jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
With the exception of vector #6, this is pretty much a list of implementation flaws, not protocol flaws. It's as if he's trying to say that the protocol isn't written defensively enough or foolproof enough for implementors, and he might have a good point if he simply said that, but he never did.

Even with an OAuth library for the nuts and bolts, to implement an OAuth2 authorization server requires grokking the spec.

Vector #6 (Phishing by spoofed client) has always been particularly interesting to me, and it applies to both OAuth2 and OAuth1. I dont see it as a protocol flaw but an attack vector service providers need to be more aware of.

While OAuth2 was in draft, I reported it to Facebook, Google, Twitter and the OAuth WG. Facebook addressed it by displaying the domain name of the client on their authorization dialog, but they eventually got rid of that. Google also acknowledged the vulnerability and said they would rely on policing registered clients to catch it. Twitter never responded. The WG asked me to propose text for the security considerations document, but I dropped the ball (too swamped) and couldn't do it in time.
I have a scar from a poorly-stitched cut on my finger from a "vintage" fan. I wasn't trying to stick my finger in it; i was absentmindedly directing it away from me and my finger apparently missed the cage and interacted instead with the blade!

Glad I still have that finger. It didn't feel particularly close to being severed, it just cut to the bone and then pushed my finger out of the way. Kinda NBD, but ER visits to teaching hospitals are always annoyingly slow...
What the EU should really do is fine / tax monopolists like Google and Facebook into submission then invest that money into the EU-based startup ecosystem.
In my little world, MySQL was popular because we could get enterprise level support directly from MySQL. It was the default choice from that point on. I don't know if that has changed. AWS changed that pretty quickly.
It could be also that the sales person did this on his own initiative for a couple of extra points. It might not be standard practice, but we'll never know.
Yes, it makes real wage cuts instead of catastrophic job cuts more practical when particular forms of work lose market value, which also reduces the degree to which future risk of decline needs to be built in up-front to wages.

But it's a blunt instrument. Providing tools to aid those workers adversely affected by those market shifts, whether by declining real wages or lost jobs, is the role of fiscal, not monetary policy.
This only prevents Google from harvesting IP address of the users. They don’t need that information to tell if the place I’m going is bad.
Both wander and lust are also English words, albeit with slightly different shades of meaning, so it should be comprehensible to a non-German speaker who has never encountered it before, whereas Kummerspeck would not be.
It shouldn’t be that hard. I’d drop the one day a week in office requirement and make sure you’re paying market rates (e.g. £100k+ for mid level devs). Lots of good people looking to go fully remote right now.
"Mercedes-Benz is recalling more than one million cars over a safety defect with the cars' emergency call system.

"The problem is with the cars' eCall feature, which alerts emergency services of an accident and relays a vehicle's location to them.

"But a fault means it is possible that the wrong location could be sent."

Jeez. More than one million cars in the United States alone have been affected by this. Mercedes says it's planning recalls in other countries also.
StockTreasury | Remote | Full Time | Frontend (Typescript / React)

StockTreasury | Remote | Full Time | Backend (Java / Golang)

StockTreasury | Remote | Full Time | Head of Marketing

Headquartered in Tallinn, we are a company aiming to digitize the traditional pen-and-paper market of Stock Ledgers. We help small business comply with laws as having a Stock Ledger is a legal requirement for Corps. We are hiring
for multiple roles, building up the dream team to accelerate development of the platform.

Join our small (but mighty) team of engineers and entrepreneurs!

Our Stack: GCP, AWS, Typescript, React, Java, Postgres, Flutter

Write to us: hiring (at) stocktreasury.com
Do you know about the lightning network? it can improve the fees problem in repetitive use cases
"Functional"? I suppose you meant "procedural" :)
Hm, diminishing the importance of exclusive ownership? Sharing and optimization of utilization? Doesn't sound very American or capitalistic to me. What's next, long term sustainability and planning? Sounds like socialism, if not communism!

It is kind of ironic that now there is a for-profit, commercial product based on the concept that has been so stigmatized during the Cold War. Perhaps rebranding is what it will take for a less consumerist, less wasteful and more efficient society that can survive global warming and overpopulation.
I would argue that at scale and density, Airbnb has the chance to create a community like this.
> Idealism? Surely. But many anarchists would tell you that anarchism is an ideal, a goal, more than it is a destination to be arrived at in short order.

It always struck me, that so many people discard the idea of anarchism either as "a teenage rebel idealism", terrorism, or simply "not going to work". Hence they go back to capitalism or however things work today.

But in the end, what anarcho-communism is trying to achieve is what most of us would agree with: eliminate poverty and exploitation (via equal rights to access means of production), let people have control over their own lives, direct democracy and self-organization. And when people say it's not going to work, it saddens me that we are not even trying to move in that direction. Of course, it may not ever happen, but innovating in this direction surely could lead us to a better world.

Of course, don't take my word for it, as I'm obviously biased. Instead research the topic if you're interested.
I started using it (consistently, all day) with ~22 after learning vi and emacs during my degree (that's 8 years ago). I stuck with emacs for the PhD and now for work, but I'm using evil lately to get text objects. I don't think emacs or vim are that hard, you get used pretty quick to anything you do all day long (I'm now using Acme to write go, as an example of new things)
I just changed the random number bit, not the 10000000 part, and it took ~100x longer. No idea why.
Third party authentication should be the norm. Leaving authentication to providers that absolutely know their shit, just like we leave payments to third party services.

Of course, that requires a decent protocol, and Mozilla is doing the world a disservice in not marketing Persona better seeing as it's the right solution....
given the use of bcrypt for password salt/hashing, I'd say any attacks from here may be targetted to specific users, or those with really weak passwords (top 10k password list) run through wouldn't take too long on a distributed cluster per user. How much that opens up, and how that corresponds or overlaps with slacks password requirements will vary.
CSS does specify a tty media type. I've never been able to find an implementation for an actual tty though.
Or just the application. Generally, it's much easier to convince apps to give you the data instead.
SEEKING FREELANCER - REMOTE

YC company needs your help building an awesome technology for iOS developers

We are a stealth YCombinator company getting ready to launch a new technology for iOS developers. We need help from several iOS contractors in providing short-term feedback on our product. This may be the easiest bucks you'll ever make: all we need is 3 hours of chatting with you via video call & watching you use our tech in XCode, and 5 hours of work on your own building an app with our technology. We‘ll gladly pay whatever your regular hourly/daily consulting rate is.

### Requirements ###

- At least 1 year experience building native iOS apps in Objective-C

- Experience with Core Data or SQLite/SQLite wrappers

- Willing to sign an NDA

### Work to do ###

- Jump on a 2-hour screenshare with us (via Skype or Hangouts) on a weekday between 6am and noon Pacific. We will monitor how you discover our product and start using it in XCode.

- Complete 5 hours of work on your own building an app with our technology

- Jump on another 1-hour video chat with us

### To apply, please email timanglade+ioscontractor@gmail.com with: ###

- your resume or linkedin profile

- (optional) links to relevant work on Github or the App Store

- your rate

- your geographical location

We'll be very efficient in the process: basically if we like you from your initial application, we'll move straight into the 2-hour call and go from there.
Location: Southern California

Remote: Yes

Willing to relocate: No

Technologies: Python, C

Email: rajansaini@ucsb.edu

Looking to do something math-heavy part-time. Interested in applying math from ML to other domains (am currently obsessing on a maritime shipping optimizer, if that's any indication of my interests). Controls and robotics are very interesting, too. Computer vision/embedded background, currently interning at Amazon. Looking to do some freelance work from January to June 2022.

Bonus points if you need neural networks sped up (pruning, sparsifying, quantization, etc.); that's been a past research focus!
When I go looking for a source I see a lot of "may be" and "soon will" but I've heard one capability of the F-35 is to command drones without connection to base stations, since radio relays can become (lets say) unreliable in open war. There are also offensive capabilities against enemy drones, remember when Iran landed a US drone by hacking it? Whose to say that any drones in the vicinity of an F-35 aren't captured mid-flight and turned against their own team?

https://en.wikipedia.org/wiki/Iran%E2%80%93U.S._RQ-170_incid...
At least three things happened:

- congressional oversight increased, with the result that the purchasing authority is no longer generally the end user. We aren’t just buying a ship (plane, gun, etc.), we’re maintaining a logistics and manufacturing industrial base to produce that type of item (and maintain jobs in congressional districts). So maybe we should buy a few more tanks/ships/bombs than we need so that we don’t forget how. (A bit dubious, but it’s one of the reasons we make the funding decisions we do.)

- risk tolerance shrank. Especially in war time there was a high tolerance for risk if the payoff was big enough. These days our risk tolerance is basically zero. I once had to get an admiral to sign off on a risk hazard assessment with an estimated likelihood of ~1e-18 (you’re more likely to win the powerball jackpot twice). There was a cap that might pop off an item at high speed during flight, and if it hit someone they would probably miss a day of work. By the likelihood/consequence framework for risk management, that meant it required an admiral’s signature. You can’t move fast in an environment like that.

- complexity increased. Old schools systems like a WW2 jeep were designed and prototyped in 40 days because they were incredibly simple and made liberal use of COTS parts. There’s an argument to be made that maybe we don’t need such complex systems to meet requirements, but I don’t think anyone is arguing that we should be replacing all the F-35 fleet with a WW2-style aircraft. (Although there have been proposals to build super-simple aircraft for CAS missions, etc.)
Where's the line between the Chinese population and the Party's indefensible acts? Will more expensive food in China help to resolve this [or are Canadian ag exports re-exported]? I say this because I'm not convinced sanctions have been effective in cases like Cuba, Iran, etc
There's a vast difference between legitimate, legal, welcomed immigration and invasion sanctioned by foreign states that results in the creation of an occupied territory, but you already knew that.
I know the difference, I am kinda dyslexic. Thanks anyway.
It wasn't a substantive comment and it used inflammatory rhetoric- that's a bad combo for HN. If you had included specific information about what problems you saw, that would have been more interesting.

https://news.ycombinator.com/newsguidelines.html
Why would it be a benefit?
I'm more worried about the bio side than the nuclear side. Look how much trouble one virus with a 1% death rate caused.
It's encouraging that RNA vaccines are fast to develop, and the amount of RNA vaccine production capacity in the world is being ramped up fast.

Making nuclear weapons isn't that hard any more. It used to take entire cities of factories to enrich uranium. Now it takes a facility about the size of a WalMart SuperCenter. URENCO's enrichment plants are about that size.
A hot war is most certainly not impossible. Just because nuclear weapons might be off the table doesn't mean conventional bombs aren't. And frankly, even nuclear weapons might not be off the table fully.

Desperation leads people to do strange things.

China really is a sort of "early 1900s Germany" stage, which is rather frightening.
Am I the only one surprised that some of their targets don't even have 3 nines as availability? That's some pretty crazy stuff when it comes to how serious the context is and considering the availability of cryptocurrency transactions.
Not at all. Given the history of TLS implementations, I would call "There are exploitable vulnerabilities" the null hypothesis, and require extraordinary proof that a particular TLS implementation doesn't have vulnerabilities.
Pretty cynical of Twitter to monetize his tweets with gay abandon and then shut down his account now that he's politically weak and has indicated he's not going to run for a second term. The specific violations they have cited are very mild in comparison to many other tweets in the past. Ditto for Facebook. I suppose they feel like they can strike with impunity now these people are going to be shown the door.
My post was supposed to be over the top sarcastic, sorry for not including the /s
One could make a fairly good argument they already do.

Especially if you watched the testimony from that professor explaining how Google shifts search results to push GOTV in certain distinct counties while excluding others.
https://www.youtube.com/watch?v=wSTHgoaVtSw
Can you hack into his Rolls Royce? It should have better wind shield than expected.
I’m not knowledgeable on this topic. But I always dreamt of “optical” processor that does OR AND XOR functions. And I thought it was impossible. Because you can’t do this with photons.

So when this article claims that optical CPU of the neuromorphic type has been reached, were photon based CPUs always real and practical?
Here's one from the Chinese Embassy in US that literally supports a genocide.

> Study shows that in the process of eradicating extremism, the minds of Uygur women in Xinjiang were emancipated and gender equality and reproductive health were promoted, making them no longer baby-making machines. They are more confident and independent. https://t.co/lykDhByEiL

https://twitter.com/ChineseEmbinUS/status/134724760209453465...
FX for the common man is recent. It's the new housing: access to leverage.
The interest rate in question here is probably the long-term rate, which is unlikely to go to 0. That would indicate a wide-spread belief that interest rates will remain at 0 for the foreseeable future, in addition to current interest rates being at 0. It's difficult to imagine a situation in which this would be true.
Stay tuned. Something for your website is on its way :)
Yes, I was under the impression this would be automated. I'm sure many parts of demand management probably is, but the manual intervention involved to keep things under control during simultaneous mass tea breaks surprised me hugely.
Philosophical inquiry doesn't necessitate an adjudication on morality, politics or regulatory climate. It can simply be a formalization of concepts observed in a system.

Bitcoin doesn't exist without human input, it requires active agents to engage it. So even if the rules are set in the code there is an element of humanity embedded in the protocol. Just look at the core developers. I can guarantee you they have a philosophy on what should and should not be done during maintenance and major upgrades to the protocol.

But if you want to reduce the definition of philosophy to those things you mentioned, I'm happy to rephrase: the philosophy of Bitcoin is thus that there is no philosophy. Think of it this way: if you have a rule that says you have no rules, you still have one rule that there are no rules.
This is where you need to separate the data from the encryption, and where external hardware based authentication becomes useful. If you have a hardware authentication you can destroy the device without losing data, and depending on the ease of getting a new device hold up the ability to access said data. There are all sorts of things you could look at wrt securing/destroying the device, GPS location etc.

If you were to have the devices be stored / issued from somewhere outwith the jurisdiction of your state you might even have something that could stand up to the law. But then you have to worry about someone tampering with the devices - but by that point you're up against intelligence agencies and realistically you can't do anything to stop them - after all your device is Tempest secured, air gapped from the internet etc etc.
> advertising this thing to obstruct police investigations

You mean, like a lawyer?
Whatever Beaglebone is running right now, it seems.
"He was the dog" story was best :)
I’d suggest cancelling the conference altogether.
All of this is true, but people drastically overweight the recent past when predicting the future. The world is littered with cities that were global or regional hubs in the past. Things can change.

This problem gets worse when the past becomes an argument for not taking the necessary steps to mitigate any potential change.
Looks incredible, more competition for Roblox and Minecraft is a great thing.
Sure but most volume is already institutional, and especially during after hours, there is nearly no retail activity.

So, if "the street" took their profits after the earnings release, a different part of said street was buying.
It might be worth mentioning that Scala now compiles to 3 different targets:

- JVM

- JavaScript (Scala.js)

- native (Scala Native)

The tie to the Java ecosystem has significantly loosened over the last few years.
Regardless, "spending" Bitcoin in an economy where Bitcoin isn't the dominant currency will, on average, result in downward price pressure.

Unless you restrict the transactions to only be among Bitcoin users, which isn't going to happen because the providers make their money from exchange fees.

It's strange that so many commenters are going through mental gymnastics to pretend that the only rational thing to do with Bitcoin is to buy or trade it, but never sell it.
As opposed to having the government do what? Have a great COVID response? Have a coherent industrial policy? Have great fiscal management? Have financial integrity? Grant monopolies to service provides (ahem Comcast) instead of building proper infrastructure? Not building sufficient electrical infrastructure? Enticing poor young people to make terrible money decisions relative to school and then saddling them with non-dischargable loans? Spending money to fight endless wars? In the middle of a pandemic pass a bill that sends millions overseas while Americans can't pay their medical, food or housing bills?

I will take the capitalist over these government clowns any day of the week.

Moderna created a vaccine in less than a day. Even with a year to think about it, my state and county still can't decide where the mass vaccination site should be located.

Our government has coasted for too long and is incompetent. When the world decides to quit paying the dollar tax imposed via Fed printing, it will be a rude awaking for all Americans.
> some

Aka: the 5 people the journalist built the story around. Enjoyable read despite me being an eternal hater.
Jolla's Linux-based Sailfish (descendant of Nokia Maemo) runs on Sony Xperia 10 II (2020 device), https://jolla.com/sailfishx-5/
Possibly. I'll check it out again when I have a chance. Perhaps there have been improvements in the past year.
Great point. Seniority and job title vary greatly based on company size. One of the things I would always find so odd. I'd speak to friends at larger companies with the same title as me, Software Engineer, and the way they spent their time would be so different - hence why we like to think about work differently - currently in Workshapes.
Nothing beats the sound of ICQ messenger for me (hello late 90s early 2000s).
I've been using BlueAir (have the original one that looks like a tank) for 20 year and it has been fantastic. I live in NYC, so the air can get dirty and the BlueAir def makes a difference.

And I've never even had to change the filter in 20 years! It is that good! Kidding - change it about every 6 months.
Bitcoin futures are running at about 25% per annum carry.

They absolutely can find counterparties to take that trade, but it would be much more efficient to trade in the spot markets.
The real question is if they have custody operations setup to handle the coin.

I expect they outsource these backend operations to the likes of Coinbase, Gemini, or Fidelity.
They probably won't allow customers to transfer their Bitcoin out until they move custody in house, which is no easy task.
> The bigger the organization, the slower it moves.

That is in some ways true. However, the ability to manage a complex sales process is a good proxy for ability to manage customer stakeholders and do the project planning and management required for success.

eg if you can't manage a complex sales process, the probability a vendor is mature enough to ship eg 2mm masks/month on time, with appropriate quality levels, and with the resources to manage production disruptions is quite low. And that's what hospital systems want to buy.
"Litestream is a tool that runs in a separate process and continuously replicates a SQLite database to Amazon S3."

Why Amazon S3? Was it a huge invention by people at Amazon, and even if so, does it assign credit where it is deserved? Is Amazon helping the open web? I don't think so.
> The startup wants to help Amazon competitors think about pricing in as sophisticated a way as Amazon does.

The catch is that if several big retailers apply the Amazon strategy, a self-reinforcing feedback loop will drive the prices for popular products to zero and the prices for less popular products to +inf. This will make popular products even more popular, which further strengthens the effect. The question that this startup has to answer is thus how they are going to keep the market from exploding and how they can benefit several clients at the same time.
It's not only amazon that does this with loss leader pricing, it its also my local grocery store with milk and bread.

For me what gives me the impression amazon has the lowest prices are their nearly nonexistent profits. Whatever's up may not the the cheapest but it's always difficult to find something cheaper elsewhere, even if it does exist.
Well sure, once you've separated name and country and postal code you've already pulled out most of the data.

The blob has been tamed to 1-2 lines, and you're probably best off giving 'line 1' 'line 2' 'line 3' fields. At this point the chance of confusion is minimal, even if you can't validate very well.
What is the best ODB2 device on the market to use with my Android?
I buy from amazon for their predictable shipping and insanely awesome customer service.
make sure its valid text - make sure you handle all the high asci characters and do something sensible with non Latin text.

I once spent the best part of a day tracking down a problem with a single bad address for a major UK directory some how some one had entered an address in Egypt in Arabic.