skysight-inc/HackerNews huggingface dataset:
Tor was originally written by US intel agencies specifically to provide cover for spies. The release of the software to the public was specifically to provide plausible deniability for those spies. So there's always going to be some level of control and knowledge the US has about the network.

If your threat model is anything weaker than a hostile nation state then Tor is still probably good enough to use as a darknet. If you're doing anything illegal over Tor then you probably should be more worried about OPSEC failures or rubber-hose cryptanalysis.
Uh, there's plenty of spent fuel components that aren't fissile. It's not a perpetual motion machine. So to say that it's not "actual waste" is rather unhelpful.
I've done a fair bit of developing with caffenol and beerol and a combination of the two on moviefilm, mostly 16mm but the process is the same. Volume of the developer is the issue. Works best in a bucket with 2 liters of developer per 400ft of material to prevent exhaustion.

I personally like the combination of the traditional caffenol recipe combined with Dagie Brundert's beerol recipe.

1L of water (warm)

100g (20 tsp) washing soda

30g (6 tsp) vitamin C

60g (12 tsp) instant coffee

1L beer

On something like Tri-X I'll use a dev time ranging from 15-20 min that I determine after testing. It's a nice balance in contrast between the two developers.
I was with T-Mobile until three months ago. I used their Scam Shield service - the app is still actually still on my iPhone.

I received about 25 calls per day on average that slipped right through their service.

Senior health coverage, car warranty, etc calls. All using spoofed caller ID. All using the same technique of call screeners in India or similar that then forward the calls to US companies buying the leads. I actually had a conversation with a U.S. based insurance agent that was buying the leads and told her of the spoofing and other shady techniques they use. Her response was, “They supply good leads so I keep buying them.”

Anyway, I switched to Verizon and it is no better. I ended up setting my phone in Focus mode 24x7 and whitelisted almost my whole contact list. It was either that or change my phone number. Can’t concentrate on work when you’re being called every 20-30 minutes.
What I really want: to be able to open a port on my computer behind a NAT and have a way for people outside it to connect without using special software.

Is there a solution yet?
Wind turbines in cold climates also require deicing. If you don't deice them, the performance drops dramatically. Deicing takes power too though, a few percent of the total turbine output depending on how often it's needed and how much downtime the turbine has.
Better to OODA Loop faster when a dependency degrades, or is it better to assume it will degrade, build in circuit breakers, and auto-recovery?
Depends on which “Web3” community you're talking to: ethereum, dApps, wallets etc. vs scuttlebutt, dat, urbit, etc.
While I do empathize with bad UX this story does feel like a bit of an unnecessary dive across services without trying to fix the root issues.

If your contact info is not stable then you are going to have a hell of a time with 2FA through your phone. There are alternatives, both hardware and software that will fix this problem for you. Have you looked at what your bank supports?

If the answer is "yes and they only use SMS based 2FA" then fine - the next issue is figuring out why your email provider isn't sending an image. Is it too large? Gmail supports multiple quality settings and has a will tell you the attachment is too large to send - for a single image you should be able to select a lower quality to send it.

This dive into other services sounds like a waste of time. "Good developers" would at least try and understand what is broken before throwing random OTS storage services at it.
I love SMIL. Have been using it to craft custom SVG loaders for almost every brand I've worked with. Loader is usually much smaller than a gif, vector, animated 60 FPS, etc. So good.
Small and medium sized employers are very bad places to work. The Italian definition of small company is one with less than 15 employees, these companies avoid much regulations and practically employ at-will, when they don’t use temporary contracts. A company is considered large if it employs more than 50 people. An Italian medium sized company, would be considered small everywhere else.

In small and medium sized companies, salaries are extremely low, unpaid overtime is the norm and career progression is close to impossible. They are usually family-run, and the only way to progress is to marry the son/daughter of the owner. They can't hire competent people because they can’t afford to pay what abroad would be the salary of an entry level engineer and working conditions are so bad that everybody who can joins large or foreign companies or becomes a public servant, so they can’t work on anything serious, in lack of a better word, and often end up being a sort of expensive Amazon Turk for larger companies.
what does procedurally generated mean in this particular context ?
Pass a law that requires companies to pay black market value for bug bounties. It’s also unethical for big corporations to exploit the US oligarchy to get these fixes for free.
Faking a Positive Covid Test
Density doesn't matter very much outside of niche applications (e.g. submarines). It's not like very running out of space for power production. Cost is essentially the only metric that counts, and current nuclear technology is a bit on the expensive side. Maybe future reactor designs will drastically improve that, but with global warming we don't really have the time to wait for the R&D to be finished.
Solitary confinement is forced isolation. Not even remotely comparable to someone deciding for themselves to isolate.
I agree with your comment, just FYI you could avoid apply on a pandas Series since it loops over every row in Python space. It's much faster to use vectorized operations directly e.g.:

df["balance"].mul(36902.7).div(100e6)

See [0] for explanations

[0] https://stackoverflow.com/a/52674448
Is such data available? Would be interesting to look at.
Right, thanks for clearing that up.

multiprocessing's "shared memory" facility is for writable memory.

What I described is extremely handy as you simply move the parsing code up in the script, before your function definition, and "magically" gain memory efficiency.
The requirement that changing the image a little bit changes the hash a little bit makes the image space smooth and more suitable for machine learning.
Kodi, Plex, the late Boxee are all pioneers and the pillars of what streaming services have of user experience today. I remember when I first saw Boxee interface back at the piracy-wild-west era and thought how wonderful and easy it was to watch a movie with it. I even had transmission setup on a NAS (DNS-323) automatically downloading my preferred shows that appeared without much effort on my TV.

The truth is that I didn't pirate because I wanted to pay nothing for media, I did it because I wanted the streaming experience and ability to have movies available on demand, not some cumbersome physical media whose purpose was only to guarantee studios/record labels profit at the expense of my consumption experience. They didn't care about me so I didn't care about them, something that changed with the coming of Netflix, Spotify, Google Music and all others... Now I gladly pay what I consider a fair fee for their services and amazing hassle-free experience. These wouldn't have happened (as quickly at least) without the 2000's piracy world and the media platforms build around it...
> https://metrics.torproject.org/hidserv-dir-onions-seen.html

Your link shows that there were about 170k v2 onion addresses in September 2020, while there were about 550k v3 onion addresses at that same date. The trends were only pointing up for v3 addresses while pointing down for v2 ones.
You are talking about 2 vastly separate things.

Most uses today of SVG, that I have seen in the wild are icons, graphs and diagrams. Which this TinyVG covers beautifully. Especially for embeded (TinyVG's authors motivation for this) you often need some icons.

Sure if you need something more complex keep using SVG, or create something new.
But for 80% - 90% off web and embedded its enough.

> TinyVG doesn't implement node referencing. In SVG it is done by the `clone` operation, which creates SVG node that references original shape. Using this you can build smart scenes with shadows, reflections, arrayed clones and other interesting effects. It's like DRY principle for art; you can later modify the original shape and see changes reflected in other parts of the scene.

TinyVG is final format optimized for rendering. You can design your graphic with all those futures, and then render them to TinyVG.

DRY doesn't apply since you will not be writing it by hand anyway, but use a tool.

Author clearly states that this is not an Authoring format, but display format.
What you are looking for is better authoring format.

> Edit: I like that TinyVG takes form of very readable lisp-like data description language. Maybe it could be used as a starting point for a smarter vector format for authoring graphics and not just for distributing the end results.

That's not TinyVG format. That is just sample generator that comes with TinyVG suite. TinyVG is binary format, and you can't edit it with text editor
Yes, but those "tractors" would be prohibited as well. The motor ways in Germany are only for vehicles which can drive 60kph or more. I guess the law is similar in Sweden.
China powers up fourth-generation nuclear reactor in steady zero-carbon push
Renaissance writers like Machiavelli were very influenced by the romans, to the point where some were even into Roman LARPing: Wearing togas, refusing to speak vernacular, etc.
In many parts of the US, there's poison ivy, a noxious weed that can cause severe itching, rashes, ect on contact with skin. It's common where I live, so I've become very good at identifying it.

Sometimes it's just groundcover. Sometimes it's a shrub. Sometimes it's a vine. It's surprising how its stem can take many different forms.
> Come now if you are only watching rips of your own legally purchased media the subs would be available to you already…

I can't figure out how to get subtitles for stuff I DVR off my OTA TV so this would be nice for me and I am not a pirate.
Just forward the port?
Not the parent, but I've been using the kodi-rpi out of the archlinuxarm repos.

https://archlinuxarm.org/packages/armv7h/kodi-rpi
An actual proposal would be Georgism:

https://astralcodexten.substack.com/p/your-book-review-progr...

https://astralcodexten.substack.com/p/does-georgism-work-is-...

https://astralcodexten.substack.com/p/does-georgism-work-par...

https://astralcodexten.substack.com/p/does-georgism-work-par...

A quick summary from wikipedia of Georgism:

> Georgism (known historically as the single tax movement) is an economic ideology holding that, although people should own the value they produce themselves, the economic rent derived from land – including from all natural resources, the commons, and urban locations – should belong equally to all members of society.

Here rent and land are given precise definitions.

Personally I found the blogs above a very interesting read (or listening).

also available in podcast form

https://sscpodcast.libsyn.com/your-book-review-progress-and-...

https://sscpodcast.libsyn.com/does-georgism-work-is-land-rea...

https://sscpodcast.libsyn.com/does-georgism-work-part-2-can-...

https://sscpodcast.libsyn.com/does-georgism-work-part-3-can-...
According to their whitepaper the encryption keys stay on the device and can be only recovered with a seed phrase which Slik has no access to, allegedly. There is no source code to verify the details, but they use AES-GCM. That either requires hardware support or a technique called bitslicing to be secure, but it runs on the client, which is fine. The confidentiality of the data however might not be protected because the storage can see the access pattern of the chunks. This is not even theoretical, keyword recovery can be trivial because of a search protocol.
You probably also believe crypto is used by those people exclusively..
You can use `act` to run actions locally. Most functionality is supported. Works a treat better than sending it repeatedly just to test how things behave in CI.

https://github.com/nektos/act
The grandparent was making out the roads to be incredibly dangerous, that you couldn't possibly ride a bike on them. (Dark, ice covered, no street lamps!). If they are really so dangerous that you can't ride a bike on them then they are too dangerous for a teenager to be driving on.
yes absolutely,

these VCs have scams like Ethereum which they claim to be p2p networks but all the people making money of this don't even know where the peers are on this p2p network.

The validation nodes run on handful of hosted nodes on a software(ethereum) that changes it's source code and make it backward incompatible all the time, making it centralized at both who develop that code AND the handful of nodes that run it.

a16z has no shame perpetuating these total scams.
>> Most of us have contracts that grant IP of what we create to our employer at least during work hours

That's an American thing. I work in Central European country, and IP that I create belongs to me until I pass the rights to my employer. Conveniently, my contract states that the act of committing my code to employer-hosted git repo is the act of giving up the copyright.

You can easily do that for two employers at the same time.
are you suggesting we keep wearing masks in public forever? Surely someone takes this stance but it sounds ludicrous to me. (Although I wouldn't mind normalizing it for people who are feeling under the weather but still must travel, say.)
that is hilarious

I remember people used to share their C:/program Files/ directory
Nothing abstract about it. Low-level waste is really not dangerous.
Most roads are in cleared of snow and ice and are usually well lit. If the street is not well lit and it is covered in ice then yes a teenager should not be driving on it.
This Was Tomorrow: Pieter Aertsen's “Meat Stall” as Contemporary Art (2004)
ngrok (https://ngrok.com/) and localtunnel (https://localtunnel.me/) come to mind.
https://sci-hub.st/https://doi.org/10.2307/3177418
Yeah incremental games are like crack to some people. I had major addiction with NGU as well, but then I gave myself unlimited resources and saw firsthand that the grind never ends. That made me loose interest.
I wonder if, with a couple million passwords and their salted hashes, we can reconstruct something similar to the original password and reduce the search space somewhat.

I know it should not be possible, but, still, I’d love to play with that kind of dataset.
I think that is only possible if a have control of the NAT/router, right?
https://en.wikipedia.org/wiki/Technological_singularity
No, JavaScript running in your browser can connect to it. No remote access required. Of course, if you do allow remote access it is even worse.
You asked "in general."

It's because "UX" is presently way too full of itself; it passes off a lot of mere fashion and preference as "objectivity" or "science" and then other UX people get suckered into believing it, not just continuing arbitrary trends, but also reducing usability and optionality along the way.

Poofy vs. flat buttons is just a preference, it's not science.

So fashion is focused on instead of real usability. Fixing this will take time, and probably regulation type measures. The analogue here is architecture. It's great to make something beautiful, but if you don't have wheelchair ramps or the bars on the railing are wide enough for a kid to get a head stuck in you don't get to build the building.

UX needs more of this.
To add on your anecdata: I've seen an MX440 with a fan glued to the die. Without a heatsink and I don't think that was a thermal glue.
It worked badly, but it didn't die.
For me it was a combination of IDE that allowed very easily to merge different assets (text, vector graphics, sounds) with basic scripting and a timeline.

Now you kind of have to think in code, and architect the site as a whole, there's less creative impulse, or simply messing around to find something cool. This interactive messing around has to be visual, ideas should be easily copy-pastable, etc.

Because it was easy to experiment with the whole interactive media, and you didn't really have to worry about differences in player (no touch, no mobile, player was independent of browser), you could create wild stuff in very short amount of time, and everyone could play with it in the same way.

I loved Flash. Sure, it wasn't accessible, wasn't SEO-friendly or searchable or linkable, and had no future in mobile, but it was a magical creative canvas quite unlike anything available now.
What makes you think that exactly? I believe these people cause damage, often irreversible, and that crypto protects them. A proper cost/benefit study has not been taken here IMHO!
What Japan lacks in overweight population, they make up in an elderly population that's larger than most countries, so I'm skeptical this is enough to explain the massive discrepancy.
>We're protecting our end users from themselves by forcing the removal of Tor v2 protocol from the codebase.

All of your links describe why V3 is more secure and superior to V2. Are you whining about the increased security, or am I misunderstanding your post?

If I'm not misunderstanding, why was the over one year of warnings and multiple years of discussions not enough time to prepare?
Congress will not shut down facebook, remember PRISM.
By many orders of magnitude, I think. There are only estimated to be 10^24 or so stars, which is a lot less than 2^256, right. Astronomical is not in the same league.
Thanks for the tip! You weren't kidding...

%time df['balance'].apply(lambda x: x * 36902.7 / 100e6).describe()
Wall time: 12.6 s

%time df["balance"].mul(36902.7).div(100e6).describe()
Wall time: 2.33 s
Yes and no. If you are thinking about cryptographically-secure hashes, then you're correct. However, not all hashes are intended to be cryptographically secure; this particular kind of hash is called a perceptual hash. Perceptual hashes are specifically intended to be able to identify slightly-modified images; and for that purpose we can't have all of the cryptographic security of, say, SHA-256.

The third type of hashing is the dirt-simple hashing schemes you see used in hash tables; although even there denial-of-service resistance is still a desired property for public-facing web services.
Assuming you live in a place where you can get a high paying job and/or leave the country to get one.

Taking a US centric view on this is a great way to ensure nation states have compromised your security.
humans are definitely not rational. Our reaction has been driven by fear and anxiety out of all proportion to the actual threat here. Obesity is still a bigger killer than covid but we have not spent the same resources tackling it.
Sort of.

It's like being in the world's biggest ever lottery syndicate, except if you pick the winning numbers it gets sent to a specific other person who's website you're on. If someone, eventually, hits the jackpot then the owner of playxo.com is going to be very, very rich.

I mean, I'd assume, cynically.

The chances of anyone hitting a green wallet are still incredibly narrow, but you never know.
The question is, are phone operators even interested in doing this? Marking robocalls as such - sure, but blocking altogether - I don't think so.

Something interesting happened I think a few years ago, when a hosting company in the US that turned out to be the major hoster for spammers went down for technical reasons and the world went spam free (by 90%) for a couple of days. You'd think it was obvious what to do... but nope, once the hoster was back everything was back to normal like nothing happened.
> Context of the illegal image matters too. I'd be very pissed if it was a common shock image like goatse or a dead body, but more understanding if it was child porn.

Why should content be a concern, or relevant, for a registrar?

If this was a CDN then I guess that this sort of meddling could be debatable, but DNS?
This seems to be a thing now. Overt rejection of the authority of laws.
Makes me wonder how long a civilization can continue if that attitude is widespread.
That is a good video. I do have a couple questions. I asked these questions at a company that implemented blockchain but was never really given a complete answer.

- Who runs the ledgers and what guarantee is there aside from cryptographic smoke that the entities/corporations running the ledgers can't collude? This gets into the question of independent cryptographic audits and looking for mathematical back doors. How can one know with certainty that one entity can't make subtle manipulations to this systems/markets?

- How do you delete data from the blockchain? Let's say someone decides to use blockchain for identity management. Some day a court agrees that a person needs to be protected under witness protection but their identity is in the blockchain. How do you remove it? Not revoke it, but completely remove all traces of it?
You argue the pairing is more expensive and then give arguments to the contrary.

To be sure, pairing, in order to be effective, has to be properly planned and executed. It is unlikely to work if you just leave it to your employees to figure out (unless you have some really good folk that can figure it out).
On-the-wire DNS forgery isn't even close to the biggest DNS hijacking threat (that'd be registrar account takeover), so it's hard to imagine a CA policy shift motivated by DNSSEC.
Yes I think semantic technologies will become more popular as the performance overhead will be less a problem.
I use these operations on a daily basis, not in interviews. If you're ingesting third party data somehow (even if it's structured like JSON or XML) there are going to be cases where you need to hand roll a simple parser.
This tech never really took off and is a stillbirth.
Past, Present and Future of Computational Storage: A Survey
Not to downplay this result, after all this was achieved in Belgium, home of Brussels & EU institutions, which probably have great influence over local politics. However it's still sad that we have to celebrate such small victories and we're not fighting towards establishing law that promote positive rights towards protecting privacy both against private and public entities.

We're on the back foot here, and the general public is not even aware of this.I used to think this was about technological literacy but i don't think that's the case: most people don't know what's going on, they don't necessarily care how it happens, they just need to know the end "result", which they don't.Another issue is "law language" being hard to swallow, and politicians can always wrap this language as a candy and pretend it's to : protect the children, against terrorism, or some other minuscule reason that won't justify the abuse and also logistically can't be enforced in an online medium.
There was a period, over a decade ago now, where I was constantly getting scam calls from certain area codes and prefixes. Looking them up on TelcoData[0], the prefixes and thousands blocks were all from various phone companies I'd never heard of (and had nothingburger websites). It turned out that scammers had set up actual phone companies to carry their traffic. They were not only doing their usual scamming, but also raking in cash from the resulting incoming Caller ID lookups. These have either been shut down or have fallen under the radar.

It's a shame that (just like TCP/IP), SS7 was designed in an era of good faith and didn't have security baked into it from the start.

[0] https://telcodata.us/