skysight-inc/HackerNews huggingface dataset:
When I worked at a company called Smarsh, I wrote an encrypted file format for them for use in cloud agnostic storage utilizing envelope encryption. I read dozens of state of the art documents, various RFCs, and researched even proprietary formats for prior art references.

We also used Go, which I consider the best possible language to use with respect to working on encryption. Kudos to Filippo Valsorda for his work on Go, and age. Hands down the best work in the space at the moment. It doesn't get better. I've done my homework.

But in my opinion, this is still an unsolved problem. age simply makes a dent in an otherwise immature space, with simple questions:

1. What cyphertext, salt, iv structure layout should the encrypted payload follow? There are de facto binary structure layouts that prior art has established a practice for, but it does vary in order, and no papers talk about embedding specific details you need for the decryption process such as required lengths that otherwise need agreed upon static values.

2. What headers should be provided, if any, to provide mechanisms for versioning and reading encryption strategy? Should part of this metadata be in the file extension instead, such as `.aes256-gcm' and `.aes256-gcm.key'?

To my surprise, despite the longevity of the industry, there was no simple file format that I could turn to that didn't involve being tightly coupled to email or a concept of a recipient.

Unfortunately, age was:

1. Too young to consider for enterprise rollout.

2. Failed to differentiate itself from previous standards that were tightly coupled to email or recipients.

3. It fails to meet encryption standards that are more aligned with compliance than the state of the art.

Regarding point 3, I appreciate its desire to stay small and utilize ChaCha20-Poly1305, but that's insufficient for deployments with specific requirements.

I think someone needs to come out with an alternative to age that allows you to specify the cipher, and supported ciphers in the standard need to have specific binary layouts that can be agreed upon.

I would personally prefer some metadata in the file extension, but I think this is naive, because re-encrypting a file would lose this information, or dumping binaries to pathnames with arbitrary file names would destroy this information, so it must be in a file header.

The file header needs a specific magic number that can be read by utilities, and those utilities can further probe the file for metadata.

age does some of these things, but it doesn't have answers for others.

But gpg isn't a solution, either. Nor are numerous other encrypted payload formats for various reasons.
This resonates but also essentially agrees w/the parent, the youth want to do what you just described for various reasons that benefit the youth, the older peeps didn’t, because of similar motivations.
Hmm. If you're willing to be stuck in time at 2016, there's https://zenodo.org/record/45901

Build a model off of that?
Atom was introduced prior to VS Code. VS Code reuses electron as a framework, which was written for Atom (originally called electron shell).
> b) responses to their comment laid out some arguably better terminology like griefing or cyberbullying.

Fair point. Cyberbullying might well be a clearer term for most than trolling. Assessing this would require another study. (eyebrow)

"Griefing" is a new one to me. For some reason, it conjures an image of Charlie Brown getting the football pulled away from him at the last instant. And yet it happens over and over. At some point, you think that he can't be that naive! -- it almost seems like he likes that particular experience of failure.

Thanks for the convo y'all.
The fact that these science journals needlessly weighed in on something not falsifiable says more about the journals than anything.
> I also think it’s ok for a monarchy as opposed to democracy ruling what gets approved, assuming merit based is not an option.

Just to share: I've been an outside advisor to a few companies where some developers may think "this is a politics based monarchy and we're not looking at proposals rationally". Where as an outsider it was clear to me that the higher up roles just had more context to make their decisions.

Especially decisions coming from the CTO and VP Engineering kind of roles tended to be driven by input from the wider company strategy, due to daily interaction with the rest of the management team.

In those cases there was a clear need for coaching the higher ups on how to explain and communicate their decisions, but what they were deciding were the right things. And everybody leaving before they improved communications would be on here posting about how bad their higher ups were and what a political mess it was. While that wasn't really the issue.

I'm sure that's not always the case and big political dumpster fires exist (I've seen a few), but there are also many cases where it's only an issue with communicating more clearly from the (technical) management side of things.
How does that factor into the utilitarian calculus? Who cares about you? If a stroke reduces you to the same level of mental functioning as a newborn, why shouldn’t society be able to eliminate you as a burden on them?
The lab leak hypothesis makes the most sense. The lab in Wuhan which researches coronaviruses conducts experiences on animals, including bats. Like other labs, there are dedicated personnel for hydrating and feeding the experimental animals. Notably, there are "wet markets" in Wuhan where live animals are sold, including bats, which harbor coronaviruses. Someone who is working in the facility in charge of maintenance of experimental animals has a choice of either sacrificing the animals as per protocol, or selling them to a wet market to make extra money. The most likely scenario was that someone sold the animal, most likely a bat, to a wet market, which happened to contain a virulent coronavirus strain that then infected humans.
Supply Chains Have Healed yet Their Mark on Inflation to Endure
> Both headlines give the most important part of the story: a US agency currently believes that the pandemic was caused by a lab leak.

seems to me you're still leaving out a very important part of the news, which is that the confidence level is "low".

so right now the US government has multiple theories, none of which it is confident. it's just that of the reports that is not confident in, it might be the least not confident in the lab leak idea.

but the WSJ has decided to throw integrity aside and ignore that part in their headline.
I don't know how close AI is to replacing software engineers generally, but pretty sure this prompt engineer job isn't going to age well. And for extra irony, the better they do at their job, the greater will be the dependence upon the tech and the incentive to eliminate the middle-man (ie. the human).
> CRM

ORM of course, not sure what my brain was doing at that moment.
The current version (Altium 23) is a mix of Delphi and .NET (I guess C# but couldn't quickly find evidence). I don't have time to try to exactly figure out what's used for what, but a quick test shows that the main executable and dozens of DLLs of the latest Altium version are compiled with Delphi 30.
Or there aren't objective standards for what "low, medium, and high confidence" actually mean, thereby allowing one agency to look at the evidence and say it's of low confidence and another to look at the same data and say it's moderate confidence.
Or someone at the briefings said there was a possibility that the origin of the virus was a lab leak and that was the only thing he actually heard and just said that the origin of the virus was a lab leak.
I'm sure that the undecidedness is not about the origin but about the geopolitical impact such an official statement would have.
Yes we have the sequences and no they’re nothing like SarsCov2
If it wasn't buggy over tailscale it'd be perfect.

I was travelling for a month and decided to put my sim card in a cheap android phone and connect to it remotely to keep getting SMS 2FA rather than getting roaming. After about two weeks KDE connect over tailscale said the phone didn't exist, so I was glad I'd set up google's remote sms as a backup. (I verified through tailscale it was still connected).
True of most older languages that have fallen out of favor.
The post has rather suddenly disappeared from the front page. Don't know if that's just because it's been there for a few hours or if it's been removed for advertising.

Anyway, I couldn't live without magit. Donated.
You make a fairer point than people realize. In 2023 we need less 'dog video game' disruption and more impact. Trying to commodify increasingly stupid things is a direct product of the startup culture this site (and Twitter + the community at-large) promotes.

This will look more embarassing than a professional history with fushigi balls if you put it on your resume. It doesn't matter if you're Joipaw-scale or DogTV.
I'd love to know what really went on between Jeff Minter and Atari back in 2015 over Tempest 4k. It was an unbelievable mud fight:

https://news.ycombinator.com/item?id=9227514

https://news.ycombinator.com/item?id=9226275
No, the fact that there is no codepoint that makes those mappings ambiguous is due to the way Unicode decided to save to codepoints for seemingly no good reason.

What should be _the_ value of `"I".lower()`? Or, "i".upper()?

And please don't bring up locales. The whole point of accepting the complexity of Unicode is to be able to take a document which stands on its own without external references.

> Early character encodings also conflicted with one another. That is, two encodings could use the same number for two different characters, or use different numbers for the same character.

> The Unicode Standard provides a unique number for every character, no matter what platform, device, application or language.[1]

Those statements are outright lies: Unicode does not provide a unique number fpr "upper case Turkish dotless i". Nor does it provide one for "lower case Turkish dotted i".

If it did, it would be possible to correctly map "i" to "I" or "İ" and "I" to "i" or "ı" without having to know anything other than the source codepoint.

The font does not even come into play here.

[1]: https://unicode.org/standard/WhatIsUnicode.html
Good point I will edit.
> China first and America second.

wtf????????????? I have no idea what you are on about
Sorry, I kinda missed that. The "multiple recipient" thing is quite prevalent in the titles (here and on github) so I thought this was supposed to be the key differentiator.
No, it isn't entirely possible(any more than anything else is technically possible). In the rolling stone article:

> "Clapper agreed with Gistaro, telling Helgerson, “Trump doesn’t read much; he likes bullets.” Instead, during the Trump administration, the briefer would summarize aloud key points since the last briefing and provide three documents (none more than a page) about new developments abroad. This was all part of an effort to make the PDB “shorter and tighter, with declarative sentences and no feature-length pieces.”

> “Trump had his own way of receiving intelligence information—and a uniquely rough way of dealing publicly with the IC,” Helgerson wrote, “but it was a system in which he digested the key points offered by the briefers, asked questions, engaged in discussion, made his own priority interests known, and used the information as a basis for discussions with his policy advisers.”"

> "These and other difficulties agencies encountered under Trump led Helgerson to conclude that, “The system worked, but it struggled.”"

He clearly had access to more information than any civilian, and was engaging with it.
All Books and Science Publications Are Available in IPFS
How to Know If You’re a Hacker
Because soon a free account on the web will mean little to nothing.
https://archive.ph/6GEuN
I worked with a prompt engineer. They're basically a Natural Language Programmer. There is skill in doing the job well.
If it's not private file.io gives you a handy qr code and supports <2gb
Not sure about their product but resistive touch screens can require quite a bit of pressure which is a separate step of training the pet to overcome this.

Another product in that space was CleverPet, I backed that on Kickstarter and our dog enjoyed it quite a lot but it also required some pressure

https://youtu.be/tU5tMOIJfpo
> 1. All things created by artists are art

This surprised me because I don't feel that way, never said this and believe artists can fail in their creations and produce junk

> 2. There is art in divisive and hurtful manipulation

Trolling can be harmless, along the lines of pranks and jokes. April Fools day type stuff. MTG is trolling, but it's not very artful and it's mostly harmless. You may consider this "divisive and hurtful manipulation" but I don't. It's what people do on Twitter to amplify their Tweets. Both sides of any argument do it.

There are some who consider divisive and hurtful behavior can be artful, such as composer Karlheinz Stockhausen who said 9/11 was the "the greatest work of art imaginable for the whole cosmos" and was widely condemned for it.

"the composer formally apologized for his remarks, explaining that he simply wanted to remind people of the role of destruction in art"

http://www.osborne-conant.org/documentation_stockhausen.htm
Thank you for your quick answer.

> I am not sure what you mean by X25519's "collision resistance" vs the file key's "preimage resistance".

There's a significant difference, not only with multi-user attacks (which I see you know of), but with your chances of success with scaled down brute force attacks. If you divide your key search effort by 10 your chances of success are divided by 10 (linear drop off). But if you divide your hash collision (or ECC brute force) efforts by 10 your chances of success are divided by 100 (quadratic drop off). [1]

Those two reasons are why I believe Daniel J. Bernstein when he says that Curve25519 is "high security" even though he has serious concerns with 128-bits AES. [2]

[1]: https://loup-vaillant.fr/tutorials/128-bits-of-security

[2]: https://cr.yp.to/snuffle/bruteforce-20050425.pdf (Understanding Brute Force)
Lockdowns serve a purpose: to slow the spread of the virus.
If you are not a native English speaker, you may want to know that you are pretty drastically misreading parents comment. He is not saying "I know this specific virus is present" but "the lab studied SARS related coronaviruses" which you in fact seem to agree with.
And here is a case filed against an AAP MLA because a poster with his photo was pasted on a school gate and on an electricity pole.

https://www.telegraphindia.com/india/delhi-court-acquits-aap...
That really was me in the 90s. Made all my real and best friends using mIRC and ICQ. the good old days.
> why does the US actively support this cover up?

Sometimes, answers are more clear when questions are more clear.

“Why is the US waiting to secure a convincing case that produces useful diplomatic leverage instead of indulging public speculation by making an early call that wastes the opportunity?”

There’s a lot to lose by making a case that other nations can dismiss, and a lot to gain by having a case that they can’t. If there was a culpable lab leak, the game comes down to China making it easy for its partners to plausibly deny while others try to collect thorough enough evidence that they can’t. The tidbits that feed conspiracy circles might be 100% right and very convincing to individuals, but are too thin to put world leaders on the spot. For now.
> So, i generally considered Pascal a dead language.

Delphi/Object Pascal never went away, but rather it was targeted by various competitors in arguably their misinformation campaigns against it, in attempts to sweep it out of the way. Pascal/Object Pascal was going up against languages like C, C++, C#, etc... Languages that were promoted by powerful American companies like AT&T and Microsoft (to name a few). Even calling Pascal a "dead language", is indicative of how relatively successful the negative media propaganda was and is.

Pascal transformed into Object Pascal, but unlike say C's relationship to C++, Pascal and Object Pascal is much more closely aligned. This is reflected in how Object Pascal can be written, and with its most popular compilers (Free Pascal and Delphi). Outside of the USA, Borland and then Embarcadero has continually maintained a significant presence in many school systems. So while various Americans might have been tricked into thinking the language died off (especially with odd websites continually claiming its dead), others around the world have been introduced to Delphi, Turbo Pascal, Free Pascal/Lazarus, or PascalABC as their first programming language. The ton of Pascal/Object Pascal books that were written, and some new ones still coming out, also makes it much easier to teach.

So, what is happening, is that various people are rediscovering Object Pascal and are surprised it's still a significantly used language. Sometimes, people only just realizing that Delphi (the compiler/IDE), is using a dialect of Object Pascal. The TIOBE Index has been showing Object Pascal hovering around the #15 rank for years. Meaning Object Pascal, is just as alive or successful as notables like Go, Swift, Ruby, Rust, Lua, etc... Another element about this, is thinking that if a language is not in the top 5, then it doesn't really exist or has failed. That's also not how things work nor realistic thinking. There are thousands of languages, so making it even to the top 50, is both a struggle and an accomplishment by itself. Object Pascal, has stayed near the top for a long while, thus demonstrating its an all time success and great.
Yeah that's another side, Delphi's never been good at entry-level stuff. Back in the days the only way to get a cheap copy was to be a student. Now there's the "Community Edition" but as you say, compared to other options it's pretty high-friction.

This combined with the years of subpar evolution due to poor management certainly did not help Delphi.
I was a junior guy on a trading desk at a hedge fund once, and I got sent out to our fund administrator to help them produce a NAV for the fund.

All our trading was done by computers, with everything written to a database.

I show up at the fund admin's office, and what do I see? There's two young guys my age sitting there with the printed trades, thousands of them... typing them into a computer. One typing, one double checking. They had been at it for days when I arrived.
Parent is trying to draw a parallel between mouth taping and censorship. The problem is that lunchroom scenarios aren't cleanly isomorphic to online scenarios.
I think the criticism is that saying something is ‘most likely’ implies a sense of it being pretty likely. When the reality is that they are very uncertain.

Both headlines are clickbait compared to the content of the article.
So true. Now that they are 3yr and 6yr old. I'm still not sleeping nowhere as before, but it's getting a little bit better.
Science is the collecting and processing of empirical data using peer reviewed methods to reach a conclusion. Which part do you think the FBI is not doing which separates their process from science?
Guilty with no way to prove innocence.
I'm 30 and have been using vim since college. Usually I'm not actually using the vim editor, but some IDE that has vim keybindings. Good enough for me since I don't customize it much anyway. And then I get the best of both worlds: IDE features for navigating around files (jump to definition, display references), and vim for navigating within a file. Professionally I never paid attention to how many people are using it. Off hand I know a couple people that use emacs, and zero that know vim, but this is probably because emacs users talk about emacs :)
Show HN: LCM – A small combat manager for d20-based PnP games
> Client: I want him to prove he is interested in me by persisting despite my giving him the cold shoulder.

Don't let reddit get a hold of this.
A fast static code analyzer and language server for Python
It’s weird they don’t publish the demographics of the students.
Maybe they don't have enough evidence to support the lab leak hypothesis. Or maybe they want to prevent China from supplying weapons to Russia for the time being and they're playing the cautios stance while they don't have enough evidence. We will find out eventually in five to ten years or so. The lab leak hypothesis is quite probable.
I'd still say the Iraq War was most costly and fatal mistake in the 21st Century.

Hard to compare, admittedly.
If you need fallible cleanup, but also to try cleanup via RAII, it isn't hard to have a "cleanup" method that signals whether it succeeded, and an "already cleaned up" boolean member the destructor checks.
The confidence level for the Covid-19 vaccine being sterilizing was low, but we still ran headlines saying as much. The confidence level for cloth masks being effective was low, but we still ran headlines saying as much. The confidence level for everything when it comes to Covid-19 is low.

The media gave up on integrity a long time ago, especially with respect to the pandemic. You're just noticing it now?
Interestingly, I’ve experienced exactly the same thing, but the outcome is that I care very little about what people think would be an “age appropriate” approach to life and just optimise for maximum fulfilment right now, whatever form that takes.
Yep. My sleep sucks without exercise.
I won't be surprised if Russian schools still teach Turbo Pascal on computer science classes.
Researchers are trying to learn dolphins language using AI
Thank you for the kind words about my work on Go!

I think there are no standards for the things you mention because there shouldn't be any. If they existed, they would be necessarily complex and bloated like JWT or XML, introducing unneeded complexity in anything that adopted them. age tries to be as much complexity needed for the use case and no more. Other designs can make their different choices for their different use cases. That's good!

No contest on (1). On (2) I want to mention that "recipient" might have been an unfortunate choice of word, but it has nothing to do with email, it just means "a thing that can be encrypted to" like a public key, and any envelope encryption scheme will have something like that even if it doesn't give it this or any name. For (3) I have no idea what your requirements are, but I would claim age is pretty much state of the art (partially because it's not hard, age is trivial by cryptography research standards). Wireguard is being merrily deployed everywhere and uses ChaCha20-Poly1305 as well, FWIW.

(age does have a magic number in the header, and I see you came to realize why metadata in files is a bad idea. It's a bad idea also because it would be attacker-controlled.)

[Edit: s/No context/No contest/]
Every time I visit the site I get: "Application error: a client-side exception has occurred"