go as far as saying that we live in a very *unideal* world.

It is easy to overlook this unpleasant fact though.
It's bad enough being a Brit and told to identify the pictures of Crosswalks. Most of the captcha use American English terms and in the UK nobody uses the term "Crosswalk", the first time I saw that specific captcha it took me a while to understand what it was asking me to identify especially since the quality of the photographs isn't particularly amazing.
Noted. A standalone mobile app is low on the dev priorities list right now, but hopefully we'll get to it someday.

Also, the desktop app (which will be available within the next few days) is 100% local, no internet connection necessary, and 100% private.
Bhoochakara Gadda https://www.youtube.com/watch?v=7wTzOU-tt4U
If groundbreaking science happened on the ISS and someone wanted to know what it was, couldn't find it, asked, and nobody provided any examples or references despite it being pretty attractive to most of us? (The idea of doing science in the zero g of orbit). If that were the case I'd have to start updating my prior that groundbreaking science did happen. Let's see how that plays out over the next few days. But from my perspective it's just fan trivia. I will never go nor have any influence on funding decisions.
The entire canned TLD system (and ICANN't) is a scam. TLDs should be abolished (except for the ones that are still enforced, like edu, mil, and gov), and you should be able to register anything.anythingelse.

Trademark violations would be handled as they are today.

The current mess is an embarrassment.
ISS doesn't use "24/7 solar". Insolation of the ISS depends on the beta angle and therefore ISS crucially relies on batteries for its continuous operation.
I guess. Pretty much everyone was saying that back then.
1password is considering a self-hosted option to store vaults
In my experience, cops won’t do any detective work anymore unless it directly affects them. Your house is broken into and the thieves dropped their wallet with their ID? The cops will not follow up on that and get your stuff back. Murder? Hardly.
Sometimes. But other times, it plays the reverse role. In the Ebola scare during Obama’s presidency, and even early in the Covid days, for example, the government downplayed the danger of the virus, saying (for Covid) handwashing is all that’s necessary and that masks are not helpful.
Is there some evidence to show that people are given RNA tests in the same manner irrespective of vaccination status.

I have seen some articles that put forword the "issue" of "needlessly" testing vaccinated people...
The Action Set was probably the most popular NES bundle and came with Super Mario Bros./Duck Hunt. However there was a number of different bundles with different games or no game even. Nintendo sold SMB standalone until 1994 at least according to WATA's Black Box variants page. Some bundles even came with just SMB and no NES Zapper.

It's still an insanely common title.
Matthew Green does a pretty good job picking apart PGP's issues, although he completely fails at suggesting alternatives and also completely ignores non-email use cases.

https://blog.cryptographyengineering.com/2014/08/13/whats-ma...
Thanks for the read. Pretty cool. The following is my layman's understanding, mostly because it helps me to understand things by typing. Please criticize if I miss stuff.

Noteworthy is Dan Boneh's contribution on this. Given his reputation in the crypto community, it seems he really does believe in this, despite all the controversy as of recent.

They discuss and build upon several security properties, but the most contentious point-- privacy/leakage/scanning of your photos-- is addressed as follows:

Firstly some background-- the private set intersection[1] (PSI) technique in general permits 2 sets to be compared with both parties learning *only* the intersections. In a nut shell, Apple uses this concept such that, if the number of intersecting elements is greater than a threshhold, they're notified.

There are several modifications (Shamir's secret sharing, Cuckoo tables, PKI-ish schemes) to create what Apple calls a ftPSI-AD protocol to optimize desired properties-- performance, integrity, and most notably to me, zero false passes. That is, innocent people will be minimized at the cost of real child-pornographic images slipping by.

Couple noteworthy things that still raise red-flags--

1) they prove that, for honest servers <--> malicious clients, and vice-versa, privacy is not violated for either party, but to me this considers the client as the phone and Apple the server. I'd argue that the phone is actually "Mallory", and you are the client.

You might be honest, but how do you trust the Apple + phone short of reverse engineering it? This is the biggest hole to me, and so I don't fully understand this proof (or, perhaps I have the parties mixed up).

2) Several things are handwaved and/or left "variable to implementation". E.g. Section 5, on "near-duplicate images" that may count twice to this threshhold--

>> Several solutions to this were considered, but ultimately, this issue is addressed by a mechanism
outside of the cryptographic protocol

What the?? Hello?? Perhaps this is addressed in another whitepaper, given this is a theory/protocol heavy paper, but this does not instill confidence.

Or, take this bit from remark 3--

>> If needed, these false negatives can be eliminated with
a tweak to the data structure used

Uh, I thought not sending innocent people to jail was a pretty critical property. You're telling me the server/Apple, who controls the Cuckoo table, can just change this on a whim? How would I hold them responsible/be notified of this?

These "variations" are remarked on several times in the paper. Again, not exactly confidence building.

Overall, while I really applaud this effort, and I'm not as outraged as I initially was, I'm only slightly less so and have a handful of more questions than before.

Again, please correct me if my annoyance might be misguided, given these technical details.

[1]: https://en.wikipedia.org/wiki/Private_set_intersection
In recent news, Biden lawyer shopped until he found someone who supported reinstating the CDC's eviction ban, despite the supreme court strongly suggesting the previous ban overstepped CDC's power, but letting it stand for mostly practical reasons.

This isn't about the ban; it's that a president got a strong signal from the supreme court that he can't do X, then did X two weeks later.
For clarity: the "official" proof has Dan Boneh's name on it, and the "alternative" proof has Mihir Bellare's name on it.
Seems like HN policy is that all death announcements get the "John Doe Has Died" title. Probably makes it easier to avoid weird comment threads proclaiming that "John Doe didn't really invent the robotic sex doll!" or what have you.
Really? The fundamentals or the implementation?
The Lucrative Business of Stoking Vaccine Skepticism
Cloudflare helps k-12 students with Cloudflare one
What I hate more is US-centric of the CAPTCHA. Not only for reCAPTCHA, hCAPTCHA also failed in this regard.

I mentioned before, but once I got present with hCAPTCHA asking me to select 電車 (lit. electric train, but since all trains in big cities in Japan are electric train, 'train' in English also usually got translated as 電車). There's a picture of diesel train in the choice. Do I select it? idk.

Lately I have been presented with reCAPTCHA asking me to select トラック (lit. truck). Half of the choices are firetruck. Do I choose them? Because in Japanese (and probably most other languages too), we don't considered firetruck as 'truck'.

And the complaint that is more common: parking meter. I have literally never saw one, as it doesn't exist where I live. How do you expect me to chose the correct answers with noisy images?
Of course they can be mitigated. Knock out the targeting or launching platforms and you break the kill chain. Plus hypersonic cruise missiles and railguns are still mostly in the research phase, and it's looking like railguns might not really be workable at all.
The Real Engineering YouTube channel has an excellent video on flying wings / blended-wing aircraft, their potential future role in passenger and cargo air travel, and issues with the designs.

https://youtube.com/watch?v=59A8-rKRs-0

As with much of the channel's work, excellent information, and even on topics I'm fairly well-informed on, I learn much.
That's kinda throwing the baby out with the bathwater. My kindle never has wifi turned on so never talks to Amazon. All books are loaded via Calibre.
Gibraltar has an open border with Spain, which is nowhere near fully vaccinated. They've had an uptick (a few hundred cases since April, though almost no deaths). It seems rational to think that most of those cases among the vaccinated were brought there by unvaccinated people from Spain, and are not running wild in vax-to-vax chains of transmission.

The only "news" pieces I could find about Gibraltar having some massive surge were from hardcore antivax websites - the top one was something called welovetrump.
Readers are placing a large degree of faith in the author's self-assessment. I, and I imagine many others, have known people who are totally oblivious to exactly how repellent their personalities are. The author may be extremely difficult to talk to, or extremely emotionally unstable. They mentioned 'years of therapy' in their post. Most well-balanced people get through their life without requiring 'years of therapy'. The author states that they have no difficulty matching with men on dating apps. This does not count for much: The difficulty doing so between men and women is totally asymmetrical.

Men and women really do not seek out the same qualities in one another. This should not be as controversial an assertion as it tends to be in the modern social climate. I feel like the so-called "modern woman" was sold a bill of goods when they were told "What's good for goose is good for gander". This is simply not true. High-status men who have choices available to them in the sexual marketplace will generally choose women embodying more traditional feminine qualities. The author of the post even states as much in a roundabout fashion.
Video of the flight of the model is more interesting: https://youtu.be/XHFcLfSfJWQ
Thank you for stating this. I was just about to write what you said.

The fact that what he/she associates with "black" culture is so negative - and doesn't seem to stop to critically analyse that - but accepts it as "normal".

At the same time, he/she doesn't understand why people from that community might want to create something for themselves - where (for once), they are the gate keepers of their own content (aka "writing their own narratives").
Let's be frank. A few years in the future, the behavior this article is referring to as stoking vaccine skepticism for money, will be rightly seen as fighting the vaccine / medical tyranny hysteria.
Rsspaper: Generate your own static RSS newspaper (PWA support)
We pay for it as any company does — internally. All contributions go through the same process. Just the initiatives that can raise our bottom line get tested and compensated proportionally if that’s what the submitter chooses!

PS: What OS and browser?
I didn't read the article because it looked like click bait.
That’s my question too. I really hope this is contrived! Otherwise I’m going to go to sleep having nightmares about expressions like this in code running important things out there!

Imagine if all the bolts on bridges were just kind of thrown on randomly hoping they hold. That’s the equivalent to this expression.
An Apple employee and a district judge who has been convinced there is probable cause.
It's not feminization of society. That is IMHO a misogynistic way of thinking. It is the hyper-sensitivity, sensationalism and hypocrisy. Just look at this thread.

I am Muslim, so Richard Dawkins is someone I do not espouse at all. But it was upsetting (even a little funny) to see him being cancelled by the humanist society. And him a chief supporter of humanism! See this: https://www.youtube.com/watch?v=3SsHhgeAAhM
I'm sorry to be blunt. But your lack of self awareness is staggering- not something I expected to encountered in the hallowed corridors of HN.
"Computers never lie, kid!"
Selfoss-Webfront: A newspaper style webfront for the Selfoss RSS reader
With attacks on encryption and privacy by governments and big companies, we need more tools such as PGP.

The user should hold the keys, not a government or company.

Technical aspects are generally secondary, and should improve, but we shouldn’t dismiss good approaches due to implementation details.
you are proving the point that aircraft carriers are useless for anything other than bullying 3rd world nations
I'd like to see the response to this question, because it was the first question that popped into my mind.
Due to limits imposed by basic physics there's no way to build a really stealthy satellite. The power source, whether solar or nuclear, necessarily generates a large radar and/or IR signature that can't possibly be hidden from military grade ground sensors.

http://www.projectrho.com/public_html/rocket/spacewardetect....
China roundup: Games are opium, algorithms need scrutiny
This is pure snark and should be downvoted into oblivion, but by 2015 even Phil Zimmerman couldn't figure out the tooling:

"Sorry, but I cannot decrypt this message. I don't have a version of PGP that runs on any of my devices"

https://twitter.com/josephbonneau/status/638772283713060864
Barely related, but is CSAM a new acronym? I hadn't heard it until this fiasco.
TIL that the vegetable aisle has half the species I thought it did.
Dan Boneh’s CS255 course reader and CS355 lecture notes should be a good beginning.
News flash!

Population setup to be reliant on current system will need to change to use different systems.
Where is the cryptographic proof that the only thing you are scanning for is CSAM?

This is just nice window dressing.
So, it's an unclassified botanical specimen. That's not really a "mystery". It's just an unclassified botanical specimen.

This makes the product application of the root even less mysterious:

"It was seasoned with salt, chili powder, and lime; my husband’s had sugar and lime. It was crunchy, juicy, and refreshing, but had no taste of its own."
Thanks. I just found another article in Chinese that also says it’s 關莊（关庄）.
Palm tree heart is layered and fairly brittle, Even if you could slice it as thin as they sell the snack, it would just come apart.

The pictures in the article don't show that arrangement, it's more of a single fibrous block.

I've eaten plenty of fresh palm-tree heart, you either slice it thin it to eat raw or cook it in larger blocks, in say some curry.
Like the U.S. seizing the Panama Canal and nearby lands in the Operation Just Cause(U.S. Invasion of Panama), in order to preserve access to international waters for everyone, right?

It is also ridiculous to say the U.S. conducting the Freedom of navigation, because the U.S. has not signed nor ratified the convention. The U.S. only use its name to enlarge its militarily pressure.

EDIT: forgot to mention not the Taiwan Straits nor the South China Sea is international waters, they are Chinese territorial waters.
We agree that nuclear power is a better power source than fossil fuels on pure technical comparison.

Your opening comment implied that nuclear power would be strictly cheaper because of the higher enthalpy. If all costs were equal, you would be correct. All costs are not equal.
'Signal" implies something indirect, subtle, or nuanced in some way. The Supreme Court was very clear in the majority opinion (and lower courts had ruled) that the cdc overstepped its authority, that it had absolutely no power to impose these bans. The moratorium would have to be implemented by congress - it is their job when things like a brazen violation of basic property rights is involved.

That the cdc would go right ahead and roll out a new moratorium is a stunning failure of checks and balances.
Very interesting - if it's a Desktop app it could replace my usage of Calca.
Seems more likely. Texture and size seem to match the article.

Good find.
Discord migrated to Scylla: https://www.scylladb.com/press-release/discord-chooses-scyll...
Yes. That （關莊） seems about right. I was initially looking for 管莊 or 官莊, both of which would have the same phonetic spelling.
You're absolutely correct. But unless the tools are designed so the average user can easily manage their own keys, it's basically PGP again.

I think U2F/WebAuthn dongles actually could solve this problem but there are all sorts of new problems now like "how do I use this with my iPhone and also with my PC" or "what happens when lose my (physical) keychain with my dongle".
At least as of 2016, a chat app was used as an example of a Cassandra-backed application in multiple sessions at Cassandra Summit. As in, it was used to talk about how one would implement various features using Cassandra - I don’t recall any released chat apps talking about their experience using Cassandra. Cassandra should, as noted in the article, work quite well for write-only data that’s always queried by a known set of keys (say, channel or user name), which matches the basic usage patterns of a chat app pretty well.
The Sumerians – Fall of the First Cities
> we should never expect that it is reasonable to conduct mass surveillance on all the roads in the country to find out where people go all the time.

Utility and traffic light poles have cameras and license plate scanners that can capture up to 5000 plates/sec, even in smaller suburban areas, at an increasingly alarming rate.

EZ Pass and similar are scanned in lots of places that aren't toll plazas — at least that is possibly agreed to via a terms of use.
> The government has asked us to babysit the nation's children so their parents can become more productive workers
80% of global orgs anticipate customer data breach in the next year
There are numerous other e-book readers.
It is disappointing. More so, the general attitude of HN. This witch-hunt culture / cancel-culture has got to stop. It's far worse in my eyes than any so-called "abuse". This is abuse.
You don't need a clipper chip to trace nuisance calls. You need an authenticated network that records the origin of calls, and hopefully passes that through when calls are forwarded and makes it simple and worthwhile to report nuisance calls and aggregates those reports and takes meaningful action against the origins.

Anyway, we're getting shaken/stir or whatever RealSoonNow(TM), so we'll probably have better CallerID. I don't think it'll be enough to solve the problem, without a reporting mechanism, but I guess we'll see in the next couple years.
Judging by the naïveté of this comment, I don’t think you’ve ever been involved in agriculture at scale. Preventing excess production is extremely difficult.
While it is good that Apple seeks formal security analysis over its proposed system, there are some fundamental security assumptions baked in the system:

- It assumes that the server would not tamper its dataset (i,e., the list of CSAM). So it is OK to disclose the information if the client has enough matchings. But in reality, nothing prevents a malicious server adding arbitrary content to the list.

- It fails to consider the vulnerabilities of the perceptual hash. This includes false positives and adversarial collision attacks (https://arxiv.org/abs/2011.09473).

Another potential long term issue is that it is unclear how long Apple will store the safety vouchers. As a storage service, Apple may store them forever. The system is based on Elliptic-curve cryptography. Despite it is the current state-of-the-art encryption technique, it will be broken when the quantum computer becomes a reality in the future. So it is possible that every encrypted safety vouchers can be decrypted in the next 50 years.
The fundamentals. I mean, very much both! But the fundamentals are the more important part.
I’ll respect your “opinions” as a worker, but seriously dang. One year from now on you will be banning the very people i am complaining about now. My apologies, and have a good one.
>your holy CDC and WHO high priests who live in the pockets of big pharma.

Even you are wrong. Because they are not in the pockets, but they are the big pharma. They are the marketing arms of big pharma that are just a much more convincing version of the person in a lab coat in a toothpaste commercial. They just appear to do enough good stuff to not blow their cover, just like an undercover cop might go along with the baddies just enough to not blow their cover.

So if you think CDC/WHO can be "fixed" by changing the funding, you would be very wrong.
If we can't keep people alive on a space station, how will we ever spread beyond a single planet? If we don't start trying now, then when?
I wonder what turbulence in the back rows feels like
Exactly. djb gave us so many gifts. Encourage everyone to checkout https://cr.yp.to which is his site with all his software like mail and dns servers, ciphers, etc. you have used before.
Conscience and Vaccines: Lessons from Babylon 5 and Covid-19
The Space shuttle program was run by people who were in the taxpayer wealth extraction business. As we've seen already, no one really imagined how we could progress on costs when companies actually get into space transportation business
The question presumes the database leak also comes with the server side secret for blinding the CSAM database, which is unlikely (that’s not how HSMs work) and would be a general catastrophe (it would leak the Neural Hashes of photos in the NCMEC database, which are supposed to remain secret).
That's interesting. Are any of these buildings famous?