skysight-inc/HackerNews huggingface dataset:
Is it really necessary to disable an E521 ECDSA host key? By all means, replace a P256 host key with E521, but are E521 keys truly weak to justify removal?

E521 is listed as safe on DJB's main evaluation site:

https://safecurves.cr.yp.to/

More specific DJB commentary: "To be fair I should mention that there's one standard NIST curve using a nice prime, namely 2^521 – 1; but the sheer size of this prime makes it much slower than NIST P-256."

http://blog.cr.yp.to/20140323-ecdsa.html

I believe that OpenSSH is using the E521 provided by OpenSSL (as seen on Red Hat 7):

$ openssl ecparam -list_curves
secp256k1 : SECG curve over a 256 bit prime field
secp384r1 : NIST/SECG curve over a 384 bit prime field
secp521r1 : NIST/SECG curve over a 521 bit prime field
prime256v1: X9.62/SECG curve over a 256 bit prime field

These appear to have been contributed by Sun Microsystems, and were designed to avoid patent infringement.

https://security.stackexchange.com/questions/3519/can-ecc-be...
Why are you assuming that means you need to make 400k / yr, you could make 50k in salary and sell stock worth more than 350k
If he proves in the courts that they do, yes. Just because someone else has built another keyboard for the watch does not mean that any IP was infringed on.
SoftBank Makes First Saudi Deal Together with Wealth Fund’s Unit
SoftBank Group Corp. has made its first investment in a company based in Saudi Arabia, partnering with a unit of the kingdom’s sovereign wealth fund to lead a $125 million financing for customer communication platform Unifonic.
Do you have any sources to back that up? All the literature I find is pointing to tire vibrations, which I would guess is a mix of material properties, tread design, and more.
Do you have reason to believe that's not what they did?
The question here should be what we are promoting by spoiling higher salaries and giving back to others.

Are you sure this will make for a good incentive for:

- people who excel at business to stay.

- lazy people to work instead of relying on welfare.

Besides that, needless to say that taxing is unfair in itself and taxing depending on how much you make is like treating you different because you belong to a group or another. Reminds me, in some ways, to Europe's middle age: you were judged different depending on different rules according to groups. I understand US is very different from my country, but my advice is that do not give a centimeter to any kind of positive discrimination (taxes, race, sex, religion or whatever). Once you have that one part will abuse the other. The only solution is to be as dilligent as possible applying same rules to everyone equally.

Yes, they sell all with nice words and good causes in-between, with you being spoiled with no word on what to do with that. But at the end, this is involution IMHO.
Not every business has room to grow by a factor of 1000 or 100 or even two though. Some of them are close to the largest and most profitable they are ever going to be. I think the criticism of Wall Street is usually that they can't leave those companies alone, and have a compulsive need to squeeze what looks like exponential growth out of them through cheap trick like cutting staffing levels and shaving R&D budgets, at the expense of long-term viability.

Th other side of the coin with regard to "economic dynamism" is robustness against systemic shocks. See for instance this company [1] which started over 1000 years ago, and due to its lack of "dynamism" has cash on hand to survive indefinitely with no revenue - a property that turned out useful when a global pandemic disrupted their operations.

Wall Street investors get absolutely no credit from me for expecting to wait ten whole years for their absurd, physics-defying hypergrowth. When they are lining up to fund a stand that will make mochi by hand for the next 1000 years, then I will concede that they may have learned a bit about long-term planning.

[1] https://www.nytimes.com/2020/12/02/business/japan-old-compan...
Reposted 4 minutes later: https://news.ycombinator.com/item?id=28538132
Can't give you a break, unfortunately. They already had homes before costs got to their current point. I made more than 250k and could not afford any home within an hour's commute to SF in the years my income was that high.

I might've been able to buy a condo at one point, but that's about it.
> non-upgradeable SoC

That doesn't seem to be slowing down sales of laptops and minis, or phones. Memory is tightly packed, but that's for SoC size - the processor tile talks to the memory via a DDR4 bus on the SoC board and can easily talk to memory across the motherboard. I'd bet on that for future ARM-based MacPro's and upgradable iMacs.

Making a socketed M1/M1X/M2/M2X is a matter of packaging, IF Apple wants it: they are not in the general CPU market. There may be some market in upgrading CPUs in the MacPro's, but I doubt it'd justify the investment.

> that fully supports only one OS

That's not really a problem for Apple - they chose to base all their offerings on a portable OS for a reason. The current system we call MacOS was ported to run on 68K, x86 (under NeXT for 32-bit, under Apple 64-bit), HP-PA, SPARC, PPC, ARM (both 32 - as iOS - and 64-bit).

All in all, the roadmap for beefier M's is clear - a wider backend, ISA extensions for common workloads (one of the reasons the M1 performs so well), and a larger reorder buffer (another reason the M1 performs so well) to keep the wider backend well fed.
The US spends 3.4% of gdp on the military. This is nowhere near 5x the world average
I am no expert; but I would never bet my money that justice will be served :(
You still can't replace all air pollution with nuclear power. And nuclear contamination is still worse than any coal contamination if it ever occurs. Any nuclear accident on the scale of Fukushima or even Tschernobyl would take a reasonable chunk out of our GDP because of the exclusion zone, even if the death count would be neglible as you seem to think.

If a majority of voters think this small risk of gigantic damage is not worth taking, you eventually have to accept that. Coal is not the future, it is a stop gap measure.
I think you're wrong. Guix has a zfs package. The build farm just won't give you a pre-built binary due to license conflicts.
>Through its Vision Concept, the company wants to make tires that are airless, rechargeable, connected, and sustainable.

1) airless, check.

2) rechargeable ??

3) connected ??

4) sustainable ??
The sad part for Michelin is that not much later BMW started using run-flat tires on all their cars. So it was really just a value-chain issue, not a lack of demand or bad timing.
How is doctave different from gitbooks?
Distributed ML with Dask and Kubernetes on GCP
At Sarus Technologies, we use dask to test many machine learning models and tune their hyper-parameters in parallel. It's actually quite simple to deploy and scale a dask cluster, thanks to kubernetes and public clouds. If you are interested, check this tutorial out.
Would love to see that posting
Why on earth does such a simple text-only page not have “Reader View” on iOS safari!?
It was a response to the insinuation that the vaccine is blanket easier.

Mechanically, losing weight is strictly easier. Psychologically you really can't say one way or the other and thinking you know people's mindset to say one is easier than the other is bad faith argumentation.

So, whether or not one is easy. That's what it all hinges on? Very flimsy.
I couldn't agree more. I get that it's tempting short-term, but lies aren't free and the interest on that debt is extremely expensive. If you're a public authority, the price of lies is an inevitable corrosion of your abilty to govern even if you're successful in the short term. Everything about our public health response has been fairly short-termist without any kind of consideration for the enormous long-term collateral damage that has been done to public institutions and people's faith in them.

History will particularly condemn the lying and the abuse of behavioural psychology I think, even if people think it's justified now because of the pandemic. May the record for future generations be be accurate, because that's the bleak legacy our leaders deserve.
> It's an issue with parsing /any/ data structure or language that may contain strings and as such seems unavoidable.

Except for a data format which would allow embedding data in a nested fashion without altering it in any way. For example:

some_object_field: "some value"
some_other_field:
with_sub_objects:
and_sub_fields: "with values"
and_also_fields:
"""
which_allow_objects:
embedded_as_strings: "without transforming the structure"
which_both: "JSON and XML"
have_somewhat: "failed to do"
#""" control sequences should also be valid in the body, as long as there is proper indentation, a la Python
# which could then be simply stripped for display, for example, based on the first """ having N indentation
# then it would follow that the rest of the data entries have N+TAB_WIDTH, which could be simply stripped
# also, processing the beginning of every line would be less expensive than iterating through the entire line in search of escaped \n or anything of the sort
"""

Multi-line strings in JSON are also an embarrassment: https://stackoverflow.com/a/2392888

As a consequence, the amount of parsing and processing that you need to do is really bad for performance. Of course, there are formats like YAML and TOML that go in the opposite direction - they try to cover all use cases and end up being overcomplicated.

There are occasionally other attempts like JSON5 to improve things: https://json5.org/

However those also oftentimes are not very popular, because there is just too much ecosystem that has been built around the older formats, like XML, JSON and even YAML.
I'd say it's too soon to call the updates marginal. This is a process improvement with some, small, architectural improvement. You can't pull an M1-level improvement on every generation.
I think physical metaphores are flawed, but lets just continue for fun: if planes were designed the way software is designed, what is the airplane plane metaphor for buffer overflow? You take too much luggage with you and the plane crashes?

What's the metaphor for privilidge escalation - you dress like a pilot and they let you drive?

Most hacks in computing are preventable by not using languages that are know to be unsafe or testing software priperly. We prioritiae features over safety or reliability.

They are not comparable to someone attacking a plane with a missile.

I think it should be clear to that designers of aircraft and airlines themselves take much more care and responsebility than software designer do.
There's a lack of documentation since this isn't officially released yet, but my assumption is that you need write permissions to id-token in order to generate a JWT. As forked repos can at most get read access[1], presumably that would prevent a malicious fork job from generating the JWT.

[1]: https://docs.github.com/en/actions/reference/authentication-...
That puts everyones purchases on a single card and is even worse.
An ad fontes breadcrumb elucidation I think that passes through Gödel 1934, in §9 "General recursive functions". "...this leads to the question what one would mean by 'every recursive function'. One may attempt to define this notion as follows...", and remites to footnote 34: "This was suggested by Herbrand in private cummunication". Finally the note points to the article post scriptum where Gödel appraises (later) Turing work as settling what would become known Church's thesis, that Turing machines exhaust all 'mechanical procedures'. "In consequence of later advances, in particular of the fact that, due to A. M. Turing's work, a precise and unquestionably adequate definition of the general concept of formal system [by defining 'mechanical procedure'] can now be given..."
We can do that already to normal tires and without 3d printing. Such tires are of lower quality though.
Is an iPhone the same as an Android? They're both phones after all?
The government helped Tesla. Now it’s helping Detroit. Elon Musk isn’t happy
Got a bit of envy for the people that get funds/grants for their idea. I'm always "lucky" enough to find the call for proposals that match my skills and interest past their closing date. Must be a sign :)
The middle one looks the best. I think the simple answer would be to convey it with words instead of an explanation point.
Whats the point of market fixing itself in this situation?

"Market fixing itself" describe relationships between consumer and supplier. In this case "consumer" is better off so seems like market works as intended.

Developer's being f-ed over is sad thing but unless the situation for developers is so bad that they abandon App Store in troves then nothing will fix anything.

Also one could argue that overall situation is pretty-pleasing for everyone, apps that do not go into Apple's territory (system stuff) seem to be thriving and don't complain too much.

I'd rather them not to regulate it because they start with Apple and end up killing shareware and everything else. Who knows what kind of crazy stuff they'll invent for open source, can they outlaw it? I'd rather them to not even start.
I think no, but that army matches on quite a large load of cash, so they’ll likely offer him a settlement agreement which means he “losses” but gets paid.

Not fair by any account, but I think that’s what is likely to happen.
I downvoted you because of the hissy fit.
I find it interesting how people stopped caring about everything except housing. It's like humans have succeeded at almost everything except one thing and then people tell you that their basic needs aren't met as if the rest of their life is just as bad when it's the opposite. People want housing to be exclusive and they want you to get the hell out of their hometown.
So "Think different" is now "You can't handle the truth"?
Lojban also hasn’t shown that it would retain its principles after years of broad day-to-day usage. And I dare speculate that it would not.
https://archive.is/oZZpz
Need to be careful with that. There was a guy in California a few years back that decided the license plate "NULL" would be a fun joke, and he ended up being charged every ticket issued in the state where the license plate wasn't entered.
How substantial really depends on the workload. It's small in single-thread performance, but it's easy to grow it with more cores and I'd love to see a lot of background processes moving to more icestorm cores to keep the firestorm ones free.
We will only know if they try. Their lawyers may be handsomely rewarded if they win. Justice may be blind, we will see.

Disclaimer: Sorry for postvac ramblings
But I get a warm fuzzy feeling if the market does fix itself!
Stephen Wolfram seems to be the quintessential intellectual DIYer. He writes 20,000 words on a highly abstract and technical subject, and every single hyperlink in the article goes to either one of his own websites, or to Wikipedia.

I respect his ability to integrate a huge body of scientific knowledge in a single brain and then articulate it in books like A New Kind of Science, but I have to wonder whether his approach is designed to maximize scientific progress, or to maximize his personal reputation. His eagerness to claim credit for ideas that could hardly be credited to a single person is a bit of a warning sign.
Safest setup

disable password login. disable ssh login. Put the computer back in the box and put the box under your bed.
The problem of coming up with new paradigms.
Yes, this is where I came from. I spent a great deal of time building stuff in Reaktor/Max and software is still useful for some things. However dedicated hardware (which granted is an expensive hobby) wins on intangibles like happy accidents, touch and feel, muscle memory. It feels less like working with a computer and more like experimenting in an audio laboratory.

I think with instruments it’s more about what keeps you in the creative flow than anything else. At least for me hardware has been 10x more productive than software in terms of actually making music.
As a person who grew up in rural Appalachia certainly Phillips was not an option. But, choosing a municipality with an emphasis on the value of education certainly was something my parents actively did. And, we had families across the economic spectrum in my school.
There are two different definitions of "middle name". Almost every American middle name is a given name or a surname used in the middle.
One thing recent history has taught us is that Ivy Leagues are very good at pumping out individuals that know how to win at all costs, with 0 regard for actual expertise or moral compass.

Ivy Leagues serve the purpose of giving individuals the minimal artifacts of knowledge and virtue to get ahead, without its actual substance.
"What do you think you are, Mars or something?"
no. I am not blaming anyone. Seriously. I just say that this vocabulary is a shitshow to brainwash: taxing is putting a penalty on your efforts.

There is no more to it. You can give it 1million
justifications, that will not change.

Sorryif I sound harsh. I would likea place where politicians do not abuse us like this.
>Beyond that, the "colloquial" use is simply incorrect.

Doesn't matter, language follows use, not etymology or geography. If a term has been established as something (in actual use) then it will be used, doesn't matter if it's not technically correct (same way "Indians" was used for centuries for Native Americans, and only fell out of use because of political concerns, not because it was also obviously incorrect and based on a misunderstanding of a whole continent).
Show HN: Scriggo – a Go open-source template engine and embeddable interpreter
Not completely surprising (from Wikipedia):

“While Zuse never became a member of the Nazi Party, he is not known to have expressed any doubts or qualms about working for the Nazi war effort.”
Probably not.

They will however probably end up settling. Take the money and wait for legislation.
I don't think that's the threat model here - this is more a lateral movement vector for an attacker that's able to get inside your service network perimeter.
Well, yeah. The next successful attack will evade defenses since it wouldn't be successful if the defenses worked, right?
Well I think my skills suffer more because of work: after a day of "being productive" at work, I no longer have the time and energy to explore and learn new stuff, which is how I gained and expanded my skills in the first place.
> Apple advantage was in mips-per-watt. AMD wipes the floor with them in performance department

Are we talking single or multi-core? I don't think they are far in single-thread performance.
I mean at the very least there could be a settlement since Apple most likely doesn't want to cause even more bad PR. But who knows.
Then how did you reject the cookies?
Bestline: A worhty successor of linenoise (line editing library)
There's a video on how it performs in snow.

https://michelinmedia.com/site/user/files/44/MNA342_Uptis_Sn...
I'd say it's the OS, and the drivers.

I do use a Magic Trackpad 2 with Precision drivers on Windows 10 and ... it's as sluggish as my laptop native touchpad. Gestures barely makes senses, it's lagging everywhere, while the same device on OSX allow smooth-as-butter(tm) interactions.

I also found that OSX drivers have a nicer palm rejection feature where on Windows I frequently click with the palm of my hand.

I had an interesting experience with the very latest Fedora/Gnome versions with the Magic Trackpad letting me guess that an important step towards good gestures support on linux is on the way.
If you create an has_many authentications association in the User schema your query could be as simple as this if you wanted to pick what you want to select out of the join:

from u in User,
join: a in assoc(u, :authentications),
select: %{id: u.id, name: u.name, some_column: a.some_column}

or if you just want to load all the authentications

from u in User, preload: [:authentications]

(Note: both of these queries are from memory and not tested, syntax errors may apply)
https://github.com/GoogleCloudPlatform/compute-image-package... - it used to be just one project with Python, C++, and shell scripts. The Python bits got rewritten into Go, while the others got split into their own repositories.
> Thirty feet is the cutoff for fatality in a fall. That is, most who fall from thirty feet or higher die.

And to think my friends and I used to jump off a 2nd story balcony for shits and giggles. Even after one of us broke an arm doing it. Just 2/3 of the way towards certain death!
Correct. Sadly the issue is that the cloud provider installed an agent that only blocks requests if the authentication header does not contain correct authentication.

If you remove the authentication header, that check never fires, and it considers you authenticated. Then it proceeds to let you run any command.

Now the point is, anyone who can send you messages can strip the authentication header, so anyone who can send you messages can execute arbitrary commands.
I had thought that was by Epic (Megagames back then). I was wrong. Maybe I got Jumpman mixed up with Jill of the Jungle.
How to find ideas, and validate them as quickly as possible
There are modern species of snakes with vestigial legs today, pythons, boas... Leglessness in lizards not very uncommon. It evolves regularly, before and after the snake lineage likely originates. One species of such creatures became the ancestor of snakes. I think (not an expert) that the lineage of that creature is still speculative... with a still-wide range of candidates.

Not sure if Plesiosaurs are still a contender, but if it is then it gives Plesiosaurs the same relationship to snakes that birds have to dinosaurs.
> What I mean to show is that forest fires have gotten immensely better, likely because of technology over the years.

I'm saying they haven't gotten better.

The drop in the 1930s-1950s shown in the wider chart has nothing to do with climate, and little to do with technology. It reflects a misguided change in fire management strategy (put out every fire ASAP), one that is now understood as a bad approach, because it causes build ups of unburnt brush that cause more dangerous, more intense fires.
then the topic would shift to who regulates the regulator.

And there are very EVIL incentives in having regulators. More free market is a way better solution.

I agree it is a shitshow.But it is also true that these companies created products. What does a regulator do? Regulate and having incentives to regulate in certain directions (come on we all have seen that). However they bring zero value to people (unlike Apple, for example, with all its defects)

There are sooo many absurd regulations that prevent people from building businesses or even working that Ithink we should start there. And later, and only later talk aboutthe rest.

Just my two cents.
Is it just me or at this point Americans will do anything for profit? The last American with moral standard is currently living in exile in Russia. Lori Stroud is a disgrace, who after all these, she basically became a mercenary attempting to justify her disgraceful actions. What a time to be alive, so first we have 911 that changed the lives online and offline as we know it. Then we have never ending wars that costed lives around the world, topping that with a global surveillance machine with a rapacious appetite for private information. These behaviors are far from the American values preached everyday by the left and right. It’s time to look in the mirror.
We are providing escorts service Visit my Profile
I am Sofia Mil and I am a 20-year-old and a High Profile Call Gírl in India, Visit My Website.
Programming Loops vs. Recursion
The HPV vaccine is available for free to all Americans with medical insurance regulated under the Affordable Care Act (Obamacare). That's the vast majority.

https://www.healthcare.gov/preventive-care-adults/

We do still unfortunately have about 8% uninsured but local health departments occasionally offer free vaccination clinics for them.