skysight-inc/HackerNews huggingface dataset:
Last week I needed to make a highly time-sensitive transfer of ~20k that had to clear the same day. Chase charged me a flat fee of $25 for the wire (and Ally Bank would have been happy to do it for $20). Chase temporarily froze my account since the payment was so large it was immediately flagged, but I spoke to someone on the phone within a few minutes, verified it was all legitimate, and the transfer was then processed without issue.

I fail to see how Bitcoin could have helped any of this.
> better UX and lightning network will help with that.

Lightning appears to be a bit of a joke - routing payments is almost impossible, lots of attempts seem to fail, and there also appear to be requirements like keeping a node up constantly.
This appears to be a proof of concept, for the purposes of learning and exploration. From the README:

"Currently, it is mainly for educational uses for a MOOC course I am running (and fun)."

"Which features are implemented? (Most) operators"
I guess I've replied on the sister thread. 0.19 was just the final push. Closed development plus complete blocking of contrary feedback just does not feel like open source. The lack of transparency removed all the trust we had in the project, and although our app is relatively big, it is still viable to change to something else - that we trust.
Totally agree, there are publications out there that are starting to bridge the gap. But really now more and more academics are taking to twitter and sharing their research in a more public way often with much of the field specific jargon tempered because of the platform.

I just published an article in an open-access book on digital methods in my field which is available here: http://booksandjournals.brillonline.com/content/books/b97890...
It's happening again
Does $60,000 make you middle-class or wealthy on Planet Earth?
What kind of private it is when DHL holds your international incoming document parcel hostage asking for Aadhar copy for Customs Clearance; then delivery boy insisting on Aadhar photo in his phone for making sure to deliver to right person.
Because congestion is not caused by using more data, it's caused by more people using connection simultaneously. As I said above, monthly caps don't help for that at all. I.e. let's say now is the time when all caps are reset (beginning of the month). Everyone starts using the network - boom! You have congestion even if amount of data they consumed is small.

To make the analogy more easy to digest. Let's say you have a highway that's commonly overloaded. Instead of adding more lanes or limiting the number of cars per hour, you start limiting the distance that cars can go. How is that going to help? It will still get congested.

So ISPs should stop pretending already that caps are a network management tool - it's not. It's a user fleecing and anti-competitive tool they use to increase their profits.
While that is true its certainly not the only way to do it.
You can use a lot of drugs. It drastically lowers how long you feel permanently happy (because you'll die quickly) but it's definitely a real fix.
Ask HN: Is it possible for a mobile app store, not to report in-app purchases?
Just being a bit paranoid, I was wondering if app I develop gets abused by that giant evil cooperation, assuming it cuts all its network access, lets user buy the app but doesnt report me it as a number? How confident you would be about this can't happen?
Ask HN: What do you still use Facebook for?
I recently logged in back to my Facebook account and found so many guys over there. What do you use it for ?
You can buy bullion at close to spot prices on eBay from trusted sellers (APMEX or Kitco or JM Bullion)
I was going to say that that's illegal but you're probably from the USA, right? I'm not sure what the status there on net neutrality is right now.

Edit: going by downvotes, it still seems to be a sore spot. That answers my question about its current status in the USA I suppose...
The first three results don’t work, so maybe that’s not too useful.
You download or screenshot that QR Code while subscribing for 2fa with GA. Also keep the subscription key; & save both in a password database seperate from your usual password database.

2fa on phone totp is safe; SMS 2fa is less safe, prone to easy attacks. For phone somebody need to come n physically snatch your phone, get app lock password from you. For SMS, in few countries, not in India(in India either you need to prove that you own that existing SIM by getting a code there, or by seeing a customer service desk) a bit of social engineering & few answers from Facebook profile enables hackers to get a copy of SIM.
True, it's just often easier to say Bitcoin because many people have heard of it.
Illiquid investments can still have value if they’re out of the reach of governments. (Governments can’t decide the exchange rate, or tax/confiscate them)

This is a stretch in the US, but less so elsewhere.

I’m not a holder because it’s too speculative an investment for me.
You can run it on Ubiquiti's EdgeRouters: https://community.ubnt.com/t5/EdgeRouter/Release-WireGuard-f...
It's pretty remarkable that the transaction layer (Lightning network) on top of Bitcoin hasn't garnered any discussion in this comment section - I would expect this to be the primary topic when talking Bitcoin commerce! It's not possible to have an intelligent discussion on Bitcoin commerce without discussing its most relevant tech.

From my experience, I see that most apolitical or politically averse techies (a lot of HN) are drawn heavily to Ethereum, which has been falling relative to Bitcoin ever since the January highs. Pretty sure there is a strong correlation between this and HN crypto frustration in general.
I mean, if the government is trying to take gold away, they're probably not that far from trying to take BTC away. And governments are more than willing to do things like cut off external internet access, power, and all the other necessary infrastructure for BTC. Gold has less infrastructure requirement than BTC; and if your government is willing to beat you bloody for your gold, they're probably also willing to beat you bloody for your BTC wallet credentials.
OpenWRT has WireGuard support, so also, every router you can put an OpenWRT image on.

EDIT: I'm using it on my Netgear WNDR3800, and my grandmother's Sitecom WLR-4000 (which is a rebranded Sitecom WL-351, which is a rebranded EnGenius ESR9850).
Omnia Turris runs it fine.
What I've learned since quitting Elm
How does it know you have one? You can use brain wallet[1], you can use trezor with multiple passphrases. You can give up some of your bitcoins and if you manage your wallets properly then no one can prove you have some more.

1. Don't use brain wallets, unless you really understand security
5G is replacing copper even companies are not competing with different technologies.

In countries where telecom companies provide both fixed broadband and mobile broadband there are plans to shut down last-mile copper and move into fiber and 5G only. Telenor Norway plans to end last-mile copper by 2025. Fixed wireless access has already started with 4GLTE. Already existing services where you get both fiber and 4GLTE together for faster service are also already a reality.

The main benefit from 5G over 4G is larger bandwidth cost effectively.
I can certainly see the Russian Roulette comparison. Especially as you get near the top of your salary range.

I can see this causing me an existential crisis in three years. Using my usual framework of basing jobs on technology, environment, and money, will I be able to move from an environment I like where I make “enough” to jump ship to stay on the technology train? Especially when we are at a point where more money won’t have any effect on our current lifestyle by much or will I get complacent? The next stage of my career to make any appreciable salary jump is going to require me to go into management (not happening) or work for a consulting company that will definitely be more stressful and more traveling.

The biggest problem I see is how different benefits can be and cost from company to company. From the simple (like comparing payroll deductions),

Yes that is simple. Because of the ACA, you can basically be guaranteed a minimum quality of coverage. Yes the cost can be more or less, but that’s just a number when you are comparing total comp.

In our case, there is a known upper bound in health care cost. If it’s too expensive on my job, we switch to my wife’s coverage - she works for the state.

to the complex; time spent in office, time spent working, commute time, coworkers, quality of health coverage, quality of work, vacation accrual.

Commute time is known up front, not really a risk. Adjust your required compensation accordingly. You can also gauge the type of technology they use up front.
yeah I read and repeated all of that stuff without investigating too, at one point.

they aren't fundamental flaws to the concept. just like with tcp/ip packets, routing will improve with robustness of the network. I saw a couple of work in progress efforts to address the full node requirements.

they'll be growing pains but bitcoin is interesting because the protocol doesn't go away, even as the payment processing companies themselves run out of money. so a different company or group of efforts will implement it with merchants when its better.
DHS Outlines Mandatory Biometric ID at Airports for Foreign Travel
Why Is Cyber Ontology? Deliver Context for Orchestration
The modern Security Operations Center (SOC) is a highly complex system of point tools, all designed to keep sensitive corporate data secure. Each of these tools creates disparate data points and incidents. Security analysts investigate the barrage of incidents and alerts, looking for clues while asking themselves: is this alert stemming from an actual event? What is the source of this alert? Has this been through our system before?

Out of context, these cyber security events are all just data points living in their own silos. The signs are easily misinterpreted, potentially leading to security disasters. But when viewed in context, these individual clues can tell a lot about the organization’s security. With context, analysts can understand relationships, see the entire story, and keep their organizations secure.

Read more - https://www.siemplify.co/blog/cyber-ontology-glue-driving-security-operations-orchestration-incident-response/
Different Lightning.

So have a look at this:
https://chat.lbtc.io/topic/37-faq/
Algo already supports it
> verifying it is easy

Actually, it's not. It's nearly impossible to non-destructively distinguish gold from tungsten wrapped in gold.
Bitcoin has only been around for a decade, and for most of that time its adoption was driven more by ideological support by libertarians and anarchists than by technical or economic advantages. After ideological reasons the next biggest driver was misunderstanding of its technical features by people who thought they were getting anonymity. Even ignoring the criminals and ideologically-driven adopters, you do not really have large-scale acceptance, because most businesses that claim to accept Bitcoin are only doing so via services that immediately convert the payments to fiat currencies (i.e. these supposed "adopters" are really accepting fiat currency and have no particular desire to receive, use, or hold Bitcoin).

The basic premise of Bitcoin as a currency has always been questionable. With each passing year the premise has become more questionable -- there is the extreme volatility, the enormous energy tax, the inability of anyone to respond to liquidity or credit crunches (and the deflationary nature that encourages such problems) and the ever unclear driver of BTC demand (why would I want a BTC payment, especially when I need to make certain legally-mandated payments that are only payable in my nation's fiat currency?).
Except cheeseburgers rot, but crypto doesn’t. 4096 keys might be useful twenty years in the future.
yep, and wouldn't it be a paradise for a malicious person to install software on that authentication machine which sniffs off the biometrics and sends that to his server?
> If you find yourself on a failing project, squandering tens of millions of pounds and hundreds of man-years of talent, pause for a moment. Think about the fact that almost 140 years ago, civil engineers stopped building bridges that fell down. They stopped building them because the failure of one bridge was laid bare so publicly.

> Think about the fact...

You can think all you want, but it's unlikely to do anybody any good. Sometimes the fault for a failed project lies squarely with the engineers, but this is not at all the usual case. The people who are most responsible for failed software projects is management, and not just engineering management, but the people who engineering management reports to.

And the biggest problem management has is not simply lack of understanding of the nature of software development projects, but, often, a profound lack of interest in learning.

I don't know what to do about that.
> In a society where academic qualification is more and more required

Which is only the case because we handed out so many diplomas that it became a stigma not to have one... Which happened because we handed out student loans too easily. It's causing the problem more than it's solving it.
You've probably heard the line "complexity is the enemy", or perhaps even its full form: "complexity is the enemy of reliability".

You may not know its provenance: The Economist, Volume 186, January, 1958, or 60 years ago:

https://books.google.com/books?id=aDsiAQAAMAAJ&q="complexity...

I've been trying unsuccessfully to secure a copy of this article for some years. PDF preferred, dredmorbius<at>protonmail<dot>com if anyone should have access.
Go ahead and tell her, how u feel. She will understand. Don't fear rejection. Everything will be fine. Good luck
Nope. That would be "voglio" or "desidero". Maybe you mean "mi piacerebbe" which can be translated as "I'd like".
I implemented number porting for a startup I worked for. It's all pretty scary: yes, it's easy to impersonate someone if you have some information about them, but some carriers don't check any sort of porting pin at all. That is, attackers sometimes do not need to impersonate you, they just have to ask for your number.

It would be great if we all had something big more secure, but in the meantime understand your carrier's port out process and that you have your number secured.
If you think of a lottery as a source of hope then buying lottery tickets is a rational choice for those who don't have the chance of ever being rich.
While I do like the project, the webui is horrible :/.
You are probably getting downvoted because the article points out exactly that. The author was erroneously thinking that a big key is necessary - and wireguard doesn't provide one. Which made him discover that fallacy.
Encoding AV1
What you say about Target's stock price is true, but markets exist to price assets, not to punish malefactors. What this shows is that the market decided losing a ton of data wouldn't affect Target's bottom line; this supports your point about incentives but is itself not something in need of adjustment. The market is literally signaling that losing customer data isn't going to cost a company anything.
are you sure that uses Wireguard?
Friend of mine had like 3 kgs of silver. He bought it at UBS - first wandering in asking about buying silver got him some strange looks (he looks like a programmer) but when he said how much silver he needs clerks became more friendly. He stored it in an old plastic supermarket bag in his clothes closet.
This seems more like a problem with your uni's firewall than with any VPN solution. If they're locking things down so hard, why do they allow you to set up an arbitrary VPN just by using TCP and :443?

If OTOH they want to allow you to use a VPN, they should allow at least some UDP traffic. The way God intended BTW because running VPN traffic over TCP usually means running error detection and flow control twice on top of each other.

Sure, some of the value of a VPN is running through misconfigured and outright hostile networks, hence various encapsulation schemes (over SSL, in DNS requests, etc), but only some of the value.
Last Week in Pony – August 26, 2018
Yes, definitely. Only the GUI for Jupiter is in the browser — the computation is on a workstation, server, or an iPython parallel cluster, so you can use proper HPC resources. Another common pattern (because socket-based communication can die) is to run the heavy HPC stuff with SLURM, etc. then compile and analyze the results in the notebook.
Didn't netbeans exist?
And having money stolen from my wallet because I haven’t logged in recently is NOT useful for a currency.
There is a reason why an investor that holds a security until it is worthless is called a "bag holder". It makes no sense to "invest" in any currency when you can own productive assets instead. If you are concerned about the government seizing your assets, I would suggest emigrating to a country that respects private property rights. Countries that undergo hyperinflation are fairly rare, and the citizens of those countries tend to not tolerate it for very long. (Research dollarization of Ecuador and Zimbabwe)
>> All these years after the agile manifesto, and the ideas are still the exception, not the rule.

Are you saying agile is the exception?
Two MIT students just solved Richard Feynman’s famed physics puzzle
Same here, it was the game of my childhood.
What makes you think that's what the post you replied to talked about?
Yes, for acquaintance ok, but these files are available for Rs ~1000 on internet, locked. People are not computer savvy, they just go to a printer shop, ask them to print a copy, the guy download a copy, keeps it on his hard disk fot "next" time. Last time I went to get some printouts of my documents, I locked the pdf with complicated password & keyed it in myself, as they insist our printer does not work from USB saved files.
Even the delivery boys of various courier companies sellbyour phone number for $1 to local spammers.
When you dont pay managers more, generally speaking people don't want to do it. Especially not well qualified people - and you don't want non qualified person there.
I interviewed Josh for my book, The Parallel Entreprener (on Kindle etc), and can attest that he’s done all this experimentation for the love of the game.

For some of us the glory is not in the exit but rather in the building.
Could you provide source for leaking school transcripts, bank statements, and call logs? He does not address them here https://indianexpress.com/article/opinion/columns/rs-sharma-...

Cash on delivery just means address was qualified. But address is normally available from other services, and is not achieved by impersonating someone in authenticaiton.

Even if all you claimed is true, it just means that the school, the bank, and the telephone company shouldn't take adhaar id as authentication, which it was never intended t be. Use OTP/Biometrics for authentication.
I've seen "them" test in production. Every field has varying levels of skill.
> but when it’s not congested, they’re much lower than credit card systems are for normal businesses.

It's extremely americanocentric to assume All Of The World either uses credit cards or x-gen Kriegerands.
Cryptocurrency will never replace fiat money. Corporations will never put their money in a system that is controlled by only one password and that uses transactions that in case of error can't be undone.
Certainly looks like it's mostly FAR out of the way of where anyone would live. It's between the railway and the highway, between an insurer's head office and a factory, in between an area with some company depots.

They're trying to make the area south of the station a very expensive area, which is where the prostitution appears to be now (and hence the rents are "cheap" there).

So yes, I would say this is probably an attempt to move this activity out of where it is now, into an area where it definitely can't survive. I don't know, but I can't see this actually working. Why would these people move ? They sure as hell can't look for customers around that area.
China Built the World’s Largest Telescope, Then Came the Tourists
Phone numbers are obviously flawed as identifiers, but so are social security numbers, drivers license numbers, etc. If the United States introduced a national ID it, how would it avoid the same problems as the de-facto national ID, the social security number?

Biometric data can be replicated, e.g. fake fingerprints and synthesized voices. Good facial recognition is still a step ahead of scammers but they may catch up at some point. And you can't easily change your biometric data if someone manages to make a copy.

At this point everyone knows passwords by themselves are not good enough.

Physical tokens like Yubikeys can be stolen, although that's clearly more difficult than stealing some of these other identifiers.

If everyone had a cryptographic private key, they would have to store it somewhere -- how would they keep it secure without resorting to one of the flawed systems I just mentioned?

So, I find it difficult to blame companies for using phone numbers as identifiers -- it's easy, and all of the alternatives are also flawed. I haven't seen any foolproof identifier, probably because it's not possible to create one.
Go on those freelancing sites ? You should be able to find someone with xxxx+ hours in your language/framework and invite to your project.
"The Evolution of Lisp" by Guy Steele and Richard Gabriel is also a good related paper: https://www.dreamsongs.com/Files/HOPL2-Uncut.pdf
As it happens in security, something isn't secure by default, you need to verify it is so. I have ZERO way of knowing that UIDAI is following good practices in securing MY[] data. Its not secure till I have proof its secure (well, as secure as we know today).

Well thats the other problem with Aadhar. According to the Aadhar Act (2017?), all Aadhar related data (including my biometrics) are property of UIDAI. So I don't even own any rights and hence (as explicitly stated in the act) have no legal recourse if that data is compromised.
As a former math teacher in a disadvantaged area, I'm going to have to stick to my original statement. It could be different in other regions of the world, but, in the US, because funding is based on test scores, and teachers are required to teach the test concepts, whether students are ready for them or not. Students have to cover so much material in a given time period. For many, the time to truly "get" the material is not there. They can memorize something, test on it, move on. The fact that some students are capable of getting through this and learn or retain information does not mean it is a good method of doing things.

As a practical example why multiple choice can be unfair: a student could understand that solving for the roots of a parabolic curve (quadratic equation) could model the landing point of a ballistic projectile. They could understand the difference of squares method to solving quadratics, factoring, solving linear equations, etc. But a simple arithmetic mess up (they add instead of subtracting on one step even though they wrote a subtraction sign) leads to the wrong answer. Because it is a multiple choice test and because test makers have seen this same error before, the wrong answer the student found is one of the multiple choice solutions. Boom. Zero credit on that question. This failed to measure the student's understanding. How do you get around that? More questions with more nuances.

Can you get signal on student understanding from multiple choice tests? Sure. Is it good? Depends on the test and it is hard to write good tests.
A famous aadhar-opposing French Security specialist posted to his tweet with that aadhar, although Sharma deleted that tweet soon I think. It was on Twitter, I will try to find tomorrow the exact tweet.