skysight-inc/HackerNews huggingface dataset:
One thing I'm not clear on from the posts is whether the credit card fraud is still ongoing on his account?

I remember reading these

https://www.theguardian.com/money/2018/apr/21/amazon-why-am-...

https://www.independent.co.uk/news/business/news/amazon-pack...

In both of those cases they seem to line up with the theory of unscrupulous resellers wanting to bump fake reviews, but in neither case the victims are financially worse off through fraudulent transactions
Coating regular gum would probably not work. The nicotine is embedded in the gum base itself. That's why the instructions for using nicotine gum say to chew just long enough for you to feel the tingle that nicotine creates against your oral mucosa, then tuck it between your gum and cheek for 30ish minutes or until the tingling stops. Then you give it another couple chews, just enough to expose more of the nicotine to the surface, and place it between gum and cheek again.

The nicotine is slowly absorbed through the oral mucosa. Coating the gum would give you an initial burst of nicotine, but would not have the sustained drip of nicotine that the traditional nic gum does.

I suppose one could melt down gum base, add a vaping nicotine solution, stir it together, let it set and then cut into pieces... but I would worry about the PG or VG that the nicotine is contained in doing something weird to the gum base. And you would have to be careful to stir it quite thoroughly to prevent nicotine "hot spots" in your gum.

Making a homemade lozenge or mint would be much easier, and I believe some people do, in fact, do just that. It would be similar to making hard candies, only at some point you would mix in the nicotine liquid. Since many of the flavorings used in vape juice were originally designed for use in baking and hard candies (and usually have a PG or sometimes VG base), I'm pretty certain the PG or VG of the nicotine won't screw up the texture of the candy.
Extra fun tip I'm sort of nervous putting out there just because it's a potential attack vector: if you used the same email address as your existing MyDisneyExperience account, guess what? The password you set while registering for Disney+ is now the password for your MDE account - they were "merged" without notification (that I saw). So not only is your Disney+ account compromised, potentially the account you use to book vacations is as well.

EDIT: I have "merged" in quotes because I am not sure if changing your D+ email changes it for your MDE account as well, or vice-versa.
In my experience, this stopped after I stopped drinking and made sure my wife is the only one who can access our Amazon account.
- Asking your co-worker to mute their computer speakers whenever a "Slack Chime" plays loudly in the open office.

(the better solution of course is to fully mute these notifications in Slack)
This could probably have been on one page for easier reading
A news article on it with more info and the full HackBack: https://unicornriot.ninja/2019/massive-hack-strikes-offshore...
Being in the same level as cable tv isnt great in this day and age
Yes, there is essentially nothing to see, here, beyond "measure".
I'm sure some people do. I prefer to pay for things though.
The Four Workhorses of the Data Apocalypse
I've seen similar. Very curious about the fix and post-mortem though
Can't keep the HKMaps app but we can ban this. interesting.
Back in my IT days we used a laptop that had a windows NT 4.0 sticker on it (running windows 2k) to run the ID printer that printed company IDs. These kinds of setups aren't that uncommon. At small scale it's easier and cheaper to keep old stuff running than to migrate.
At a minimum Amazon should have to help clearing up the issue. I guess some entities are above the rules most of us have to live by. Same with hospitals that can repeatedly charge bogus items without any consequences.
Pastebin with translated guide on how they hacked the bank:

https://pastebin.com/8rXhtqgr
I currently work for a startup and all three of us are hotdesking. We're constantly moved to new spaces in the hotdesking space because a new company is leaving/moving in. I've sat beside recruiters, property managers and salespeople.

There's no "quiet" room. The meeting rooms cost a few hundred and need to be pre-booked.
My home environment isn't a quiet refuge either. Beside a busy street, more flatmates than their should be and a room beside the kitchen which is used late in the night.

The only quiet I can wrangle is a few hours at a local library on weekends before the kids come in for the reading and writing sessions.

The noise has gotten bad enough that I'm considering quitting my job and running away to a small town.

Yes, you can use noise cancelling headphones but:

1. They're uncomfortable for long periods

2. They don't really block all the noise and you live in anxiety waiting for that one blaring ringtone to squeeze through

3. I find it difficult to concentrate with them on. It feels like a heavy, constricting object squeezing my temples.

No solutions, just a rant.

EDIT: Thinking about it some more on the transit to work this morning. I believe the constant battering to my senses has made me more irritable. I tend to avoid my flatmates and reply with dismissive grunts and hand waves. Ditto for people in the shared space. Small things upset me even more. A failed build pipeline or a new Jira request will infuriate me. I've been countering this with more breaks from the screen to take walks around the office block.
Homeless to housed: Doreen Traylor’s virtual life helped her out of homelessness
This is pretty cool.

It might be work stopping the browser 'loading' itself inception style with some kind of blacklisting of loadable urls - I assume you already have something to protect against SSRF type attacks on the platform itself.
Plug: if you care about this topic and are interested in working on this problem, we're hiring at Aclima. We've got contracts with the major air quality regulators in California, and are looking to scale. Ping me at igor@aclima.io
Thanks!

I haven’t yet made any credible attempt at typing this, my first priority was trying to get it to work and understand it.

And while currently a highly dynamic system is required, I don’t believe this is inherent, it’s just that this stuff is different enough from current practice that you need something dynamic enough to allow the deviation.

Now that it’s working, I have started to look more closely at typing it. I think it should be possible.

As a matter of fact, SCs and PIs should actually make things more static, because the combinators are configured once and then pretty much used as-is.

Any help gladly accepted and appreciated.
HN moderation has nothing to do with that.
Finding the information can be easy, but coming to a conclusion from it is harder.

For example, in the links you provided, we can see that AccessNow is supported by Google and Facebook, but also by Mozilla, which is generally considered to be a strong privacy advocate. Similarly, CDT is supported by Google and Facebook, but also by DuckDuckGo and Mozilla.

So what can we conclude from this? I'm not really sure. It could be any of:

1. Mozilla, DuckDuckGo, etc. are supporting organizations that are working against the interests of privacy.

2. Google and Facebook actually care about privacy.

3. Privacy is a complicated issue and there aren't really well-defined "sides" to take.
Also replace NYT with SiriusXM for similar results.
Safari’s reader mode works well in this case.
In theaters you'd run into the problem of only have 24 frames per second to deal with.
Mental Health in Tech Webinar with Alexis Ohanian
To TDD or Not to TDD?
Fair enough.

So "somewhat" was the diagnosis, not my experience.

But I have known other red/green colorblind people. And I can distinguish reddish vs greenish colors better than some. But worse than others.
I think what the other poster was trying to say is that in the US defamation law treats public figures and non-public figures (and confusingly "limited purpose public figures") differently. The standard of "actual malice" applies to public figures only, the standard is lower for non-public figures. Which invites the question of "Is anyone the NYT writes about automatically a public figure?" Or even a limited purpose public figure?

IANAL so I don't know the answer, but I hope the answer is no. Since if the answer is yes it would allow a large media organization to thrust anyone into the spotlight and defame them without recourse as long as "actual malice" can't be established (ie the Covington High kids).
Does fracking cause much air pollution of the type discussed in the article? I thought the main issue was groundwater and earth quakes , and methane gas release / flaring.

Plus there are many countryside areas with no oil.
If flags are appearing on them, that is because users are flagging them.

Your comments are likely being downvoted because they break the site guidelines: https://news.ycombinator.com/newsguidelines.html. Note the second-last one.
Its not just you, there are memes that compare Google search results and Bing results now, with Bing giving more mechanically specific responses

Google has "overfitted" because their A/B test told them messing up more queries gets them higher "engagement". They are masquerading engagement as satisfaction, clouded by their incentive to have people dwell on ads longer.

Memes:

https://i.kym-cdn.com/photos/images/newsfeed/001/608/639/8ef...

https://i.kym-cdn.com/photos/images/original/001/608/619/bec...

https://i.kym-cdn.com/photos/images/newsfeed/001/608/641/517...
Reminds me of an int32 <> int64 mismatch that overflowed precisely also on the night of Dec 24th!
The original version of the programming language Scratch was written in it.
I have a uHoo and it’s been great. The readings are inline with some control sensors I got to test the readings.
Oh God, quicktime events are leaking into the real world. Press X to not die.
Also contains some info on how they hacked Hacking Team and Gamma Group.

Edit: Also a $100k bounty for future hacks on certain types of companies.
For classrooms, the Chromebook is far more than a cheap notebook. It’s a gateway to all of Google’s services.

Google was very consistent in its approach to the education market, making it easy for teachers and students to get on board.

My oldest child's public elementary school started having kids use Google Docs about 8 or 9 years ago. I purchased a Chromebook not long after so my Mac wouldn't be used for homework, and the younger sibling got a free Chromebook handed out by the school at the beginning of high school.

Docs, Drive, and a bunch of other G Suite for Education tools are now the foundation of both my kids' classroom experience. Neither has ever asked to use MS Office for anything, and no one in our family uses the equivalent Apple office apps.

Macs and PCs aren't banished from the school system, however. I see them in libraries and certain classrooms where special software or heavy-duty compute power is required. My oldest also used money from a summer job to purchase a new MacBook Air a few weeks ago to prepare college essays and to use at college.
The fastest supercomputers hit higher speeds than ever with Linux
This would have the benefit of putting the onus on Amazon to justify the charges.
I think many people, even if they pay for the services, still torrent. It’s so much more convenient to have everything in Plex where it plays across all devices rather than chase down which app/device combo has the content you’re looking for.
Layman's opinion here, but of course they'd want to reuse their rockets? Why would throwing away your entire product and having to create again from scratch each time be the ideal?

This would be an iterative process. First, figure out how to successfully recoup the rocket. Second, see what issues exist with the integrity of these rockets, and work to fix those. Try reusing. Find more issues, fix those, etc. Eventually/hopefully, profit?
This isn't that. In the thread's article the author said someone stole their identity and used their credit card to order these things from an Amazon account they don't control. That isn't what your link describes.
Aurora Supercomputer to Feature Intel First Exascale Xe Gpgpu, 7nm Ponte Vecchio
That's heartbreaking - have you thought about setting up cameras so you have unambiguous evidence in case you ever have to bring legal action? Are they ever armed? Would it be worth while patrolling the perimeter of your land with a rifle every now and then or would they just leave and come back later?
American tech imperialism in the real world.
Apple thinks the US has the moral authority to ban the vaping apps...except maybe the rest of the world disagrees.
Your analogy is broken. A party and a public forum are not comparable.

Moreover, if a member at a party was part of a cult I would probably try to bring them out of it.
You're about the twentieth person on this thread to insist that the NYT article is "fake news" but not provide any specific assertions about what is wrong.
I feel like some of the objection to "human intervention" comes from the fact that things that society at large used to determine was true or false, black or white, are now less so. There is now so much misinformation that a huge portion of the population now screams "censorship".

I mean, factually, there is 0 evidence vaccines cause autism, and it was shown that the guy who started this conspiracy theory did it basically as a scam to make money. So am I supposed to be upset or something that Google is tweaking their algorithm to not push falsehoods? Same thing as the suicide query. I say this as someone who has and still periodically suffers from deep depression, who has searched for suicide methods in the past: am I supposed to have a problem that Google is "pushing" results that try to keep me from killing myself?
I am finding No. 1 and No. 3 to be absolutely true in my new job (open office). Loved my Bose QC headphones when I was using them occasionally at a coffeshop or on short flights, but for 6-8 hours? I'm finding that I'm leaving work with a headache now. It's making me consider the Airpods Pro since they're not vice-like but do include noise-canceling.
I imagine that was not the exact intent. Perhaps it was designed to respond to wireless signals, but something triggered a fault.
I used to collect and restore pocket watch movements. This looks like a really lovely guide and is the kind of thing that's quite hard to find. Horology isn't a "very online" kind of pursuit.

One of the challenges starting out is getting watches that were made to be repaired, but aren't too expensive. It looks like esslinger sells the movement covered here for $45, which is a great deal[1]. I used to buy old soviet watches like Molnija[2], which were unauthorized copies of high quality western movements.

Watches were very much the cell phones of their day! If you enjoy the evolution of mobile computing you might find them compelling.

[1] https://www.esslinger.com/genuine-seiko-3-hand-automatic-wat...
[2] https://en.wikipedia.org/wiki/Molnija
So when people say "my water bill is higher than $X", do they mean the combined bill? Does the town I live in just have abnormally high water prices for an area without water scarcity, or is water just artificially cheap in other places?
Microsoft Prepares x86-64 Support for Windows on ARM Devices
This is going to be swept under the rug faster than Epstein, assuming it even surfaces in the mainstream press at all. Lots of rich people run their stuff through the Cayman Islands, probably more than through Panama. So far, as far as I can tell, no mention in the US. The entire front pages of major national newspapers (WaPo and NYTimes) are dedicated to their single-minded mission of telling everyone that orange man is bad.
Apple is taking a moral stance against addictive substances? Perhaps they should ban Facebook, Twitter, and Instagram next, to really free us from these unhealthy addictions.
> The meeting rooms cost a few hundred and need to be pre-booked.

Is this one of those "we work" type of environments where everything is rented piece meal?
Bingo. People using the same login on multiple sites.

The sellers get Massive email: password lists which are known combo lists. These are usually from hacked sites that have been SQL injected.

People probably all have giant lists of Netflix, Hulu Etc. accounts and then just recheck them on Disney+

Then they'll use a checker app which just mass checks the sites. I imagine Disney don't have a catchpa setup or requiring it after a large amount of failed logins.

There's no point IP limiting logins as most guys will be using massive botnet proxies services that give you a zillion IP's.
And CVVs. Storing CVVs in any form breaks PCI.
I also don't really understand the point of the multiple pages layout.
It does seem like a particularly soft target in that regard.

We really need a 2FA solution that's friendly enough for normal people to use. Like, yesterday.
This is a ridiculous statement that completely ignores the social expectations of each company. People generally expect reporting media to report the truth unless they have some strong bias (like political), people expect fedex to deliver packages. Deviations from that result in demands that they "stay in [their] lane". A news story by NYT is going to have more impact than some company with a reputation for destroying packages.
Intel’s Xe for HPC: Ponte Vecchio W Chiplets, EMIB, Foveros on 7nm, Coming 2021
To the extent that many of those conditions result from anticompetitive behavior (eg preventing interoperability), rather than a lack of outside development interest, probably.
Simple. Do a one-month amazon embargo on yourself, and tell your reception to refuse delivery on any amazon parcel with your name on it. Hopefully Amazons processes will flag the buying account as having a false address.
Yeah in the authors example they are writing a .npmrc file but it could also just as easily be outputting the env variable of the secret. Fundamentally if NPM can access the secret in the build that means anyone who can modify the build process can also access the secret.

There are so many vectors of vulnerability: from modifying NPM package.json scripts, to modifying makefiles, to modifying the build scripts, etc that I find the only true solution is to have one public repo that accepts PR's from the public and only does checks like linting and running the tests, but does not have any access to secrets for publish. Ideally the public repo also does not contain your actual publish scripts either, only you as the package owner have access to them, as they are stored in your own private repo.

Then have another private repo that you sync into or an external, fully private build system that keeps the secrets, and does the real NPM publish. I think it is just far too dangerous to do the NPM publish from the public facing repo. I assume the author is well aware of this too, but just wanted to include a warning in case anyone else hasn't run into this or thought of it yet.
Besides, the people contributed when it was GPL/LGPL. If it was MIT they might not have bothered.
>the NYT has a target market that is reflexively skeptical of businesses and commercial activity

Where'd you get that from?
Totally agreed on the point that you just won't be available all the time. You can set up all the alerting you want and high-availability on different zones and whatnot, but when sh*t hits the fan, you will still be the only person in charge for putting everything back together.

I concur that hiring someone, if you can afford it, even part time, would be a great idea.
offf, that scroll hack.
I've noticed this particular kind of issue is helped significantly by white noise generators. The last office I worked in (i'm now remote) had a white noise generator built in that cancelled out a lot of those sounds like chip bags and chewing that are super jarring in a vacuum. I didn't even realize it was there until the day it broke down for a few hours and we ended up with a sudden eerie silence. Suddenly I was being bombarded with those kinds of noises that had never been very distracting before.

Maybe it's something you could suggest?
The title wrongfully is accusatory. The switch is very bad when it comes to network "cleanliness" with its propensity to broadcast for anything. But the fact that some roku devices are unable to handle proprietary network calls is on Roku not on Nintendo...
Most Americans are going to learn a very different way of life. Either they can start living sustainably or they can start living with the consequences of unsustainability. Those are the only options. Electric vehicles are not going to fix much when our electricity is still mostly made by fossil fuels.

We need to stop subsidizing suburban and rural living yesterday.
For both, the fact that you boil the water is a huge health boost.

Though I was thinking of the caffeination of the workforce. And coffee has more of that than tea.
You can't come up with a one in a billion scenario that you would accidentally take a hallucinogen?

You never ever have a dream that seems real for a few moments?

And failing to make new memories would be a specific but possible injury.

We're supposed to be working with very low probabilities here. That's the whole point of the thought experiment. If you're going to round anything below one-in-a-million to exactly zero then that's your prerogative, and it works in everyday life, but it's objectively wrong; it would falsely reject the idea of lightning strikes and winning the lottery.

> I think this is just enhancing the deep unreality of what you are proposing.

You didn't even reply to the part about removing all the silly stuff and cutting it down to just "guy offers to sign a document for lots of money"...
The electric isn't the issue here; an electric motor in a tight little RWD coupe would be amazing. It's the gargantuan SUV thing going on here that is the issue
Regrettably the media needs to publish what gets the most clicks; unfortunately what gets the most clicks these days is partisan stories that gets readers riled up.

That Panama leak story was also quickly "forgotten" by the MSM.
Cool Story Bro
Not necessarily. The law will be challenged in the courts and they'll have a strong case that it infringes their intellectual property rights.
I'm suggesting that all the buses in the city, are not enough to make a significant dent in the evacuation needs. This would be the case even if all transit in the city was by bus (no train/subway, and no private cars - obviously this is unrealistic).
I tried to checkout the source code using the link[0] from the developer page, but it links to what seems to be a private Github repo.

Is the source code distributed? I can't find it.

[0] https://github.com/Kitware/VeloView/blob/master/Documentatio...
They spent $850,000,000 on a new building in New York City in 2007.
> Most people familiar with the situation are attributing the problem to a Roku, in that it's the Roku devices that are malfunctioning and not the Nintendo Switch.

I would certainly hope that "entering an endless boot loop" is considered a malfunction no matter what network traffic is occurring.
Movement of people has economic benefits just as movement of goods does. If anything, in a service-based economy like that of developed countries, movement of people is more important.
I just switched from GNOME to KDE. Both are great desktops but KDE and especially Dolphin do so much more out of the box.