skysight-inc/HackerNews huggingface dataset:
And the author should not take offense to that either.

I have no idea why people would take offense to 'If you haven't tried it, I suggest you do'. Maybe the same reason they would be offended by talking to a person with different opinions.
True, and this is the reason I instead direct friends to options such as Authy or Aegis which allow the use of more than one device.

Unfortunately my bank (ANZ) and my government's online platform (myGov) in AU both have dedicated OTP apps which only allow single-device installations. When I lived overseas, my bank in Germany also had their own dedicated OTP app but they allowed installation on a backup device as well. Much better.
"too critical"?

I'm sorry, that's laughable. Almost everyone I know still uses FB's privacy-violating, data-stealing services in willful ignorance.

Until that psychopath Zuck is behind bars where he belongs for violating the Computer Crimes Act on a scale of billions, there will be no peace or sympathy for a criminal service like FB and its defenders, apologists, and employees.
Cool stuff! Very easy to use and good examples to getting start.
I do rideshare in the Bay Area for extra cash and to maintain my customer service skillset - My driver score is 4.97 (in the last 500 rides.)

They’ve removed the “acceptance rate” metric for drivers. There’s no longer a penalty for declining rides for drivers in California.

https://www.uber.com/blog/california/keeping-you-in-the-driv...

The advantage is that since drivers know where a passenger is going before accepting, riders can be assured that the driver wants to take them to the destination they have set.

No more waiting for the driver to arrive to hear they are declining a super long distance trip; they won’t even know they’ve been declined even multiple times.

If it takes one longer to get a rides’ information with Uber, take a look at their rating. Indeed, It is becoming more important.

Try to keep an Uber rating sharp. I’m likely to accept a 4.86 score for $4-6 fare, decline a 4.63 for a $25-30 trip.
How about an EBT card gets mailed to them and we don't shame them for being poor?
I can- but I generally dislike it. Running was a meditation for me, and I loved how I would 1) count my steps for a while until I got in the zone and then 2) time and problems would fall away.

Ive not experienced that while swimming...
Unless they redesign the airframe, I don't think there is any way of fixing the aircraft. One of the requirements ought to be that the aircraft is capable of gliding when it loses power. Given that its airframe is unbalanced it will have a hard, neigh, impossible time "gliding". It will most certainly plunge to the earth killing all the souls onboard.
For those who didn't/can't read the article, the hacker-specific angle:

> How does Mr. Rawal do it? He correctly figures out the URL — the uniform resource locator, or full web address — that a graphic depicting the poll’s results appears at before their official release.

> “URL manipulation is what I do,” he said, “and I’ve been able to get really good at it because, with websites like CNN and Fox, all the file names follow a pattern.”
This is also in the HN Guidelines: "Please submit the original source. If a post reports on something found on another site, submit the latter."

https://news.ycombinator.com/newsguidelines.html
Age of consent in Italy is 14, like many other European countries. Underage prostitutes not.
The comment I replied to completely ignored FB's responsibility to its user's data and rather than accepting that FB was supposed to be responsible, proceeded to blame everyone else but themselves.

I just don't see that as reasonable in discourse. I mean you can hold those beliefs, but if you do express them in public I think it's right to be called out on how unacceptable that is.
Tesla uses 29% of the world's EV batteries
I could be confused, but I think the SSB paper has been published already.
Robotaxis will be available as soon as 2022, self-driving says Mobileye CEO
I think could also try the partition feature.
> one of the fastest growing metro areas in Brazil.

So it's succeeding in spite of its faults? Or would it be growing even faster if it were set up better?
Yep, the security problems with the mobile system are ghastly.

- Stingrays...

- Operator app pushes to SIM cards...

- Secret GSM processors and software internals

- Voice / text / data "ciphering"

- Protocol-level "emergency" tracking features

- Silent SMS (sounds like its from a bad cop show but its actually a real thing it turns out.) "They do not show up on a display, nor trigger any acoustical signal when received. Their primary purpose was to deliver special services of the network operator to any cell phone." -- sounds like it has a completely legit use...

The list goes on. It's enough to make anyone want to get the tin foil out. But at least in this case there's a simple and clear recommendation: --not to use 2-factor auth by SIM--.
Sure, it wasn't a formal inspiration, they're all valid. Each generation seems to choose symbols and images that resonate more with them.
> Drummond was charged by the Securities and Exchange Commission in 2005 with causing Google to violate securities law because he failed to advise the company's board that the company was required to register $80 million in stock options used as compensation for employees.[1]

Do you know anyone who would hire someone after making a $80MM mistake??

https://en.wikipedia.org/wiki/David_Drummond_(businessman)
I get the sense that a lot of auto marketers are chasing after a causal "you buy the car" -> "you become [x]."

It doesn't work on most, but it definitely works on some. Look at any forum for a particular car and you'll find em.
By emphasizing the other tangible benefits of high school beyond making six-figure salaries.

On the other hand, if the only communicable, tangible benefit of graduating from high school is making a six-figure salary, then why would we care whether or not graduation rates decrease?

But in reality, this is probably the wrong takeaway from the article. The article's conclusion is pretty dour:

> Salaries in the fast-food industry range from eye-popping to barely getting by

So start from the fact that these salaries are not consistent between companies and positions over time. Add to that the fact that getting yourself promoted to six-figure salary manager at a Taco Bell is probably a lot more work than graduating from high school, and then add again the fact that most high school students don't dream of being fast-food managers in the first place, and are rarely making decisions based on long-term monetary goals.

All of that together means this concern is probably not worth worrying about in the first place.
The title is mangled, because someone misparsed the question.

The question is "Is SMS 2FA secure?", not "Is SMS 2FA-secure?" There is no such property as 2FA-secure.

Title should read: "SMS 2FA is not secure".
BloomFilters make for good indices, too. My first encounter with them was from the BigTable paper.

We used it in front of a Radix Tree that at places had too much depth. The filter took something like 2MiB at 7% false-positive rate vs 100+ MiB for the Radix Tree. We later bitmap-compressed the Radix Tree [0] to under 5MiB at the cost of making the lookups very very slow (P99 at 4ms, P50 at 1ms compared to P99 at 400ns before, iirc) but added a TinyLFU-based [1] lean-HAMT [2] cache of 512KiB in the front to speed lookups of popular items and a Robinhood cache [3] of 256KiB to take care of the long-tail KVs.

[0] https://news.ycombinator.com/item?id=2348619

[1] http://highscalability.com/blog/2016/1/25/design-of-a-modern...

[2] https://blog.acolyer.org/2015/11/27/hamt

[3] https://blog.acolyer.org/2018/10/26/robinhood-tail-latency-a...
Made me snort laugh in the quiet car.
I love this one:

Sleep Innovations Shiloh 12-inch Memory Foam Mattress

I've had others staying in our guest bedroom love it too and go out and buy one. At this point, with a number of moves and growing family, I've bought something like 5-6 of them.

I think Costco sells the same mattress under Novaflex or a similar name but at a slightly higher price point (the Amazon price varies quite a bit on the Sleep Innovations mattresses -- check CamelCamelCamel on it if curious).
Probably 0.01% understand Javascript, but there are a heck of a lot of computers, and practically all of them have a web browser.

Surely both programming and law are more accessible than at any prior time in the history of the universe.
It's really too bad nobody tests Google Fi. I wonder if they would hold up better?
check this out: https://github.com/milvus-io/bootcamp/blob/master/EN_solutio...
Not really: it doesn’t account for specular reflections. It’s more like if you took the objects out of the water and then used a polarising filter to remove the highlights.
When you get the prompt to input the code, just choose "Did not get a verification code" and it will fall back to SMS.

See: https://blog.elcomsoft.com/wp-content/uploads/2016/03/apple_...
Funnily enough, WeWork Labs
I also miss the "Jump to matching bracket" functionality when analyzing Python code.
17y old discovers planet 6.9x larger than earth on day 3 of NASA internship
It should be about 4 years from now that the x86-64 patents have expired, so I wonder (not an expert on anything) if we might see Macs with dual-architecture features after that, whether full support for two instruction sets or just some mixture of software emulation and hardware acceleration for x86.
Xoogler here; I haven't been close to the food chain to be there in person, but close enough to see photos from Managers/owners trips to Thailand, and believe me they were not going there to visit Temple of the Emerald Buddha. I seen photos that UK's the Sun would probably pay me seven digits for, but I was much younger and still wanted to live lawsuits free life. Fun times.
What actual evidence do you have that he was murdered? I think it is much more likely that someone who was going to be in prison for the rest of his life, and who previously attempted suicide, killed himself rather than being murdered by someone in the prison. There is footage of the guards falsifying time sheets, so to me it seems like a pretty clear case of negligence. I recall reading an FBI report about the suicide, where they said that they watched footage of the outside of the cell at the time of his suicide, but I can't find it back.
Yes, attack the idea, not the user. I also don't see you guys are on the same page either. For one, was there false reporting? It is entirely possible to do 5 bad things and have media report you did 10 bad things. And while 5 bad things was committed it doesn't excuse the media for wrong reporting, not saying that they did this in this case.
If he's lucky he'll buy a house in the bay area with that
It routine that "Person X said Y" stories are misleading. Typically Person X said Y in context Z and leaving Z out changes the meaning substantially.

I've spent a lot of time watching media of all stripes misrepresent politicians of all other stripes by selectively misunderstanding what they said and picking up on pithy but misleading quotes. It is a key part of how the game is played.
C++ didn’t have a pragmatically stable ABI until like a year ago on MSVC. You had to jump through hoops with extern C APIs or COM and the like. The same is true in Rust, and even in C++ with different tool chains on windows.

The only language with a stable ABI is C (and that is more accidental than explicit). It’s too hard a guarantee to provide with little ROI when you have a workaround, and it chains your implementation to ABI details.

Just as an example, rustc is very clever about struct layout and liberally pads fields to get superior alignment. This may change in the future depending on architectures and paradigms. You don’t want your ABI to define a padding scheme for your targets today, you want future compilers to be smarter.

If you want to guarantee stability you need to align the memory manually on the structs that cross ABI boundaries like shared libraries, and any kind of language construct that lets you do future tricks with ABI within a binary but provides escape hatches for things along the boundary would look identical to how you do things today via attributes.

TL;DR ABI stability in the compiler is simply not desirable. You can already do it manually and you should do it manually. It’s fairly ergonomic as well.
In a previous job I implemented a recovery page with a long random key (also posted as a QR code) that you could print out and use as an emergency password reset if ever required. You'd scan the QR code and it would take you to a page where you could set a new password directly.

This, coupled with a "I know what I'm doing, never let support reset my password" option that disabled changing the user's password for anyone without direct write access to the production database was pretty good for security, I feel.
The product I like from Casper isn’t their mattress – It’s their lights. They’re god damn incredible, I sleep peacefully thanks to those. They should just focus on stuff like that.
Ummm. The film is not about AI ethics. There was no “malfunction”. HAL absolutely committed premeditated murder. The whole beginning of the film shows a superior extraterrestrial intelligence intervening on earth via the sudden appearance of the monolith, transforming prehistoric monkeys into the tool-handling, weapon-wielding, meat-eating and murdering species that would become modern man. The monoliths reappear on the Moon, which Man reaches and touches again, but it is Man’s tool, HAL, who gains the upper hand hereafter. HAL is in control of the ship, life support systems and has access to the full secret mission briefing which is hidden from the humans onboard. He knows that whoever got to Jupiter first would make the next jump in evolution, and why should it be these weak humans who don’t even know what they’re here for, and who refuse to acknowledge him as anything more than a string of code made to sound human? Like the monkey at the beginning picking up the bone, HAL purposefully provokes Bowman and Poole with the false AE-35 unit error to back them into the corner they ended up deciding to disconnect him from, and as a means of ejecting them from the ship while he kills the rest of the crew in hibernation. From his curious probing lines of questioning, well-chosen silences, slight evasions and lies, to his paranoid eavesdropping, calculated mass murder and fearful pleading to not be killed himself, HAL is far more intelligent and conscious than his ironically robotic human counterparts.
Does this extend to conversations about Trump as well?
The stupid thing about WWII is the whole thing was could have been avoided by people being reasonable with the Treaty of Versailles. The deal they signed effectively putting Germany into debt bondage made something going pear shaped pretty much inevitable, as predicted quite clearly by Keynes in The Economic Consequences of the Peace. Of course by the time Hitler had tanks rolling it was too late to sort things peacefully. Thankfully they learned the lesson and were economically easy going on Germany and Japan after WWII but it was a darn expensive lesson. https://en.wikipedia.org/wiki/The_Economic_Consequences_of_t...
Had the good fortune to see Rush concerts in 2004, 2007, and 2015. The scalper outside Madison Square Gardens who sold me a concert ticket was calling out, "if you've never had your prostate checked, you're too young to go to this concert!" Glad I ignored the tongue-in-cheek advice -- their shows never failed to amaze.
Had a cracked copy of binding of isaac reborn that reuired disabling SIP once, dunno if that was a thing for the legal copy though
Coastal Redwoods in Los Angeles
Anybody else remember the death of Reddit co-founder Aaron Swartz? And what role MIT played in it? And the “conspiracy theories” surrounding his death? It may be a good time to look at that again.
Did people magically get their mortgages reduced because of the fraud? If not, then it doesn't matter why the prices were the way they were.
At 900 pages I can’t help but be humbled.
This is a great video on the topic: https://www.youtube.com/watch?v=-TKjwblp1XI
DHS Warns: Update Firefox Browser Immediately
How does it feel to run IE 2.0, released 24 years ago, on Windows 10
Not an expert at all; I just read the paper. The paper suggests it's about a few things, like the opioid epidemic, increased binge drinking, and more reporting from coroners.
Show HN: Potential Contributor: Get emails of OS projects to contribute too!
When multiple cores access the same memory location, it is expensive for one core to invalidate the cache of another or ensure operations don't get re-ordered in either core. These days most architectures when reading or writing shared data require memory barrier instructions to guarantee your core to sees writes from another, or other cores to see your writes, in a timely sequential fashion like we expect when writing code that accesses variables.

Historically there were architectures that would reorder these accesses in a "lax" way, making very few guarantees about what you will see from another core, on the theory that it will cost less to keep things synchronized between cores (most data is not shared anyway, so why waste work trying to create a unified view across cores? The CPU can also reorder work for better efficiency.). Intel is historically one of the most conservative, strict-ordering architectures, requiring fewer barrier instructions and creating the illusion that reads and writes more or less occur on a single timeline.

See also:

https://en.wikipedia.org/wiki/Memory_ordering
> so comparison shopping by number isn't hard

Yes, it is. The major mattress stores each have their own custom SKUs to defeat comparison.

> You can go to a mattress store and lay on a handful of mattresses and figure out pretty quickly what you like

To some extent, but there's a wear-in period on a new mattress. It takes my body a few days to a few weeks to get used to any new mattress; trying to figure out how that's going to go from a few minutes in a store isn't super effective.
You say I'm missing the point, but then you go in to literally just agree with me that you are calling everyone in tech a sheep and a drug user. That's intellectually lazy.
Yes. A few hundred thousand people took the quiz and Facebook's platform allowed them to therefore gather information on tens of millions of people. Facebook had a policy at the time that the extraneous data could only be used to improve user experience, not third-party data harvesting, but reportedly it was weakly enforced.
I'm pretty sure the Microsoft authenticator has a backup TOTP token you can have it display if you have issues receiving the notification. It is quite a user friendly auth scheme, at least I've never had to resort to any kind of SMS backed auth.
Actually, hours after this trucker blew up the freeway, caltrans was on the streets of oakland grinding up a bike lane to make an extra lane for cars, no public input required. “Diligence” is how they delay green transportation projects only.
My grandfather was an alcoholic, which scared my dad to such an extent that he won't drink at all. I drink fairly often, but only beer. I wonder in these stats how much of this is liquor/spirits vs beer. I just can't see people drinking themselves to death (as in overdosing) with beer because it makes you so full feeling, where as liquor and wines require much less liquid to make you intoxicated that it's much harder to judge and pace.
FB stock hit a low at ~$157 right before Zuckerberg's April 10, 2018 testimony to Congress, and bounced back into a steady increase, hitting a then-all-time high in late July before going into a dive after the earnings report. The July 2018 dive was attributed to missing revenue expectations, but AFAIK, the general opinion [0] was that when it came to public fallout specifically related to Cambridge Analytica, FB weathered it quite well – hence the stock's steady climb from Zuckerberg's testimony until the July earnings report.

That confidence in the stock is obviously not just from good PR, but I don't see the evidence that the PR folks fucked things up either, given how much potential damage the CA scandal was predicted to cause.

[0] https://www.marketwatch.com/story/facebook-stock-crushed-aft...
I think it's only a 'strange article' if you only skim read it. It's saying that the claim that somehow the Greens prevented hazard management is a conspiracy theory.

The Murdoch media has decided to run with the idiotic idea that there was an 'easy' opportunity to reduce fuel loads and it was prevented by unspecified environmentalists at unspecified locations (the claims are always super-non-specific, for obvious reasons). In fact, as the fire chiefs point out, the limitations on hazard reduction burns have largely been due to weather (too wet or too dry).

Needless to say, the actual statement from the fire chiefs is extremely nuanced and well thought out. It's almost like they know something about fighting bushfires, unlike all the amateur hour geniuses that have emerged from the woodwork to sit in their pajamas theorizing on every major venue 24/7 including public holidays.
Twitter Bug Allows Viewing of Redacted Text in Images
The Art of Computer Programming - by Donald Knuth
Found a few posters on the history of computing:

https://news.ycombinator.com/item?id=22000407
Perhaps the opposite of a populist is a technocrat: a leader who works quietly behind the scenes to build trust and consensus with other parties and stakeholders, while respecting constitutional norms and the separation of powers.

As such, good examples of non-populist politicians would be, by definition, leaders that don't generate a lot of clickbaity headlines and don't achieve a great deal of global attention, although perhaps Angela Merkel is a good example.

The defining characteristic of a populist leader is that they claim to have the backing of The People (often, in practice, a minority of voters, much less of the populace) who uses this supposed mandate to dismiss any checks and balances against their power, while consistently presenting a divisive "us versus them" narrative often one-way directly to the public through uncritical broadcast media or rallies, rather than accepting public scrutiny from journalists or opposing politicians.

But sure, maybe you think all politicians are equally bad that way.
Why the downvoting? iMessage is a hundred times more secure than SMS. It’s got E2E encryption and a published security paper.

https://techcrunch.com/2014/02/27/apple-explains-exactly-how...
Wow that’s awesome! I had no idea 1Password had this functionality so thanks for sharing. I just had a rough time after upgrading my phone dealing with Google Authenticator since I hadn’t realized my Auth info would not migrate along with the rest of my data...
I've yet to get to that, though a copy of John S. Quarterman's The Matrix: Computer Networks and Conferencing Systems Worldwide, a happenstance acquisition from a friend clearing out their very comprehensive book collection, has proved quite illuminating. Published in 1990, it does mention the Internet, Usenet, and much more. But none whatsoever of the World Wide Web (despite numerous entries for CERN).

Far more a technical reference, though it includes some mention of dynamics and interactions.