skysight-inc/HackerNews huggingface dataset:
TL;DR—credential forgery, for starters

Here's a good example of why SHA-1 collisions are so serious:

Let's say there's a cloud service where you configure SAML by setting the SHA-1 thumbprint of your identity provider's response signing certificate instead of uploading the IdP's XML metadata or its signing certificate directly.

If an attacker can create their own SAML response signing certificate that hashes to the same value as your identity provider's, the attacker can forge seemingly valid SAML responses that would give them access to the cloud service. This attack would work because in SAML, the following things are true:

1. The public half of the key used to sign a SAML response is embedded in the response alongside the signature.

2. SAML does not use PKIX's hierarchy of certificate authorities, only the X.509 public key certificate format.

Trust relationships between SAML identity providers (a/k/a credential service providers) and SAML service providers (a/k/a relying parties) are normally established by directly exchanging entity metadata that includes at a minimum the identity provider's signing certificate or by using metadata aggregates signed by a trusted third party (e.g., all multilateral trust federations—eduGAIN, JISC, InCommon, INFED, etc.) But in this thought experiment, an attacker would be able to generate their own signing key-pair and append whatever junk to the user-defined fields of the X.509 public key certificate is needed to cause a SHA-1 collision.

That's basically how the Shattered proof of concept works, only using junk JPEG data embedded in a PDF:

https://shattered.io/static/pdf_format.png
Thank you! My post was overly emotional and it triggered me when I read you were landlording. Like — I have no issue with you drawing multiple wages, but then using that money to extort rent from working class folks just was a bridge too far for me.

As a renter I have experienced some really dirty actions from landlords, and given the drop in housing inventory, landchadding just seems exploitative with no gain for society.

There are many better investments that do not involve such depriving folks of the housing stock, don’t have the stress of dealing with people and better returns. Leasing property is like lazy stupid money that could do better elsewhere.

I don’t think money makes one evil. But one can use it in evil ways. I have done well over the years but I always to to consider what impact my investments have on the world or society.
I personally find :: very unreadable, for the very reason I mentioned.
Only the same thing if you do not agree. You cannot consent to any tracking, the EU wants it to be explicit what you consent to ( data collected and who is it shared with).
> Elon threatening to bring free speech back (hopefully addressing the toxic witch hunts, cancelling)

How would those two things not increase under absolute freedom of speech?
Articulated robot arm sounds like the most flexible solution. Trickiest part here would be safety - any robot with the power to chop, grind, cut would also have to have a good safety system or be enclosed.

Right now I'm thinking about tasks I don't enjoy: chopping onions, peeling carrots or potatoes, anything where I have to touch meat. All those would require very advanced sensing. Come to think it, that last one brings up the important topic of food safety and sanitation, the whole thing would have to be able to withstand a washdown.
> crew members would always be on the same watch: 0000-0800, 0800-1600, etc. That's potentially even more disruptive.

Does that really matter underwater? After a few days it is just as if you moved to a different time zone. It’s not like one watch would get more sunshine than the other.
There already is a fork, https://hacklang.org/. It didn’t fracture the community, people just don’t use hack.
> Musk is radically pro-free speech

Musk overtly uses his companies to retaliate against people who criticize him; he's not at all radically free speech in the sense of believing the owner of a company should not fully utilize the company to promote views that serve their interests and suppress others.
It does seem pretty clear that at this point Putin would prefer trying to grab a chunk of Ukraine over trying to keep NATO from expanding elsewhere.
> the world's largest car company

Nitpick: The most valued car company. Many larger companies in terms of employees and car output. Everything else sounds right though!
- Transparent and consistent moderation policies. Bans are inconsistently applied for reasons that are often hard to figure out.

This is one of those things that sounds great in theory. But in reality, it likely functions much more like any other adjudication system. People can break rules an infinite number of ways, so there are an infinite number of reasons to ban an account. Understanding many of them will require context that may be problematic to share (for ex: if it happens in DMs). So in practice, the shorthand public reason for bans will pretty much always reduce to "violated site policies."
Zuck has Facebook, Instagram, Whatsapp. Not sure he needs yet another social media play...
Compile time evaluation in Nim, Zig, Rust and C++
I'm what’s called a Stationary Operating Engineer, which is a fancy name for a boiler operator. We're the ones who keep all large buildings from hospitals to factories to nuke plants online usually by operating boilers and chillers. Over the years (I'm close to retirement) I've worked with many former Navy men, some of whom were on subs, both diesel and nuke. Listening to their stories has always been interesting, but what always got me was the amount of training school they went through. When they hire in I'm the one who "trains" them for our plants and I always find them very competent.
I would recommend reading "The Age of Surveillance Capitalism." Tech has the upper hand and it's playing the long game. Big Gov? It's slowly being marginalised, and it knows it. Thus, the former POTUS shamelessness.
First use could be to model traffic patterns - as undoubtedly all online mapping apps already do. As the meshes get denser, the cars can become aware of traffic patterns around them and make decisions in a coordinated way, forming "trains" to reduce drag in highways, for instance. Eventually enough data is gathered that we have predictive models for traffic jams and accidents and can act to prevent them.
> Twitter as a product is broken in so many ways.

I'm genuinely curious: how so? I'm all for the idea of aligning moderation with the law of the land, but to be honest I'm not in-the-loop enough to know what people are upset about in the first place, except banning Trump I guess?

I can see how the Twitter UI kinda sucks in some ways, but it gets the job done. I'm fairly new to Twitter, and I'm pretty impressed at the level of participation from well-known individuals, and I'm also impressed with the ability to sniff out breaking news.

If the "broken" part of Twitter is people arguing all the time, how is that different from other corners of the internet?
I'm so disappointed, you win.
> Those are not mutually exclusive. I may be interested to know that @emmanuelmacron and @emmanuel_macron are both real persons but I’d also want to know that @emmanuelmacron is the famous one while the other is just an homonyme. Blue Check symbols are also a lot useful to distinguish real brand accounts from fake ones.

Sounds like one to verify identity, one to verify a "position"
why do you need zero trust software for this?

everything else is already being handled by a centralized authority (twitter), why not let them also handle letting users post anonymously after having been verified?
> We should debate idea's not authors.

This only works if you guarantee that both sides are going to argue in good faith and, well, gestures at the world, that just isn't realistic right now?
Many of us don't use Facebook.
Generally either the users or the admins are unhappy with the moderators of any given subreddit. They're on possible way around it but not a particularly good one and it's less likely to scale because there's not the same "ownership of a community" feeling you can engender in Twitter where there's not really an equivalent to subreddits to give volunteer mods control over.
Ironically Kanye west has the perfect take: https://www.youtube.com/watch?v=aA8cUb9uyh4
I love those retro future photos!
I'm concerned, but there's effectively nothing I can do about it. I vote based on issues mostly and also vote based on whether or not I feel the person or people are saying and doing what I want to see, for the public good.

Unfortunately, there is a severe education gap in the United States which allows conmen to gain political power. And until education can be properly addressed, and the people have a willingness to learn and critically think, this will only continue to get worse.

EDIT>> The point being, the uneducated allow themselves to be duped by said conmen on Twitter, their choice of news outlet, Facebook, etc. And voting is the only power that I, an educated, reasonable, and critically-thinking citizen, have to combat anything I am concerned about.

Because if we're being truthful, the issue at stake here is the fact that Musk is clearly a Republican who thinks there are free-speech issues at play with Twitter due to the silencing of Trump and others on that platform. I will disagree completely because Trump and those others who have been silenced from those platforms are quite free to create their own Twitter (and have) and work to gain a critical mass. It doesn't really matter, though, since almost every single social network on the planet is just an echo chamber of what people want to hear. But I, for one, have no interest in hearing lies being made with a very huge bullhorn such as Twitter -- no matter who it comes from.

If this deal is done, I will wait and see what Musk does. If he does what I expect him to do (unban everyone he agrees with politically, financially, etc. despite those who were banned for good reason), then I'll happily stop using Twitter. The good news for me, is that I have choice. While I cannot control what the other masses will do, I have control over what I will do. And very, very little will change in my life if I no longer use Twitter.
You can also use Tweetdeck.
Windows uses it extensively for both user land system code and the app platform.
Clear and concise write-up, thanks for posting. I especially appreciate the comparative graph at the end.

In practice, I tend to use "method 3" most of the time as I feel it has the best balance of complexity and practicality while still being able to deal with label noise.
Musk can't be president without a constitutional amendment.
OK I believe you, the UK is messed up
… and I have an HP m254dw color laser printer that can print on both sides of the paper. It's been worth it! I read WAY more after buying it.

And, heh, I feel obliged to mention the long-arm stapler too. I have a Zenith 502 long-arm stapler. It can easily keel-staple folded A4 or Letter paper. And it's a really good stapler. Staples everything, first try, also really thick bundles of paper. It's funny how big a difference a silly thing like a particular staper makes. They're made for a reason! Here's the Zenith 502 CUCITRICI DA TAVOLO: https://www.zenith.it/prodotti/cucitrici-da-tavolo/zenith-50...

(Cucitrici – stapler – means "seamstress-er". Haha.)
What do they have cause to lie about?

(Also: how do you pronounce "coners"? Does it have an etymology?)
> They just switched everyone.

It also appeared on multiple of my accounts that were made before the switch, so this hypothesis also seems wrong.
Phone networks don’t really have any sort of fan-out speech amplification though (unless you’re talking about things like robocalling, which generally are regulated and aren’t considered protected the same as individuals).
Build a Lightweight Web Component with Lit.js
It also appeared on multiple of my accounts that were made before the switch, so that also is irrelevant.
I don't really love the notion of billionaires buying up media; but given how incredibly important twitter has become to media and its influence on democracy and politics, I think it's a huge improvement that a free speech advocate will be in charge at least. I don't buy that content "moderation" (ahem, or as it should be called, censorship) is desirable when a tech company can silence people that have legit-if-undesirable influence on the world.
Fantastic app suggestion! I've been manually copying and pasting recipes I liked into Notion so they are all largely formatted the same—the download recipe functionality in Paprika is magic.
I think they're referring to the pop song, "abcdefu" (https://en.wikipedia.org/wiki/ABCDEFU)
In general, I would expect a person's blocklist to correlate roughly with how active they are on the site, and how long they have been on the site. More activity leads to more interactions with spam and other undesirable accounts.

I'm not sure how that confers much useful information about a user.
Show HN: A Micro Portfolio Platform
I'd noticed it had a big models.json file which had a big PNG file encoded inside it. https://znah.net/hexells/models.json

Also seems to be based on work mentioned here https://distill.pub/selforg/2021/textures/ which has a cool interactive widget at the top.
Nope. Some people don't want fuss over UI to the extent that tailwind forces you. Some of us want an opinionated Sass-based framework out of the box. The only advantage I've found using Tailwind is anal-level control over details when bootstrap already has a uniform ecosystem with far, far fewer classes. The former requires way more upfront cost to get running, where the latter is done at day one. Only downside is the tree-shaking in bootstrap, it would be nice if it could be made smaller during a Next/Nuxt/webpack build.
Mine is this, if you want twitter blue to be at all appealing, make it so that you can eliminate all ads, including promoted tweets. Getting rid of ads is my #1 ask. I'd pay for it.
The only other "concerning" portion I could find in GP's link was:

> Classroom instruction by school personnel or third parties on sexual orientation or gender identity may not occur in kindergarten through grade 3 or in a manner that is not age appropriate

This seems reasonable given we usually don't teach sex-ed until 5th or 6th grade.

> But that wasn't happening

I can tell you with certainty that this is definitely happening in California schools, no clue about Florida.
> following the law and not having Twitter being a toxic cesspool used mainly to shout down those not our your "side".

Well, from that perspective I don't think it can get any worse.
Small developer assistance submission requests due by May 20
Not really, it had nothing to do with implementation difficulty and the paper actually states that implementing static if would be fairly easy:

http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2013/n361...

What the paper says is that static if would make it much harder to perform static analysis of source code, not really because it's hard to implement but because the kind of combinatorial explosion introduced by having non-local bifurcating source code branches to analyze makes analysis incredibly slow.

C++ did eventually adopt if constexpr, which does not have this problem since the branches are always local.
Twitter announces company will be sold to Elon Musk for $44bn
I've tried Twitter recently for the first time to get more recent information about the Ukraine war. Maybe long-term twitter users see it differently because they've fine-tuned it and got used to it, but to me Twitter looks like a horrible and awful medium. I just can't see any purpose for it. People on Twitter post opinions and are subsequently mocked and insulted by other people who also value their opinions above all else. As far as I can see, Twitter is the most passive-aggressive place on the web. I'd go nuts if I read it daily.

Then I tried the fediverse, and it was worse, except that it was much weirder overall and posts mostly concerned extreme fringe topics and opinions.

I like good blogs and I'm fine with some Youtube channels, even though the signal to noise ratio is high. But microblogs seem like a complete waste of time to me. Can someone explain the appeal of these sites to me? What do people get from them? What interesting things do you read on Twitter?
> having an opinion you disagree with

At this point, we can say that "COVID19 will be done by April 2020" is a laughably incorrect response to the COVID19 issue entirely. Elon Musk was 100% the "like the flu", "Gone by April", "Lockdowns are stupid", "masking doesn't work" (etc. etc. etc.) bullshit train.

Everybody has their bad takes on various subjects. Elon Musk's COVID19 hot takes are among the worst I've seen. Others include some rather shitty behavior, like calling the Thailand guy a pedo for instance.

All-in-all, Elon Musk is NOT a good poster on Twitter, and if he takes over Twitter, I don't think I have much confidence in the long-term benefits of the platform. Its as if other online-trolls decided to take over various media outlets.

-------

Do you remember the 2020 election with any decent amount of memory? "COVID19 will go away as soon as the election is over", etc. etc. Tons of terrible takes on the subject. Musk was just part of that, and I daresay that falls into fall on conspiracy nut now that we can look back upon the pandemic with 2+ years of hindsight.

But if the COVID19 issue is a bad example / too political for your tastes, then I pivot to the Thailand Pedo guy tweets instead, which hopefully you can agree with me are uncalled for?
I'm not sure if he meant that literally. I've heard him say everyone working there should consider themselves the lead designer (or something to that effect).
Thanks! I wasn't even aware of this guideline.
Slower speeds hoepfully. Imagine golf carts tottering around the city. That's the automated driving of the future. Not the current mad max roads, but with robots. Instead, some florida retiree town, but with robots.
a) Why would it be in the Settings menu ? For many of us it's a feature you change multiple times a day whilst using the app.

b) The icon is exactly the same style as all of the other icons in the app. If you couldn't work out that the picture is clickable how did you know how to search or access messages. I'm actually confused how you use any mobile app given they mostly all have this style.

c) It is not a traditional sort ordering though. Using the curated mode brings in entirely new content into the feed that is not in chronological e.g. followed topics, recommended topics, greater emphasis on retweets.
There's plenty of room if there's still single story buildings in London.
I have no issue with employers being exploited, they would exploit you too. But the housing thing is gross — the reason housing is so distorted is that the wealthy are actively trying to deny folks access to housing. There are so many better ways.

Landlording is always a scum action. It is a personal choice to seek rent with no benefit to society while enriching oneself and preventing others from building their own wealth. Landlords hobble the middle class wealth generation, extract most of the gains from industry and then refuse to maintain their properties.

We need to make it so uncool to be a landlord. They are all scum, no exceptions.
How does that work? Isn't it "woke culture", not "woke policy"? I don't understand how Twitter can change that. Do they ban people for using the wrong pronoun or saying the word "landlord"? Assuming they don't, how can they control a subset of users that act in unison to "cancel" someone? Ban them all?

It's a really hard problem IMO.
What does blocking someone have to do with anonymous dissent?
Does anyone know if the terms were made more favourable to Twitter since the adoption of the Poison Pill?
The US will be rubbing its hands with glee. They must have thought all their Christmases had come at once, when Russia invaded Ukraine

* Russia ostracised by Europe

* More US arms sales to Europe

* More US gas sales to Europe

* More European acolytes to join their US-led military bloc

The only difficult part must be keeping a straight face while pretending to be outraged by it all.

Don'tcha just love it when a plan comes together!
There's still serialization and deserialization overhead there. I would expect SQLite to win in benchmarks against MySQL or PostgreSQL on a Unix socket for basic "select * from table where id = 5" calls, but I've not done the work to prove it myself.
hopefully not being beholden to wallst as a public company opens up options that may be good for the twitter community but would not be so great for the stock price. Instead of an increasing stock price driving every LOC written maybe making twitter a better place will drive where effort is spent.

/ lots of "hopefully" and "maybe" in the above
I don't think 1-1 is the right time. If you have a team of 15 people, you would need to repeat the same thing 15 times. Better to give an update of what you are working on (as a manager) for the whole team once.
the most productive i have ever been working as a software engineer was in a smaller company where roughly all of the company's product and library code was in a monorepo, and we had a reasonable culture of writing automated tests (although not at 100% branch coverage). sometimes you realise the abstraction in a core library used by all the product code is wrong or limiting, and if your test suite gives you confidence that you're going to catch any potential regressions, you can rework the library with a breaking change & fix everything that transitively depends on that library in a single atomic commit.
> they just generally don't do it across procedures.

They won't do it for extern (i.e. separately compiled) calls, because the ABI wouldn't really allow for anything of the sort. But calls to static (or inline) procedures that only have visibility within a single source file can occur with arbitrary calling conventions, so the compiler is free to optimize register allocation across procedures.
> let's just say none of the characters are suddenly espousing the wisdom of Adam Smith.

All streaming platforms are first of all streaming capitalism.
You’re arguing about a 12 year trend from 1 years data
I certainly engage with content more when 'the algorithm' shows it to me repeatedly, which is what happens on Twitter. Of course I don't necessarily like that.
> Ruby is just ruthlessly productive.

This is the best description of Ruby I've ever read.