skysight-inc/HackerNews huggingface dataset:
what a fantastically run company. a lot of cynics here but it takes a lot of fortitude and talent to run a startup with this level of mission critical reliability (else they get crushed by users and regulators). I’ve been on record before doubting they could move into crypto so fast, and while the rollout has been slow they have certainly moved far faster than I thought possible.

Yes, commission free trading is a complete gimmick and probably bad for you. But they have a $5bn company and I don’t. That is far more value creation than simple armchair criticism.

Yes, it’s “just” a trading app. But simplicity is hard and they have threaded that needle incredibly well. They are selling a commodity service but they know how to reach an audience that none of the incumbents can come close to touching.

My real thought is: what other industry can you do this to?
Exactly. CTS May be sloppy or naive, but if the people they claim to have shared the vulnerabilities with have been verified, then there's no reason to think there's a Big Conspiracy of Stock Shorters here.
Not truly fake, then again, a lot of propaganda is also based on an element of truth. Is there any meaningful distinction between propaganda and fake news?
I can assure you that most robinhood users don’t have the slightest idea of what trade routing means. Also, I doubt there are many accounts placing big enough trades routinely for routing to have a material impact.
It seems that charts exist as part of their blocks offering:

https://airtable.com/blocks

But only for customers in the Pro tier.
Reserved IP addresses
Vanguard charges no fees for buying/selling their owns ETFs. I believe Schwab and others do as well.
Customers love to be lied to; in a recent set of presentations I was favoring the vendor who was presenting reality but the winner chosen by the business evaluators was the vendor who brought in the glossiest presentation and glossed over the complexities and the frightening part expressed a comfort with ever changing requirements. They were put off by the vendors who boasted about zero change requests and making their timelines but liked the vendor who proposed a fantasy timeline with no promises.
There's a middle ground between day trading and just putting your money in an S&P 500 index fund and never looking at it again. Trading stocks can be fun and help you make a lot of money if you're able to spot undervalued investments. It's very complicated, but anyone can learn the basics of value investing and do a little bit of stock picking on the side.
Printer's Ink cartridges are a scam
Some people learn the value of simplicity through experience. They start out building over-complex things, and they’re not “not smart,” just inexperienced and misguided.
https://www.youtube.com/watch?v=Kh0Y2hVe_bw

I accept with basically no questions that the announcement was coordinated to enable a stock-shorting scheme. You might be interested to know: this isn't the first time that's happened. I don't care. I don't think these stock-shorting schemes work. I agree with Matt Levine: attempts to profit from stock declines are far from the worst things people can do with vulnerability research --- for instance, they could collude with vendors to withhold disclosure for months or years, which is something that happens.

Where I have problems:

* When AMD fanatics try to spin the confusion about the story into a claim that CTS-Labs didn't find anything, which we know now to be false.

* When anybody reacts to the confusion by announcing to Hacker News that there are immutable norms of vulnerability disclosure that were broken in this case, especially when those supposed norms are false and most especially when they assert obligations researchers have to vendors.
Charles Singer's A History of Technology is an interesting read for similar concepts. Published 1954-58.

https://en.m.wikipedia.org/wiki/Charles_Singer

https://www.worldcat.org/title/history-of-technology/oclc/22...
Okay someone explain this to me because I don't get it - how can we get the sample of a 40 000 year old specimen and tell that it's species had interbred with humans.

I mean - Neanderthals are pretty closely related to us us, couldn't genetic similarities be a result of that common origin rather than interbreeding. How can DNA tell that apart?
No, they didn't confirm serious vulnerabilities. Excerpt from their blog:

>There is no immediate risk of exploitation of these vulnerabilities for most users. Even if the full details were published today, attackers would need to invest significant development efforts to build attack tools that utilize these vulnerabilities. This level of effort is beyond the reach of most attackers
I wish they'd gotten some answers for the Viceroy situation, which is the main sketchy part of this endeavor. Beyond that it seems like a set of real vulns with pretty real impact hindered for the HN crowd by an overly glitzy PR push. The ToB blog post is what should have come out concurrently to satisfy the overly cynical HN crowd - maybe good notes for CTS for next time. It's ironic that the overall reaction here was so jaded when people are up in arms about Intel ME every time it's so much as mentioned.
> A very interesting trend of pre-packaged Emacs distros happening.

Back before Eclipse, it wasn't uncommon for emacs to be bundled into development environments. Xemacs is a famous example of this (being forked by Lucid for their dev tools). My recall is that SunWorkshop used to use emacs as the IDE frontend back in the 90s. Allegro Common Lisp also used to include it.

I think I came across other examples, but currently Google isn't providing enough help to 20 year old memories.
While this is a great point, the casual segment of the customer base that is being discussed would certainly not have enough awareness of this fact. At the very least, I didn't even though I do trade ETFs and large cap stocks casually...
I’m not sure whether your comment was serious or not.

If you can’t figure out change in your head, nothing will help you be able to budget.

After all, budgeting can be looked at as a more complicated version of calculating change (albeit from a paycheck). And of course, without a good budget, your credit won’t be good, etc.
Curling is probably a result in a glitch in the simulator's programming of our universe. Maybe a benign side-effect of some optimization that the great simulator thought we would never encounter...
From the github readme

> I am a Sri Lankan Web Developer who lives in Vietnam. So I am not a native English speaker and just learning Rust

This guide is so well done, props to you. I haven't worked with Rust yet but your docs make it seem so easy to work with.
One improvement I'd like to see is a simplified error message for mismatched overloaded calls. If you make an overloaded call for which the is no matching conversion or if the conversation is ambiguous the compiler will "helpfully" dump a list of possibly matching overloaded function signatures. The list can be hundreds of lines long. For example, when you try to pipe a class to std::cout that doesn't have an std::ostream &operator<<(std::ostream &, const X &).

Perhaps instead of dumping the complete function signatures it could show one function signature followed by a list of types accepted as the second parameter. Since the signatures are otherwise the same. Such improvements could also reduce template error spew.
I found out what happened when a mother took her son to be kneecapped in NI
I have no doubt that the findings are real, but they are more along the lines of bugs rather than “halt the press” gaping security holes.

We’ve all publicly disclosed and written patches for countless security vulnerabilities in open source code that’s widely distributed with zero fanfare - not even a cve - because we realize the difference between a security bug and a world-stopping, corporation-killing security bug. And the arrogance of saying something along the lines of “if I gave them a day or a million years it wouldn’t matter because this bug is too big to fix,” is beyond comment.

At no point did I give RedHat 24 hours to patch something before coming out with a well-orchestrated PR campaign with the hype engine on overdrive. Just submit a patch, make sure they admit they’re wrong and will take the appropriate measures, and move on.

Now if they found a remote exploit that could let me run arbitrary code on any AMD processor even in a sandboxes environment... we’d be having a different discussion altogether.
What about a line of ─ in between different unassociated errors? So if there is a group of related errors that are about the same actual problem, or a note associated with an error, they're together, but then there's a line of coloured ─ separating them from the next set.
> Note that this means that for transmission over short distances, we are not constrained to all-or-nothing encoding and in fact amplitude-based encoding is preferable due to higher data rate and energy efficiency. This explains why short neurons never use spikes in the brain.↗ p. 36

Fast high-bandwidth interconnects use this, too, in optical fibre modulation for telecom, and not just plain Amplitude Modulation either. I guess the interconnect between the processing nodes of a supercomputer are connected in a similar manner.

I would really like to know how brain waves figure into this, does the brain do "wifi" between distant nodes?

> How do brains information?

You accidentally a word! Not just there, by the way.
Tiny, Perfect Staircases Made by French Woodworkers
Yes. Look up the GIL (Global Interpreter Lock).
User retention is arguably linked to capital preservation. So they do have some incentive to ensure people don’t lose their investments by trading too much.

When the market gets more volatile or if there’s a sharp downturn, that would become a big issue. Not sure they had to address this yet because since 2014 their founding year the market had been on a smooth, upward trajectory. A recession however is already around the corner.
'GrayKey' iPhone Unlocking Box Used by Law Enforcement Shown Off in Photos
> portable FFI library

I looked into that, not available on many many platforms.
Can you please link the Google Trends? I am curious how to do one of these searches that compares using it with "the" and without.
That is true. I'm not saying Robinhood is all bad or can't be used in good ways. My concern is that overall, the product and marketing seem to be geared towards speculative, short-term trading. When I first signed up, the app was recommending that I check out stocks like Apple, Netflix, and Snapchat, not index funds.
Ask HN: What technical challenges related to software are you currently facing?
If you have admin access to these machines, you can persist into the secure coprocessor. In the presence of these vulnerabilities, it is actually worse to have a secure coprocessor than not to have one at all. They are serious vulnerabilities; about the worst you can have in an enclave scheme. If SGX had a comparable problem, it would be headline news.

Does that mean the stock should head to zero, like some crazy prop trading firm claimed they should? The fuck should I know? I am cynical about the impact vulnerabilities have on stock prices and don't think consumers generally care.
That is an absolutely gargantuan “if”, given that any particular retail investor is overwhelmingly unlikely to possess novel knowledge or insight in any market.

The number of times this ever happens is outweighed a millionfold by the frequency of times where people incorrectly believe this to be the case.

What happens in the vast majority of cases is that people believe they’re making money, but after fees are actually losing to index funds. Or people believe they’re making money, but lose their shirts the moment the market turns sideways. Or people do succeed due to completely random chance, but the level of risk they took on to make that return is significantly higher than other investments with comparable returns.
Many quant firms beat the market with a consistency that puts their p-values well below the threshold that would be required to make this claim, even given the multiple comparisons problem you bring up.
presumably your issue was with the first premise and not the conclusion.
Ah, if only the country had a three-letter agency with a responsibility to identify weaknesses in cyber infrastructure and work with relevant manufacturers to fix these bugs...
People are claiming free music, too. That statement might be misleading as written. I think the most common version of it is if two creators derive from the same free source, one of them may use one of the automated copyright claiming systems and it could claim the other.
Impatient Mode
This makes me want to listen to Sean Hannity just to balance out the rhetoric.
True enough, modern planes are far more efficient and oil prices are low
I just saw Airtable for the fist time and it looks awesome. Yet I am a little concerned about the vendor lock in. Does anybody know a self hosted alternative?
Tour pros routinely swing driver at 120-125 mph, and produce ball speeds of 180-190 mph. I’ve seen numbers in the range of 2,000 - 4,000 pounds of force applied to the ball.
Ask HN: What is your favourite programming language?  Why?
Well written _as usual_ for lowtechmagazine! I suggest you dig through their website. Great stuff all around.
This is really speculation. There is no reliable source to confirm this. I have used Robinhood for over 6 months now and never observed the trade price deviate from what is listed on Schwab and IB.

Also, for most people who trade 100-1000 shares it doesn't really matter.
Seems like Robinhood has some scaling issues. Anyone who is serious about investing wants access to a web client or an official API... how long has it been now? Still on the waiting list for Robinhood Web. Ended up transferring all my money out until they make it more friendly for 'power users.'

Maybe that isn't their intended audience, though.
saudi is a longtime ally to the us, each offering material support to ther other in conflicts that have involved iran, it's allies or it's interests.

it also seems unlikely to me that saudi intelligence and other forms of support were not utilized in the planning, development and deployment of stuxnet (among other things).
> Use the "5 whys" method to dig into this a little more. Yes, one major problem is lack of women developers, but why is that the case? Keep asking questions and you'll see that there's some terribly broken and problematic answers to be found.

Is that actually true, though? And if you think it is, how do you know? Here's what I know: The percentage of women that take the AP computer science exam in high school is about the same as the percentage of female software engineers. This means that whatever is keeping women out is happening before this point in the funnel.
>> I can just read it and think "Okay, this guy is obviously using stereotypes about other countries here" and then keep reading without it necessarily immediately invalidating else that's been written.

The author's whole point in this article seems to be "IBM offshored its work to Bratislava and India and that's bad". I don't know how you can decouple the stereotyping from an article when it's the main line of reasoning of the article.
Off the top of my head I don't really remember, though Brian Greene does devote a whole chapter to the question of detecting other universes in his book, so that might be a good place to look further. At the moment though, this doesn't really bother me. For example, Giordano Bruno suggested the existence of exoplanets in 1584, and certainly he could not have predicted the modern techniques the Kepler telescope uses to detect them! It may be centuries before we have the theory or technology to determine if other universes are detectable or if they exist. A long time to wait perhaps, but this should not be a reason for ruling them out (though of course, solid evidence would be required before a multiverse theory could be accepted).
I occasionally order something from Amazon, get billed for one, and two show up in the box. Like whomever did the picking in the warehouse got sloppy or something.

Unfortunately, only for small, cheap items...no TVs yet. Fingers crossed.
I’m with you, but again, context. A compromised machine used to be a hosed machine until you reinitialized the drive and started clean. People are just starting to wake up to the fact that there’s another computer in your computer to which the same maxims apply.

Anyone that is serious about security hopefully knows this.

(I have no skin in the AMD/Intel CPU game. Too many machines running both to bother. I can’t believe I have to say this on HN, it’s what I’d expect of [H]ard in 2004.)
Bus Lane Blocked, He Trained His Computer to Catch Scofflaws
You don't need to burn someone alive to know that putting someone under certain heat conditions is going to kill them. Similarly, you don't need to actually expose people to crazy powerful sonic waves to know that they would suffer from it; just knowing that the waves were there and inferring how to generate them is enough.

All of this is obvious though; you aren't being rational about this, like you have a dog in the race.
Thanks Dued Vary intresting <a href="www.hack-exploits.com">Post</a>
Yeah, the correct term is "Russian Federation" these days.

:(
Are your employees hooked yet?
Lithography/Mask Challenges: EUV high volume manufacturing expectations
> could make this a pretty effective attack vector.

Until we start putting high order low pass filters in everything.
Important not to mistake fluency for favourite. I code mostly in python but I am attracted to lisp and Haskell.

Because they have beautiful simplicity in the first case and interesting outcomes in the second. I continue to struggle to achieve expressiveness in either. Maybe before I die.

But my real favourite is awk. Because it was the first language I used with a hash structure and so let me explore writing code which did content addressed things like count uniques over stdin string streams from logs. All kinds of languages had functions and procedures and fancy schmancy if then else but having dynamically sized data which indexed off data.. that was electrifying. Perl had them after and I suspect that in part accounted for it's popularity. Every scripting language since has too.
Let me earn myself a -4. I do my hobby code in VB .NET. VB6 was the first thing I learned, and whether I'm doing C++, C#, or PHP, whatever else I've ever used, I'm usually translating in my head what I want to do... from VB.

So I've ended up back at VB after several years in other languages because it cuts out the cognitive load.
Robinhood is the only one among the new batch of fintech startups that encourages active trading. Their entire UI is built to optimize for ease of trade rather than thinking in terms of portfolio objective and diversification.

Contrast that to Wealthfront, Betterment, or Acorn - they're all built on the "buy and hold" philosophy. They use technology to automate allocation, tax reduction and rebalancing, while investing solely in index funds. How these two trends play out is fascinating to watch.
you think they need a slap on the wrist for the attitude they promote? have you seen etrades recent ad campaigns? https://www.youtube.com/watch?v=yZ2Fa0zVglU
https://docs.oracle.com/cd/E55243_01/pt854pbr0/eng/pt/tiba/t...

That said, fuck Oracle.
Important to note that when purchasing ETFs through Vanguard the minimum investment amount is the cost of a single share. No large minimum amounts such as the $3000 or $10000 with their mutual funds.
A biography of a WWII Russian fighter pilot, was the source for the cited instance, as I recall.

Red Star Airacobra: Memoirs of a Soviet Fighter Ace 1941-45: v. 2 Evgeniy Mariinskiy
Kindle book.

Of course, there are many more: the brief resistance on D-Day from many non-German troops counts, the betrayal to the British embassy of Germany's rocket program, the Garbo mission (main agent betrayed program), Canaris maybe betraying Hitler from the start, Heisenberg's "miscalculation" and slowness that killed the Germany Atomic Bomb program (along with his offer of mutual sabotage to Bohr), etc.
I don’t even have a problem with shorting. It’s fair game, and a company’s bug bounty should reflect what they stand to lose by not paying top dollar to preempt exactly that. Any talk about the company being “entitled” to anything is BS. If someone had a vulnerability that would get them access into anyone’s Dropbox as their IPO rolls out.. they’ve earned it.

I just think if that’s your plan, you best not be bluffing and had better have something really good up your sleeve. I do have a problem with overstating your case and spreading FUD to try to make a quick buck off of at best B+ attempt.
It looks and behaves remarkably like Typora.

What's the story?
Etrade has always been doing this though.

https://www.youtube.com/watch?v=BnQMq5wtZcg
Yeah I did. It's a bit hand-wavey on technical details and actual time frames. It mostly reads more like a press release and I believe that's the point of it.

There's another very real possibility which is that Vodaphone's NOC will get back to you within 24 hours and help you resolve the problem. Such a time frame is quite common with large ISPs. The reality is that you are a small potato to them.

But I'm guessing that considering this possibility would stand in the way or using this as an opportunity to generate publicity.
Why would you want to burden a GC'd functional language with the syntactical and semantic requirements of Rust's resource management?
Stephen Hawking's advice for a fulfilling career
Huh. I've had my original handle here shadow-banned for upvoting a low-effort/joke comment (I hadn't posting anything since months). I think yours would've been a more appropriate punishment for me if I was so bad at upvoting lol.
I was diagnosed with multiple sclerosis in 95 but had my first symptoms in 87. I tried Betaseron for about 6 years or so. In 2012 I went to a care facility, life was too difficult at home for my husband and family. I have tried several types of medications. I thought you just have to let it run its course; both my legs were spasming mostly at night which makes sleeping difficult.My multiple sclerosis got significantly worse and unbearable because of my cognitive thinking.. I lost touch with reality. Last year I started on the Multiple Sclerosis natural herbal formula we ordered from GREEN HOUSE HERBAL CLINIC, We spoke to few people who used the treatment here in Canada and they all gave a positive response, my symptoms totally declined over a 7 weeks use of the Green House multiple Sclerosis disease natural herbal formula. I am now almost 73 and doing very well, the disease is totally reversed! (Visit their website www . Greenhouseherbalclinic . com) I am thankful to nature, herbs are truly gift from God. I will keep sharing more awareness, Share with friends!!
Analysis of a Kubernetes hack – Backdooring through kubelet
Those of us uploading amateur dance and sports videos weren't really getting any revenue in the first place so I don't see your point. 70% of 0 is still 0. But then I've never felt entitled to make a profit from someone else's content.
Yes, but it tends to get easier with time.
Thanks for the constructive input, ellisv
Reducing the free loan you provide to a bank with a checking account is good, but be very careful with leverage. IMO any leverage should be a very deliberate decision.

If you buy a 30k car/tuition one day (depending on how much you have invested, this could be a lot of leverage!), and the market crashes by 50% the next day, would you be ruined? It's possible that even if the stock immediately recovers from some flash crash, you'll have insufficient collateral and the positions will be closed. (Locking in huge losses at the worst time during some irrational panic)

EDIT:

I suppose this is no more risky than buying something on a credit card, then selling a stock to pay off the card after a month. Still, Schwab can't get your credit card balance and close a position in real time, whereas they can with this leverage strategy.