skysight-inc/HackerNews huggingface dataset:
I don't think it's a good idea to make config files complicate. I don't want to run a debugger to know how my configuration file works.
> Also if they don't create an "official account", someone else will do it for them

Yes, but this account will still not have the same legitimacy. Right now, if Trump tweeted a declaration of war, it would have been reasonable to assume that it was real, because, for all we know, it's an official channel. Previously at lot of people would've at least checked back with the official channel before taking it for granted.

And, to make matters worse, having Twitter as an official channel now gives everyone at Twitter the possibility to make official announcements - hardly a good state of affairs.
I think it was Herschel Walker that famously got jacked doing like 4 (body weight) exercises.
Which bank is this? I've been looking for one that exposes an API for years.
avoid some other blackmail
I've known too many people who work at Google to agree with this. They've hired some people who were just plain incompetent, some who were great, but mostly in the middle, much like every other company.

TBF, they do seem to have more than their share of great, but, not by a lot...
FYI for anyone working at Twitter, the legacy JS disabled mobile site still displays the hacked bitcoin tweets.

For example try this with JS disabled vs enabled (404):
https://mobile.twitter.com/JoeBiden/status/12835123178466590...
> That being said, what was the employee's endgame here?

General disgruntlement maybe? Maybe they were simply pissed off and looking for a way to hurt the company.
Driver’s Licenses are effectively all-purpose state (or national, in the case of REAL ID-compliant ones) ID documents with driving-related endorsements.
> Apart from having more thermal mass (takes longer to heat up/cool down)

_Much_ more thermal mass, and takes much longer to heat up and in most set ups will never reach the same temperature as the heatpipes in an air cooler - the waterblock will be cooler at idle and under load. I would think that larger temp delta allows heat to conduct away from the cpu package more quickly.

My 3960X sees 125MHz higher all core full load, almost 100MHz all core average work load, and 50MHz higher single core boost clocks under a custom loop (280+140 rads & Optimus TR3+ block) than under a Noctua NH-U14S TR4-SP3.
Heh. One response I just saw complained about Trump using Twitter, since a hacker could take over his account and say anything.

Thankfully, the only good thing about Trump's complete descent into batshit insanity, and our apparent acceptance of it as a country, is that he could tweet literally anything and no one would react.

Maybe in his first year as president? But now he could tweet that he was planning on a preemptive nuclear strike against Antifa headquarters in Antarctica and we'd all wait for the White House communications office to issue a correction about what he really meant.
Or for an even prettier one, Streacom DB4!

https://fabiensanglard.net/the_beautiful_machine/index.html
I hate to call things impossible, but there is truth in what you say.

While I think it could hypothetically be possible, it is not worth the danger of people who don't understand deciding that "tech will fix everything". I think this actually applies to a lot of domains.
I remember interviewing at Google and being completely unable to think or relax. Instead of making any effort to learn about me and my skills, the interviewers became more aggressive and nitpicky.

Looking back, my life is dramatically better working remotely for the same level of income with friendly helpful coworkers in a non toxic environment.
I took an experimental class in high school which taught topology and knot theory to people with a pre-calculus background. We used an early draft of a textbook (not sure of the title or if it’s even been released - our teacher got access because she knew the author) and a lovely knots textbook called “The Knot Book.”

I think we gained a really good intuitive understanding of homeomorphism, neighborhoods, and homology groups. Knowing about these topics has been super useful in my studies and career.

On the other hand, some of the algebraic components of topology went totally over my head. So I do think there’s a limit to how much you can understand without diving into other fields.

Also, we had the benefit of a trusty excellent mathematician as our teacher, which helped quite a bit. Good luck diving into this field, I hope you find it rewarding!
Zone of Avoidance
I dunno why you're getting downvoted. I think this idea makes some sense.

If you're doing something shady to your employer, it seems to me that it would feel a lot safer to do so while working from your home office by yourself then when sitting right in the middle of an office pod with other coworkers.
Einstein didn't develop technology, he was a scientist. Science != Technology, but Science and Technology and are linked. Often times technology precedes the science, and then the science is developed and advances the technology.
Anyone else unimpressed with Twitter's U2F/FIDO token support?

They support a total of 1 (one) U2F token on an account :( The only other company I know that does that is AWS and one U2F token. Every other site I use allows multiples, usually at least 5 or more.

I setup U2F on Twitter but then got rid of it after realizing they only allow one.
This makes things sound even fishier. I think there has to be something else going on we don't yet know about. The amount of money this scam will actually earn the hacker is tiny compared to the potential of this hack and yet they still have enough money left over to bribe a presumably highly paid Twitter employee? Or maybe the Twitter employee is a low paid person which leads back to a question I raised elsewhere in this thread[1], how many people at Twitter have the power to take over these accounts unsupervised? Whatever the number is, this hack is probably an indication that it is too high.

[1] - https://news.ycombinator.com/item?id=23855328
No, but you could blackmail a social media manager to further your cause by planting a bug in the office, for example.
Thanks for reminding got carried away.
Except that the headline still doesn't mention that this was a teenager on probation--ie. already convicted of a crime and the probation conditions are part of the sentence and the reason why she wasn't incarcerated in the first place.

Do I think the judge was unfair in revoking her probation? Probably.

Sadly, that's fairly normal for probation conditions.

Nobody in the criminal incarceration system wants to be the one who showed leniency to someone who later turned out to commit some headlining crime. So, nobody is incentivized to help you out even for the most minor of infractions. They'll just revoke your probation and wash their hands of it.
Masks offer much more protection against coronavirus than many think
It's a clever name. As an english speaker if some comms app out of spain named QuéPasapp that I wouldn't declare that it's name should be changed just because it's based on a spanish expression? I don't really see the problem. Until there's a universal language that everyone speaks this will happen over and over.
They own the non “real” one too, he’s just too much of a tool to use it.
To me, this raises the likelihood that the attack was about something else. The BTC scam just doesn't seem anywhere near worth it compared to other things you could do - selling or using insider information, blackmail, shorting Tesla, taking out politicians, etc.

If the attack had been something like an exploit in the new API, I'd think, maybe some kid found it and was acting fast and reckless. If this was a sophisticated attack on multiple employees via social engineering, I have to think the attackers thought about it. And if they thought about it, they weren't just after 150k of BTC.
It's very different. I breeze through stress situations at work, even if people look over my shoulder. I'm doing what I do best, I feel excited.

On a whiteboard interview, it feels like being in school at a test where you didn't prepare well, for a topic you are not interested in.
So stresss kicks in and my mind goes blank.
I'm glad that a lot of interviews happened remote, it helped a lot.
If the details about how these accounts were taken over are true, that an employee changed email addresses of these accounts to email accounts controlled by the attackers, this is going to turn out to be a massive breach.

I'm thinking specifically of direct messages that could have been scooped up before they went public and started tweeting on these accounts.
Two Beautiful Rust Programs
Or maybe it took them quite a while to "become aware of the incident" in the first place, but that's just as bad.
CPython needs to grow up and not hoard the ecosystem. A successful PyPy is a successful Python.
Overall, it’s an interesting project and I hope they can solve all issues for a real deployment.

They don’t mention the length penalty that comes from wrapping around the cable or any impact of loss to fiber itself. Given the helical pattern, I’d imagine that they are adding substantial length to any distance they need to achieve. Generally you have about 20dB of loss before you need an amplifier or a terminal node. A typical number for field installed fiber is 0.25dB/km. So there’s some distance penalty needed here. I’m not clear on how you’d add amplifiers to these routes or if they are simple short hops.

Generally regular SMF-28 has a bend radius of 25mm. This is partially for loss reasons as bends below this radius induce loss and partially because bending fiber below that radius creates micro cracks in the fiber. The micro cracks can spread with time and cause the fiber to break. Given the rather large CTE mismatch between the power cable and the fiber cable, the 2 will expand at different rates with temperature, putting additional stress on the fiber, potentially leading to failure.

It’s possible to have a less bend sensitive fiber but it’s generally used more in specialty applications and not as transmission fiber. So it’ll be more expensive per km.

Along the lines of mechanical failure, it would seem that there would be the potential for abrasion between the power cable and the fiber cable jacket.

Finally, it’s a little unclear how repairs would be made. Doesn’t seem very safe to have to splice the fiber on a live cable like this.
I completely disagree - increasing total wealth allows new things and is more important than how people judge their wealth relative to others.

People are not equal in many ways - I don't see why we always focus on wealth. What about influence, what about looks, what about education, what about family life quality, etc...
Kind of a false opposite you got there.

The government could put it's decisions and publications on a website, official, verified, more or less controlled by them. There's no reason that has to be done with consultant scams - oppositely, posting on Twitter doesn't guarantee consultants aren't raking in money for adding or removing periods or whatever.
Any significant system will take months to learn. Your statement is probably only true for some trivial system.

A senior engineer comes with years of experience designing and coding systems that took years to develop and run at scale. Given time to learn they should be just as good at solving day to day bugs but if you assign them that you are wasting your time and money on experience. If you don't value experience you are wasting your time and money on experience.

It's pretty normal to have more junior engineering staff help new senior staff learn the ropes. It's also common for those less experienced staff to learn from the more experienced people even in that situation. I'm not saying senior hires should be respected from the first second because they are over 30 or have a long resume.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

hi hacker news
-----BEGIN PGP SIGNATURE-----

iIIEARYKACoWIQSiJQKEVJeJondn78BXE/NAGxPd0QUCXw/JqwwcZm9vQGJhci5j
b20ACgkQVxPzQBsT3dGf1gEAwMzbCxEaEJzRjJwFe90TRrXZiIe4KD9cZ64CHZEz
eKEA/3W0ZIx6TOASPrzuTLytBK8OsL9FFAVWMUGTyLJSSh8O
=ORB6
-----END PGP SIGNATURE-----
They social engineered access to a Twitter employees internal account, not the individual end users affected.
Do you really need me to state that C5a is not useless? OTOH, could you imagine scenarios, where those 2GB/thread wouldn't be sufficient? Could you imagine there are users hitting those limits? Or do you think "one size fits all"?
Honest question, how do I recover a lost identity?

The reason why this attack worked is primarily because of a recovery system. I agree this is a significant vector, but I can't see how decentralized solves this?

At the moment with blockchain wallets, once you've lost your private key, you're screwed. There is no recovery.

So, I'm all for decentralized but if it is truly my identity, I need a way back if I lose it. Not sure how to solve that vector even in a decentralized case.

Do I need to upload my identity to specific 'verifiers'?
AWS has a simple workaround though as you can create as many users as you want, each with its own unique token. Combined with roles it’s straightforward to set up a backup user / device.

It makes sense technically to have a single token anyway. Otherwise you either need to include then identifier of the auth token (in addition to the secret) or have the verification step try out all N options.
Isn't it kind of insane to lock your account into using a single U2F/FIDO key? Lost the physical key, lose the account?
In that he specifically called out Asians to out-american others to prove their Americanness. For illustration picture Obama calling on African Americans to do more to prove that they're Americans.
The theory that I think is most probable is that someone got access to the hack, either by purchase or stumbling upon it, they tested it out and had a "holy shit this actually works" moment.

After this they became paranoid of the bug being fixed within hours and tried to monetise it in the quickest, easiest and safest way possible.
Lua was initially designed as a data description language for Oil and Gas simulations written in Fortran. 1 based indexing makes perfect sense in that context.
What about Donald Trump wanting to shame the company which prevented him to tweet? Is it too far fetched?
The most logical conclusion is that this probably wasn't about money. Plenty of better ways to make money than telling people to give you BTC. I'm expecting a huge data drop on wikileaks/pastebin/wherever of private DMs, images, who knows what else.
The obvious counter to this is: Which will give the worse impression: Canceling for a good reason or showing up and being distracted and performing poorly? Companies like the usual FAANG are nice enough to merely give you a 1 year embargo. In other companies I've worked at, you interview for a team and if you do poorly, the team will simply never interview you again (although you could interview for a different team at the company).

Also: Do you really want to date someone who doesn't care that your cat may have a life threatening problem?

Finally, even if it's not that serious (cat emergency): Do you really want to work/date someone who is that susceptible to this bias? I know it's the norm to fall for first impressions, but for me, it's also a signal of problems I'll have with them in the future.

BTW, my cat had a serious health problem once. She needed lots of immediate care for a few months (at home, away from work). And the vets were telling us that even if she got through it for now, it will come back soon and we should really consider euthanasia - the condition would eventually kill her - not many cats would last a year with it, and chances are her she would be in pain for much of it.

And this all started a few days before I started my new job.

I went straight to my new manager (before my official start date), and explained to him that the cat was my priority - I could take a leave of absence or whatever was needed, but I needed to figure this out (either euthanasia, or time off for treatment options, etc) and could not be anywhere close to 100% at work.

Fortunately he was sympathetic and said I should not worry and do whatever was necessary.

The job turned out to be crappy, and I stayed there longer than I should have entirely because of this.
Instead of race, look at power structures and how they support opportunity for groups of people. Thoughtcrime is not worth the efforts.
Absolutely amazing. A friend and I just tested this and it's true. It makes me think this is a little more than the "rogue employee" story they're peddling.
I want urgency hint set upon receiving new messages, and yes, desktop notifications. I am not sure what browsers do differently, but I use `dunst` notification daemon, and `notify-send` (and other programs) works well with it. I wish Riot (or Element) supported both. Of course only with with proper customizability.
I personally am not interested in watching videos to get an idea of what your product does.

One can argue if my stance is silly or not, but you lost me as a potential customer.
Respectfully, I’m not sure you understand the function of the press.

When has journalism ever stuck to facts? When has the “news” been more than stories and opinion?

Hint: Never

Your assumptions aren’t based in fact and smack of elitism. Press has no responsibility to meet your personal idea of competency.

Read: A History of News by Mitchell Stephens https://openlibrary.org/works/OL1854941W/A_history_of_news

Read: https://en.m.wikipedia.org/wiki/Yellow_journalism

Read: https://en.m.wikipedia.org/wiki/History_of_French_journalism
2fa won’t protect from a Trojan.
Something hot and bright far away emits photons. What are those? Heat transfer through the medium of time, right? A fast clock is bright and speeds up a slow clock that's dark.

What's the difference between a tiny spot on the Hubble, or any material for that matter, turning colder and darker always when pointed into that direction? Voltage spikes up at that sensor and it sees a hot spot because it caves in on itself instead of being hit with a beam of energy in motion for billions of years.

Weak force parity violation?

Is that just some higher abstraction on top of pair production and spontaneous particle creation?

Electromagnetism is the emission of photons and the absorption through the photovoltaic effect. Matter decay is mass decreasing and releasing energy without EM. Or EM plus negating the effect by messing with that EM counterbalance. Or gravity, the heat transfer through the medium of time, interaction so fine it looks like you are broadcasting to everything at once if something else tries to trace it.

That's what I'm thinking. Eventually spontaneous particle creation is the basis of all interaction. Not EM or photons. I think humans get to it, that we do it already. Massive celestial objects pop into existence because highly accurate sensors here on Earth say they must. Particles here pop into existence and they give the data of everything out there for no other reason than they must. Instead of being loss in a vast sea of stuff, the universe is a very complex filter to a massive energy source.

When they talk of causality violation, backwards time travel, I think of hitting the big bang itself, or original energy source. Throwing dynamite into the wave you're surfing on.

Forget worrying about a star crashing through Earth. Earth is the source of all destructive acts in the universe for the most trivial of reasons, and we have soverign access to all that out there to make our lives the slightest bit better for any reason.

Just some thoughts I get when I read these things. Thanks for that article.
Maybe not everybody with internal tools can mess with it. Because somebody with internal tools already messed with it before and it didn't look very well for twitter. So if there's anybody with brains there they probably made some measures so it won't happen again.
It’s a good question. The answer is no, before this study we didn’t have a gapless “x_chromosome.txt”. We did have 97% of it, but there were parts that were missing here and there. In fact, because the answer is no - which admittedly probably seems wild - this work is very important.

Now, there are much more sophisticated answers, and downstream points to be made about graph genomes instead of a reference, etc (which would also get to your point about why geneticists don’t talk about it this way). But, that’s a broader scope.
From http://lua-users.org/lists/lua-l/2018-03/msg00155.html. Looks like this was in the first pre-alpha release of 5.4 but removed shortly afterwards:

> t[i]=undef is a special syntax form that means "remove the key 'i' from table 't'". You can only use 'undef' in three specific forms:

t[i] = undef -- remove a key from a table
t[i] == undef -- test whether a table has a key
t[i] ~= undef -- test whether a table has a key
With the info we have it looks like hackers changed the email id of the accounts and then used forgot password to reset the password. What’s concerning is that they were able to do it for accounts with 2FA enabled. I think disabling 2FA should be extremely privileged actions and should not accessible to most employees.
> It makes sense technically to have a single token anyway. Otherwise you either need to include then identifier of the auth token (in addition to the secret) or have the verification step try out all N options.

I'm not sure if that is true. Most sites support multiple tokens. Off the top of my head I can think of Google, Facebook, Github, Gitlab, and more that support multiple. So it seems like the normal method is to support multiple.

One one site I have over 5 auth tokens configured. And tested with four of them connected to my PC at the same time. I could tap on any one of them to authenticate. This is on a Windows 10 PC.
pubkey: https://gist.github.com/rudolph9/bd672dc6d50a51a7d3f5352a918...

A little more cumbersome than I imagined but proves that the contents of a tweet can contain a message and a digital signature.
Me too. I just assumed I would be able to treat it like the computer it is. For some reason everything has to be different just because I can make phone calls with it?
Wait until they start adding to it.

Element Prime
Element Whisper
Here[0] are the supposed pics of the admin panel the hackers accessed. Assuming their legit, it seems like Twitter has some blacklist features. Can't find any info detailing how they exactly work, but it seems an admin can blacklist a user from the trending page or from search results. Pretty interesting.

Oddly enough, posting the screenshots resulted in some users getting their account suspended or Twitter pulling the picture down.

[0]: https://video-images.vice.com/test-uploads/_uncategorized/15...
I like it. However, I have had an interviewer at a "top chicago tech place" (roll your eyes on that one) He basically did an inperson imitation of leetcode. Say problem, look at you. Don't give help when asked, stay emotionless.
Doesn't really seem like 2 could ever be ruled out in theory.
They potentially had access to any account they wanted. You don't know that they weren't snarfing DMs on interesting accounts while having the celeb accounts panhandle for bitcoin after.
Based on what we know, it does sound like the attackers had full access to the accounts. That's a really interesting point about direct messages. It makes it all the more interesting that Obama and Biden and were both targets with the upcoming election. Wonder if those will start showing up on WikiLeaks again.
One thing I learned in getting my engineering degree is that it’s unethical to practice engineering in an area you don’t understand. No way would I ever try to apply my software engineering skills to a materials problem
So CEOs should never be fired for IT fuckups even with gross negligence and it seriously hurts someone?
I think I may have just re-invented keybase.io haha.