skysight-inc/HackerNews huggingface dataset:
If you want to minimize options, and yes, I know corporations with “you will use only these cryptographic algorithms” lists, I would go with SHA-2-256 for cryptographic hashing, [1] AES-192 for encryption, and RSA-2048 for public key. I would phase out RSA-2048 with whatever NIST chooses as their post-Quantium algorithm once that process ends [2], and use SipHash for the special case of choosing which hash bucket to use in hash tables. [3] I would maybe have SHA-3 on standby just in case SHA-2 ever gets broken.

[1] SHA-512/256 protects us from key extension attacks, but has much less deployment than SHA-2. We can mandate using SHA-2-256 in HMAC mode when we use it with a secret the attacker does not know.

[2] https://csrc.nist.gov/projects/post-quantum-cryptography/wor...

[3] SHA-2 is called a “hash”, as is “SipHash”, but they are different use cases. SHA-2 is generally for having a long hash where generally both the user and attacker know how to make a given string have a given hash. “SipHash” is to be used for the compression function for a hash table [4] where performance is critical, the hash is shorter, but it is protected by a secret key.

[4] https://en.wikipedia.org/wiki/Hash_function

[5] If you ask me what my favorite cryptographic hash and stream cipher is, I would say RadioGatún[32]. It has roughly BLAKE2’s speed with the added benefit of enhanced hardware performance. It was the only Extendable-Output Function (XOF) which existed back in 2007—the last time I revised which crypto primitives my own open-source software uses—and remains unbroken as we enter 2022. It know it’s hardly mainstream, but it is Keccak’s direct predecessor, and it has been analyzed by world renowned cryptographers.
This seems to be about SMS, which would be part of their telephone business, not their ISP business. I believe that telephone services are common carriers.
Most people are "nice", which is the same as being polite. Few will go out of their way to be good, which is not the same thing.

Apathy to suffering (and by extension other evil) is the same as being evil, especially when you are benefiting by it. Admittedly, good and evil is a spectrum - but there is a lot of apathy going around.
Sure I do. Or very minimally compressed.

Hell, one of the major selling points of the most recent iphones is prores recording! Dump half a second of that into a file. If that means a half-full phone can only fit a thousand photos before it's emptied, then sure I'll take it.
> Until you need to install a driver, support a piece of modern hardware, use an nVidia GPU for anything serious, and more.

For f*ck's sake, getting hardware to work on Linux has been easier on Linux than other OSes. Most things are literal plug-and-play, no trash Windows GUIs required. NVIDIA drivers have been exceedingly easy to install on Arch, Ubuntu, and (especially) Pop, and mainstream distros. A few years ago it was a pain, but I haven't had problems in ages. I don't know what you're thinking, but as a daily Linux user today, I have never had "driver issues" with modern hardware. And funnily enough, my niche hardware also tends to work on Linux. My Bluetooth adapter is a random dongle ripped from a VoIP station. I have on Windows, though. Perhaps that's due to the wonderful ArchWiki, no idea.

Also try doing NVIDIA-based ML on Windows. Very hard to set up a dev env. Hard on Linux too, but at least it's supported (last I checked).
Calculate but don’t shut up
If you want napkin math then just multiply 2280 by two. It'll be faster and more accurate than converting to watt hours.
Not the first time, either.

https://en.wikipedia.org/wiki/Internet_censorship_in_Austral...
the original stb libraries did the same. single header doesn't mean you have to develop in one file, although you totally can.
I live in the subdivision.

When you purchase a home there you are legally required to be provided and then sign a document that outlines the history of the Rocky Flats plutonium facility. I was provided this document and had to sign it as do every other homeowner here.

What I've learned is that people who don't really know anyone that lives there or have never bothered to talk to anyone who purchased homes make assumptions about the entire area. They assume that the people that purchase homes were ignorant rubes who weren't aware of the sites history. I knew about the site and researched it for well over a year before I chose to buy a home in the neighborhood.

I spoke with a nuclear physicist who lives in the neighborhood. I also have a co-worker who is also a physicist and was once in charge of a nuclear reactor at his university.

There were over a quarter million soil samples taken from the area surrounding the core containment area. There was decades of testing by the EPA. It was a super fund site for decades.

Additionally the neighborhood is not built on the site. It is built outside of a perimeter, well over a mile and a half from the core area that was covered over with concrete where the soil still contains traces of plutonium.

As you pointed out plutonium is indeed in alpha emitter rather than gamma. It's also extremely heavy and oxidizes on contact with oxygen. It's not the kind of substance that's going to blow around. It will kill you if you inhale it or ingest it of course.

I have many photos of herds of elk in the refuge that surrounds the core site. It's not at all the wasteland that people make it out to be.

Additionally your first statement claiming that a single company sues people who want to do testing is completely incorrect and can't be backed up by any references. I live here and I happen to know that no single company developed the subdivision. It was purposefully set up by the government of Arvada as a zone and split amongst multiple developers. Additionally more testing has been done in the land around the refuge which the developers have no control over or legal standing. As to testing within the subdivision, the homeowners can test whatever they want in their yards with no permission from the developers. Like a lot of anti-nuclear misinformation it doesn't even make sense when you dig into it.

Additionally the fire never got to a point where it was going to hit Rocky flats. Rocky flats and the surrounding area were placed under a pre-evacuation order in the event that the wind shifted. I live here that's why I know this.
What is triple copy? Literally hitting ctrl-c three times? No idea that was a thing people did.
This article is from Common Dreams, so of course they would applaud it and try to smear private companies who want to protect their innovations through patents. Personally I don’t think there is anything wrong with people making money for their advancements. I have some disagreement where public funding is involved, and what the right model should be for the public to get a return. But besides that, I also recognize that incentives matter and that capitalism has motivated hard working, talented people to bring numerous innovations to the world.
300X is 30000%. Which do you mean? (300X or 300%)
> But the stat doesn't prove causality at all

Does it prove that there is no causality?
Can you talk more about the specially crafted request?

Were those requests the ones that triggered the emails that many of us received, and were those requests made with the correct or incorrect passwords?

Do you have an explanation why some people changed their LP passwords, and then received another login attempt alert email after that? Is that a coincidence (i.e. it was just more incorrect credentials still being tried on the same accounts) or was the attacker aware of the password change? Did the attacker have access to the new password or not?

Many of us received the alert email that our passwords had been used (i.e. an attempted login with the correct password from a new IP), but swear that those were unique passwords (in my case, it was computer generated, locally stored in KeePass and never re-used -- many other cases like that). Did the attackers have our passwords in their possession, or no?
Eon (Extensible Object Notation)
Actually, it just doesn't. Firstly Apple doesn't just use Samsung, they also use BOE and LG panels, so they'd have to be calibrated to the lesser of either.

Unless there is massive unit variance, which is even worse.

So much for taste :)
I believe they are blocking links to the websites in an SMS message.
We store certain audit logs forever--or close to it--for exactly this reason. You don't know when you'll need the data to assess possible breaches and report back to users. (Which not coincidentally is a requirement of GDPR.)

Edit: clarified "forever"
Hmn, not sure why anyone would care about my post history.
This is all well and good, but how does one deal with the reality of Brandolini's law? At what point are we allowed to say "this is a bad faith effort, and I reserve my right to dismiss it on those grounds -- to hell with this nonsense". If we never stand up and say that, it seems to me we are risking the cultural foundations of society for the sake of what? Rhetorical purity? As if nothing else was at stake?!
I used to use AUI media interface adapters that are bigger than the network server I use now (Raspberry Pi).

I loved my time as a Macintosh network builder administrator. But this post led me to recall how frustrating the basic elements of networking could be back then.
isn't opengl3 not recommended anymore?
iTerm doesn't make a bootstrap script easy, but it's still possible. I do it.

Use this to command to set the location of the iterm config folder:

defaults write com.googlecode.iterm2 PrefsCustomFolder -string "/path/to/iterm config folder"

Then as long as that folder exists and contains your preferred settings, when iTerm opens up it'll be exactly like you want it. (though it would have been nice if this just defaulted to $HOME/.config/iTerm)
> One of San Francisco's imports is food.

Remember the part where I said, "The Bay Area is not San Francisco"? I don't live in San Francisco. I genuinely don't care what San Francisco produces for export. Also, you're implying that San Francisco, or the greater Bay Area, somehow didn't produce anything before the tech locusts arrived. That is false. California's economy consists of far more than just tech drek.
If I had to guess, one is weighting access to care differently than the other. America's system is good but not top tier if you can get it. It's really bad if you can't.
Since there is presumably no commercial advantage to keeping TIScript proprietary, it would be nice to open source it. It was a shame when Opera announced that they were moving to Chromium but didn't throw the Presto sources over the wall at the same time. I think we have to treat it like that code is never going to see the light of day, which is unfortunate, since even under restrictive copyright regimes, eventually books and movies become public domain.

DO:

- Use LGPL or GPL for TIScript, if you want; customers who need something further away from copyleft on the spectrum of open source can continue paying

DON'T:

- Equate open sourcing the code with running an open source project and all the overhead that comes along with it and then decide not to do it for that reason; throw it over the wall with a license slapped on it and don't ignore the "NO WARRANTY" section (this is the thing that 99% of GitHub projects with burned out maintainers get wrong)

- Get bashful about code quality and say "I need to polish it up first"; nobody cares (since Sciter has already been shared source for a while, I don't expect this to be a problem, but just trying to cover all the bases here)
No try to keep up, we moved on from the other poster's pedantic distraction about voting vs "active support" back to the original topic which is that Thiel is a libertarian and the fact he supports Republicans is not evidence he isn't one.
Yeah I found out about the solution via that exact part of the docs, I'm just saying it seemed like a bug when I first came across it - and some users might not realize the default behaviour (for example, if you're importing a large preexisting collection you might not miss a few albums being deleted).
Sorry — meant to put 300% in the first time; I only got it right in my second mention. Fixed in original; thanks for flagging.
Regarding the importance of communication vs "hard skills", I often think of a quote by Nassim Taleb:

"You cannot possibly trust two classes of people: educators who are better at explaining than understanding because they’re selectively better, and science journalists, who are better at communicating than understanding. Then, you end up with things like scientism." [1]

The pandemic and climate crisis has also shown us the huge importance of thoughtful communication. Having both theoretical and years of practical background in journalism, I do wonder, though, how much of this emphasis is slowly becoming a hype; a source of well-paid bullshit jobs. There are companies and institutions with deliberately honest communication out there, but often times "good communication" leans towards masterful, smooth hiding of wrongdoings or stuff you don't actually grasp. It's way too easy to (accidentally) become better at explaining than understanding in this field. In this light, it's probably always good to have those more straightforward "hard skills people" around you as well.

All in all, I think it's an excellent time to read Dostoevsky and think about the volatility of human temperament. We're often trying to hide our rough edges with (soft) communication, but who knows how well, or for how long, this actually works.

I would also definitely bet on Dostoevsky's fiction being relevant in 50 years, too.

1: https://medium.com/conversations-with-tyler/bryan-caplan-nas...
The way it usually works, legislature writes the law that states the end, and establishes (or repurposes) an executive agency to implement the means, vesting them with the power necessary to do so. The agency then comes up with specific procedures etc - and they can enforce that.

For example, the federal law in US does not define the procedure to properly destroy a firearm (such that it ceases to be regulated by the relevant laws) - but ATF does, and it's fairly specific: https://www.atf.gov/firearms/how-properly-destroy-firearms

I don't see why the same approach couldn't work here.
How would you (reliably) measure user satisfaction without asking users?
At that point Cloudflare and Akamai are bigger problem.
They are basically gate-keeping everything in the internet so you can't web-crawl the web anymore. Heck, even 1 page sites are now 'protected'.
This is really weird. They were blocked once, but I tried these again ~40 minutes after my original test, and they went through. Then, when writing this comment, I tried a third time, and they were blocked again.

First run: odysee.com, jacobinmag.com, itsgoingdown.org were blocked. I did these just before midnight EDT.

This second run: odysee.com, and freethestates.com (didn't try it the first time) were blocked, but jacobinmag.com and itsgoingdown.org are not anymore. I double-checked for spelling mistakes, etc. I also checked covidcarealliance.org and lichess.org, also blocked. I also checked goo.gl URLs (previously notoriously blocked by T-Mobile) and they are not blocked.

I did some looking into this, and T-Mobile employees have been surprisingly open about URL filtering in the past on their support forums. One example (see https://community.t-mobile.com/accounts-services-4/tmobile-i...)

> I’m taking care of this right now. I must say the domain is very amusing and creative! It’s flagging for a combination of issues: collocated with Amazon AWS with 5k other domains, registrar to Namecheap (poor reputation with DGA generated domains), and inserting both URL and email address in message body. (double whammy). Otherwise, you are following proper protocol with Twilio A2P messaging.
>
> I’ll have the vendor reputation resolved in a few hours. Thanks!

It's surprising to me that AWS and NameCheap are named as contributing factors.

In fact, writing this comment took so long that I tried the strange URLs a third time. jacobinmag.com was blocked again but not itsgoingdown.org. So, jacobinmag.com has flipped from blocked, to not blocked, to blocked again in the span of an hour.
To be clear, for the benefit of those who are reading these comments before watching the video, this censorship happens even to single messages sent between individuals' personal phones, so it doesn't fall within that authority.
Very nice video, the 3d animations and colors make it look very professional. What tool(s) did you use to create the video? Ruby? OpenGL? A custom synthesizer?
... until Duckduckgo changes direction due to change of ownership, VC money, IPO, ...
That is not the plan put forth by Medicare for All advocates. There is a strong undertone of income redistribution in progressive proposals for single payer.

I would also expect that if the government was taking that money my health benefits would be at least as good as they are now. And I don't think that will be the case. When I was a kid there was a period where I was on California MediCal and I distinctly remember getting glasses with _super_ thick lenses because all MediCal would pay for was the cheapest frames and lenses.
Film development is actually VERY, VERY far from linear.

Because of film grain, it's not continuous either, but actually discrete too.
This is the kind of generic (and therefore shallow) nationalistic comment that you have a long history of posting here and that we've been asking you for years not to post here.

https://news.ycombinator.com/item?id=25982349 (Jan 2021)

https://news.ycombinator.com/item?id=25972387 (Jan 2021)

https://news.ycombinator.com/item?id=25972376 (Jan 2021)

https://news.ycombinator.com/item?id=25800127 (Jan 2021)

https://news.ycombinator.com/item?id=22622642 (March 2020)

https://news.ycombinator.com/item?id=22604801 (March 2020)

https://news.ycombinator.com/item?id=22221660 (Feb 2020)

https://news.ycombinator.com/item?id=21880344 (Dec 2019)

https://news.ycombinator.com/item?id=9957014 (July 2015)

This sort of axe-grinding is not what this site is for, and you've been at it again in other places too (https://news.ycombinator.com/item?id=29233220). Not cool; please stop.

https://news.ycombinator.com/newsguidelines.html
IMHO check out Three.js for learning and beginners, it's a very nice abstraction and scene graph that you can just start hacking on right in your browser on any device.
I have a strange compulsion to leave for things much earlier than I need to, and I arrive early always. I honestly didn’t notice, looked down of the platform and checked when the next train was coming, and wait. The tram was fantastic, I took it every day and really liked it. I was there for three months in the fall.
> Is the US energy reserve in a potentially worse position by releasing this amount?

Its 2M out of around 600M barrels in reserve. The reserves are filled when the oil prices are low.
Are you suggesting that if you have a product that performs better than the previous version 99.999999% of the time, but that 0.000001% of the time it performs terribly, in your opinion, the new version is worse?
This post is correct about two things - first, that NPS does not give you direction on how to act. Second, that statistical realities make sampling approaches like NPS very noisy. I don’t think either discounts the concept of NPS itself. “Bad statistical work” is going to be bad regardless of what metric we’re talking about. And a metrics being too abstract to action doesn’t make it useless - at least not any more so than something like free cash flow. Yes, connecting the dots to some outcome is difficult. But it’s a pulse on the business, and if done right, that has some inherent value.
Yeah failure from heat is one thing, but another is how quickly the structure catches fire or spreads it. Another commenter linked the 99PI piece how they found out that embers were getting through vents in roofs (you need those vents because your house is a weird little ecosystem) and catching the inside of the roof on fire. And if the outside is made of wood, it's more likely to catch than, say, concrete or brick.

The material you're more likely to use for a home if it's not wood is concrete or brick with some steel added. Concrete and brick are very fire resistant, which would make it much harder for a building to catch, and so harder for fire to spread if the building doesn't catch. The reason our homes in the US aren't brick (anymore) is it's a very expensive/specialized job, but wood framing is easy in comparison and wood is cheap here (and we have a lot of lumber mills to churn out small standardized pieces)

The inside would of course burn eventually if engulfed in a slow-moving fire with plenty of fuel, because things ignite when they get hot enough (or turn to charcoal if there's not enough oxygen). But if you're lucky the fire will move past quickly or run out of fuel, so every little advantage helps.
It must be really dynamic. I tried a number of URLs, and one of them, jacobinmag.com, went from blocked to unblocked to blocked over the span of an hour.

Perhaps the algorithm blocking takes into account individual activity. I almost never send SMSes, and now my phone is sending dozens at midnight.
As someone who used both Telegard and Renegade... no. Just no. Renegade literally just lifted the Telegard 2.5i source code, added a few trivial changes, and made a few bugfixes. Disagree? Name five of these 'commercial features' it added.

It's a sad truth of bulletin board software that sysops often didn't know what other software was capable of and blindly engaged in the sort of bit-bashing people engaged in when it comes to hardware... not because the other guy's stuff was genuinely bad, but because the sysop didn't want to admit that maybe they wasted a bunch of time and effort on a piece of shit.
I can confirm it is. It's certainly amazing.
There's a very lively and developed competitive scene.

If you're interested to learn more there's a couple sites that teach advanced techniques ( https://four.lol and https://harddrop.com ).

I've also been playing this game for about 4 years and I'm nowhere near that level, but the progression you're able to make by learning new techniques is still very rewarding.
It's also pretty easy to make your own plugins, although the API documentation isn't the greatest. I for example wanted to add all new music to my MPD queue, so I wrote a Beets plugin to do that automatically for me: https://github.com/Hamuko/beets-mpdqueue
This post is from January 2019- is there a more recent update on the issues outlined herein?
I haven't, but I assume Linus isn't computer illiterate.
I prefer brevity over irrelevant information, but mentioning the specific type of drug, the name of the insurance and the type of coupon being applied would be highly relevant in determining whether the story has merit. Leaving it deliberately unspecified triggers all my bullshit detectors.
Does anyone have an example of a Rust Bazel build project?

Or even better, a massive Rust monorepo orchestrated with Bazel build?
This. I keep typing right after I switch screens and it ALWAYS misses the first couple of keys. It's absolutely infuriating
Is your position that Javascript shouldn't be able to see click and drag events?

That would make a lot of browser games, tools (e.g. broswer image editors) and certain browser drag and drop functionality (e.g. a custom video or audio scrub bar) not work. They would require permission popups.
How is event ticketing currently broken (or sub-ideal) and what is their fix?
The remediations are massive concrete structures covering large swaths of the ground. A brush fire being pushed by heavy winds isn't going to do anything to it.

Additionally the large subdivision was not built on the site but surrounding the perimeter to the site. The core site is off limits to anyone as a precaution to prevent anyone from tampering with the remediations or deliberately vandalizing them.

Surrounding the core site is a wildlife refuge that is fairly large. On the outside of this refuge is the subdivision.