skysight-inc/HackerNews huggingface dataset:
Not practically. The standard requires that the secret contain at least 128 bits of randomness, and recommends more.
Can we not run the normal Haber-Bosch process on renewable energy or is it somehow tied to coal/natural gas as this article seems to insinuate?
Yup! For some reason I can more easily understand raw documentation and API spec. When I first started it felt more like gibberish
Better than even WarGames, The Matrix or Blackhat? Better than Swordfish or Live Free or Die Hard? Hackers even?

I always considered Sneakers a spy movie rather than a hacker movie, properly sandwiched in a triple-feature between Three Days of the Condor and Spy Game.
Just because a Maserati Quattroporte costs $100k doesn't mean a BMW 5-Series isn't a luxury.
The liquidity provider reward or index/underlying arbitrage reward, etc. Yes there is a stochastic component and various other things, I'm only talking about the edge from lower latency.
You create an open participation group which focuses on these problems. Anyone can contribute to that group and it meets on a regular cadence. I’ve done this many time and it works wonderfully
> Once you understand what’s going on with the double slit, all the other quantum effects that are allegedly mysterious or strange also make sense. Take for example a delayed choice experiment. In such an experiment, it’s only after the particle started its path that you decide whether to measure which slit it went through. And that gives the same result as the usual double slit experiment.

Delayed choice seems pretty silly in relativistic terms to me. If photons are massless, and distances they travel are 0, then there is no such thing deciding to measure the slit after the photon is emitted but before it reaches the slit, right? That's just a figment of our reference frame.
It's interesting to think that we are currently part of what the future AI(s) will consider their abiogenesis moment of creation.

I wonder if they'll one day far in the future debate the nature of their genesis and how common it is in the universe.
I use Objective-C when using interfaces that require lots of C-style parameters. In particular Metal requires unsafe pointers to vertex and fragment data and I find the contortions you have to use to get Swift to send such data to Metal to be too much work. It’s just more straightforward in Objective-C. It can be done in Swift, but it ain’t pretty. (Or at least, it wasn’t the last time I tried, which admittedly was about a year ago. Maybe it’s better now?)
I have no idea what you're trying to say here. I can't even tell if you're agreeing with me or disagreeing with me.
Yes. It is a Java application that originally was written to facilitate the upload of large intermediate video files from post houses to the iTunes Store ingest systems. I know because I was there.
There were plenty of dangers. One such threat could be the reliance on charcoal (burning trees) for high heat tasks like smelting metals. If you don’t have coal you’re gonna have a tough time making something like steel in an economically viable fashion. You will, in time, run out of trees to burn. And no, comparisons to modern day don’t count. You need to discount our ability to import tree biomass from other areas against the dependence on fossil fuels that enable that cheap transportation of goods.
(I'm the cofounder at https://clerk.dev)

We - and I'm sure every other vendor - limit OTP tries.

The guidelines for authentication are very well-defined by NIST 800-63B. For example:

> In all cases, the authentication SHALL be considered invalid if not completed within 10 minutes.

https://pages.nist.gov/800-63-3/sp800-63b.html#5132-out-of-b...

Depending on the exact type of OTP, NIST may have different guidelines.
Of course. I assume that in those papers, she demonstrates a similar lack of understanding of the details. Or that she doesn't research on quite the same things she talks about in her public-facing content.

Someday I'll get around to reading some of them, and I'll find whether that assumption is wrong.
I've been in the embedded space for over 10 years so I figure I'll give my thoughts on the matter. Apologies up front as this will be a little ranty.

> Embedded developers are very conservative, they don't chase the shiny and believe in using old tried and true technology.

This is underselling the point. They are conservative in the same sense as an electrical engineer who refuses to use ECAD software or transistors because drafting tables and vacuum tubes are tried and true. There's a difference between "[not] chas[ing] the shiny" and just being obstinate.

> With C you have a HAL provided by a vendor that allows very rapid bring up of the hardware which is 90% of the battle in embedded. Switching to Rust you would have to write your own.

I'm not sure why vendor supplied HALs - which can be pretty hit or miss in terms of quality - are so important for board bring-up. In the end it's a minor milestone in the development lifecycle for all but the simplest of projects. In the projects I work on practically all of the time is spent on the complexity of the firmware and how it interacts with the various networks of sensors, actuators, cellular, BLE, storage, etc. Besides, last I checked there were many people putting effort into HALs written in Rust.

> With C you have billions of lines C libraries at your disposal to bring your product to market. To use Rust you would have to write your own or deal with the shims and lose the Rust benefits.

First off it has not been my experience that libraries are used often. As you mention later FreeRTOS is generally the only external code I see pulled into a project, everything else is written from scratch or copy pasted from a previous project which was written from scratch or copy pasted from a previous previous project etc. Let's assume that libraries are commonly used though, how exactly do you use them? This is one point of C/C++ that is still absolutely dire. Rust has Cargo whereas C/C++ has a lot of wacky ways to deal with it such as through git submodules, or cmake, or possibly conan. Generally speaking what I see is the code being copy pasted into the project and never updated despite the growing security concerns for connected embedded devices. Of course Rust offers more than mere package management, Cargo is also the build system, it also has support for automated testing and documentation. All of these things are typically afterthoughts at best in many embedded projects.

> I do 4-5 embedded projects a year, using Rust and not having the HAL and C library ecosystem would put those projects ad a competitive disadvantage.

To be clear at this point in time if I were asked if an embedded project should be written in Rust my answer would be "probably not", although given 5-10 years that answer very well may change to the affirmative. The ecosystem is young and growing; as long as the growth continues it will likely be a viable alternative in the future.
Association of Sleep-Related Hypoxia W Risk of Covid Hospitalization and Death
Sure. Doesn't mean I never fuck up.
Well, the thing is, neither the standard (non-local) quantum mechanics nor the superdeterminism answer this question, as they both simply talk about a wave function and its taking a different shape depending on what measurement is made; the only difference is that one completely gives up on futher clarification of what the wave function physically represents while the other encourages looking for hidden variables.
> only it's not what the idea behind it was

It's like the article says:

> At some point in time, this idea has been so widely misunderstood that the wrong definition of DevOps became the right one.

See also: 'agile'.
It’s not impossible — Lisp exists and has been used in both contexts for decades.

Swift needs some work to get there. There are a huge number of gaping holes, but these would be a start:

- scripting: a native RegEx literal type

- systems: replace Codable with something easier to use/more performant

- systems: better logging interface

Edit: formatting
Does it assume that each code is new and not repeated? Because they can def be duplicates.
Africa's Rising Cities – How Africa will become the center of the world’s future
I'm not sure I agree on the safety aspect - if they only thing preventing unintentional peripheral access is verbosity, that's not really the kind of security that matters, is it?
Rapper Drakeo Stabbed and Killed at Los Angeles Music Festival
> the only synchronization issue is between interrupts and main program, a case rust doesn't handle afaik(?) and in 99% of the cases a ring buffer or simple flag variable is enough.

I'm not sure what you're expecting it to handle that it isn't. That static flag or ring buffer needs synchronization and rusyc will absolutely not let you forget that (in safe code).

One technique you get in Rust that's very compelling for embedded is using traits, especially when implemented on zero-sized types, to cleanly express configuration. Personally I abhor all those one-off table generating scripts.
Except in the context where there's a significant segment of society arguing against using them at all, in which case I think it could easily be taken as an argument against that faction. I mean, these were all just point form; there are multiple ways to interpret them, so absent clarification, we should assume the most reasonable.
I've seen clover grown in the off season. It'll need some light though, so the shade of something over it might be a problem.

There are lots of good combinations of plants to grow together, like the three sisters: https://gardening.cals.cornell.edu/lessons/curricula/the-thr...
One problem with the two-step approach of only prompting for 2FA after successful auth is it leaks a lot of information - an attacker can confirm that they got the right password, or even just that the account exists and has 2FA enabled.

For TOTP-based 2FA, it would ideally prompt for all three (username/password/TOTP code) immediately, not indicating which part of auth failed.

This may not always be desired, for example when TOTP is just one among several 2FA options.

In those cases, at the very least always prompt for 2FA for accounts that require it, regardless of if password auth succeeded or not. Don’t tell the user if it was the password or TOTP code that failed.
The premise of your response is that these challenges we face in our culture and politics are best addressed by a 4-year liberal arts education. I reject this argument as well, and again for a multiplicity of reasons, not least that it implies that only a subset of people who hold degrees are qualified to engage with society.

I don't think you mean to belittle the skilled trades (which, ultimately, the industry most of us work in is destined to join) the way you're doing here. But it might be worth reflecting on how what you're saying might be coming across.
Social "scientists" and journalists are alike in that both seek to mislead using misleading and often madeup Statistics. The world would be much better off without either one.
Do a small research project first to get the taste of it and see how you go. One option is a masters by research; another is an honours degree (this is something we have in Australia and at least in CS includes a research project, not sure about other countries).

You mentioned in another comment you're about to start an undergrad degree. I'd recommend getting to know some professors early on and letting them know of your intentions; they'll be able to give you guidance and maybe give you some exposure to an existing research project their group is working on.

Also a "substantial original contribution to knowledge in your field" isn't as big as it sounds. See https://matt.might.net/articles/phd-school-in-pictures/
One grocery store doesn't bury another by being humanly imperceptibly faster at returning carts than the other by a microsecond, and if they were forced by the structure of the market to spend tons of money on that before investing in being open 24/7 which real customers care far more about and provides far more value, it would seem really weird and like something was really messed up with market incentives in the grocery store industry.
Well, accelerating a 100 ton spaceship to 0.99c (assuming some sort of beamed propulsion) requires only 2000 Terawattyears [1].

Of course, to turn 1e6 years into 1 year relative time, one needs like 0.99999999c, one needs 2 million Terawatt years [2], which is a much bigger energy investment, but still not on the order of annihilating the planet.

Breaking is gonna be a bitch tho.

[1] 100000 kg * (0.99 * c)^2 / sqrt(1-.99^2) in Terawatt Years

[2] 100000 kg * ( 0.99999999 * c)^2 / sqrt(1-0.99999999^2) in Terawatt Years
> Democratic senators represent 40 million more people than Republican senators and their agenda can't be passed.

Sorry, but it needs to be said that this is a fundamental misunderstanding of who the senate represents. The senate represents the states, not the people. That is why there are only 2 per state. The house represents the people and is proportional to the population.
"but you will end up with a different process and set of tools for every team"

This keeps being trotted out, without question, as the reason for the shared devops platform team. So what if each team has their own opinionated build, scan, deploy tooling?

It's used for compliance security scans now, so we are never going back.
It doesn’t matter what’s legal, it matters what the company you work for thinks. Anything else is over analyzing the situation.

The bottom line is working for two companies full time concurrently is abnormal and it’s not a stretch to imagine you’re not getting 100% of your employee while they juggle two jobs.

I’d also fire the report if I discovered them working two jobs.
> Its a shame the TOTP standard does nor support variable code length, 8 symbols seems to be better for high value accounts but still usable

It does. TOTP (RFC 6238) builds off of HOTP (RFC 4226), which states (§5.3):

> Implementations MUST extract a 6-digit code at a minimum and possibly 7 and 8-digit code. Depending on security requirements, Digit = 7 or more SHOULD be considered in order to extract a longer HOTP value.

* https://datatracker.ietf.org/doc/html/rfc4226#section-5.3

There is no inherent limitation in the protocol on how many digits to use (AFAICT): the pseudo-code examples have the number of digitals desired as a parameter in each function.

Further, HOTP even discusses (§E.2) is to use (six+) alphanumeric characters ([A-Za-z0-9]) instead of just digits ([0-9]), though digits are "desirable" for easier entry.
This whole concept about withholding information

The first two links specifically say there is not enough information to make a full determination. Public health policy shouldn't be based on "We don't really know, but maybe?"

Also it's not withholding information:

Proper nutritional guidelines are published all over the place, including recommended daily intake of vitamins, and we've known pretty much from the beginning that otherwise healthy people are much safer from COVID. That seems more than sufficient to provide people with guidelines about how to stay low risk for COVID with respect to their diet. The government shouldn't have to spoon feed every detail, a little self-reliance should be expected of the population. Especially when singling out any one substance could result in unanticipated consequences.
> Could dinosaurs have evolved to discover computation?

At least judged by brain-case, (predatory) theropods would have been on the upper-end of dinosaur intelligence. Therefore we have that birds/avian dinosaurs are descendants of possibly the most intelligent branch of dinosaurs. Birds had as much time as mammals to evolve a candidate for human level general intelligence but never did. The most intelligent dinosaurs† that have ever evolved seem to be Parrots, Crows, Ravens and their close relatives.

Though bird brains (IMO) are better designed, able to keep up with higher primates using fewer more densely packed lower energy neurons, they do not match later homininans in generality.

-----------

†The Silurian hypothesis essentially observes it would be extremely difficult for definitive evidence of a past advanced civilization to persist for longer than 10^6 to 10^7 years. It also notes that it's more difficult than one would naively assume to rule out the possibility of an advanced civ based on the geological record.

It's unlikely to be correct however. I went into more detail in this post: https://news.ycombinator.com/item?id=29514626.
Maybe she just didn't see herself as a victim? Consent, language and culture are complicated. People in the US can describe a coercive experience like that without automatically labeling it as rape or sexual-assault.

Of course given the radio silence, his political power, and being 25 to his 65 at the time... that seems less likely.
But reference frames do have physical significance (and the distance traveled does depend on one).
I think this is a great step and something that needs to be talked about more. To me breaking the strict hierarchy is the new remote work.
What I’ve seen work really well is treat all products like open source projects. Some people call this “inner source” but that term is a bit muddled.

Work is organized around projects and functionality, not dumb middle management. The group around the project keeps an open backlog, anyone is welcome to participate in meetings or pickup tickets.

Those that contribute the most get the most say, a true meritocracy.

Developers are simply judged based on the scope of their contributions.

It’s dead simple and it works really really well
In QM, evolution is unitary. The Born Rule is an empirical observation that is adequately explained by the decoherence of a quantum system into entangled states of observer, environment, measurement apparatus and the system being measured.

E.g. the master equation for a quantum density matrix governs its evolution when the environmental conditions are not completely known or modelled. Classical ensembles or 'decohered' states occur as a consequence.

QM is formulated as a deterministic theory. When you try to model an open, interacting system without tracking its environment, you have to sacrifice determinism in that model, because you are failing to track all the information in the system. You settle for probabilistic quantities. Nothing quantum about it either-- same thing happens in classical mechanics. They call this "classical thermodynamics".
Net inflation from 1914-1929 nearly halved the value of the dollar w.r.t. the official exchange rate with gold. I cited this with references.

There's no way you can talk your way out of that.

Pegging a currency against something one has no control over, then inflating the heck out of the currency, always results in a crash. The banks continued to fail until FDR suspended convertibility to gold.
> Of course Rust offers more than mere package management, Cargo is also the build system, it also has support for automated testing and documentation. All of these things are typically afterthoughts at best in many embedded projects.

Completely agree. I'm starting new embedded projects in Rust mostly because cargo test is a force multiplier. (well and also the expressive type system)
This is one of my favorite weird biological facts. It actually happened to a friend of mine. It shows that the programming for regeneration is in there, we just need to activate it.
> Superdeterminism says that the initial state of the universe determined that we would measure the particle, and therefore it goes through one slit and there's no interference.

Where did you get this from? I don't think Sabine implied that. From what I understood, it is more like the measurement interacted with the particle and it changed its behavior. I don't see why we need to consider that it was always meant to be that way.
This got me thinking:

I regularly read source. And one of my pet peeves with TypeScript is that I will click on a type and have to walk half a dozen types deep to understand what it is. Because the library has sensibly abstracted types to be DRY and whatnot.

What I want is a type flattener that I can point at a type and it basically links it all so I see a raw type in all its verbose but complete glory.
I agree that federal funding, first issued several decades ago, has since not kept up with inflation and l has led to the current state of things.

Prospective students, their families, and the schools all responded rationally and predictably. Funding either needs to remain consistent with inflation or slowly phased out.

Good schools do worry about repayment of applicants, but not all schools are good or in a financial position to worry about that.

What most schools are trying to do right now is rapidly expand their endowments with the hope to be able to consistently and sustainably offer tuition discounts and aid to students. The schools with the largest endowments are already essentially free if your family makes below a certain threshold, however this is only a handful of elite schools. For most schools they have what is called a “discount rate.” That is, the rate of students that receive a discount on the sticker price of tuition. These days most families receive a discount to most schools, which is a pretty dramatic from even 10 years ago when most students paid the full tuition price.
I do find the reverse EEE where I directly integrate LSP into Vim in my terminal extremely ironic.

Thank you Microsoft. I will not touch your appalling software, whilst happily enjoying a paradigm shift in Haskell dev workflows.
I've heard the interference discussed as an "interference of probability amplitudes".

But in superdeterminism, it seems as if there are no probabilities in that sense, or am I missing something?
The thing I don't understand is why some OTP systems have started issuing 7-digit codes via text/email (e.g. Sendgrid). I have to imagine Sendgird is competent enough to lockout the account after a few failed OTPs and/or limit the duration a code is valid, so I don't understand the need for the extra digit. It makes mental chunking harder, and is nothing but security theater if the above two checks are in place.
probably cause they taste like crap?
I think the idea is that, as you get good at spelunking through source code, it becomes faster to find the answer in the source than to do anything else. E.g. I was wondering how division worked in Java, and right after searching for "ArithmeticException" in openjdk I ended up looking at HotSpot's implementation of div. Turns out (based on a source code comment) that it's defined in the JVM spec, but how would I have known that?

Some codebases don't have source available, e.g. Windows, so there I guess one would use the docs.
Your search history is something quite intimate/private, so props to the author for sharing it!
Climate change is an existential threat. That doesn’t mean reed blade windmills are a viable substitute for fossil fuels.

It is utter nonsense to think you could have fueled human growth with such technology to a remotely similar scale.

Without fossil fuels you have no cheap transport fuel, no green revolution, no industrial revolution, many many metals, plastic, and probably many more things.
Nit: the single slit case still gives you an interference pattern. It's just that it's a single slit pattern and not a double slit one
Java NIO can mmap a file of bytes or ints or whatever without using the heap’s private pages, and there are some JVMs that persist and reuse jitted machine code.

I’ve read that games and simulators schedule realtime asset loading pretty carefully; what other problems are solved using large constant data?
It seems that can't be true, because if you randomly decide after the particle is launched whether to measure it or not, the interference pattern still appears.

So it's not the measuring that does anything in superdeterminism apaprently, it's that if you do measure it, that was "known" in advance by the state of the universe.

If not that, what is supposed to be going on (physicists please respond).
> legislator

legislature