skysight-inc/HackerNews huggingface dataset:
Per the complaint, it doesn't sound like the bucket was exposed to the world. Rather, security credentials were "obtained":

> Capital One determined that the first command, when executed, obtained security credentials for an account named XXXX-WAF-Role, that in turn, enabled access to certain of Capital One's folders at the Cloud Computing Company.

Unsure how one would obtain credentials for an IAM Role, but the above verbatim from the complaint.

* edited to reflect this is lifted from the complaint, not indictment.
Sure it does, but ignoring regulations is Uber's schtick. Using their services is the moral equivalent of buying stolen goods.
Engagement rings are not a gesture of commitment, they are a gesture that you're willing to play in the status game and spend considerable resources to give your spouse the ability to signal that they are in possession of someone who is willing to spend considerable resources on them.

99.99% of people who buy the engagement rings are better off investing the funds and going with a fake shiny thing if they want to "fit in" with their peers, and just lie to people. Or they can inform others how little value status signaling provides them, especially if they don't have considerable assets to blow.
Are hospitals really that profitable? Take SF general hospital for example. Its obligated to take care of the homeless, drug addicts, under insured that they seem to overcharge the few insured that get admitted to balance their budgets. I'd be curious for an actual fair accounting of things. Are they really flush with money and just overcharging?
After reading the affidavit it was a former AWS employee. The accused worked there from 2015-2016 and it’s not immediately clear that it was a misconfigured S3 bucket. There’s a particular IAM role she used to execute API commands (ListBuckets, etc..). The buckets contained credit card applications and other data including DOB and SSN. She gloated about it on Slack and said she was using a VPN and Tor.

The affidavit is a good read. Linked elsewhere in this thread.
> some of the more simplified Republican arguments against requiring and/or subsidizing health insurance might actually make sense.

Which arguments are those?
I had to go to the corporate owned emergency room recently. They told me that as an uninsured person my discount was 70%. They wouldn't tell me what the insured discount was even though I asked. For 5 minutes with the doctor and there's nothing we can do today follow up with you GP doctor tomorrow or ASAP, the bill was only $145.50, discounted from $485.

The follow up with my doctor during weekday hours was $70.
> I'm sure that 30% capacity loss within 8 years would be considered a fault.

Why are you sure? If it's not under warranty, it's not under warranty. If it's considered a fault then it would be warranted.
15 million? How can local ads for a fiber network be so expensive? Just pay a bunch of kids to hand out flyers. Fiber is usually something people want.

If your numbers are correct it sounds like some kickback scam.
Not if they're still in the lockup and can't sell off stock in order to cover the taxes from exercising.
We can even still have voting at registered polling places with judges.

But, instead of throwing our votes into a magic black box, how about we put them on a blockchain and receive a way to audit our own votes?
I proposed to my fiancee with a Moissanite stone. One is hardly able to tell the difference. It looks like I paid many thousands of dollars more than I did for it, and no one is ever the wiser.

Go for it.
MIT 6-3 Computer Science: List of all assigned readings
It's the cost.

Of course this depends on the location and the type of nurse. I'm not in California, the most expensive place to get a nurse, where the average salary of a Registered Nurse is actually $102,700. Other states have salaries that are half of that. Even for the national average, a Licensed Practical Nurse is only getting $48,251.

Allowing a factor of 2 for benefits and overhead, nurses generally cost about $100,000.
I wonder what percentage of mobile data bandwidth is used to transmit ads vs actual content.
What if YouTube just does the same, but the goal of the algorithm is not to maximize like/dislike ratios, but actual click-through rate and watch time? [1]
It's an ad company after all.
Also, the domain of TikTok videos seems very limited in comparison to YouTube videos, so your like-based algorithm might result in bad user retention with this broad strategy of showing random videos.

So the question really is: If YouTube's algorithm is more sophisticated than TikTok's and TikTok is trying to do the same, would they still be as transparent about it?

[1] https://youtu.be/fHsa9DqmId8?t=838
While I recognize that DSPs are power-efficiency champs, I'm not aware of any DSP (or VLIW architecture) being used in top supercomputing lists, like TOP500 or GREEN500.

Its all CPU-based, GPU-based, or that weird "PEZY" from Japan (which is just... weird). Who knows what the future holds... but SIMD is currently making a big change to the supercomputing landscape (both in CPU-design with AVX512 and GPU-design with NVidia).
Nope, the problem is that disputes can be (and routinely are, by default) rejected by the claimants with no risks to them, again. Escalating beyond that risks a copyright strike (three of which mean your channel is gone, but even a single strike costs you access to various features).

The best approach is to only escalate if you understand the specific legal situation of your video and can make a case that would likely hold up in court. Needless to say most creators aren't well-versed in legalese and the risks to the creator are much greater than the risks to the claimant so most creators avoid this for "less important" videos.

Here's a nice explanation from a channel that has experience with being taken down and receiving strikes: https://www.youtube.com/watch?v=HybK82zw4us
Oh, man. I would so much rather get the animal question. For the crime question I'd just be sitting there reaching my brain about what level of teenage transgressions I'm supposed to come clean about...
It's possible an STS token was obtained using the role. If you're not monitoring where those tokens are issued to and used from, you're gonna have a bad time.

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credenti...
> all this will do is modify the negotiation slightly

There are lots of procedures where consumers have time to shop around. Presently, nobody is incentivized to compete on (or advise to) price. With transparency, that changes.
The best number I've heard for the Australian battery is $500/kWh after full installation. Individual battery cells are less, but inverters, packaging, and heat control add up.

I'd guess that for a big install they could probably get closer to $350/kWh these days, but that's a WAG.
User iancarroll was kind enough to post the complaint from PACER.
You're talking about an app. I'm talking about open source software freely posted online. Let's apply some common sense here. What you said:

> if I am using this library as part of a shipping piece of software-as-a-service, and I am in the middle of shipping a new feature when suddenly things mysteriously crash...

> If I later discover that the crash was put there deliberately, I am going to call that malice, and malice that has directly impacted a functioning business and its customers.

Now what will happen if you take this library author to court? Let's ask some basic questions that the court might touch on:

* What was the harm caused by the software breakage? You were unable to ship new versions of your software to customers, resulting in reduced revenues

* What general arrangement or expectation did you have with the library author? None, the library author distributed the library as open source and explicitly disavowed (in writing) any obligations to the library's users

* What specific arrangement did you have with the library author? None, you don't know the author personally and you never transacted with them, offered them any compensation, or any other kind of business arrangement to provide you with the library

* What evidence do you have that the author acted maliciously? Almost none–they acted erratically but did try to offer a reasonable non-malicious explanation

I don't think any court in its right mind would find any substance in this case. If it did, every Tom, Dick, and Harry would start crawling out of the woodwork claiming some OSS had maliciously broken their code. It would quickly kill OSS. And not just that, the same principle would apply to any general publication, academic or industrial research, talks and lectures, etc. Society can't function that way.
Have you personally been in this situation enough for it to matter? I asked GoMonad because he actually was skeptical and then had his mind changed. I'm not interested in people imagining what it might be useful for.
I will rally my friends and I to all run as a bloc and try to gain a majority on the council.

I'm sure some voters are concerned with the things you mentioned.

I'm also sure other voters are concerned with lowering the price of rent. This can be done by increasing supply of housing, which can be done by increasing both the number of people who can live in one lot, as well as increasing the number of lots.
"According to Capital One, its logs show a number of connections or attempted connections to Capital One’s server from TOR exit nodes"

Now there's a fail.
There absolutely is a reason for these “ratings” (characteristics is a better term). They separate our differenr stones that let buyers know what they’re buying. When you’re spending $100M on rough stones, you want to know what you’re buying. As an anecdote, the prized characteristics are different in the world. In the US size matters. In Japan, clarity matters. In a China, color matters.
RoBERTa: An optimized method for pretraining self-supervised NLP systems
Number four is the most important. Even if it depreciates over time, a house's expected service lifetime is measured in decades, if not centuries in some areas, and it makes sense to get as much good use out of a home as you can if you own one. I know people who flip their PCs every few months or so, so they can get back most of their old PC's value in order to buy this month's new hotness. I don't understand this mindset, and I use computer equipment until it stops working. And then I try to find ways to repair/revive it.
It used to be an architectural distinction but now it's just marketing, if even that much.

When PowerPC started adding complex vector instructions (AltiVec) and the Pentium turned x86 into a RISC core with translation layer around it you knew the distinction was pretty much dead.
That's still useful, thanks!
Go has a number of PDF libraries including GoFPDF which is actually really good and very well rounded. These days you can easily build a "C" interface to a shared library implemented in Go.

https://github.com/jung-kurt/gofpdf
Such a good book, recommend it to any software engineer.

Does anyone know of other books like this? That teach theory with good pedagogy?
Uh... have you actually read Machiavelli? What in The Prince, exactly, does not fully apply to people today? (As long as you don't get literal minded and say we don't live in a monarchy or something.)

Don't go by the dictionary definition of machiavellian. He really wasn't saying things that are hard to believe. He was really just pointing out the sorts of manifestations of human nature that surround us if we don't blind ourselves and refuse to see it.
There is a Princeton study that shows that the laws passed at the federal level have a 0% correlation to the public opinion unless they've donated at least $10k to a campaign. This means that the average voter has taxation without representation.

Some Harvard Business people suggested that we could curb this issue by a three pronged approach:

1. Open primaries to prevent minority duopolies in the general

2. Gerrymander with an open source algorithm or a "shortest split line" method

3. Implement single transferrable vote, ie ranked choice, instead of first past the post (plurality voting), which spoils votes and results in sub-par representation.
Truncate vs. Delete: Efficiently Clearing Data from a Postgres Table
I used Tornado to build the the WebSocket back end for this page: https://www.slickdns.com/live/. It's less than 100 lines of code and very clean.

For most web apps my default choice is Django, but for special purpose web servers Tornado or Flask are still useful.
The Q3 bot AI was written by this man https://doomwiki.org/wiki/J.M.P_van_Waveren_(MrElusive)

Carmack said that he was "the best developer I ever worked with"
https://gist.github.com/paigeadelethompson

Not much is left.
Idk if you actually read the post, but a lot of people early to computing didn't become multi-millionaires. Lee Felsenstein, who helped start the Homebrew Computer Club, has a Patreon where people support his projects and writing now. And the ones in this group who did, like Brewster Kahle, have used their wealth to fund nonprofits like the Internet Archive.
An internet service provider can impose any rules they want unless a client can produce a contract saying otherwise. Safe harbors are an indemnification against being sued for contributory infringement. That doesn't obligate them to host non-infringing content.
The problem is the granularity of the permissions is extremely coarse, so if you scan the top extensions on the chrome web store a vast number of them request access to All Pages, HTTP and HTTPS included. This is because various useful primitives require that access.

Another problem is that requesting a new permission in an extension update has extremely bad UX, to the point that any thoughtful extension developer will just ask for everything they could possibly need up front. If you request a new permission Chrome just silently shuts off your extension until the user goes digging around in the UI for the permission request. The last time I tried this about 5% of my users figured it out and the rest thought it was broken.
I used to work for a company in California that does this. I'm not sure how commonplace this is, worldwide, but there are definitely companies trading energy.

https://www.ferc.gov/market-oversight/mkt-electric/californi...

The California Independent System Operator (CAISO) operates a competitive wholesale electricity market and manages the reliability of its transmission grid. CAISO provides open access to the transmission and performs long-term planning. In managing the grid, CAISO centrally dispatches generation and coordinates the movement of wholesale electricity in California and a portion of Nevada. CAISOs markets include energy (day-ahead and real-time), ancillary services, and congestion revenue rights. CAISO also operates an Energy Imbalance Market (EIM), which currently includes CAISO and other balancing authority areas in the western United States.

CAISO was founded in 1998 and became a fully functioning ISO in 2008. The Energy Imbalance Market launched in 2014 with PacifiCorp as the first member or EIM Entity. The EIM serves parts of Arizona, Oregon, Nevada, Washington, California, Utah, Wyoming and Idaho.
Like a math proof, the one who puts the last link in the chain gets the glory (and the proof named after them).
If it's stacked up in a building maybe they can use the energy to lift-off and self destruct elsewhere ;)
AWS has Macie to catch this sort of thing, not to mention the usual AWS security automation tools available like Security Monkey. Or the fact that a pen test should have caught this, or employees following the data use policy.
Or killing that small company to protect one of their own products.
By making you believe that it works, like every other aspect of the process.
> Redis is widely used in production environments. The code quality matters.

That's how you judge source code quality? By measuring its popularity? And ignoring the actual code?
> worst case an instruction could cause 21 different page faults

Funny story is that this is still kind of a problem today, where a single pointer-dereference may be an mmap'd file over a network over SSHD tunneled through (increasingly arbitrary indirections).

foo->next = bar->next->next can be surprisingly complicated. I don't think most programmers think to handle SIGBUS errors.
I'd be interested in an examination of how the purchasers and vendors of these battery storage installations manage the balance of capacity and life expectancy vs wasted cost. If you build an installation that exactly matches your needs, you're putting a full charge cycle on the batteries on a regular basis, which reduces their ultimate lifespan and limits your ability to cope with unusual power demands.

On the other hand, if you overbuild for your needs, you increase the total lifespan of the installation and your emergency capacity but at the cost of greater initial investment as well as the inescapable fact that even the unused portion of the capacity has a finite lifespan which is always (very slowly) expiring regardless of whether it's being used, so your per-dollar lifespan could be lower with a larger capacity.

I'm also interested in how well real-world installations are matching the expected figures when it comes to amortized cost and life expectancy. Does the operating budget for something like the Hornsdale Power Reserve include the cost of replacing the entire thing when its cells are worn out in 10-15 years?
gah I watched The Smartest Guys In the Room the other day and that was only one of the things they tried to trade.

Interestingly, their broadband trading thing doesn't look as insane a decade or so later. They tried to do a deal with Blockbuster for on-demand video streaming but couldn't get it to work.

A decade or so later and we've got Netflix, which can make the technology work. Now we just need to wait one more decade and someone will figure out the "make money" bit.

As far as losing cash hand over fist goes, the only thing that's really changed is you boast about it instead of hiding it with an elaborate system of frauds these days.
This was what stuck out to me.

No mention of actively promoting their content, not even in the comment itself.

Not relying on the whims of the platforms own algorithms seems like the first step.
You'd have to have some moderation - no? Otherwise, you'd be flooded with spam and illegal content. If there's moderators, there will be bias... which is what you're attempting to eliminate with a decentralized HN.
Quoted film budgets are usually about half the actual budget as a rule of thumb, because they don't mention the half spent on marketing.

That's why films are often known as flops even when they make their "budgets" back. You're not in the money until you double the budget.

edit: Also, considering the vast majority of that marketing money is spent before the film comes out these days, and all the sales are made within a month - as much is spent on convincing people that a film that nobody has seen is going to be good as is spent on the film.
It made me think of myself as a bag of cells that leave behind a mineral deposit after several decades. The large concentrated piles of such "mineral deposits" in the catacombs prompted me to consider all the people who contributed (physically, intellectually, artistically) to building the great city throughout the centuries. Definitely a worthwhile visit!
I regularly see companies work at full capacity and fall apart because of this. When an individual or team is at full capacity (overscheduled), they tend to do things for the sake of buying time instead of actually trying to solve a problem.

For example, someone might send an API that has a minor bug or even purposely add a typo instead of a proper fix. A front end engineer would have to actually use the API, spend a few hours scratching their heads on why it isn't working and whether it's their fault, before contacting the API maintainer on it.

I liken it to traffic congestion. It works fine when you scale something up to around 50% capacity. But nearing 70% capacity, things start to slow down, and at about 90% capacity, you get total gridlock.
I don't have a problem with that code. It is idiomatic C code, like *p++ or flag &= ~mask. ++i is a bit less common than i++ but nothing unusual. The lack of of error checking is more concerning though. It can be justified though, and it brings me to the next point.

The comment is the worst part. It is useless, it literally repeats the most obvious part of the code. A good comment would be something like "there is no error checking because arguments are already validated in the GUI, also 0 is an acceptable default".

For me, comments should not repeat what the code is doing. Comments are for expressing what is in the the mind of the developer that cannot be expressed in code. Example : "constant found using empirical testing", "Hermite spline formula" or "required on Windows". (Edit: the Hermite spline example is actually a bad one, a better idea would be to write a function called hermite_spline_formula instead)

If some coding rule require you to comment, find something to say about your code that isn't your code. It will also help you think more about what you just wrote.
The diamonds people are buying for investments are not stones you’d ever see at a store - think 30ct flawless stones, up to 1000ct rough stones. The uniqueness and scarcity of those stones in particular is what makes them a suitable, yet speculative, investment. Pink diamonds, I’ve 100+ of them, they are hugely popular in Hong Kong and China, where they are mainly bought for a “flaunting investment”.
How is this person's information wiped off the Internet? I literally cannot find anything related to her. Is it just me?
That also links to her gitlab profile which contains her resume/CV in PDF format (among other OSS work).

She did indeed work at Amazon on AWS in 2016 , specifically on s3:

https://i.imgur.com/DRBKYsc.png

That PDF also contains her home address and other personal information so I'd rather not link directly.
The Case for Voice AI on the Edge
To be fair, the Saudis involved that resided within Saudi Arabia had a very unfortunate series of accidents in the succeeding years after 9/11.

It is a real stumper how coincidental it was (it isn't - they were whacked by the Saudi Gov, in an attempt to appease a big pissed-off US).
I would imagine complete credit card applications contain the type of information identity thieves would be willing to pay good money for.
Supervisors Driven by Bottom Line Fail to Get Top Performance from Employees
>If it was named TIMESTAMP_ROUND, I wouldn't need to know "Round off to MAX_TIMESTAMP_PRECISION decimal places."

TSROUND is already as obvious as TIMESTAMP_ROUND. TS is a very common abbreviation of timestamp.

And you would still need to know the decimal places.

The real issue is that it's based on TS_PREC_INV and not MAX_TIMESTAMP_PRECISION as per the comment (though MAX_TIMESTAMP_PRECISION might still agree with the decimals offered by TS_PREC_INV, it's not obvious here, and would need manual work to keep them in sync).
Are you waiting for google to release a mobile operating system and put their browser on it?

That'd show Apple.
It's even worse than that. Sure, a chunk of the video's initial ad revenue will be lost over illegitimate claims but if the video is restricted, the video is basically dead. Most videos get the lion share of their views in the time immediately after they're uploaded (i.e. the first day or week). If the video gets stuck in limbo, not only isn't the creator making any money but also the video will underperform and any cost of producing that video will have virtually no return on investment.

So in other words, smaller channels can easily get stuck producing worse content because the risk of investing significant amounts of time into a single video is too great. And even when channels don't rely on monetisation, lost exposure can limit their reach and harm their growth.