skysight-inc/HackerNews huggingface dataset:
He can be arrested directly as a result of an extradition request. (If this weren't possible, it would rarely be possible to extradite anyone.) I think you're perhaps unaware that an extradition request is required to present evidence that the person in question has done something that is a crime under both US and UK law. It is not merely a request to move someone from one country to another.
>I largely ignore Google products announcements these days.

Well clearly not...
The turkish lira has been at least as volatile as BTC in the last couple of years; Bitcoin is about as much a currency.
One of the swift steps should be to address https://github.com/matrix-org/matrix-doc/issues/1194 and https://github.com/matrix-org/matrix-doc/pull/1915 and https://github.com/matrix-org/synapse/issues/4540 properly, so others servers cannot be impacted in any way.
there are quite a couple of so called guides (opsec playbooks for crime) that I found specifically on Wall Street Market (a darknet market place like the now defunct Silkroad), available for purchase.

Some of them go beyond just instruction booklets but promise access to their chat systems via invitation (upon purchase of the pdf) and offer some kind of limited coaching. It is essentially the recruiting mechanism to bring in lower ranking soldiers starting out as mules, handlers, or basically move up from re-selling goods.

A couple of these guides point out how much Telegram sucks etc, and that they now have moved to p2p based systems. One praised Matrix heavily for it's good security feature.

The tech-savvy-ness of many vendors has picked up considerably since I first started watching. There is a strong push to re-think and refactor both tools and their processes (yes yes - this happens constantly otherwise they get caught, but never as fast or aggressive than these past months).

It's likely that this is just a (s)kiddy enjoying the attention. Though quite a lot of players have more than just an "academic" desire to ensure these (their) systems can withstand an attack by LE. When I browsed the matrix issues on github I couldn't help but immediately recall the strange emphasis on "we have switched to matrix". It's far fetched but I'd say somebody may have a strong interest in seeing these issues resolved (->or has gotten genuinely fed up and wanted to do something, as opposed to this being just a skid that only did it for the attention)

for a good analysis on how some of these tutorials and the philosophy behind them see: "Discovering credit card fraud methods in online tutorials"

https://www.researchgate.net/publication/303418684_Discoveri...
Ask HN: How does your department report on progress?
How does your Engineering department report on progress to the exec/board of your company?

Does somebody compile a written report, or is it automatically generated? What sort of content does it have?

It would be great to know the size of your department and company. It would also be great to hear your assumptions on whether you think the exercise is useful and it gets read, or whether you feel it's more about self-justification.

We're trying to change how we do our own reporting, and finding it hard to work out the best way to do it.
1. https://github.com/atom/xray/graphs/contributors
Seems it's been not much done since february.
There might be some value in having a way that people can leave their email addresses with you, given suitable assurances about what you'll do (or not do!) with them. At the very least you could have contact details in your profile here on HN. If someone really likes your work there's always the (admittedly small) chance you'll get contacted with opportunities.

Just my random thoughts ...
There’s so many legitimate reasons for the phone to be on and transmitting in a moving car. Wouldn’t it just be cheaper and likely as effective to have a sign reminding everyone to not use their phone while driving?
The deaths in the accident could be avoided if the vehicle had an emergency brake assist.

I doubt it's possible to develop a tech that would prove beyond reasonable doubt that he was distracted by the phone.
> and working with raw "plain old data"

> while some of the systems aspects can be a bit lacking

Could you elaborate a bit on those two points? I think it'd be very valuable feedback for the Rust devs.

(Also, thanks for all the effort going into teaching this kind of stuff <3)
Hits on trademarks, proper nouns, product names, etc should be boosted.
It does have to do with the language. Writing a generic Set type is trivial in many languages, yet hard in Go.
Much better than telegram which has in the ToS that you may not make a client that does not sent read receipts.
> in Atom extensions are EVERYTHING and can do ANYTHING).

So Atom is the emacs of Webstack-World?
This was one of the things I missed when moving from Excel to Sheets and led to me building https://seekwell.io. It lets you grab data from your database and drop it in Sheets using just SQL (Postgres, MySQL, SQL Server and Snowflake).

We've also built a full SQL and Python IDE with a shared code repository, but solving the simple problem of "write SQL -> get data in a Sheet" was where we started.
> I've run a matrix homeserver for almost 3 weeks and it as an utter pain to maintain, despite not a single version upgrade

As a counterpoint, I've been running a Synapse (a Matrix homeserver) for about 1.5 years now and it's been smooth sailing throughout, including the frequent upgrades. Maybe it's different at a larger scale (my userbase is 5-10 users), but if, as you say, you did it for three weeks, I guess you didn't have magnitudes more users than I have.
> I accept this kind of uncertainty when I use my existing card abroad (although in some cases, the POS terminal offers to do the currency conversion up front)

Sounds like you're a price-conscious kind of person. Be aware that POS terminal conversions are usually the worst rates you can get, with the POS terminal taking a large % cut on each transaction in exchange for your peace of mind knowing exactly how much it's going to cost you.

If it helps you to see that conversion amount, that can be useful, but generally speaking, you don't want to accept that price and instead be charged the local currency. The amount you get charged will always be significantly less (subject to you not having absurd fx fees on your card, of course)
Identifying Pambunt Voters: Presidential and Midterms but Unfortunately Not Town
Wishing for Blog Search Engines
Root Cause Analysis and the Photocopier Question
Well spoken. God it's going to be a dark world if assange isn't a free man in a year.
This is neat, however (here comes the harsh critic) :

- Rendering a simple tree like this would work just as well, if better, in text only format (like the output of the "tree" command on linux) : https://justpaste.it/6r9un

- The classification also seems a bit manual and arbitrary.

Maybe giving each node a weight would make d3 worth using ?
Maybe scrap the subscribers of each subreddit, and make a force directed "map of reddit nsfw" ?

Your skills seem wasted on this if you're good at d3
The Geography of the Room
Gfc.io – visualise your Git branches
I just enabled that after seeing this incident.

For people in the same boat, it can be done trivially using the YubiKey Manager CLI: https://developers.yubico.com/yubikey-manager/
Also in the RM Nimbus PC-186 (https://en.wikipedia.org/wiki/RM_Nimbus).

I remember some of those being at university running a DOS NFS client and windows, alongside a bunch of Sun workstations. That would have been around '88 or '89.

Part of the 'problem' with the 186 is that some of its on-chip peripherals (DMA and interrrupt controller?) were different to those used by IBM in its PC.
If you're in Crypto, this App will help you to get the most important news
I build CoinBlick to help myself and other people to digest the amount of news on Crypto daily published. Read here why I did it:

https://blog.coinblick.com/coinblick-crypto-news-launch
I've not edited my post in the way you describe, or in any way comparable. All edits I perform either do not change what I wrote (spelling) or I very clearly append it to the post with an "edit:" prefix.

I've not written that I operate "the" matrix server.
> I'm not saying I support either of those, but comments like the one you made is inflammatory without being informative.

Once the door is fully opened, everybody rushes through. Once more-or-less targeted assassinations have been normalized by a government, you can be sure that it will be used by every government following them, and ultimately by every other government on the planet. Effective tools will always be used.

Be that mass surveillance, drone strikes, offensive cyber warfare or kidnapping people on foreign soil to fly them to torture camps.
Analytical school of philosophy begs to differ.
I don't think so... Cobranded credit cards are a dime a dozen: charities, clubs, stores, and alumni associations all have them.
The problem is when a malicious package is produced, either because a flaw was introduced in the code, or because a dev machine was compromised, or _when the CI machine sad compromised_; the malicious package will be signed as if it were legit.

One middle point between automated and manual signing is, as usual, key rotation: have the signing keys expire in a short duration of time (say 2 weeks) and manually push them every week, so that the window of attack is as small as possible.
Reading the article showed me how ignorant I was to this problem... so much so that I'm surprised I haven't seen more articles like this in the past.

For all the talk on ML and PC here, it's surprising that language is still a huge unsolved issue. As someoneone who knows a tiny amount of Japanese, I'm surprised that a common solution is to provide the katakana equivalent. Outside of the tech realm, is this really what a native Japanese would write on (say) a physical/ paper document: both the Kanji and Katakana?
I don't think I'll ever get tired of Feynman stories.
I suppose it depends a lot on your local area.

Where I live there are tons of these 'flashy speed limit' signs.

I don't think I've ever seen anyone obey them. 35-40mph in the new London '20 zones' is completely normal behaviour if the road permits; everyone does indeed do it, including buses and off-duty police/ambulances.

It is, in fact, empirically socially acceptable (by the drivers if not necessarily by people who live there).

In areas with speed bumps you see much lower speeds because people don't want to damage their vehicles. Enforcement, basically. The same is true for real speed cameras, people tend to speed up and slow down.

That said, mobile phone use is different. I think most people intuitively recognise that using a phone at the wheel, particularly in an urban area, is really quite dangerous, and maybe a sign would work.
I would agree with that. We need something that works now, not when someone finally manages to reign in the Matrix protocol.As it stands I cannot send a friend an invite to Matrix and expect them to like it one bit (which turns out, is what reality looks like).
Ethereum update solution pairs funding “tax” with ProgPoW mining boost
I think the equivalent is snoozing notifications. If it is important people can "notify anyway" -- however, your world culture needs to be OK with that.
EnTT Tips and Tricks: Groups on Sale
Opening up BBC Sounds to others’ podcasts and commercial radio
I don't see what is in this for the consumer either. If you are not already a holder, why would anyone want the hassle of becoming one, just to pay high fees for each and every transaction (e.g. the 2.49% "crypto liquidation fee" for this card) when you can get a cashback card (e.g. mine gives me up to 10% cashback on some purchases), and why would you not want your assets working for you until as late as possible (not until point of purchase as in this case but up to 5-6 weeks later when a conventional monthly credit card bill become due)? And if you are a crypto holder, why would you want to transfer custody of your crypto to Coinbase and make your tax return a nightmare (i.e. with a potentially large number of small disposals)?
Related:

After forgetting my password a few weeks or so after first creating my account (I went a long time without ever trying out Keybase, because its value proposition AFAICT wasn't very interesting up until around a year and a half ago), I had Max reset my account. I was left with mixed feelings about this:

1. Extreme gratefulness esp. wrt the hands-on approach to "customer" support, but concern for the scalability of a process that require that level of manual involvement, and

2. Concerns with how easy it was to get keybase.io/$MYNAME disconnected and reconnected by the Keybase switchboard operators

... and I wondered why Keybase's proof system didn't play a part in authenticating me.

For example: Let's say I create a Keybase account, forget my password, and realize I'm not logged in on any device. If I need to reset an account that has N social proofs, wouldn't it be a good idea for Keybase to make me prove that I am who I say I am by adding/altering M of N proofs?

And on that note:

Given that you're rolling out third-party integration, how about building off OP's thoughts, so a Keybase user can configure their account to say, "You should be able to verify that $SERVICE implements the optional 2FA parts of the Keybase integration spec; please use $SERVICE as the 2FA provider for this account."
As video games make billions, the workers behind them say it’s time to unionize
I never use SSH agent forwarding but instead use -D socks5 proxying to directly ssh from my host to the ultimate target hosts.
Yes, Brazil/South America have 99Taxi and Cabify, although most drivers and users have 2 or 3 apps and switch around depending on promotions, price of a specific route, etc.
Wouldn't that person would be the best to test the constitution? If everybody loves you, you don't need the protection of the law. And if the law only works when everybody likes you, what good is it?
Get the right solution for better scores in engineering
I would go a bit higher on the abstraction level - instead of using a hash I would use a Set. I see that Golang has at least one implementation:

https://github.com/deckarep/golang-set

If for some reason going "high level" is not an option, this:

> For trivial examples this works well, but for more complicated types with complex keys, it may require creating new types.

surprises me. Producing a small, unequivocal identifier for a value (be it using some kind of hash function, or just the raw memory address) seems like a very basic language feature. Doesn't the Go standard library have something similar to

func memory_address(o interface{}) int

or

func hash(o interface{}) string

?

If yes, then "complex keys" would not be needed: They would always be ints, strings, or whatever the aforementioned function returns.
I've heard somewhere that the speed displays actually help a lot with slowing down the traffic where they're put up. I slow down when I see them too, not because I'm afraid of enforcement action, but because I just forget how fast I'm going sometimes and that board reminds me. Plus, it feels kind of satisfying when you do slow down and you get the green smiley face along with a message thanking you.
> the remaining apps in 32 bits were (and in some case still are!)

It should be noted that 32 bit applications are still very common in Windows land since the majority of applications do not have much to win from being 64 bit.

On Linux and macOS, 64 bit is much more common.
Except the Turkish Lira is legally recognised as currency, and Bitcoin is legally recognised as a commodity (and thus, subject to CGT)
Rainbow – Best cloud storage app launches the SmartCloud service
using your monopoly to force another one of your products on people violates anti-trust law

that's how
Keep in mind that I’m not saying that C++ is a better language than Go here: I’d need a lot more evidence than an array deduplication routine to prove this. I’m just saying that Go is ill-suited for this particular task as compared to C++, and the author is struggling with this as they go through with implementing their algorithm; this leads them to settle on a clumsy and inefficient “solution” because there isn’t really a good alternative in the confines of the language that they chose. (FWIW, C++ does have a good standard library for implementing algorithms but this doesn’t really come into play here, since we’re not doing anything advanced. Any language with a set and filter would do the job. And for the record, I do think that C++ is a better language than Go, but I’m not going to argue it here because I don’t know the latter well enough to be confident in my viewpoint and don’t have enough space here to discuss it here if I did.)
If your job requires a security clearance... random testing is a real thing. Same with the medical industry.

If you work in a safety critical, or security critical role, then there is randomized testing as well as pre-employment testing. This can be especially frustrating if you work as a contractor in those industries...
3 is the minimum for any critical system.
Bigquery also uses caching which presumably is used here.
yes it has a grid. What I meant was that showing 5 lines of css saying "css is simple we don't need more" is kind of irrelevant, because that's not where we face challenges with css.

CSS has a grid system, but even assuming 100% compatibility, you still need to declare your grid and elements inside it, etc. and that is not done in 5 lines of css.
That is so true. I study CS too. I'm a final year student and it's really hard for me to cope with all these writing works and find time on exam preparation. I guess i'll use a little help of PapersOwl writing service to save some time. last time these guys helped me to get the highest score in the class.
> Them flapping around slightly won't provide much noise. Which is probably drowned out by all the other noise on an aircraft.

But the readings with the vane flapping around should have a significantly higher variance than the readings where the vane has frozen stuck. In addition, a sliding average should show the mean moving around significantly compared to the frozen readings. Surely they should be able to discriminate between these cases based on those factors, especially when cross-correlated with other sensors.
you are right, and that is a great solution if you don't care about offering the actual experience to all users.
If the original problem you need to solve is "using css to style a website so all users have the expected experience" then you need more than 5 lines of css.
Rocket Darpa picks three, Aerojet short seller, Starlink launch date
That is so true. I study CS too. I'm a final year student and it's really hard for me to cope with all these writing works and find time on exam preparation. I guess i'll use a little help of PapersOwl essay writer service to save some time. last time these guys helped me to get the highest score in the class.
So I guess following your point, accessibility should not be a thing, on or offline.
You and I both, if you haven’t already - read ‘Surely you must be joking, Mr Feynman!”
Last time I checked, it was still hard to get a Google CloudSQL DB into BigQuery, so I’m surprised they did the sheets integration first. We used a third party that just copied data from our CloudSQL to BigQuery.
With bigquery the cost is per query. If you do a "SELECT * FROM AAA" you'll pay whatever the size of the table AAA is, price being 5$ per TB.

If you do a "SELECT field1, field2 FROM AAA" you'll pay only for the total size of field1 and field2 rows.

So you usually want to use BigQuery in situations where you don't need to query data all the time, but rather a fixed number of times a day.

Now about performance: BigQuery queues queries, so you don't have a guaranteed time. It can take a couple of seconds before your query starts running, it can take longer. If you need something that responds in < xxx ms, BigQuery is not it.

But the queries themselves are fast. If you need to query across petabytes of data, as a simple BigQuery query will gladly run on however many dozens or hundreds of instances it needs, at no additional cost for you (since you only pay by the size of your data queried).

It's really a great example of serverless. You can run your query across 100 instances, but you only use those instances for a few seconds.
Do cleaning staff actually wipe blackboards at Caltec?

Makes me question the authenticity of the story.
Except he denies it and it may not be a truth. Have you even considered the among his enemies are the most powerful governments in the world, with a track record of not only corruption and lying but also collateral murder and enabling torture of women and children?
You add another stage.

1. A release candidate X is tested in a CI

2. If tests pass, the CI sends a notification to the build server. The notification is "prep for release package <hashid>"

3. Build server pulls code from the repo, matches it against "ready, CI passed" notification and builds the package/packages.

Compromise of the entire CI/dev chain would be contained as the builders act as a new pipeline entry point running in parallel of the CI using pull method. To compromise keys located on a build server one would need to either get access to it via whatever the method of remote access the server has ( which should be nearly none ) or figure out how to compromise the code running on the builders using the input from a repo that passed CI.
I went on to favorite this one and saw that my last time favorite was this:https://news.ycombinator.com/item?id=12419649

I think it tells me something about a persistent problem, curiosity or struggle.
I wonder what people think its root is.
I've had 12 users I brought over from my mastodon instance. I've received multiple complaints about matrix from each one, half of them stopped using it after a week over the privacy and usability concerns.
Year of Chinese AI
Axess Lab (a company specialized on accessibility) also blogged about this "feature" [1]. This reminds me of providing a "m.example.com" website just for mobile phones. Finally people noticed that making websites responsible by default is the right way to go. This should apply to accessibility as well.

[1] https://axesslab.com/digital-apartheid/
The easiest way to solve this problem is to have serious standards from driving license tests. Have would be drivers perform reliably in a variety of conditions and in longer trips and mercilessly fail people who do not meet the high bar.
You don't keep a single copy of each key, but store enough redundant copies to get the proper number of nines. Preferably that's redundant geographically, in terms of storage technology, and in write frequency.

The important part is just that the keys don't end up in long term cold storage. Either it's only retained for a short period (e.g. tape backups that get rotated after two weeks), or it supports live deletion.
Can't there be a # [deprecate(untiledition=2018)] to solve this? The standard library contains all the old stuff but it becomes inaccessible in all editions after 2018.
> "we had to revoke all the keys so you lost access to your encrypted messages unless you backed them up" takes the cake

This is just how it works. It's been well documented and mobile clients got updates that backs up the keys automatically. It's also effectively the same as WhatsApp and some other IMs (they just don't even save your encrypted messages). Either way - backup, or lose your history.
“C++ Lambda Story, from C++11 to C++20” – A Free eBook
Boy, I'm not sure quite why, but the idea of a spreadsheet with nearly 2 million cells stresses me out...

Why that over a DB?
I'm kind of curious, is it common for software engineers in the East coast get drug tested? I'm a MechE and I almost always get tested.
Isn’t there IK now? I’ve used it on 2D skeletons in Godot.

https://godotengine.org/article/skeleton-inverse-kinematic
Godot is my game engine of choice. As a patron, I am now in very good company.
didn't that just happen? ;)
Deposit PayPal