skysight-inc/HackerNews huggingface dataset:
Do we have some kind of proof about the backdoor?

It has been quite a while since security researchers publish about a potential backdoor in Dual_EC_DRBG, and even without the backdoor, they found it rather weak. It was even before it was a standard.

Then, there is mentions of the NSA intent on backdooring encryption standards, and the surprising push for making that dubious algorithm a standard.

It makes the scenario of a NSA backdoor very likely, but strong suspicion is not a proof, and yet, all these articles make it into a fact, did I miss something or do they jump to conclusions. Not saying they didn't do it, they most likely did, but if I get accused of a crime one day, I hope that the court will be held to higher standards.

And there is many things I don't get about that story. Dual_EC_DRBG was suspicious from day one, I can't imagine an enemy of the US using it except to transmit misinformation, no need for leaks, the very existence of the algorithm is enough. If the story is true (it is a NSA backdoor), then it is really a show of incompetence (like the whole mess with Snowden, really), or maybe part of the plan of a mastermind, I bet on the former.
i assume the poster means running flask in production without something like nginx in front to serve as the webserver.

the flask build in webserver is not production grade software in my opinion.
In a large organization, it's quite common that some division buys a tool on their own, without the other divisions knowing about it. Especially in a company as large as Facebook. So realistically this means someone from Facebook gave them money at least once, not that all of FB is a customer.
So much tastier too.
> Keep all of your business logic and as much of the rest of your code as possible in platform-neutral …Something you can call into from all native platforms.

This to me is the big win of Webassembly: you can compile with gcc/Clang to target it as well. It makes the browser another “native platform”

I actually agree and chose C++ as well, but eluded that part of your quote because it could be a more general choice than just those two.
Could a setup like with Amazon Go stores help here? Let in only customers with a verified account.
I don't think Python gets semantic whitespace right. It requires extraneous parenthesis and has an impact on lambda functions, making them way less powerful than they should be.

Haskell got it right.
This seems like it should not be very difficult to do for yourself if motivated.

xterm.js [1] is pretty good.

Something like gotty [2] and a engine for getting a container with a git checkout started should be relatively straight forward.

[1]:https://github.com/xtermjs/xterm.js/

[2]:https://github.com/yudai/gotty
If you can’t get promoted internally, try getting promoted externally :)
> You seem to understand that these have prevailed because people like them.

that's not in any way why I would say anti-files have won. cloudification and applicationization, stealing the common material & putting it into something closed/proprietary/untouchable has happened for a lot of reasons (some of that is simply that we haven't yet figured out how to make online objects as personal/accessible as files were; projects like Tim Berners-Lee's Solid or the older remotestroage spec attempt to address this), and I don't think the users liking it has much to do with it.

if there were more examples of online, connected software that had malleability, that had a file-like option, i'd be way more willing to negotiate what users want. right now that feels extremely premature. right now the technical gaps, to get as good as files were, are too high to begin to say.
You should probably re-read the quote I was referring to.
I updated the README based on feedback from here...

Once there is any documentation or blog post for the new podman machine feature, I will link directly to it
GitHub CLI 2.0 supports extensions
The shiny candidate outside the company is always somehow more appealing than the candidate you know 99% of the attributes of.
> it would be a pity if its meager resources get squandered chasing open ended projects with ill-defined criteria for success.

How so? The closest equivalent to this project was Wikidata itself, and that has been wildly successful beyond anyone's expectations. Besides Wikipedia itself and other WM projects, every Big Tech software assistant is relying on it.
> - weak nutritional content of our food;

Today we have the most nutritious foods in history. Don't make things up.

Today's potatoes are 4-6 times bigger than 19th century ones. Tomatoes 3-5 times. Most fruits, got just enormous.

Even "watery" leafy greens are actually getting more meatier, and starchy, and with more folates as everybody seem to be crazy about them.
> You can't even buy a house if you are a Dene that does not live/work in that city. You can buy a house and live there. You are free to do so, but you are not allowed to buy a house to rent it out.

It seems that you're saying the restriction is tied to residency and not citizenship, which implies that non-citizens can purchase property as they don't rent it out (even if they don't actually live in it?).

This may not prevent the problems that come from some foreign property investment that is driven by seeking to protect wealth from government seizure rather than to produce passive income.

What about corporations? Can they, for example, purchase property in order to give employees rent-free housing?
For those who read the comments before the article, here's the punchline: read this book if you want to understand how profit in medicine corrupts medical professionals to the point that they can become perfectly willing to kill their patients, for the right price.
It was quasi-assigned to me (I had the option not to work on it, but management would've been disappointed with that).

Management thought of me specifically because I'd built a reputation as someone who could tackle difficult projects, particularly those surrounding browser UI. I'd worked on the last 3 visual redesigns of Google Search (as the first engineer of the 2010 one, a consultant for the 2011 one, and the tech lead of the 2013 one), plus I started the Authorship project within Search, plus I'd done a bunch of little visual easter eggs like the [let it snow] holiday one (also a project that many people thought was impossible because it was started after the last binary push of the year). Management takes note of who delivers; it takes a while to get noticed, but once you are you get all the high-profile projects.
The difference between App Store apps and web apps is that many App Store apps work on local files or files stored in iCloud that are never ingested by the company that provided the app.

This is not true of web apps.
Did you even read the article? The author doesn't say anything like that all.
I tried the software and then when I opened an app the screen became full of windows. Never seen that before. I have to stop the computer.
So I desinstalled it. That seem a good reason to not use it to me.
how can you people live like this?
I personally use unRaid, but i also like to tinker, and very much have had to tinker with it. I would recommend it if you want power, flexiblity, etc. (i personally choose it over FreeNAS for the VM's).

My friend however wanted a no hassle solution, he brought Synology and it just works, he's never had to mess with it. To
quote him: "if Apple made a NAS"
how can you ppl live like this?
Virtual Meet,Sat.Sep4,11amPST,Covid-19 AndPerverted Education
Covid-19 has made a global appearance at a time when world culture is entering a stage of contraction. Conditioned thinking is dominant and skeptical thinking a threat. The fundamental mechanism of science is undermined.

This is a sharing meeting, not arguing. I will advance the idea that everyone beholden to institutions is captured, and no institution is more captured than the institutions of education, which includes schools for children and the media for adults. Then, I'll open it for anyone to provide information.

Join us at this free meeting to hear first-hand information about science, education, & vaccination. Free registration on Eventbrite for meeting URL:
http://ow.ly/tMvN50G1lcu
This is obviously the end plan.

I support all measures against child abuse, but child abuse is always the trojan horse.
Prints "hello, world!", assuming sizeof(int) == sizeof(char*) (and the same alignments and ABI, etc).
Whatever pharmaceutical companies have done, the drug war is what is directly responsible. Stigma, limiting options for treating addiction, and favoring extremely potent drugs are the big culprits here. Blaming a specific family or industry is a convenient cop out
Oh, someone doing exactly like I had in mind too, how cool. :D
There was a time period on earth (the Carboniferous period) where there was an immense amount of oxygen in the air and trees didn't break down, this is what allowed dinosaurs to grow so large.

Then fungi and bacteria appeared that could feed on lignin and cellulose and changed the world. If it happened once it could happen again.

https://www.nationalgeographic.com/science/article/the-fanta...
When you apply for the next higher manager job, don't get it and end up being managed by your rivals, it takes much reflection to suck it up.
That's one of them, and the least interesting of both. I remember that the other one was way more concealed and involved a global variable or something like that and it didn't seemed that the code was doing what was actually doing.

There was an amazing blog entry which explained it, but can't find it right now.

Edit: I don't think this was the one I read, but it's similar.
https://cryptologie.net/article/316/junipers-backdoor/

Basically, Dual EC was chained to another PRNG, so the output should have been robust to crypto vulnerabilities discovered in any of both. The thing is: the second one was never called, because the for's index(a global variable) was set to 32 inside a function call, so the loop never run.
Housing First [pdf]
> Some new standard?

Obligatory xkcd: https://xkcd.com/927/

I'm not sure. From an implementation POV, re-starting wUSB (https://en.wikipedia.org/wiki/Wireless_USB) again would be an easy way out - for a lot of things that can be done over Bluetooth there are USB device classes and drivers already, so all that would be required on the OS side is support for a discovery/secure pairing mechanism.
I am in my late 40s. Most of the proponents are a lot younger. They haven’t seen the impact it has on them until they get older. That’s not bias.

As for other points I’m an atheist with zero religious values at all. I have used it myself as well. And I’m in a country in a city where no one gives a crap. I’m about as unbiased as you can get.

As for sins, I’m a pretty big fan of them as whole.

The issue here is with the perception that it is harmless which it is definitely not.
Vulkan is a drawing API. Like OpenGL, It does absolutely nothing about the big 4 of (G)UI development:

* text entry
* file browsing & selection
* menus
* list/tree views

Like OpenGL, it also doesn't even provide an event loop or even an event (user input) layer.
In your opinion, did the multi-decade drop in American crime, regularly discussed by academics who have some tentative theories to explain it, happen or was it all faked?

https://www.brennancenter.org/our-work/analysis-opinion/amer...
Oh snap!!
When I look at pictures of very old documents I can see that 1800's font preferences are different than 2000's font preferences. Now that fonts are digital and can be shared in an instant, instead of pieces of metal, do you think the preference drift will persist?

I wasn't so much trying to downplay the value of typography outright, but rather downplay the marginal value of 2022 typography over 2021 typography.
The Neo-Classical Interactive Fiction of 1995
> why not handle quarantine the same way?

Because the pandemy has a huge societal cost that can be alleviated quickly if you get people to follow the law.

If you get people to stop stealing or assaulting for a month using measures, it won't cause less stealing or assaulting afterward.
Location: Moscow, Russia, UTC+3

Remote: Preferred

Willing to relocate: Depends on location

Technologies:
* Go
* Python
* PostgreSQL
* Distributed Systems
* Algorithms

Email: birykovegor@gmail.com

Hiya!

I'm an experienced software engineer with over 7 years building complex distributed systems and solving business problems with code in various domains: biotech, cloud e-commerce, development infrastructure and more.

I have experience working at very different companies (from giant FAANG-like enterprise to 10-person start-ups) in both London, UK and Moscow, Russia. Now I prefer remote work, but open to relocation if there'll be a right opportunity.

Cheers!
Jira in particular is everything I dislike in software. It's feature bloated, overly complex and yet, despite the overwhelming complexity, it's hard to shape to your needs very often.

I want something much much simpler. Stick to the worse is better approach and adhere closer to the philosophy of doing one thing well.

https://en.wikipedia.org/wiki/Worse_is_better?wprov=sfla1
> Apple is absolutely and completely compromised by an authoritarian regime

I don't understand this, they can just be legally compelled.
This is all true, and is definitely a primary factor.

It's also true that LA and NY draw people from all over the country. Have you ever been to LA or Manhattan? Nobody that lives there is from there. Those places are alternate-reality bubbles, for sure, but lots (most?) of those people were born somewhere else and likely grew up in a more representative part of the country.

So, I think there's also an element of "artist" types rebelling against what they felt were stifling suburban upbringings?

Totally unproveable of course. Just a feeling I've always gotten.
Specifically that article says that firms vulnerable to piracy file patents, copyright registrations and trademarks.

All of those are tracers for innovation because they're not supposed to give you any of those for something that isn't new, but they are really weapons one would use against pirates, imitators, competitors, etc.
That is a bad idea. It leads to vigilantism, or even worse, local organized crime steps in with attendant protectionism racketeering.

With the American System each year failing a larger and larger percentage of the population, while the upper elites continue to hoard wealth and starve the government, then it makes more and more poor people turn to illegal means to make money.

Much like drug gangs in the inner city. However this will also turn into the nasty spiral of gang-controlled neighborhoods chasing out legit economic activity and becoming even more poor.

What we need is a decent civil society. But America is an oligarchy and they've figured out how to use social media to block any meaningful populist progressive reform by organizing a sufficient opposition with astroturfing and fake news.
Autodesk | Remote US & Canada | Full-time | https://www.autodesk.com

Autodesk is the global leader in design and make technology, including industry-leading 3D design, engineering, and entertainment software and services, that offer customers better outcomes through automation and insights for their design and make processes.

We’re hiring for a range of roles to join our team and build the next generation of construction productivity software. Our customers are building some of the most amazing construction projects on the planet, and Autodesk allows them to be radically more efficient.

* Senior iOS Engineer, Remote US & CA: https://autodesk.wd1.myworkdayjobs.com/en-US/Ext/job/San-Fra...

* Senior Frontend Engineer, Remote US & CA: https://autodesk.wd1.myworkdayjobs.com/en-US/Ext/job/San-Fra...

* Senior Software Engineer, Remote US & CA: https://autodesk.wd1.myworkdayjobs.com/Ext/job/Texas-USA---R...

* Software Engineering Manager, Remote US & CA: https://autodesk.wd1.myworkdayjobs.com/Ext/job/Atlanta-GA-US...

And many many more: https://autodesk.wd1.myworkdayjobs.com/Ext/7/refreshFacet/31...
Huh. I had not though of the rekeying issues before. Glaringly obvious in hindsight. The question of "how can you ensure that this system will not be rekeyed to respond to someone else" is a great one. The best answer is "there is nothing that can be rekeyed."
I'd argue the same goes for technical leadership that were hired in originally as senior/staff/principal. The bar for breaking into a technical leadership position at every company I've worked for seems impossibly high, while they've been more than willing to hire that from the outside. That doesn't just go for myself, but the colleagues I've seen leave as a result of not being able to break that barrier.
> Yield increase is not really a winner if you have no water, if you are at war, if you don't have money/land, or if corporations own your society.

Very much true. We eliminate the global hunger if we can eliminate food wastage in US supermarkets alone.

US supermarkets literally throw away enough food to feed all of famine struck countries, and probably even twice.

> We reached a state in humanity development where any improvement in agricultural yield for basic food is not only unnecessary, but will lead to more problems than solution.

I push for an idea of unification of the world under a single global democratic government.

The solution to the global problems, must be global.
https://www.rapid7.com/blog/post/2021/09/02/active-exploitat...
I'm absolutely convinced this happens -- with roles, with capabilities, with salary. It's got to be related to normalcy bias and other anchoring phenomenon. Probably less than half-conscious, too.
Forgot to add about the distros: I didn't mean Ubuntu and Fedora are bad in any way, but the opposite. I think they are very good for an average person who looks to escape Windows. Personally I think Fedora Workstation is much better than Ubuntu, but very similar in that very departments: being very popular and yet working out of the box.
It also sucks to be a single rollerblader on a multi-use path with a gang of bikers who can't seem to understand they're taking up both lanes designed to be used to travel in both directions.

Nobody knows how to use anything even resembling a road.
The position in which you placed the console was a separate issue that caused the same failure. The stress from the mounting bracket was a bigger factor.

I tried looking for a good visual example and this article describes the issue, and fix, pretty well.

https://www.instructables.com/Fix-the-Red-Ring-of-Deathwitho...

The fix would only last so long because once a ball grid array looses connections there is no real fix. It takes very special equipment to create those connections in the first place.

If you search "ball grid array soldering" on YouTube you'll see what I'm talking about. They're a real pain to try to fix once broken.
The post renders completely and correctly and is promptly replaced by a 500 error that is probably fake. Modern web development is hilarious.
It might be much better, but it's atrocious! I open up storage and it shows 10+ GB under "other" with zero transparency and no method for cleaning anything out.
In short, whatever web framework/templating library they use evals the template as code? That's an "interesting" design.
Literally ask any marxist about what intellectual property does. We've known this for about 150 years now; private property is a parasite on society.
I like the Mac workflow a lot better.
> The vulnerable endpoints can be accessed by a non-administrator user or unauthenticated user if ‘Allow people to sign up to create their account’ is enabled.

Only applies to public servers... Still should patch, but not as critical.

https://nvd.nist.gov/vuln/detail/CVE-2021-26084
This pov really smacks of libertarianism. "Government can't do it but we can"...chart, chart, etc. conclusion "Look!". The fact is small towns, cities, countries will not be able to afford climate change. Only a central national authority can, and in some cases, a larger authority (like an EU) will be required:
https://www.nytimes.com/2021/09/02/climate/climate-towns-ban...
Not disagreeing with most of your points, but:

> This article says nothing about the total number of employees McD's and Walmart have. It's committing the same error as heat maps that aren't adjusted for population

If you have evidence that the percentage of employees on government assistance in WM and McDs is lower than that for other large employers (or even the same), I'd very much like to see it.

I strongly suspect that the evidence will show the opposite - that it will confirm the rankings
Because it IS already an issue.

For example when CIA/NSA tools leaked, one of them had precisely this purpose.
Reading articles on any XX-XXI centuries event in English and Russian is fascinating. Try Iraq or US Argan war for example. Reading both or more will give you a bigger picture. Same in math and physics.
> Counterpoint: multiplatform frameworks are web-based

Qt, GTK, FLTK, JUCE, NTK, libui are not web-based.

I think that there's more than one definition of "multiplatform" floating around here.
Once we get tired of SaaS, the market will create standalone expensive software.

Even if I have to say that the subscription model is pretty good for B2B: fixed expense per month, someone to bother if things don't work, instead of spending my own employees time keeping infra up and debugging bugs.

I don't like SaaS for my personal use, I prefer to pay once, keep forever and fix on my own (for similar reasons to why I like cooking my own food instead of ordering take out all the time).
Microsoft creates useless things all the time and pushes them until they're finally accepted.
Iterating over mutable unordered containers is an entire new level of crazy.
Why not blame both? Pharmaceutical companies did in fact knowingly take actions to increase abuse potential because it made them more money.
- 409a valuation to know the current strike price of the shares

- total outstanding fully diluted shares to know the total shares available

You can ask this, but has anyone actually had success getting an answer to these questions? Every time I've asked questions like these (which are generally considered sensitive financial information) I've gotten laughed at.
A high refresh rate monitor will cut down latency by 10-15ms. It'll also look/feel much smoother. You won't notice the 1ms added by a good wireless mouse in my experience. (I'm happy with my wireless Logitech G305 mouse on Linux, it's supported by the kernel so it's plug and play. Also surprisingly good battery life.)
Courts that aren’t adversarial are just interpreting law. Secrecy makes it worse by eliminating accountability by the petitioner and judge.

For a non-secret example, look at the Social Security “fair hearings”, where an administrative law judge basically listens to a petition and makes a decision. The standards vary significantly by locale.
Yes but there are other tradeoffs that are introduced. Carrier-specific ROMs, difficulty upgrading to new android versions, generally more malware found in the Play store [1] and non-privacy-centric defaults [2] aren't really great to see either.

I'm not looking to start another android vs iOS debate here. There's plenty of that online that I and others can reference. I'm more interested in seeing how people are finding alternatives or what privacy tradeoffs they are willing to accept to avoid Apple's recent photo scanning move.

[1]: https://arxiv.org/pdf/2010.10088.pdf (PDF WARNING)

[2]: https://www.cnbc.com/2020/01/16/how-to-stop-google-maps-from....
I don't understand why your comment is downvoted because it's absolutely correct (for most type foundries anyway).