skysight-inc/HackerNews huggingface dataset:
Neat. Following some links:

> Since there are 36 pairs of blocks, there are 2^36 possible combinations, for each message. If we enumerate them all and check the resulting CRC, we'd have a reasonable chance of stumbling across the target CRC (0xdeadbeef) by chance - since there are only 2^32 possible CRC32 results.

> This is a feasible computation, but it would be a bit slow, probably on the order of minutes - infeasible as part of the inner-loop of a larger attack (such as a PNG hashquine!). Fortunately, there's a trick we can use to speed this up. [Meet in the middle.]

Wait a sec, CRC32 (and Adler32 IIRC) are linear — they are the “sum”, for all positions i in the input, of f(i, message[i]). (The actual details of f are irrelevant here.). For CRC32, “sum” is xor and, for Adler32, I think it’s the sum of pairs of u16 values. (No serious Galois field arithmetic needed — the Galois sum in the representation used by CRC32 is xor.)

So those 36 pairs each give a pair of vectors in the 32-dimensions space of checksums. Start with the message with all the a blocks. One at a time, switch a single block to its b value and calculate the change in the checksum, which can be done from the command line :). Each of those changes is a vector in checksum space, and they should form a basis with respectable probability m. You know the change you want to produce in the checksum from the all-a state to the correct checksum, and you can solve your underdetermined system of 32 equations with 36 unknowns using your favorite technique.

(Hmm. I haven’t written this out for real. I’m fairly confident it will work for CRC, since CRC’s checksum space has order 2 — solving the linear system will give 0 or 1 for each variable (i.e. colliding block), and you can read off the answer. For Adler32, the space is order 2^16, but you need a solution that only applies each available perturbation zero or one times. Off the top of my head, there are probably some good algorithms for this, but it’s maybe not trivial.)
The oil reserves are not serving the purpose of controlling oil prices. You would need a truly astronomical amount of reserves to control the market, which isn’t exactly the best way to use your nations wealth. Buying more during the dip would not have changed the current situation.

Which is why, the only feasible solution to controlling oil prices is to change it demand side. Oil does have legitimate uses for eg military, petrochemicals etc. but most of it is just burned away.
It feels far more tiring than a regular jog, or a run.

The higher weights will be even better. It feels so obvious now that we see this, but it follows from common sense, with four limbs and weights the workload is far higher than a regular walk/jog/run.

There is no sense in going to back to regular plain weightless hand walk/run/jogs.
I was on a 777 SFO-ORD a few months ago that still had Channel 9 available
My understanding is that Brave uses Chrome user agents for privacy.
One of the key factors of gas prices is refining capacity: https://www.eia.gov/dnav/pet/hist/LeafHandler.ashx?n=PET&s=M...

We had a draw down during covid, which included some plants that were near their planned End of Life being decommissioned early.
stock options vesting is specifically designed for this, whoever brings value to the business should have them. job title is not important, value is what matters.

a 1-5% equity (varies widely) for early stage startups (seed or angel) is common practice to negotiate commitment.

if your company do not want to negotiate this and you provide value just get a second job as a consultant.
“Kids are using AI to write essays and get straight As”
I would never choose a Google specific cross platform environment. A cross platform mobile environment constantly needs updating to stay consistent with the vendor’s platform. I wouldn’t trust Google to give that much attention to Flutter especially seeing they are moving away from it internally for iOS development.

https://9to5google.com/2021/10/10/google-ios-apps-native/
The problem with deplatforming the fringe is that fringe is not measured in absolute terms. It's measured in relative terms. After the fringe group gets removed, the Overton Window shifts and a new group becomes fringe.

Eventually what is fringe gets too close to the average group of people, and they start getting wary.
well this was 1989 ..... as I said prior to this state of the are was fast vectors for CAD, and before any of that we didn't have many per-pixel framebuffers (memory was so expensive so you got stuff like CGA/etc or plain ttys)
If I can rant at this quality when I have children, I'll consider my life to have been well lived and fulfilling.
This is a possibility given that ICDs sound a warning alert before shocking.
you may be doing manually because most information out there is not as digested as we'd hope it to be, but if you eventually scrape your sources, your life would be infinitely easier and your work much more powerful. The NSA was doing some "OSINT" not too long ago... imagine if you scrape Instagram, facebook, linkedin, maps, etc.
Give me a break, what I have seen is someone showed me this is already being done in China. So anything you say is an excuse that is dangerously preventing climate change prevention efforts. I literally saw a video of NIO doing this and arguments like yours "cars aren't television remotes" "it's too hard" are bullshit. The interstate freeway project was hard yet it was done with trillions of dollars spent because it had to. Since china is doing it the only thing hard is that it costs more but our tax dollars are set aside to subsidize this shit but home owning rich people can make electric cars work for them with chargers so everyone better find extra time and houses fast else you're shit out of luck.

Governments can force car companies to use stanrdized connections, every car has plenty of government regulated things like this.

I said ELI5 so you can explain to me why my back of napkin calculation does not work when seemingly endless subsidies and cost that is passed down to consumers are in the works. NIO is already doing this without a $300B subsidy...oh and get this: selling batteries is more profitable for companies! One car is one battery but when battery stations also buy batteries that is more profit. Tesla literally sells batteries to power grids because of profit.

"Who will spend tens of billions to do this" is the question and we have an answer now, but you don't seem to gey that it will be largely wasted because people will not buy electric cars if they have to wait in line every day to get a charge or filling up the charge can cause them to be late to places. An inconvenient solution is a dead solution, in a free market consumer satisfaction comes first.
When IR35 was first introduced there were a significant number of people working through limited companies for the tax advantages who did enjoy much the same benefits as permanent employees. They had long notice periods to end contracts, they got to use staff facilities, etc. They were basically employees in all but name and that's why they were seen as dodging tax and IR35 was introduced.

The problem with IR35 has never been the principle that disguised employees should not escape the normal employee tax rules. It's always been that there were also significant numbers of other people affected who really were working more independently and acting like any other real business, which just happened to be owner-operated in their case. Even if they're doing nothing wrong all of these people now have this IR35-shaped sword hanging over every contract they take and so do their clients.

If nothing else it creates extra admin and more legal and insurance costs for those involved. I've known promising contracts to get sunk at the last minute because one side or the other was concerned about some of the details looking a bit too close to being caught by IR35 and because naturally these tend to be relatively short jobs it's not always worth engaging serious lawyers to resolve things. Basically it means everyone loses and all because the tax rules were ambiguous and created more risk than the contract was worth to either or both parties.
I'm still at 1 kg, brisk walk, 2 hours straight. Will go to 2.5 kgs soon.

Its great you were able to walk with a 2.5 kgs on the very first try.
In practice, you see a lot of these self-professed Judeo-Christian moralizers engage in irresponsible individualist behavior so I don't think paying lip service to religious morality is really effective here either. The overriding factor is still the structure of incentives rather than adherence to a specific moral code.
I check both sites for different reasons.

I come here to read interesting content about a variety of topics - even things that I spend very little time thinking about. I trust the community's ability to curate interesting content. Even if you think my trust is misplaced, I derive enjoyment from the articles and the ensuing content.

I go to lobste.rs for software development content exclusively. There seems to be a bit more of an intentional focus on that kind of content there.
I'm not sure how useful I could be (it was more than 30 years ago) - remember that while I designed the accelerator these boards were made by a team of smart people, wasn't just me
That's Redis, Redis, Postgres, and a database we don't do anything with, for those following along with this.

Unless "Upstash Redis Database" is one thing? In which case, that's "Redis, and a database we don't do anything with".

I'm still not seeing the lock-in.

Whatever EdgeDB is: we're happy if you run it here! If it has like, a company running it as a service, we're very happy to talk to them, too. But we're going out of our way to avoid weird custom services, like Amazon's 19 different messaging services, that have platform-specific APIs. Our APIs are Docker, IPv6, DNS, Redis, and Postgres. Our Postgres is literally just an app running on Fly.io; you can run it yourself if you like --- or, I guess, run it somewhere else.
Yeah, human speech is probably not the best usecase for waveform visualization.
Frightening for sure. I think the clicks and clacks and environment sound from recording from a cell phone could explain the difference.
Replace "San Fransisco Bay Area" with "the world" and unfortunately this headline would be just as accurate.

https://commercialobserver.com/2021/07/how-blackstone-became...
While it is plausible that the hack compromises the entire comm system, it's unlikely. My bet is that the steward made an incorrect association between the sounds and normal system behavior. These inaccurate retellings are extremely common in ghost stories.

Only time will tell, but I'm almost certain I'm right on this one.
That’s mostly hydropower iirc. Hydro is almost always the cheapest energy today, if we could get it elsewhere we would.
So… I’m reading this from the perspective of working 100% professionally on open source software and I don’t understand at all what implications this has for my work being declared public infrastructure. I don’t think it’s being funded, which I guess isn’t surprising because not funding infrastructure is literally a meme which has been going for years. I don’t think anything is being offered to help secure the software I work on. It kind of reads like a vague threat? I don’t mean to be glib at all, but if you’re declaring something public infrastructure and you’re ostensibly a public servant, maybe making me feel scared of you isn’t a great look?
Fellow Iowan here. I’ve had similar experiences when Tim Dodd (Everyday Astronaut) has been featured. Also one of my old professors’ blog hit the front page once.
[this is an edit to answer my own question but I can't update the comment]

It sounds like the calloc implementation is _assuming_ that the underlying alloc always zeros, so essentially (ignore overflow check) calloc is doing something like forward directly to malloc(size*count). So I think it _changes_ the exploit path to something new.
> I admire the irony of calling Firefox a Chrome clone when Firefox far predates Chrome.

You are right about the technical details, but my intention was to compare it from a non-technical user's perspective. For the non-technical user, modern Firefox is a Chrome clone (and strives to be that) with a very similar UI. The browser engine being different is a technical detail that isn't relevant to the average user who doesn't even know what a browser engine is, and they are not aware (and don't care) about Firefox's history. Stock Firefox is very similar to Chrome and Mozilla wants it to be that way, having removed many features that differentiated it in the past.

> but when the market discriminates towards you so that it's impossible to get users it doesn't matter how good your product is

Potentially, but you can't say for sure that market discrimination and anti-competitive practices are what is holding Firefox back when there are no compelling reasons for a non-technical user to use Firefox over Chrome, so I disagree with the argument that anti-competitive practices are what is holding Firefox back - Mozilla is holding Firefox back by not actually making it a better product to the eyes of a non-technical user (ignore the fact that FF can be a better product with enough customization & add-ons - people competent enough to do so already use Firefox and are its only remaining users).

When stock Firefox is good enough to appeal to and impress non-technical users out of the box (such as by having good, built-in ad-blocking), I will believe in the anti-competitiveness argument. Until then, my opinion is that it's yet another excuse for Mozilla to waste time & resources on anything but actually building a good browser.
Hiding the article and asking "Want LARB in your inbox?" before I even know what LARB is was a quick way to send me away.
I thought it was pigs due to their genetic defect that makes them unable to produce warmth from muscle contractions/shuddering? Why they also get comparatively fat and build nests, but save a lot of energy
Disclaimer: I work for AWS in Professional Services. I specialize in “application modernization”. Basically that means a focus on serverless technology.

That being said, if someone who doesn’t know “cloud” and has a deadline just to get something done like the author asked for advice, even I would suggest they just throw a monolith on a VM.

If they really wanted the optionality to go all in on AWS later, I would suggest AWS Lightsail - a simple fixed cost VPS that is easy to upgrade to full fledge AWS.

In other words, I agree with his choice of just using a VPS.
> Crucially, none of the React alternatives solve this

FFS. The context is the web, nobody solves graphic problem like gaming for you, or need to. At this point it doesn't matter because HTML/DOM stuff is not going to suffice what you are talking about either.

I honestly think after reading 50% of the article is all about bragging knowing history. I'm not old but I was there too. WIN32, MFC, QT, 8086 assembly whatever. I got a god damn computer engineering degree too but doesn't make me smarter, having better vision, knowing solution better than random ppl on the internet.

I'm not sure what's the point of React here nor "Saving React". Why it needs to be saved in which sense.

Do you mean, saving the web from React?
I am thankfull for all the free software people write and share to make this mess a little bit better world.
> Miners frequently experimented with their dough to try to reduce its sourness.

This works by increasing the ratio of lactic acid to acidic acid. The less acidic acid the less sour the bread. This can be achieved with more water (firmer preferments are more sour) and higher temperatures.
(Taking notes) If we IPO, we lose this message board argument. Got it!
@EU: there is money laying on the table again
Tourette’s tics don’t work like that. A friend of mine has it and his tics most often take the form of compulsive snorting/sneezing.
Real-time internal combustion engine simulation
Open a terminal

Grep the function calls, perhaps doctrings too

Call back the person you foolishly told to expect an immediate appraisal and remark 'I have investigated that old codebase.'

Set up an appointment to discuss it at length and then browse it more comfortably over the weekend on a normal screen instead of torturing your corneas
Good news! The very article we're discussing explains why you don't have to install enough batteries to charge most people's electric cars at night.
You can also mine Bitcoin with SAT solvers. And if the difficulty is high enough, it will be more efficient than the current brute force methods methods

https://jheusser.github.io/2013/02/03/satcoin.html

> Bitcoin Difficulty and Assumptions

> A very intriguing, and perhaps unintuitive property of the algorithm proposed is that with increasing bitcoin difficulty, or equally lower target, the search could become more efficient, at least in theory. This is because we can assume more about the structure of a valid hash -- a lower target means more leading zeros which are assumed to be zero in the SAT-based algorithm.

> If this is true and is a substantial effect then this is an important issue since the rate of the money supply is regulated with the difficulty. The higher the difficulty, the less likely it is that an individual block has a valid nonce. However, conventional mining algorithms always have to perform the same amount of work (i.e. try 4 billion nonce values) to reject a block. On the other hand, "Satcoin" miners will get progressively faster which could lead to imbalances in the controlled supply. These are all just speculations and depend on many factors, first and foremost how well the SAT-based approach can be improved and whether the probability of finding a valid nonce does not dwarf the efficiency gain of the algorithm.

https://www.quora.com/Are-SAT-solvers-faster-than-linear-sea...

https://github.com/jheusser/satcoin an implementation
No, that's the ATF lying to cover their ass after murdering children. I'd recommend looking into Ruby Ridge.
> No... slight variations in wind and atmospherics across that distance change too rapidly and significantly to make that viable.

This doesn't sound right. If it's true, then the same thing -- slight variations over time in wind and atmospherics across a seven kilometer span -- would make the aimed shot nonviable too. The shooter isn't adjusting for air movement between himself and the target -- because that can't be done -- so if he's hitting the target reliably, the air movement can't really matter.
And init7 is starting to provide 25GBit. Not even 10 km from their nearest endpoint, the best I can get from my local ISP is 400MBit for twice the money
One advantage of using docker for everything is reproducibility. Your dev and prod environmentsncan be almost identical.
Just become a professional slacker.
But that means the approach described above works perfectly. Fire the gun. Place a bullseye over the bullet hole. Then keep firing the gun until you hit the bullseye "again".
Are there any quines where an image or something contains not only one representation of MD5 of itself but also a MD5 of same image but without a quine (2 hashes)?

If not, is that any harder considering how badly MD5 is broken? For example, BMP image format seems perfect for this kind of quines because user can check one predetermined hash, that edit image in any simple image editor and check another predetermined hash.
Active DNS Recon Techniques
Orange site is HN.
So .. what would you use?
As a web application and zoomer myself, I haven’t the faintest idea what this article is talking about.
Thanks for the reply! I had a very quick look at the documentation and didn’t see the eviction information. That’s excellent to know it’s already a built in capability. As for space, don’t worry if you’ve never heard of CCSDS, it’s just yet another standards group for various things, the key thing is that it’s delta based and already designed to handle non-TCP-IP based data transfer mechanisms. One of the big challenges I’ve found with bringing Linux and other modern software into an environment where “normal” (you can get a 24/7 IP link, but it’s unusual for satellite to maintain an open link like that) space communication is that a lot of useful modern open source tools is just not designed for a non IP based networking environment, so much so that you dig into things like delay tolerant networks and you’ll find mechanisms for trying to fake TCP-IP over the top of them just to help accomodate this software. Having a mechanism to replicate important data on the basis of just a transmission mechanism agnostic “packet” of delta update data, would be a huge boon for low cost satellite systems.

Im definitely going to have to dig in deeper and check out the rust stack! I’ll be sure to get in touch about the various CCSDS data transmission related stuff once I get there, since if you’ve looked at Link16 I’m sure you’re probably interested in adding more aerospace communications link standards/mechanisms.
On the other hand, I have absolutely no use for any collaboration (say, in Photoshop) with the work I do.
If that last theory is correct, should be super simple to identify a suspect. Simply find what passenger was on all the flights.
For PDFs you should try this bad boy https://github.com/sumatrapdfreader/sumatrapdf
>The worst part is that in many cases I can't even recover the video title, so I have no idea what has been lost.

I use two methods to recover deleted video titles:

1) google videoId part of the URL

2) look up cleaned up (with removed playlist-related parameters, just "youtube.com/watch?v=[videoId]" form) video URL in web.archive.org - sometimes it even has an archived video itself!
I strike, again: https://news.ycombinator.com/item?id=32900488
The year of linux on desktop finally
Adrian is one of the CRIU folks and has been working on integrating CRIU and containers for a while.
I can't read and it's hard to take serious a rant about front-end in a website that doesn't work in dark-mode
React now is as mature as PHP4. Wake me up when it gets to PHP7 at least.
Are you advocating that everyone can log into the root account? Or maybe I’m not completely understanding here.
Ask HN: What's unique about Hacker News?
I am thinking about building a product and I'd like to have the same level of engagement as it is here. What are the must haves to build something similar to Hacker News?
Oh no, they’ll have all the Microsoft certifications too.
I had to Google what was so special about this guide. Now that I know, I'm trying to find some justification to spoil it in this thread.
I am part analyst by trade and I try to preach this more or less. It is very hard because people think I am making up things. I try to teach and mentor others things that are against their intuition which sounds like I have some other agenda or I am "full of shit".

It's mostly critical thinking stuff like thinking about how you think, cognitivie biases and such. Having to prove or disprove your intuition with a fact and corroborating that fact independently at least one more time. For myself as well, I have failed in my analytical thinking when I had found things that seemed crazy but instead of being disciplined and disproving the "crazy" I would presume some explanation that feels right and move on to something else which was a critical mistake.

Overall, it is hard fighting our intuition and presumptions. Communicating better and actively avoiding intellectual laziness (or other kinds of laziness) are lessons I've learned the hard way when fighting my intuitions.