skysight-inc/HackerNews huggingface dataset:
Cryptographic operations come to mind. I could see someone reaching for this function to get a uniform value below some prime, for example, which might be reasonable if it were backed by a good CSPRNG for the underlying bits - and a good CSPRNG might well be slow enough to make this timing channel easily observable.

Some of the good modern crypto libraries make fairly strong guarantees about constant-time or at least data-independent operations. Granted, these may not be 100% side-effect-free thanks to processor bugs, but at least those are fairly time-intensive to attack. In any case, the concern isn’t the variable number of calls, but the fact that the number of calls could leak information about the results.

EDIT: Well, two of the places your PR has been linked to are RustCrypto (https://github.com/RustCrypto/utils/issues/453) and OpenSSL (https://github.com/openssl/openssl/issues/16500), two places where I definitely would not want to see a significant timing vulnerability. I wish that the folks posting these to crypto libraries would be more aware that this timing issue exists!

To concretely demonstrate the problem: suppose that the 64-bit upper bound is `2^64 * 3/4 = 13835058055282163712`. In this case, if the early exit is triggered, the result modulo 3 must be 0 or 2 (with 50% probability for each): numbers congruent to 1 mod 3 cannot come out of the early exit. By contrast, Lemire's method always outputs a uniform distribution of outputs at each iteration. Lemire's method has a smaller timing leak in that the division doesn't always happen - and since divisions are expensive, this could be significant, but it won't outweigh the cost of an unbuffered read of urandom, for example.
Exactly.

https://en.wikipedia.org/wiki/2021_Texas_power_crisis
AFAIK they don't perm ban IPs, they device ban, probably using some form of fingerprinting.
We dealt through Gusto as well (with Oscar) - they’ll work with you if you have 2+ people on payroll. Never had issues with them.
The pen is mightier than the sword. Authoritarians fear information.
Myxt | SF/Remote | Looking for Software Engineers | https://myxt.com

We’re a very small team attempting to make a big music service. Myxt is building an application and suite for managing music files, workflow, listening, reviewing, payment, sharing, and annotation for digital creators and their collaborators and close-knit fans.

We’re a small founding team (2 people) with a working product and we release updates several times a week. Product development is communal and everyone in the company leads projects, tests releases, and engages with users and partners.

Previously, among our team we started Google Reader and helped build the early success of companies like Stripe and Twitter.

We're backed by Accel Ventures in SF. We’re looking for people who love working on complex technical solutions for creative makers. We’ve built the first version of the application but we’re still very early in its lifecycle and so we’re looking for engineers like us who like having a huge impact on product development.

chris@myxt.com

Tech stack: TypeScript, React, GraphQL, Hasura, Flutter
I think you mean $25/mo for up to 10TB of traffic/50GB of assets, random new account.
Correct that it shouldn't happen, but if this is a road where they only allow one car on a month then driving on the wrong side isn't really dangerous.
Show HN: Remote Choice 2.0 Discover where to live and work from remotely
i wonder if its the case that neurons are something of a Turing Tarpit doing something like implementing a Turing Machine but only using a limited number of operators other basic operation having to be implemented from the ones present (ie making a on XOR out of NAND gates for example) just highly optimized for a particular use-case.
That’s only assuming they are allowed to raise prices without being sued for price gouging.
Along the same likes as fakeroot/fakechroot, I've found proot to be super useful for writing startup scripts for commands which make awkward assumptions about the filesystem layout.
Ask HN: How to implement a wildcard subdomain like Vercel, Netlify, WP, etc?
I am talking about when you create a new blog with Tumblr, you can create your domain .tumblr.com, or when creating a deployment on Vercel or Netlify, you can have .vercel.app or *.netlify.app

I get the gist that it's maybe using a wildcard sub-domain, and some API since the user can create it through the app, but how do you build or what tools do you use to build something like that?

Or if you can point me out to where I can learn how to build something like that, I would be very grateful.
Yeah so Mission and Downtown both have densities greater than the mean Paris population density. Certainly improving density in the outer boroughs is probably a smarter decision but those areas also aren’t where SF builds the larger buildings and likely where the NYMBism will be strongest.
Facebook Messenger only allows to mute notifications for 24hs and not forever
I did my part and purchased something. :P

Seems like they get a big chunk of their yearly revenue from Defcon sales. Makes sense as I bet a lot of hackers might just want to do an in person transaction and this is the perfect opportunity to do so.
The Coding Test Delusion
The coding test delusion:

Point 1: Developers are terrible at estimating how long it takes to get software projects done. This is a universal truth.

Point 2: Developers issue coding tests to job seekers and are always certain that "We confidently estimate it shouldn't take any good developer very long to complete. It certainly wouldn't take any of our team very long."

Conclusion: Your coding test takes too long but your team don't think so.

Outcome 1: Candidates lost, candidates drop your company from the hiring processes they are pursuing.

Outcome 2: Candidate completes coding test - your development team "felt it took them too long, certainly longer than it would have taken us". Candidate is marked down.

Your team's response: "Well they weren't very good because it's not a hard test, it shouldn't take long."

Guaranteed: your team feels this is not a problem for your company coding test.

What no company ever does: require every current team member to complete the coding test, measure the time and blindly assess each others test result.
> As an aside, Reddit is great if you're in the right subreddits and clear out the junk that appeals to the broad public or is frequently gamed by political actors.

I disagree. To me, going hyperbolic to make a point, this is like saying there were some really great bars in 1930s Germany.

It kinda doesn’t mean much if you bury your head in the sand here. It’s a bad company that does bad things. That’s cool you like some people who agree with you, but these people would be cool elsewhere too.
Apple Has New Tools to Protect Children. But at What Cost?
Exactly. I pretty much love everything about Python except its ternary operator. I also prefer C’s.
Are you kidding? The main site renders itself completely useless within 2 clicks if you are unathenticated. Reddit has become a case study in dark patterns.
WebRTC doesn't expose whether it's a cellular connection?
git is FUCKING HARD due to its tons of poorly designed misfeatures. The index/cache/staging area is the worst of them. If git wants to make any progress towards actual usability, this mess needs to be untangled with prejudice.

Other tools have none of this overly stateful bullshit. When I want a file to be included in the next commit, I don't want a silent, implicit copy to be whisked away into some interal storage the moment I flag it. There is NO reason why merges need to destroy the contents of that same storage area. The totally confusing semantics of the reset command with the three nonsensically named modes soft, mixed and hard are also created solely by this particular misfeature of a magical hidden storage area.

There is also no reason to even support destructive history editing. Immutable history is the correct choice. The mercurial evolve extension, for example, supports rebasing without destroying history.

Also, the combination of not being able to close branches instead of deleting them and not storing branch names in commits makes git history completely undecipherable when you have to go back more than a few merges. You might just as well throw it into the garbage bin.

Just take a look at competing tools (free and commercial) to see what's being innovated in this space and how this widespread obsession with git is in fact preventing much needed progress.
I try to do this but then I realize I'm writing python.
if 'we' means Public Health England, then you're correct. but other countries aren't reporting that way.
What kind of pen!!! ???
> With growing car theft in the US

Odd, this got me wondering, and I can’t find any reliable statistics that show a rise in car thefts. Everything I see shows a pretty steady decline over the past 30 years in spite of an increasing the number of cars on the road.
GitHub repos are the new subreddits. If they're not, they should be.
> But Finnish is a whole another ballgame - "kaupassa" ("kauppa" being "a shop").

Not all that outlandish either -- a cognate of Swedish köpa and German kaufen.
I haven't really had art classes, no

The problem I run into when I'm brainstorming or thinking about high-level architectural/modeling questions, is that if I start drawing something I get focused on how to represent my current idea and I stop actually developing the idea itself. And then if I change my mind, I have to go back and erase or strike things out instead of just redirecting my thought. Etc.

Usually if something is new for me or ill-defined, I take a walk or a shower and work through a rough idea of the big picture (usually realizing and iterating on some of the high-level problems) without any medium.

And then when I sit down to start seeing what that established will look like more tangibly, I usually go straight to the computer. Though I will say, I sometimes turn off type-checking when I'm just writing the idea out the first time. It can get really distracting when the code is going to be "broken" for the first 90% of the process. Once I've given it a look over and feel good about it, then I turn editor hints back on to nail it down and get it running.
Executives at hedge fund Renaissance to pay $7bn in back taxes
Does everyone remember how back in October 2020 California's governor Gavin Newsom decided that the state would conduct it's own safety review of vaccines over fears that the Trump administration would pressure the FDA for premature approval? That was a bad move which undermined public confidence in the vaccines. The FDA needs to be allowed time to follow their process without political interference from either side. If they rush and screw something up they'll destroy public trust for a generation.

https://www.latimes.com/california/story/2020-10-19/newsom-c...
I build container images using plain old tar, gzip, sha256sum (from GNU coreutils) and jq. No need for root access, etc.
Entirely different than just "OK" vs "OK.".
What you describe would not be possible, as it would violate a number of rules applicable to 501(c) entities.

As described, the big concern with your hypothetical is private inurement.
Ban evasion is a reddit wide rule. First one sounds subreddit specific.
> You can accept it or you can ignore it. Either way, the shift has already happened whether you’ve realized it or not.

You viewing periods as threatening is not a shift that has happened to me. It's a shift that's happened to you. If I were to "accept it" as you suggest, the only thing that would happen would be that I started misinterpreting my friends and taking offense where none was offered. No part of that is a good idea.

You seem to have a lot of difficulty with the idea that different groups might not communicate in the same way. Do you really believe that everyone using 88 as a fun way to say "bye" is really signaling Nazi sympathies?
Isn't forcing a business to do business with someone dangerous to a free society? I've had toxic clients in the past; I shouldn't have been allowed to discontinue the relationship?
> A lot of people seem to care more about their anger towards unvaccinated people, and their desire to shame them, than actually stopping the pandemic by taking strategies that would actually get them vaccinated.

Completely agree with this. Of all the vitriol I see…even on this very thread, it feels more about finding a socially acceptable way of venting hate about groups of people (obese, rural/religious/right-wingers) that they already hated and complained about even before COVID-19 was a thing.
Isn't this the feature/point of Reddit though? Reddit itself having little moderation/rules (though, they're moderate the whole site more and more), and lets communities moderate themselves to impose whatever rules they want to?
Sure, once you cherry-pick the most trivial imaginable example ternary expressions are easy enough to read. First counter-example which came to mind:

print("yes") if random.choice([True, False]) else print("no")

Does this do the right thing? I was pleasantly surprised to find that this is indeed lazily evaluated, but that's not at all intuitive: first because `print("yes")` comes before the conditional (note that the Lisp example had the conditional first), and second because not all popular languages work like that.

There are lots of examples where ternary makes things obviously harder to read, such as when at least two of the three expressions are non-trivial. Which one would you rather read?

if some_complex_condition(using, four, different, parameters):
do_a_thing(now, using, five, different, parameters)
else:
do_another_thing(with, three, parameters)

or

do_a_thing(now, using, five, different, parameters) if some_complex_condition(using, four, different, parameters) else do_another_thing(having, three, parameters)

(or

do_a_thing(now, using, five, different, parameters) if some_complex_condition(
using, four, different, parameters
) else do_another_thing(having, three, parameters)

after Black.)
Just as extreme but on the other end.
> Seems that for HN if you are not Zuckerberg or Gates you are nobody...

I appreciate that you are possibly referring directly to your quoted comment about Econ 101, but on HN the reason Zuckerberg, Gates, et al are worshipped, among many others, is not because they are rich, but because they have been very successful at bringing their vision of the future to life, and having an outsized impact on society.

I suspect for many, Brian Chesky is just as well regarded as Zuck. Hell, Tim Berners-Lee probably is more respected here than anybody on the Forbes 100 list!
The data clearly show that jobs at Walmart and McDonalds are the route that millions of people choose to improve their financial well-being and to kick a dependency on government handouts. We should want to see more employers raise the fraction of their workers on welfare benefits, not less.
Excess deaths includes both deaths due to COVID itself and deaths due to society's response to it. We overcounted the former, but the presence of the latter more than makes up for that.
R5RS ;)
As it happens, Unity has its own version of this problem, where it pretends that a non-null dangling reference is a null-reference:
https://jacx.net/2015/11/20/dont-use-equals-null-on-unity-ob...
Founder of Freeflow.Team here, we're a freelancer marketplace to find excellent developers from all around the world at great prices. Check us out at: https://freeflow.team
>> Some people want to develop intellectually

OK do it. I don't want to pay for it though.
Twain's observation is timeless: Lies, damn lies, and statistics.
Ban evasion seems fine to prevent abuse.

Subreddit rules against name calling seem fine if that’s what they want to do in their own space.

What’s the big deal?
Or, intercept non-encrypted http request, and inject popup messages via javascript... like ISPs have been doing already
Hence Apple thriving, and likely continuing to take market share.
We could use a top-down weighting to modify the incentive topology such that local production of widgets is financially advantageous.

We could call this system “tariffs”.
The fundamental problem of Liberalism is that it thinks the world is far more stateless than it actually is. I guess the idea was knocking down feudalism would make everything liquid and fast converging? Orthodox economics = equilibrium theory only bakes in the problem by definition.

We now know empiricly that this stuff is not true. This pulls out the rug from under so many of Liberalism's precepts, and yet Liberalism hasn't adjusted.
The article you linked seems to be about the UK, specifically, and the reason to suspect over-counting of covid deaths in the UK is based on covid death comparisons with nearby countries.

The economist study is global, and is counting excess deaths during the pandemic, whether directly due to covid or not. In addition to the deaths we've counted from covid, there may be uncounted covid deaths, as well as deaths that happened because the hospitals were full, or people were avoiding going to the hospital, or because we've got an increase in drug & alcohol use during lockdowns.
> It's the digital infrastructure you now have in place that is terrifying. If you don't understand how, once these tools are built, they will be abused, I don't know what to tell you, my friend.

I can almost guarantee the infrastructure this is running on is USA owned AWS.

> You all in Australia are struggling in futility against one of the strongest forces of nature.

Well actually, most of the states in oz have delta either under control/trending down towards elimination again, or in the case of tazzy, totally eliminated. It's only NSW that's struggling (which co-incidentally is the state giving people the option of quarantining at home with the use of this app).

Personally, I'm from over the ditch in NZ. Our delta cases peaked at 84 a week or so back, down towards 28 today after two weeks of a pretty relaxed lockdown. Most of NZ is now out of the hard lockdown, and probably should be back to normal in another couple of weeks. I'm looking forward to yet another covid free summer, with no worries about masks, crowded sports stadiums and camp grounds or me/anyone I know personally getting the virus.

Yup, we're bound to catch it eventually I'm sure, but I'm looking forward to getting it much later when we have better treatments that don't involve horse worming medication. Treatment/mitigation is much better now than it was 18 months ago, and I'm sure in a year or so, it will be better still.
Pretty much every instruction that doesn't start with the name of some known crypto algorithm (and maybe some that do) are useful for general-purpose stuff. I've had a good deal of success making Intel's GFNI do "weird off-label things" (bit-matrix transpose and a lot of the missing byte shift/rotate operations just scratches the surface). CLMUL is a good one for all sorts of things, as it can be used for XOR-parallel-prefix (we used it to detect quote pairs in simdjson).

I don't know whether I resent crypto because it gets the cool instructions at low latency because it's so important, or whether I love it due to the fact that even the "leavings at the crypto table" are computationally useful.
How can be mobile first if they block you from using a mobile browser after the first click? Reddit employs dark patterns to force user tracking.
As long as netlify doesn’t get in the way, yes. I used this rather than my own domain as I’m more likely to let my own domain drop.
I believe they modeled the behavior of a model of a neuron, not an actual neuron. Models are intrinsically simplifications of the reality.
A rare situation where everyone feels like they came out ahead. The us govt gets to say they clawed back 7bn in taxes. And rentec gets to keep the gains from having invested the 7bn for close to a decade at their absurdly high rate of return. Smart!
> Retry downloads without SSL if that fails, as some Python do not have working SSL. Fixed in 0.6.14.5 already.

Is this a good idea? If I understand correctly, if an HTTPS request fails, it falls back to HTTP. So an attacker could just block the HTTPS request, then MITM the HTTP request.
When I first started using python, I assumed it had a normal (c-like) ternary operator and was a little surprised to discover the syntax we're talking about. But after some time, it actually feels very natural to me, and is arguably more intuitive than ?: syntax. I assume this is where the author is coming from.
I did that once: had a Unicode related bug somewhere in a code that fit nicely 2 A4 pages so I printed them and debug when have lunch with a friend. I was able to think a quick solution that involved few changes, probably not what I would have been go for if using a computer. One of my most debugging experience so far. Also I fixed another bug (or more likely something not in the requirements at the time) and still use that portion of code today.
Then make it both unique and worthless. Every other country has national ids, and you gain nothing by stealing it, you actually present it almost everywhere, same value as a driver's license. In fact, when pulled over, you are asked for the license and the card, to make sure the license is really yours. What you cannot definitely do is transact with only your nacional id, that's silly. Its identification, not authentication. Your pins, passwords, signatures, presence are required in addition to your ID number to do anything. While in the US, I always thought it was weird the importance that such a document was given, to the point that even laminating it is taboo, complete with a notice written on it. They tell you to not walk around with it. Never understood how it got to this point.
Foundation. Wheel of time. Lord of the rings. Marvel movies. James Bond. You’re right, lots of other media that drives book sales.

7 habits, win friends and influence people. There’s a decent amount of examples.
I don't understand why this problem would be self-perpetuating. It seems to me that if the cost to ship items rises, that would incentivize investment in building more containers, deploying more ships (perhaps converting abandoned cruise ships into container ships), paying dockworkers extra overtime, etc. Why doesn't the price system end up correcting all these issues?
I've wondered if the excess deaths due to covid could be contributing to the worker shortage we're seeing in many industries in the US. I believe we're at more than a million excess deaths in the US since the start of 2020, and while many of those were older people already out of the workforce, a significant number may be people who would otherwise be working in food service or retail.
LOL, they had a good run at least but the writing is on the wall.
I used to do this before I had access to a computer 24/7
Isn't it probable that people most at risk are also more likely to spread the virus? They would shed much more virus, wouldn't they? So it's not so simple, someone who has a better functioning immune system represents a lesser risk to others. Is there a counterargument? I do recall some studies acknowledge this, but I don't have a reference.
A First Look At Serverless Cloud
Same. The consolidation of departments and powers into the new Department of Homeland Affairs under the current incumbency has been an ominous kind of creep towards it too. It feels inevitable that there will be support for this move from the talking-heads who are currently inciting freedumb protests, because either Terrorism or Think Of The Children.

On online identities linked to passports - the US already asks this kind of in visa / ESTA applications [0]. It’s not currently mandatory to answer, but I get the impression that’ll change.

It’s hard to believe the line that any of this is directed to reducing online bullying, if anything it makes doxxing trivial. Law enforcement already has powers by warrant to do much of what this contemplates, and the rest is not somewhere I want Peter Dutton et al to be able to see.

[0] https://www.esta-online.com/blogs/esta-social-media-question