skysight-inc/HackerNews huggingface dataset:
This is a common question! It's a deliberate choice.

The notion of security levels is somewhat in disuse. It's impossible to do any operation, even moving a single electron, 2^128 times so anything that actually has 128 bits of security is "secure enough" for any requirement. This is not a new idea, see agl's post from 2014. [https://www.imperialviolet.org/2014/05/25/strengthmatching.h...] There are arguments that boil down to "more is always better" but I am unconvinced by them as they could be used to argue for 512, 1024, 4096 bit symmetric keys as well, why stop at 256 bits. Part of what changed is that fundamental cryptographic primitives break a lot less than they used to do. "Too much crypto" is a good read about this. [https://eprint.iacr.org/2019/1492]

The only reason to use more than 128 bits of key is to protect against multi-user attacks. That's a situation where an attacker is trying to break one of a very large number of ciphertexts or keys, and would be satisfied with breaking any of them. If you are trying to break one of 2^52 ciphertexts encrypted with 128-bit keys, you can theoretically do it in 2^76 time, which might be doable! (Major asterisks, like that they all need to have encrypted the same plaintext, but anyway.) There are two ways to protect against that: larger keys or nonces. age uses a 128-bit per-file nonce fed into HKDF, making the total search space 128 + 128 = 256 bits, safe in every multi-user scenario, too.

Why use a nonce and not a bigger key? That works out to the same file size overhead! The difference is that the key is repeated for every recipient while the nonce is only serialized once. That means that if a file has 65 recipients, this will let us save about a kilobyte. Is it worth a lot? Not really, but it was free. It also makes most stanza bodies a single line, which is nice.

There's also a misconception that 128 bits are not enough for post-quantum resistance. I also thought that, but it turns out to be based on a simplistic understanding of Grover's algorithm. I wrote about it in the context of age specifically [https://words.filippo.io/dispatches/post-quantum-age/#128-bi...] but if you don't trust me you can also check the very last FAQ on NIST's PQC page. [https://csrc.nist.gov/Projects/post-quantum-cryptography/faq...]

(I am not sure what you mean by X25519's "collision resistance" vs the file key's "preimage resistance". Those are hash function security notions and this is a more complex setting. As you know, X25519 is a key exchange algorithm, not a hash function, and ~128 bits is the amount of work required to reverse the private key into the public key. Anyway, to get a collision in the derived file key, both the key and the nonce would have to collide (128 + 128 = 256 bits) so the "collision resistance" of the whole age scheme is still 128 bits.)
> He notes that Joipaw’s games are not meant to be a replacement for spending time with your dog.

I read this as ‘child’.
I'm just wondering what's gonna happen if OpenAI either sinks or limits its APIs severely like Facebook did in its time.
Holy cow, that's surprising. Does street view take user submissions or how is this possible?
> That’ll mean the world was brought to an economic standstill and millions of people died because of the errors and carelessness of some people…will there be consequences? What will be the assurance that such deadly mistake won’t occur again?

If history is any indicator, no, and there isn't any.

But if you're interested in establishing precedent for reckless behaviour damaging the world economy, and the health of millions of people, I understand that would open the developed world to a mountain of liability in the arena of climate change.
How Soon Self-Flying Planes Will Take Off
Ya, we're in a similar boat - lots of custom versions for customers, we're a large payer in our market too however.

We ship our application as a binary with some premade Delphi form files and a tool we wrote to build DFM files for the customer specific application that limits access to the functions and objects built into the application. I'm part of the group that consumes the application as built and develops customer implementations.

We're slowly transitioning from Delphi to C#, because the language is creaky, and mostly, its become impossible to hire dev's and when we do its months before they can be productive (but boy are they once they are).

I think the move away from Delphi is going to hurt a bunch in the short term, but will probably get us long term benefits.

For me the biggest issue I'm dealing with, is Windows is a treadmill of changes, and its hard-to-impossible to keep up with it.
Looking at both projects vscode uses typescript heavily while this project mainly uses coffeescript. So that might be a hindrance. So I guess that might be part of it.
Electron Fiddle is cool and the sort of thing that helps Electron maintain its lead over other frameworks, but it doesn't take you all the way through a project to the point of distributing your app. It helps you figure out how to make an app that starts up and does stuff, but, then you're on your own again. That's often where the pain really starts, as the most common tools are mostly thin wrappers that just map JSON to command line flags for the native toolchains on each platform. Or for Electron you end up being pointed at a lot of not fully maintained tools, custom update servers etc. Abstraction and convenience are minimal, cross-packaging painful or outright impossible. This is a problem not only for Electron; Flutter, Tauri, Jetpack Compose for Desktop, JavaFX/Swing etc all suffer the same issues.

There's another way to get started: grab Conveyor [1] (disclosure: my company makes it) and run

conveyor generate electron com.example.my-project

Then run "npm install" inside the generated directory. You can now hack on your app, add modules and so on, make a few edits to the conveyor.conf file and then run one command to create and upload packages for each OS. Signing and notarization are also handled even if you're on Windows or Linux.

It works for real production-grade apps; there's an example of packaging GitHub Desktop [2] which covers more advanced stuff like registering URL handlers (deep linking), Windows notification callbacks and so on. Also works for Flutter [3] and native apps.

Finally, for people asking "Why Electron", the answers are pretty simple: Google invests a ton of money in Chrome, and the multi-vendor nature of HTML makes it largely immune to rewrites and platform churn of the sort that affects Windows, Linux, macOS, iOS and Android. It's got its problems but stability+investment isn't one of them, which is why there are so many developers who know it.

[1] https://hydraulic.software/

[2] https://hydraulic.software/blog/8-packaging-electron-apps.ht...

[3] https://hydraulic.software/blog/10-flutter.html
This is a good reminder to sign up for the state department’s STEP email alerts if you’re planning on spending more than a week abroad. That’s how they coordinated evacuations during Covid times, and with the world seeming increasingly not as peaceful as it was 5 years ago, the embassy is going to be one of the most important emails you’ll get if you’re stuck in a pickle while traveling. They even have the ability to forward you the cash for a ticket back if you don’t have access to funds (don’t worry, they’ll get that back from you when you return). And if needed, they’ll do their best to get you to the airport. I was in a southeastern Asian country during Covid when they were trying to run bus routes to the airport and I’m pretty sure they carried large bags of cash to get through the locked down provincial border crossings.
Probably they still aren’t sharing all the information they have with each other. I had thought that was supposed to be much improved post 9-11.
Still used in certain submarine sonar arrays (T9000).
> run on a custom saliva-resistant touch-screen console

So a standard resistive touch screen?
It's great to see him kicking around and making games. I have fond memories of playing his "Matrix" game on my C64. Great mechanics, nice graphics, great sound, llamas and camels (of course), all of it in ~35Kb, much lesss than most C64 games even back then. A true wizard.
That's true. You'd probably still need at least ethernet and/or thunderbolt acceleration for that use case. And to be honest, not using the GPU/ML hardware would be a waste of expensive hardware in my opinion.

I'd go for a high end NUC over a Mac mini, but if energy efficiency is important for your use case then Mac Mini is definitely something to consider.
the steel columns bordering the main terminal were sold as scrap to recoup a fraction of the $5 billion spent on the airport’s construction.

Cue 'sunk cost' arguments.
If you repeat a lie often enough, even the at first reluctant will start to believe it. That's how the propaganda machine typically works.

The more these claims based on minimal new evidence are repeated, the more it seems the virus may have potentially been released by nefarious actors as an attack on the population.

It's not implausable for an entity with knowledge and access to a virus being studied, to release a copy of it in the environment surrounding the lab while maintaining a high degree of deniability.

If it is so, then the question that remains is, much like in the case of Nordstream, which nation state has the most incentive to carry it out?
I dunno actually, who has actually been arguing that it couldn’t be a lab leak? I’ve generally seen people arguing the position: there’s no evidence for it having been a leak. This second hand story about a low-confidence classified report doesn’t push me much in either direction. It is possible, though.

What do we do if it leaked? Dangerous thing are handled in labs. We should double check the handling protocols based on the unknown possibility that it was a leak, just to be safe. I bet there are more dangerous things than COVID in all sorts of labs.
Software Piracy

That is the reason Microsoft went bankrupt, and

Bill Gates is living in a mobile home in the Ozarks.

You should be ashamed!
Feels so for me. I'm nearing 46, and all through my 30s I felt (and was told) that I seemed younger. My wife passed from cancer when I was 39 and I feel like all that time caught up to me in the next year or so. Now I feel (and I think, look) age-appropriate, have begun to definitely feel the aging. However, I've also made more serious efforts towards good nutrition and exercise and am feeling much healthier than other periods of my life. But mentally, I'm incredibly presently aware of every day and how uncertain any future days with anyone, let alone myself, actually are.
Your concern for racism is admirable. How do you feel about the racism in the Quran, does it require a few well advised changes too?
Again better option than the rest of shared hosting industry where a company of 50 or 500 can lurk into user space and for courtesy take a look what is going on. I see CF promoting ZeroTrust services and I believe they use them for themselves first hand. Any digital information is always prone to compromise, whether it remains in my pocket or in the bunker of Area51...
If I summarized what you said into one word: decency. Would that be okaysh?
Interesting considering formal verification is often pointed to as the only solution to understand all possible failure modes.

Reading this is sobering because I (ignorantly) assumed the only obstacle to success in formal verification was complexity (and the cost of complexity and few people able to do it).
Assuming you’re on your way to deliver them much-needed clean drinking water while typing this comment?
https://theintercept.com/2021/11/03/coronavirus-research-eco...

Isn't this a very important part of the context? And shouldn't we be sceptical when it comes sources directly from the state or industrial complexes?

We live in a realpolitical but PR narrated world.
Could also be something like that:

https://scarybeastsecurity.blogspot.com/2020/12/the-cleveres...

I remember reading some article I can't find again about a very unusual floppy protection that involved nonstandard floppy format, something like non standard sector sizes that could be read by the hardware but not written, and the protected software implemented some direct access to the floppy hardware to read data.
> this is table stakes level security; realistically if your DB is compromised, your encryption key probably is too, because they probably got in through your application which holds the key in memory. this just prevents "oops I accidentally copied the DB somewhere and it leaked".

Good point. If the attacker gains access to e.g. a web service that needs to access the stored secrets, they will have encryption keys and DB access.

> if you have, or when you get to the point that you have, a competent ops org, just use HashiCorp Vault.

I watched a video about Vault, but I don't see how it would help. Attacker gains access to the web service which can access Vault -> Attacker downloads all API keys from Vault. Or is there something I'm missing?
Non-paywalled version - https://archive.is/kQ6Hl
Auto-Clear ChatGPT History
Dogs have replaced children for most people.
TeX82 is written in Pascal. I study it a lot because Knuth wrote it but other than that I have not really touched it. It is a fairly nice language though. Albeit dated.
To be fair the lab leak theory implies those working at the lab knew what they were doing, had a decent idea of the risks, continued to do so anyway, then were incompetent enough to allow the leak to occur. Or worse, deliberately released it.
Viruses spread from animals to humans with some regularity all over the world and such an occurrence doesn't imply incompetence among those who should know better etc.
I had one of these! Very cool piece of technology, but a slew of papercuts (buggy app, connectivity issues, poorly designed charger) made me give up on it after a couple weeks.
I don't know what you mean by assigned to the IC, but at my last job our team's ICs wrote the OKRs for our team.
> I think that 68% of the participants being women probably indicates that self-selection might not be the right model for this study

That did seem strange.
Wow, that takes me back. I learned to program on a PET and would have devoured this book had it been available. As it was one of our math teachers was tasked with teaching the computer classes bu didn't have any programming knowledge beyond input/output, loops, and simple calculations. Books and manuals were hard to come by.
Tangent:

I recognized the domain and tried to remember why, and now I remember.

I'm working on a game, and babelstone.co.uk has probably the world's most comprehensive (and high quality) set of runic fonts:

https://www.babelstone.co.uk/Fonts/

https://www.babelstone.co.uk/Fonts/Runic.html

https://www.babelstone.co.uk/Fonts/AngloSaxon.html
Sometimes the entire specification really does exist before you start. Certain kinds of software applications have not had substantive new functionality in decades, so everyone knows what a complete implementation of it looks like.
Linux in 2023: my speaker is buzzing
Just to clarify, because the nuance is getting lost, they are not suggesting it was lab made. A naturally occurring virus can be studied and then accidentally leaked from a lab.

But yes, there's no indication that the US is trying to cover anything up. And China is secretive about all sorts of things, they're an authoritarian government.
For me the geopolitics are a lot more adversarial than that. For ex can't use FB or Google in China why - its American espionage against Chinese citizens. The question is why America (via Apple/Google) are allowing TikTok to spy on American citizens.
OP already stated that the initial distribution would ~seem to be ~50:50 per winchcombe meteorite
I don’t see the difference (and frankly the need for) scorecard and OKR.
I am one of these managers the majority of the comments here complain about. I lead teams and tried to implement twice OKR. Overall the idea I think is good as it makes everyone start thinking how to work with outcomes instead of objectives. The major problem is that without a good strategy doing OKRs is very difficult.

But back to the problem: Objectives (O) should be inspirational and Key Results (KR) are measurable outcomes.
The examples given for scorecards can very well be KRs. Instead of a weekly review we just use dashboards where everyone can see how we perform and we review OKR quarterly.
How sensitive are the secrets? How often will you be rotating them?

Are the secrets sensitive enough to encrypt them at rest?

Keeping the lock (the encrypted secret) and the key (the decryption key) in two separate places makes it slightly harder for an attacker to recover the plaintext secret, but also means you need to take the necessary precautions to not leak the key accidentally.

Sometimes, we can't even trust our system to be secure enough to prevent the key from becoming compromised, so Hardware Security Modules (HSMs)[1] became a thing, something with, presumably, a smaller attack surface that holds the key and can be used to decrypt the secret.

[1]: https://en.wikipedia.org/wiki/Hardware_security_module
Just clarifying my take (can't comment on what others think): I think the "Chinese people eat weird stuff" narrative is also racist and dangerous. It's not a dichotomy, and in the absence of evidence, I would rather avoid both.

My personal belief over the last few years has been "it could be zoonotic transmission through food, it could be a lab leak, it could be something else. I don't know, so let's wait and see."

Also, as a side note: non-Chinese people eat weird things too (and even worse - sometimes live with animals inside their homes). For example, the Black Death in Europe and the 1918 Flu pandemic which likely started in the US both had a significant zoonotic component.
They are demanding full statehood instead of union territory (not a nation): https://www.deccanherald.com/national/north-and-central/lada...
Weird how ChatGPT popped up as a newly hyped Next Big Thing just as crypto crashed. Probably not worth thinking about.
Reddit thread ( https://www.reddit.com/r/videos/comments/11ci88y/lock_pickin... )
Again, it's about needing a catalyst. People suffer through much worse. What Elon did and the subsequent behaviour from alt-right uprising was enough not to just cause some people to leave but gave the vocal people with large followers a reason to voice their concerns and use it as a means to pull their audience to Mastodon. People would otherwise not have followed them and they'd essentially lose the audience they built. The cult leaders still need their followers. Without them, what are they? Crazy ranting folk.
>At least with the laws, there is more checks and balances.

I rather consent to regulations by an entity that I can influence and beholden to me (in principle) than one that is profit driven.
And how to break the browser's back button.
Different jobs stress different parts of your body. You can't dodge it, but you can find out what stresses your job exposes you to and try to reduce it. For instance, if you stare at screens for long periods, you can ease the strain on your eyes by using dark mode and night shift, and switching to an e-reader for lengthy articles.

But there's one thing that people often overlook, and that's working out to strengthen your back and shoulders. It can work wonders for reducing pain in those areas.
Whatever Google was doing with Dragonfly was to comply and gain re-entry to China, we can assume Bing has to do whatever Google was supposed to do.
> While you did so very politely, I don't think it's the most proper thing to tell people where they should post, thanks.

My suggestion was intended to help group related threads together, thereby helping people reading the comments. I also see it as an area where reasonable people may disagree.

What I don't follow is the rationale of disliking the request itself. If I may ask: by what standards do you find it inappropriate?
> How does it really matter though?

I’m seriously baffled how people say this.

It’s it obvious that if true then BSL4 virology and gain of function work needs international supervision and agreement for humanity.
This library provides API for creating huge Sqlite indexes at breakneck speeds for millions of records much faster than the official SQLite library by leaving out crash recovery.
Non existent. A figment of antiwoke imaginations
I offered people working in a call centre environment to learn crm administration: gradually, with all the support they may need, etc. We would have transitioned them into new roles once they gained some knowledge. The pay in new roles would have been higher than they'd ever get in the call centre environment.

There are lots of things people can learn in a relatively short period of time that would benefit them. It may not be financial reward at first, but being able to draw the necessary insights, do things faster and more efficient are beneficial the many.
It's just software. It takes skill and labor to achieve the outputs you want. Is someone who uses photoshop all day not an artist? Or someone who writes text for a compiler not a programmer?

You've got a huge blind spot if you think prompt engineer isn't already a thing.
I dug around a little and found an example [1] on a reddit thread looking for examples of spaghetti code. Most of the examples on the thread were just badly written code. Irreducible spaghetti code tends to be complex state machines that cannot be rendered well in a flat format. People like to flatten those out with a trampoline pattern[2], but that can hinder performance.

Malicious spaghetti involves transformations such as

for (x = 0; x < 10; x++) {
for (y = 0; y < 20; y++) {
printf("%d %d\n", x, y);
}
}

|
| DRY
v

x = 0;
loop_x_head:
condition_val = x;
condition_stop = 10;
condition_var = 'x';
goto check_condition;
loop_x_body:
y = 0;
loop_y_head:
condition_val = y;
condition_stop = 20;
condition_var = 'y';
goto check_condition;
loop_y_body:
printf("%d %d\n", x, y);
increment_val = y;
condition_stop = 20;
increment_var = 'y';
goto increment;
loop_y_end:
increment_val = x;
condition_stop = 10;
increment_var = 'x';
goto increment;
loop_x_end:
halt;
increment:
increment_val++;
if (increment_var == 'x')
x = increment_val;
if (increment_var == 'y')
y = increment_val;
condition_val = increment_val;
condition_var = increment_var;
check_condition:
if (condition_val < condition_stop)
goto pass_condition:
if (condition_var == 'x')
goto loop_x_end;
if (condition_var == 'y')
goto loop_y_end;
pass_condition:
if (condition_var == 'x')
goto loop_x_body;
if (condition_var == 'y')
goto loop_y_body;

[1] http://wigfield.org/RND_HAR.BAS

[2] https://en.wikipedia.org/wiki/Trampoline_(computing)
> I just can't believe how idiotic such a thing is.

Well, you do you. That's old world thinking for a field that's going to dramatically morph into something that barely resembles what we have today.

I'm hiring a contract prompt engineer for my startup.

If you want to help us achieve better "TV replacement" results, send me an email (see profile).

https://fakeyou.com/news (early demo, more coming soon!)
> just as crypto crashed

Did crypto crash?

Last I looked BTC was at 20K USD a pop ... strange definition of a crash for something that used to trade below a dollar.
This sounds like the job for a linter or intellisense editor.
to the death? really? What about your family? your dependents? Sorry love, it looks like you'll have to pay the mortgage.
Regarding the speakers: https://social.treehouse.systems/@marcan/109917995005981968