skysight-inc/HackerNews huggingface dataset:
You could be right. If you look at the old code, dsa_gen_k(), that was removed during the commit (https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=c...), it does basically no bounds checking, presumably because at the time it was written it was assumed that all modulus values would be many fewer bits than the size of a SHA-512 output.

So it would have been pretty easy to just reuse the function for a modulus value that was too big without encountering any errors. And the old code was written 15+ years before it was used for P-521, so it's entirely possible the developer forgot the limitations of the dsa_gen_k() function. So maybe there's another lesson here about bounds checking inputs and outputs even if they don't apply to anything you're currently doing.
After the Great Moderation Holocaust, it is no surprise that Reddit has ham-fisted themself tidily and neatly.
If this is what you think conservative means to an american politician (or journalist) you are frankly not informed enough about the context to have a useful opinion on this subject.
We spawn a Postgres instance on the fly if it isn't already up in just a few hundred milliseconds. Cold start times are always something we try to improve.

(Neon engineer)
A complete aside, but I just realised that putty is named after the old fashioned adhesive clay used to cement window panes into the frames of windows.

PuTTY… Windows… gosh I feel dumb. I’ve used putty for almost 25 years but didn’t put two and two together until I just remembered how the pheasants in my garden would peck out the window putty to get at the ladybirds hibernating underneath.
I don't have a substantive comment to offer, but good on Simon Tatham for the clear and forthcoming write-up. No damage-control lawyerly BS, no 'ego', just the facts about the issue.

It's reassuring to see a solid disclosure after a security issue, and we too often see half-truths and deceptive downplaying, e.g. LastPass.
Why would a welding laser have anything to do with moore's law?
You can switch Voice to use IP only through the app/web
Sure, but this article as about the US
The source data doesn't clearly indicate the phenomena being pointed out on Twitter though. And the graph on Twitter cites that url as it's data source anyway.
Tormach metal CNCs are $10K+ and take up a lot of floorspace.

A lot of people also cut sheet metal which a CNC tends to be terrible at.
I made a resume with Prezi that landed me a pretty great job, and then never used it again.

It was really great for that one use case: something the recipient could click through and continuously be surprised by the complexity of without having to know the tool. Click. Wow! It got bigger. Click. Woah! It got bigger and rotated!
Really helpful. I found challenge in getting a Windows system (no admin) into a state where i can use it productively, and having a functional ssh-agent was one of the remaining pain points.
I'm not sure how much fiction reflects reality, but it seems like in every Chinese novel I read, the majority of officials are corrupt and greedy. The worst of them usually get in trouble, but a lot of them get away with it.
> Where did I imply that it is?

You used 13 as an example in a response to my comment that was:

Isn't modulo the same as truncation when dealing with powers of two?
A sleep study is more than just monitoring your blood oxygen.
I’m not convinced that healthcare really counts as being downstream from housing. The ludicrous utility pricing in some places (PG&E territory in California, for example) also appears to be its own special disaster that is largely independent of housing or even labor prices in CA.
George.merloc.co
He is available for work.
It's not a game but I'll take any opportunity to plug Overdrive 2 for the Mega Drive:

https://www.youtube.com/watch?v=gWVmPtr9O0g

That system has no business producing any kind of 3D graphics but they did it anyway.
The availability of internet service providers typically varies by state and even by city. In many cases, your choices might be limited. Often, you may find yourself restricted to a single cable provider, with the possibility of DSL, but not much else, unless you consider wireless options. Installing a wired line can range from very difficult to nearly impossible. Cities might impose a moratorium on new installations, often due to lobbying, and even if installation is permitted, the costs can be exorbitant. For example, the cost of laying new lines can reach into the hundreds of thousands of dollars, with service providers generally unwilling to cover these costs. One recent quote I saw was as high as $160,000.
I just have a visceral reaction every time I see "SMS" anywhere. It's a garbage human verification method (hello boxes of SIM cards available in [certain markets] for spare change), it's a garbage 2fa mechanism (especially when its the only one). It's a garbage platform through and through. I don't care if I burn karma here, it's the worst technology that I'm forced to use on a regular basis. And I hate seeing it defended and used in new places.

s/garbage/[stronger words]/g

I mean, it's not quite as cheap, but even now I can provision fungible, resellable eSIMs, non-wholesale, for less than $5. Throw a little HS + acceptxmr, sit in front of Airalo/holaSIM/etc, or just figure out who their upstreams are. It's all a complete and utter farce.
Good.

If they're going to migrate my data to an entirely new file system, I want that tested as thoroughly as possible. This happened during the update, when you can't use the phone by definition, and was removed completely before the update finished. Who cares, it's running the middle of the night.

Well, I care. I'm glad they did it, the migration went off without a hitch when they shipped it, I doubt I was even aware it had happened right away.
You can't tell what specific textures it's trying to replicate when it's enhancing detail. It's not magic, but the specifics are uncontrollable.
Actual spec, for those who don't feel like emailing an Excel file to get their free copy: https://technicalwritingexpert.com/wp-content/uploads/2021/1...
1) dev-requirements.txt

2) pip install . (optionally with -e)
One Day a Year – My Love – A Pop Ballad Emotional Love Story
Wasn't this pretty much the UI/UX for microfiche, when it was still a thing?
ALWAYS GOOGLE THE ERROR MESSAGE, with context about what you’re doing!

I encountered this, too, but the fix is quite simple.

That service is set to “manual” by default, (or maybe “disabled”) and setting it to “automatic” then starting it will get you running.

It is unlikely that this is a corporate lockdown measure.
Germans Warm to Digital Payments
If I may give the perspective from the other side of the job board, here in France: We pay hundreds or thousands per month, and are flooded with immigrants applications, none of which we can drop before ensuring that they do, indeed, need a visa. When I say flooded, it’s 99% of applications from foreign people who need a visa (and discrimination by address is equally illegal).

So yes, we have quantity over quality with those job boards, LinkedIn and so on, and we had to hire someone to deal with the flow.
Ant colonies self-organize, but they don't do any useful computation for us. What meaningful sense is there to calling things computers which aren't machines we've designed to compute for us?
Our Sales team would be happy to talk through pricing with you. Do you have any suggestions on where we could clearer to people like yourself who are in the same position?

Storage costs can be calculated as something along the lines of:

size of current database * retention period (configurable) + compute hours

(Neon engineer)
I don't know <- this is the advice
Kconfig: Add some hidden tabs on purpose
> "we were trial migrating your whole file system … consistency checking it … reporting back to us whether the upgrade was 100 percent clean, then rolling it back"

Actually doing the migration then undoing it is very much not a dry run. I assume they included an "if anything goes wrong, restore everything from iCloud" check or something, because otherwise an unexpected flaw in migration/rollback could mean data loss.
Free speech absolutism is an interesting bag because it necessarily implies that people also have an unlimited right to censor others as that is also a form of speech.

So many issues can be broken down along the freedom vs liberty axis and this is one of them. One group wants the fewest restrictions to be imposed, freedom from, and one group believes that freedom of speech is best protected when the people who want to speak are able, freedom to, and that necessarily implies some rules. If you're someone who has argued for the principle of free speech that exists beyond 1A you're likely a freedom to kind of person.

So the question is whether speech is in issue like chess or driving where rules make the experience better for everyone or whether it's like free association or movement where it's better for everyone if the government has no say in the matter. I'm of the belief that it's the former but I recognize that the opposing view is also reasonable and has strong arguments supporting it.
Government could also create an environment where it's easier/cheaper to build on property.
We're talking hobbyist grade stuff here. People mount router bits on $400 CNCs and cut metal all the time.

Not $10k: https://youtu.be/w26DHMccicE?t=637

Even though it's cheap, the cuts still look pretty smooth and precise. I can't speak to the safety, as I would hope a $10k CNC would have more safety features.
We have a few people self-hosting Neon in this thread who are in our Discord's selfhost channel. Might try jumping in. We don't have too many docs related to self hosting at the moment.
> (1) I don't fault them for not wanting climate skeptics to be able to launder the prestige of being published in the IPCC to lend credibility denier narratives

Yikes. Suppressing scientific skepticism has always gone so well in the past.
If you haven't already, this is probably a good time to switch to EdDSA keys. EdDSA signatures don't require RNG nor modular math unlike ECSDA signatures.
> I also think you should be able to get a phone number without ID at all, which would preclude verification in those cases.

While I agree with you, this is already not the case in much of Europe where an ID is required to obtain a sim card.
Um, please explain The Merchant of Venice. c. 1600 in an England which basically had no Jews.

Or the Edict of Explusion c. 1290.

Or the Jews being under the direct whim and jurisdiction of the king. c. 1066

I can go further and further back ...

Anti-semitism is old.
Los Angeles Warehouse Vacancies Climb to Highest in a Decade
Even in the black market of SIM swaps, that is a lowball offer.
"great for your estate" is a great way to put it, had never heard that!
Neon is a managed serverless Postgres offering.

"Managed" means we take care of Postgres administration.

"Serverless" means that your database isn't running if you're not using it. We put computes to sleep after a certain amount of time. We can also scale database resources up and down as needed.

(Neon engineer)
The Perfect Paragraph (2011)
Probably a lot cheaper to get it from Nepal.
Show HN: Squirrels – A Scalable Framework for Dynamic API Endpoints
Hey All!

We've just made Squirrels, a Data API framework packed with features like dynamic SQL & Python query generation using Jinja templating, cascading parameters, and in-memory caching. We've also tried to use a project layout similar to that of DBT, so that people familiar with it can get started quicker.

It's published on PyPI along with comprehensive documentation. We're on a mission to evolve it into a full-fledged solution, and we'd love your feedback. Give it a whirl and let us know how it fits into your workflows or where we can improve.

Check out the GitHub page: https://github.com/squirrels-nest/squirrels

And dive into the documentation/home page: https://squirrels-nest.github.io/
I actually think that probably is the correct approach. It seems like studios are releasing their 4K Blu-rays in HDR by default now, and it is absolutely worsening the viewing experience for a large majority of consumers.

Somehow the transition from SDR to HDR has been messed up in a major way, for which I can't think of any similar equivalent. E.g. there was never any "step backwards" in going from 480p to 1080p or 4K, or from stereo to 5.1, or from h.264 to h.265.

But the rollout of HDR has been bungled catastrophically. The content is technically fine but the hardware side has been a disaster.

If I were the movie studios, I would seriously think about releasing 4K only in SDR until television manufacturers start showing HDR at full brightness again, and release software updates to fix it in existing models.
Wasn't it because she lied about it?
RFC6979 attempts to guarantee that the nonce is unbiased (under the assumption that HMAC's output is indistinguishable from random). It's definitely attempting to give a stronger property than simply preventing a repeated nonce.

See step (h) in Section 3.2. The nonce is selected by rejection sampling. Thus, under the above assumption about HMAC, the result is indistinguishable from uniformly random in the [1, q-1] range.
Are you saying that ChatGPT is actually lazy? Like , “it’s Sunday and I don’t feel like working” kind of lazy?
I'm so confused how this works, but based on this animation I found, it seems like it just shoves the water sideways in the direction of thrust, then turns so it's cutting though the water in the opposite direction https://www.youtube.com/watch?v=Ub563Yc3xls
Well paid politicians do everything to get reelected rather than doing everything to increase general welfare.

Also as others have commented, even well paid people do shady things. TFA isn't an endorsement of higher wages, it's a denouncement of our terrible collective security and authentication protocols.
npm i ollama
There's an official Ollama JavaScript library for the non-python AI folks! Node people - now is your chance to experiment with local open models from the comfort of a client library :)
Still seen swaps with Google Fi. Efani is a much better option if you actually want protection. I am a cyber lawyer and that’s our recommendation to any clients who care. I can’t recall if Efani is throttled on AT&T or Verizon as MVNO, but one isn’t. Easy to ask them.
That’s one read of the implicit brackets here, and maybe the intended one, but I think the ambiguity next to “fear of legal consequences” might make a lawyer a bit nervous.
Lots of things sounds like a better option when you remove the constraints of actual human behavior (see also: economics). Unfortunately human behavior is what it is regardless of whether your strategy accounts for it or not. So again, for the cheap seats, therapy is a complete waste of time in 100% of instances where the individual in question isn't genuinely pursuing change.
Ask HN: What's It Like at Intuit/TurboTax on Tax Day?
(Very US centric question around tax day / April 15).
I've always wondered what it's like to work on these products at Intuit/TurboTax (or competitors) that get such high demand seasonally and on one day specifically. Is it an all-hands 24-hour event? Any crazy stories of things breaking? What's something that the normal user or tech person wouldn't realize?
> I wonder why they went for this custom JSON/HTTP approach instead. Maybe they feel that they can't expect developers to understand anything other than POSTing JSON.

Its simpler for them to build and operate since it fits their existing API (and user validation, quota tracking, etc.) infrastructure, its simpler for them to update their SDK to handle another HTTP endpoint than to build an AMQP or STOMP client into the SDK for this feature, its easier for most consumers who aren't using the SDK, and a message queue interface for this one bit of functionality would offer minimal benefits. Easy choice.

(If you are consuming from an environment where you are alreayd using AMQP or STOMP, sure, build a quick adapter for the HTTP interface. But I don't see any good reason OpenAI should have done one of those instead of HTTP.)
Google Voice too. No human tech support. It's kind of weird how having no human to talk to can be a good thing in these high security matters. No social engineering attack surface.
SMS based OTP has been known to be unreliable way to authenticate someone because exactly this type of social engineering hacks.

All software providers and the industry should ban SMS based OTPs as a standard practice. Either leapfrogging to a Passkey implementation or just time based OTPs.
Yeah and we could have a pretty interesting conversation on the success rates of court-mandated rehab programs.
> Probably in a way that is most favorable to LEOs.

I think this makes sense. Would be bad if every time a police officer tries to stop a crime, suddenly 20 hard of hearing people need to crowd around him really close in order to record him. Oh look, the criminal got away again. There are situations where different laws will conflict, and I hope in those situations crime prevention and safety take precedence.

Modern phone cameras are really good and 25 feet isn't very far. Seems like a good compromise so that cops can do their jobs but there can be some citizen oversight.
I think a lot of people are forgetting that most of this customer service is being outsourced to other countries.
Great, I'll check it out. Thank you again!
> As you can probably see, I just love this bug class, is all.

I agree! DSA nonce issues are a great class of cryptographic bug in that they're sort of weirdly unexpected failure properties when you first hear about it.
Despite being fairly old, many systems still don't support eddsa. As an example, the reference browser/ca spec doesn't allow it: https://cabforum.org/working-groups/server/baseline-requirem.... Last I tried, even let's encrypt won't grant an ed25519 cert despite it being in tls 1.3 (2018?).
https://archive.is/pQxhA
> some mistakenly bad corporate policy trying to micro-manage which Windows services are allowed to run.

Actually, I'd say that's a good corporate policy.
The point is that she was already rich. High pay doesn’t stop people from doing crimes.
Only a silicon valley programmer... and virtually every modern(ist) government in the past 150+ years?

Attempting and failing to centrally control cities has been a recurring motif for ages. I'd love to say it's changing, and maybe it is, but not nearly as much as it should.
I think the real turning point was the introduction of Postgres extension in 9.1 (2011).
One of the things my several decades on this planet has taught me is that "the more things change, the more they stay the same".

For example, people like to say that computers or the internet have changed the world. In some ways they have, but in most ways, for most people, the world is not very different at all from what it was before those things. We just have some new toys in it.

This is what I expect from AI once all of the dust settles. Mostly more of the same as it ever was. There will be winners and there will be losers, but on the whole...
Our fork of Postgres is located at https://github.com/neondatabase/postgres.
Liquibase and Jenkins.
That's because they've lagged the past decade and are just now trying to catch up. Compare CA's grid, which already has a sizeable amount of grid batteries: https://app.electricitymaps.com/zone/US-CAL-CISO

Two posts on HN today about how CA is already running 100% renewable during the day. Of course CA won't be adding too much solar now, they already have, and just need extra batteries, of which they already are at #1 for grid battery storage installed.
Just listen to our boy, The Algorithm...pure genius! https://www.youtube.com/watch?v=zwG97ah0mEU
The Game Theory Behind Stock Based Comp
I mean, even if Media Matters were enormously biased… that’s _legal_. “An advocacy group was mean to a very special billionaire” is simply not something that governments should be getting involved in.
While I appreciate this being shared, I sure hope the nice people at technicalwritingexpert.com have the "written authority of an officer of ASD" to reproduce and/or publish this information!
Just so we’re clear: getting shot is quite a bit worse than having your phone number stolen.
* The Chronicles of Amber (10 volumes)

* CODE - Microsoft Press

* Snowcrash
To start, a good talk therapist who can help the client learn to face those negative emotions, and to come up with a plan on reducing the escapism (which itself functions like an addiction to diversions). Dopamine is the reward hormone, so excessively escaping into novelty or thrill-seeking or other self-satisfying stimuli functions like an addiction even without consuming substances. A good experienced therapist should be able to work with the client on mindfulness techniques and somatic awareness of emotions to help the client navigate. In extreme cases, where the client is unable to focus and control their urge to escape or obsess, the therapist might refer the client to a psychiatrist who might prescribe bupropion (Wellbutrin) or some similar dopamine regulation drug to bootstrap the therapeutic process.

And here’s a good video by Andrew Huberman on dopamine regulation and optimization - he’s big on lifestyle changes before medicating (as am I). But it’s really hard unless you’re committed to doing the work on yourself:
https://www.youtube.com/watch?v=K-TW2Chpz4k
Send a message to the SIM card saying “do you want to move”

If you don’t respond then it takes 48 hours to move.

If you say “yes” then it moves

If you say “no” then whoever asked for the move has some questions to answer
Yeah seen that before. It’s definitely impressive but it’s worth noting that there are a few 3D games for the Mega Drive. Albeit games like Virtua Racing did have additional chips in the cartridge (I have a boxed copy of that cart sat behind me).

The Master System had stereoscopic 3D games too. As did the Famicom. I have both of their respective 3D addons too. Missile Defence in 3D is pretty cool. Hard to believe it’s 30+ year old tech.
What software provider or industry group is in a position to enact a ban on an MFA strategy?
LKML: Zebediah Figura: Kernel interface for Wine synchronization primitives
Non-archive.org link: https://lkml.org/lkml/2021/1/17/312
I have had some low frequency tinnitus clusters over the years permanently go away after losing 50 pounds
It's interesting to me how doing this for technical documentation feels like a smart idea and makes me happy, but doing this for non-technical communication immediately sets off every 1984-style dystopia alarm in my brain.
Yeah, but say I am an attacker doing some kind of brute force password hack, and I have a certain number of successes.

Given the funnel there, it might well be worth it for me to put some energy into figuring out who the person at the other end of that account is. Phone numbers aren't secrets.
> suddenly 20 hard of hearing people need to crowd around him really close in order to record him

It’s already against the law to interfere with an arrest. A mob of people surrounding officers attempting to arrest someone is already illegal, whether they have cameras in their hands or not.
Would you also discourage posting links to paywalled content?
Addressing Government Seizure of Domain Names
How has the Belarusian regime been able to shut down opposition websites by seizing their domain names? There must be regulations in place at the domain registrar level that prevent such actions. Are there any existing mechanisms or precedents for stopping a government from controlling and redistributing domain names? How have similar situations been addressed in the past?
I was not aware of any of those projects - thank you for pointing me in the right direction!

goose3, trafilatura, newspaper3k (and newspaper4k even) all look like great tools. We were not planning on rolling our own, but that might be the right way to go after all. Thanks again.