skysight-inc/HackerNews huggingface dataset:
This feature - social media comment authentication - substantially exists already on Twitter. It also already involves cryptography.

Under the current flow, tweets by notable people are authenticated if their profiles have the blue check mark. In turn, Twitter is authenticated by the TLS connection between your web browser and the server located at twitter.com, which is itself attested by one of a selection of certificate authorities you trust. A security compromise in Twitter should break your trust in the blue check mark authentication "scheme", just as a breach in a certificate authority should undermine your trust in the certificates it signs.

Suppose you want to augment this chain of trust with additional cryptography. You stand up a public key infrastructure (PKI) with unique public/private key pairs corresponding to every Twitter account. Each tweet is now digitally signed with the private key of its account owner, and the tweet view features a small tooltip which allows you to view the signature and the public key.

How do you augment this system so it's robust against a user's account being compromised? You could enforce two-factor authentication, sure. But if an individual account is successfully compromised, the attacker will be able to post arbitrary tweets with valid signatures corresponding to the victim's account, unless you segregate the signing functionality from the posting functionality. This puts us back to where we are now, but with more software to support and maintain.

What if we design this system to be robust against account takeover? We can make it so that every tweet requires a signature based on something only the real account owner owns. For example you could move the private key onto a Yubikey, which doubles for two factor authentication. Then a user needs to use the Yubikey to sign each tweet at post time. This incurs a significant usability barrier, but it might still be attractive to a small set of paranoid users. However the threat model it's defending against is not very compelling, because if you already have a hardware security token for producing digital signatures, your two factor authentication is robust anyway. Signing tweets in this way reduces to just authenticating with that token when you log into the account.

Finally, how do you defend against Twitter itself being compromised? This is what happened today. Assuming Twitter is being trusted to run this PKI, a compromise in Twitter is still going to undermine your trust in the authenticity of any given tweet. That again brings us back to where we currently are, but with more complex software to maintain and nontrivial performance cost.

It's an interesting idea, but I don't think the juice is worth the squeeze.
This question comes up quite often and I tend to believe a lot of people focus more on the tool rather than on goal.

It's the reason plain pencil and sheet of paper may be much more beneficial if we focus on the goal but not on the path.
He's almost certainly wrong, the effect size on this one is astounding. See for example this: https://www.qeios.com/read/WPP19W.3

Even with conservative assumptions, smokers in this French study were 4 to 5 times less likely to be infected.

Keep in mind that drugs being tested are considered good when they reduce mortality by 10%. We're talking 75% reduction in infection rate here, and no increased mortality in those who are infected. It's really really hard to imagine what sort of confounding factor that could be at play here that would make the effect insignificant.
On Chrome, it won't even load up most of the time. Press play and it shows a "failed to load media" error message. I have to refresh the page to get it to work. I've completely stopped playing any media on Twitter.

Twitter and Reddit's tech incompetence absolutely baffles me. How are billion dollar companies not able to make functional video players?
I quite like TCL, but had my issues with the syntax as well, unless I read about how it works in the TCL book by Ousterhout (highly recommended). The key bing, that the syntax is extremely simple and systematic - a little bit like Lisp s-expressions - which allows for a very simple general parser and also makes it possible to write TCL extensions in pure TCL. This is a very Lisp-like trait of TCL.
I did not read this post because it is not on Facebook.

Or rather I did because there are other places to discuss things. Forums dedicated to specific interests, blogs etc.
But there's also a precedent of scams like this being posted on twitter, esp. from accounts impersonating e.g. Elon Musk. Just because it's tweeted by an official account doesn't suddenly make it less scammy - sure some people clearly fell for it, but I reckon most people using twitter with an interest in cryptocurrency would immediately recognise these tweets as a scam, regardless of the source
There is no guarantee though, i.e. the system could be well intentioned but if could be bypassed , it does not really protect.

The only way to get some assurance is run vendor app in your environment in a secure network without the ability to phone home.
I am wondering if the hackers had access to the private messages of these accounts?
That's an argument against end-inclusive ranges more so than against 1-based indexing. If they were end-exclusive, like in Python, then {3,3} would be an empty string, and {3,4} would be a single character at 3. Note how it suddenly doesn't matter at all whether the indices are 0-based or 1-based - all of the above is valid regardless.

FWIW, I think that the real mistake was to make inclusivity/exclusivity implicit to begin with. If the syntax is explicit, and the choice is captured in the resulting value (i.e. it's more than just a pair of numbers), then you just use whatever is more convenient for the task at hand. Nim almost gets there: (x .. y) is end-inclusive, and (x ..< y) is end-exclusive - but the syntax still exhibits a preference.
External production systems unfortunately depend on FB too as we've seen with all the iOS apps crashing due to issues with FB's iOS SDK.
That is just a tiny step, when the majority of available libraries only have the Apple eco-system in mind.

Swift is a very nice language, but one is better served with it if their main market is Apple platforms.

Just like .NET Core, regardless of how much commitment Microsoft is putting into it, remains a subset of the .NET community at large, the so called dark matter developers.
It's a very very loud attack, no doubt. But how sophisticated it's? Probably not as much as many think. As early reports suggest the attack was done via a stolen employee's token, it suggests the attacker has access to the employee's web browser. Potentially some malware extension that silently sniffs traffic to twitter?
The irony is that smokers appear to be strongly protected from Covid.
Also there is https://github.com/mingodad/ljs that changed the parser to accept a Javascript like syntax, including https://github.com/mingodad/ljsjit for LuaJit and includes a tool to automatically convert lua to ljs https://github.com/mingodad/ljs/tree/master/lua2ljs and did several project conversions to check that it's feasible and works (see the readme).
I can’t imagine how anyone would give up their employer-provided health care (which is all we have in the US) during a pandemic to go into a contract-to-hire scheme. That might have made sense last year but it definitely does not now.
>Not all contracts will have a clause that prohibits your employment for another employer without prior permission of your current employer. But every employment contract I have signed as a software developer has had such a clause.

Just want to share that I've come across clauses like this before, and also ones about inventions and personal projects becoming employer property, and I was able to, without too much back-and-forth, on multiple occasions, come to an agreement to have those clauses crossed out or otherwise removed from the contract. The jobs were nothing special, just your run-of-the-mill software dev, support, and tester.

(Hopefully this is not too off-topic, since I'm replying to text in OP.)
The Nordlys they mention in passing came online and was transporting goods at least up until last year.
Most sequencing methods do use DNA polymerase to effectively copy the DNA while reading out the bases that are being incorporated. However, even when the genome is being replicated in vivo, the polymerase doesn't just copy the entire chromosome in one go from end to end, for various reasons. For example, for larger genomes such as those of animals, it would just take too long to copy it that way. But even for small genomes such as bacteria, DNA replication is still naturally done in fragments. One simple reason is that at any given time the polymerase can dissociate from the template and have to reattach. Even if you could engineer the polymerase to bind more tightly, you'd have to deal with the tradeoff between binding strength, replication rate, and error rate (i.e., a more tightly binding polymerase would likely copy more slowly).
I tell you what: it has been working pretty well so far. Just about every year, this is exactly how Bitcoin is portrayed.

- Bitcoin is used for scams

- Bitcoin hacks

- Bitcoin used for illegal activity

All the meanwhile, more people become aware and interested.

These sort of events prime the "nocoiners" to read and understand that little bit more.
swift always feels years behind, I'm not convinced they will ever get the basics right outside of ever shrinking apple land
I'm the VP of Engineering from PingCAP.

As a devoted customer and a big fan of GitHub, it’s devastating to see service interruptions and our business impacted by these problems; as the team behind TiDB, we (PingCAP) believe there is something we can do to help solve the database high availability and scalability problem. We would like to propose the database team in GitHub to consider the TiDB platform. TiDB and TiKV can work as a scale-out MySQL and it has been battle-tested in all kinds of hyper-scale scenarios.

Additionally, just in case you didn’t do this, we also recommend GitHub considering the Chaos-Mesh project (https://github.com/pingcap/chaos-mesh) to do Chaos Engineering. Chaos Mesh was our internal chaos engineering platform and we open-sourced it on Dec. 31, 2019. It can be used for simulating different kinds of failures including network partition, flaky disk, node outage. You can easily use it to simulate failures in a test environment and confirm that the high availability works as expected.
Definitely a blog I'll have to keep track of.
It would be pretty easy. You could just post on reddit or 4chan and ask "If you could make anyone on Twitter post anything, what's the most you could earn?" And people who know a lot about a lot of things would give you ideas. It's just not smart to use the hack for just this.

Example: Contact Trump's kids. Demonstrate your power. Tell them you'll make Joe Biden tweet "8 year old girl nude hair" at a time of their choosing, in exchange for 5 million BTC held in escrow. This doesn't require anything more than knowing that Trump is rich and corrupt and that Biden is his opponent.

A variation of this is that you demonstrate the power to rich public figures and tell them that unless they pay you X, you'll do it to them to make them look bad. Then you don't even need to use your exploit.

I think this was probably worth tens of millions, and they blew it on 100k.
yeah. hats off
Show HN: BitMidi for Android
But that's gross misconduct or some other fireable offense - a civil matter at best.

The only item I can see here is fraud (impersonating the people whose accounts have been taken over), of which the mole would be complicit.
There isn't really much of a political gain to be had from describing a large blob of galaxies as a "structure" or a "wall."

It's not even that "structure" necessarily implies planned assembly. There are "structures" in biology, geology, and meteorology, and none imply a builder or designer.
"destroyed", a bit exaggerated, mate.
That they target Elon Musk followers already suggests that it's a rich vein for scammers.
Geometric Constraint Solvers Part 1: Algebraic Expressions
Advanced Exo Keto {No-1 Weightloss Product}
This specific strategy states to manage clients shed pounds all the more immediately when contrasted and depending on exercise and diet without anyone else. It may diminish carbs wants and furthermore help buyers get back their nutritious eating regimen plan.
https://buddysupplement.com/wp-content/uploads/2020/07/Advanced-Exo-Keto.jpg

https://buddysupplement.com/advanced-exo-keto/

https://sites.google.com/site/advancedexoketopills/

https://youtu.be/rlySJLkxIto

https://www.completefoods.co/diy/recipes/advanced-exo-keto-3
Admins have direct access to the database. A similar controversy happened on Reddit a while back.
Neither your comment nor the summary at the link (I didn't read the actual paper) say anything about whether they adjusted the statistics for plausibly relevant differences in the two populations.

It says the results "require further confirmation in prospective, randomized controlled trials", but surely what we all want to know is whether the non-random assignment of patients to the with/without groups was compensated for at all?
Please check global number of missing people and kidnapping cases, use it to rightly place your country. That you have weak institutions don't mean that your country is world theater of crime.
Trump's account might have been the final one targeted, locking the attacker out from messing with any additional accounts. If a Twitter employee is messing with famous accounts in an unauthorized way, automatically stopping the employee would be reasonable.

I've heard of this feature existing with the software used by phone companies and hospitals. Employees who poke around looking at famous people soon get locked out of the system.
Actually the correct fix is correctly flagging the field as a password field, which fixes the capitalisation problem on iOS and Android.
I don't know maybe my view of slightly above average is inflated but I think of that bunch (which I might be a part of) as being easily pulled in by good technical leadership. If only to make their life ultimately easier / less painful. You don't need 60-70% amazing engineers to do that. But I guess they can do whatever they want. They have infinite money and unfortunately a good reputation (in many cases unwarranted). They've become like the Harvard or Yale of tech. Oh you went to Google, great come on in and join us.
>"The only thing that jumped out to me was the appearance of a sync word at the beginning of each packet, 0xf0debc0a. (In little endian, this is 0x0abcdef0.) On a lark, I Googled this, and actually found a project on GitHub from 2015..."

That is some excellent Google-Fu!

I had never thought about Googling the reversed-endian versions of hexadecimal constants -- until you wrote about doing this; I think it's a brilliant idea, so I'm adding it to my search engine technique toolbox.

In summation, it's a great idea!

It's both simple and elegant!
The jockeying isn't for some square meter of land. It's for influence over the muslim world.
MIT Sparc/Commonwealth Fusion Systems seem to have a chance at breakeven in a shorter time that the government and international labs. The problem is that now that fusion is commercial research we won't get updates until somebody wants to brag or a public lab make a breakthrough.
Seems more likely to me they're just lying about being smokers- 60% admit to being former smokers. Inpatient hospitalizations also almost all suffer from serious comorbid conditions like hypertension or diabetes, which probably causes many to smoke less. Less so with the outpatients (<20%) but I would not be surprised if it was because unhealthy people getting sick, and those unhealthy people don't smoke because it would be bad for them.
While the length is an issue isn’t the expansion problem resolved by it being wrapped in a helical pattern? You basically have a spring at that point which can contract and expand with less stress than a pretensioned straight wire fixed at two points since it can slide across and rotate around the power line.

For repairs I’m guessing there will be no or very limited splicing you can have connectors at each pole and simply run a new fiber if you have a fiber break mid line the main reason for splicing fibers today in below ground installations is that pulling them out requires you to dig up a whole bunch of dirt if it’s just plug and let the robot rewrap the fiber along the power line I think it’s cheaper to do just that.
Most companies this size will have at least couple of peer reviews, so you will need collusion from all of them .

Nothing in the world can protect you from poor hiring .

If the employees truly are corrupt then they would make more money selling the bug in the black market then to a legit bug bounty .

Again it should not be linked to value , I.e. not 100m , it should be linked to effort it will take for a security researcher to find it .

Let’s say it took 3 months for a 0 day , the payout should be in the range of 40-50 k dollars perhaps .

It is still not a good deal for the guy finding it , he is risking months and he may not find anything , however being fairly remunerated for the effort if not the value is the first step companies have to take and it won’t look like a cheap trick.
Assuming the ultimate purpose for the hack is a crypto scam shows a complete lack of imagination.
Any 20 person startup in cyber security-adjacent fields has thought more about this than Twitter? Jeez this is not a good look.
My Inspiration for a Chart class came from the trendet Python package
They don't need destruction because they're all value types, and assignments are copies. But for OO, you need some form of references. And if your reference is a string, how do you know that it is a reference? Worse yet, if it's a part of a larger string, how do you know that said string contains a reference?

Keep in mind that while, yes, Tcl lists have a more efficient internal representation when Tcl knows that it's a list, a string that happens to be a valid representation of a list is also a list, just by virtue of existing - but it won't get a special list representation until you try to use it like one! It's just a string like "foo bar baz". Or, say, "objref#1 objref#2 objref#3".

And the semantics of the language is EIAS through and through - all those internal representations are optimizations that are not supposed to change the observed behavior, only performance. A GC cannot treat lists without internal representation differently from those with it without breaking this. So it has to assume that any string is potentially a list that contains object references.

So a proper Tcl GC would have to be incredibly pessimistic about what it considers to be roots of the object graph - basically, any substring that looks like an object reference, has to be considered as one. Now imagine just how much string scanning such a GC would have to do in a non-trivial app for a single sweep!
Prediksi Togel Hongkong HARI INI Kamis 16-July-2020
Super cool! I've never done any embedded device work but have an interest.

Seeing the layout of the flash in a straight forward image like this is pretty inspirational honestly. Definitely will be checking out more of his work.
> The Nexus 4 was the largest that actually fit a pocket.

Depends what you mean by "a pocket"? I think the iPhone 8+ is very close to the same size as the PinePhone and noticeably bigger than Nexus 4.

It fits comfortably into the pockets on most pants, shorts, jackets and sweatshirts I own. Maybe I tend to wear things with big pockets? If so, it's not intentional.
Another possibility is that they have already sold the hack, but the relationship with the buyer deteriorated for whatever reason, so they decided to burn the bridge.
My understanding is different. I think you are talking about correlated data source. Snorkel's surprising innovation is that it does NOT overweigh correlated data source.
I don't think it's necessarily the case that we need centralization for like-minded people to find eachother. It might be slower, but discovery can also happen through word of mouth and individual connections.

I actually think centralized social media causes a huge number of problems. Algorithmic discovery mechanisms specifically allow small numbers of highly motivated actors to spread fringe messages in a disproportionate way if they figure out how to game the system. That wouldn't be the case if the main way you found out about a new forum or news source was the direct endorsement of someone you trusted.
For example, Bitcoin, while robust and reliable, is slow.

For normal, everyday transactions, the Lightning Network is what people use, where transactions take only seconds: https://medium.com/@The1Brand7/lightning-faq-67bd2b957d70
Not indefinite but always 40 years from the present.
i have a threadripper 1920x with 2x2080ti.

When running cpuburn, i get around 65 tdie temp and with gpuburn, the upper card gets to around 86 and the lower one to 81.

i have right now a water cooler for the cpu, 3 inlet fans (bottom back) and 2 outlet fans through the water cooler on top.
i was wondering what temperatures I should aim for and what an optimal fan configuration is. i have a couple of fans laying around.

the case is lian li O11 Air and the mobo is a taichi x399.

anyone any tips?

also I would want to use SLI. but then I would have to remove the fans on the gpu. Do I need then to water cool the gpu or what is the solution?

if anyone of the moddibg pros here can help that would be awesome :-)
Yes, the insurance file contained unredacted versions of documents Wikileaks had previously shared redacted versions of.
As somebody who went to all the trouble of:
1) Converting cash to Bitcoin
2) Transferring the Bitcoin to my browser plug-in wallet that was the only approved way to pay for the “planet” or whatever
2) Purchasing the planet and somehow linking my ID with their registrar/account info
3) Downloading and trying to installing the software despite several dependency issues with the stock Ubuntu (or whatever they recommend) VM.
4) Finally getting it working, being greeted by a truly bizarre user interface, I figured out how to get into chat. Joining the main channel, my screen was flooded with out of order chat messages.

In a project that’s been around since 2012.

I was really excited to experience the new wave in computing. I found smoke and mirrors. Cool idea though.
Bardcore
Though I was the one who suggested this would be easily catchable - Tesla is probably the one company where you could get away with this. There is no shortage of random Robin Hood users making pretty big plays on it constantly.
Not the same , he modified SQL dB directly and he was the CTO and one of primary architects of the system.

This is admin UI given to operations staff , far more trivial to have writes protected ,I cannot imagine anyone need to write to customer data that often in this kind of app.
The first gadget is by far the most important; it shows wave motion in two dimensions, at a 90 degree angle, the first is vertical and shows compression/expansion of the various wave constituent parts.

The other is horizontal, and shows the apparency of wave motion.

Observation: It should be possible to create spiral waves in space, using both principles...
NASA comments on agile vs. waterfall comparing SpaceX and Boeing [pdf]
just wanted to say your networking articles (and demos!) are great and I have been pointing others to them since I first read them. Thank you!
I recently found out atomic nuclei can be bosons. Astonishing but apparently true: https://physics.stackexchange.com/questions/158070/helium-nu...

I wonder if this could be used to lower the temperature needed for fusion?
Might also be that the problem of neutron contamination of the hull turns out so bad that normal nuclear power plants and breeder reactors sound better.