skysight-inc/HackerNews huggingface dataset:
Putin demands 'unfriendly countries' pay for Russian gas in rubles
Seems pretty fair, since if it was easy for an artist to undercut Spotify, they'd be doing it.
I have a suspicion a lot of the defenses we put up to hide our 'different' and possibly 'nerdy' interests have since become a shield of a bygone era. No longer are nerds bashed for being nerds. Kids are a lot more understanding and nice nowadays? (In general as well, a lot more socially progressive)

Curious if anyone in the young crowd, or teaches/parents the young crowd in highschool could chime in on this. I could be very very wrong and living in a bubble.
thanks for your comment. we have adapted the translation on the page.

Two of the most important advantages of a folding bike, namely the weight and the folding volume, are also the largest cost factors in the product price.

The price is a matter of quality of material and manufacturing and number of parts. The lower the weight, the higher have to be the quality, the more compact, the more high-tech parts are required. the more expensive will be the bike.

You can't produce a folding bike with only 10 kg and only 55 l of folded volume that can easily be ridden up to 25 km/h and is stable for people from 1,30 m to 1,95 m and up to 100 kg for prices below 2,000 euro, unless you produce 100,000 or more in a year or you sell directly to the customers.
You wrote a thorough post, thanks. That said,

> Hard training is not the only ingredient to excellence

It's not the only ingredient, but it is the sine qua non of martial arts excellence. When have you ever seen a martial arts teacher (of whatever martial art) value the slob newcomer over his hard training students? Most martial arts teach strenuous training and repetition.

You first build a foundation of solid work and training, and only then you can become the "chosen one" or the playful one. Po's merits are that... he's an optimist and a daydreamer, I guess? Who said none of the Five were also optimists, loved their art or had good qualities as well as rigorous training and excellence?
After nearly a decade of slowly forming this picture and having it constantly shift and update as I acquire new information about the behavior of systems, human nature, complexity, and understanding history I'm not likely to radically reform it away from "society as we know it is at some point going away". The fundamentals just don't support it.

I'm curious what you've got though in terms of your own challenges to my view with respect to those paragraphs because I value accuracy in thinking, so if there's angles I've not yet had the opportunity to consider yet then I always like to know.
If this group can bribe insiders so easily, imagine what a state-level actor can do.
The "customer service" role itself is an invention for companies to absolve themselves of core responsibilities.

Company screws up, the only option available is "contact customer service." And actually getting in touch with customer service is made as difficult as possible by design.

If you do have the patience and persist, it turns out the customer service agent doesn't have the power to do anything either. In a lot of cases (as it was for the Okta incident) they don't even work for the company in question!
Unsurprised it's teenager(s) - a lot of their escalation and traversal attempts as well as their bragging made it seem as though they had not worked in industry.

It's scary to think what someone with actual knowledge of common practice could do with the same kind of approaches.
As in hashing being there ultimate compression… seems unlikely
It's probably easier with quantum computers: https://eprint.iacr.org/2020/213.pdf.
The bulk of your post was educational, but it was misleadingly shown as an answer to both "million" and "millions", when those two scenarios actually have very different answers.

> ps — "to be pedantic" means "fun fact" but sarcastically.

It means that, but also sets it up as a correction. But "millions" being "every day" was right all along.
I think the issue being criticized isn't about credentials, which smart companies don't care much about already, but about ability to learn. Your oversimplification of equivalent education being to just watch a free series of videos and get graded on a project has the same flavor as just telling people to teach themselves.

I mean, learning on your own is certainly a thing, especially in our field. My own beginnings were self-taught from a book. But structured environments are important, too, and for many people the only chance they'll have of learning something, because they can't or won't otherwise. Does the "cost" (which we're calling a flat $X as if it were paid upfront, ignoring the ISA details) have to be so high for these bootcamps? Probably not, but if you're going to attempt to replicate something like a structured experience, your costs aren't going to be nothing. But that's beside the point, since in the style of "charge more" advice from startup founders, if you're trying to build a business, your cost is what the market lets you get away with, not what some randos on the internet not in your target customer base think is "fair".
Looks like this is from UC Santa Cruz. I wonder what it's doing on Rice's page.
"Allowing updates without signature" isn't the same as forbidding the owner from applying updates. Whoever buys a device has the right to decide what updates are applied to the device. This isn't incompatible with requiring signed updates. It is incompatible with the manufacturer being the holder of the private keys, and rightly so, as having the ability to modify the running code is the true definition of hardware ownership.
I am just wondering if this is Vitess related. I am moving tens of PBs into Vitess and it would be really bad if these incidents are vitess related...
Seems like you ought to know TLS 1.3 famously doesn't have a way to do RSA key exchange. There's a fun video where some presumably American EDCO people are like, "surely if we all turn up in person we've got more votes so we can get RSA back into TLS 1.3" and er, no, the IETF isn't a democracy.

Looking at GCM or any other authenticated encryption without Sum Types makes me sad. If decrypting the message fails, there is no plaintext and I feel like an API should be able to actually express that properly not return a plaintext [even if it's empty] and a flag saying "Don't use the plaintext". :(

The "block thing" is a necessary choice if we're going to have authenticated encryption, because authenticating costs us overhead. If we wanted to reliably authenticate individual bytes (so that we can have what naively feels like a stream of bytes) we'd be paying that overhead for each byte. That's pretty outrageous. On the other hand if I'm downloading a 10MB file with my 24kbps modem and none of that was authenticated yet because the authentication only happens once at the end of the encrypted data, I'm going to get very anxious about my download counter correctly showing 0% successfully downloaded for so long. So TLS authenticates whole records.
> can't honestly comment on

Of course they can, but we can acknowledge it's a moving target. I'm at least confident it will be better than Steam.

> loses immense amounts of money

This is the same for any growth business/product where you front-load marketing and business development costs, and is not an indicator of future trends.
Damn. That's incredible.
https://youdownloadtheappanditdoesntwork.com/
> The US public needed some more important foreign blood to be spilled than Afghani. And that's the way the cookie crumbled...

I really don't see how you can reach that conclusion that prime mover on the Iraq invasion was the US public at large.
https://launchschool.com/deferred#cite-note-3

> Once students graduate from Capstone, they are expected to spend 40 hours a week Monday through Friday searching for a software engineering career. Weekly check ins are mandatory.

I don't think I could handle a 9-5 job, let alone 8 hours a day applying to jobs under penalty of unspecified legal consequences.
Yep. That’s why a lone but shadow port is taken from the high-end of ports … just for SSH (on the inside). Two interfaces. No bridge. Raw Netdev.

Almost like an overglorified but managed hub.

If you like your MAC, you get to keep your MAC.
A selected quote:

"It should be realised that the fighting-instinct, if well directed, gives energy
for much that is good and beautiful. But the same instinct may create chaos if
it breaks loose from all restraint, making use of the greatest discoveries of the
human intellect."
Sysend
Debt does generally have an expiration and is discardable in bankruptcy... unless you live in America. ISAs might be an attractive alternative to how terrible American laws about student debt are, but the real solution is to fix the awful laws.

A better alternative that you can pursue today is just to seek education abroad, Canadian universities are a fraction of the cost for an equivalent service - or be careful about the education you choose, most state colleges are very reasonable for in-state tuition and you can potentially save on room and board.

Ivy-league schools are overpriced and a waste of money.
> This would be the poor subsidizing the rich.

Poor people don't even pay for their own benefits, how can you say they fund education for the rich? Rich people are net payers and poor people are net benefactors, if some poor people got an education and remained poor then their education got funded by others, if some rich people got an education and remained rich then they just paid slightly less net to the system, their education wasn't funded by the poor.

Under no circumstance do the poor fund the rich in this system. The main group that loses out are high income earners who didn't get a degree, and the main group that benefits are poor people who got a degree.
Seriously - would love to find one online, event for a tough markup. Not sure when to expect a new wave to become available on the market.
I wonder if it only holds if, if they're in a relationship, it's with another scientist.

Lots of engineers are entranced by the "beauty and wonder" of their fields to the point infuriating their partners by, say, never going home on time, which can lead to long term lack of domestic well-being.

After all, the old joke about the frog and the engineer resonates for a reason:

> An engineer was taking a walk when a frog spoke to him and said, "If you kiss me, I'll turn into a beautiful princess."

> He picked up the frog and put it in his pocket.

> The frog spoke again and said, "If you kiss me and turn me back into a beautiful princess, I'll become your girlfriend."

> The engineer took the frog out of his pocket, smiled at it and put it back into his pocket.

> The frog spoke again and said, "If you kiss me and turn me back into a princess, I'll become your wife."

> The engineer took the frog out of his pocket again, smiled at it and put it back into his pocket.

> Finally, the frog said, "What is the matter? I'm a beautiful princess. Why won`t you kiss me?"

> The engineer said, "Look, I'm a busy engineer. I don`t have time for a girlfriend or a wife, but a talking frog, now that's cool."
A lot of interesting new systematic complexity. Cards are now expected to read total system load telemtry pin & throttle themselves semi-intelligently, in a non-cooperative arrangement with other power consumers. Good luck with this pcie.

In my weird world I think we could/should just make pcie cards expose a usb root complex, with a usb power-delivery device plugged in. you'd need cooperation with the usb committee to get amps beyond 5a, to scale to- hi im a gpu, can i have 20A at 12V? then the psu knows how much juice it's expected to ask.

usb-pd is pretty great with how devices make bids, negotiate to try to get what volts and amps they want, & make up alternate asks if they get denied.
If you read the tweet thread this HECS model solves a couple of the big issues.
There is no adverse selection if the scheme is open to all at any institution, and there is no legal and regulatory risk since, I believe, the repayment of the loan is legally mandated through payroll rather than being subject to a private school chasing students around in courts.
The difference is the currency value due to demand and recognition as a legal tender. It's a token of recognition that other parties do need your goods and services and hence are backing your currency. You can ask yourself a similar question to get an intuition about it: what's the difference between IRS accepting payments in Bitcoins or dollars vs accepting only dollars?
The leader of the world's most dangerous hacking syndicate is a minor? How did we get here exactly, in cyberspace security terms?
This is the kind of conspiracy talk you hear from people who deny the moon landing. There's something amazing, so superior, so great, that the man is holding us down and refusing to let us have. When in reality there are simple engineering reasons why the supposed superior thing is really just terrible.

UCI stopped recumbents, the superman position, fairings because they're so incredibly superior? That's ridiculous! Recumbents are far inferior, they're huge, they're clunky, you have limited visibility in the city. The superman position? Please, everyone can see why we don't ride around in that position. And fairings? You can install one today. It's on Amazon. It's cheap. No one does it.

UCI is just a mirror of what the vast vast majority of cyclists want. Had they not put bans in, professional cycling would be people going around in carbon fiber tubes sitting horizontally. That is not cycling as 99% of people know it, and as 99% of people want it to be.

You bring up disc breaks. That's the perfect example of how things work. People adopted them. So the UCI approved them.

> Why don't people ride small wheels? Because racers don't, making it hard to market them

People ride small wheels all the time! Foldable bikes. BMX bikes. They have small wheels. They're perfectly marketable and sell very well.

I guess you mean, why don't normal hybrid bikes have small wheels? Simple, they're not as good as big wheels. They're far worse at handling bad terrain like cobblestones, potholes or gravel. Big wheels provider a smoother more comfortable ride, and they're less twitchy than small wheels.

If small wheels were superior, given that basically every bike shop has such a bike you can get today, people would be trying a small wheel bike and a large bike and deciding on the small one. Every bike store associate would be telling you that they discovered something awesome to make you ride better: small wheels.

They don't. Small wheels are worse on the road.
Qiaochu, unrelated, but I really enjoy your contribution to MathOverflow. This article is equally solid :)
Damn..

> “[He] slowly began making money to further expand his exploit collection,” reads his Doxbin entry. “After a few years his net worth accumulated to well over 300BTC (close to $14 mil).”

> KrebsOnSecurity is not publishing WhiteDoxbin’s alleged real name because he is a minor (currently aged 17)
I'm fine with the practice if it's 'what about x? We should fix X'.

But a lot of Russian propaganda online is 'what about X? Let's ignore both X and Y'. It's just a distraction and fails to address the core point.
No way it comes close to the capabilities of LucidChart.
I have hobbies that I don't talk about with anyone else. Not because I wouldn't admit to any of them if asked, but, well... They're my hobbies. For me. I don't particularly want to know or care to hear what other people think about them, because I want something in my life I can enjoy just because I want to.

I think it's a pretty natural response, honestly. Not everything has to be, or even should be, up for social grabs. It's OK to have a personal, private life.
I feel like companies have invested a lot in securing internal services from external actors, and the threat model has moved to compromise these organizations from the inside with underpaid disgruntled employees being promised riches. It should be important not only to punish those insiders involved, but also to have the least possible permissions for developers, support desk workers or anyone really.
I experimented with this when I first launched my startup. But what I found is that it torpedoed our ability to sell to institutions. Universities would just tell students to go get it and not pay for it. And governmental organizations said they couldn't opt in to paying for something that they were allowed to take for free. It's too bad, because we were able to serve so many more people through that model, but organizations that are happy to pay now simply wouldn't contribute back then.

Maybe what we need to do is have a list price but then give out free coupons like crazy?
Algorithmic Thinking might be what you're looking for - https://www.amazon.com/Algorithmic-Thinking-Problem-Based-Da...
That makes sense.

But, Buddhism is anti-faith. You are supposed to experiment and verify.

Want to read a very short book?

Try "What The Buddha Taught" by Walpola Rahula. No BS, carefully explained guide to Buddha's own teachings.

If you limit yourself to Buddha's own teachings, there are little to no contradictions.
TLS 1.3 has some published test vectors where if you understand the inputs (which is tricky) and do the same operations, you'll end up with the same outputs as the test vectors and that should maybe work with a real server too.

Still, it helps a ton to get error logs (or step through debugging) from a real server to figure out what you messed up. For every value you send in a TLS handshake, it feels like you've got to send the length three different times, in different numbers of bytes and sometimes adding the bytes it takes to send the length.

But, if you can smash through all that, you can get a reasonably working TLS 1.3 client in about a week of fiddling. If your runtime has a decent api to validate certificates, you can call out to that too (the less you personally do with x.509, the better)

Edit: link to vectors https://datatracker.ietf.org/doc/rfc8448/
I just want to add "low power" to "there appears to be no alternative that is at once robust, mature, secure". Finding a good micro for security applications is a nightmare.

Kind of unrelated here, but wanted to mention Precursor [1]. They just shipped, it's still an early product but... something works.

[1] https://betrusted.io
Microsoft, NVidia, Okta, EA all hacked by someone that’s not state sponsored and sophisticated.

Tell’s quite a bit about the snake oil that is the current cybersecurity industry and its counterparts sloppy software development and lazy pointy haired boss.
Digital Ocean – Shut Down – Zero Notice Without Reason
Last night Digital Ocean (https://www.digitalocean.com) completely SHUT DOWN our account asking for verification (automated email) with ZERO warning.

They wrote that they wanted to understand our usage and asked to explain our workload (automated email), but WHY shut down without notice? We are live with users and paying customers! How can DigitalOcean.com justify shutting down our servers WITHOUT ANY notice? Ethical? We think not!

We explained that we have a SAAS platform and company based in California that we have built and are ready to launch our new version. After providing all the documentation, we got an email from an outsourced low-level "specialist" basically screwing us over even further. Sorry, we can't give any REASON but go host somewhere else (to paraphrase). Oh, and by the way, our team has ZERO ACCESS to our database and servers. How do you propose we move Mr. Specialist?

STARTUP Founders - may we suggest you AVOID company Digital Ocean! We signed up through the Stripe Atlas program and applied Hatch at the beginning of the month. We were stoked to have customers and launch quickly. They completely screwed us, and it's unclear if we'll ever get our database back.

We asked them to escalate the matter to a supervisor, pleading they give us a few days to move over to another company and retrieve our database. Still no word. Luckily, we have a backup from a week ago, but we'll still lose hundreds of transactions and thousands dollars if they don't give us back access.

Our company will be reporting DigitalOcean to the BBB and potentially filing lawsuits for damages because this type of behavior is unethical and unprofessional (from our point of view). This action from Digital-Ocean is costing us money and time during a critical launch period. Fellow start-up founders AVOID the headache. On the flip side, we've added "Disaster Relief Plan" into a future sprint, so once we figure out how to recover from this, we'll be better prepared for situations with unscrupulous hosting companies that don't value their customers.
Used it plenty. Easy, cheap, and stable. Good support. Opted to self-host when I heard they use GCP. No regrets when using Passenger.
It’s an Opinion Piece so it’s not the NYT.

In fact, “By Madeleine Albright“

And it’s from Feb 23, the day before the invasion
Step 1: Add subtle "imperfections."

Step 2: Don't tell anyone that you automated.

Step 3: Publish a personal account on what "experience" this particular piece represents.
Just like the application developers on Google Play, Apple's app store, and Steam, eh?
Assuming a modern camera with a prime lens shot at the widest aperture, yes, absolutely, although to get the best results you'd have to do some post-processing in Lightroom/Capture One (which the phone is already doing automatically in the background).
Very sorry to hear it didn't work out. Could you share how you got over it? Any other advice / experience that might be helpful for others?
Really like the design of this. Best search results layout I've seen since the old days of google.
Under Fire, Out of Fuel, No Air Support: What Intercepted Russian Radio Reveals
> Federal loans have maximum repayment periods of 10-30 years, but that does not mean the loan is forgiven at the end of this period.

Yes, for income-driven plans that are paid as required, it does.

> If you fail to make regular and complete payments, the loan can persist for the entirety of your life.

If you don't pay an ISA as required it becomes an unpaid debt with all the normal features of unpaid debt, it doesn't just vanish if you fail to pay. So “federal loans don't disappear if you don't pay them”, while true, isn't really a difference.
> But he has stood in the freezing cold to be an audience for a struggling street musician, accompanied the painfully self-conscious on outings to shops and restaurants, and even shared cake with a lonely soul on a birthday.

Damn. Respect--I feel this guy at a level. Sometimes I get coaching clients who need warm bodies to talk at, and I totally sympathize. Plus I would 100% use a guy like this myself in any number of situations. When your back is up the wall of "human-species-level problems" you have to get certain needs filled.

It used to be popular to talk about pyramids of needs, and back then I was mentally adding dimensions to those pyramids all the time, the more I met and worked with people who needed things.

One of the biggest needs was an "outside of me thing," and one of the forms that took was "another human," and when you really need it--it's quite often worth the money IMO. But it's also worth considering whether you need one that talks at you, or maybe one that just is.

Respect to him for working in small ways to solve yet another blind spot in the way we (large group perspective) aren't quite able to take care of ourselves the way we think we should.
Man, this brings back memories. In high school I made a version of this game for TI-89 BASIC. One of the first programs I ever released. I even made a silly AI for it just based on some basic heuristics because I had no idea how to make an AI back then. https://www.ticalc.org/archives/files/fileinfo/106/10660.htm...
What is the UASP mode for?