skysight-inc/HackerNews huggingface dataset:
Understand (before you start writing code) the basic security properties that you want to deliver through use of cryptography. This is usually where most implementers fall over (including the big commercial products).

To give a couple of specific (but non-exhaustive) examples, generally framed in terms of password managers:

- A password manager should protect the identity of the sites the user has saved, the content of the username and password field, and any associated notes. (That's fairly straightforward, most people are likely to agree on this). But what about integrity? Should you use an authenticated cipher mode like GCM? What will you do if the authentication tag fails verification?

- The password should be encrypted such that if a password is re-used across websites, it is not discernable from the ciphertext that this is the case. (Fewer people will think about this, but some will... Using AES in ECB mode isn't enough to prevent this! Lastpass appear to have done this in the early days).

- The key used to encrypt each ciphertext should probably be unique, to reduce any potential impacts of weaknesses in ciphers or cipher modes. Each cipher should use a unique per-instance instantiation as well (i.e. IV, GCM tag, etc.) How do you store and derive these passwords though? That will take you into key derivation functions, and password-based ones, like scrypt/bcrypt/argon2. These can derive a crypto key from a user password. You can then use that key as input to a KDF (with a per-entry salt) to derive the actual AES key used for each entry.

- If you're designing a wire protocol, what properties do you seek? Replay resistance? How do you prevent session resumption type attacks? (don't design a new wire protocol, use something robust like modern TLS!)

98+% of the time, at least in my experience, people who mess up crypto don't understand what goal they are seeking to achieve by using the cryptography, and haven't threat modelled it. Usually this is because regular devs are being asked by "BigCorp" to add "AES 256 crypto" to meet a client tick-box requirement. I would say if you understand how people are likely to seek to break/compromise what you are building, you can then start to design a solution. Expect to read 10x more articles than you expect, and before you start writing any code though.

And don't focus too much on getting an expert to review the code only - you ideally want to get some input reviewing the concept, architecture, understanding of the threat model, and the security properties you want to deliver. I've blown huge holes in crypto systems before, as people did things "nearly" right, but didn't understand the wider application, so were exposing/leaking the key elsewhere etc.
What makes sesame such a significant allergen?
It would be great if schools were built deep underground - because deep down people are not stupid :)
being a human BS shield doesn't sound like a job anyone would be excited to go to work everyday.

Ppl do this just for money?
I thought about and I'm already looking for trees / fruits that grow well with coffee. I too think it's a great opportunity, but the lack of knowledge about the subject scares me.
Wasn’t there also source code stolen?

The time might have been spent analyzing the source code for vulnerabilities in the way the vaults were being protected.
That’s not a discussion, it’s just about definitions, as despite the similar name they are completely different things and even so depending on who you ask (Spain vs Hispanic America ).

It’s also the kind of discussion that gets completely neutered by someone whipping out their phone and just looking up the definitions.
http://you.com/chat uses GPT-3 and search, it could answer some of those questions.
Actually Oppenheimer was in the same league as the others during his pre-manhattan careers, and have several equations named after him
You can't discuss anything important and uncertain without running in to politics. Politics is the society-level discourse on "what is important? what are we certain about?".

People get stuck thinking that politics mean Republicans v. Democrats. The Republicans don't represent the interesting parts of right wing thought (they can't even put in a serious attempt to balance the budget!). Ditto Democrats and the left (insert favourite example from the long list). Most of what they argue about is distracting trivia or flat-out intellectually dishonest lies. Avoiding that at Christmas is a good idea, but ideally avoid that in all in-person discussions of politics.
I’d sell it!
If I recall correctly: electron can compile JavaScript to “ByteNode” which is some form of byte code intended to be run in the V8 engine.
> It says a lot about how confused political discourse gets that the author considers these things "not politics".

"Politics", used in this context is used to mean: the set of topics that professional politicians and certain media figures are arguing about, that are liable to cause big arguments that leave everyone involved feeling bitter and not change anyone's mind.

Interpreting the term in a literal manner is not useful.
Last Temptation is a whole movie pretty close to this topic.

Does meeting John occur before or after he rides the donkey into Jerusalem?

(I used to think riding a donkey was a sign of humility, but I've recently learned that in biblical times, on state occasions, —kind of like how commoners drive Bugattis but the King rides in a carriage— commoners and lesser lords rode horses but kings rode donkeys, that having been a more archaic mode of transport. cf Absalom)
> And in a good company

what % of companies do you think fit this qualifier.
My emacs "life notes" diaries have existed since 1994... org-mode is newfangled.
No one has to use social media.
>No, it didn't "tell" its assumption (where did it output "I assume you mean you want to know the distance from US city to itself"?)

Just reread what it told me; it told me it is zero miles away from itself but it was a nonsensical query and that one should be more specific if the cities being compared are different.

> But it's clear from its responses what the assumption was: that you want to know the distance between a city and itself.

If you ask for the distance between just Boston and London, it assumes Boston, MA and London, UK just like Google does. Neither asks if I want the distance between London, UK and Boston, England. Same thing for Portland and Boston, even though Portland, Maine is much closer to Boston, MA. I think both ChatGPT and Google just assume the largest cities.

Not sure if you got my point about the list. In that situation I'd find the zero miles to be useful because otherwise I'd need to remember to exclude some entries from the list and add back those records doing the trivial transformation afterward.

Another way to think of it is if I wrote a function for you that asks if the number n is divisible by 17, wouldn't you want it to handle the trivial case of 'Is 17 divisible by 17?' over a CSV rather than excluding the trivial examples and handling them manually? Trivial case handling is important for LLMs. Is also useful if you're trying to test its logical consistency.

>The reason I think you're a LLM is that you somehow believe that knowing a distance between a place and itself is meaningful. It's still the case.

Based on my posting history (13 years) and username (real name), chances are pretty good I'm human. I mentioned my reasons; sorry I couldn't communicate it clearly enough. Very likely I will disengage from this thread now. Also, don't appreciate being called a bot; think people doing that makes Hacker News worse.
Given it will be gzip-compressed in transport, does this really save a meaningful amount of bandwidth?
I'm not "bashing" tapes, I'm pointing out the fact they have limited backwards compatibility guarantees. Given the massive expense of tape drives and the fact you need to keep replacing them and the tapes just to keep up with new LTO standards puts this almost perfect solution out of reach of mere mortals like me. I'm not an enterprise, there is no "C-level" approving anything.
This reminded me of a video of lipid bilayer formation:

https://www.youtube.com/watch?v=lm-dAvbl330

It seems like our "toy" models are getting closer to reality.
is it racist or no?
That's fair. And also, the environment is probably different, as in more dust in the tunnels, etc.

But to stick with French technology, the Paris metro, for all its issues, does have working speed gauges. Some lines still use rolling stock from the 60s and 70s.
You are conflating 'clean' with 'sanitary'. You may have washed the dirt and oils off of your skin and hair but your body itself contains, produces, and provides habitats for all manner of organisms, cells, and biological and chemical substances that slough off onto anything around it. Take sterile cotton swab and rub it on your 'clean' post-shower butthole and grow a culture from it and tell me how 'clean' it really is.
> I would say Jesus only really became/realized he was/decided he was/whatever the son of God about the time he met John.

I think the part in the book of Luke at chapter 2, where Jesus, as a child, stay in the temple after Passover to discuss with the priests and how he answers his parents: "is it that ye sought me? wist ye not that I must be about my Father's business?" (Chap 2, verse 49 of the KJV) seems to indicate that he was already aware of that, even if he then waited his 30s and meeting with John to start his work.
I remember this one from a youth mathematics book. 10⁻⁴ chance of one bomb, and 10⁻⁸ of two (assuming the other one is an independent event — which it would be, as you're certainly not in collusion with any actual bomber).
Ask HN: Help – Locked out of 10 years Gmail account
Due to the recent LastPass debacle, I decided to cycle my Gmail passwords. Boy that was a mistake!!

Gmail has decided that I can't log in with "just" my password. The new password is correct. It then asks me for my old password, which I put in correctly. Then it tells me I can't log in anyway. :(

Occasionally it will give me a QR code to scan. But I can't scan it on my phone, since my phone is logged out.

I can't log in to my recovery account, because (like a fool) I changed the passwords simultaneously. Now both are locked.

Somebody help! My account name is [redacted]@gmail.com (the recovery email should match my HN username). I'm locked out of a decade+ of correspondence, recovery, and historical data.
I think they are using some old list, or keep around positives even after they get removed from elsewhere.

I'm the OP and nuxx.net was getting flagged by Yandex because I had an old perl script, I believe udpscanner.pl, in a directory as I referenced it in some old writeup. It was actually named udpscannerl.pl.txt, was served up as text/plain, on a server with no perl CGI, and was something that needed to be run interactively from an interpreter. Literally, sample code.

Yet for some reason Yandex flagged it as a malicious site. And Malwarebytes picked that up... And apparently continues to do so years after I removed the file and got Yandex to rescan and mark the site as clean.
How many people do you think the hospital can treat with the $3 billion (yes, with a B) that Langone helped raise? Or even just the $200M he personally donated?

Which is better for the individual people who might (and I stress "might," since the hospital denies it) have to wait slightly longer on a day he needs care? To wait slightly longer there, or to wait slightly longer because they had to route to a different hospital that's struggling to deal with the demand?

If you remove Langone from the situation, you're not simply left with "everybody gets seen one person sooner." That's a small-picture view. You're left with "many of these people just can't be seen here at all."

I'm not saying people have to like the rich. I'm just saying if I'm next in line after him at NYU Langone hospital, I'm glad I have that hospital to go to, even if that bumps me to 2nd priority in the room.
World coffee research may be a good place for you to learn about coffee farming in the 21st century. Another commenter mentioned you won't be able to farm the old ways, and WCR could support you going forward.

At the very least they could point you in the right direction to get started, and maybe even know someone you could hire.

https://worldcoffeeresearch.org/
It’s an idea but I’m not sure I’m convinced. There’s no evidence provided that doing this actually improves availability / reduces cascading failures / improves time to recover. And AWS doesn’t really have the best track record in terms of uptime…
Eminem is pretty commercial of course, but you can't tell me this doesn't share similarity to poetry: https://www.youtube.com/watch?v=qAX6EA9RpnE
I would wait until more stories like this pop up before jumping to conclusions.
It is more a case of companies hiring drivers and then realizing they need to pave the roads first in order for them to get to a destination in a meaningful amount of time. However, paving “data roads” seems to be quite a tough problem, hence the success
of companies that promise to deliver that (such as Palantir or Snowflake)
‘Glass Onion’ Is About Living in the Age of Musk, Ye and Trump
I live in the area managed by PJM. I work for a large utility where PJM is one of the areas we operate. I've been on vacation and I didn't get the memo. Ironically enough I work in customer notifications! We send text messages for when your bill is due or when your power is out, but we don't send any notices that you should be keeping an eye the amount of power you're using. I'm contacting our journey lead now to get this work on the books in 2023!
"How many holes exist in a straw?"

Any time I asked this question it produces some joyful brainstorming. It doesn't matter if it is a room full of highly technical people(engineers, mathematicians) or a family dinner.

I've already heard most of the arguments from the topological definition of a hole to difference between a hole, a cavity and a hallow but it is still very fun for me to watch people getting excited over such a boring looking question. (:
Track / archive it? I don't. There's too much shit out there. If it's something really interesting chances are I'm going to email it to someone, and the sent copy gets saved in my archive folder (I archive mail over 90 days) and can be searched later. I've also made notes on my phone of urls that dav syncs with my email notes folder.

This is my hot take ... it's 2022, and any "serious" or worthwhile site still has an RSS feed (HN, NPR, ESPN, Department of Energy, NOAA, etc.). That's how I scan / get the majority of my news / info. I have tabs on my reader for work, hobbies, weather, etc. Hell, even the small cow town I live in has an rss feed for city council stuff or the city softball league sign up.
And the other is https://www.reddit.com/user/SchnoodleDoodleDo/
How often do you synchronize them with the Docker Hub?
Nice, but not hardcore enough!
Here's the real deal:

https://www.youtube.com/watch?v=9BnLbv6QYcA
> that are liable to cause big arguments that leave everyone involved feeling bitter and not change anyone's mind.

Then go with a really fun topic. Why are the professional politicians consistently talking about things that cause big arguments that leave everyone feeling bitter and stubborn? Are they actually leading people to discuss the important political issues, or are they trying to stir up division and a fanatic voter base? Is the nature political discourse going to lead to a good outcome for either side of the argument? How should fair compromises be achieved?

If the call here is for interesting discourse then sure, all for it. Good list. But the title shows a confusion. Arguing politics isn't going down a list of talking points. Anyone doing that with their own family just isn't acting like a smart cookie and needs to understand that they are really bad at politics to the point where they might be damaging their own community.
:-D

It's true, but Haiku is multithreaded now, and has SMP support and wifi... ;-)
There was a time when lots of people read and wrote poetry that was meant to be enjoyed. With modernism this on ramp of poetry that was accessible disappeared, leaving only poetry enjoyable by wannabe poets. Poets, like literary novelists, write for their own pleasure or that of those who can offer them jobs (teaching MFAs, writers in residence, spiritually similar things). There’s no source of genuinely popular contemporary poetry in English and no reason to believe that there ever will be again.

https://hallofdreams.org/posts/the-death-of-poetry/
I obviously meant the nonsense about synthetic natural gas. Who do you think you are fooling with these lazy debate tactics?
> Say that if everyone voluntarily waited a bit longer to reproduce then after a hundred generations human life expectancy would increase by 25 years. Would we be morally obligated to do that?

I don't get this. Why is it true?
Permaculture is the goal, but I don't know enough and hiring someone that know enough is also tough. I'm in Madagascar, a bottom tier poor country, has a lot of potential though.

Mail sent.
> Idiot here. I think this field of study has wild potential.

Stephen Wolfram (author of Cellular Automata: ...) would agree.
Yes, it's like people have completely forgotten, or maybe never heard of, the Peter Principle.

https://en.wikipedia.org/wiki/Peter_principle

> The Peter principle is a concept in management developed by Laurence J. Peter, which observes that people in a hierarchy tend to rise to "a level of respective incompetence": employees are promoted based on their success in previous jobs until they reach a level at which they are no longer competent, as skills in one job do not necessarily translate to another.[1]

The concept was explained in the 1969 book The Peter Principle (William Morrow and Company) by Laurence Peter and Raymond Hull.[2] (Hull wrote the text, based on Peter's research.) Peter and Hull intended the book to be satire,[3] but it became popular as it was seen to make a serious point about the shortcomings of how people are promoted within hierarchical organizations. The Peter Principle has since been the subject of much commentary and research.
Co
Hacker News Coffee Blend. Got a ring to it. Sure a few of us in here will buy a bag or 10 if you manage to get this going. Hire someone, setup a blog so we can follow pls and good luck!
Where Did FTX's Missing $8B Go? Crypto Investigators Offer New Clues
I don’t recall seeing it before Christmas Day before.
Look at it this way: for basically everything there is already a project on github. But how many of those projects actually work? or are in a 1.0 release? or are even used by more than 100 people?

If something has already been done it's not the end of the world. If you think it has value you should do it again and try to collect its leftover potential
It likely isn't true, but it's a thought experiment.
Seems somewhat par for the course. As the article notes, many other foods have intentionally added allergens as well, presumably to move the needle from 'may contain allergen X' to 'definitely contains allergen X' and shed some legal liability?
Prithee, consider thou yon past future tense "a man of whom Chaucer will write", in: https://www.youtube.com/watch?v=Nx-x_1lIXh4
> No, user-defined functions won't make Meson Turing-complete as long as recursion is not allowed.

Turing-completeness is, itself, often a red herring. What it alludes to is the difficulty in predicting what a program would do because, in the general case, it is impossible to tell what behaviour a program in a Turing-complete language would exhibit for a particular input short of observing what it actually does. But even languages that are not Turing-complete often fall far beyond what is practically predictable. While theoretically decidable, predicting what a program written in a language with nothing but boolean variables and loops of no more than two iterations, or, alternatively, functions of boolean parameters even without recursion, is PSPACE-complete (as such a language can easily encode TQBF [1]). I.e. predicting how such a program would behave is computationally intractable, since it grows exponentially with the size of the program. Programs in such a language would also fall outside the capabilities of heuristic methods, such as SAT solvers, to tackle (SAT is merely NP-hard compared to the strictly harder PSPACE-hard TQBF).

So if your language has variables and loops (even limited to two iterations), or variables and functions (even without recursion) -- it's intractable, even though it's not Turing-complete. I don't know whether this particular language qualifies or not.

[1]: https://en.wikipedia.org/wiki/True_quantified_Boolean_formul...
Not necessarily. You can have a write-ahead log which also consists of opaque blobs and which other devices can pull and reconcile on their own. At some point, a whole reconciled version is uploaded.
is this a fork of nerdctl ?

nerdctl is the coolest project ever. created by Akihiro Suda (https://medium.com/nttlabs/nerdctl-v1-0-fb6bf8e1b0b) for a containerd equivalent with the exact same UX of docker.
requirements are so stringent that many manufacturers, especially bakers, find it simpler and less expensive to add sesame to a product — and to label it — than to try to keep it away from other foods or equipment with sesame.

I don't see how that follows. Surely they can just label it 'might contain traces of sesame' rather than actually adding sesame unnecessarily, and presumably at extra cost, or just add 'traces of sesame' as an ingredient.
Potentially catastrophic false assumption made at the end there.
The Iliad and Odyssey and the Icelandic Sagas are in large part about killing people and Persian classical poetry is about the joys of wine so why not?
No, there were legal issues involved, due in part to me not running a tight a moderation as I should have, and in part due to one person completely losing his mind and suing a bunch of people, me included.

It'd actually be great if this would have happened on Reddit. I learned my lesson: do you want to comment about anything I've written? Please, do so. But not on my piece of land.
Spaces autoconverting to tabs is a combination of both worlds.
One problem with the game of life is that it is further away from physics, e.g. you can have gliders getting/losing momentum out of nothing, and having limited number of angles in which they can move. From what I see in the video, this is not an issue here.
If it's an important image part of prod, they're pinned to a specific version anyway and get upgraded like software dependencies after testing about once a week. If it's a utility image (e.g. for the cloud dev environment), there's a periodic job that checks for updates every hour because no one would care enough to update manually.