skysight-inc/HackerNews huggingface dataset:
Paranoid project checks for well known weaknesses on cryptographic artifacts such as public keys, digital signatures and general pseudorandom numbers. This library contains implementations and optimizations of existing work found in the literature. The existing work showed that the generation of these artifacts was flawed in some cases. The following are some examples of publications the library is based on.

The goal is to increase the confidence in cryptography use cases inside and outside Google.

When dealing with asymmetric encryption, crypto artifacts usually are:

* Generated by one of our own tools (e.g., at Google we use for example boringssl or tink); or,
* Generated by third party tools that we have access to (so these tools can be, for example, checked for vulnerabilities using wycheproof); or,
* Generated by third party tools and/or hardware or software black boxes that we do not have access to.

With Paranoid, any cryptographic artifact can be tested, but its primary motivation is to detect the usage of weak third party hardware or software black boxes. Hence, Paranoid can be used even if we are not able to inspect the source code (situation 3. listed above).

The project aims to detect known vulnerabilities as well as unknown ones. E.g., it tries to identify vulnerabilities caused by programming errors or the use of weak proprietary random number generators. Detecting new vulnerabilities is of course much more difficult than detecting known ones. Such detections may require large sets of artifacts or find weak ones only with a low probability.
It was "destroyed" by whom really? I thought the collective control of "the means of production" was such an amazing thing that it could never lead to the "destruction" of a society that engages in it, who would have imagined.

I'm also from a poor country, but at least down here the powers that control everything weren't dumb enough to let this place become a collectivized wasteland.

Being poor is alright, at least here you can work hard and give a better life to your kids than your parents were able to give you.

Just like you know what, the cities that have a large population of german immigrants down here do. These cities have in general a GDP per capta that is 3 times larger than the average GDP in my country. It seems like those guys are just industrious, smart, and have a culture of hard work you know, who would have thought...
How many fabs are sitting around doing nothing saying "Oh gosh, I wish we were allowed to make something!". Less than zero, because new fabs being built already have orders and plans for what they'll be making Day1.
Take a loan out against your bitcoin.
Use that loan to pay for things.
Pay off the loan.

BTC becomes a reliable store of value as you're no longer concerned with the daily price changes, only your collateralization ratio.
The Twitter Whistleblower Needs You to Trust Him
Unironically a good thing. There is currently a fair amount of centralization based on hosting site[1]. AWS is first at 48%, Hetzner second at 14%. These percentages are among cloud nodes, which account for 62%. If taken as percentage of total Eth nodes, they would be lower[2]. People are encouraged to host at home, or at least in some small hosting provider. There was a hashtag going on a few days ago, #stakefromhome[3], with people showing their setups.

[1] https://ethernodes.org/networkType/Hosting

[2] https://ethernodes.org/network-types

[3] https://twitter.com/hashtag/stakefromhome

Edit: Clarified hosted vs residential
I'm always worried that the spammer just uses "unsubscribe" as a sign that the email actually got through the spam filter and a human saw it?

Aside, I've been having a TON of very similar spam emails getting through Google's spam filter, and even marking them as spam doesn't seem to do anything. It's been going on for months at this point. I'm close to just closing that Gmail account because I have no idea what to do about getting close to 10 spam emails per day straight into my inbox in a way Google seemingly can't fix.

It's super obvious spam too. "tHe IRs hs a REFUND for u" level stuff.
Ah yes, totally not circular. When I see me dog the neuron says no food. When I see a cow it says food–Oh wait, that's actually Bessy my pet cow, so it doesn't light up.

There's no "Halle Berry neuron", it's just correlation. Not really groundbreaking that there's so-called neurons for "food" whatever that may be.
So is publishing content your “hook” or are you going to conferences and making connections first?
"In god we trust? No! Science - works even without trust"

Would they be required to hang even this poster?
If you're moonlighting Fortune 500 companies will rarely talk to you directly. So my guess is that you are contracting with a company that is either directly contracting with the Fortune 500 company or is itself a subcontractor. The $150 per hour that makes its way to you is probably seeing a few levels of attrition :-)!
>PinePhone couldn't even create a phone that can make voice calls properly like a Nokia 3310, yet you're envisioning them beating Apple (!) with rolling out some futuristic technologies.

I believe I understand why you feel I am unhinged.

I said, "Sure sounds like iphone will get there first, pine could beat them to it."

Obviously I said iphone will win, I optimistically or enthusiastically said pine could put in the work and get there first.

You feel I am unhinged because of optimism?
I think we should terminate all pregnancies, as the baby could become a racist. We should be able to deprive the KKK community of all future members.
Would be good if they had some documentation on how they handle high latency and no connectivity situations.
No, only if your grid is composed of "slow" power plants, you have to. That is why for a long time, all night-time energy usage was encouraged, to raise the base load. Ironically the outcome is used as an argument against renewables as it "but what about the base load"? :p

And if not completely dominated by slow power plants, there is always enough load on the grid to keep it stable. Especially in a day and age where there is a lot of storage, which can absorb some excess power production.
It’s not that you’re allowed to omit the head element (you’re not, and you can’t), but that its start and end tags are optional. Same with the html and body elements. (These remarks apply to HTML syntax only; in XML syntax, which is certainly still a thing, you can (if you care not for validity) omit whatever elements you choose to, only needing some root element.)

As far as sources are concerned, the HTML spec is maintained by WHATWG, not W3C. The relevant citations start at https://html.spec.whatwg.org/multipage/semantics.html#docume....

The normative reference on the necessity of <title> is in the content model for the head element:

> If the document is an `iframe srcdoc` document or if title information is available from a higher-level protocol: Zero or more elements of metadata content, of which no more than one is a `title` element and no more than one is a `base` element.

> Otherwise: One or more elements of metadata content, of which exactly one is a `title` element and no more than one is a `base` element.

For the rest, you’re correct: the DOCTYPE is the only always-mandatory thing in a valid HTML document.
I read the links, but I'm not seeing where the concerns are nonsensical.
They mentioned that some services lacking a web interface and only offering iOS and Android apps.
Let's take this argument one step further.

What do you think is the cheapest way you could serve 3 visits/second?

Obviously a $5 VPS could do "Hello, world!" or some light JSON at 3 visits per second, right?

What are they serving? Streaming video? Megabytes of scripts/styles/fonts/images?

Ah, it's for Truth social. aka 1 visit is most likely not 1 request. It's most like... 10-15, with logic to generate a timeline, plus authorization checks, plus database, plus cache
Alternatively… Explain to me how making predictions about the future that don’t pan out is surprising or alienating to anyone reasonable.

Anyone who thinks predictions about the future hold the same weight as statements about things that currently exist ought to know better.
And reversible transactions sounds good until you realize that your participation in the economy can be turned off with a keystroke with no recourse by someone sitting in a cubicle thousands of miles away.

Kind of like what's happened to some Chinese citizens who planned to protest a bank, and had their health codes go red so they could no longer travel. https://www.reuters.com/world/china/china-bank-protest-stopp...

I certainly don't expect credit cards, and the consumer protection they provide, to go away. But I do think it is good that there always be irrevocable foundation (cash and digital cash) that you can fall back on if the institutions in charge end up becoming abusive. That might not be something you and I have to worry about today, but there's no guarantee that the people with the power tomorrow will be as honorable as those today.
Yes, but it's better to be good and be burned - knowing full well it could've happened - than to be evil to others.

Don't be naive about it, you have to be brave. There's always a chance someone betrays you, but it's a risk worth taking.
Trying TypeScript for Gnome Apps
LFSR - linear feedback shift registers
One of the hottest things I've ever eaten was at a Korean-run Japanese curry house in NYC.

IIRC you chose spiciness on a 1-5 scale. The first time I tried a 2 and it was damn spicy. Next time I tried a 3 and it ruined my lunch, my pride, my afternoon, and my evening.
Blue states poised to copy California’s gas-car phaseout
I think this is really cool tech, but it is a huge stretch to suggest this can be used to produce furniture. I wish the article focused on more reasonable, small-scale use cases.
> At best, an argument can be made that at some point there are some perverse incentives where allowing spam bots could inflate numbers to make the company look successful. But even if that argument were convincing, which it isn't, Agrawal clearly doesn't believe it.

It is clear to me that Argrawal is trying to obfuscate and confuse. Every time he is asked about the total number of bots on Twitter, Argrawal subtlety changes the subject to mDAU. He knows this is not the same as total users, but he chooses to change the subject and pretend he's answering the question. This is very shady in my book, and his attempt at subterfuge and lack of transparency is very troubling. I've seen other CEOs do similar things when they don't want to talk about something potentially damaging. The fact that Argrawal artlessly tried to smear Mudge earlier in the week does not make me trust that he has good and forthright intentions. Argawal seems very shady, and I wonder how you can trust him?
A proper solution would be that it just works.
This is a super cool article and all the notes so far are incredibly literal takes on how this can't be immediately commercialized to revolutionize the furniture industry. I love hearing about interesting processes and research like this.
> Even completely eliminating methane will not reduce warming, it will only reduce (slightly) the rate of acceleration of the rate of warming.

Can you share some references?
PC stands for Program Committee, the selected group of people in charge of accepting and rejecting paper submissions.
Interesting to think that the invention of effective humanoid robots could return us to this slave economy with unexpected negative consequences.
What's the yearly rate? If you take 3 weeks/year of vacation (standard PTO for a full-time employee in the US), that's $245,000 cash comp. Excluding the SV/HN outliers, that is an extremely good salary for even a senior developer.

Until very recently Amazon's cash comp was capped at $160k. Startups lean very heavily on perks and paper stock that is worth nothing 95% of the time. Wider industry (banks, mom/pop shops, design firms, etc) will top out at high 100k/low 200k and usually don't have bonuses more than 3-5% of salary and almost never offer stock.
This answer is circular though: “they didn’t have the technology because they just didn’t have the technology yet”.

Time alone isn’t even really an answer. It only takes time because of the pace of innovation, and the pace of innovation depends on things like culture, tech, geography, population, communication, money, etc
I must be misunderstanding something. Are you saying that a one-week post-birth child is still not a separate human from your perspective because they are not "viable" yet?
The issue is that today there is 17% of the ETH PoS network running on Hetzner. It is beyond capitalism when it comes to just running a piece of software that doesn't use any more resources than anything else. It also is not illegal. Certainly they can decide what they do and do not want running on their network, however it becomes a slippery slope quickly... what will they ban next? What will others ban?
I hope that they'll also force rental places, hotels, etc to install chargers....
if you can think a lot then you are running slowly my friend Zucky.
Wow I got it too. I thought it was the HNDigest or something I subscribed long time ago.
Linux installs that didn't understand your video card had the zoomable desktop nailed down in the late-90s.
Russia Is at War with NATO, State TV Declares, Has No Plans of Stopping
Never expect capitalism to take a decency break.
How many entries in the RFC index have PLATO developers as authors? It sounds like there should be a few, at least.
Yeah, I heard Eminem had this problem too.
No because relays can be closed, and usually are. Your ISP's SMTP server requires authentication, using the credentials they gave you, and almost certainly uses TLS also.

Your me@isp.net address (or perhaps the me part of it) is used for authenticating, along with the password. It will likely be used as your envelope address when sending; the SMTP command will be MAIL from: me@isp.net, though there could be flexibility there to accept other sending envelope identities.

In any case, your mail's From: header will have the me@hn.com.

If the ISP were to filter on the From: addresses after receiving the content of the e-mail, you'd have to negotiate something with them.
> I didn't mention the doctype because I believe it isn't strictly speaking an element, just a preamble, but you're right, it's required as well.

Funny thing, when I read “the only mandatory element in a valid HTML5 document”, I interpreted “element” in its generic English sense (piece, thing) rather than its HTML sense (node of type element, as distinct from text/comment/doctype/other-types-only-found-in-XML-syntax nodes).
Which continent, which country, which region, which city? Without this information this poll is meaningless.
Considering that quartz has a ton of limitations, MEMS and other digital oscillators are ready to step in the moment that quartz is cost prohibitive.

We're already at a breaking point for low frequency quartz. You literally can't get it small enough for modern packages until you up the frequency. Find a 2x2mm 8Mhz part, I'll wait while you fail.

We're JUST NOW starting to get standardization on SMD oscillators in common packages, and these packages have typically pin incompatible (an enable pin instead of a two pin pierce oscillator setup) but same footprint digital alternatives about.

Maybe you read an article, but is incorrect to say we're being held up by quartz availability.
All my snacks now are some sort of crispy vegetable with very hot chili powder, a little bit of salt and lemon juice.

Chop up some cucumbers/radish/Lima beans/tomatoes/carrots/chickpeas etc. add a chili powder, lemon and salt and I’m good to go. Ready in seconds and way better than eating potato chips and gives me a little bit of an endorphin rush.
Yes I am sure. [0] The first Canadian school I looked at on google maps doesn't even have a flag pole never mind the flag. If this school was in America I would expect it to be burnt out by the end of the day for such a disgusting display.

[0] https://www.google.co.uk/maps/@43.8835313,-79.4254555,3a,75y...
> Exynos Chromebooks and such led the way to ARM Macbooks the same way the IBM PC led to displacing DEC and Sun workstations

I think chrome books had very little to do with it. A lot of the work had already happened with the PowerPC switch. On the processor front, Apple’s arm processors aren’t at all like exynos chips that use standard arm cores. I would say that the apple silicon macs are more influenced by iPhone and iPad success than anything else, especially since iOS already runs a lot of macOS
I'm able to make it works on my GTX 1650 LP. Had to use full precision though or else it generates green images. I also had to reduce the resolution to 320x320 and close every applications that uses vram because the GPU only has 4GB of vram. Took about 2 minutes to generate a single image with ddim sampling steps set to 50.
Yeah specific ideas would be powerful and actionable (germ theory, for example; though people had somewhat of a rough working idea of some of it with the concepts of "bad water") though many of those were somewhat in play even in ancient times (often as religious practices).

There have been some books that explored the idea - I recall a series "The Cross-time Engineer" which isn't actually that great, but does have some obvious engineering knowledge.

One thing I do think it gets right is that if you're sending someone back in time to change the past, you do NOT send a scientist, you send an engineer or a mechanic with the Handbook of Chemistry.
The advertisement industry will eat this up.
> So adding 5x more hardware shouldn't be a problem.

If only things were that simple. https://en.wikipedia.org/wiki/Amdahl%27s_law
That explains what it does (somewhat vaguely), but not what Github Next is and who makes it up. Is it a team at GitHub that employees work on full time? It it some kind of initiative where GitHub employees spend part of their time working on it? Is it a community effort? Am I able to join in?
Thank you for your post with financials! It’s really nice to have such information from the source.
This is assuming a 1:1 relationship between addresses and humans, which is certainly wrong.
And there was a recorded instance of futures selling in olive oil in Ancient Greece.

But to the GPs point, while there were contracts, there were no tradeable claims, no capital markets and no professional management separate from the ownership, all of which we associate with the early British and Dutch trading companies and eventually railroads and industrial concerns.
You are wrong:

- Methane is more than 25 times as potent as carbon dioxide at trapping heat in the atmosphere.

- Methane is the second most abundant anthropogenic GHG after carbon dioxide (CO2), accounting for about 20 percent of global emissions.

https://www.epa.gov/gmi/importance-methane

https://www.epa.gov/climate-indicators/climate-change-indica...
Other parties doing is no excuse imo.

Microsoft has been super litigious in the past when it came to copyright violation starting all the way back with Bill Gates' letter in Byte magazine about those pesky pirates. To see them do this makes pirating MS software fair game from here on. They could have asked nicely, instead they just took.
Privacy advocates will roll on the floor and scream like angry toddlers, but really, in 2022 every car should have remote tracking and disabling features shared between the registered driver and law enforcement. If a leasing company can remotely disable a vehicle, why can't I or the police acting on my behalf?
Never noticed anything sweet about it. Also it doesn't contain any added sugar. The supposedly natural sugar content is 1.5%. Maille Dijon has 1.9%.
I don’t know, my android phone 2 devices before (sony ericcson xperia x10 mini from 2010) was orders of magnitude smoother and faster (with 256MB of RAM!), and it didn’t get scorching hot from simply being turned on.

Honestly, try browsing the web for a few minutes and it gets uncomfortably hot. Actually, I wouldn’t be surprised if some devices (mine included) have buggy hardware more so than the one you got, because I would expect much worse overall opinions otherwise.

And arm is not a new compilation target, so I don’t buy software differences being entirely the culprit, either. Worse battery life? Sure, that would explain it. But having trouble running a terminal and opening settings in 45 seconds is just criminal.
That's an interesting paper, thanks for the link. Though the resulting language is barely Oberon anymore, since even type extension is removed, not only dynamic memory management (and with it the GC). It seems to have less features than Oberon-0 described in Wirth's compiler book.
I think it was not known that it are always the same neurons lighting up, even between humans. So not learned behavior, but baked in through evolution.

But I didn't read the article, so I could be wrong.
I had a decent network when I niched down so emails to friends + family generated some jobs which resulted in word of mouth referrals. But email everybody who you think might be helpful - a lawyer friend of mine referred his friend that makes software for lawyers who needed my help. 2nd degree referrals can be great!

Content has also worked but production has admittedly been anemic. Mostly because I've been so busy.
Does githubnext.com read as a phishing-adjacent third party to anyone else?

Why not deploy as next.github.com subdomain?
And on the same note, I often work with charities and educational orgs who I just don't feel like charging a high rate to, because I want to help with their work.
> This calculation excludes considerations for emissions, environmental impact

When are calculations going to start not excluding those?
Yes, it was, I checked the headers.
That’s definitely not the case in the US (see Magnuson-Moss 1975) and many other countries have similar laws.
Appsec/Network Pentesting, (freelance insured, bonded, "botique")

$275/hr, hours stated upfront per app/project. Change order issued if we have to go over. Nondelivery of access prior to testing period eats away at your time. We do a kickoff call 3d prior to make sure that this doesn't happen.

I'll work with them to deliver results in a format that you can import. I'll do an in-person kickoff & readout, otherwise fully remote. I'll deliver abstracts for you to give to your clients. I've been doing this for 7y now and turn down a lot of work based on scheduling.
In The Victory of Reason, Rodney Stark says that Imperial China actually had an industrial revolution, in the 11th century. They produced 100,000 tons of iron. They were using the iron to improve productivity of other things. And then the imperial court ordered that everything be shut down because the wrong kind of people were getting rich.

Stark has sources for this, which he documents, but I can't cite them because I don't have the book with me at the moment.

But, presuming that Stark's sources are accurate, Imperial China did have an industrial revolution. The powers that be decided that it was causing too much disorder in their society, so they killed it.

So maybe that's a big part of the answer. When it happens, don't kill it with stupid politics.
Critical command injection vulnerability discovered in Bitbucket Server and Data