skysight-inc/HackerNews huggingface dataset:
>I get that they're "public" keys

From your quote around "public", I presume you think there is some sense in which they're not really public? They are and should ALWAYS be considered PUBLIC. If you find yourself ever crafting a security solution where public keys somehow need to be private or secret, go back to the drawing board or reach out to someone with serious expertise.

There are cases where information on a certificate (which is associated with a public key)may indeed need to be protected, in that case you need to implement an information mask (via hashing) that can protect the private information, we had to do something similar with Certisfy.com certificates. But public keys should be considered public without exceptions.
> GC pauses, Rc<T> does not, it's simply a deallocation by the last reference holder

There are pauseless GCs (e.g., Azul for JVM), and Go kicked off a trend of super-low-latency GC. Also, RC deallocation is O(N) while GC is usually O(1) (ignoring pedantry about how RC is a type of GC). Further, RC can't handle cycles automatically.

> Rc<T> still has predictable memory allocation/deallocation, GC is not guaranteed to run until needed

Deterministic GC exists, but admittedly isn't widespread. For most non-critical real time systems (e.g., video games) a low latency GC is probably sufficient.

> More efficient memory use, no need to keep track of allocated objects

I'm not sure if this is true? Presumably each RC has an int for its reference counter? I'm not sure what the bookkeeping overhead is for tracing GCs, but I'm guessing it's not O(N)?

> The rest of the Rust language is a pleasure to use (imo)

Agreed, but the borrow checker affects everything so this is a pretty small consolation in practice.
> 3D printers that work well and are cheap, open source ecosystem.

Pity we haven't solved that for normal printers yet...
Why? I think the best practice is that you should use different keys for different client devices, not that you should use different keys for different services. A separate key per client allows a service to ban individual client devices if they get compromised, there's no practical scenario where a client device would want to ban individual services.
Yes but when you are in the US, you only can work for the US company pursuant to the O-1.
Vermont hell scape Christmas vacation
Show HN: Relative Bookmarks Browser Extension
He has other starred repos with more stars, eg. https://github.com/ciphey/ciphey and https://github.com/rustscan/rustscan
Relative Bookmarks is a little browser extension I made for myself to help me navigate to the same page across different instances of the same app. I find it very useful for development and I always wanted it, so I made it.

You can find it directly on the Chrome Web Store

https://chrome.google.com/webstore/detail/relative-bookmarks...
We've implemented a DID method based on this!

https://github.com/spruceid/ssi/tree/main/did-webkey
Do you think so? It looks really beautifully typeset to me.
Doctors have determined that Green Fast Keto is a really special type of product. This is different from all the other supplements, but with its introduction, other weight loss supplements are really irrelevant and are being not used. If the best is for you, then Green Fast Diet Keto should be on your side. Now it’s a reasonable one due to the very high quality and high consistency ingredients that are always ready to melt the fats from the body in a very scientific way. It also provides the energy levels and vitamins needed to maintain the natural health of your body in a systematic way and in a quick time.

Also Read :

https://www.emailmeform.com/builder/emf/green-fast-keto-diet...

https://sites.google.com/view/greenfastdietketo/

https://green-fast-keto-official.footeo.com/news/2021/11/13/...

https://dietaryhealthsupplement.blogspot.com/2021/11/green-f...

https://groups.google.com/u/1/g/greenfastdietketo

https://groups.google.com/u/2/g/green-fast-keto-reviews

https://www.youtube.com/watch?v=cp5co9k8f_Y

https://twitter.com/GreenFast_Keto

https://www.facebook.com/Green-Fast-Keto-107799351720821

https://promosimple.com/giveaways/green-fast-diet-green-fast...

https://www.linkedin.com/in/green-fast-diet-keto-5266a5225/

https://www.homify.com/professionals/8832533/green-fast-keto...

https://www.homify.com/projects/1088946/green-fast-diet-gree...

https://bumppy.com/tm/read-blog/8473_green-fast-diet-green-f...

https://www.hrlrblog.com/forum/general-discussion/green-fast...

https://www.rimrocksdogwoodcabins.com/forum/got-questions-an...

https://www.reptilefamilyexpo.com/classifieds/reptile-commun...

https://www.pureartworkstudio.co.uk/forum/arty-chat/green-fa...

https://www.medical247.healthcare/forum/general-discussions/...

https://greenfastdietketo.wordpress.com/

https://green-fast-keto.tumblr.com

https://www.provenexpert.com/green-fast-keto6/
>Flashing an LED on an uC before Arduino was hard.

And with ESPHome's ability to flash from the browser and OTA it becomes even easier. Still can't believe the browser part actually works lol
Being a global phenomenon means nothing in art. (Justin Bieber is a lot more popular than Frank Zappa, so what?)
Personal taste aside, other unrelated issues must be taken into account. For example, were the Beatles black, could they have had the same popularity back then? And what about the other way around (a white Miles Davis)?
Yes. Please email me and I can give you the names of good attorneys who specialize in this area.
> it becomes a PR liability when they get a reputation

This would rather be positive for PR. The news will talk about it, about how dangerous this is, then they come out with the real story, where the customer did some modifications, that the product is 100% safe if it is left the way they sell it.
The ‘safety critical maritime structures’ they are talking about are probably pressure hulls on nuclear submarines. They are well equipped to handle radiological material and really want to be quiet.
Also accessibility of homeservers. Damn near anything these days has enough power to run a hypervisor and an assortment of things on top of that.
> But why is Rust so much harder than any other newish programs language.

All the languages you cited are essentially in the same space, they're runtime-heavy GC'd ("managed"), imperative, object-oriented, "applications" languages.

Rust tries to achieve memory-safety without runtime support (as well as low-overhead in general), and to do that it relies on a rather advanced type system with concepts which aren't formal in many commonly used languages (e.g. borrowing and affine types).

It's a different language, and if you approach it with the expectation that it's similar to other languages you know, it's probably not going to work well. Possibly unless the language in question is C++ (as Rust formalises a lot of best practices of C++), but even then the lack of object orientation and strictness of the compiler is going to make the transition difficult.

It's probably easier for people with less expectations that "all languages are similar" and that their knowledge will be easily transferrable, either because they have less experience period, or because they have experience with a much wider range of languages.
> track things forever

indeed, is that another word for "idle (unused and useless) all thinkable time"?

Or 'I can't think a usecase, but eternity may bring one along.'
I've never seen this mentioned, but when I tried these sorts of methods, they mostly only worked on images that started as high quality images and were deliberately down-scaled.

If the image original was low quality, or had artifacts, then the results were useless.
How Serverless Functions Works
Not the OP, but having it on his record likely refers to his credit record, maintained by private agencies, not a conviction record.
FIDO2 is even better because SSH supports it natively, so there's no setup at all.
That's right, there's no "portability" for an H-1B1 (or premium processing) so if one is in the US and wants to move from one H-1B1 employer to another, he or she needs to leave and apply for a new H-1B1 visa at a US Consulate abroad through the new employer or the new employer needs to file an H-1B1 petition with USCIS. But since premium processing isn't available, the latter process would take months.
IoT Device Provisioning
Is this the same AGWA that made git-crypt? I look forward to being able to encrypt the repo key to SSH keys, rather than GPG ones.
I don't think using different keys per service or host buys you much in terms of security. Yes, an attacker that compromised your keys would have to brute-force your passphrase for N keys rather than one private key, but that just takes N times as long, not really an obstacle.

It would be better to use a hardware authenticator like a Yubikey to either generate a FIDO token-backed SSH key or a GPG key and use the gpg agent as your ssh agent. This way you get SSH keys that cannot reasonably be compromised by other means than physical attacks (someone steals your key and coerces you to reveal pin code).
From the submission of the PW request and commencement of recruitment, 18-24 months.
Ahh yes, now that I think about it, I’ve seen this sort of implementation before:

1. Government forces you to jump through hoops with some collection of favored — sorry, I meant “authorized” — vendors who can issue you a certificate for $WTF (either paid directly or through your taxes...).

2. You are provided with the private key in some manner. Hopefully not in your email, but that’s often what happens.

3. Whenever you want to validate yourself to the service, the government website then has you upload that private key to use in their own homemade implementation of JavaScript PKI. Sometimes they actually take the key from you and send it to their server to do the work.

... I think we are both in agreement that this is pretty lousy. And if you’re seeing it in Ukraine, it’s a world-wide “security” model. Maybe someone else here on HN can explain the thinking that went into these sorts of implementations...
Those are managed dedicated servers, where they'll install and maintain software for you. It's an entirely separate class.

And even if it wasn't, the existence of a single expensive dedicated server provider wouldn't disprove parent's claims.
Wouldn't there be right-holders still around ?
I never heard of him. He may be known to jazz fans, but if you go to any other festival like rock, pop, metal, folk.. everyone has heard about Beatles, about this guy? Just the minority of jazz fans and music nerds.
Any interpolation adds information to the data: the very interpolation method is alien to the image, and hence becomes “added” information.
I agree with you. Most my packages are around ~100 stars, and I'm met with a lot of respect and appreciation.[1][2]

My library for Correlation-IDs in Django[3] got implemented by AWX, which also was a nice experience![4]

Maybe it is the Django/FastAPI community, but "you'll get a load of entitled users" is straight up not true in my experience.

[1] https://github.com/Intility/fastapi-azure-auth/issues/24

[2] https://github.com/Intility/fastapi-azure-auth/issues/39

[3] https://github.com/snok/django-guid

[4] https://github.com/ansible/awx/pull/9332

(Bonus Correlation-ID package for Starlette/FastAPI: https://github.com/snok/asgi-correlation-id )
I enjoy what I'm making and would do it for no stars. But a star can take the edge off a bad day. Also it could lead to users, feedback, contributers.
A political opponent of my grandfather got angry at him in a meeting.

After the meeting the opponent followed my grandfather as he was walking home and hit him in the head from behind with a ”metrin halko”, a meter long log. He died of a hemorrage.
What would really help to persuade people that they'd be more productive in Lisp would be examples of software written in Lisp.

I was a teenage Lisp enthusiast and have seen these sorts of Lisp discussions go round and round in circles on online forums for the past couple of decades. Ultimately, the corpus of publicly available software written in Lisp just isn't that compelling.

It's often said (and may be true, for all I know) that there are lots of companies quietly using Lisp behind the scenes and reaping the benefits without shouting about it. But to be persuaded, people need to see results of the claimed productivity gains in the form of actually existing software.

It's also worth bearing in mind that there are lots of people (like me) who did give Lisp a serious try (Common Lisp in my case) and then moved on for various quite sensible reasons. Lisp enthusiasts sometimes speak as if anyone who doesn't love Lisp can't possibly have given it a thorough trying out, but I would question that assumption.
was it you that said that the difference between writing templates in c++ and writing macros in common lisp is like the difference between filling out tax forms and writing poetry :)
Unrelated question. How is Portugal in terms of taxes for people working remotely as contractors (for the US in my case)? I'm an Italian citizenship and I was considering Portugal as my next stop.
Socio-spatial cognition in cats: Mentally mapping owner’s location from voice
I understand it's the stereotype, but I really don't think it is the norm. So many founders care about what they create and to to extreme lengths to ensure that they can achieve their (not just financial) goals they had when setting up the company.
All I can comment on is my clients and most of them are in high wage areas where there's serious competition for talent and looking for highly skilled workers and they pay their FN employees as much as they pay their US workers because they have to or their FN candidates will just go elsewhere. But I've heard of abuse of FNs.
I must correct myself again: Here [1] is an interview with Krier, in German, which paints a very different pucture - that he is rather left-leaning, that he detested the political stream that Speer was part of, but that he was able to distinguish it from his works as city planner. I find that remarkable as it goes beyond what most people are able to. Also, some remarks on the constraints that Dorchester made on the development of Poundbury.

[1] https://www.welt.de/kultur/kunst-und-architektur/article1540...
Is it a good practice to use only one SSH key pair or different pairs for different things? Also, how do people usually store SSH keys for long term?
>Here's why I like SSH signatures:

>* It's not PGP.

The most important reason people use the OpenPGP message format is because it is a well accepted standard. Sure the cryptography is not new and fun but it is secure. If you sign something with OpenPGP then you can be sure that those signatures are verifiable on any platform by anyone. The OpenPGP standard has provisions to ensure that the signatures are from a particular entity. This proposal suggests that Github could be treated as a trusted third party. If that is the case then you don't need signatures at all.

Obligatory "The PGP Problem" rebuttal:

* https://articles.59.ca/doku.php?id=pgpfan:tpp
> Of course, someone will ignore those criteria and come in suggesting OCaml/Reason...

I hoped Go to be such a language, but it failed to fulfill my needs by throwing away all the PL knowledge that humanity has accumulated for decades. I still mourn for the missed opportunity by Google.
Well up to you but that’s irrational - it’s leaving money on the table and what’s more you’re actually paying for my free loan and my cash back and my protection and my free flights and not getting anything yourself, as I’m paying the same price for products as you.
Very much agree.

I think that splitting your software into well-documented modules and APIs is a superior approach to lp. Whereas not much software is well-documented these days, where "well-documented" means for me:

a) high-level narrative of the why and how of the code, including descriptions and (informal) correctness proofs of the important algorithms in the code (can be just a doi to a paper)

b) detailed documentation of parameters and return results of the functions that comprise the module(s)
Ideally GitHub or any key distribution server just works as a dumb registry, the trust should flow from different systems. Of course in practice people just rely on the registry anyway.
How to Embed a Script in NextJS
I've never seen an armchair with a speedometer.
As did the Nazi's.
Yes it is, and they are awesome. git-crypt[0] is a godsend for smaller projects (and maybe larger ones if permissions are granular enough) -- way simpler than sops[1] and other alternative, with native integration via git filters (smudge). I use it on a ton of projects.

[0]: https://www.agwa.name/projects/git-crypt/

[1]: https://github.com/mozilla/sops
To add on my other comment: Vultr and Linode are both providing guides on how to set up searx on their platforms, so there you have two that will not raise any issue.

https://www.vultr.com/docs/install-searx-with-nginx-on-ubunt...

https://www.linode.com/content/maximize-your-privacy-with-se...
Do something different for a week
You can only go so far with your startup before you need to get some type of work authorization or need to leave the US as you suggest. The challenge is knowing when you need to make this change. For many of our startup clients, it comes down to hours in the day; there's just not enough time to do their day job and also work on their side project.
Physics of Finance (1997)
Things You Are Allowed to Do, Academic Edition
It is not structure per se (although in the case of the leopard there is structure). It is an illicit inference.

Given a diffusion process (as blur) there are an infinite number of initial states which converge to a specific final state. This is the nature of diffusion (think of it as: as long as the total initial energy is the same, the final state of a diffusion process is “homogeneous density of energy”). So inferring an “initial state” is totally invalid.

Edit: look at the 64 to 256 to 1024 example in the “Unconditional…” section and take a look at the artifact on the bottom left (to the viewer) teeth and lip. If that is not an artifact… Same on the top-right teeth.

Also: how does the algorithm know it is facial hair and not just makeup? It might be both but it generates facial hair.
Verifying signatures is messy, because the SSH keys don't store identity information, isn't it?

So basically you know that an specific SSH key signed a file, but that's all you know. Not very useful? Who's going to maintain a file with allowed signers per key?
There are plenty of similar generators, it's not very difficult work.

What I'm more interested is making this a 3D world with procedural geometry, make cities, make it run as a multiplayer game... Not to mention you cannot store all that geometry, it's too large, you can only generate the place you're exploring on the fly and save it to a cache and then render it.

Then you would have to explain all your artists and game designers how to make all of this work. It's a lot of constraints. The multiplayer side won't be interesting unless the world is persistent, so you have to split the world into several servers to not overload servers, because players need to cross the path of other players for the game to feel alive.

AND THEN, you would have to adapt netcode strategies in very densely played areas like cities where you have a lot of players next to each other.

In the end, such game would be very popular, but I don't think you would need a map generator like this, the map would still be done by a human because it would yield better results. What matters is the high resolution procedural geometry, at a low scale: trees, terrain, buildings, etc.

So yes, that's essentially the story of developing world of warcraft, except world of warcraft has several world instances and phases, because their world is not very large when you look how many players they have, they can't have a single world, even when they use phases, which is not a cool feature.
Look up the NHR program, you can probably structure this in an extremely tax efficient manner. 0% tax for the first 10 years.
I've looked a lot more at their bikes now, if 'Apple of the bike market' means overpriced fashion statement then I am inclined to agree. Those prices are absolutely ridiculous.
Dude, chill out. That's just the format of Twitter, which is limited with N characters per post. Of course the author could have just written in a different medium, and link his blog, but you know how short the attention span of people these days. What's relevant is the message, it doesn't have to be written like an Economist or a New Yorker article
Who was more influential on computers? Turing or Gates? Hardly anyone heard of Turing outside of computer science and WW2 history buffs. At least until The Imitation Game movie, and most forgot when they left the cinema anyway.
It's definitely worth trying - there's no downside - but the chance of success is low because there are so many people in the same situation. The limited success I've seen is where someone has a family and is the sole wage earner or someone is working in a field where there are real timing issues/deadlines, such as education, or where someone is working in a national interest field, such as healthcare.
Submarine communication. Acoustic signals can be detected at VERY long distances. These signals cannot.

Spy communication from inside a nuclear facility.
Important question: is there a vim plugin? You know, for those of us who prefer to keep our text editor and operating system lives separate...
Dislike of the CCP is not Sinopobia, just as dislike of the Mob isn't anti-Italian.

So many people really wish the CCP would just loosen their grip a bit so that foreigners/Westerners can have real, two-way relationships with Mainlanders.

Honestly, at least in the circles I frequent, the biggest critics of the CCP are either (non-Mainland) Chinese themselves or Sinophiles. Other people simply don't care that much.
If it was a Western book, definitely, but with books published in the 1980s in the USSR, I am not sure how it works.

The USSR was not a signatory to the Berne convention, so the original rights may be lapsed. Russia joined the Berne convention in the 1990s, but there were some reservations agreed upon that limited the retroactivity.

I think only Russian IP lawyers can answer that question with any precision.
That's government-mandated.
Maybe it is just my problem, but I have hard time studying from a two-column book. I am mostly used to multiple columns in newspapers.
Am I the only one deeply amused that the title of this article is prefixed by “Exclusive” while its content basically boils down to: “The representatives of the Chinese government in the USA are doing their job: representing the interests of China”?
How to Implement a Permute/Transpose Op 6 Times Faster Than PyTorch?
This article will introduce the techniques to optimize the Permute Kernel in OneFlow and compare it with PyTorch’s Permute and the native Copy operation in experiment. The results show that the deeply optimized Permute operation is much faster and more bandwidth effective than PyTorch, and the bandwidth utilization is close to that of the native Copy operation.
Yes, go to https://www.flcdatacenter.com/oeswizardstart.aspx.
Just 'n', 'h' goes to heroku, my last project's hosting
I had a classmate in University who was strongly visually impaired. That guy did not need help navigating.

His sense of location and direction were incredible. Within a few weeks on campus, he could tell you- accurately- which direction any building was. Even off campus, he had this strong awareness of which direction North was.
WebBluetooth Is Harmful