skysight-inc/HackerNews huggingface dataset:
They spent an hour or two deleting tweets on Elon Musk's account, with new tweets appearing soon after. So it seemed like they were aware of his account being compromised but did not immediately [successfully] lock his account.
I actually highly doubt this is true. Collusion doesn't seem likely, especially with jail time very probable.

Some of the scuttlebutt says that these guys are tied to multiple crypto hacks.

But my personal opinion is that this is just a 20-something trying to make a mark for themselves. We'll see within a week or two.
as I understand it the big thing is retaining benefits - not that it matters if you can't pay rent. But given the US healthcare system, getting any ailment without coverage is more or less guaranteed to bankrupt you, so furlough is better than nothing I guess?
Okay here is my mostly baseless conspiracy theory:

As many others have noted, access to the compromised accounts is worth several orders of magnitude more money than the hackers were able to extract using this naive bitcoin scam. Whether it's used to manipulate markets or just resold, the hack is probably worth millions or tens of millions. Is it plausible that hackers who could coordinate and execute this kind of a breach would not know how to maximize the value of the hack and would instead opt for a really naive and not especially lucrative BTC scam?

It is also pretty common knowledge that the activist investor hedge fund Elliott Management has wanted Jack Dorsey removed as Twitter's CEO for quite some time. What if the BTC scam is a cover for corporate espionage? What if the purpose of the hack was actually to make Dorsey look incompetent in the most public way possible, and possibly turn many influential public figures against Twitter? Elliott Management has the resources to finance a breach like this as well as the motive.

An alternate theory would be that this actually was a form of market manipulation -- manipulation of Twitter's share price.
The whole reason we’re in this mess is every company is trying to play moneyball. They’re all convinced that by creating a unique interview process they’ll find better talent than other companies and this make more money. The end result is more and more obtuse hiring practice which have zero practical value.
My point was that if testing for a skillset, using something that favors those who have toyed with a specific algorithm is the same as asking trivia questions.

Trivia does not provide evidence of skill, it demonstrates prior knowledge.

It would be better to introduce a unique situation that would place everyone at the same starting point.
I understand, but that sort of behaviour should have been thwarted quickly by their security team or policies setup against abuse.
I've always loved to draw. It's relaxing. I watch cartoons. I wanted to be an animator when I was a growing up.

People, scenes, animals. Both realistic and stylized.

Time. Art is as much a trade as anything else. It takes constant practice to get good and maintain it. Software paid better than art.

I have a bachelor's of arts, in art. I would draw, paint, or create for 20+ hours a week, every week, for a couple years. I also have an associate of arts in graphic design.

Ultimately, I do not practice anymore because I love programming too, it pays better, and there isn't enough time in the day to be great at both.
It also depends on the status of your local grid/substation. My university was on the same local distribution as a nearby hospital. The hospital had special status for receiving power, for obvious reasons. So in the 10 odd years I spent doing undergrad and post grad studies there was only ever 1 brief power outage during a thunderstorm. Meanwhile nearby suburbs probably averaged 2 power outages per year, typically for a few hours at most.
lol. dude, Turkish goons beat the shit out of American people in front of cameras and got way with it.
Most of my job depends on analyzing the runtime complexity and memory complexity. It's my passion. I don't memorize any language, but boy do I understand the small complexities and seemingly trivial interactions that have profound implications. When I interview, I ask them about what they enjoy about programming and how they approach problems that they're stuck on.
the entirety of AWS seems to be half assed in general

as you've described: the U2F functionality is completely useless because if you lose/break your single U2F key then you're completely screwed

and they still have no support for ed25519 keys (which were added to OpenSSH in 2013), unlike every other cloud service

I have to have an RSA key just for AWS (particuraly annoying as I have all my other ssh keys stored in a hardware token)

if they didn't validate the damn key type then it would probably just work out of the box
Collection of impressive GPT-3 content generation examples
You cannot argue that there wouldn't be more infections if we hadn't shut down.

That is, if we hadn't shut down, we'd have exponentially more infections right now.

There are deleterious effects to shutting down. But your theory that shutting down has lead to more deaths is absurd.
Maybe these:

Practical Object Oriented Design (Metz)

Refactoring (Feathers)

Test driven development with Python (Percival)

Missing Semester: https://missing.csail.mit.edu/
I believe it was found to be social eng upon an employee see

https://www.vice.com/en_us/article/jgxd3d/twitter-insider-ac...
It might make it harder to stop once it's in progress since you can't physically remove the employee from their workstation.
Burritos for the Hungry Mathematician [pdf]
Prompt update was rejected because of icon, despite being the same for 9 years
Does anybody on Hacker news seriously believe that the account of Biden or Obama actually send messages privately on Twitter?

They most certainly don't. I have no idea why that fact is not obvious to some.

Trump had two liked tweets for all of time back from like, 2012. Around 2017 or so a group realized this and bought or otherwise messed with the site the liked tweets linked to and made them have pictures making jokes about trump. It took more than a year for anybody to give a shit enough to take down. They don't use the site for anything more than direct statements/retweets.
If it’s SMS the attacker could have social engineered (big cell service co) to get access to the employee’s phone # and get a SIM.

I’m guessing someone re-used a hacked password and SMS 2FA is to blame. Maybe it’s not even that sophisticated.
I use both everyday as well. Python is beautiful. Especially if you wrap it with a decent dependency manager like Pipenv.

I have a high level of comfort with JavaScript as well. While I don't keep up with the ecosystem (because it literally changes every few months) I think it's a powerful language to master.

I'm at this age where I don't have favorites. I pick the language suitable for the task.
You can use your prepared detailed cheatsheet notes books for programming languages from

Link: https://books.goalkicker.com
None of those sites have a concept of users within an account. For each the user and the account are one in the same.
Often, what people think is "good customer service" really means "allowing me to socially engineer you".

I don't think there is any solution to this. "Decentralization" in this context seems equivalent to a centralized system that simply gives up on any ability to recover accounts. Whoever owns the authentication details of an account is the owner, period. If you lose the password or the account gets hacked and stolen from you, tough shit. Start a new account.

I think the real solution is that social media should simply be valued lower. No one should care if their Twitter account gets hacked. The fact that politicians and important people use it in an official capacity is the problem that needs fixing.
Um why not enough and not too much? This alone doesn't say anything in regard to twitter's user count.

This means twitter had omni backend tooling that have manual/programmatic admin level access to production database.

This is a very bad idea, access to production tables should be through a controlled medium and always challenged.
Is "being a stubborn prick" not an immutable attribute? Should we tolerate all immutable attributes?
Coding interviews are not about coding skills, they are about communication skills.

I thought I had discovered a clever hack when I was interviewing. You ask enough closed questions about the problem that the interviewer tells you the answer. Then you repeat the answer back to them, as code or aloud, and you pass.

Now that I am interviewing, I am desperate to find anybody who will ask me enough questions to have me reveal the answer, and then repeat it back to me.
Just buy a case, motherboard, cpu, GPU, ram, psu, and build it. At the extreme low end you can buy a refurb Dell tower and drop in a new GPU.
I’m not sure. It could be as simple as quick hack to hide the deletions that was not deployed to the legacy site.
Interesting idea, but I don’t see any mention on how they deal with the power line stretching. As power draw goes up, the electric company pumps more juice, which heats up the cable and in summer months it gets so hot (everyone using A/C), that the wires start to stretch and sag. The fiber would need to deal with that.
Hm, maybe. I was thinking, work in an environment you're familiar with, since that's a more realistic measure.

For example, I'm an Emacs kind of guy, so if they hand me a Windows laptop, do I limp along with Notepad? or some IDE that happens to be installed? Generally, as soon as I've settled in at a new job, I've customized my work environment with something as close to Linux and Emacs as possible -- if Windows, I'll install Cygwin if allowed, and/or Emacs and GNU utilities.
This. It would be unbelievable if Twitter's internal system doesn't require VPN/BeyondCorp or 2FA before doing anything sensitive.
Yup agreed -- looking at it from the lens of building a streaming website that scales to that many viewers per stream, it isn't going to be cheap (but cool it can handle it if you put the money in I guess).

I assume this is more targeted towards universities where they have a max of 300 students (at least that's what my university capped classes at) and they need something to get started quickly. At most they may stream for like 6 hours a day for each class. You don't even need good quality -- lowest tier quality (SD) ends up being

$2.00 per hour * 6 = $12
$0.0375 per hour * 6 * 500 = $67.50

Honestly ~$80-100 per day to stream to all your students? Still kinda expensive I guess but might be a small price to pay for a university if it means they can offer streaming education. Not to mention 99% of the time students don't even tune in and just watch the VOD.
The guy who also brought us raft[0], log structured file systems[1], and Ousterhouts Dichotomy[2], among other things, in case you were thinking “not a bunch of grad students, but ‘some professor’.”

[0] https://en.wikipedia.org/wiki/Raft_(computer_science)

[1] https://en.wikipedia.org/wiki/Log-structured_file_system

[2] https://en.wikipedia.org/wiki/Ousterhout's_dichotomy
> People buying Epyc are concerned about perf/watt and density

+ Reliability and enterprise support
Automate SIGs Calendar Invitations
I think you greatly overestimate the value of this. It’s a sham, everyone makes a few tweets, it’s on the news and it’s fixed and over tomorrow.

Very little damage done that isn’t obviously corrected/correctable short term. In other words, who cares?

I’d pay tree fiddy for this exploit. On the other hand, this person seems to be making BANK getting 13 BTC as of now.
Inmate wore janitor’s uniform to escape from prison
Visualising OAuth 2.0
I started out this discussion by talking about the primary scientific journal sources I'd read, and in particular the one from the UK national health system. Unless I start doing the research myself it's hard to depend less on popular news. But that doesn't mean it isn't a useful indicator.
Current consensus theory is attackers used the admin panel to change email address to an account they owned, then used that to trigger a password reset and gain control.
Isn't that objectively a good thing? The whole point of federation is to give each instance control over what is allowed and is not allowed. Surely the root of the complaint cannot be "everyone must consume and accept all content," because anyone can already create their own instance if they feel they're being limited? Or is it more simply "I'm not allowed to spread my views in places where they're unwelcome"? The latter is a complaint about human nature, not about the technology.
Are you thinking of Wechat? Whatsapp is run by Facebook.
>No, many police officers are now being punished for being police officers.

That's a feature, not a bug; police officers are being punished because of the actions of police officers. Actions they choose to take responsibility for everyday they put on their uniform and step behind the blue line.
What Data Science Graduates Need to Do to Get Hired During Covid-19 Pandemic
Master/Slave is quite explicitly racist given the context of European colonisation of the “western world” (mostly fuelled by slave labour, and most of that cohort was forcibly extracted from Africa and non-European origins).

Blacklists have recently become a target because of the connotation that black is bad and white is good. It’s that simple.

In Chess (had you read the documents I linked) you would know that there is no requirement that white move first, or even that the side be black and white — I had one set of azure and orange stones, and another which was Elves vs Dwarves. The only requirement is that the two set be different so you can tell which pieces are yours or your opponents.
I love Lua for its architecture and goals, but not for its linguistics... and this is more of the same. The platform is getting even better, but I feel like the language is getting worse. <const> and <close> are kinda hideous, aren't they?
There is! You can find the current "agreed upon" human genome reference segmented by chromosome here: https://hgdownload.soe.ucsc.edu/goldenPath/hg38/chromosomes/. (It's not the assembly that's described in the article here.)

People do talk about the genome and its elements using the location by chromosome number and range like you'd describe an index in a string. There has even been special notation developed to do so [1]. However, it depends on _how_ you're looking at biology.

I think an analogy would be: you can describe all code as machine code, but when there are higher level abstractions you wouldn't choose to do so.

[1]: https://en.wikipedia.org/wiki/Locus_(genetics)
The best advice I ever got about interviews is to figure out ways to prove yourself wrong about what you think about the candidate. Although it's good advice for a candidate who seems too perfect, this advice really shines when someone is bombing.
Does Whatsapp work through anbox?
That's just great, when does Trump send out his secret police to have them removed from Trumphistan?
so how do I do that for the root account, of which there can be only one?
This isn't StackExchange.
not going to lie... I was still shocked at how quickly the numbers went up starting June.
If you can't have a log trail that establish how someone tweeted something, might as well shut down then.

It should become very apparent how this is done through the correct levels of logging. Unless of course twitter backend firefighting team consists of hasty tooling that writes directly to production table with no oversight (which also sounds like a possibility)..
Have you actually read the article? The study's methodology is super confusing and just plain doesn't make sense. From what I can decipher, they conflated obesity, diabetes, smoking, immune disorders, and several other factors all together into a single variable ("vulnerability") and made no attempt to look at the contribution of smoking alone. They also lumped e-cigarettes together with tobacco and cigar smoking.
Yes. But as the only perler I've seen in this thread I wanted to do my best to be honest about the risks.

If I were to want to continue discussing this, do you happen to kick around anywhere on IRC that would be suitable?
Apparently hackers have commented that they now have DMs of all the hacked blue checks. They referred to that as the "fun" part of this exercise.
"Deliberately misleading"? In this case the journalists are literally copying the terms the cosmologists are using.

From the preprint -
"The South Pole Wall rivals the Sloan Great Wall in extent, at a distance a factor two closer. The iconic structures that have transformed our understanding of large scale structure have come from the observed distribution of galaxies assembled from redshift surveys: the Perseus−Pisces filament (Giovanelli & Haynes1982), the CfA Great Wall (de Lapparent et al.1986), the Sloan Great Wall (Gott et al. 2005)"
Real jobs have certificates and degrees that mean something, where you can avoid the whole "do you know literal 101 things" phases of the interview process by just going "do you see the line on my resume that says M.Sc."
Don't worry, it's gated by a few features (just Google for it) but mostly by contacts. Building one at home won't trigger those.
Lots of uncertainty, but I could see it being relatively mundane.

It wouldn't surprise me if a lot of Twitter support people had access to these tools and that they often worked with larger (more valuable) accounts.

It also wouldn't surprise me if some employee had a bad 1:1 and then responded to a spear fish just because they were disgruntled. To take payment for it is particularly stupid.

Of course, could also be something more serious - but if it's really just the BTC piece and the people are dumb enough to talk to the press, it may not be a group of criminal masterminds.

I hope for the employee's sake they have communication that can help the feds catch the BTC group. Either way, an incredibly stupid thing to do on their part and I don't see a good ending for them.

If this turns out to be true, they'd be lucky not to go to prison.
Neuroscientists identify the brain cells that help humans adapt to change
To me it's the lack of some functional features for 1-liners that really trip me up. Verbose function declaration, no null-coalesce operator, no ternary operators, stuff like that.

I love the platform and ideals and goals - a simple, lightweight embedding language... but the language details rub me the wrong way.
which is actually quite hilarious because the Feds have everything already SSN, taxes, census, FICA, real id and on and on. I never understood the logic behind people doing that stuff quite willingly and then freaking out over a national ID, which we pretty already much have given there is a federal program to get your state ID hooked up into the federal system.
it's worse than centralization

Since anyone can just stand up their own instance and post whatever they want, it's significantly more censorship-resistant than a centralized service.
If the employee re-used a hacked password and had 2FA via SMS it wouldn’t be hard.
Article fails to give examples of good software names. Why? Because names are brands. They don't just describe the product, they need to create an identity.
Exercise May Bolster the Brain
This.
Adding up, front-end engineering has an identity crisis now.
A friend of mine is a web dev who started back in the days when Javascript was for form validation.

When JS frameworks and SPAs took over the web, he adapted himself. But being a UI engineer he cares about the craft's visual aspects, than the technicalities of JS.

Although he has a proven record of his works, he is now dealing with interview questions like "what are the problems with closures" and "when you do use function.apply()" and "immutability".
And yet most Perl programmers I know do not work in mailing houses so they have never needed to use “...”.

I have worked with brilliant people who still have trouble figuring out the ternary operator, and people who should know better who construct ternary operators with five levels of parentheses, causing deciphering of the intent to be impossible.

So I choose Alexander the Great’s approach to solving the Gordian Knot: slice it open and remove the complexity to multiple layers that mere mortals can understand.

PS: I notice you failed to explain the operator yourself. Minus five points to Slytherin.
If it is wrapped, the spiral form will provide the necessary slack. You just need to wrap tighter in summer and looser in winter when installing the fiber.
TikTok ‘Is Getting Facial Recognition’ for China, Official Warns Americans
Agreed. I don't think it would turn up any skeletons, more of the implication if this breach was in any way politically motivated given our recent election meddling.
> if they didn't validate the damn key type then it would probably just work out of the box

That thought makes it so much for frustrating. ed25519 is the future anyway, it’s hilarious how many cling to RSA (I’ve got nothing against RSA but at some point we’ll have to switch anyway)
Ask HN: Uber for Printing?
Recently I had to print something, but I didn't have a printer available. No problem, I went online, sent my document to a local Staples and got it printed. But, 1) the closest store was 20+ minutes away by car, 2) it was relatively expensive for just a few pieces of paper, 3) didn't get a time estimate for pickup, had to find the number of the store, call and got told the job was scheduled to be done 3 hours later, at a time I wouldn't have been able to pick it up, fortunately they were able to print it on the spot and I was able to go pick it up right after.

So then I thought it would've been great if I could've found someone with an available printer (through an app or website), within a short distance, and paid them for the service instead of a huge national chain. Does that service exist? If so, what's it called and would you recommend it?
What exact issue does it solve?

Here is a screenshot of what it looks like with the OpenDyslexic typeface https://gist.github.com/rudolph9/e4e86fee61cccd722f6b56eb841...
I’m looking for actual research. I’m wrapping up some work on a stripped-down version of the lenet architecture and extemely low resolution non-representational data (3x3 greyscale pixels). The results appear to be better than chance and I’m quite frankly stunned - I expected complete garbage. Maybe I’ve missed something, but if the results are simply due to chance, I had an utterly extraordinary case of bad luck. (edit:clarity)
Doesn’t make sense, value of the hack is already toast with Twitter’s credibility
They hacked the twitter for 12 bitcoins?
Or it could be attack on Twitter itself. Jack's policies are not loved by few folks in WH. Just speculating

OR

Twitter's stock was down by some major percentage because of this incident. It could be a way to earn bigger and "legal" money by having prior knowledge about this incident.
Microsoft has live events that support 10k participants:
https://docs.microsoft.com/en-us/microsoftteams/teams-live-e...
Iirc there are JS engines that can fit this bill too.
Given that the media wants to claim to be the fourth estate and a vital part of democracy, I don't think I'm wrong to hold them to a higher standard. Washington Post's slogan is "Democracy Dies in Darkness".

And frankly when you or anyone starts with "Respectfully", you're typically not. Your post certainly only has a thin veneer.
I've started smoking cigarettes due to the stress of this lockdown. I very rarely smoked tobacco before.
Maybe they are trying make it look like a Saudi hit job.
Plus there was no way they knew beforehand they'd only make 12BTC. People always overestimate the value of twitter and conversion rates when an actual action is required - even with targeted audiences like cryptocurrency people in this case.

People seem to assume everyone takes tweets at face value and won't do a double take when it doesn't sound like something they would normally say.

Even here there was plenty of people on HN who were claiming outlandish possibilities while it was happening.