skysight-inc/HackerNews huggingface dataset:
Honestly I find these rationalizations around the use of SHA-1 annoying and counter-productive. The rule is simple: don't use SHA-1. If you already use SHA-1 migrate away from it. You know that plenty of software out there that interfaces with git expecting that the commit hash will be unique. Is it a security risk? Maybe, maybe not. I don't care to find out.

It doesn't matter until it starts mattering. If the Git devs had done the right thing over a decade ago we wouldn't be having this discussion. The longer they wait the more painful the migration will be.

SHA-2 was published in 2001, git was released in 2005 and now we're in 2021 and we're having this discussion again. The first concrete attack was released in "early 2005" according to wikipedia, so there's really no excuse.

Just do it, make a major change where you replace SHA-1 with SHA-256 and call it a day. It's going to be painful for a few months and then we'll move on.

For me these discussions demonstrate the immaturity of software engineering. In other industries regulators would've banned the use of SHA-1 and you couldn't get certified if you used it.

Do electronic engineers regularly try to argue "well ok RoHS says we can't have lead solder in this product but frankly for this one it's fine the casing is completely waterproof and there are no risks for the customer"? No, they don't. If the spec says no lead, then either it's no lead or you can't sell your product. End of story.

SHA-1 is the lead solder of software engineering. Only acceptable for military use.
The most astounding thing in this article is that the developer is denying copyright infringement.

There are many arguments to be made for preserving flash and providing a clean, easy way to install a modified version of Flash with the necessary security updates. But claiming that there was no copyright infringement? The Gitlab screenshot [0] uses Adobe's copyrighted logo, looks suspiciously like it's affiliated with Flash by mimicking its installer and installs an illegally distributed Flash binary.

The real problem here is that the binary does contain propietary Flash code, but the code itself doesn't. I can't verify if the releases page hosted the full-fat executables or not; if they did, the DMCA seems quite standard. If they didn't, the DMCA was definitely filed under false pretenses because it claimed a violation of _Adobe's code_ rather than their resources.

[0]: https://user-content.gitlab-static.net/7cd707fa280480fd2947d...
The post is mostly nonsense, but that said, I'm always astounded by how few nodes there are out there. Checking now and there's just 2,713 of them - though this number is low because of a bug in the latest software which removed thousands in September for some reason. It's never been higher than 7,000 or so.

How long would it take you to write a script which DDOS all of them? How many are run by organizations which can protect against attacks? My guess is not enough. Considering the amount of money relying on those measly ~3k servers out there? It's truly frightening.
Use Nix instead. :P
Did you read the article?

P.S. If the CleanFlash installer contains the Flash Player distribution, instead of downloading and patching it on the user's machine, then the author indeed deserves to be slapped with a complaint for such an obvious blunder.
From what I understand the "first" here is specifically that it's not on an isolated network like other automated light railways, but in a system that also uses the main rail network.
More or less. There are extra steps involved with a Record, but they work the same iirc.
Since you're working in the field - yes, obviously. It's not even that much math - the building blocks are fairly straightforward linear algebra and calculus.

Here's a nice, fairly detailed, summary - https://explained.ai/matrix-calculus/. But if you haven't taken undergraduate level single/multivariable calculus and linear algebra, I would take them from MIT Opencourseware even if it's just to fight off the impostor syndrome a little bit.
The FBI and DHS, two agencies whose relationships with America's left have never been described as "friendly," have consistently determined that antifascists are neither organized as a movement[1] nor a serious violent threat to the United States[2].

[1]: https://www.nytimes.com/2020/06/11/us/antifa-protests-george...

[2]: https://www.politico.com/news/2020/09/04/white-supremacists-...
For your later linked examples, those can be changed.

But as for the microG/GApps question, GrapheneOS provides a sandbox for the actual GApps, so that almost everything can run properly, with very strong control over what is seen by Google.
Is hashing a significant bottleneck in any git deployment? I'd expect that the diffing would be vastly more expensive for instance.

Besides don't many modern CPU supports things like SHA-256 in hardware?
I would ask the same question whenever I apply to a company from a country with obvious political tension with the rest of the world. It happens to be Huawei at this point :)
Do you have some data to back that claim?
“Hiring experienced, qualified SREs is difficult and costly. Despite enormous effort from the recruiting organization, there are never enough SREs to support all the services that need their expertise.”

Uh huh. Maybe what isn't scaling is their onerous recruiting filters.
During the Obama administration, the US was happy to capitulate to Iraqi militias that were proxies for Iran. And I don't intend that as a criticism, it might have been the least bad option at the time.

https://www.politico.com/story/2015/05/islamic-state-obama-m...
It’s a fairly common money laundering/terrorist financing scheme. They “hide in plain sight” and it often works.
This more carefully worded Nature article [1] explains that the experiment did not meet the technical definition of ignition. That is why they wrote 'ignition' in quotes in the article title.

[1] https://www.nature.com/articles/d41586-021-02338-4
It's really weird watching people declare the gold standard to be the way to prevent a boom-and-bust cycle. It's hard to imagine a way for history to more directly prove somebody categorically wrong.

Usually there's at least some question of viewpoint, or value judgment, or some other way where two people can reach different conclusions from the same facts, especially in economics. But there's simply no way to know anything about American history and believe that the gold standard solidified its economy.

It's like flat-earthing for economics. I'd have thought that impossible for such a vague and poorly-defined field.
Before anyone takes this post at it's word, I encourage you to go look at the C11 standard. It's called "ISO/IEC 9899:201x" and those of you who have seen an ISO standard before will already know where I'm going with this!

> 145 pages

Yes, and (within that 145) they take a whole page to define the word "scope". Not even in the context of C!! Just the general language-agnostic term "Scope". That's hardly meaningful...
>You are talking about a company that helped foster the "revolutions" in the middle east and europe that led to the deaths of hundreds of thousands/millions of people.

Google caused revolutions in the Middle East? How exactly?
The possible attack is to prepare 2 versions of a commit, both resulting in the same commit id. Then later on, after the project is successful/etc, swap out the commit with the second version, while keeping the other commits intact.

Granted, the file that the commit touches would need to be not touched in other commits. That's not out of question in a typical software project - maybe a file in the utils folder which is only written once and never changed?

> I don't think it's possible to create a collision that's also executeable code

You can include an unreadable binary blob in the commit. Tweak the blob to find the collision while keeping the code the way attack requires.
What happens when the suspect publicly admits to doing it and providing detailed information on the motive and means
Joseph Arthur Correia III, 68, who passed away on Monday, June 7, 2021 in New Iberia, was an oldest YSFlight[0] flight simulator user & a veteran of YSFlight HeadQuarters (YSFHQ) community, where he known as 'Gunny'.[1,2]

> A resident of New Iberia, Mr. Correia was born on July 25, 1952, in Gardner, Massachusetts, to Joseph Arthur Correia and Patricia Ann Demarest Correia. He was a veteran of the U.S. Marines and served our country during the Vietnam War.[3]

On October 9, 2021 YSFHQ community organized the first ever YSRIAT[4] (virtual RIAT airshow), where users took part in mass flight as a tribute to 'Gunny'.[4]

P.S. After 'Gunny' passed away YSFHQ users released some voice recordings of in-game conversation with him in previous years.[5]

[0] https://ysflight.org

[1] https://forum.ysfhq.com/viewtopic.php?f=172&t=10686

[2] https://forum.ysfhq.com/memberlist.php?mode=viewprofile&u=78

[3] https://pellerinfuneralhome.com/obituaries/joseph-correia-ii...

[4] https://forum.ysfhq.com/viewtopic.php?f=141&t=10692

[5] https://forum.ysfhq.com/viewtopic.php?f=146&t=10687
I'm sorry, but studying category theory to save the planet sounds like something straight from 'the Onion'.
For sure there are topics that (IMO) are worth studying to save the planet, i.e. physics, physics of the atmosphere, geology, material science, chemistry, etc, etc, but category theory would be pretty low on the list. (it's certainly worth studying on its own, but putting a 'saving the planet' badge on it sounds disingenuous to me)
None of those changes are made because the old ways are old though. Those changes happened because the new way is cheaper and/or more convenient.
In the field of formal type systems two common approaches to defining types, in practice they are quite similar but in my opinion they differ a lot in framing.

One side can be represented by Haskell, Hindley–Milner type systems, or even Coq; here every value has its own "best" type that is intrinsecally associated with it, that is values and types are defined and constructed together.

On the other side you have sort of a formal definition of duck-typing; you have values and properties that are satified by some set of values, here you have your values (all numbers, all strings, all memory addresses) and expres in usual logic terms any property you want (e.g. this memory address must be either Null or point to a string of even length).

All this to say that C has a nice type system from the first point of view (function pointer allow you to have higher order functions!) but a very weak one from the second point of view in that it is very hard to decide if an operation will have a valid result just by the types of the values you feed into it (let's not talk about UB for now).

In my opinion in later decades there is a movement to care more about type systems that follow the second approach. In my opinion it is one of the reason for the success of Typescript; its objective wasn't to have a nice type system full of good properites, but to model how javascript was being written.
The density and type of ads masks well presented information. I don't see the ads but am left unwilling to share links to the site where I sure would otherwise.
The "hate" section is about political censorship. It's full of people Facebook doesn't like, but can't throw under "crime" or "terror" because they aren't actually dangerous. Notice how the only groups in there are pro-white or white nationalist groups? Not to defend these groups, but by deciding to vilify these people while ignoring all other forms of racial and ethnic pride/nationalism/hatred, Facebook is sending a clear message that they favor some groups over others.
The benefit for humanity has award has only been a thing since 2021, Mrs. Rudin received the 2022 version.

So lets say its been running for 2 years.

And the only other comparable scientific awards of such monetary value are Turing and Nobel?

Wow very generous people.

1. https://www.aaai.org/Awards/squirrel-ai-award.php
No point in pulling off a complicated prank without enjoying the notoriety gained from it.
Linus posted about it on google plus in 2017. I haven't re-read it yet, but I remember one of the ideas floating around hn at the time was to just have two hashes per commit. That is, two insecure hashes may be secure together for git's purposes. Even though we can generate collisions for md5, and sha1, it would be much more difficult to have a file generate an arbitrary collision for both at the same time.

Here is a link to Linus's post on the internet archive

https://web.archive.org/web/20170717192607/https://plus.goog...

And here are some hn posts around the same time

https://news.ycombinator.com/item?id=13733481

https://news.ycombinator.com/item?id=13719368
Apple announces 'Unleashed' event for October 18
I'm using that terminology because, unless stated otherwise, in historical European documentation Empire used by itself usually means the HRE.

Furthermore including the Eastern Roman Empire as part of European Medieval history is dubious, or at least novel (and I'd wager the collapse of the Ottoman Empire, the Cold war and the EU have something to do with that shift in perspective).

The European title precedence tradition I'm referring to, and from which the translation of 天皇 as Emperor is affiliated to, was solidified in the context of Late Medieval/Renaissance diplomacy [1], in which the Eastern Roman Empire was neither considered as part of the Western world (it was quite literally the East), not relevant as it had become a rump state.

[1]: If you're so inclined, read about the councils of Constance and Basel-Florence-Ferrara. They involved a lot of international politics, petty quarrels on precedence and as a bonus, the almost-but-not-quite end of the Great Schism. My favourite tidbit is the Spanish and Swedish bishops arguing over who among them were the true Goths.
Starbucks Is 50 and Emboldening Its Rivals More Than Ever
How Microsoft reduced Windows 11 update size by 40%
One way the developer can work around this is to provide a program that doesn't distribute Flash at all, but allows the user to either modify the Flash installer or binary, or modify the system post-install, to achieve what the original project achieved.
There's a hackathon the performance of which decides my eligibility for an internship at Huawei.
A denial of service of sorts? (Something broken and unusable is delivered instead, as distinct from something usable but maliciously so.)

I agree that the chances of ever getting a second pre-image that not only makes sense, but does so in some malicious way may as well be zero, surely?
>"Although with how much the MAGA-crowd evokes the name of Hitler/Nazis to compare the current administration with it, maybe not... "

Okay, but I want you to acknowledge just how much Blue Team did this exact same thing during the last administration.
Even in the late 1800s when cars were just starting to be used, the ultimate scarcity of fossil fuels (including coal) was explored by Jules Verne who suggested hydrogen as a successor fuel in The Mysterious Island. And local scarcity of fossil fuels was acknowledged since everyone knew that oil wells started reducing output after a few years.

Nikola Tesla spoke glowingly about how we don’t need coal, oil, or gas if we just harness the energy around us (what he meant here was quackery, unfortunately, but wind and solar accomplish very much the same thing). People understood from the beginning that coal, oil, and gas are finite.
Hey I know someone who goes to that school, interesting. He was telling me about this incident before
There is absolutely nothing wrong or illegal with companies offering new additional products.

You're not cornered when you can freely choose to buy the enterprise product depending on whether you get any value from it or stick with the open-source version which remains available and has plenty of competition (like Rancher).

In fact that entire issue with Docker is that they have too little value to charge for and too much competition to defend against, the exact opposite of dumping to clear out the market.
According to Plexus, WhatsApp works perfectly on Android without Google Play Services, whether or not you have microG installed.[1] I think they implement their own push notification system if you download directly from them,[2] though I haven't confirmed this.

Discord works perfectly with microG, and has a 3/4 rating without it since notifications will only work if you have microG.

[1] https://plexus.techlore.tech/applications/whats-app

[2] https://www.whatsapp.com/android/

[3] https://plexus.techlore.tech/applications/discord
New Corporate Lobbyists to Join the DNC
MLB Rule Changes: Atlantic League Tests Tweaks Meant to Save Baseball
It mentioned its possibly a pulsar, it could just be a pulsar and magnetar https://en.wikipedia.org/wiki/Magnetar
The defence used by GitHub specifically defends against these intentional collisions, not some mirage of random collisions.

Basically you collide a hash like SHA-1 or MD5 by getting it into a state where transitions don't twiddle as many bits, and then smashing the remaining bits by brute force trial. But, such states are weird so from inside the hash algorithm you can notice "Huh, this is that weird state I care about" and flag that at a cost of making the algorithm a little slower. The tweaked SHA1 code is publicly available.

If you're thinking "Oh! I should rip out our safe SHA256 code and use this unsafe but then retro-actively safer SHA1" No. Don't do that. SHA-256 is safer and faster. This is an emergency patch for people for whom apparently 20 years notice wasn't enough warning.

In theory the known way to do this isn't the only way, but, we have re-assuring evidence for MD5 that independent forces (probably the NSA) who have every reason to choose a different way to attack the hash to avoid detection do trigger the same weird states even though they're spending the eye-watering sum of money to break hashes themselves not just copy-pasting a result from a published paper.
I think your original post would have been better received if you had been more specific and named the groups you'd like to see censored.
No thanks. I don't want US blood spilled over something that's not our concern. Let the countries closer to the tanker figure out a solution.

And any military action carries some risk of damaging the tanker, which could cause a leak or fire. Thus precipitating the disaster it was intended to avoid.
I've worked with the Flash Player source code in the far off past (I worked for a company called Chumby which licensed Adobe's Flash Player to power apps running in a device similar to the modern Amazon Dash Look) and while you would see things in that codebase that make your head spin, improper use of GPL libraries was not one of them.
Lack of open source licenses haven't stopped Chinese government or industries from stealing IP in the past.
germany has a law called "social network enforcement act" which requires big social media networks to have a german speaking team that enforces national laws and effectively handles complaints. And germany has outlawed national-socialist ideology for obvious reasons.

I am honestly surprised that style of enforcement isn't more common internationally.

(edit: got a detail wrong: the team does not need to physically be in germany, but facebooks is)
If you remove the word 'can' from the title, you get another interesting question, and some scientists think the answer is that the bar-headed geese have been doing it since before there was a mountain range there!
Yes.

Is there a non-Adobe authoring tool for Flash that's still around?
If the neural network is just the piece-wise linear regression function that the NN algorithm generates -- then its just a network like any other mathematical function.

And it's a pretty crappy mathematical function, with zero homology to the brain. Nothing in the brain is piece-wise linear.
Lepanto was important for the same reason that Hampton Roads, Tsushima, and Pearl Harbor are important. They're decisive turning points in naval technology, where a battle demonstrates that the old ways of warfare are obsolete and new dominant tactics need to be adopted.

For Lepanto, it was the vulnerability of galleys and shipboard infantry to gunfire, as cannonfire from the 6 Venetian galleases caused mass confusion as the galleys and their shipboard infantry approached each other; afterwards, the galley was obsoleted by galleons and ships of the line. Hampton Roads demonstrated the invulnerability of ironclads to traditional cannons, numbering the days of wooden sailing ships. Tsushima showed the importance of being able to engage at range, ushering in the era of the dreadnought battleship. Pearl Harbor (and Midway) showed how useless fleets of battleships are against air power.

The article says as much, but for some reason focuses on the effects of the battle on politics rather than on technology.
https://github.com/open-source-flash/open-source-flash/
Intel Contributes AVX-512 Optimizations to Numpy, Yields Speedups
Thank you, this should be the main link.
Not sure about being better though - outside London/Finance sector/FG, six-figure is quite rare, isn't it?
"I wouldn't call it neutral. It still has a development team made up of people who decide the direction of the technology."

The development team has no such power. They can raise a BIP (Bitcoin Improvement Proposal), which goes through rigorous cycles of analysis. A huge amount of paranoid eyes will obsess over any change proposed.

As for the development team itself, there's no THE development team. Rather, it's a highly diverse set of crypto businesses, non-profits, and individual volunteers. This diversity too helps to preserve common interests, rather than specific ones.

Should the BIP survive the first round of extreme scrutiny, next a whopping 95% of miners need to signal that they support the change. But not even that is enough, nodes (validators, of which there are an extreme amount) can still reject the change. Which is what happened in 2017, when miners wanted to increase block size (which reduces decentralization) and the community blocked it, despite a 95% miner approval.

Surely there's no such thing as 100% decentralization or neutrality at a theoretical level, but this is as close as it gets.
This is one dudes side projects, not an Enterprise K8n deployment - I think email is a great option. Of course when you go full "web scale" you should start using products like Sentry, but we're talking alternatives to "dump an error to stdout" here
I do not have any comment to make on the validity of the article, but this comment made me think of exactly why I dislike todays censorship friendly media so much.

I can read the article, gather my initial thoughts and come to some sensible comments within that articles posting to further navigate.

If this article is garbage, the way to dispense with it is with comments such as these. (I'm not making any claim to the validity or lack-thereof of the article)
I'm guessing the list is based on political salience, not just how "bad" a person is.

There probably aren't that many Vlad the Impaler apologists in the world, given that he's a functionally irrelevant person to be an apologist for. That's perhaps less the case for Stalin, but even Marxist-Leninists (seem) to make fewer excuses for Stalin-the-human than neo-Nazis do for Hitler-the-human.
Fair enough, I haven’t considered that. I would still prefer a tax or something over an all out ban but that’s a different conversation.
All Roger Crowley's books[1] are great. I really enjoyed "Constantinople: The Last Siege".

[1] https://en.wikipedia.org/wiki/Roger_Crowley
Can Covid Cause Insomnia?
You obviously did not bother to read the list, which includes several Antifa groups. (as well as some calling themselves Anti-Antifa)
millions of people making hundreds of dollars - you know, like the music industry