skysight-inc/HackerNews huggingface dataset:
But there's only one client. And, that's deliberate - Signal doesn't allow federation for philosophical/iteration speed/competitiveness reasons. So in practice, if the client changes you're out of luck. It's encryption that lasts as long as the service owner thinks it should last, but if it's going to be like that, they could also just promise not to look. The point of defining an adversary in cryptography is to stop them from doing things, not just noticing if they do.

Hence, we end up back to my point about threshold signatures. With a threshold software update system and a network of auditing firms, you can actually enforce good behavior on the adversary because they no longer fully control the client, and the client is treating the server as untrusted. This is a form of decentralization, albeit very different to the classical kind (p2p networks, multiple clients, federation etc). It should also be amenable to rapid iteration.

Totally agree that open source is often a bit of a black box and maybe nobody is auditing it properly. But if you do become aware of a bad change / back door, and the system is at least somewhat decentralized and a part of it is physically yours, you can just switch to a better implementation. No such luck with a centralized system: the client may be open source but if only the official client is allowed to connect to the servers it's irrelevant. And all E2E messengers today (except Telegram?) have such a policy.
How are Romanian taxes on capital gains? VAT?
Fair. I suspect there may be some reminder of over zealous advocates when you first see it? Such that knowing the font is enough to remember a lot of the nonsense around it. Even if it is somewhat objectively good?

That is, is this a blending of bad subjective experience with otherwise good objective experiences?
Who cares what Russia thinks, their economy is in shambles, they can not bully Ukraine and they certainly can not bully Kazakhstan. Author writes as if Russia is at par of west powers, which is not even near the truth. They are dying society.
Encryption and message authentication are separate problems; the combination of both is called "authenticated encryption". Almost all AE/AEAD schemes ultimately encrypt by simply XOR'ing a keystream against plaintext.
Apologies for the late reply.

Interview process is 3 parts:

1. We do a semi-technical first call with you - getting to know your professional and technical experience, what you're looking for, presenting the team, and some high level design/architecture thinking.

2. If we want to proceed, we send you a coding challenge (Easy/Med/Hard all 3 types of problems - and the time setting is relatively relaxed). You can take that on your own time.

3. If you clear that, then it's just getting to know all of the team. Everyone talks to you/get to know you/tell you about the role etc. This is time consuming but not heavy on the technical side.

That's it. Then we make a decision.

We also have a team member in the US, so really, for the right candidate, we are flexible about the location. But it's really the exception rather than the rule, so we are leaning EU first right now unfortunately. But that shouldn't discourage you from applying!
My read of the article is that it's the latter
Man Escaped the Desert by Converting a Wrecked Citroen 2CV into a Motorbike
Objectively Igloo is the best client ever made for iOS, you all need to stop thinking about the politics and personal life, decisions and behaviors of developers and care about the tech aspect of tech things. There is absolutely zero reason to not list Igloo on this list and even on the IRCv3 website.

Also, regarding the bans, I never had a single issue connecting to any network, I remember it was banned on freenode before the takeover but only briefly and that was cause by their childish attitude towards personal issues between few people.

This "cancel culture" is the reason we can't have good things anymore.

Personally, I know what's good or not, if a website is not listing something that I KNOW works well then I can't take it seriously, or any other work or project of that person, because I know that he's driven by emotions based on false claims.
Low probability or not, if an airplane can't stay in the air with one of the wings missing that definitely counts as a "single point of failure". Whether that SPOF needs to be mitigated is a tradeoff based on other constraints like the expected risk, economics, and safety regulations (and in the case of the space telescope, maximum launch mass of the rocket).
Why emojis could make you a better software developer
I keep pull down refreshing the page and can't go back to what the word was. Also cataegories would be nice. Also a list of the alphabet at the bottom would cross out wrong guesses would be nice.
React, Material UI, TypeScript Playground
https://archive.ph/0o45m
> Last modified: 2021-01-07

Seeing as OpenSSH 8.8 was released in 2021-09, I assume the year is a typo.

That aside, this is a great feature that I haven't seen mentioned before. Up until now, retaining any form of clear separation of personas while working across teams and platforms with SSH keys has been a fools errand. This seems to make it sane!
Can you share your CV with me? Please find my contact info in the profile.
I just use separated ssh-agent with separated keys when I may need to forward the agent.

For example, to deploy things to a production host from a build host I login to the build host using the agent with the production key and push things from there.

With that, the jump host support and the ability to login with one agent but to forward another I just see no point for what ssh is doing. As they wrote, they want to keep things simple. But this complicates things.
So... Is there an arm64 version rolling around?
While we don't have great controlled experiments, we do have some historical data to view. Here are some of my suggestions;

The Soviet Union had no way for individuals to benefit from innovation. So in most spheres they lagged the West in technological advancement. One area which did have rewards (in standard of living), rocketry, they were ahead.

During WW2 many private companies developed weapons etc for private gain. Especially in the air. While there were talented designers in the USSR, again, overall they lagged behind. I'm not saying none - there were other rewards in play - but as a proportion of population, progress overall seems slow.

If I had to hypothesise I'd say than IP laws encourage innovation via competition, whereas non-IP areas focus on innovation through cooperation - for societal not individual benefit.
Measure thermal noise? The amount of information contained in the black body radiation of a warm (well, really cold, but not cold enough) object must be absolutely immense, at least when you care about a signal at the level of single photons. Trying to capture it with sensors is futile. Sure you can try to do some noise suppression with a simplified model/probability distribution, but that won't work well if your signal to noise ratio is 0.00001.
Companies need to acknowledge the flow of information is limited. We are in a period of humanity where people CANNOT know all the little details. You don't get to create a system and not take responsibility for the problems it causes using law as a safety net and expect it to scale. That is morally wrong

Yes people have a responsibility to learn more, but the company has a responsibility to protect the people it interacts with
Oh him. Thanks.
I skipped Element on the basis that it needs too much information, I can use a burner SIM on signal, but I need e-mail or something to use Element.
I want to have a few different line if thoughts to that concern.

a) On black hats, and presumably the risk of being tricked. Perhaps this is an orthogonal problem to who controls the name. Then again it might not.

b) On who the name is valuable for. You hint at there being a public interest in who controls the name. The free market response would be that in theory if the black hats can extract more value its because the invisible hand provides that value to the public in unforeseen ways. Or it may be that we just exchange one rent extractor for another, in which case perhaps the public should be more directly involved in the value assignment. A democratically governed central authority is one approach, another might be a more direct decentralised trust/value assessment towards a particular assignment

c) On bidding. I can see different approaches but to avoid a takeover situation a bid would probably have to binding over some significant time making it implausible for a takeover to be profitable unless the calculated return can be sustained.
The point is that after the initial few contracts, the two parties could have very easily conducted all further business and contracts without the middleman, Upwork.
Systems engineering roles are typically considers lesser / lower skilled than software roles as well. Which is absolutely ridiculous
Indeed, what other manufacturers do not have is a Twitter account the size of @elonmusk
Have a look here:

https://vinayprasadmdmph.substack.com/p/vaccine-effectivenes...

tl;dr Vaccine effectiveness around 15% for me at this point. So it was the natural immune response (gasp!), combined hospitalization rates across the world reflects this.
If your app is like that, then maybe it shouldn’t be an app at all, rather a website.
Not I personally.

Take 100 pieces of "classical art" and show them to somebody who does not have a context of it at all (a faraway country, Amazon jungles, kids these days); the reaction would mostly be "wow" or "hmm", because the pieces are usually technically interesting, without any metainfo attached.

Do the same with 100 pieces of "modern art" like this [1], and the reaction will mostly be "wtf", because there is nothing to appreciate without the metainfo, like "this is a piece of art by X sold for $YM".

[1]: https://www.cnn.com/style/article/banana-artwork-eaten-scli-...

BTW, by this measure, Dali produced "classical" art.
Yeah, I can't smell them but my wife can. That was on her list of reasons why we had ours taken out. I supported the decision because it was growing like crazy blocking sun for everything around it and was expected to split at any time.
Fair enough, my view of mathematics is very much the lay persons field, seeing the mainstream mathematics as mostly unchanged for the last decade or two, but for someone doing mathematics professionally in a research capacity I would expect them to see nothing but green fields and novel approaches. And as the field grows (assuming a two dimensional, spherical math field here for the moment) so do the edges.
Yeah, part of this new feature seems to be to add host information to the agent protocol.
There is indeed no such thing as SSH3.

I’m somewhat certain that document is supposed to say “SSLv3 or TLS”. It’s a minor typo but it brings into question the validity of the rest of the document.
...pre-configured with Webpack, Babel, TypeScript, Emotion.js, Material UI theme customization including light/dark mode switching. Bookmark
Really?

See https://vinayprasadmdmph.substack.com/p/vaccine-effectivenes...

Those "frickin" statistics? Or which ones?
One other advantage of contracting even in a staff aug arrangement: you have some protection against overwork in that (as long as your terms are hourly) you simply charge more if you worked more that week

Often this also leads to clients being more careful about having sane workloads
"OTP" should not be taken literally here, it's merely an analogy.

Yes, true one-time pad encryption is not secure by modern standards, as you mention there's no authentication, you need a perfect random number source, and key management is horrendous.

However, the concept of encryption by XORing a stream and the plaintext is very much the modern way of doing things, and "OTP" is an analogy for that.
“We only want to let them live here”, they said.
Dude first I didnt want to trigger you and I apreciate your comment. But isnt saying its a gut feeling somehow communicating it is understood that this isnt the standpoint of a scientist? Thats mostly common sense. So why go into ragemod on sth I did state as something not to take seriously?

But you made a long comment so I will take the time to engage with you.

1. a potential awesome idea it isnt. Uvc is very strong and every layman should now that it can kill bacteria and viruses … it can even split chemical bonds. And a it should be known that it creates ozon and could cause cancer. But this is a question of the intensity. And also as the ozon layer filters uvc we dont have much contact. But it is safe to asume that if UVA and UVB are causing cancer so should UVC … the next lvl of higher energy is X-ray and gamma and beta. Funny stuff

2. a scenario where to people are talking to each other and the uv cant radiate between them.

3 I did propose the hepa filter because the problem is the following. You have a rate of virus getting in the air and a rate it is killed by uv light and a rate of it is absorbed by the hepa filter. So imho a room were air can circulate easily there should be a possibility of getting to the rate that the air in the room is changed sufficent quickly to not get anough virus to make people ill.
UV light is a good choice and allready used in hospitals and cheap. But when nobody is there. But i still dont think its a good idea to throw high energy radiation onto people just to be safe.

3.1 they are expensiv and getting to a solution is not what this society is made for

3.2 i totaly agree with you and every option should be validated.

But do I have the right to an opinion? I dont want to disrupt the discussion about potentialy helping ideas. But when someone stats a doubt it would be nice to answer polite and engaging on the doubt.

And I understand you have a history that made you get triggered but dude … I am not part of that history.
Wish you the best

Edit: ar last i want to state that the succes of a medicine to finish phase three is like 1-5% … so good that we have those mechanics to prevent harm to society… but this is a old discusion
Anecdotally, I've never had one fail. I've probably done maybe 4 or 5 in 10 years. Though I despise Chase and don't use them, so that may be the key. Amex and Discover are top notch in that department.
Kinesis freestyle pro. Helped a lot with pain, and barely requires adjustment if you switch between that and a standard keyboard.
> There has been a path towards their approval for a long time.

QED
non-standard UI elements are quite visible - modals, progress indicators, tabs

also everything around navigation is trouble - ios has those large headers that shrink down once you start scrolling. For a long time this was not possible in RN, not sure it finally is.

iOS 15 also uses modals quite a lot more than previous versions. Including modals on top of modals. Also impossible in RN up until recently, don't know current status.

While the navigation-related differences might not be consciously picked up by normal users, it may be subconsciously felt - the app doesn't feel right and user doesn't know why.
I cannot comment on the switching between WiFi and data aspect because I’ve not tried that myself (though it didn’t work on my MBP switching between Ethernet and WiFi) but everything else you’ve described is pretty standard features for video conferencing solutions these days.

I’d like Teams more if it just focused on the video conferencing side of things. It’s chat and Sharepoint integration just adds more frustration than anything.
Check out https://github.com/k4zmu2a/SpaceCadetPinball
Amazing work.

I'm not a very visually creative person. I want to be able to make virtual worlds but the assets are the problem for me. I think this will help alleviate that issue so thank you. Bought a copy.

(I really want a little RPG about exploring.)
Pretty much everybody uses this for encryption; the most popular stream cipher (qua stream cipher) in the world is Salsa20/ChaCha20, which is simply a keyed hash function run in counter mode.
That's what I indicated: At 'a few hours or a day' there are many problems which need solving, for which rates may be substantial especially given highly specialized knowledge.

But 'leadership' over some project, over any period of time, is not one of them.

A 'consultant to solve our DB limitations', sure.

But in terms of leadership, part time, non-business hours, no 'on site' (aka the OP has a 'real job'.). I don't think so.

$300/hr is a $600K/year run rate - is the relative cost of having for someone for extended periods.

A contractor can log much more than 1K hours per year - or less - it entirely depends on the nature of their work.

Also, some 'hours billed' are de-facto to the firm, not the individual. If you're hiring 'a lawyer' - you're really hiring 'their team' not really the individual, as often you would when hiring a contractor.
Im imagining that the renters could simply bid on controlling the name directly instead of going through the squatter
You wouldn't even be allowed to clamp the car or interfere with their property on your property. The police won't help you either. It is the task of the civil court system to liquidate damages until then they will have to be tolerated. See somewhere in this podcast by a public radio by a lawyer. https://www.mdr.de/nachrichten/podcast/rechthaber/audio-stro...

You would be able to tow after contract is terminated usually after two months without payment but until then you are not allowed to touch their car.
> All resident EU citizens can vote in local elections in the UK

no longer the case from Jan 1 2021 (except for those grandfathered in)

it's now dependent on bilaterals with individual countries (e.g. Spain, Poland and others have mutual arrangements with with the UK)

https://www.gov.uk/government/publications/local-voting-righ...
>Hospitals get paid for deaths.

Seems like paying them for recoveries would make more sense. The former seems like you would be paying them for failure rather than success.
Awesome link. Thanks for posting. I'm wondering, does anyone know why we didn't send JWST to L4 or L5, where (as mentioned in the link above) it could remain orbiting indefinitely without the need for fuel? Is it because those points are a lot harder to get a spacecraft to?
MPC has been deployed at large scale by numerous companies, at least for the ads industry; I know because I actually work on exactly this full time and I have seen the numbers (but unfortunately I cannot share specifics). There is nothing special about general-purpose protocols that makes them more "legitimate" or whatever; we use specialized protocols in practice because it is almost always more efficient and thus less expensive to run (and MPC is usually right on the threshold of being too expensive).

As for zerocash, the last time I looked into it what I saw were a set of security definitions that assume a reliable ledger of some kind; whether or not that ledger is implemented using a blockchain at all is not addressed in the theoretical work. The practical deployment relied on Bitcoin, but since Bitcoin security is not well-defined (or at least not convincingly defined) that makes the rest of the security argument dubious. As far as I know Zexe has the same problem: yes, the security definition is much stronger, but they do not address the realization of the ledger functionality itself and thus any real-world deployment that relies on e.g. Bitcoin, or really any permissionless blockchain, has the same theoretical shortcomings. Ultimately the permissionless setting itself is the problem; zerocoin could be implemented using a ledger managed by a trusted party, and it would achieve its security goals without those theoretical problems.

I should also be clear that when I say ecash does not share this problem, it is because ecash has a well-defined security model and all functionalities needed to realize an ecash system also have well-defined security. We can instantiate ecash using any of the security assumptions we commonly use for digital signatures, and in theory ecash can be instantiated from MPC (by using a generic MPC protocol to implement a blind signature, then using the blind signature to implement ecash), which itself can be instantiated with standard cryptographic assumptions. So ecash has a security definition that is as well-defined as a cryptographic security definition can be.
Why AT&T and Verizon are feuding with the FAA over a last-minute delay to 5G
I spent ~3 years building a product before launching on PH. It's a real product with an existing community of (at the time) around 1k on Slack and real companies using it. Got ~80 up votes and finished the day somewhere around position 10. I was moderately happy with it.

Around the same time, a known smooth-talking vaporware peddlar in the same industry launched on PH with literally a bare GH repo and a minimal landing page. I knew 100% that there was no actual usable product. The founder had recently been involved in a similar project that collapsed under huge promises. He got hundreds of upvotes and plenty of "awesome product, LFG man!!!" type comments.

That's the moment I really understood PH.
Webview uses Skia but it uses HTML5/JS/CSS to draw on it. Flutter uses Skia in a different way, using a declarative component language and Dart in place of HTML and JavaScript
The real answer is they aren't - they are sometimes round.

https://duckduckgo.com/?q=rectangular+manhole+cover&t=brave&...

https://duckduckgo.com/?q=triangular+manhole+cover&t=brave&i...

https://duckduckgo.com/?q=hexagonal+manhole+cover&t=brave&ia...

https://duckduckgo.com/?q=oval+manhole+cover&t=brave&iar=ima...

And so on... Now a great - though a bit unfair - question would be to ask about circular ones, listen to the standard pitch, and then show these photos and ask - so what's going on here? Are all these people idiots?

A good software engineer knows there are rules, and there are reasons for the rules, and there are reasons why sometimes rules need to be different because the situation is different. If you just learn one single "right" answer, you'd end up trying to fit a round manhole cover into a triangular opening.
It's the equivalent from the 'buyers' perspective - that's the benchmark burn rate if they were to hire the person for a 'man year'.

Contractors come in all shapes and forms some may book more, some less, though yes, from the contractors perspective, $150/hour is more like $150K/year.
I learned about some research into this recently. It sounds like New Zealand was set ablaze by its first settlers, to clear the land, and that had a significant impact on climate

https://insideclimatenews.org/news/20102021/ancient-lndigeno...
Bunq is another alternative. I use both revolte and bunq
I think the key difference might be that flu mutates quickly, so each year we actually get a flu vaccine for a variety of the most likely strains. While for Covid after 2 years of mutations, the doses of the initial vaccine are still very effective against severe disease.

At the very least the current trend of mass vaccinating people with boosters every 3-6 months seems completely unsustainable (and possibly harmful), except for possibly those in the highest risk categories.
I actually have this code compiling and running from a few months back with some minor compiler corrections; but was hesitant to release to github because of the copyright. It was very difficult to come across.

I asked several people at Bell/Nokia if it would be okay to release and they weren't sure if anyone cared (but couldn't guarantee anything legally) ... Looks like they took the liberty themselves...

I'll try to find time to do a PR or fork of this copy with my corrections and writeup for instructions. Imagine it's best I just fork as can't fathom Nokia is going to approve PRs.
He's also a HN user: https://news.ycombinator.com/user?id=cstross
“A bit of a mess up where he forgot it was someone else’s card”, yeah, and I bet not actually paying any bills for 12K of labour helped make it very easy to forget too…