rogers18445

SAT/ACT are basically poor IQ tests, because study for them results in heavily loading onto memory aspect of IQ but unloading on some others somewhat.

Ideally, you would want an IQ test and the 'Big Five' personality traits. The latter though can be annoying to get.

I have seen some firms get very good results by basically using a disguised IQ test, there are some firms that basically compose the tests, give them to 1000s of people and perform the factor analysis to extract IQ from the test, then contract the the test out for hiring departments. Some of those tests are pretty creative in that most people wouldn't know they were taking an IQ test.

proper FDE (inc. swap) on linux turns hibernation into a cryptographic lock.

This is false. When doing a hash commitment you include some randomness along with the value.

What is the actual value proposition of HE? The purpose of encryption is to hide information, if you are able to to do any meaningful comparison between two encrypted records, you have an information leak, and encryption has failed.

It seems to me that sway is intended for power users, people who know exactly what is going on with their linux from boot to window manager, and thus have no difficulty configuring whatever they desire.

If sway adopts opinionated defaults it will mess with people who don't care for those defaults. Perhaps there is a way to do it such that opinionated defaults immediately turn off in the presence of configuration but as far as I can see there is no interest in this.

When you 'exec sway' it inherits the tty env vars... So just stuff your vars into whatever .profile the tty loads when you login after boot. This has never been a problem I spent any amount of time on.

If you are doing something magical like auto starting sway or something, then you need to make sure that a .profile is loaded by whatever is starting sway if it doesn't inherit a .profile.

Would only make sense to do if the browser exposes an optimized argon2 API to web apps. And it would have to be argon2 or some other memory hard hash for it to not be a joke.

There is no magic. If entropy got injected in between getrandom() calls you get that entropy - it does not matter if the entropy is cryptographically scrambled and 'merged' into the kernel PRNG state.

All you have to do is 'merge'/'absorb' multiple getrandom() results over some time t into your userspace PRNG, with t big enough to allow for multiple reseeding events by the kernel. You are in effect getting samples of the new entries into the kernel entropy pool indirectly by doing this, sampling too frequently is wasteful however as you are just going to be sampling the kernel CSRPNG with the same entropy in its state most of the time.

Doing the above is actually the only way to properly seed your userspace CSPRNG if your userspace CSPRNG has a state larger than the kernel CSPRNG (kernel's is 512 bits I believe) otherwise you will be working with a 512 bits of entropy as an absolute maximum even if your CSPRNG is capable of holding more, at least until reseeding (both the kernel and the userspace PRNG).

If your PRNG state is is x bits, if you initialize it with less than x bits of entropy you are starved.

Since you cannot know how many bits of entropy getrandom() would give you and when it itself is reseeded with fresh entropy, you usually have your userspace PRNG sample getrandom() for some amount of time, after which it is considered initialized.

And it's wrong. If you initialize your own PRNG properly with multiple reseeds you saturate the entropy pool of your PRNG and subsequent reseeds are only relevant for ratcheting and state compromise proofing.

This assumes you aren't starved for entropy on initialization. If you are, it would imply a constrained environment and you are better off using getrandom() then.

There is always the option to reseed userspace PRNG with with getrandom() regularly. This makes userspace PRNG safe and more versatile than getrandom().

You don't control the myriad of routers between you and your server, and between the server and its destination. One reason to use commercial VPNs is to at least attempt to launder your packets.

Preference falsification on a large scale can be observed in the statistics supplied by that site.

In that case I would advice you to read a book about game theory, lest you be cursed to live your life in perpetual confusion about why the world is the way that it is. Cloaking this confusion in "We need to get past this childish philosophy" and "start acting like responsible adults in a society" etc.

From the point of view of the manager/executive, layoffs should almost always be unexpected to the workforce. You have nothing to gain otherwise and potentially something to lose. Such as morale (contrary to stated 'preference', workers that haven't been fired during a layoff aren't unhappy, and those who were fired no longer matter) and potential sabotage - some subset of to-be-fired workers know they will be fired during a layoff.

If they suspect and sue it would come out during discovery. There is very little you can do to hide that fact at any point.

If you open multiple connections to an sqlite db from a single app you are a bad developer, full stop.

We have server app on a single beefy server servicing ~100,000 simultaneous users with avg user action per second of 0.2 (~20k actions per second) requiring some ~60k sqlite writes per second.

A single thread handles that with message passing with little load. We estimate we can handle 5-10 times as much without changing anything. That's with SSD's and standard OS caching. With either an in-memory db or using zstd compressed ramdisks the limits are ridiculous.

Is there anything stopping Google from just making up their own TLDs for their browser?

I have seen it suggested to use one table per db to minimize lock contention and simplify backups/vacuums. Do you know if there really is nothing to lose with ATTACH spam? Any tradeoffs at all?

It would appear that sqlite is merely "deceived" by a secondary client, its normal operation is not affected. https://litestream.io/how-it-works/

Keep in mind that sqlite is most likely the most tested 100k lines of C code in existence. They have tests covering WAL behavior.

In that case, you need to provide additional information. Because this coverage is not consistent, since renewables are intermittent and storage appears to be a dream.

In that case the metric of how much power the state requires in the context of renewable energy is useless. Instead state the % of overall energy production in the state being renewable.

the editor "micro" can be used as a pipe editor. it's a feature. And without using temp file tricks as vipe does. echo 'test' | micro | cat

The correct analogy would be suppose I give you a block of an encrypted uncompressed image. And you return K(encryption_algo_with_key) + K(image_compression_algo_with_compressed_image)

You are pushing it. 1000 words is 10 bits of entropy per randomly chosen word. 70 bits of entropy is probably crackable by a government agency.

Edit: I checked and unless I mixed some zeroes somewhere it looks like the current bitcoin hash rate of 200 million TH/s can crack 92 bits within a year. log (200,000,000,000,000,000,000*3600*24*365) / log 2 = 92.35

You use a 2048 word dictionary (a random choice in that wordlist represents [log 2048 =] 11 bits of entropy) then you generate a random string of 132 bits to be your cryptographic seed which is a sequence of 12 words from the wordlist which you memorize.

From that seed you can generate for all practical purposes an infinite number of private keys for any and all purposes in existence. Using cryptographic one way functions such as a hash or PRNG.

Example: truncate_as_needed ( sha512 (seed | 2022 | wallet_title | priv #123) ) = private key #123

Currently there doesn't appear to be any evidence that GMO is bad for your health and most GMO is just transplanting genes from other edible organisms.

Hopefully regulators aren't going to allow insertion of engineered genes producing novel molecules without going through actual medical grade trials for those molecules. Or it may torpedo the entire industry.

That drama has ended, he was demoted from dictator. Now things are chugging along with multiple contributors like most other projects.

For me Void seems like a very good distro, I think of it as a naked kernel with runnit init and xbps as the package manager, nothing gets in the way. It also has the nice property where the git repo is the distro in every sense.

What history is that and why does it matter today?

You could already do this with Mullvad. Use an extension such as Sideberry which allows different proxies for different containers. Then use Mullvad's socks5 set of endpoints.