skysight-inc/HackerNews huggingface dataset:
Mostly similar to block ciphers or permutations. Differential cryptanalysis is a good starting point. Usually one starts with a reduced-round version, often a single round. Break one round, then see if that can be extended to 2, etc, etc.

The cryptanalysis of Meow Hash[1] is instructive, since it's a weak hash and actually vulnerable in full.

There's also a good Differential propagation analysis of Keccak[1] paper, using a reduced-round Keccak.

There's also Rotational cryptanalysis. Here's a paper on Keccak uses that technique.[3] It was first formally defined by Khovratovich and Nikolić.[4]

[1] https://peter.website/meow-hash-cryptanalysis

[2] https://eprint.iacr.org/2012/163.pdf

[3] https://eprint.iacr.org/2012/546.pdf

[4] https://www.iacr.org/archive/fse2010/61470339/61470339.pdf
yup thanks for the reminder, I usually go with the app above because it allows to draw on top of the screenshot and to copy in memory (e.g. to copy and paste into some IM), e.g. adding arrows, text, lines, something I use for example to highlight areas of the screenshot
Median income is not the mean. It is the boundary where 50% make less, 50% more. It’s not skewed by outliers like the mean can be.

The median for 45-55 year olds is much higher than the population overall. It’s the highest of any 10-year cohort, IIRC.
Built to Burn (2018)
Alternatively: I'd point out that the camera app tends to be a highly battery-draining activity on a phone. Most phone users do not leave the camera app up 24/7.

(And as a digital camera user - at least I can hot swap batteries. I miss my old cell phones that allowed for this.)
It's not an attack vector. It's a theoretical way of hiding data that cannot be itself used to attack anything, because malware needs to run to do anything, and to do that it needs to exist in data areas visible to the host, not hidden areas that aren't.
I think the issue is how well remediated it’s actually is. I presume that there are a reasonable number of people who doubt that the remediation was actually complete enough to be safe against wild fires
The animations are a real pain. Who decided to make the animation to switch desktops almost one second in length?
Chewing gum is largely an American phenomenon and seems to be past its peak even there. I'd be surprised if the number of gum chewers doesn't drop over the next 50 years.

I'll readily grant that the motion of the jaws is unlikely to change though, at least until Zuck figures out a way to sell virtual gum in the Metaverse.
Bitburner is an idle game about hacking that teaches real JavaScript
emacs, ffmpeg, imagemagick, ...
ISPs are not platforms. If they want to meddle with traffic they should lose all common carrier indemnity.
Napkin math: 7V/2280mAh = 16Wh or equivalent to 3.7V/4300mAh (USB power banks are always measured and marked in 3.7V and mAh as unit to produce largest comparable numbers)
Given “no hospitals have been penalized as of late December, according to the Centers for Medicare and Medicaid Services, which is responsible for enforcing the rules,” this comes close to dereliction of duty by CMMS. That said, that hospital’s spokesperson said they will be in compliance by the New Year, so maybe this is just a work in progress.
I believe incremental mode is still off by default.
Nice. I missed those links and thought it was just a repo to download them from.

I suggest they make the screenshot grid clickable to the respective game page.
Prevention - eat less

Treatment - eat less.

You should be very angry at them. If they eat less, they would not be such a burden on our health care right now.

If you are not angry, then you are very selective about it, and you are just cherry picking... double standard, and so forth.
> While his essay doesn’t use the words “abundance” or “post-scarcity”, it gets pretty close. My guess is that the guy who gave the Internet away for free probably approaches technology from an abundance perspective.

Thanks for that essay. I actually didn't see anything that got close to post scarcity. The only point that seemed to touch on it was the point about Open Access but it seemed to be closely scoped to academic work.

> My guess is that the guy who gave the Internet away for free probably approaches technology from an abundance perspective.

Maybe? Giving things away for free doesn't lead to a post-scarcity mindset. Not every person that donated to charity or volunteers with their time thinks the world can get there either.

> I’m curious what has led you to the opinion these people are wrong? I’m interested to know about histories of the web that reflect a philosophy of scarcity.

It's hard because a "philosophy of scarcity" is pretty ill-defined. As early as 2016 [1] Berners-Lee was pushing the W3C to standardize web payments. And HTTP status code 402 Payment Required was in the HTTP spec since at least RFC 2068 [2] in 1997. So at least since then someone thought that the internet would be used to facilitate payment.

But that's enough uncertainty for me to comfortably say that the internet was not designed for (or even against) post scarcity in mind. Therefore there's no ideological connection between post-scarcity and the net or the web.

[1]: https://www.w3.org/blog/wpwg/2016/12/16/web-payments-tractio...

[2]: https://datatracker.ietf.org/doc/html/rfc2068
So you'd like Dropbox to "protect your data" by deleting it?

I'd rather see my family photos leaked to hackers than see them purged from existence forever because I forgot to log in enough.
>"The solution?"

# echo 0 > /sys/devices/system/cpu/cpu{121..127}/online

>"Disabling just one core makes the game start, but then it segfaults when the menu opens. Disabling six cores makes the menu work. Disabling seven makes the rest of the game work too."

What path do you walk to be able to figure out this kind of black magic by yourself?
If the Nazis had free labor, they would have done better, but they still would have lost because the US was bigger.

The USSR likely would not have prevailed against the Nazis if the US didn't supply them. Or at least it would have been far more difficult for them.

Synthetic rubber - "Production of synthetic rubber in the United States expanded greatly during World War II since the Axis powers controlled nearly all the world's limited supplies of natural rubber by mid-1942"

https://en.wikipedia.org/wiki/Synthetic_rubber#World_War_II

Synthetic fuel - "During World War II (1939-1945), Germany used synthetic-oil manufacturing (German: Kohleverflüssigung) to produce substitute (Ersatz) oil products by using the Bergius process (from coal), the Fischer–Tropsch process (water gas), and other methods (Zeitz used the TTH and MTH processes)."

https://en.wikipedia.org/wiki/Synthetic_fuel#History

The V2's were fueled by alcohol from potatoes.
A few tips/software recommendation in no particular order:

- On iTerm2 you can setup a system wide hotkey to toggle a floating terminal in front of all your windows, whatever you're doing [1]. This works even in full screen apps. It really changed my workflow with iTerm, and is really handy.

- For system stats in the menubar, I really recommend iStat Menu [2]. It's paid (12$ for a license), but the quality of the graphs and interface makes it well worth it imo.

- If you have an external display and want to precisely tweek your resolution, I recommend SWitchResX [3]. It's mostly a GUI that wraps some display CLI tools. With it I adjust the resolution of my 4k external monitor currently, running it at 3200x1800 with HiDPI, and adjust it based on my eye fatigue.

- As a more powerful and versatile replacement to Spotlight (Cmd+Space), Alfred [4]. You can customize it to run anything you want, from converting timestamps to dates, opening apps, search the whole system, run scripts, etc

- If you have too many icons in your menubar and want to hide some (either totally or behind a button click), Bartender [5]

[1]: https://apple.stackexchange.com/questions/48796/iterm-as-a-s...

[2]: https://bjango.com/mac/istatmenus/

[3]: https://www.madrau.com/

[4]: https://www.alfredapp.com/

[5]: https://www.macbartender.com/
I think the point is, like the gift analogy in the post, that once you're doing it for money it's no longer free.

Not free as in beer or free as in speech, but free as in choice (or free as in time). :D
A year ago I was simjacked by someone who walked up to a T-Mobile kiosk in San Diego and acquired my phone number by simply claiming they were me. This bypasses every possible layer of protection you can set up with T-Mobile; an actual human employee just went ahead and gave my SIM away.

Fortunately my wife is primary on the account and is very much on the ball. She got texts that the SIM card had been changed and within minutes had them recover it and lock it back down. Besides "ditch T-Mobile," this might be the best piece of advice: don't be your own primary, and be sure your primary has your SIM card on extra-paranoid notify-me-instantly-if-it-changes mode.

Fortunately the first thing they were after was my Coinbase account, which they two-factored only to discover was empty. If they'd hung around a while and poked around I would have been well and truly pwned. So, second piece of advice, already said upstream: do whatever you can to avoid giving online services your phone number.

When I finally got in front of a support rep they confirmed the whole thing and (just because I was there, and large, and extremely pissed off) let me take as many photos as I wanted of the entire incident report right there on their kiosk. This by itself did not fill me with a strong sense of confidence in their opsec; third piece of advice is: anybody but T-Mobile.
Yeah, same here. I'm now on an AMD X13 gen 2 and it's fantastic. I can't get temp to go past 68 degrees even with all 8x2 cores at 100% on performance profile. Fan is also completely silent and only goes on with sustained usage. Why deal with the pain of a poor WM/DE (OS X) and all the arm nonsense when you can get excellent thermals and performance w/ a Linux laptop.
You can browser-based ad blockers, but also system-level ones like DNS66 or Blokada. You can skip those apps if you point your phone at ad blocking DNS servers like Adguard's.
40mb is just nuts. These days, jlink would allow me to shrink a Java JVM down to something like that. And that would already include some nontrivial batteries, which Javascript doesn't AFAIK.
Sumatra PDF Is a Free PDF, eBook, XPS, DjVu, CHM, Comic Book Viewer for Windows
This was very common. For starters, pretty much every UI toolkit provided keyboard navigation between widgets with no need to do anything special. The common QoI problem there was that developers often didn't set tab-index correctly, so if you tabbed through the widgets, the order would be wrong (i.e. not following the screen layout). Visual designers often provided linters for that.

Then there were the shortcuts to immediately activate the specific label, button etc. On Windows, these showed up as underlined letters up until XP (in XP and later, you have to press Alt to see them). Again, as a QoI matter, devs could forget to put them in - but it was really easy to do, and if you didn't, the lack of underlining was actually kinda noticeable. Most apps had them.

This kind of stuff was even codified, to some extent: https://en.wikipedia.org/wiki/IBM_Common_User_Access
> This face, is it real? The distance, is it repositionned?

Deepfakes, robocalls and Caller ID and voice impersonation, automatic ML in photos, if this train keeps going, we won't know what's real at all. I am struggling to see how we will function.
I've never used it (and the fact that you need to fill a form to download a demo means that chances are i'll never use it :-P) but judging from the Wikipedia page it looks like it might have been close at some point but somewhere around late 90s/early 2000s it succumbed to the need to excuse its pricepoint and got too overbloated and enterprise-y (i mean, apparently even in 1997 it would act as an FTP server...? :-P).

What i have in mind is more like something between dBase and VB (VB3 at most), but with a fully integrated database that can understand graphics (ie. in addition to data types like text, number, etc it also has graphics), a more GUI driven workflow for basic stuff (e.g. instead of placing a button in a form and doubleclicking it to enter in a code editor where i type something like "form2.show" to show a second form, instead i have a dialog appear that provides some common tasks like "show a dialog, add/revert/delete/etc record, open external file, etc" with "runs script" being an option for when others wont do), being able to either infer table structure from form fields or automatically create forms from tables, etc.

Also completely self contained, no need to install separate "database drivers", or run any sort of server (even locally), just unzip some archive somewhere and run the program from there.
E.g. right now the social consensus is that the longest chain _minus the top 5_ blocks is the "settled" consensus of committed transactions. If you own the coin in a block 6 deep, then you can prove it.

As the difficulty gets lower, the number of transactions to drop from the top gets higher, and maybe also less certain.

It makes no difference about the mining difficulty in the past. If double-spends are possible _today_ then you can't ever prove you own the coin, regardless of whether you could do it in the past.
You don't want to shovel 12MP 14-bit-effective multi-frame raw pixel data along its metadata into the flash...
Use bazel?

Individual files won't be faster but it's been a wonder for whole project compilations
Meanwhile in Canada I have had multiple trips to my doctor, multiple tests, x-rays, ct-scan, blood work, and probably a couple others I am forgetting and my bill has been zero dollars. There is no such thing as a bill. I guess I pay taxes but that is it. As a non American it is so hard to see this and understand how it is allowed to happen. You guys must have to choose between doctors or financial uncertainty and I can't understand how a country as good as USA has allowed this to happen for so long.
Use SumatraPDF

https://www.sumatrapdfreader.org/free-pdf-reader
I can believe it's useful as an unscaled relative measure but I can't see it having absolute value. It's totally contextually defined. And in the case of McAfee had net negative value over time. Or perhaps Bernie Madoff is a better example.
It's not very misleading - it's 100% nonsense. It's not new, it's not malware, and it doesn't and can't bypass any security measures.

This is a theoretical mechanism for hiding data in the OP areas on SSDs. It cannot be used to compromise anything, because by definition data in the OP area cannot be accessed by the host, and to infect the host you need to infect data it can access. At most it could allow e.g. RAM-resident malware to hide data in the SSD, but there are much easier ways of doing that. If you've compromised the host to the point where you can issue raw commands to compromise the SSD, you can just throw your encrypted data in a file and fake the OS's free space display to hide it. And besides, malware rarely needs copious amounts of local storage anyway. This is a niche technique among niche techniques that some hypothetical highly advanced malware could opt to use for some very specific thing, and my professional opinion as a security researcher is that no malware ever will actually find this technique useful enough to actually use it.

Even the "can drop persistent malware" version is highly misleading, because you need a persistent bootstrap outside the OP area to do anything. You can't just hide your malware in the OP area and expect it to run. That's like hiding a cyanide pill under the couch cushions of your victim and expecting them to find it and swallow it.

Basically, just another case of security academia living in their own little world and coming up with fun but useless ideas. Not relevant to actual malware in the wild; move right along.

A better use case for this technique would be as a data-hiding trick. E.g. you could put stuff in the OP area that you want $government_agency not to find if they seize and scan your device at a border crossing. But then again, there are a million other ways of doing this that don't involve wacko manufacturer-specific SSD nonsense; steganography has been a thing for ages and, if done right, is nigh undetectable. Just put your raw 44.1kHz FLAC music collection on the disk and store whatever encrypted data you want in the LSBs. That's indistinguishable from flat spectrum dither noise.
thanks - looks like they chose a different set of shortcuts, that's a bit annoying after years and so much muscle memory
Recovering a PostgreSQL database after a hard drive failure
Importantly, remote-first has drawn back the curtain on the simple reality that "engagement" is a euphemism for extracting uncompensated value out of an employee by pretending that work is fun, the mission is vital, and everyone is friends.

Work is unpleasant, that's why people are paid for it. The "mission" is to create fake demand for yet another useless, overpriced service. And we're not friends, just give me my paycheck and get on with it.

If you want proper output from your employees, compensate them for the value they create. If you can't measure value, I don't know how you're running a software company.
I've used both Magnet and Rectangle. They're virtually identical (even the default keybindings). Every now and again, Rectangle will not place a window correctly and I'll have to restart it, but that is rare. I highly recommend both. I haven't tried the other options, so I can't comment on them.
Not for debug builds, according to the article.
Standard wheels can provide a zero (or rather, minimum possible) turning radius with appropriate drive. Tracked vehicles like excavators frequently turn in place with a minimal radius by turning their tracks in opposite directions. This action does not need spherical wheels. It doesn’t even need 4 independent wheels.

The only thing you can get from spherical wheels that you can’t get from standard wheels with comparable drive is sideways motion, which granted, would be kind of awesome (zooming down the highway and switching lanes with no directional change), but also not actually that useful. You can also get a bit of this from independently-steerable wheels, as someone else pointed out. But that won’t get you sideways motion from a standstill if that’s somehow useful.
Mouse acceleration: to disable it I've been using SteelSeries ExactMouse Tool (https://steelseries.com/engine -> expand Miscellaneous at the very bottom).
It's very lightweight and I just install it once and never think about it again.

Mouse scrolling: I always found this to be a bad experience on OSX/macOS so I've been using Smooze. It allows you to set the scroll curve to your own liking. It has other features that I don't use and although it's not free, iirc it was cheap and definitely worth it.

Window management: a lot of others have mentioned great tools like Rectangle, but I've found Moom to be slightly better for my use cases. I prefer it over Rectangle (although Moom doesn't have window snapping so I actually use both) because you can set a custom grid e.g. 12x12 and have windows resize anywhere on the grid. With Rectangle, you can only choose from the (many) presets but unfortunately no customization.
I had heard of TTT (time travel tracing). I thought it was a Microsoft proprietary debugger.

RR is new to me, and very cool. I've missed TTT.

https://docs.microsoft.com/en-us/windows-hardware/drivers/de...

https://rr-project.org/
Specific technologies that won't change:
- Unix. It's been in use since 1969, runs on almost every device. It isn't going anywhere.
- In particular, become fluent with its ideas and the CLI. That group at bell labs was hands down the best programmers doing the best programming.
- LISP. It's been in less use since 1958 and influences almost every modern language. It's like learning greek classics because of their influence.
- HTTP. The basics of the internet haven't changed and work pretty well.
- Text. Text is the best way to convey information. Nothing beats it. Not pictures. Not audio. Not video. Learn text manipulation.
What would be the difficult-to-foresee challenges this, for practitioners and consumers, would raise?
That's not even remotely close to AI/ML processing, and also is something you have been able to accomplish-- manually or with presets-- in Lightroom for ages.
This article is fairly strange. The author keeps changing settings to make the release profile more like a debug profile. Wouldn't I want LTO for releases?

Also this is a really long article with a lot of cool tricks and interesting information. Like the author's binary crate, they might consider splitting this article apart. Or at least adding a TOC!
Having intimate knowledge of this event, they are not being honest.
I'd hate to see a photo altered to the point where it could have a significant outcome in a trial. Imagine if the ML improvement lead to a photo where something shows up that wasn't there or vice-versa.

How can you trust the picture taken if it might not reflect reality?
<Unpopular Opinion> I’ve used msft windows most of my life. Recently switched to a macOS and for the life of me just can’t get used to the switch between alt tab and cmd tab behavior. Also windows explorer > finder.

Yes Mac OS looks cooler I guess, but I’ve found windows very practical.
T-Mobile is supposed to block spam and scam texts like all providers, I thought? The instructions from the FCC for responding to text spam include forwarding the message to shortcode SPAM on the cellular provider, which presumably is to give them a database of spam to block in the future.

https://www.fcc.gov/news-events/blog/2020/03/02/mobile-phone...
You might’ve thought you angled them correctly but leds literally don’t emit light in the same way and the “bulbs” are never the exact same shape. This creates hotspots and light scattering in directions that aren’t intended. No amount of “aiming”/leveling the headlights will fix that.

The housing for many halogen based car lights is very specific. It’s completely designed around a specific light bulb and doesn’t have as much tolerance as you might think.
> Why does everyone automatically assume this explanation is correct?

because they want to. thats how the internet works right now, it mirrors your greatest gripe or nightmare, which is exactly when you should have the most skepticism.
Thank you this is a good one. Clear writing is very important (more so in an increasingly remote world). Also clear writing reflects clear thinking and true understanding of a problem/solution. I read recently an important practice within Google (and I’m sure many other organizations) is to write design documents.
https://www.reddit.com/r/boulder/comments/rsib19/good_samari...
"There's a point where no corruption can be a bad thing. It can mean that things are too boring." — Peter Thiel
I wouldn't say the lack of a seed is the difference between a CSPRNG and a PRNG. That's more the difference between a CSPRNG and a stream cipher, where the "seed" is called a "key" and "IV".

PRNGs (Pseudo Random Number Generators) are predictable. CSPRNGs (Cryptographically Secure Pseudo Random Number Generators) aren't (if they're working). HWRNGs (Hardware Random Number Generators) that aren't debiased via a CSPRNG or similar produce nonuniform output (not suitable for cryptography or most other uses directly). TRNGs (True Random Number Generators) might not exist in this universe (deterministic interpretations of quantum mechanics are consistent with observation), it's safer to assume they don't and avoid the term entirely.
It's disingenuous, patronizing and offensively cynical, but it's no defense. It reminds me of people naming bills the opposite of what they are meant to do. The "Patriot Act" was touted to among other things "defend freedom" and then enabled a surveillance state. That kind of thing. The hospitals will have to be sued into compliance by the Attorney General's office if it's important enough to Mr. Garland.