skysight-inc/HackerNews huggingface dataset:
You mean things like thinking that the vaccine harms of something nearly the entire world has received which was being said would kill people in two years time is more dangerous than the thing that actually killed millions of people during the last few years?

It would be pretty weird if there were major political parties denying the science like that, or even picking who they would vote for as a leader based on the person agreeing with their magical thinking flying in the face of empirical evidence on that subject.
I was going based off the commit link posted further down the thread (https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=c...). You're right that the PuTTY deterministic nonce generating code does appear to significantly predate the RFC, but it sounds like the developer made a conscious decision when 6979 came out not to switch from what PuTTY already had because they looked similar enough. The PuTTY release that introduced support for elliptic curve cryptography (and introduced this vulnerability) was 0.68, which came out in 2017, 4 years after the RFC.

You're right that this was not an RNG security problem and instead was a problem with not understanding ECDSA nonce rules. However the notable fact for me was that the developer was apparently aware of the recommended way to deterministically generate nonces prior to the vulnerability being introduced and made a choice not to implement the RFC because what PuTTY was already doing seemed close enough, without fully understanding the implications of doing so. To put it another way, understanding ECDSA nonce rules would have avoided this vulnerability, but so too would implementing the RFC recommended way even if the developer did not fully understand why it was better than the existing implementation.
Money taken like that should not be spent on necessities of life but on luxuries of life.

Sylvia Bloom, master of insider trading, disagrees.

https://en.wikipedia.org/wiki/Sylvia_Bloom

Sylvia Bloom (c. 1919 – 2016) was an American legal secretary. By copying her bosses' investment decisions she secretly accumulated a significant fortune and donated the bulk of it—US$8.2 million—for scholarships for underprivileged students upon her death. She lived modestly in a rent-controlled apartment, and even her closest friends and family did not know about her wealth.
On top of the uncontrolled acceleration it's designed in a way that is extremely deadly to pedestrians.
I think the trick is to either get governments to fund basic research for a reason other than national defense, or get them to fund it for that reason but then never use the weapons.
In the README there is a section title "On the shoulders of giants" that probably points to the main reason for C++. This project is a layer overtop https://www.openvdb.org/
2FA is broken.

If I want to get a new cell phone number, I am absolutely fucked on everything. This isn't sustainable.
Custom properties are great until you need to access them from JavaScript and realize it’s impossible and are sent back to the drawing board.

After building countless design systems with CSS/SCSS/Tailwind/Svelte/SASS/PostCSS/etc, I’m convinced that CSS as a separated language in separate files needs to die.

I’m building an experimental design system in pure Typescript and I feel like I’m finally able to free my UI from the Stone Age.

I’m sure I’ll be back to the drawing board again soon enough.
It's possible to implement this efficiently using light tracing - the final value in the image is the (possibly transformed) contribution from each light source, and since you have the spectrum of the light source you can have the spectrum of the pixel.

Until you encounter significant dispersion or thin film effects, that is, then you need to sample wavelengths for each path, so it becomes (even more of) an approximation.
One case where scale to zero can help is if your main branch scales to zero, that means more compute hours for your non-main branches.

FWIW, Neon is really "just" Postgres. I can't think of anything Neon specific that would lock you in, other than that we don't support certain kinds of extensions yet. But if you were going to use those extensions, then you probably wouldn't have picked Neon in the first place. I also wouldn't consider that a lock-in. Do you have any examples that you might be aware of in Neon? Postgres compatibility is something that we take very seriously.

(Neon employee)
Did you have a pin on your account?

One would hope it’s not possible to swap unless that is entered, no matter how
corrupt the employee.
Excluding Nuclear/Hydro, 35% of California's energy is from intermittent energy. Germany is around 45% so there is room to grow. I suspect it will get more and more expensive to scale past 50% -- the state will be required to keep all of the non-intermittent energy infrastructure for cloudy days.
These standards are fortunately an actual easy download elsewhere.

It is really irritating that what should be the authority on these documents does require going through hoops. Particularly as we're talking standards, which should be implemented as widely as possible.
> if you absolutely have to do SMS for some dark pattern "harvest my customers' phones"

I had a bank that asked for my phone number when I sign up, and I gave them a landline number that is not capable of receiving SMS. Some years later, without any input or authorization from me, they decided to enable 2-factor using this landline number. It was super annoying.

My other bank accepts Yubikey. I wish more banks would do this.
I do it via LinkedIn - I track how many views and search hits I get in a week, then switch up the resume, see if I get more the next week.

I have zero guarantee that this works, btw. But I figure if I'm not getting the results I want, I may as well change things up and see if anything changes.
My bank offers 3 choices for MFA; not sure which of #1 and #2 is more secure:

1. Password + SMS one-time-password

2. 4-digit pin + 6-digit TOTP

3. No MFA

They do, at least, offer the option of disabling automatic password-resets via SMS code, but I know from experience that you can authenticate yourself to a CS rep with just name, SSN, and a SMS code, and presumably a CS rep can reset your password.
Why didn't they just call them light sabers? Such a missed opportunity.
I was hoping that this was going to be about zooming contexts rather than renderings. It would be much effective to me if I could zoom in/out of contexts like on a distributed system diagram, and zooming in and in, until I got to a code browser for part of subsystem I wanted to change, and have those changes immediately effective, like a REPL but in the style of Smalltalk image.
I'll throw out an idea that seems simple to me...

An *opt-in* option to require that lines on your account can not be moved to a new SIM unless the current SIM is offline as far as the cell grid is concerned.

This could even be made into something that customer service could be blocked from overriding.

If someone steals your phone, they try to get it into airplane mode as fast as possible to avoid activation locks.
If you drop your phone in the ocean or off the side of a cliff, it's probably not going to remain working for long.
If you're concerned about losing it somewhere where it'd remain active but you'd never find it, then don't opt in to this.
I’m surprised the article failed to mention Lambda Power Tools, an open-source project supported by AWS that can simplify many of the challenges discussed here. For anyone involved in serverless development, Power Tools provides essential utilities that make your workflow more efficient. Definitely worth checking out: https://docs.powertools.aws.dev/lambda/typescript/latest/

There’s pros and cons of sharing a log group across all Lambdas or having a group per Lambda. Since each Lambda should be single responsibility, I’ve found having separate groups to be helpful from an operational perspective.
Is the orbital airship ever intended to return to the upper atmosphere or do you just build a new 1-2 mile long ship for each trip? How would it slow down?
It’s not a strawman if thats exactly what the people being referred to will say.

But semantics aside, I agree that addressing their actual concerns is more productive. And there is no way to guarantee that.
> So if you were given a choice between handing me over your wallet, or me knocking out all your teeth (literally the example in the link I provided in another comment), you'd choose me knocking out your teeth?

It's not analogous. Of course I'd hand my wallet over. The better analogy is asking if I would hand my wallet over to protect some stranger's teeth from being knocked out, and that's a "it depends" situation. I don't want to be extorted. It's not about the money.

I mean, there's a reason that DHS typically does not negotiate with terrorists; they don't want to create a system that incentivizes people to try and extort money out of them.

> In the post above this, I literally said ignoring the call is preferential to either "scamming the scammer"

That is not a solution. If we "ignore the scammer" like you suggested, they will be beaten in the same way because they are not extracting money. I already explained that and you decided it wasn't a point worth responding to. This is why I said you didn't actually provide a solution. You didn't really "explain" why it was preferential, you just asserted multiple times making vague allusions to the idea that somehow the scambaiters wasting time is going to lead to more violence than people ignoring the call.

> On one end you can simply try to lift the veil of ignorance and recognize the complexities of the issue and on the other extreme, you could go to Cambodia to actively work against it.

That just sounds like even more vigilantism, and puts yourself in serious risk. The only thing that would make any sense is to get the authorities involved.

> The irony is that my point is that "scamming the scammer" is short-sighted because they do not take into consideration anything past the immediate interaction.

The "larger consequences" of what the extortionists do are beyond the scambaiters control.

What you suggested instead is to just lightly fund this extortionist operation, enough to keep them going so that they don't beat the trafficking victims as much, until the "systemic" solution comes out.

> Apparently, you think losing money is worse than being physically harmed. I disagree.

People commit suicide because of these scams. People have their entire lives ruined, and they will continue to have their lives ruined. It's not just money; they have their identities stolen, they're blackmailed, they're made destitute. The scambaiters wasting time isn't going to save the world, but it might prevent just one person from having their life ruined, that's a good thing, and it's better to not fund terrorists just because they threaten to hurt more people.

That is why I said what you were suggesting was ridiculous.
Social media threads also seem like a much poorer lever than a blog post or journal article.
Having a pin on your account before a swap (or any other action is allowed) seems like a useful barrier to entry.

Then a corrupt employee needs something they won’t have to execute the swap.
In the defence of TLA+ I was a complete newbie.

I mention it only because certain parts of the experience shared the maths-looking big-sequence-of-ands-and-ors one sometimes sees when dealing with complex type systems. TLA+, very sensibly, lets you break up complex statements into multiple smaller statements and give them names.

I was simulating the behaviour of two ends of a communication channel which had been designed with a bidirectional message number/acknowledge/timeout/resend mechanism. And both a hardware and a software state machine on each end managing the message queue in each direction.

The experience was in equal parts brilliant and frustrating. Brilliant because it did reveal faults in the design that probably couldn't have been found any other way. Frustrating because (for example) if you represent your timeout mechanism as a counter on each end of the link and which can only count from 0 to 2 the check will succeed in a few seconds. But if you change the timeout behaviour to count from 0 to 10 the check will take a lot longer. I don't know exactly how long because I aborted the run after a week. And there was no real indication of precisely why it'd stopped completing - I basically had to undo my changes one line at a time until I figured out what was going on.

TLA+ also seemed to have some sort of TeX integration. So a lot of the documentation is written in TeX - it's a fine way of writing math I'm sure. But sometimes the documentation told you how to do something and showed an example statement with a dot, yet you couldn't copy-and-paste the example from the documentation into your code, to express it in your source code you had to use something like \cdot or \circ instead.

Interesting stuff to try out for sure. And impressive given the size of the team that works on it, which I gather is tiny.
The premise of the article is that Ukraine is not being able to disable tanks using conventional ways anymore because of lack of artillery shells. Also, "NATO official" tells nothing about quality of this report, it could be some clerks opinion.
There's nothing illegal about this, although Hacker News for some reason has the peculiar belief that there is.

Any contract purporting to prevent an employee from earning money elsewhere is an illegal restraint of trade. Indeed the company would be the criminal if they tried to write this into their employment agreements.
Permissions improvements have been duly noted by others, so expect that work to begin sometime in the near future.

Reducing our COGS is very important, and also something that we will be working on. I would definitely reach out to our sales team for a more custom quote.

(Neon engineer)
Wow, genius, just tell people not to break laws, why didn't they think of that...
Either the company is making money or I'm keeping the money. For some reason people like it when the company makes money. I like it when I get to keep them.
> If you do it yourself (I did) its a reasonably straightforward webapp

As far as I can tell, on online option doesn't exist in the US. It must be done in person at the courthouse.

Q:Can you file for divorce online?

A:Online divorce services cannot independently result in a legally recognized divorce

ref: https://www.lawdepot.com/contracts/divorce/?loc=US
Many utilities have much better rates for charging off peak anyway.
But elliptic curve support and this vulnerability weren't introduced until 2017, and the commit log (https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=c...) makes it clear the developer was aware of the RFC but chose not to upgrade the 2001 code. Doing so prior to the elliptic curve support being added would have completely avoided this vulnerability.
I mean... I can remember, off the top of my head, IPv4 DNS servers: 1.1.1.1 4.2.2.2 9.9.9.9 and more! Those are pingable as well which is just great when troubleshooting IPv4

I'll be damned if I can remember a single public IPv6 DNS server.
While realpolitik and unfortunate compromises always have to be made in the arena of current geopolitics towards greater prosperity and lesser violence, you'd be mistaken to assume everyone has equally cynical goals.

Despite everyone wanting to boast about their good deeds and demonize enemies for PR points, some actors genuinely do a better job towards prosperity than others, and you fall prey to the worse evil by equating everyone just being selfishly bad. No one is even close to 100% good, but that means we need to highlight what amounts each actor does good and what they do bad; all of them.

> Russia has a story of the west systematically stripping their influence from Eastern Europe, overtly and covertly.

Ultimately, this is bogus and not the real story. It just takes one look at Poland's GDP per capita chart: https://data.worldbank.org/indicator/NY.GDP.PCAP.CD?location...

Poland broke off the old soviet chains and successfully integrated economic reforms to prosperity and trade with other successful western economies. Ukrainians are Polish neighbors and looked over there wondering "why tf are we so poor when the Poles are flourishing? Oh ya we still have these old soviet apparatchiks gouging our economy, let's instead make the western economic reforms a la Poland." Russia, being an 85% vote dictatorship and also a soviet apparatchik economy, realizes that just like Polish neighbors, having economically successful Ukrainian neighbors will cause average Russians to resent the exact same thing about their old stodgy economic oligarchs and ruin their golden tickets..."

There's a special place in hell for people who espouse "don't help Ukrainians, their government and economy is corrupt" when all they need is some support to take off the corrupt shackles, which they're trying to do, instead of abandoning them to remain strangled by the corruption.
Police unclaimed bike auctions maybe.
You honestly feel this way about your bank, your cell provider, your health insurance company, your insurance company? When you read your bills, and see countless arbitrary fees, do you feel as if you're in a personal relationship with the service and in control?

The small shop owner or tradesmen, sure. The giant corp with no human connection and nothing but a walled presence? No way.
Yeah I certainly get the appeal, it's analogous to the way people are still making new FPS games using the actual Doom or Quake engines rather than something modern set up to imitate them. Though that also brings its own practical problems when trying to ship a commercial product, so you've really got to be in it for the love of the old school.
They'll address this kind of issue manually, provided your story makes it to the Hacker News front-page.
This vulnerability has very little to do with P-521 per se. The issue is with ECDSA: any use of ECDSA with biased nonce generation, regardless of the elliptic curve it's implemented over, immediately causes secret key leakage.

(Rant: All these years later, we're all still doing penance for the fact that Schnorr signatures were patented and so everyone used ECDSA instead. It's an absolute garbage fire of a signature scheme and should be abandoned yesterday for many reasons, e.g., no real proof of security, terrible footguns like this.)
I'm sorry, but there's no way around it, with 5W you can cut metal just as easily as you can cut a tree with a knife. At least with contemporary technology (In the future who knows).
Illuminatus trilogy: https://en.wikipedia.org/wiki/The_Illuminatus!_Trilogy

Knuth's TAoCP.
TRAMP is unusable if you have a high-latency connection. The UI thread blocks for a few seconds after every operation, which are really frequent if you use a complex configuration.
The remote SSH plugin makes high-latency connections bearable, it's not perfect, but IO operations run in the background and so the UI thread does not block.

I expect rewriting Emacs to use async IO to be a massive effort. It's difficult to write async code in Elisp.
I missed it was [0,15]

This doesn't make 13 a power of two. I'm aware of rejection sampling; my point was if you have a N bit value X and want M bits, truncating X to M bits and X MOD 2*M is the same. Neither solve the problem where M > N, which is what TFA is about.
This claim in particular is impressive

"Data collected from crossing structures with wildlife fencing throughout North America indicate up to an 86-97% DECREASE in wildlife-vehicle collisions upon affected roadways.”
> Censorship merely for the sake of censorship has been the incipient downfall of Reddit for around ten years

Can you say more about what you mean?
I have blacklisted Microsoft after all the shady, user-hostile tricks they've pulled in the last 5-10 years. They'll have to work extremely hard just to leave that blacklist.
1. Winnie the Pooh to kids on their third or fourth or fifth birthday.
2. The Mythical Man Month to non-tech bosses.
3. The Moon is a Harsh Mistress to girlfriends (it's a test).
4. "Get It Together: Organize Your Records So Your Family Won't Have To" to 70+ old friend (single) and 70+ old sister (single).
> We are the world champions of strikes and yet, somehow, doctors rarely go on strike. I do not know why.

When talking about public healthcare, strikes mean little. State won't care unless the strike is massive enough to attract media attention. Hospitals can't close down, a "safe" minimum of workers must care for patients so not a big problem for the state generally.
Amazigh: A story from the people of the Atlas Mountains [video]
Right, the reason I'm splitting hairs is that in my intuition, the whole rationale for 6979 is to eliminate the possibility of fully repeated nonces, for instance because your RNG is "unseeded". You can still end up with a biased nonce even if you're using a perfectly seeded random bit generator (as you can see here). But yeah I think we understand each other.

As you can probably see, I just love this bug class, is all.
We have a few web apps which are really PWAs. Due to Apple’s poor support for PWA discoverability, we also ship as an iOS “shell” app that loads the PWA. We haven’t had pushback from Apple on this. It has the advantage that we can still develop this is a web app while being able to publish in the store. We also have options if Apple were to change policy in the future since our apps are web first.
As a mod, I would have been happy if they'd invested that money into better mod tooling much earlier. Even now, it sucks.

Or perhaps open an API to moderators, limited to the subreddits they moderate. I'd love love love to have been able to do more from Discord, but nope.
Neon is more than just Postgres with a storage device. It's a managed service with features like branching, autoscaling, bottomless storage, etc.

People who really find Neon valuable usually partake in our "differentiating" features, so if all you need is a managed Postgres, there will definitely be more competitive prices out on the market.
This is what happens with the obliteration of true philosophy and the rise of intellectual philistinism. The sciences fragment into parochial principalities, and without recourse to genuine metaphysics, they elect some preferred field to take its place, making a metaphysics out of its method. In the physical sciences, physics is elected to that position. Mind you, neither physics as a science, nor any of the sciences as such, necessitate this, but scientists, like anybody else, cannot function without an arche or orienting first principles, and in our culture, materialistic metaphysics is insinuated into the background intuition.
Reminds of "fugi film": the standard development make the colors brighter than reallife. The customers liked that better, even if less accurate.
Yes, that and WEI
Yes, we have great APIs ( https://neon.tech/docs/reference/api-reference ) and a Terraform provider ( https://registry.terraform.io/providers/terraform-community-... )