skysight-inc/HackerNews huggingface dataset:
To add to what Filippo said: Your Ed448 implementation will also need SHAKE256. SHAKE256 is a SHA3 variant.

There was a recent flurry of buffer overflows in SHA3 implementations. I'm aware of at least PHP being affected.

Wanting Ed448 for political reasons, or purely for psychological comfort reasons, is a perfectly understandable stance to take as a non-expert.

Unfortunately, the details that experts are privy to matter a ton, and severely outweigh any notions of having eggs in multiple baskets.

When cryptography nerds say "don't bother with Ed448", we're open to having our risk calculus checked, but we're nearly unanimous on this one.

The only real reason to prefer 448 over 25519 is "our legal/compliance folks say we need 192-bit or greater security for our asymmetric keys, or we void our [contract, license, certification, etc.]".

If anyone does fall into that trapping, please speak up.
I use deepl to translate from my original language (French). Good catch!
It’s this kind of thing that causes some people to take Tesla’s side by default in discussions here soon after crashes. It’s not “Elon worship”, it’s Bayesian statistics…

Yesterday, there were people here blaming “Tesla brakes are too small”. Turns out that… wasn’t a factor.
As far as HIPAA is concerned health information is pretty much anything associated with a patient and a provider. The definition of a provider is pretty broad, but basically all data points in an EHR or claims system are associated with a provider.

So data from a fitness tracker or what you ate last night is health related but unless it’s being fed into an EHR (and associated with a provider) then it won’t be considered covered by HIPAA.
Nah I still wouldn't call it a pager. They used the correct term themselves as "text viewer".
I agree, the article conflates several different learning dichotomies that are often only loosely correlated.

The specific quote you include isn't totally wrong, but it overstates the connection and ignores the contextual differences that maken it more or less true.

One of those contexts in the amount of time pressure vs. slack time you have. When you are under lots of time pressure, it's harder to take the time to learn concepts and easy to skip straight to tools.

To me, this indicates that the author has misunderstood the cause of the problem. The problem isn't that tool learning replaces concept learning, but that workplace/management cultures commonly don't value concept learning and as a result don't schedule time for it or reward it.
> Most of the time they are above the accepted morals of society (a very Nietzsche perspective).

That sounds more like marquis de sade than nietzche imo.

i think nietzche is amoral only when what is moral is arbitrary and self deprecating.
Dragon's Egg by Robert L. Forward is a novel that has a species living on the surface of a neutron star.
I never said the laptop was switched. She was expecting to not pay and have her files instead she had to pay, lost her files, lost her stickers and her laptop and screen is scratched (Apple said they will replace the screen when they get the part).
A bonus is theoretical knowledge is quite stable: there is usually some thought put into how to pace and structure the teaching of it (e.g. pedagogy). It builds on itself. And it doesn't expire at the same rate that frameworks do. Drinking from a deeper pool of knowledge (as it were) is a profoundly different experience than learning new tools.

If you're early in your career, focusing on marketable skills and getting experience is a smart move. Once you start thinking about progressing to intermediate and beyond, theory starts to be a secret weapon of sorts that lets you tackle bigger and harder problems.
Heh. Look, no one likes FIPS 140. We don’t like it, those that need it don’t like it, sometimes I wonder if NIST likes it. But it is what it is, and the current situation is marginally better than having to fix the merge every time we touch anything.

All Go+BoringCrypto code is behind the compile time GOEXPERIMENT, and mostly in its own files or in its own blocks. It could be worse.
That is a bit odd to ban even sporting firearms. Which law is that?
Could be a useful application of perovskite solar cells, which would be great on earth if they weren't made of lead and could survive in air. Space could be the place for them.

Killer app for this might be forward operating bases that are hard to supply with conventional fuel.
Here's a similar thread about my decision to go full time: https://news.ycombinator.com/item?id=34248481

I'm not and don't plan to share revenue numbers. Not much benefit.
Except we don’t hype humans the same way we hype ChatGPT
HICKORY DICKORY DOCK - OH!!

This wasn't the Dice Man I was expecting.
Most artists never make anything worth appreciating.
> There are many obese people who are extremely healthy

I don't believe that's true. There are some cases (like powerlifters) who can be at an obese BMI but still have strong cardiovascular fitness, but unless you are in that narrow category, if you are obese you do not have strong aerobic fitness. 'Decent physical condition' alone belies that you are not 'extremely' healthy. Decently healthy maybe, but certainly not extremely. Even if you are still metabolically healthy, you are at increased risk for adverse long-term outcomes (source: https://pubmed.ncbi.nlm.nih.gov/24297192/). That is more than just a psychological issue, no matter how much you try to handwave it away.
#receio que não ficara muito bem com isso
You present a straw man argument based on the author's bio from his website. Of course that doesn't represent his full position. He clearly advocates for a combination of both approaches in the article
Never let a good crisis go to waste. Everyone is seizing on the opportunity to clean house and cut costs while the macro narrative is bearish. Investors and shareholders are demanding it. The days of cheap money are coming to a close so just growing revenue is not enough, now these companies need to show profit.
It's not just start ups here. Lots of hospitals and hospital groups have trackers like Google Analytics installed on their website. From the HHS[0] in many cases this is considered sharing health information with Google:

> For example, tracking technologies could collect an individual’s email address and/or IP address when the individual visits a regulated entity’s webpage to search for available appointments with a health care provider. In this example, the regulated entity is disclosing PHI to the tracking technology vendor, and thus the HIPAA Rules apply.
How does having solar affixed to your roof affect or complicate getting a new roof on your home every 10 years?
This was on 2022-12-31 in Canada so the price was in CAD. That's what they charged her.
I simply refuse to believe its hard to plug in a phone cable.
If you want to be an asshole, be an asshole. Just don't complain when others treat you as an asshole.

We all have thoughts we choose not to express. The ability to choose whether to express a thought is arguably the most human of human traits. You are not special for having unspoken thoughts.

Nobody gets the freedom of speech without also taking its complement: the privilege of bearing the consequences (positive and negative) of choosing whether to speak.
AWS and GCP are both much better.
Globalization is dead? The shelves at Walmart aren't chock-full of goods made in China? No? That's because globalization isn't dead.
The issue I have with on-demand/just-in-time learning is not when you learn, but rather that such learning tends to be self-directed. To repurpose a famous quip... The person who is their own teacher has a fool for a student. The problem is not whether you are a good student, the problem is that you selected for a teacher someone with no grounding in the subject and no time-tested curriculum to teach from. Sometimes it works well, but you may end up just like me:

I did a lot of self-directed teaching about programming, starting with boyhood explorations almost exactly fifty years ago (1972!). Yes, I also have had formal education, but most of what I have actually ended up using has been based on self-directed learning.

The result for my N=1 sample is a broken comb profile. I know much more about some things than others, and there are areas of our industry where I am completely ignorant! The reasons for this in my case are that I tend to focus on areas where I already have some exposure/interest, and ignore those that I may not understand or even know exist.

"On-demand" learning tends to reinforce this. You are trying to solve a problem, so you ask yourself questions, and then do research to answer the questions you posed to yourself. But this can create a serious XY Problem[1]. As a self-directed learner solving problems when I encounter them, I search for solutions using the knowledge I already have, and I'm completely ignorant of the possibility that I'm solving the wrong problem and ignoring a deeper understanding of what I'm trying to accomplish.

This can be fixed in various ways, the most obvious of which is: Ask questions of people with experience that differs from yours. If you are a self-made programmer, you will learn the most by asking questions of people with a formal education. If you are in a three-person YC startup, you will learn the most from people in Enterprise companies. That is true no matter how little you value formal education ("credentialism") or Enterprise businesses ("bloatware crystallized as an organization").

And the other thing I'll mention is to embrace the "XY Problem." I personally am just like so many people you see on the interwebs. If I ask how to solve problem Y, and someone says "Wrong! You actually have problem X, and you solve that in the following way," I often emotionally push back. "Just let me solve Y today," I think, "I'll ready up about X later."

But that is the glaring weakness of being a self-directed, on-demand, just-in-time learner. We chase solving problem Y, sometimes aggressively ignorant of X. To be successful as our own teachers, we must be open to learning about X even when our "priority" is solving problem Y. And this is why being respectful of people with different contexts (those with PhDs or those who attend 57 meetings a week) is especially valuable for us. JM2C, YMMV, and especially, if I'm blathering about Y while the real issue with on-demand learning is X, I'm open to your feedback!

[1]: https://en.wikipedia.org/wiki/XY_problem
Hope nobody working there likes to travel to Europe then...
That's nowhere near good enough to see in full sunlight, which is about 10k - 30k nits.
As I see it learning “on-demand” is good enough for most programming tasks. But I agree with the blog post tat the situations you mentioned where a person can actually learn new theory and perhaps push the boundaries are increasingly rarer.
Hi Dharmesh!

I just left Salesforce a bit ago for HubSpot (see my other comment in this thread), and as someone with a bit of a "kool-aid allergy", so to speak, I've been pleasantly surprised by HubSpot's willingness to say "this is what we're good at, and we're going to stick to being really good at that", even when the alternative is potentially really lucrative (but massive pain).

There are a number of ways that life at HubSpot has been a huge improvement to me, but chief among them is that the _employees_ still matter more than the raw "maximum possible profit, screw everything else" focus that I constantly saw at Salesforce, and the "we don't have to eat every single market (poorly) just because others have tried to do so (poorly)" mentality is evidence of that, IMO.

Please keep being that!

And to the grand-parent commenter, I'm _very_ leery of anything that sounds unpleasantly familiar, and probably overly-cynical about large tech companies at this point...and so far I've found pleasant surprises at HubSpot, and I don't see desire (at least yet — it's been only 6 months for me) to be like Salesforce.
Oh the other hand, maybe it should apply, considering that the website is the entry point for the user to the service and that an attacker owning that can trivially redirect the user flow - the same reason why mixed HTTP & HTTPS is considered insecure.
Expand? No, retain? Yes, unless you've decided slavery isn't abuse.
1. If "bullshit motivational quotes, carefully constructed outrage takes, or purportedly expert content about topics [the author] knows nothing about" makes your world a miserable place, you are part of the globally privileged. Unplug and get some fresh air, ffs.

2. Lots of people like that stuff. Who are you, and who are OP to decide what content gets produced and consumed? The morality police?

3. The irony of complaining about that stuff on a site dedicated to the industry that platforms that kind of stuff is just astounding. Perhaps the real problem is not the content, but the medium that allows its mass dissemination?

4. The material misery that would be created by shifting entire industries out of work (if even for a "few" years to who-knows-how-long) would be measurably greater than the micro-miseries of the kinds of things OP seems to complain about.
Prisons, being an extension of the government, have no job picking and choosing books over moral outrage.
Just because the primary source is both readily available but presented as images on Twitter (apologies for the hosting domain, skip down to "Scott Siskind Thu, Feb 20, 2014, 6:12 PM"), the text:

https://emilkirkegaard.dk/en/2021/02/backstabber-brennan-kni...

Also includes his links.
Please don't cross into personal attack. You may not owe CEOs better but you owe this community better if you're participating in it.

https://news.ycombinator.com/newsguidelines.html
Tether Insolvency Calculator
Here is a poorly mic'd but audible version of the remarks of Morris Chang, the now-91-years-old founder of TSMC several speakers prior to Biden's own remarks: https://youtu.be/urlwF0B9-hw?t=747
Anecdotal. My third party lightning cables last forever now that I no longer buy the apple branded ones with that crappy insulation that frays when you look at them wrong
Top 10 semiconductor manufacturers (countries with significant chip fabs) include also Israel, Malaysia, Netherlands, and the UK [1].

Smaller semiconductor fabs, and non-chip semiconductor (like MOSFET or LED) manufacturers are even more widely spread.

OTOH EU is now considered sort of one quasi-state, so the massive cross-Europe trade, which would be considered a sign of globalization in 1923, just passes as an unnoticed baseline in 22023.

[1]: https://finance.yahoo.com/news/top-10-semiconductor-manufact...
The tech industry is ruining itself by expecting its employees to learn a bunch of new topics at breakneck speeds on their own time and on their own dime.
Us is them. At least I say this in a general sense that a healthy portion of posters here are in marketing, or they are looking for some way to make a living in any way possible. Trying to making this a us vs them is pretty much meaningless as it's completely ineffective in solving the problem.
Meta dealt blow by EU ruling that could result in data use ‘opt-in’
This is only a problem for the incurious who stop when they solve the immediate problem.

The curious will often descend into conceptual rabbit holes and acquire conceptual knowledge as well. It's sort of anticipatory yak shaving for future projects.
ScienceGate
Maybe lint is a USB-C issue, I've never had to delint a lightning port and my pockets have a good deal of that stuff generally
I'm a fan of lnav, more for log files but incredibly useful:

https://lnav.org/
> Does the guidance only apply to user-authenticated web pages?

It depends on if there's health related information on the page. The HHS includes examples of unauthenticated pages where the guidance applies such as pages about a specific health condition or find a doctor pages[0].

[0] https://www.hhs.gov/hipaa/for-professionals/privacy/guidance...
> The issue with "one worker one vote" is that it assumes an egalitarian world that couldn't be further from reality.

That egalitarianism already exists in every democracy in the world, and everyone just accepts it. The guy working the McDonald's counter gets the same vote as the PhD in Public Policy. It's a feature of democracy and people, historically, will sometimes complain about it but generally accept it as a necessary feature of democracy. I see no reason that, after a transition period, people wouldn't accept it as a necessary feature of democracy in the economic realm as well. Indeed, people working at existing worker cooperatives or employee owned businesses tend to laud and speak very highly of this feature of them.

> How do you expect to prevent someone from starting a private business and structuring it in a non co-op manner? Ultimately, this can only be enforced with violence or the threat of violence, right? So now how do you convince people used to freedom to accept widescale authoritarian violence as being "worth it"?

You are already limited in how you structure businesses and what sort of employment relationships you are legally allowed to enter in to. These are already enforced by law, which is - as you point out - already enforced by violence.

Your choices for business structure (in the US) are sole prioritorship, partnership, LLC, S-corp, or C-corp. You may not hire an employee to work more than 40 hours with out paying them overtime. You may not ask your employees to put themselves in danger in violation of OSHA. You may not enter into an indentured servitude arrangement with someone. The types of employment contracts you are allowed to enter into, and the ways you are allowed to structure your holdings, are limited and structured by law.

People already accept this arrangement as normal and acceptable. And they've already accepted changes in that arrangement as normal and acceptable. I see no reason that they could - again with a transition period - come to accept a new arrangement as normal and acceptable. Especially if it's one that's viewed as more fair, egalitarian, and beneficial to society as a whole.

Most employees are already working in authoritarian contexts with a threat of violence hanging over them For many, many working people - losing their job comes with the threat of serious economic instability - including possible homelessness, hunger, or death. This system has the potential to drastically reduce that. It would limit the freedom of business owners and founders to drastically increase the freedom of the average worker. Seems like a net gain in freedom to me!
Zope is still alive, it seems, although I haven't touched it in 20 years: https://zope.readthedocs.io/en/latest/news.html#what-s-new-i...
JWST, SLS/Artemis, Tiangong, and satelite launches are on a hockey stick curve. Very exciting time!
I like Facebook targeted ads. They're more interesting than generic untargeted ads. When I was shopping for an electric bike Facebook showed me ebikes of the type I wanted (cargo) for weeks. It's convenient. Yesterday I made a comment on a hat ad (I didn't think any man except Walter White should wear a pork pie hat) and now all my ads are for hats. I didn't realize their were so many kinds of men's hats. I don't feel like my privacy was violated
I'm not understanding how this is a trojan. Is it a plug-in which the admin has to install? Is it some other unrelated application which the admin has to download from the web and run which infects WordPress sites? How do the 30 vulnerabilities fit into this?

And what part of it is a backdoor? It looks like the C&C server can only tell the software what page to redirect to? That's not the sort of access I generally associate with a "backdoor"...
I feel like ChatGPT is gonna get exposed once a big player adds it to their main search
Here let me explain it with concrete examples. Let's say you're a smart engineer, you know how to write code and make things happen and you have pretty good idea of what users seem to want or need.

You have a boss and you have a meeting with your boss to make a decision about including a new feature you've coded up a prototype for, into a product that is going to be released in a year. You demo it, and it goes mostly OK but there are some hitches.

You boss has several ways of responding. One way could be to call you an idiot, a stupid idiot who's wasting everybody's time. The other way would be to provide a more polite way of saying that the feature might not be ready yet and could use some refinement.

Multiple employees of Jobs reported this sort of behavior (screaming, belitting, etc):

"""Jobs stormed into a meeting and started shouting that they were “fucking dickless assholes."""

""" He shouted, "You guys don't know what you're doing. I'm going to get someone else to do the ads because this is fucked up."""

"""A few weeks later he called Bob Belleville, one of the hardware designers on the Xerox Star team. "Everything you've ever done in your life is shit," Jobs said, "so why don't you come work for me?"""

"""When Steve had to make cutbacks at Pixar, he fired people and didn't give any severance pay."""

"""“How old were you when you lost your virginity?" he asked. The candidate looked baffled. “What did you say?” “Are you a virgin?” Jobs asked. The candidate sat there flustered, so Jobs changed the subject. “How many times have you taken LSD?” Hertzfeld recalled, “The poor guy was turning varying shades of red, so I tried to change the subject and asked a straightforward technical question.”""

"""To address the problem, Jobs gathered the MobileMe team in Apple's auditorium and asked: "Can anyone tell me what MobileMe is supposed to do?" When the team gave their answers, Jobs replied, "Then why the fuck doesn't it do that?"

Jobs then fired the MobileMe boss on the spot and replaced him with Eddie Cue."""

I think Jony Ive pinpointed it:
"""I once asked him why he gets so mad about stuff. He said, "But I don't stay mad." He has this very childish ability to get really worked up about something, and it doesn't stay with him at all. But, there are other times, I think honestly, when he's very frustrated, and his way to achieve catharsis is to hurt somebody. And I think he feels he has a liberty and license to do that. The normal rules of social engagement, he feels, don't apply to him. Because of how very sensitive he is, he knows exactly how to efficiently and effectively hurt someone. And he does do that."""

The only question is: if Jobs hadn't been an asshole, would the computing world have come so far so fast, and does that justify his behavior?
That is cool but "too far" - just put those keys back on the keyboard instead of making the ridiculous tiny keyboards that require chording :)

(If possible, I wish these dynamic F-keys would make the keyboard taller instead of wider...)
Ask HN: Do you know any managed Docker providers?
Hi HN,

I’m looking for providers that offer managed docker hosts (not single container solutions like the ones you get from the hyperscalers - full docker standalone nodes).

Would also be interested in docker swarm.

Happy for all tips, thank you in advance!
It appears Samsung isn't honoring their warranties. Is this happening to anyone else?

I bought a Samsung 870 EVO with a supposed 5 year warranty but received an email that stated:

"After carefully reviewing the Bill of Sale of your item, this device only has a year warranty starting from the date of purchase: 03/03/2021."
We've banned this account for repeatedly breaking the site guidelines. You can't post like this here;

or like this: https://news.ycombinator.com/item?id=34235637

or this: https://news.ycombinator.com/item?id=34070263

or this: https://news.ycombinator.com/item?id=33962019.

Please don't create accounts to break HN's rules with. It will eventually get your main account banned as well.

https://news.ycombinator.com/newsguidelines.html
News to me about the lightning sockets. I've been using them since the iphone 5 and just about every part of the phone other than the socket seems to break first. I solved cable fray by buying non apple lightning cables.
Because then the company can't operate? Is it really that hard to understand?