skysight-inc/HackerNews huggingface dataset:
The difficult part of basing a one-way function around NP-hardness isn't so much the reduction itself as it is the ability to sample from the "hard core" core the distribution.

For example, say you base the hardness of your OWF on the NP-hard problem of finding a Hamiltonian Cycle in an n-node graph. Your reduction could be completely valid and sound, meaning that pre-imaging your function would require solving an NP-hard problem. But, maybe suprisingly, HamCycle is actually extraordinarily easy for an overwhelming majority of n-node graphs. This is the result of a phase transition that happens when the degree of a random graph passes O(log n) or so, where suddenly the probability of such a graph having a HamCycle becomes 1-o(1) > 0.999999 for n sufficiently large, and a simple greedy algorithm can find them (ref. Pósa '76). And most graphs have average degree closer to n/2 than log(n), meaning that finding a HamCycle is trivial.

The crux, finally, is that basing your problem on an overwhelmingly trivial problem, even if technically NP-hard, is still not going to work for security. It will be little consolation that perhaps one customer's account was not broken into when the other hundred million accounts were cracked in milliseconds.

A solution to this problem would require researchers to find an NP-hard problem that is hard on average when sampled from an efficiently-sampleable distribution (plus a couple other techcnical caveats). Whether or not there is a good way to do that, for any NP-hard problem, is still mostly a major open question, and not for lack of trying.
Same. Has anyone heard of anyone who HAS gotten a notification?
Which is to say, some people have a problem and need to take steps. Others don't and shouldn't be restricted by other people's issues.
Hey just wanted to say thanks for sharing this.
> ...the rubric makes it look like every staff engineer must make Kubernetes run in a WebWorker

No words for an insight as incisive as this.
Marketers have no sense of boundaries or limits. Everything they do is in violation of social norms. You give them an email that's clearly for some specific and useful purpose, they abuse it by turning it into their personal marketing channel which benefits nobody but them.
Watson was always an obvious sham designed to generate some good TV ads. Anyone who didn’t see this deserved to get fleeced.
Having a pleasant taste is significantly stricter than simply non toxic. Eating dirt or clay can provide missing minerals in peoples diets.

Most notably most salt is arguably just another type of processed soil.
I think we're in agreement, but just FYI "tempestuous" doesn't have anything to do with temptation.

The above situation could certainly lead to tempestuous arguments, though!
They do recommend having two keys associated with the account. It’s not cheap, but you can pick up a USB-C small format one and leave it in your computer & get one for your key ring that does NFC / Bluetooth. One is always with you, one is conveniently on your main computer.

You can get the least expensive model as a third, off-site backup.
What did min browser have?
Logging in from a known VPN IP will likely flag the activity as even MORE suspicious from Google's AI's POV.
Yes it's interesting, precisely because it's intuitively "solvable" by machines. There's joy in solving by hand, and joy in creating a solver, but probably no joy in running your solver every day and sharing with your friends. Because every decision is some maximum-likelihood estimate, there's no tension or drama in the sequence of guesses.

In fact, simply the act of creating an infallible solver (100% likelihood of 6 guesses or less) demonstrates the futility of competing with their soft, fleshy skills.

I do think any solver that uses the solution-set is "cheating", but I suspect it makes little difference in the total solution (like... 2-3 bits of additional information needed, just a fraction of a round).
I have a few thousand dollars I earned with Adsense a bunch of years ago. They suspended my account and prevented me from getting the money. Every now and then I get a letter from some auditor that says I can claim the money. Just need to login to my google account. Needless to say google customer service hasn’t helped. Definitely need some class action suits to change their behavior, and I hate class action suits.
/r/TrueReddit and /r/FoodforThought subreddits are both pretty interesting and tend to have insightful long-form articles.
how about freedom from harassment, abuse and surveillance?
As a security professional, this is something we deal with daily. Security is too lax? Why didn't you protect my data. Security is too strong? I can't easily access my data!

Can someone show me the Goldilocks zone for internet security? It's a moving target.
They are a company that writes several different tools for developers, not an e-commerce site for the general population. Which tool has a useless description that doesn't tell you what it does? If one tool is interesting to someone they can click it and they are presented with a great Readme that explains it in more detail. It takes like 30 seconds to parse the page and find out if they offer anything that is interesting to you.
I tried using this a year or two ago—seemed like a really cool idea, and I still think it is—but I couldn't find an actually useful application for it in my life.

Not saying there aren't plenty of neat applications out there, but once the initial "that's cool" feeling wore off, I wasn't sure how to actually get some value out of the system. For me, it felt like a time sink.

Curious to know if others have found use cases that are low-maintenance and high-value.
I just setup a new site using Cloudflare Pages + Hugo, that's the entire stack. It's free and great.
I have two "real" male friends, neither of which I made in the last decade.

I wonder if their point is not that our society doesn't generally agree that the "collaborative" aspects of friendship are better than the "competitive" benefits, but that despite this, we still behave as we do. I wonder if we'd see the same results if this study had been done in a more matriarchal culture than the US.
You likely do and haven't realised.

A decent quality upright piano is about $10000.

Some kids have go karting or motorcycle racing hobbies. Some have archery, golf, etc. They all cost a lot of money over time. Hell, some kids sail! That's really not cheap.
This is exactly my experience too. My Google accounts just randomly decide to stop working from time to time, and if I no longer have the same phone number that I did before (or if I'm traveling overseas and cannot get a "confirmation call"), there is no way at all to get in. Usually after a mysterious and unexplained period of time, my account gets un-flagged again and I can log in as per normal.

The first time this happened I completely lost all access to my Google account. I transferred all of my important email correspondence over to a Microsoft account and I have never looked back. Unfortunately I still need to maintain another Google account for my phone (Android) to work properly, so there are times I still get bitten by it. It's absolutely infuriating when you get a new phone and specifically need to log in with your Google account to be able to do anything, that's exactly the time Google blocks you from being able to get into your account, because it's apparently detected the new phone and decided you're a hacker.

This also happens to me regularly with PayPal, almost always when I am traveling overseas, at exactly the moments that I really need PayPal to work so I can pay for something related to my travel. It's so annoying. Tech support never, ever solve the problem. All you can do is wait and try again later until magically it works. Sometimes weeks later.

The only thing I can say for certain is to never try log into your account over open wifi or over a VPN connection, because somehow Google (and PayPal) seem to flag that as a hack attempt no matter how many times you correctly confirm your identity. And once you've been flagged once, your account gets caught in some kind of loop where even after you get back onto an apparently blessed IP address, you're still locked out for some unspecified period.
You probably have institutional access? Elsevier publications are not generally available to the public.
For you it is Fastmail then, they are awesome and integrate with 1Password for an-email-per-service thing (known as Hide My Email in Apple's world)
What do you consider table salt? That’s generally just minimally processed “soil” that was likely sitting around for millions of years until people decided it was tasty and dug it up.
If your HR team is deciding engineering promotions, stop looking for the problem; you found it.

HR is welcome to attend/audit the process, give statistical analysis, check for biases, advise on how to handle underperforming employees, give compensation band advice, and execute the promotion decisions the technology group decides. But if they’re the ones deciding, you need to change your company (or change companies).
By the same, uh, token, could you find a bunch of commits from a large github repo that each form successive parts of the key, post an issue referencing them, and then make that repo - or even all github - illegal in the USA?

If Bitcoin's primary design and purpose to disseminate bluray decryption keys, and provide unfettered access to them to anybody and everybody, and advertise it as such, there may be some kind of an argument to be made.

But as it's not, and there are hoops to jump through, doesn't it make about as much sense as trying to make malls and permanent markers illegal, because someone wrote a bluray decryption key under a mall toilets cistern lid?
More recent but solid compilation of writing - https://www.fairobserver.com/
Investing all social energy in current coworkers can make a job change awkward. In 2021 I had 3 different sets of coworkers. All lived and worked remote, hours away.
This reminds me of a story from a couple years ago (pre-covid). I dropped my brand new phone before my case arrived in the mail and cracked the screen. We were on our way to the movie theater and so I decided to drop off my phone to get it fixed before the movie and then we would pick it up on the way home. Perfect plan!

Except I bought the tickets through an app and now I didn't have that app. Nor did I know the password, because I use a pw manager. The person at the booth said I could use the confirmation email, so I tried on my wife's phone. It wouldn't let me log in to gmail from her phone no matter what I tried.

Different browsers, desktop mode, etc. There was no getting in. We were about to miss the start of the movie so I just went ahead and bought two more tickets and got a refund later.
photopea.com is basically photoshop 6 in the browser. I use it all the time.
Music sampling has had an impact on the differentiation of music. It's a lot easier to use a liked sample than to come up with a new ones so a lot of the post 2000's music sounds the same. So what's the point of trying to find new music when it all sounds similar.
Tightening emissions rules are having an effect on this, at least here in the US. My small late-model Kubota has a diesel particulate filter and a fair bit of electronics to manage it. I've been told that if you don't follow the emissions instructions, the system will shut down and a Kubota official will have to come out to "unlock" your tractor.
FWIW, your O(N^3) algorithm can be equivalently implemented in O(N^2) by using the following observation: a word is not eliminated by a guess if and only if the result of testing the word against the solution is the same as the result of testing the guess against the solution. Using this, you can implement the algorithm like so: for a given solution, partition all of the guesses based on the result of testing them against that solution. This partitioning takes O(N). Then, the set of words that will be left over from a guess is equal to all the words in the same partition as the guess. This makes it easy to calculate "how many words can be eliminated from a particular guessed word".

I'm making this comment because I started with the same O(N^3) approach and then realized this. :)
Not my experience in the germanic portions of Europe. Every bank i’ve been involved with in the last 20 years has had otps of one kind or another.
I would be happy enough if I could find an affordable raspberry pi laying around.
I wish GitHub would provide some sort of recommended projects based on star clustering. They have something involving stars on the GitHub Explore page, but the results are not very good.
Yeah, a state which doesn't subsidize food production will not survive very long. It's a practice that dates as far back as the Akkadian Empire.

https://courses.lumenlearning.com/boundless-worldhistory/cha...
Yes, this happened to me with a throwaway gmail address I once had. Correct name and (strong) password, BS about a different device. I never regained access. Luckily nothing of real value was lost.

My primary email account is on Fastmail these days, and I like them.
A good deal if you can get it, but probably not the ideal outcome if you’re a citizen paying for it or dealing with systems engineered by them.
lol. Too true..
It's fascinating to find an idea like that in Perl. Python's developers are hostile to tail-call optimization due to reasons like it complicating debugging.
The one thing that jumps out at me that this has that Rich doesn't is the List selector thing and Viewports (Rich might have that but I haven't looked too hard)
No way.

Since the start of the pandemic I was ordering groceries from Amazon Fresh.

Adding/removing an item to/from cart takes couple seconds at very least. Expanding “similar items” can take up to ten seconds easily.

It seems at times like they are using a blockchain or maybe a real human writes down my order on a piece of paper (and sometimes they have to run for a new pen).

This is not a one-time experience or a rush hour. It always works like this, it’s just how it is built.
Snarky is directed at the people who do proof-of-work cryptocurrency, not snarky directed at you. My bad for not putting a winky face or something.
As evidence, this provides exactly two (2) examples.

I remember the good old days when the NYT etc would insist on having 3 anecdotes before telling you breathlessly about the latest universal trend sweeping Silicon Valley or Manhattan or whathaveyou.
I moved my family to Fastmail a couple months ago and it’s been wonderful. Never knew I wanted “shared contacts”, but it’s the best feature ever. Once I figured out it existed, I spent a couple days making really good cards for family members and family friends, and all that work is shared with the whole family.
Honestly this is why I don't use Python anymore. Someone comes along with real improvements and GvR gets upset about the tone. The core devs just seem entirely full of themselves and even the most standard interpreter improvements are just too wild for them.

Id love to see the core team develop some humility and realize their engineering is barely even mediocre and accept patches from well meaning people that know what theyre doing
Only solution that works for me is to use my 8 digit backup codes. That works everytime.
I don't think attempting to block decoupling is a "rhetorical device".

"Rhetor" means teacher. A rhetorical device is a way to explain, communicate, teach.

Blocking this was is an attempt to prevent explanation, communication, and learning. That isn't a rhetorical device - it's an anti-rhetorical device.

Perhaps better called an argumentative tactic.

A good discussion is one where ideas are most fully-examined, questioned, and understood from the maximum number of angles. If the goal is to have a good discussion, you must encourage and support devices that increase understanding.

If the goal is simply to win for a specific agenda, you don't care about having a good discussion, and you should use whatever argumentative/blocking/interruption tactics you can.

Ultimately it's a question of whether you value finding truth and mutual understanding, or the dominance of your pre-existing beliefs.
I believe the lack of a moral element is due to Hollywood movies normalizing cheating. I mentioned it elsewhere in these comments, but there's a lot of celebrated cheating in widely popular movies (both classic and modern) like Casablanca, The Notebook, and Sleepless in Seattle.

Perhaps the behavior came before the movies, but I'm skeptical because it seems to be the natural behavior to avoid pursuing people in relationships (it will probably cause emotional trauma for the person in a relationship, as it would be natural to feel guilty about cheating, though I indirectly know of a person in a relationship who seemed to have felt no guilt about cheating at all).
I thought Zig didn't have unicode strings?

https://www.reddit.com/r/Zig/comments/9q3or3/how_to_deal_wit...

If that's true, Zig is NOT a modern language. Modern languages use international strings, and are unicode aware with a good unicode aware string library.

For crap's sake, the code example for comparing modern languages USES A STRING. The fact it is not unicode doesn't matter.
Bailouts aren't regulation, they're what happens when people are allowed to make messes that they aren't responsible (either through lack of ability or purchased privilege) for cleaning up.
Good news , CloudFlare does email routing
Perhaps not famous, but Bryan Cantrill, who gives my favorite talks, has an interesting and funny talk on one of the Joyent outages: https://youtu.be/30jNsCVLpAE
Very cool! I was slightly confused when I aimed right at the opponent at full force and was prompted to click to restart. Definitely was a bit more interesting once I stopped doing that. Thanks for sharing.
Still the problem with Fastmail is the same as with Google. Leaning on 3rd party service that you have no control of. There are so many things that could go wrong there, they can be hacked, go bankrupt, closed by authorities, insided. Everyone should have an appropriate personal disaster recovery plan that includes stuff like recovering from loss of service supplier.
Use Che browser to mimic your usual device…

https://chebrowser.site/
> it is definitely doing non-trivial fingerprinting

Can confirm.

To generalize and understand why, big corps have to deal with an insane amount of (often automated) abuse, so they build profiles using data collection to assess your risk level. Being in the wrong cohort (say unusual browser, small country, rare language, use a vpn etc) can affect your score. Basically it's these massive bayesian filters that output how suspicious some activity is. Whether you're signing in to Gmail, returning a product, buying something with a credit card or booking an Uber, some form of score is computed and then used to allow/deny/delay/verify. Obviously this is well established in the insurance and finance industries, but make no mistake, it happens everywhere.

This approach is understandable from a business perspective, but imo deeply troubling for an open society. You don't have to squint much in order to see the similarities to social credit systems, EVEN if there is no grand totalitarian state-coordinated behind it.

As usual, the first step is transparency so we can actually discuss these issues based on accurate data, but that's very difficult today. Usually fraud and abuse prevention is among the most secretive departments, they never share anything.
Reminder: Google paid for an ad campaign with this gist: A father creates a Gmail account for his daughter when she is born, and sends her important photos and mementos as she grows up. Sweet. Reality: At least one person tried this in real life, and the child's account was automatically deleted without recourse.

https://tech.slashdot.org/story/11/12/18/2046221/why-google-...
I think it's a link to a retweet. Though whatever is making twitter act dumb, use this and it should work: https://twitter.com/amilajack/status/1484970823005868033
I toyed a bit with this and also node red.

Ultimately decided the learning overhead and yet another system running isn’t worth it. Instead building python code > dockerize > deploy CI pipeline.

Slightly more general purpose tool I think though at loss of the drag and drop low code convenience
This concern about harassing messages is particularly relevant as data aggregator Etherscan just announced their new messaging feature "Blockscan Chat". I'm unclear on how it works but it's the first time I've seen such accessible tools for blockchain users to message eachother: https://chat.blockscan.com/start

That said, even in this beta there's an easy to reach option to "Block user". Nice work Etherscan!
To be fair its not just Google and amazon etc. I had a similar issue with my bank, they blocked a transaction in online banking which had pre requisites of logging in (three secrets effectively) plus sms verification, and specific sms verification for this transaction. unblocking it required only control of my phone number and knowing my date of birth and other easy to get info. If it had been a fraudulent transaction then the bad actor already had my sim card and ability to log into my account.

Serious question: is there any examples of a robust way of doing customer security? Even just a proposal/document or blog post (doesn't need to have been implemented). I sort of feel no one has figured this out yet (if its even possible).

Companies just need to make sure their insurers will pay out, which if there is not proven solution seems about all they can do.. tho a little humility and honesty that that is their position would go a long way.
My first instinct is that this would be a short term strategy that trades off the company’s good name for marginal sales, but I guess not!
Curious about the backup solution.
> You should be able to image her hard disk, and probably boot it up in a VM.

Is that still an option? I haven't used Windows for a long time, but I believe Microsoft has been pushing towards enabling BitLocker by default for everyone. If you don't have the BitLocker recovery key, or access to the user's Microsoft cloud account (which AFAIK has a copy of the BitLocker recovery key), the only way to decrypt the hard disk is to boot the system the normal way (with SecureBoot enabled even), since the key is held on the TPM.
Sorry, my terminology wasn't clear. Didn't really mean running it as root, meant that WP has direct access to your DB (it must).
In terms of the waste, right now nuclear waste can be recycled (as it is in France) which would reduce the amount of waste:

https://en.wikipedia.org/wiki/Radioactive_waste

Newer reactor designs would also make it possible to use most of the waste as fuel:

"...What is more important today is why fast reactors are fuel-efficient: because fast neutrons can fission or "burn out" all the transuranic waste (TRU) waste components (actinides: reactor-grade plutonium and minor actinides) many of which last tens of thousands of years or longer and make conventional nuclear waste disposal so problematic. Most of the radioactive fission products (FPs) the reactor produces have much shorter half-lives: they are intensely radioactive in the short term but decay quickly. The IFR extracts and recycles 99.9% of the uranium and Transuranium elements on each cycle and uses them to produce power; so its waste is just the fission products; in 300 years their radioactivity will fall below that of the original uranium "

http://en.wikipedia.org/wiki/Integral_fast_reactor

https://en.wikipedia.org/wiki/Generation_IV_reactor

While there are issues with nuclear power, the worry some people have about nuclear waste is greatly overblown to say the least. The US government has been taxing power generated by nuclear power for decades and has collected billions of dollars to cover any costs in the future.
> somehow John Deere managed to achieve a monopoly

Do they actually have a monopoly?
Also, C suite phone numbers are worth their weight in gold for sales teams. Confusing that with another person’s number is a pretty bad mistake.