skysight-inc/HackerNews huggingface dataset:
HN fascists incoming. All criticism of the train wreck that is the Trump administration must be completely removed, regardless of its accuracy and veracity!! Must flag! Must flag!!
I have seen that. I suspect it's from production. If so, why do people orient the droops downwards, becomes the question.
> Seems more likely to me they're just lying about being smokers

Being a smoker has been a standard part of your medical history for a long time now for obvious reasons. There's no reason to think there is a coordinated strategy for lying about smoking in the context of a pandemic (much less revising patient medical histories, which would be the medical service industry lying).

50%+ lying about smoking in the face of potential (or actual) respiratory failure is laughable.
How does that addresses the issue?
From the looks of it, this was not a password attack, this was either an inside job or an abuse of an API.
There were no Sim-Swaps, at least not from the Student. Later it was revealed that he simply bought the Data & published it. The Hacking did somebody else.
Microsoft, in 2003, was the laughing stock of software security devs of the world.

Perhaps they were “at the forefront” with their corporate LoC—IBM—signing off—daily status meetings -policies. But not security.

The Internet happened in mid-90s, not 2005!
No, that's easy.

People's accounts get hacked all the time. To help them recover is often a manual process, because the true owner of the account can become unclear. To be able to do that a support worker must be able to change the email address on an account, undo 2FA settings and make other changes because hackers will typically change the email address and add 2FA of their own phone as the first step in an account takeover.
This seems more and more like a diversion for something else.
56ms is huge in a competitive game, reaction time are around 200ms.
Ending at-will employment: a better remedy for cancel culture?
why are the two things mutually exclusive? :
- 1. getting some you want for yourself (i.e. the security of marriage or having children)
And
- 2. Giving up personal freedoms and sacrifices

Many famous people, for instance in sports or the sciences, have literally climbed mountains with great personal sacrifice all while pursuing personal happiness/life goals... in my mind, real heroes are those that don’t want to do something but do it anyway because they believe it’s the right thing to do...I’m not sure this applies to most fiancés or parents-to-be in the west. To think otherwise is childish teenage thinking...because that’s how were indoctrinated as kids in the west. I mean just watch Disney movies...
Creating a Buzz Around Your Launch with Rob Cornish of Gain Higher Ground
Someone close to me was having issues with Gluten for years. Went gluten-free for most of the last decade to stave them off. Had chronic heartburn and difficulty swallowing in some situations (throat felt “too small”).

Turns out it was some sort of allergy resulting in Eosinophilic esophagitis. Now that they are medication, most all of the symptoms have dissipated.

If you are experiencing throat issues related to gluten (or other things in the exclusion diet) it may be worth getting checked out.
> The only possibility we consider up front is that we might need to restart the process of validating the timesheet from the scratch

This makes no sense. Unless you either a) alter the code or b) delegate to a human somehow[0], restarting the process is pointless - you'll get the same outcome.

> If they decide that they want to make use of that restart strategy, we have successfully delegated the responsibility of making that choice and providing data for that restart elsewhere - to the caller.

So get the caller to give that same info first time, and the exception won't happen because the exceptional condition has already been accounted for, by "provid[ing] data" (that necessary data) the first time round.

[0] which you mentioned and I did find interesting
As said by the Dr Gregory House on 'House MD' series, 'everybody lies'
What capableweb said.

Furthermore, I wonder how long does it take to enlarge a pk column using alter table on a database that has a significant fraction of 4 billion rows?

EDIT: I'm not arguing that github would not benefit from TiDB; they might be genuinely better of with it on many fronts. I just wonder if it's fair to plug a product this way
How to promote innovation and creativity with optimized workflows
It's easy to memorise all those too without necessarily understanding them.
It would with Trump - because we know his diplomacy runs through Twitter. With other presidents like Obama or Bush (did Twitter exist back then?) I would expect the risk is lower.
I was helping out a friend to make a presentation/training on IT Sec, and while I was searching for some fancy sim swap rigs photos, I saw this image [1] that lead me to this article [2]: "Detectives smash illegal SIM swap command centre in Ruiru"

and from the article: "Officers found 30,000 SIM cards, 240 iPhones, 150 MI phones, 2 laptops, 2 and other electrical appliances. The gadgets were plugged into a system."

[1]: https://nairobinews.nation.co.ke/wp-content/uploads/2018/08/...

[2]: https://nairobinews.nation.co.ke/news/detectives-smash-illeg...

It doesn't add up 900, only to 390.. but still.. if these guys would focus their ingenuity in something positive, they could have accomplished so much more in life.
Just make the corners see through.
If I had to guess, the attackers probably didn't even need twitter employees to have direct access to the accounts. If support tools allow Twitter support staff to change a user's email (which would make more sense, but still be extraordinarily unsecure), you basically get full access to the accounts the moment you get control over those tools. It would also explain why all the account emails seem to have been changed.

But even then, that there is no system to detect mass modifications and no delay before the changes take place is incredible. Unless they were able to social engineer their way into multiple employee's accounts to avoid detection, which would be an incredibly bad problem by itself.

Twitter seems to have a shaky history when it comes to limiting employee access to account info.
But the remarkable thing is, the agile software methodology is equally applicable to non-software. SpaceX does the same with engines & rockets. Tesla does the same with cars. That's the real breakthrough.
Yep, pretty much. I'm a strong proponent of "explicit is better than implicit" in all cases where there's no default that's obviously preferable, and this is is one of those cases - that different languages picked different defaults is all the evidence I need.
There are some case studies on the website [0], but I would be wary of them. My experience from working in these kind of research environments is that the case studies are consulting jobs where a few PhD students do work for a company, and in return you can use the company name and write on your website whatever you want. They are probably not actually using the product. I'd be interested to hear about actual users and their experience.

[0] https://www.snorkel.ai/case-studies
No, I guess the question is:

Why s0 = (w[i-15] rightrotate 7) xor (w[i-15] rightrotate 18) xor (w[i-15] rightshift 3)

instead I dunno, rightrotate 5 xor rr 21 xor rr 9

Or any of the other steps that have apparently "magic numbers" or "magical steps"
Any gold dealer begs to differ.
The BTC address used by the malicious actors has received ~13 BTC so far. That's around $120k in value at the time of me writing this comment.

Not sure if such a massive, simultaneous hacking operation makes sense for ~$120k worth of BTC. As other commenters mentioned, postmortem of this one should be interesting.

https://www.blockchain.com/btc/address/bc1qxy2kgdygjrsqtzq2n...
No NFC? I guess Google / Apple pay could never run on such a device. :(
"Search blacklist" is one of the things that indicates a shadow ban (per https://shadowban.eu/). Lower left corner in the screenshot.
you don't say how much you eat, but are you testing your ketones after eating meat? Protein in moderate to high quantities (especially lean proteins) can pull you out of ketoses quite easily.
Why?

The tool in question is likely used by low level support/abuse control workers. The huge pressure put on social media firms by liberals in recent years to crack down on "abuse", "hate" etc means they need a vast army of people to review complaints about harassment, "fake news", account hijacking etc. Those employees aren't all sitting in expensive San Francisco on a corp VPN, are they? They're probably going to be in places like India.

From the mention of BeyondCorp, it feels like there are a lot of Googlers in this thread who aren't really familiar with how Google handled the same problem, or at least, used to. For example back when Orkut was big there were huge numbers of people in Brazil who had the power to censor content, ban users, handle victims of phishing and so on. It was the only way to scale the moderation users and governments there demanded.

An ideal user admin tool is very fine grained. But once account hijacking entered the picture, it gets hard to truly restrict takeover permissions to a tiny number of people, because accounts are constantly being taken over by third parties and need to be reset back to the true owner via manual intervention. Attempts to automatically handle that are very hard, I know from experience. Hackers like to abuse any system put in place to stop them taking over accounts (like 2FA) to stop the true owner taking it back once captured.
Dynamic liquefaction: a mass movement that can sink ships
An Oral History of 'Goldeneye 007' on the N64
> Can anyone explain what happened in this block of transactions to me?

These transactions were sent from a vanity address(es) [1], and in this case they're used to spam the recipient with implied messages, specifically about their poorly viewed scam--take it as a 'l33t' way of sending a message, hence the amount on the last tx. Another notable one was the EnjoySochi, as in the Olympics, transactions that spammed the network for a while 6 years ago [2].

1: https://en.bitcoin.it/wiki/Vanitygen

2: https://bitcoin.stackexchange.com/questions/22404/why-is-enj...
My Privacy Is None of Your Business
> yeast vs starter

Commercial yeast vs. starter [naturally occurring yeast, flour, and water]
True enough, but in the same way that mob rule is the normal human interaction pattern and a right to free speech or a fair trial is an unnatural exception.
From reading HN comments, it is more likely that the attacker changed the account email from the admin panel and took over the account (even accounts with 2FA enabled), which seem more likely to me.

To prevent this kind of mess, Twitter should add more restrictions do disable 2FA on an account (multiple admin authorizations, email notification, add delay before the action is performed) and also change the account state to unverified and add to the feed a "email changed" or "identity changed" status. I also think that changing the email should not be immediate and that the old email should be notified of the change.
> It's nearly impossible to find out which of the umpteen repositories contains the source for the class you're trying to understand
> OmniSharp has a "go-to-source" option, but you only get the real source if it's in the same solution.

I have to admit I almost never run into this issue because because I don't really care what the source of the standard library does, the docs have always been sufficient for me. You could try https://source.dot.net/ though.

In the very rare case I do want to see the source of some 3rd party code I use dnSpy. It isn't as nicely integrated, but it's a very nice decompiler and debugger.
Somebody must be drinking a lot more. Sales at my brewery have approximately tripled over last year. It has become a business challenge in not having the capacity to keep up with demand.
I guess you might have a particular predisposition here, and that’s okay. If you read the article however it seems to be the case that Apple and Ireland probably did break the law on some technical grounds but they were able to get off based on the fact that the EU were so cock sure of themselves that they didn’t bring the case properly and Apple/IE got off on a corresponding technicality. What this case has shown is that the legislation is far from clear in this area (which is to the detriment of all parties in this case, in fairness). You can expect to see more rigorous legislation brought forth on foot of this, probably strong armed in on the back of a post-COVID recovery package.
5 Mental Illnesses That Every Programmer Faces [video]
That naively means EVE simulation could be about 10x as fast if written in something else? Or did you speed up some modules in a native/JIT language?
Interesting to see all the gaslighting tools Twitter has on their admin dashboard - "trends blacklist", "search blacklist" etc
Congrats!
I quit smoking 11 years ago now, i was smoking a bit more than half a pack a day. I went cold turkey too, originally more as an experiment.
(I wanted to feel how some of everyday actions were not driven by my decision and choices but by habits or physical need).
In the end it was so benificial in just 2 weeks that i never smoked again.
Now i can't stand smoke at all. It takes a while for some of the associative habits to go away though (like while drinking in a party, this kind of thing). I would advise to never tell yourself that you can smoke a cigarette once in a while. I don't know anybody who stopped and didn't go back to full time smoking after smoking a cigarette once in a while for a few months.

I also noticed that it's important to involve smokers around you so that they don't offer you cigarettes. I also noticed a type of smokers who try to get me back to smoking. I found that doing stuff like destroying their cigarette pack when they try to have you get one with insistance was the best way to stop that.
I would very much like a real explanation for this question from some expert in virology. But I just assume in some kind of similar way to how measles came back in Canada among the antivax community in recent years.

They are anti-vaxxers, yes, so no wonder that they could technically get measles, but where did it come from? It was completely irradicated because most people had the immunity. The virus should have died off and disappeared from the face of the planet. And yet here were are. There must mechanisms for viruses to survive this.
If the facts speak against what an epidemiologist says, then perhaps we should also use critical thinking there.
Laravel – PHP: Créer un système de panier e-commerce
Un guide pour mettre en place un système de panier dynamique dans un projet e-commerce Laravel.
I guess - we have maps of galaxy distribution out to a few billion light years, like the one from the 2dF survey [1]. "Celestial North/South Poles" are just the points in the sky in the direction of the Earth's rotation axis.

[1] https://en.wikipedia.org/wiki/2dF_Galaxy_Redshift_Survey
I think that if you're not paying full taxes in my country, you should not receive any police/army/legal system support as a company (obviously while enforcing the low of companies not being allowed to be armed for different reasons).

I would love to see how that turns out for corporations.
North Macedonia Election Commission ‘Cyber-Attacked During Polls’
386BSD
ProtonVPN: We are not abandoning Hong Kong
Is this the terrible secret of space?
I don't get how decapitating and dismembering the body with an electric saw is a mark of a professional. It seems like a very messy and over complicated way to kill someone.
We’re stuck in a lockdown work from home purgatory
Deep learning from first principles: Gradient Descent
Arguably that's a contributor to the increase in wealth gap, which is what the GGGP post was originally about.
C++, Oberon, Ada, Pascal, Basic Java, are also options, depending on what exotic hardware you mean.

https://www.mikroe.com/compilers

https://www.astrobe.com/default.htm

https://www.ptc.com/en/products/developer-tools/apexada

https://www.ghs.com/products/ada_optimizing_compilers.html

https://www.aicas.com/wp/

https://www.microej.com/product/vee/
I honestly really doubt it. Could you give a few examples of what you were thinking?
My Public News Feed
It's not addressing this issue. Looks like inside job. Am saying that we all should change from centralized authority into decentralized world.
Why has nobody pointed out that we need ways to launch products anonymously. When one coder can upend a market that is controlled by mafia, that one coder needs a way to remain anonymous.

The problem is that to publish an App with Apple or Google you cannot be anonymous, correct?
Obviously it can be bypassed in the sense that somebody has full administrator database access.

The point about schemes like this is that instead of having to give 1000 support reps full access, you only give a few sysadmins full access. The likelihood of something going wrong with the data (through mistakes, willful abuse, extortion, whatever) goes drastically down.

In fact, once you got such a permission system in place, it becomes very attractive for the organization to use it. I mean, customers love it, they spontaneously write comments about it on Hacker News.

Even if you begin adopting it only for security theater (i.e. everybody still actually has full access), eventually some principled engineer brings up the idea to maybe remove full access for everybody cause now they have the access-granting system anyway, and this time they'll make a convincing case because the "move fast and break things" people have way fewer practical objections.
I would expect state actors to have gone for a lot more damage than "make Twitter look stupid". Also, all the high-profile state actor hacks I'm aware of were a lot more clandestine - it was months before they were discovered. State actors are highly professional, they're in it for the long haul, and they do serious damage.

The "massive blast radius" of this hack lies more in the damage it could have done, rather than the damage it actually did. This amateur execution makes me think it was some small-time cyber criminal who happened to have the bright idea of bribing a Twitter employee, but didn't have the know-how/creativity/patience to reap its full benefits.
>"Further reading
Jolitz, William F. and Jolitz, Lynne Greer: Porting UNIX to the 386: A Practical Approach, 17-part series in Dr. Dobb's Journal, January 1991 – July 1992:[9][10]

Jan/1991: DDJ "Designing a Software Specification"

Feb/1991: DDJ "Three Initial PC Utilities"

Mar/1991: DDJ "The Standalone System"

Apr/1991: DDJ "Language Tools Cross-Support"

May/1991: DDJ "The Initial Root Filesystem"

Jun/1991: DDJ "Research and the Commercial Sector: Where Does BSD Fit In?"

Jul/1991: DDJ "A Stripped-Down Kernel"

Aug/1991: DDJ "The Basic Kernel"

Sep/1991: DDJ "Multiprogramming and Multiprocessing, Part I"

Oct/1991: DDJ "Multiprogramming and Multiprocessing, Part II"

Nov/1991: DDJ "Device Autoconfiguration"

Feb/1992: DDJ "UNIX Device Drivers, Part I"

Mar/1992: DDJ "UNIX Device Drivers, Part II"

Apr/1992: DDJ "UNIX Device Drivers, Part III"

May/1992: DDJ "Missing Pieces, Part I"

Jun/1992: DDJ "Missing Pieces, Part II"

Jul/1992: DDJ "The Final Step: Running Light with 386BSD"

Jolitz, William F. and Jolitz, Lynne Greer: Operating System Source Code Secrets Vol 1 The Basic Kernel, 1996, ISBN 1-57398-026-9

Jolitz, William F. and Jolitz, Lynne Greer: Operating System Source Code Secrets Vol 2 Virtual Memory, 2000, ISBN 1-57398-027-7"
Maybe some people (how many?) fail because of anxiety, but on the other hand, anybody who doesn't fail certainly has proven some minimal coding skills?

I usually took it as a positive if companies did some basic coding skill test, showing they at least cared that people can code.

Also, the people who fail because of anxiety, how will they fare in the normal job situation when they are supposed to discuss stuff on the whiteboard with colleagues?

Maybe the results could be taken as "give people who fail the coding interview another chance", but I wouldn't take it as "don't do coding interviews".
Ja in South Africa, sim swapping is still one of the biggest attack vectors, especially for bank-account-hacks.
Maybe they're lying on the paper work because they're afraid their insurance rates will go up.
Since when does the job of a journalist not demand him to think on his own before copying headlines?

If journalists behave this way they can be used by anyone to spread their message unfiltered. This is not what I expect of quality journalism and I will not ever pay for such a careless "work".

Copying headlines can be done by machines more efficiently.
Auto incrementing integer ids have some very desirable properties though. Not sure what you replaced them with.
Still beats a yaml file format that has evolved so far that is effectively describing a program and has no tooling at all.
EU’s Top Court Restricts Personal-Data Transfers to U.S., Citing Surveillance
> This makes no sense. (...) restarting the process is pointless - you'll get the same outcome.

To quote a famous person, “insanity is doing the same thing, over and over again, but expecting different results.” Hence, when we restart in this scenario, we are not restarting blindly in hope something changes; we use the restart logic to alter the input to the validator function.

* We call the validator, which in S-expressions looks like (VALIDATE-TIMESHEET TIMESHEET). This signals an error and invokes condition handlers matching that error.

* Some condition handler notices that this is a timesheet in an old format, computes an updated version of the timesheet that we will call TIMESHEET2, and invokes a restart named REVALIDATE with TIMESHEET2 passed as an argument.

* This restart sets the TIMESHEET variable to the modified value of TIMESHEET2 and transfers control to a point just before the validator is invoked.

* And so, (VALIDATE-TIMESHEET TIMESHEET) is called again, but this time TIMESHEET is in a new format, so no error is signaled and validation progresses.

All of the above can obviously be done statically, but the additional value is in decoupling the concrete means of handling the condition from the point of signaling it. The code that calls VALIDATE-TIMESHEET has no idea

------

If you consider that to be a good idea, I can write an article that gives a concrete code example of this behavior - that should be even more clear than the description that we have here. Should I?
It's fascinating to me how all these parts of the culture we take for granted have been born out of chaos, populism and technical progress just a century or two ago. And how very little discussion is there about it.
"Hello? Twitter support? Yes, I want to change my email address. I'm Elon Musk."
In India, student loans have mainly been in demand from people seeking an MS degree in the US. But things are changing, and education is getting more expensive across the board, and I do worry about my kids. My immediate reaction right now is to save enough fuck-you money for my kids so that they don't have to get into the education rat race at all. I don't know how that will work, if at all, but that's the best I can do. If they choose to spend the money I saved on expensive degrees, I hope collectively as a family, we know what we are getting into.
> and the entertainment pages promote Pirates of the Caribbean, in Technicolor, and a new movie starring Olivia de Havilland and Henry Fonda at $1.50 a seat.

Is this a hypothetical? Because I cannot find anything about a Pirates movie from the 40s.
You should follow your own plan, a Nobel prize in physics awaits.
The cynic side of me thinks Google has figured this out:

- search history of more than 3 months ago is somewhat worthless for analytics/advertisement purposes;

- search history of more than 18 months ago is really worthless, but hey, we can also keep those just because we can.