skysight-inc/HackerNews huggingface dataset:
Many media publications really helped him by posting articles about how he "admits" to being Satoshi and has a "very similar email address".
As someone who believes structural racism and sexism in science are real problems, but also highly values EO Wilson's work and intellectual freedom in general, this rebuttal did me a great service by bringing some history of the controversy into one place. It may not shape discourse today, but statements like this serve a purpose in maintaining a record that people can be thoughtful about on their own pace. EO Wilson's own 1981 defense, cited in the article, serves the same purpose: we don't have to wonder how he interpreted his own findings.

https://www.nature.com/articles/289627b0.pdf
You are making a really good point. I do like E2E and privacy, but for the broader aim of getting people to generally distrust the Internet, any step that makes its use a hazard is good, simply put. The Internet has incredible value, I can't say that there will come a time when we will give up on messaging and e-commerce because everything else we do there is so fraught with danger.

But sometimes the future is unpredictable. What if ten years from now armies of hackers operate AIs that pollute absolutely everything with false information, impossible to distinguish from true facts? Those information wars are being waged now, only by humans, and yet, often with great effect. Imagine a time when a small agency can deploy an AI that creates hundreds of thousands of fake profiles looking like actual people, each posting slightly biased opinions on a slew of topics. At that point, the biggest social good may be to outright ban a big chunk of the Internet. And yes, it would be a sad day.
How to Set Up a Node.js Project with TypeScript
To prevent JIT Spraying, simply avoid EXecute-Write programs/applicatioms:

- Just-In-Time Compiler

- - JavaScript, in certain mode

- - .NET (Microsoft C# compiler)

- - Java Virtual Machine (JVM)

- - Adobe ActionScript (embedded JavaScript)

- Berkeley Packet Filter (Linux) API

- Adobe Actionscript (Adobe Flash)

As a security architect, you should be extremely mindful of the immense baggage that JIT design comes with.

References

- https://en.wikipedia.org/wiki/JIT_spraying

- https://en.wikipedia.org/wiki/W%5EX
As a non-American, I have no idea what kind of damage hurricane Katrina did. As far as I am concerned, there was some wind. Enough to make international news, but that's about it.

But when I see "comparable to a nuke" at least I know immediately that this is a major event. A hurricane, powerful as it may be, is harder to grasp for a comparison.
Most of their Zero Days are probably short lived and in any case the challenge of running an outfit like NSO isn’t only or even primarily in finding Zero Days.

This isn’t a business model you bootstrap by publishing to an appstore and paying influencer to promote - this isn’t “Raid of Warduty Call of Legends”. You need high level government contacts that can open doors as these deals don’t usually come up on public tenders, and you need people that can manage a relationship with both your host government and client governments especially if either or both are unstable and falling out of favor with a specific regime would result in high legal risk or even actual risk to the safety of you or your employees.

A couple of engineers taking a bag of goodies are more likely than not to end up in prison like the former NSA folks that took up freelancing for Saudi Arabia.
> Austrian Data Protection Authority strikes the same chord as the European court when declaring Privacy Shield as invalid: It has decided that the use of Google Analytics violates the General Data Protection Regulation (GDPR).

It seems Google was sued in Austria and they have found it to violate the GDPR so yes, it applies to the whole EU.
such individual court decisions are usually a precursor to what will be implemented EU-wide
They’re actually incredibly labor-intensive to create!
How Bad Is QWERTY, Really? A Review of the Literature
yeah I am like you, I even tried a PinePhone because I hate the current mobile OSes so much. (Unfortunately PinePhone is not 100% ready to be a daily driver though). Then COVID came, I haven't commuted for 2 years now and I stopped caring about phones. I carry my phone only in the weekend and only if I'm out, not if I'm e.g. bbq-ing at home.
The Web Renaissance – how the web dev world is changing
> TOTP integrated into the password manager

Is this portable, like Authy does it? Last time I moved phone it was a real pain to move authenticators...
You forgot the important, the moral part is only enforced if: “the modification in question does not have to be detrimental to the author's honor or reputation in order to qualify as a violation of the right of integrity.”
Interestingly, this[0] was posted a day after the article. It looks like Apple initially contributed a lot to BASH for instance

>We had a lot of gratitude in the Open Source community — particular for our fixes to make bash pass the tests.

The GNU projects showed their appreciation by re-licensing under the GPLv3.

[0]https://news.ycombinator.com/item?id=29984016
Learning to master something that is complicated for no reason is not rewarding, it is a massive waste of time and effort, and only feels like an ongoing drain.
Thanks for the summary! Very helpful.
The pilots of the aircraft involved don't have the situational awareness to understand this kind of issue - I would guess all they know is that they took off and suddenly got expedited vectors away from their original clearances.
To be clear, the transfer of EU citizen's data to the US was deemed against the GDPR. This decision does not mean that Google Analytics itself is illegal.
> certain tools can help make a job easier

Sure. If you insist on doing the unnecessary, possibly harmful job there are plenty of consumer grifts you can join that are waiting to relieve you of your money or exploit you for profit in some other way, like tracking and reselling your personal information. There is, after all, a sucker born every minute. Some of them have recently become parents.

But that's not a third option. That's just satisfying your urges.
Last year there were a few stories about how they embed trackers in their software. So I decided to go with a paid solution that will never spy on me (BW).
The CLOUD Act itself is the issue. Don't use MS Office 365 or any other US based service even if their servers are in Europe as they can not guarantee that your data is not accessible by the US.

Amazon and Cloudflare are all great service but your data is under US jurisdiction.
the reason these things are not accomplished is because it costs more to do them than the energy is worth, which is the only reason it hasn't been done

if bitcoin mining makes you suddenly notice that you want these logistical nuances subsidized, after a hundred years of never noticing, then fine, compete with the miners at energy producing sites and legislatively that way
I hope she added the appropriate hazard labels.

https://en.wikipedia.org/wiki/Hydrogen_sulfide

Seriously, I expected she finds a buyer or two, but $200k... This is a whole new magnitude of desperation. I really expected nothing from TikToks audience, but this extend of fart sniffling...
And so we find the catch
Does anyone know what it would sound like? Would it be a crack like a sonic boom from a jet?
Tech Startups Reach a New Peak of Froth
NOYB's article itself discussed here: https://news.ycombinator.com/item?id=29918496
I really hope this will have consequences that shake up ad tech, but the cynic in me says: They're just going to add another disclaimer in their cookie banner and exactly nothing will happen.
You are throwing around the word "stimulating" in a very misleading way.

If don't have good circulation in your home your respiration rate is going up by an unnoticeable amount. The idea that this prevents "relaxation" is absurd.

Equally absurd to claim "presents a new area of concern for authorities who like to keep control of a population".

If anything it's the very opposite, where *high* levels of CO2 *decrease* attention and causes drowsiness.

- https://www.nature.com/articles/s41526-019-0071-6

- Karnauskas, K. B., et al. (2020) Fossil fuel combustion is driving indoor CO2 toward levels harmful to human cognition. GeoHealth. doi.org/10.1029/2019GH000237.

- https://www.sciencedaily.com/releases/2020/04/200421090556.h...
It wasn't supposed to be 15 megatons, the expected yield was 6 megatons:

https://en.wikipedia.org/wiki/Castle_Bravo

The larger than expected yield caused a lot of problems.
Moreover, how does an algorithm handle password resets?
If something is illegal under GDPR it is illegal in whole of EU.

GDPR is a set of minimum standards that are common between countries in EU, some have even more drastic laws.
Yes, you have the same TOTP keys in both your phone and browser ext
The Real Dunning-Kruger Graph
Here's the rub: that's your individual opinion. Others genuinely see skill and attractiveness in much modern art, and see much of classical art as unimaginative and uninspired.

This is true, and citing what's popular doesn't make it less true.

My point isn't to be hostile, it's just to point out that even as you strongly feel something, others can just as strongly feel something else. There is nothing "naturally" appealing, except with reference to a specific person at a specific moment.
zerforschung.org does an amazing job!

They have also recently analyzed Djokovic's test certificate:
https://zerforschung.org/posts/djokovic-pcr-test-en/

Stuff like that is super interesting. I love this investigative journalism. Another one I find captivating is: https://www.bellingcat.com/
I think the syllogism comes from the fact that currently GA does transfer EU data to the US by default (and probably currently there is no way to prevent that?). But I'm not a GA expert at any rate so I can be totally wrong.
“I remember reading it… Probably, when I wrote it.”

https://youtu.be/cKbPNFUHLYM
Can you name a few please?
previous discussion: »Austrian DSB: EU-US Data Transfers to Google Analytics Illegal« ( https://news.ycombinator.com/item?id=29918496)
EU laws come in a couple of variants. The most common is a directive which is basically "Your country needs to pass a law to achieve X, Y, Z", and this is where you get larger country to country differences in interpretation. The GDPR is instead a regulation. That means it's literally the same law (and theoretically, the same standards) that applies EU wide. So the US equivalent would be a court in Texas finding something to be illegal under a federal law. What does that mean for the same action in california? It's probably illegal there too, but it could still be tested if someone wanted to try their luck.

So that means the current status is that's precedent a court in another EU country would strongly consider but technically could come to a different decision on and in either case the losing party has the option of appealing to the EU level.
But, due to American intelligence agencies explicit access to overseas data (Schrems II), any such service by an American company can't meet the requirements set forth by the EU, and thus can be considered illegal for any practical purpose.
Same. Sometimes, low tech is just fine. :)
Thank you Max Schrems for everything you do to preserve EU citizens' privacy and compliance of companies to European law!
That may be changing, but when I bought my 49" non-smart TV a few years back it was quite a bit cheaper than the same-size smart TVs. It wasn't that long ago, but a quick check at the same shop shows only "smart" (read: stupid) TVs. Unfortunately. As the price for the non-smart TV I bought was lower than the equivalent "smart" version I believe we'll be paying for a feature we don't need.
For full memory safety with C the only option are the C Machines, meaning hardware memory tagging.

Already in use for a decade in Solaris SPARC, and eventually mainstream across all variations of ARM CPUs.

Unfortunely Intel botched their MPX implementation and now it is gone.
Well yes and no, I'd like it to be automatic but I have an old archive around somewhere.
> Many implementations of bcrypt truncate the password to the first 72 bytes, following the OpenBSD implementation.

https://en.m.wikipedia.org/wiki/Bcrypt

This sounds undesirable to me, so I'd support sha256 and an alternative.

I'd also recommend adding a max password length to any API. No point in allowing million character passwords.
I don't use an IDE, I use Sublime Text. Why? Because I work with JavaScript, Ruby and to a degree with Python and Bash if I have to. All scripting. I find most IDEs make my life harder.

I've used Eclipse for Ruby, JavaScript, Android and (way back) PHP and it was OK.

I've worked with XCode when I needed to do iOS stuff.

I've used IntelliJ and Android Studio and when I do Android (seldom) I still use it. I've even tried to get myself to JUST use IntelliJ IDEs for everything since they support just about everything I do but I devolve back to Sublime quickly.

Right now I am sort of transitioning to Visual Studio Code since it has a few more IDE like features without me giving up on the a lighter dev env that I can just call from the terminal.

So VS Code might be it for me. Whatever you use, the transition from one tool to the other is really uncomfortable (it is why I stuck with eclipse about 10 years ago and why I haven't fully transitioned to VSCode even though I've been using it for a year now) and I would guess that is what keeps most people using whatever they are using.
As far as I understand it, it's not Google Analytics per se that is illegal, but the data transfer to the US. If Google Analytics would use servers on European ground it should be fine.

Or would that still violate GDPR as Google as an American company can still be coerced to give access to data stored on their servers outside the US? But I can't imagine that to be the case, as it would effectively mean that any business where an American company stores user data is illegal.
I'm a software engineer because I love technology.

Your opinion is fine don't get me wrong but my 4k 55" OLED tv is really really impressive.

It's a marvelous picture.

My DSLR images look brilliant on it, games do as well, HDR is surprising ly nice as well.

We watch most tv shows still on a 10 year old 720p beamer due to image size. 110" is still more immersive than 55". But I do expect being able to buy 110" 4k in a few years either through a more affordable 4k projector or by microled panels.

I can't follow your 4k = full of propaganda Point. Not sure what you mean by it.
It's truly appalling that so many times, on HN even, people genuinely recommend paying the ransom because "hackers won't go back on their word cause it'll ruin their reputation". If you're hacked, purge the passwords and reset everyone and do everything in your power to ensure no one can access it in a similar way again. I have no idea why anyone would think a hacker wouldn't simply turn around and sell the data anyway
>> when capitalism is by definition a redistribution from the poor to the rich

How is that physically possible, when poor people have nothing?
An earlier “blocking change” they made (still in effect) is you can’t block moderators.

I blocked Automoderator and others, greatly improved my reading experience by not having obnoxious stickied automod posts at the top of many threads, but that stopped working so you need to scroll past them each time, just awful.
Home for the Holidays? The Global Implications of a State-Level Cyberattack
I think if you view it from this angle it becomes clearer:

The court has not arbitrarily declared GA illegal, it just follows what the GDPR mandates - and came to the (quite obvious) conclusion that GA is not compatible with the GDPR.

Consequently it is illegal everywhere where the GDPR applies. This doesn't mean that there are immediate consequences for those who use GA on their websites in any other country, but it is very likely that other EU countries' courts will decide the same way.
> We are not a state that is governed by clergy

This is not entirely true.

Over the last twenty years it was no more then couple of years when ultra-orthodox weren't the part of the ruling coalition.

And they were always very explicit about controlling citizenship, marriage, religion and finance.
For a moment I thought about setting up 10GbE at home, but then I realized there is no point yet because my external connection to internet is limited to 1 gigabit.

The only use internally would be central storage server. But all the new NVMe SSD's are faster than 10 gigs, so my internal network would be the bottleneck.

The next logical step would be upgrading to 100 gig network, but that is too expensive right now. I should buy more fast NVMe storage for that money.

If I could get 10 gigabit connection to internet, it would probably make more sense, but I don't see it coming that soon. And I'm paying 15€ for 1 gigabit right now, I would not be willing to pay much more for 10 gigabit connection.

On top of that, my Zabbix monitoring data shows that I rarely saturate the 1 gigabit connection to internet. Most of the time I don't need more than 10 megabits.
A proprietary Fastmail feature generates anonymous @fastmail.com addresses for you, but I mostly use my own domain since I don't want to be locked in to one provider.
IMO this is a cultural problem. Coupled with a general lack of experience of majority of people working in our industry.

People learn how to do certain programming tasks in one way, and instead of trying to fully understand "what" and "why" they're doing it, they just keep doing it. This approach works fine in a computer class, or in internships, but it breaks down when comes to writing secure apps.

It is similar with SQL injection: using prepared queries is not really difficult. I'd even claim that it's easier and simpler to write compared to string concatenation. But "knowing" about them takes time, curiosity and preparation. But making queries via string concatenation is how people used to learn.

Another thing is over-engineering (the wrong kind): it is more difficult to write tens of classes rather than doing what the task requires, but some people still do it because that's how they learned to program.

There are no shortcuts, unfortunately. So far we've solved this partially by using slogans: "Just use BCrypt" was a popular one a few years ago. But honestly I don't think this is enough.

We need more mentorship (for the beginners) and more peer reviews (for the experienced).
Yeah it's rather amazing what Lisp applications in the 90s contributed to. https://en.wikipedia.org/wiki/N-World is the software mentioned in the comment, the modern equivalent being Blender. The Credits section of that page has some great classics like SM64, FF7, Banjo-Kazooie...

It also had great tutorials and documentation: http://www.aaronjamesrogers.com/misc/nworld/N-World-Intro.ht...

It's a shame that its successor Mirai https://en.wikipedia.org/wiki/Mirai_(software) just kind of vanished. Its main claim to fame is Gollum's face. Chronologically it's not that different from Blender, which also imploded around the same time in the early 2000s, but Blender was able to go open source and survive and have another 20 years of development to get where it's at today. I don't know that the world would look all that different if Mirai had been able to take a similar path, but at least there'd be a cool modern 3D modeling tool in Lisp.
It's time for EU services to shine.
Well part of the ruling is that the "standard contractual clauses", basically an attempt to contract away the regulation is not valid. From the article, it seems to be just conceptually, which gels with my understanding of the GDPR, so it's not going to be just adjusting/appending the legal wording in the TOS to fix that.
You're right, I did kinda read it as an objective statement when it clearly wasn't. My bad.
BRHS does not sound as cool as BGHS. This is the only reason to exclude Rust and prefer Go.
:p
Eggs: Composition and Nutrition
Once a culture starts going downhill in certain aspects, there's no going back.

And once there is not a good chunk of shared values and agreed upon ideas beyond some abstract tennets, any BS bikeshedding and any fringe opinion becomes an "equally valid" and important discussion point as anything else...
It's been years since I've seen a boxcar in an actual train. All the trains I see have double-container cars these days but hardly ever an old-school boxcar. They're as rare as a caboose.

I remember helping a local factory tear out all their boxcar lines from their warehouses 25 or 30 years ago to make room for additional racking to fill tractor trailers.
" Genes and racism

S1R- Steven Rose notes in his recent letter
(Nature 22 January, p.335) that a National
Front journal New Nation has claimed to find
support for racism in my writings on
sociobiology, as well as in those of Dawkins
and Maynard Smith. Rose calls on the latter
two authors to dissociate themselves from such
misuse, although curiously he does not extend
the same invitation to me. To keep the record
straight, I am happy to point out that no
justification for racism is to be found in the
truly scientific study of the biological basis of
social behaviour. As I stated in On Human
Nature, "I will go further and suggest that
hope and pride and not despair are the
ultimate legacy of genetic diversity, because we
are a single species, not two or more, one great
breeding system through which genes flow and
mix in each generation. Because of that flux,
mankind viewed over many generations shares
a single human nature within which relatively
minor hereditary influences recycle through
ever changing patterns, between the sexes and
across families and entire populations" .
lf there is a possible hereditary tendency to
acquire xenophobia and nationalist feelings, it
is a non sequitur to interpret such a hypothesis
as an argument in favour of racist ideology. It
is more reasonable to assume that a knowledge
of such a hereditary basis can lead to the
circumvention of destructive behaviour such
as racism, just as a knowledge of the
hereditary basis of haemoglobin chemistry and
insulin production can lead to the amelioration
of their pathological variants.
l now call on Professor Rose to consider
these and similar arguments raised in my
writings. It is my hope that he will not confine
himself, as he has in the past, to arguments
that link sociobiology to racism and thus to
continue to abet the very misuse which he
piously claims to deplore.

EDWARD0. WILSON
Harvard University, Cambridge,
Massachusetts, USA"

https://www.nature.com/articles/289627b0.pdf