skysight-inc/HackerNews huggingface dataset:
Their qualification program is similar, but the Direct Input Limited Duty Officers recruited straight to instructor duty typically take over a single subject of classroom instruction and aren't expected to fully understand all subjects in the entire qualification process.

More saliently, the nuclear pipeline is not made up of "the best". It is ubiquitously composed of academic rejects. College dropouts, "smart but lazy"s, clever misfits, and a few enterprising criminals. The kind of unfulfilled talent that comes a dime a dozen.

The Navy learned that with enough discipline and a tolerance for high washout rates, you can get "greatness" for pennies on the dollar by making it yourself from the raw cuttings left behind by America's higher education system.
I’m tired of people saying things like that when they haven’t tried copilot. So now I’m just saying “try it, we’ll see how you feel after that”
Catching Sanitizer Errors Programmatically
Ironically, the error was in spelling, not grammar.
This needs to be a discussion about acceptance. Acceptance that for the first 3-5 years of your career you will likely be working on decidedly boring sh-t regardless of where you work. This isn't uncommon.

> I just get assigned straightforward work from my manager that the product managers and “leadership” assign to our team with barely any input on the overall project or ability to propose new projects.

You've just described most jobs. From your username it appears you work at Amazon AWS. Guess what, most of the hard problems have already been solved. Every job needs worker bees; was this not clear during the interview? This is giving me "new grad wants to be CEO in a day" vibes. To quote comedian Louis CK, "Yes this job sucks, that's why we gave it to you." NASA doesn't let the new grads lead the design of the next spaceship, and Apple doesn't let the entry level engineers decide what the next phone will look like.

> because I have a good manager, a good comp and my job isn’t that stressful

So you're better off than most people as it is. My advice? Find a life outside of work. The worst feeling is the one when you blink and realize you've just wasted half your life working at a unfulfilling job, but you wasted your time and opportunities around the job. Make the best of what you have.
> Bitcoin effectively invented, completely from scratch with no precedents I'm aware of, a probabilistic Atomic Total-Order Broadcast algorithm,

Yes, the new thing bitcoin invented was novel and quite interesting. I'm not sure that is the words i would use to name it, but the result still stands.

> Just because the public APIs of those things can be explained in an afternoon doesn't mean at all that they aren't advanced concepts

Of course not. They are advanced concepts because they are some of the most basic concepts in the field and used throughout the industry. Hash functions are so prevalent that we literally have special x86 instructions just to speed up calculating sha256.

Compare for example to things like ZK-SNARKs, or homomorphic encryption which are actually cutting edge cryptography.
Reverse Engineering the Arctis 9 and learning Go along the way
Julia also supports it. it led to a really funny graph when doing performance tests on Fujitsu, because Julia is the only language that supports fp16 and is fast enough to write blas in, so there were some graphs where it was the only entry because c and fortran didn't bother showing up.
What's a "fake" email address? If you can get emails to an email address then it isn't fake and you are in control of it, at least for the time being
Thanks for this, great resource
I made this other thing https://github.com/asdofindia/blogspot-to-ebook/ to scratch this other itch.
Unsolvable algorithm question: is donut?
Nobody can solve this apparently what looks to be at first glance a simple algorithm question.
This doesn't work for creation because it's too easy to spoof where the email came from.

In the OP's diagram this really hinges on the Mail Transfer Agent (MTA) needs the ability to verify that Mail User Agent (MUA) is legit, and that is quite hard.

Realistically MTA would need to go to a known MUA address to verify do you actually own this account?

But not all is lost!

This does work great for 2FA. Where the contents itself is is the only requirement of trust. Just make the contents unrealistic to copy/spoof and then it doesn't matter who sent it.
>Oh, have I mentioned that Copilot is free for students? Yep, COPILOT IS FREE FOR STUDENTS.

I guess Microsoft will know which students did their assignments on their own when they apply for a job at Microsoft.
I used Go to make my radio auto-switch to AUX-IN when a Raspi plays music
The article has a section on security where they address the problem you describe and several others. Do you find their reasoning unsound?
If you’re going to be pedantic be correct. That was a spelling error, not one of grammar.
I would rotate the log file, and possibly store only the last log file.
See also https://www.dkriesel.com/en/blog/2013/0802_xerox-workcentres... and https://news.ycombinator.com/from?site=dkriesel.com
I'm Publishing My Next Book on Substack
Curl Sharing Made Safe
I understand that the USA has chosen a strategy of global imperialism as a plan for maintaining control of world affairs. Our military occupies or encircles nearly every country on Earth. This is obviously an extremely expensive strategy, and one that no other country has ever chosen.

But all this talk of military spending is orthogonal to my original comment. I am saying we would be better off if washing machines were open source, and the workers at the washing machine factory would be better off if the organization was cooperatively owned and managed. I never suggested abolishing the state. The comment mentioning the military was in error if they thought I was talking about making my own country. You can do what I propose inside the USA, and the government can keep taxing exchanges to fund the largest military the world has ever seen. I have opinions on that, but those opinions don't relate to the idea that non-military technology should be open source. Obviously militaries prefer secrets.

I will say, it is interesting that you say I don't understand risk. The USA does not have the largest army humanity has ever seen in order to manage risk. The USA has this army to maintain power over other countries. Belgium as you mention relies on the USA for some extra defense protection. But this also means that Belgium cannot oppose us. We have covered the globe in US military bases so that we can maintain control. This strategy goes far beyond managing risk. If we merely wanted to manage risk, we could have avoided treating every country south of our border like shit, fostered healthy relationships with them, and after decades of healthy relationships formed a military alliance with them. Then that organization would defend the Americas against foreign invaders, not the USA.
By moving to PoS, they are also moving from a permissionless blockchain (anybody can participate) to a pay-to-play one (if you want to be in, you need to pay the insiders), this obviously benefits the current holders.
Oh the few websites that do this drive me absolutely crazy. It makes me immediately look for alternatives, it's unbearable
Yeah, what's wrong with Purdue Pharma providing incentives to doctors to prescribe OxyContin?

A little opioid epidemic never hurt nobody.
There seem to be at least two big issues with the upcoming merge:

1 - Stablecoin issuers like USDC can de facto determine which chain succeeds in case of a fork (PoW vs PoS)

2 - 70% of validators are US-based, and as custodians, they will have to comply with OFAC.

More info in this Twitter thread: https://twitter.com/milessuter/status/1560070819518234624
Please don't do this.

Posting simplistic "solutions" to complex problems insults everyone: The schools, the victims, the experts who are tackling the problem, the administrators who are dealing with the problem, the police who are trying to prevent the problem, the people reading your blog; everyone.

Shootings are a complex problem that cannot be reduced to "people who hate schools shoot up schools".
What the heck does Netflix’s crappy UI have to do with my comment here?
Sorry, I missed that.

Dawn of Everything, or something other?
The trouble is that the reason PoW protects the network is that the mined block is an input to the PoW function. This means that if an attacker wants to change the network it needs to spend the same amount of processing power mining another block (and as the blocks are generated, it's gets harder and harder to catch up)

Can you think about a real world problem that also has the freshly mined block as an input?

Perhaps we can have a randomized problem like a monte carlo algorithm of protein folding where the random seed is set by the hash of the mined block. Or something.
Wouldn’t you need to have an original scan not compressed in JBIG? I’m not sure I understand the suggestion on how to find it in Google Books…
German ordoliberalism and the social market economy are certainly not full free market, i.e., Germany never went full free market after WW2 and there also would have been no political support for such a move (from the left or right). The boom then ended in the 2nd half of the 1960s.
Despite the text-not-subtext political message, it still somehow occasionally gets willfully misinterpreted. Trump, of all people, came out to it in rallies in 2020 (https://www.rollingstone.com/music/music-news/john-fogerty-c...).
> the actors care less about the protocol than the externality.

And why is this bad?
> "would adding more money speed it up, or are all available resources already being used as effectively as they can be?"

That question doesn't make sense. More money adds more resources. So even if they only have 50% efficiency, increasing the money will increase the resources. And clearly not all resources are going to avert climate change. For instance, we can fix the "transmission" problem by just choosing area close to desert cities and building plants there as opposed to further away where they are expensive. We could have giant artificial gravity storage. Those things are very expensive, but they are also very doable. We could be carrying bowling balls up the Empire State Building to build local energy storage. But we don't need to go that far. The US is just beginning to suggest that using groundwater at 100-1000x the rate of it recovering to drain the aquifers that took many millennia to fill to grow alfalfa in the desert might be a bad idea.

And don't forget, a key argument being made was that salaries aren't high enough to get the best people (especially those choosing majors in college) into the greening industry as opposed to SV or Wall St.
Use a password manager. Problem solved.
Yes. 1) DKIM, SPF and DMARC do not prevent spoofing, they simply make it less easy. A compromise of those methods, or an attack on DNS or BGP, or any other novel spoofing attack, gives the attacker a successful attack vector that would not exist if the website simply sent the user an email to verify. 2) The unique token and timeout is simply given to the attacker when the attacker initiates the new account/password reset form, it has no bearing whatsoever on security.
Not after we learn the intrinsic value of the network.
What Triggered the Big Bang? It's Complicated (Op-Ed)
Multi-part MIME emails with both plain text and HTML content used to be a standard[1] or at least a good and common practice. Not including plain text version or making it "can't see newsletter? click here for web article" is an ongoing process of moving users from unsnoopable email to invigilated web. It's invisible to dumbed-down users, possibly saves corpos some money: devs can learn something that benefits business more and, depending on email volume, business may decrease spending a bit by removing few kilobytes of text from each message sent.

Imo a standard of sorts, being removed due to lack of knowledge or for money (savings on data transfer or profit from data gained from users reading "web version of email" and email clients loading remote content) doesn't make it an "edge case". The edge case here (necessity to parse and read HTML in pure email client) is an effect of businesses and developers not following standards in the first place.

Also, IE6 overstayed its welcome not due to edge user cases but due to corporate savings as well.

[1] https://www.rfc-editor.org/rfc/rfc2046.html#section-5.1
Did you read the article? He wrote a paragraph on exactly this.
ImprovMX was extremely confusing to me at first.
> Not everyone will have set email up on the phone.

Exactly. And not everyone accepts HTML E-Mail, i.e. I really hate these "endless" state carrying URLs, which wrap around in my 99 chars wide terminal windows. A short SHA-xxx key should be sufficient, "dear" web form designers.

And last but not least I use greylisting, which still is a useful tool to suppress spam, but delays confirmation emails.
Most??? I use that, but I'm 100% sure a minority.

You're generalizing HN crowd, but you didn't.
Yes I do find them unsound. Now you need ordinary people to understand the pros and cons of DMARC (SPF + DKIM). Not every one has this configured. In fact it's shocking how many companies don't have DMARC set up given the benefits.

If major providers such as Gmail/Microsoft/etc agreed to require DMARC for all incoming email senders, then maybe 5 years later we could speak about this again because then DMARC would be universally used.
Oh, so something like a brain, yeah, that can’t possibly lead to AGI, right.
It wouldn't necessarily be so as other universities are also able to have students who learn at different rates despite the article being about a student that went to Berklee.

Regardless, even in the case the article only applied to Berklee it still wouldn't be a university specific question as not every student that goes to Berklee will be able to learn at the same rate. This is what makes it a per student question instead of an answered property you can apply to Berklee itself.
What simple case ? Every call to drawRect/drawLine that I can see at a glance will end up inside X functions - e.g. calls to QPaintEngine::drawRects will just end up in the function below. And that's the huge majority of the UI.

Anyways, what matters to me is that I can resize the window without any lag and compression - it immediately becomes much more laggy and redraw-artefact-y if I disable X11 painting when I access my remote machines so it's pretty obvious when things are using it
Capturing carbon from the air is what plants and rain already do. And have been doing for a considerable amount of time.

Almost certainly that will already be the optimum solution, or evolution would probably have found a better one by now.

What we need are ocean based limestone creating factories. That's the solution nature uses.
I think the article makes a valid point. It is presented in a simplistic form, maybe aiming to shock a little. But it is in no way insulting. If somebody feels insulted by an opinion, it is on him/her.
Bell labs was funded by Bell's monopoly position at the time right?
Latex is stuck in the past. Academic publishers even more so. It's 2022, and I can't use slightly non-standard letters (e.g. non-Latin characters) in my papers without jumping through hoops. It's anyone's guess as to which ones will work and which won't. The language was designed in the 80's and it shows, many commonly used packages are severely outdated and nobody cares.
For your example, this seems bizarre. Every "sign up" process I can think of ends with you being signed into to your new account. Every "log in" process includes a button or link that says "are you a new user, sign up here". You chose a very streamlined thing to worry about.
That's polygon basically (which uses Ethereum for its checkpoints). It's one of the most used chains.
It didn't get "swimming to a dollar" right either. I think it doesn't "understand" spatial descriptions unless it happens to find an image match the description.
The whole point of email verification is to verify that the user is able to receive email at the given address. Aside from the other issues mentioned here, the proposed solution does not achieve this.
So it's basically "Copy as cURL" in browsers' developer tools, but that automatically redacts sensitive-looking parameters?
Sounds kind of like Motion, except much cheaper.
His article falls apart when you add the title with a fact

> Why do school shootings happen mostly in the US?
> In PoS the rich can become validator as long as they have money. The limit is money.

> In PoW, they can’t buy gpu as long as they have money, because there is another limit that money can’t always buy, energy, resources, needs (gpu for gamers, researchers, etc)

Just to elaborate, the implications of this are that PoW has an extra layer of centralization that threatens the network as ASICs/GPUs are only produced by less than a dozen companies and they can pick and choose who gets what kind of hardware and when (including keeping the best for themselves). This ensures that mining cannot be a level playing field and economies of scale will take over long term. This is even ignoring the massive corruption in the energy markets.

On the other hand PoS only requires one resource which nobody has a monopoly on so anyone can stake with nearly zero overhead. It's a level playing field regardless of size or political connections which allows for a much greater distribution of actors.
Will this drop has fees? Gas fees are keeping crypto from taking off, it’s ridiculously high
I do bot think it is wrong, as long as the dr. tells me, when he gives me the medication, that he is being paid for that by the producer.
> or an attack on DNS or BGP, or any other novel spoofing attack

Even though it’s be relevant form as systems-thinking point of view, it’s pretty unfair to dismiss a solution because it will be vulnerable to very important pieces of Internet network infrastructure. I think it’s safe to say that if we get a sufficiently bad vulnerability in DNS or BGP, account confirmation emails are going to be least of our worries.

Additionally “any novel spoofing attack” is a very hand-wavy, low effort way to dismiss it as well.
At the expense of the “permissionless” nature of crypto, moving from “anybopdy can join with his GPU” to “you must pay the insiders to join the party”.

I also reveals how centralized ethereum really is in terms of who holds the power: a blockchain where the devs can screw the miners like this isn't really reassuring…

Bitcoin's carefully crafted balance of power (and the disapearance of Satoshi) lead to a technological deadlock where nothing can really change, while Ethereum's totalitarian governance model allows it to iterate on the technology, but lost the freedom ideal in the process …
The attacker just sends an email that they got from the target server's "mailto" link. They just have to use a spoofing method when they do. Such as:

1. If the target website doesn't validate DKIM/SPF/DMARC, the spoof works. 2. If the target website (or source domain) has a flaw in its DKIM/SPF/DMARC configuration, the spoof works. 3. If the attacker can use a DNS or BGP attack on A) the nameserver of the source, B) the resolver of the target, C) any intermediary, etc, then the spoof works. 4. If the attacker develops a novel spoofing attack, the spoof works.

It's less a question of "how" than "when". A defender has to be successful every time in a myriad different ways; an attacker only has to be successful once. Removing an attack vector is always better than having to defend against it.
This is ostensibly what WebAuthn will do. It needs to happen, but retraining users is going to be the difficult bit.
I checked: jbig2 is used in ocrmypdf, set to lossless by default. It reduced my book size by 20%.
> Also, older Java apps would cache DNS lookups forever, until you restarted the JVM. I remember arguing back and forth in email with a "vendor." They finally believed me and restarted their app server.

New JVM-based apps do the same thing. I've had the same conversations with a "partner".
MS has taken the approach of calling UTF-16 "Unicode" as it's what's used in most of their systems.
These two young fish are swimming along, and an older fish swims by and says, "Morning, boys! How's the water?" And the two young fish just kind of look at each other, and then keep swimming. And then after a while, one says to the other, "What the hell is water?"
I would hate this, and probably instantly bail out of any flow that tried to force it on me.

Being able to receive mail on an address should not necessarily imply a capability to send from it. This scheme rules out many actual or potential schemes for email anonymity, especially in a world where very little email is still transactional relatively speaking.

I do not give (almost) any website an address I send normal email from, nor do I want to. And my default configured client for mailto:, if I even have one on the device I'm using, is not going to be set to the single use mail I want to sign up with.
you could also go to those places with that style of argumentation, but pot and kettle.
I know stuff has to be 'dumbed down' for the 'masses' but the quality of this article is a joke.
I’d have a look at something like an Udemy CCNA course, but stick to the generic stuff, and skip the Cisco-specific things - this should get you enough of the basics that you can pick up the rest. Udemy is good here in that you can pick & choose from the videos.
Yes, the nice feature is snapshot the response to minimize teamate's efforts.
A bit off-topic: kudos to OP for clearly explaining DKIM, SPF and DMARC. Awesome short summary!
I think its for the worst that most people would rather gloss over the fundamental flaws in Bitcoin, Ethereum and most other chains. They are significant and important.
Wow, this is the most complete write up on the subject I have come across. I’ve been consulting for 4 years and all the points ring true.