skysight-inc/HackerNews huggingface dataset:
Here's a quick overview: We have what we call primitives that achieve a certain goal. For example AES on its own does a pretty good job of being a block cipher. However it doesn't fulfil all our expectations for actual secure communication alone and for this we need to use it as part of a slightly larger scheme.

These are the constructions tptacek refers to. How we put together the bits we have in a way that meets our expectations, which we refer to as semantic security. This doesn't just apply to AES but also to public key crypto as well. This might seem quite abstract, so let me put it this way: AES alone doesn't know if the ciphertext you feed it has been modified by an attacker. It will simply process that data with a given key. The decrypting software might notice and report an error (the message will look garbled), and there are circimstances where this can actually be exploited to reveal information. This is not what we expected to happen.

We've learned a lot about this since the early 90s. Many modern primitives actually come with all the parts we would call a construction built in, to avoid potential misuse (although these schemes are for the most part academic right now). Almost all modern systems combine primitives like AES in such a way as to meet our expectations. Except perhaps Telegram but nobody knows what they're smoking.

If you want an actual textbook, Introduction to Modern Cryptography by Katz and Lindell, or Cryptography Made Simple by Nigel Smart will cover this in plenty of detail, and are also good all round introductions to most areas of cryptography by leading experts. I learn towards the book by Smart, but either will be perfectly fine.
That's what I meant by choice. I never said they made the choice to be unhappy. They just made the choice to be addicted. An addiction is not always something negative
Or better, integration test where multiple executables are involved, making regular in-process mocking unusable.
I guess it makes sense, but it's a very very unhelpful suggestion... we're painfully and slowly moving in the direction of teaching users how passwords are less and less useful as long as they are not random, so the ideal alternative is having all random passwords and using a vault that remembers them for us.

But this whole proposition totally breaks if I store my Amazon password in Chrome at work, and then later I cannot access it in Firefox at home, or the native app in my Android phone.
The article makes a mistake in comparing lambda vs operator.add performance. The lambda example is recreating the function each time.

$ python -m timeit "(lambda x,y: x + y)(12, 15)"
10000000 loops, best of 3: 0.124 usec per loop
$ python -m timeit -s "from operator import add" "add(12, 15)"
10000000 loops, best of 3: 0.0565 usec per loop

Instead, it should create a function in the setup and use that for the loop:

$ python -m timeit -s "func = lambda x,y: x + y" "func(12, 15)"
10000000 loops, best of 3: 0.0779 usec per loop
They will not also match the visual derivative.

How can you be certain, and what prevents a generated image from matching both?
It is my understanding that the vouchers are only encrypted with a key derived from the NeuralHash of the photo. Therefore an attacker would only need to find a matching NeuralHash, to decrypt the voucher.

Apple needs the blinding key, because they encrypt their list of NeuralHashes hashes first, so that others cannot see exactly which CSAM hashes they're testing against. Therefore they first need to decrypt their own database in order to get the corresponding hash value from which to derive the decryption key.
The 'snake' who saved the monarchy
If we imagine an offer to buy out 1/3 of a space station, how much would it be? The amount should be colossal.
Please let us know how you did this. I'm stuck on 6 because I didn't want to pay a subscription.
> the most trivial example to demonstrate this is looping on a grid by column vs by row. The by-column iteration will be slower due to bad utilization of the CPU cache, and no compiler will ever rearrange the loop

I think LLVM’s polyhedral optimization (Polly) probably will. I played with it a while back and found that if I handed it a naive matrix multiply with terrible locality, it was able to transform it to rearrange the iteration order and use tiling such that the naive w/ Polly ewas faster than any optimized version I could write. (my optimized versions probably weren’t great, but I tried the basics and got the normal speedups - Polly was just faster).

https://polly.llvm.org/
https://releases.llvm.org/12.0.1/tools/polly/docs/UsingPolly...
I understand, I hope you know that my initial comment was curt, but I’m glad we’re seemingly coming to the same conclusion. I guess the “choice” is just a little different in frame of mind.
@Applejinx, this is interesting. Hey, I manage a forum where someone asked a question about how much Patreon fans make. May I repost your answer? (and credit you)
The premise of this article (that "Once an addict always an addict" is false when evaluated from a rational, scientific standpoint) is flawed from the start because the phrase isn't _meant_ to be a rational, scientific claim.

The phrase is a contextual, emotional expression. Sometimes it's used to express frustration that even after years of work and/or progress, an addict might still _feel_ urges and have to deploy coping mechanisms against them. Other times it's a way of empathizing with someone who is a victim of a relapsed addict's maladaptive behavior. Still other times it's a mantra for recovered addicts to stay vigilant.

The repeated references to "victimization" are a red flag to me that anything this author has to say about addiction isn't inclusive of everyone's (e.g. my own) lived experience of addiction. Admitting the difficulty and struggle of being an addict does not weaken me and prevent me from working towards recovery.
I don't mind squatters in general. It seems like something many people would do. I have bought a domain name for a business 10 years ago for USD 500 from a former music band.

But now, people often want 30k-50k per Domain. If you have a few hundred it may make sense to wait until you find an idiot. But I doubt that it is a very profitable business for many. It may be a long tail business. Many losers, a few make a killing.
Yep. It's great that whoever in New Anystate's 13th congressional district is taking on Big Whatever, but I have no connection to the person, place, or issue. You may not have money and please go away.
I don’t think banning recurring donations would breach citizens United, but I’m not a lawyer.

To my understanding, Citizens United controls what you can do with your money. It does not cover what arrangements campaigns can have to charge you money. You can set a reminder to donate monthly if you want, but that doesn’t mean that PACs can necessarily charge you monthly, in my opinion.

Similarly, the courts have held that the FEC can’t control what candidates say, which is good. But the FEC can force political adverts to make it clear who paid for it, which is also good.
MDGx Free WinDOwS Software Essentials
In my experience, people who focus on the laziness of others are trying to bring the focus at how they themselves are not lazy. There is something similar going on with overweight. What's so difficult? just eat less! look at me! It's a status game, instead of trying to help.

Anyway, to say to somebody "don't procrastinate" is like given a guitar to somebody and tell them "just play!". Sure man, how?
> I assumed that these are reverse engineered from legitimately illegal and problematic porn of known origin

I would assume these were engineered by getting the perceptual hash valies, using distance from the hash values in the DB as an error function, and starting with an innocuous image and hash value, and iterating to a collision for each.
LeetCode – Letter Combinations of a Phone Number
I would like to take this opportunity to note that all NirSoft tools are closed source.

Its nice that "Nir" or whoever has made them freely available, but when the day comes that they are not updated anymore, because of lack of interest, or life changes or whatever, all the effort that went into making them is lost to history. No one will be able to fork the project, or continue on with the work, as the source code was never released.
> If one of your pictures is a false positive hash collision, you'll have no idea until your front door gets broken down.

This is a completely false statement. Besides the fact that it requires more than one match for an account to be flagged and flagged accounts are reviewed manually by Apple before sending a report off to NCMEC thereby catching false positives, you’re notified if your account is flagged and can file a challenge.
Dual 10gbe pcix costs usd 250 from China. It is already here.
Ask HN: Are you using a source code management (SCM) tool that is not GitHub?
The reason for asking is pure curiosity. My impression is that alternative source code management (SCM) tools occupy a tiny fraction of the SCM space. In contrast, GitHub's domination of the SCM space appears almost complete.

If you are using an alternative SCM tool to GitHub what is the tool and why did choose it over GitHub?
I would like to see more discussion about what we do in the scenario where we simply can't get it together - politically, individually, economically - to drastically slash emissions worldwide.

Is carbon capture a reasonable hope? What we can do to increase our odds that we figure that out before we start suffering real population collapse?

How much of an idea do we actually have of what a 3- or 4-degree warmer world will look like? How much do we think we can predict and how much falls under "this is a huge chaotic system and we can't know"?
Lol at the downvotes. Don't ever change HN
What is the recommended way to find out the hosting company of a website, and then the upstream ISP's, when contacting the offending site host does no good?

Thanks in advance.
Very curious about the price. And whether this is a hopeful acquisition to expand on what Swarm is doing, a fire sale of a company that couldn't make the financials work, or some monopolistic move to snuff out a competitor.
This is a lame attempt at trolling.
A name does not make or break a website.

How about https://www.seat61.com/

Yes, seat, train etc were taken. But he build a business out of it.
How do you know the people stifled by the bully weren’t in fact themselves Babbages and Adas stopped in their tracks by this bully? It’s possible that a bully creates more negative force than what they contribute. Here it is not really about cancelling anyone but about having a decent work environment where you don’t get humiliated and screamed at. It is not civilil and unnecessary
> but if you think terms of copyright this won't fly

Wooah there I'm not giving any legal advice. Ask a lawyer.
> Credit card companies, for comparison, charge a few percent. The EU has even limited the maximum interbank exchange fees to 0.2% in 2014.

There are fees other than those to processes a credit card payment.

Each card brand has its own assorted assessment fees. Some are percentage based and some are pre transaction. Your payment processor also has fees, typically per transaction.

For small transaction, such as a $1 app or song purchase, those fixed fees bring the processing cost to a lot more than 0.2%.
> The problem is "virtue signaling" and the ideological capture of politics.

An example: Instead of talking about green buildings, you 'captured' the conversation into politics, repeating well-worn cliches that don't inform us - everyone has heard them before, as you know - but do signal something.
Use a HEPA filter. But even without a HEPA filter, for most shared indoor spaces (restaurants), it’d better to exchange with the outside air than to recirculate unfiltered inside air.
"Change your people, your places and your things" is something I have heard as a recommended best practice for overcoming addiction. I suspect there is some element of psychology involved but probably also physical effects.

It's more or a less a recipe I followed as part of my efforts to address a completely different health issue having nothing to do with addiction. I think we are in the infancy of our understanding of how germs, chemicals, etc. proliferate in our lives and shape them.

And, yes, hopping a flight back to the US and making a clean break with Vietnam -- both the place and the war -- likely helped them make a clean break from their addiction in this case.
Solving the Mystery of IBS
Is this obtained from a set of images leaked from NCMEC and regenerated to match the expectations of the as yet (and probably forever) unknown Apple’s NeuralHash algorithm as well as the threshold used to flag content for internal human review for a system that’s going to be operational for U.S. Apple device users only when iOS 15 is released?

On what basis is a set of forest-like and post-alien-invasion and post-apocalyptic abstract art is going to get flagged (my poor eyes see one or two that could have some symbolism)?
I have a friend who has a similar experience to you. He quit years ago, around when I quit. I had been talking about the book, "The Easy Way to Stop Smoking", so I assumed when he quit he had read it. He had not. He continues to suffer when he thinks about cigarettes and when he smells it across the street or in a park.

I recommended that he read it anyway, and that it is a really useful book for getting over that part of the addiction. He still has not read it. He reads 100 books a year and has not read this inexpensive little 240-page book. Well, some people choose to suffer.
> Who is giving it the quick once-over?

arXiv has 200 expert moderators spread through different fields to filter out papers that are blatantly misleading, unoriginal, non-substantive, or in need of significant review and revision. It's not a peer-review, but it's not a complete free-for-all either.
> Is there any password management application out there that makes sharing passwords or password vaults easy but is also free?

For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance.

// Pre-emptive “edit” before this comment has replies: Folks post a lot of arguments for “free” software any time there’s a comment such as mine — but justifications largely feel like post-hoc rationalizations conflating freedom of information and ideas with freedom from paying for value, ret-con’d stories we tell ourselves. I call BS — unless one is independently wealthy, to spend maker time on art or craft requires one to either earn money or enjoy patronage. Tools for work are more craft than art, and deserve to earn, especially as patronage or maker communes are in short supply. Not to mention the exercise of ethnocentric privilege implicit in demanding something of quality in exchange for nothing assured.
They do vet it. They manually review every flagged account before the process goes further.
Among other things, I assume for testing your code with date handling edge cases like leap years, leap seconds, 2038, etc.
methodcaller can be useful in functional programming, like

close_file = methodcaller('close')
exhaust(map(close_file, files))

where exhaust is a function that consumes an iterator. Obviously this is a contrived example, but it's a weird transformation -- it turns map from 'call this function on each of a sequence of arguments' to, roughly 'call each of this sequence of functions on a fixed argument'
I'm not who you're responding to, but I very much identify with what they wrote. I once accidentally trained for a marathon.

Weaponizing this is unhealthy. It doesn't end well. The reason normal people can't do X and an addict can is because an addict is making egregious trade-offs.

"I know I'm going to mess up my shoulder for the rest of my life, but I'm going to bench heavy anyway"

"I know I haven't seen my kids in a month, but I'm going to shut myself away and work on my side business anyway"

It's collapsing your entire life into a single, simplistic max/min function. It's a quick path to misery.
People want justifications for their choices. Being able to point at reasons why x is better than y makes us feel better about the choices we make. That's why you buy the gizmo that can do 6 things rather than 2 - it's easier to justify in your mind.

We analyze the benefits and costs of our choices, but only on some specific metrics. We remain (sometimes intentionally) blind towards what we might not know. And if others justify things the same way, then we feel more secure in our choices.

If everyone says that x is green and green is better then we believe it. We don't question whether it's actually better. Eg promises of recycling vs actual recycling.
Arguably it's fixing externalities by correctly pricing risk.
I spend 2 months 2 years ago on building a passport data extractor. For KYC (know your customer) purposes.
Unfortunately I did not manage to get to a situation where the extracted data was really useful.
I just tried this JS version (sure the native one is the same) and without changing anything (apart from the training dataset) I got much better results. Exciting.
I'll offer a different take on a "green" building: open to and designed for the landscape it's in. All the old "mother Earth News" hippie things.

Super sealed and well insulated walls are great! but bugs and things get in, can't get out, and you have biological processes (rot, mold) that go on from there. Walls with poor seals on the outside don't collect crap, what crawls in finds nothing to eat, and crawls out.

The inside can be better sealed but should it be? Fresh air is worth a lot; and while your air quality won't be better than outdoors; it won't stay worse for very long either.

Digging into a hillside for at least one wall of the house gives you opportunity to use a large volume of earth as a heat sink. I also gives you the opportunity to deal with moisture issues and drainage problems, everything has trade offs.

This is usually applied to small buildings but much of it scales up. New York's use of radiators to provide heating and air circulation is underappreciated genius.
I hadn't given it much thought before, but when I saw the title on hacker news I clicked on it in order to learn what the answer was, haha. I'm generally good at math / physics / engineering, but much worse at chem / bio / wherever-you-learn-about-oil (i guess geology?). All this to say that I bet there are many adults who "believe" it, but maybe they just haven't thought much about oil.

I think your message was truly sincere surprise and I didn't find it rude, but it reminds me a bit of this article which I've found very useful in my personal life: https://jvns.ca/blog/2017/04/27/no-feigning-surprise/
A decentralized registry is badly needed.

More decentralized technologies are desperately needed.
I only open the webui, log in, copy paste my usernames and passwords. I don't trust that my passwords are safe otherwise.
Only PhDs are paid. I think the salary scale starts at around 51,000 CHF. That's a lot for other countries but it isn't for Switzerland. The exact amount is public knowledge and you can find it if you look. It is slightly higher for ETHZ, but not much.

Bachelors and masters pay fees according to: https://www.epfl.ch/education/studies/en/rules-and-procedure... or https://ethz.ch/en/studies/financial/tuition-fees.html

Tuition is definitely not free, but also not extortionate.
>I typically just throw things into the post queue and they drop every day.

That is a great idea. Thank You I might start doing that as well.
Since when is being risk-aware the same thing as being afraid? Pilots for example are quite aware of most of the risks in flying and follow an insane amount of procedure to mitigate them. But you won’t see them quivering day in and day out because of the massive amount of fear; on contrary, they are some of the best performers under pressure you will find. The notion of being afraid scarcely ever even enters their minds.
> Among Conservative members, 47% gave the wrong answer, which is disappointing enough. But of the 44 Labour MPs who took part, 77% answered incorrectly.

I did not expect such a large difference between parties. Any guesses why this would be the case?
Avatar Creator
before you downvote this comment, consider

(a) CICO (calories-in/calories out) is not the same as the energy conservation principle, you can claim that CICO model does not work while firmly believing in the energy conservation principle

(b) CICO isn't untrue, its just too simple to model the bodies approach to managing the fat stores. Fat storage is very much controlled by insulin and cortisol. If one or both are high, your body is primed to increase your fat storage

CICO crowd equates 7000kcal with 1kg of fat body mass and then you can do calculations that losing 10k of body mass in a year can be achieved by reducing caloric intake by 200kcal/day, or increasing expenditure by the same amount, or a mix of both.

Experienced dieters know that this doesn't work as easily.

I was trying to loose weight with CICO and hang out in the CICO-crowd forums for 2-3 years until I realised I couldn't lose more than 10kg that way until I plateaued. And in these forums, it seemed to be similar for many.

Then, with fasting and/or keto forums I hang out in there are so many more credible reports of extreme weight loss. And that is because water fasting and/or keto reduce the amount of insulin your body emits, and thus allows your body to really tap into the fat reserves it has in store.
CU has nothing to so with donation rules for campaign committees; like Buckley v. Valeo before it, it deals with independent expenditures by entities which are not and do not coordinate with campaign committees.
The NeuralHash code is apparently included in the latest beta: https://twitter.com/KhaosT/status/1424205967122571268
I use Bitwarden in the Firefox sidebar. That provides a persistent state experience.
To be fair, a $150,000 watch can be re sold. High end watches hold their value incredibly well, and in some cases can even appreciate in value. Even luxury cars, which typically depreciate quite quickly, can be re-sold for a significant portion of their purchase price.

The same cannot be said of a $150,000 education, which cannot be re-sold. Perhaps in some cases a high value education can be turned into a higher value career, but that’s obviously not relevant to the hypothetical rich kid getting a film degree at Columbia.
Yes. The odds of someone climbing without supplemental oxygen vs achieving and maintaining weight loss are comparably low, presumably because they are very difficult, and cannot “just” be chosen so simply.
If I could get 10% of the fine, I could quit my job, stand by the road and record all the drivers who did that. I would make bank.

Around here the fee for talking with a handheld phone is more than twice what a headset costs + points off your license. Yet people still do it all the time.
> Around 40,000 American die each year on our roads, this has been pretty consistent for decades.

Isn’t this a misleading framing? It suggests that safety isn’t improving, but the population has increased, as have speed limits and road miles traveled. The per-capita death rates have been falling consistently for decades. See the first graph at the top of this page: https://en.wikipedia.org/wiki/Transportation_safety_in_the_U...