skysight-inc/HackerNews huggingface dataset:
I was just thinking about something like this problem.

At $work, we use multi-signature signing to move cryptocurrency around, so that at least N of M officers of the company need to sign, to prove that "the company" actually intends a movement of funds to happen. This ensures that no single officer can embezzle funds; and it also ensures that an attacker would have to do some kind of multi-target simultaneous coordinated rubber-hose attack (rather than just waiting to kidnap one of us when we go on vacation) to get access to the funds.

I was trying to think of a way to extend that kind of security to the encryption of data — specifically the encryption of low-level root-account passwords (like an AWS account's root password). Shamir's Secret Sharing is the obvious first step... but you'd also then want two additional properties:

1. the decrypted secret should not be held even temporarily by any of the parties, but rather should be held by — and used "through" — a neutral system, so that the secret is reusable rather than needing to be burned the first time it's revealed

2. the neutral system — despite being likely owned by a third party! — should have no ability to exfiltrate the password into the hands of the third party.

I think this can be workable in the specific case of wanting to use the root password as an HMAC, by doing SSS decryption inside a single-shot non-durable abstract machine with homomorphically-encrypted memory, wrapped in a network daemon: the network daemon spins up a copy of the abstract machine; receives each SSS key split from its owner, feeding each as it receives it directly into the abstract machine; the abstract machine, after receiving sufficient key splits, signals to the daemon that it is now "empowered" to sign; and the daemon can then use the abstract machine to HMAC arbitrary plaintexts sent to it, until it exits, and the abstract machine's state is lost.

The real trick, though, would be making this work for HTTP Basic Auth over TLS, by delegating the generation of exactly one TLS frame — the one containing the Authorization header — to the abstract machine; where the network daemon would then act as an HTTP proxy, inserting this Authentication header into requests made through it. Having something like this could really improve security around the use of a lot of sensitive control-plane APIs!

---

Of course, in a corporate context, you probably have a third party you can trust with the plaintext — e.g. an Enterprise Password Manager service — so you can relax property 2. In such a case, you don't need a fancy abstract machine; you can just ask said service to build a feature allowing secrets to be configured to require N-of-M confirmations by ACLed team-members to unlock them; and to build another feature for "opaque secrets" that are never revealed to anyone, but instead are injected into an HTTP Authorization Proxy that the Enterprise Password Manager service spin up themselves on their backend.

But it's still fun to think about the case where your secret is so secret that you need to hide the plaintext from literally everyone but your co-conspiriators. :)
I mean they always start running towards me when they see me!
That is a weird take. I'm pretty sure being accused of for example pedophilia can destroy someones life without a conviction.
We are moving past that phase. All of the broken games got terrible reviews and many were immediately abandoned after launch.
Discussed yesterday (360+ comments): https://news.ycombinator.com/item?id=37522858
From what I remembered, string theory proposed that the extra dimensions beyond the spatial and chronological ones we experience are also compactified and technically hidden from our perception. In another word, they exist just not on a scale we can appreciate. If you accept that then the 2D plane with the 3rd dimension minimized to the point of irrelevance is not so different.

And I don't really care about what the bacteria "think". The point being there exists an extradimensional relationship between me and the bacteria right here in front of me. So at least to me, it isn't so outlandish that there can be something above this 3D plane and I am simply too primitive to understand it.

Of course, there is no sufficient proof right now so I do not accept it as a real answer. It is simply analogical reasoning. Also, I would not say it is unfalsifiable. Like mentioned earlier, the extra dimensions are simply tucked away and not easy to detect. They still exist and with sufficient technology, they can be probed.
I go to Oxbridge but the research doesn't look like the best if I'm trying to publish some conference papers. I'll give it a try anyway, but the research in the US just looks much better.
Whats the ticker? I have a list of about 7000 of them that I filter by, its possible that ticker is missing
worth a read...

https://en.m.wikipedia.org/wiki/Friedensreich_Hundertwasser
Berlin air lift, 1948
I sincerely hope that your reports are aware of this nonsense. If not, please be a kind manager and make them aware that these BS metrics are being measured.
This Guardian article appears to be about 10 years old, but still relevant of course. A more recent article about Peter Higgs in SA also looks interesting:

https://www.scientificamerican.com/article/how-the-higgs-bos...
>so your passwords aren't on someone else's server

being able to transmit information across open or even adversarial channels is the literal reason encryption exists

This is security theater, if your security method is keeping your data local you can use notepad, you don't need to go through the hassle of setting up a password manager
>it's the lengths necessary in "the crypto nerd's imagination" that it's calling out

As well as being a classic example of a strawman, how is the "crypto nerd" wrong? Encryption cipher in these cases is perfectly transparent to the user, there is zero advantage in using something broken vs something secure. We've long, long ago passed the point where hardware symmetric encryption couldn't keep up with the speed of storage. An end user will observe no in-use difference between AES256 and ROT-13. The "crypto nerd" correctly focused on the real threat profiles. How do you supposed the percentage of people facing

>beat with lead pipe

compares with

>someone stole a phone or notebook off a bar table or from a car for drug money, if it's unencrypted maybe someone takes a shot at it, if it's not it instantly gets wiped and sold, or if it has some sort of protection against that it gets chop shop'd and the parts sold

? Which one of these makes sense to focus on? And even in the first case, how do you imagine someone is worse off spilling the password immediately with blubbering apoligies once the lead pipe comes out, vs if they never needed to be asked at all?
>> The cooling effect from SOx and particulates is short lived compared to CO2's warming.

Sure, but there's also the direct "making things die" effect of SOx. For humans this happens at much lower concentration than CO2, but I can't speak to dinotoxicity.
https://archive.ph/oDiWQ
??? How is this supported by your article? Looking at the only perf/watt benchmark (Cinebench ST), they show:

M2 Pro @ 141 points/watt
Ryzen 9 7940HS @ 47 points/watt
People here are complaining about Carrefour selling the products it's stickering. At least they're taking some steps. The supermarket in my neighborhood is much, much worse. They use dark patterns to further obscure the real price of things to the consumer. They are mandated to provide a per unit price, and they comply with the letter of the law. But what they'll do is use totally different units. The 48 ounce size of a product, going for $2.99, will be priced in ounces at 6.2 cents an ounce. But the 36 ounce size, which costs $2.10, will have a unit price of $1.87 a quart. So now you need a calculator (or at least, an aptitude for division in your head) to figure out which one is more economical. And maybe around 10% of the time, the unit price is just flat out wrong.
The flaw in your argument is that you assume people are hired to do "real engineering" instead of "code monkeying".

As you implicitly admitted, "code monkeying" is a skill. Whether this skill "matters" is really the hiring company/team's business, and none of yours.
Why do you keep calling these shaders? Javascript isn't running on the GPU and it isn't doing any rendering. If making SDF data is called a shader, all scene setup is not and geometry creation would be the same.
Indeed, it worls online fine. Also there is a stand alone desktop version, no need for keypass.

I do use keypass to save things I don't want to expose in an online service, no matter how secure it is.
That’s kinda fair, but a lot of the architecture hated on actually looks nice. I like the 5 over 1s, for instance.
They also made this mistake in the guardian article, I emailed them to correct it!
Major Trial Finds MDMA-Assisted Therapy Is Effective
FDA Approval coming in the next year or two for MDMA (Ecstasy)
> They may have had one thing originally written on their birth certificate and ended up later with different physical genitalia, at which point they could have been arrested for either breaking this new rule or some other 'public decency' nonsense.

What does one's genitalia have to do with breaking this new rule? I thought this new rule was about assigning people to the two categories of bathrooms based on their birth certificate, not their genitalia? (Not that I agree with it, because I'm assuming you can't change the birth certificate, but still).
In context it is very suggestive. Maybe you are incapable of inferences but other people are not, so I decided it was best to dispel that idea ahead of time.
There is a bunch of interesting ML stuff going on at Surrey, where I'm doing part-time PhD research now (not in ML, but thinking about it often, as it happens).

Eg https://www.surrey.ac.uk/centre-vision-speech-signal-process...

But I understand that it's not "not UK" that motivates the "US" question!
Depends. PVC tends to fail catastrophicly so if you are nnot home to get the valve off you are in trouble (odds are you are home, as pressure changes from turning a faucet off are likely to cause this. Metal pipes develop slow leaks over time so if you look at the house monthly you will probably catch issues before they do too much damage. So long as PEX isn't exposed to UV is is probably good forever (but the joints
are not).

Floods generally will not destory a house structure but it will destory the drywall, carpet, and the like so the cleanup is expensive.
they never reduce it enough for you to notice

(unless you're explicitly checking the weight each time)
Another is multi-gallon containers of protein powders online. Many contain 2/5th air at the top and are only 3/5ths full.
Yes, but no! Technically, horcruxes were backups, but the emotional weight of the concept came from splitting your soul, lessening your essence as you hedge against danger.

Partial backups follow the spirit of the idea better.

As an aside, I read the concept as an attack on promiscuity. "Whore crux". Contrast to Lord of the Rings' assault on marriage, where wearing the ring makes you invisible and slowly fade into nothingness, "like butter being scraped over too much bread".
I’m not sure about pop, but I think you could see this play out easily with a bag of chips. The bag size stays the same, yet there is less in it.
France has ordered Apple to stop selling the iPhone 12 for emitting too much electromagnetic radiation.

On Tuesday, the French watchdog which governs radio frequencies also told the tech giant to fix existing phones.

The ANFR has advised Apple that if it cannot resolve the issue via a software update, it must recall every iPhone 12 ever sold in the country.
I would tend to agree with you. Of all the horrible aspects of airplane travel, boarding is definitely not the worst. Just sit patiently until last call then saunter on. Staying calm and patient is the hard part, of course.
That takes wishful thinking to dizzying new heights!

Feels like those subprime mortgage risk markets in the mid 2000s: financial "instruments" that are incredibly complex and seem to offer amazing returns. Stated simply like that, we might wonder why so many people jumped on board, but in reality it wasn't introduced in such a straightforward way.
They acknowledged it but dismissed it with an incorrect statement, and then declared victory with "checkmate HP fans" despite actually being wrong.
> I see major development studios are fine with this change.

Even if they didn’t have their own engines, they’re all big enough that they would be paying huge amounts in license fees, and thus have enough leverage to negotiate a contract without BS terms in it.

In other news, the rental car company buying 1000 cars doesn’t do so on the same sales form used when a consumer buys 1 car.
Notice this with app food delivery as well. Smaller portions than in restaurant, for the same order on delivery, with higher charge due to app fees
In general the argument for man-made global warming is composed of

1) Humans have increased the carbondioxide content of atmosphere

2)Atmosphere with more CO2 stores more heat

3) Storing more heat results in rise in global temperaturea

All of which are points the scientific community agrees.

So you don’t in fact refute any of the above?
It is also (for me) quite a bit noisier and less readable than SQL. The join example has multiple different syntactic symbols, for no clear intuitive reason (= vs ==, {} vs (), side:left vs p=positions).
Is this fraud? And if so, to what extent am I responsible?
not austrian but I live in austria. at first I was like, okay, higher inflation post covid like everything else, but now at this point where I see prices still rising, it's starting to just feel like a blatant cash grab

HOWEVER, i will add - what do people expect when you give everyone 500 extra EUR a year via this klima bonus? how is that supposed to reduce inflation? my guess is the grocery chains are leaning into this
Sounds like http://Readwise.io
There are enough Bible thumpers in the USA at least vaguely familiar with early Christological disputes, that non-trinitarian denominations like Oneness Pentecostalism[0] were founded. But otherwise, presumably there isn’t much interest in those disputes, whether because sola Scriptura denominations would claim that mainstream Trinitarian views were already set out in Scripture and therefore no need to study the later debates, or because the patristic literature is written by obvious Byzantine Orthodox and sometimes in very atticizing Greek, both of which would make American non-mainline-Protestants uncomfortable.

[0] https://en.wikipedia.org/wiki/Oneness_Pentecostalism
my in house cat, after we moved to USA and got house with backyard that we let him roam in, once in a while, never managed to figure out trees and fences. RIP Ray.
I think this comes down to a philosophical difference in how we approach truth in the face of uncertainty. The truth here is clearly uncertain (and probably unknowable) at this point. I approach uncertain situations with a Bayesian perspective, meaning I have a certain preconceived understanding of the dynamics at play and I allow facts to shift that conception to ultimately form a conclusion consisting of how likely I believe each scenario.

In this case, history dictates that my Bayesian priors should be strongly shifted towards at least some "conspiracy" at play considering the how other leaders have been killed in the past by some conspiracy. History also dictates specifically that the CIA is capable of similar conspiracies (although this would probably be the biggest/most dramatic). The facts paint a pretty clear picture of how the assassination actually happened, but an entirely unclear picture of the motivations. Other tidbits of information strengthen and weaken these prior understandings (in my opinion they strengthen overall), but since they are only vague tidbits, the shift in understanding is small.

I believe you call this "unsubstantiated" because you do not allow history to form a prior understanding of the dynamics at play. You also seem reticent to allow for fuzzy truths or uncertainties to exist. This is entirely incongruous to the way I, and many other folks on HN, perceive the world, hence the disagreement. There fundamentally is a bottomless pit of possibilities of what happened, but this is the method in which I and many other narrow down that pit to vague likelihoods.
One breakfast cereal, one type of apples? Doesn't sound like a good place to shop.
And yet they are able to declassify some of them. Why only declassify three blurry dots in 2017 and one blurry sphere in 2022 when according to AARO they have about a thousand reports, including fifty sightings showing "anomalous" characteristics? The rather mundane-looking blurry stuff released in 2017 was captured using military equipment and it didn't stop them.
You could probably add to that quite a few long-term influential professors at prestigious institutions who were more experimentalists and tinkerers than theoreticians that may well not have gotten tenure today.
Good if it’s nationwide but that’s not the case here. You’re just going to have a city with no development besides the one carried out by government.
Wow that's crazy. What unbelievably moronic policies.
thank you for this term. I’ve been struggling lately with this topic because collusion has some fairly well defined regulatory meaning, and I’ve had to quote the term collusion to avoid some argumentative pushback. I think the rise of computation and networking has allowed for collusion at levels that were impossible 30 years ago. The biggest example of algorithmic collusion brought to my attention in the last few years is a SaaS that many landlord use that all but tells them to raise rents to bring them up to “market rates”. And I’m sure this kind of thing is becoming super prevalent in all kinds of places.
It absolutely does.

There are two questions here:

1) Can the employee use the code at work?

2) Who owns the code?

In Oracle v. Google, not even actual ownership impeded fair use. Nobody really owns the code on a public repo, so there's your answer to #1. The employee can use the code they authored and published to the world without any issues.

Now for question 2...

> what we’re talking about

What you're talking about.

You're correct that Oracle v. Google does not give any clear answers on ownership. For that you have to rely on the license applied to the project. It's simple. If you publish a project under a permissive license and your project does not contain anything proprietary, nobody owns it. Employment contracts don't have anything to do with this situation.

But, what does it really mean to "own" code? What is owned? The concept or the literal sequence of chars? It seems to be the latter which Google showed is trivially sidestepped by rewriting the code behind an API. Thus ownership is pointless in software unless it's closed source and proprietary, which is the opposite of a fun little Excel clone, amateur video game, etc.

The only thing enforceable about an employment contract is the clause about terminating an employee for working on side projects on the company time and/or with company property such that it takes away from productivity towards their work. I don't think anyone is talking about that or would even think of doing that though.
Customers are absolutely fooled by smaller sizes. I've almost fallen for it myself when a coffee package was reduced from 500g to 450. Thankfully I noticed the price per kg was off, but without it I wouldn't have noticed.
Yes, those are great stories... we were a small VC funded startup that had maybe five customers. We needed a network monitoring solution, so I built out a Big Brother network monitoring system (for nostalgia, check out the demo site: https://web.archive.org/web/20010124042600/http://bb4.com/bb...). I was told under no uncertain terms that Big Brother was not professional enough for our purposes and we needed to build out an entire NOC with HP OpenView. To monitor about 20 servers at the time, maybe growing to 100. At a cost of about $2m for the hardware, training, and facility buildout.

There was also the $1m/month rental of the EMC Symmetrix storage array (again, for five customers). When things went belly up and we needed to cut costs, we just moved data centers in the middle of the night, abandoning the Symmetrix storage array at the old facility (since the lease was covered in our colo payments).

Ahhhh those were the days... I did enjoy driving 26' rental trucks full of mission critical datacenter racks around the area as a 21yo. Fun fact: it's easier to rent a box truck as a 21yo than a regular car (at least it was at the time).
I agree, the UFO narrative is a psyop. They are shifting the Overton window on us and the questions are to what extent and what purpose.

The worst and best conspiracy theory I have heard about this is that there has been a plan to stage an alien invasion. 100% fake invasion with real explosions. You just need to get the population into the right mindset such that they will suspend their disbelief when the bombs drop and the media is showing fake aliens. Add a sprinkle of NASA magic and their new satellites will 'confirm' everything. Once you believe aliens are real, the theory states you will abandon all religion and either worship the new overlords or trust your government.

The theory sounded ridiculous to me until we had all these government sponsored psyops pushing us closer towards it.

Aliens are not real.
Thanks Dustin. Your project is very very cool and much more advanced than mine. I started height months back. I would like to include Doom ! Do you have the source code and the resources ?

Do you share some information about the software architecture ?
> Lmao it’s Oakland. In many cases you can just walk a block to the next city. That doesn’t actually prove anything.

From the PLOS article: "There were no detectable changes in purchases of untaxed beverages or sweet snacks or purchases in border areas surrounding cities."

From the post you replied to: "without countervailing increases of sales in neighboring markets without the tax."

Why do you even bother replying?
It doesn’t need to be a club. You can do something about it as an individual, including recruiting others when needed.
Or move to a different city.
Ironic, since REWE owns Billa...
Then the unit price changes.
How would someone who doesn't subscribe to a journal of physics keep up on these sorts of developments?
I saw a suggestion somewhere once that I've never nene modeled and would be interested in: checked bags are free, carryon bags cost. Make it more desirable to simply board the plane and sit down.

As someone who flies all carryon, I hate the idea, but I am curious about potential efficiency gains.

What would we do differently if we were green-fielding the entire thing, knowing what we know now? Would we even allow carryon? What if baggage was loaded into trays at the gate, and those trays were simply uploaded into the plane, and then offloaded right away upon arrival for access at the gate, entirely removing the "baggage claim" and lost luggage separation anxiety?

Ultimately without some kind of massive change like this I think what we've got is about as good as we're going to get.

And in any case: I've been screwed over by the airline itself far more often than the boarding process. Alaska and Delta keep re-assigning seats with no notice and my group finds ourselves scattered all over the plane on departure day. American I fear checked bags on because they miss my connections so often. The Southwest all-carryon experience is about the best way to travel.

Of all the irritating things about air travel "boarding process" really isn't high up on my list of issues that should be addressed.