gabriel34

Hcaptcha does pretty well in privacy for general purpose sites

Security audits and supervisors from all parties in all steps for starters.

The voting machine prints a total for that machine at the same time that the votes are transferred to the central counting, this process is public, the supervisor from each party get a copy of the total, and one copy is publicly affixed at the voting place, so parallel aggregating from the partial counts is possible (and has been done by sampling).

Internal counting on the voting machine is somewhat validated by picking random voting machines out of the voting places and conducting a parallel voting, publicly broadcasted, on which known amount of votes for each candidate are input and the result from the machine is compared to the expected. Only thing missing that I can think of is actually doing this parallel voting on the same time and place the voting was expected to take place.

It is worth noting that some “nations with fewer scientific resources” provide their students and researchers broad access to scientific papers through their public universities and research institutions. That part of the article seems to be affirming the autor’s prejudice without a shred of confirmation

Could you share the metrics on which you as a BR are evaluated? Employee retention? Time to hire?

The same site sugests hydroxychloroquine (HCQ) is a viable terapeutic option (hcqmeta.com). For all I know the scientific consensus is that HCQ is not useful for treating COVID-19. This seems like pseudoscience stemming from cherry picked data/papers with its weakness hidden behind complexity and the large amount of references.

n.b. I have not delved deeply into the claims or the sources

This is a distributed movement, some people have been holding the stock for over an year+, others bought into it on the past few weeks. There are people who bought it as a meme stock, when it was relatively stable, as the devaluation from the market transition towards digital media had already mostly been factored into the price. Steam is not a new thing, after all. The fundamentals at the time supported the price, in hindsight it was about the lowest price the share has ever been at[1]. The CEO change precipitated other people to buy into the fad. This combined with the short overexposure counterbalanced the speculative attack from the hedge funds.

[1] https://www.nasdaq.com/market-activity/stocks/gme/advanced-c... select log scale, period=max

The irony of manipulating markets against market manipulators is delicious. This will also punish over exposed players who are probably reviewing their short positions as this unfolds.

This may, in fact, backfire in a couple of ways:

1. It may reduce societal pressure to isolate by making it seem only a minority of people are actually doing it (much like the broken windows theory)

2. It fuels distrust in media outlets. Deservingly so, even if machiavellianly this choice seems to serve the greater good.

Those fees are in a contract between the merchant and the acquirer, which is fully under EU law, therefore, if the fee cap is on all transactions, it should apply to everyone, wherever they are. I don't understand how does the location of the buyer affects the processing fees, unless either it is a more complicated issue involving all merchant, acquiring bank and issuing bank, or EU law explicitly caps transaction fees between EU citizens and EU companies, leaving out all international sales.

my isp has a built in public (captive portal) wifi network that I can't turn off. They use it to provide wifi hotspots all over the country. rf shielding is a non destructive mod I can do to block the rogue wifi

Correlation will hold between unique hashes and unique visitors to access increase in unique visitors for your campaign. Even the percentage of these accesses that are returning is likely constant. All you would be giving up is the ability to measure variation in the returning percentage across several days (even so you could probably modify the code to change the salt every x days without losing much of the privacy benefits)

There will always be value to be extracted from the invasion of your users' privacy, but you also hit diminishing returns over this increasingly invasive probing. Plausible is aiming for "good enough" whilst respecting people's privacy, and that is a good compromise IMHO.

There is a trade-off. You will never get 100% of the information without all the tracking, but there is information that represents more bang for the privacy buck.

Would you not have a acceptable error increase in your decisions with a bit less information and a lot less privacy invasion?

EDIT> I think more control to the user is better, so instead of canvas fingerprinting, shady cross-site tracking and all, I would rather have a uuid that my browser informed, but that I controlled, so I could be anonymous when I want to and be tracked when I don't care, or when I genuinely agrees it adds value.

Very cool! Nice dataset selection. Could you possibly use this as a classifier to determine the year of a given photo?

One small quibble: this is more of a Computer Vision work, not Big Data. Great writeup nonetheless

keep an eye on that list, the last seen column should tell you if this is current of ancient activity, if he/she is seeding, correlating this with times your roommate is home (or his/hers pc on) should give you a good idea of whether this is him/her or someone else sharing your IP. Another such file coming up on that list is a strong indicator as well, and could help you even if he/she is no longer seeding. Keep in mind that remote control of a torrent client is possible. If you control the router you could try getting a new IP. All this without downloading the actual file

searching for "CADT" syndrome yields better results in both search engines.

As of now, the best resource (https://www.jwz.org/doc/cadt.html) is avaiable on both search engines as the first result for this query, and somewhere in the first ten or so results for "CADT Syndrome". The best set of results (for my Google history) is in Google's verbatim mode searching for "CADT syndrome" (the link under the search bar with the autocorrected version) which includes mailing lists and release notes from various opensource projects

interestingly there is also another meaning of CADT (https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4610895/) which is less favored in google, but shows second place in ddg. Perhaps if we were into medicine papers this would show up higher in google.

Only ddg results include this (Hacker News) page and the comment you referenced (https://news.ycombinator.com/item?id=21337404)

Bottom line, both gave me useful results, ddg needs a better verbatim mode, google tracks me

One more reason is the lack of liquidity in the CEO job market.

The article touches upon but does not elaborate on one of the main reasons open designs grew in popularity: money. Increasing population density drives the cost per square meter up and having a dedicated home office, dining room, etc becomes too expensive. Sure you can have lots of rooms if you have the space, but try to cram a family of four in 50 square meters with all these environments and you end up with tiny rooms. A solution would be, as stated on the last paragraph, multi-purpose rooms (e.g. guest bedroom with office)

Off topic: this article is like a fly trap for people who comment without reading the article.

For open source community projects a better bet than a bespoke case would be aiming for the form factor a a popular watch movement, so that hackers can chose to buy or build a bespoke case.

Even worse, in the same source basic concepts have multiple definitions, partially overlapping, partially contradictory.

This is exactly why I believe C-level officers are grossly overpaid. Previous success does not guarantee future success, especially in different industries, hence they don't know some magic formula to make his salary * 1000 in profits for the shareholders anymore than a mid level manager does.

This has been subject of administration theories for the last century: https://en.wikipedia.org/wiki/Management_by_objectives#Argum...

I don't believe users will lose this arms race. I don't have hard data, but from what I observe in various circles is that the Zeitgeist is that the user/consumer attention is valuable, content is cheap, so put up barriers and the user will bounce

The sad part is that this commoditization of content ends up affecting the quality content, that will probably end up becoming a niche market. Charge per content and the user will bounce, charge per month and you have to be the biggest because of network effects (try recommending a series from Amazon Prime to someone who subscribes to Netflix)

There is a trend to use ads disguised as content ("People are using this secret trick to earn mad $$ in [oddly specific location, close to you]"), or intertwined with content that is yet immune to ad blocking(like ads in the middle of youtube videos/podcasts), but that has a higher production and negotiation cost, it will probably not be a market as big as ad networks.

EDIT: Just remembered about ads on smartphone apps which are a viable option due to the lack of user control over hardware and software. There are some solutions, but these are much harder than installing a browser extension and thus not as widely adopted.

AKA Spaghettification

https://en.wikipedia.org/wiki/Spaghettification

Keepass does have coutermeasures against clipboard sniffing (auto-type instead of copying to clipboard) and keyloggers (Two-Channel Auto-Type Obfuscation).

These are effective against non-specialized attack software.

https://keepass.info/help/v2/autotype_obfuscation.html

free as in 'free beer', supported by donations

they say they will open the code in 2021

thanks for the heads up, I'll be on the lookout for symptoms. I do believe though that the benefits far outweigh the risk in this case.

water and coffee only, from dinner to dinner

mental health and gut bacteria seem to be heavily correlated. Anecdotally, if I don't eat sugary "reward" food I tend to feel better. That is also why I adopted intermittent fasting. I tend to fell better mentally if I fast 24h once a week.

I disagree, depression is a disease, not a worldview. One can be cynical/pessimist/whatever and not have this affect his day to day, impede him from achieving goals, paralyze him or bring him to suicide. People in bad situations can have positive, active, non-depressive reactions. One can also be depressed and not care two bits about shitty people.

In ETL there are some tools to visually manipulate the data flow from one end to another. Some ETL software even allow you to visualize the effect of the changes on the fly, much like the Mario game. Solutions developed like this are easily understandable and maintainable by others even with minimal documentation (but require understanding of the business problem). But, much like normal programming, once you want to do something that exceeds the capabilities of the ETL software you are using, or when performance is an issue, you have to understand how the underlying software works under the hood. You can become really good at solving one set of problems with a ETL software once you have mastered it, but this is limited to one domain of problems. Likewise, specialized software allowing easy visualization and manipulation is usually very domain specific.

You can tackle complexity in programming hiding it behind libraries and databases that do the heavy lifting while the programmer integrates the pieces and accounts for particularities of the problem he is solving. I could envision representing library functions as black boxes and connecting arrows to integrate them, having input validation and strong typing or automatic typecasting. Still, when you get too far from the machine, you miss the edge cases, the things you can't imagine when you visualize whatever you are creating in your head, the problems that only arise when you externalize and codify the knowledge. I think this is at the core of the issue; in order to instruct the computer to do something, you have to externalize tacit knowledge. In doing so you come across problems you just can't see from too high up.

from the top of my head, marketing gimmicks at some event, air gap jump and/or data exfiltration

well, it is javascript, so you could implement something like https://stackoverflow.com/questions/951021/what-is-the-javas...

the async way doesn't seem to work inside the walk function, but the older (and uglier imo) way does

As an example here is the modified code for https://turtletoy.net/turtle/eed0f57234

  // You can find the Turtle API reference here: https://turtletoy.net/syntax
  Canvas.setpenopacity(1);
  
  // Global code will be evaluated once.
  const turtle = new Turtle();
  turtle.penup();
  turtle.goto(0,0);
  turtle.pendown();
  
  function sleep(ms) {
    return new Promise(resolve => setTimeout(resolve, ms));
  }
  function pausecomp(millis)
  {
      var date = new Date();
      var curDate = null;
      do { curDate = new Date(); }
      while(curDate-date < millis);
  }
  // The walk function will be called until it returns false.
  function walk(i) {
      turtle.forward(i);
      turtle.right(150);
      //await sleep(100); //await not valid inside the walk function
      pausecomp(50)
      return i < 200;
  }

edit: implemented: https://turtletoy.net/turtle/e99ca811ad