skysight-inc/HackerNews huggingface dataset:
I used to quite like Lua, but got quite consistently wound by up several things

- global variables by defauilt
- weird choice of certain operators (~= for not equal)
- arrays start at 1

(fixed yet?)
The Quiet Return of Feudalism
Did you click the links in the op-ed? Almost every claim is false, and the rest are inaccurate at best.

The only claim that wasn't refuted in the links was the Henry Ford Hydroxychloroquine study. Here's more context on that: https://www.factcheck.org/2020/07/navarro-doesnt-give-full-p...
Won't this end up like email, though? Sure, anyone can set up their own business... however, 90% of people will be on a few large providers, and those providers will end up blocking transactions coming from unknown new providers (to prevent scams). Decentralization doesn't stop consolidation.
https://www.reuters.com/article/us-usa-tax-corporate/many-bi...

Doesn't seem like it to me.
I'm a designer who usually cares a great deal about typeface usage. On your resume, I don't care if you use Times New Roman (but pick one) as long as you can present your information well.
They could have probably made a 100k by disclosing this to Twitter. The reward/risk graph seems concave down and not convex up.
If they don't do that soon then expect POTUS to seize control of it.
If the infographic covered all the possible human cultural arrangements wrt families, that part alone would be far longer than everything else in it. But the point here is not to educate about all possibilities - it's rather to point out that a specific arrangement is considered normative, and (perceived) adherence or non-adherence to it is used to establish a hierarchy of groups.
It can‘t really be the first three, because Twitter will fix this problem soon. So it would be wasting the exploit.

It‘s either incompetence or your fourth option.
Yep, Apple only used that account to run ads on.
Spring Health Product Designer Onsite
Its not hard to fathom that someone who was able to pull off a hack like this could have also found a way to mess with the metadata there.
What if you prevented the intentional start of WW3, that would be quite the trampling of some rights
I know it more complex then I imply, yet, I find it odd that the relationship Apple has with it's far eastern suppliers seems to raise less problems (in their tax jurisdictions)... Why does Europe accepts an arrangement that doesn't favour itself (as a whole - since I'm sure .ie is getting a good deal, or they wouldn't do it)
I find it fascinating that they didn't target @POTUS/@realDonaldTrump. I wonder if there are specific mechanisms in place to protect accounts that could, y'know, start WW3, that aren't rolled out to other blue checkmark accounts.
Apple don't post regular tweets. They only use sponsored tweets.
Eliminating or mitigating the use of bunker fuel could be impactful towards reducing harmful emissions. The use of conventional sailing power is not.

In 2015 cargo ships transported 70 trillion ton-kilometers. The largest vessel here displaces 45 tons, so how many sailing vessels and sailors able to work for such low wages do you need to make a dent?
That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters.

(Also POTUS is not authorized to declare any wars btw.)
How does this solve nuclear waste storage? It has nothing to do with the challenges of storing nuclear waste.
All type of accounts are posting the same message. Out of curiosity I just deactivated mine, let's see what happens.
not Kanye
I am not familiar with Discord's hosting model. Can you host a server on your own hardware, or are all servers run by Discord?
> Kill-switches are dangerous, since they get built and never get used.

What about the circuit breakers at their data centers? Serious question..
Guia de Expresiones After Effects random()
Elon Musk is not.
Twitter would have probably paid out about $100k for this to be reported via a bug bounty program. $100k is nothing for the risk taken, they could have made a lot more.
Who is Naval? Their website doesn't have an "about me" page.
This raises so much questions about Tech giants security. If they could do this manipulating elections or so much power with one system.

"Security is Myth."
“GitHub have you stopped enabling ICE yet?”
I read somewhere that they hacked it multiple times. The first tweet got taken down and then it got posted again.
how does that trick work?
Not really. That just prevents them from posting bitcoin addresses. They still have access to all the accounts and can post whatever they like. It's still dangerous. And what about all the real posts that contain long strings?
Slash and burn agriculture. Wait, weren't there problems with this?
post? nothing, just shut the damn thing forever and for good.
why? 'cause it's a cancer
No, that's not true IMO. There's only so much hospitals can do.

Granted they can do a lot for people in the middle-ground, i.e. giving people oxygen. I don't have a number for how much death they avoid by doing that, but that's certainly where the utility lies.

When it progresses to severe enough COVID-19 that invasive ventilation is required, the battle is basically already lost; at that point something like 90% of invasively ventilated patients die. So, I'm not saying that ventilators don't work, but what I am about to say is, if we assume that without ventilators 100% of those people would die, the effect size is still so tiny that hopefully we can all agree that the whole ventilator circus was a massive distraction.

Anyway, I don't think you were trotting out the ventilator fallacy, just wanted to nip that one in the bud for any onlookers.

So back to the point: I don't know precisely how many lives are saved by those given oxygen but not invasively ventilated, I suspect it does save lives, but overwhelmingly, the reason people don't die from SARS-2 is because SARS-2 can't kill them. Again:

- Most are either asymptomatic or paucisymptomatic
- Many experience symptoms comparable to a mild cold
- Many (probably less) experience more moderate symptoms comparable to a flu
- A small fraction of those infected go on to develop increasingly severe COVID-19 eventually culminating in invasive ventilation and death.

So, all the possible utility of hospitals lies between the "moderate symptoms comparable to the flu" and "severe COVID-19 culminating in invasive ventilation". i.e. if I broke it up more granularly, we'd presumably find a category of people not bad enough to ventilate but who have very bad symptoms, and that's the faction that hospitals really help.

Anyway, hospital overrun is simply not a real concern in a place like the US. We should be more worried about the opposite - hospital scaledown.

And the reason hospital overrun isn't a concern is because COVID-19 is mild enough for most people that we don't get the hordes of people we were expecting. We do get quite a lot of people at peak, but it's manageable with some shuffling.

I'm much more concerned as well about the suspension of elective surgeries. We're going to see so many more deaths due to cardiac disease (which kills more than COVID btw), undetected cancer, etc as a result of this
Yeah, but Twitter will surely:

a) fix the bug if it‘s in their APIs

b) roll out a framework to be able to respond quickly in the future. Like a regex on their edge servers.
Why is twitter optimizing uptime instead of trust?

Trying to figure out why would they let such a massive hack play out for over an hour instead of pulling the kill switch.
Apparently they flow from high-profile accounts. If someone can inject one message across so many Twitter handles, they most likely can inject other messages as well. Like ones tailored to manipulate the stock market, or impacting international politics.
Everything runs software, all the time.
I think many people have try several of them before settling on one for their use case, and don't revoke the OAuth.
Anyone I’ve shown my car to has been able to figure it out quite easily. I don’t understand what’s complex if you have used a touchscreen you should understand how to use it. I don’t do a lot of fiddling around with my radio I only skip between a few things so once they are saved as favorites I’m good.

I mean I get how people might not know how to open the glovebox but it was one of the first things I was shown when I picked up my car. Once again I almost never have to open it.
> they rarely get tested.

One of the largest problems of our industry.
Does the atom of the movement change as well, or just the orientation of the hand/arm?

(I would make the "come here" gesture with my hand starting closer to the person and moving towards me, and the "go away" gesture in reverse, although it might be difficult to tell because the motion would be repeated and confounded with moving my hand/arm into place in either case.)
Open Source ZAP Founder Joining StackHawk to Further AppSec to Developers
> allows a company to incorporate

Leaving aside cases of companies that actually have legal entities in a location (such as Apple), the comment that started this sub-thread was about companies that don't necessarily have any nexus in a location, and just provide services to people regardless of where those people are.
Well then we're royally fucked if all it takes is a single rogue admin at this single, societally ubiquitous company to expose everything and let people fire off false declarations of war on each other or short TSLA and additionally make the entire concept of 2FA meaningless.

This was exactly what 2FA was supposed to prevent, and if this is to be believed then because of Twitter's implementation it was all worth peanuts in the end.

There are just too many eyes on Twitter for their administration to let this happen. Twitter has grown into too big and too valuable of a target at this point, and the moment this happens you can't prevent dumb people from falling for it thirty seconds after it gets posted and starts showing up in their feed.

Then why was it even possible to do this from the inside? What employee access controls did they have on administrative accounts?

I'm thinking they're going to need to dig an underground bunker and have everyone be in the presence of at least three other certified minders when a group of two dozen people at a tech startup are the last bastion of hope in preventing the disruption of global communications.
> Ireland, Luxembourg and certain other countries are complicit in this

Most people don't realise it's US tax law which allows US companies to defer paying taxes on foreign profits indefinitely. Without that law there' would be no loophole.
If they had full access to Twitter’s backend, they probably would be tweeting from accounts like @POTUS or @jack. But this seems like they have access to limited accounts. Most likely gained access to a third party service that allows you to manage your tweets?

Edit: they tweeted from the twitter support account. Just wow. They might have actually gotten into Twitter’s systems.

Edit 2: To expand on my edit above, I saw multiple tweets from other accounts that showed a screenshot of the scam tweet originating from the twitter support account. I’m not sure if it’s real or not, since they keep deleting the tweets. If it is real that would definitely open doors to more theories.

Edit 3: Seems like the twitter support account was a joke. Impossible to tell with everything going on!
Hopefully this will lead to an improved PineTab as well!
If someone were to take over that account an issue a call to arms for the QAnon crowd, it could be disastrous.
Yeah, because this looks oh so professional.
To be fair, it's still higher than yesterday's low. It's not like TWTR is known to increase over time anyways.
Maybe the dude shorted the Twitter stock?
Yes, they should make the constituents come to them! What?
Sometimes relationships fall apart and things get ugly.
For the specific variation this hack is currently taking, sure. But the actual problem is that someone has access to these accounts and can post anything they want. That is not okay, and has nothing to do with bitcoin addresses.
So strange that twitter can't automatically filter these. The message format is pretty consistent. Surely they could write something to at least put tweets matching this pattern in a moderation queue.
Quite possibly this isn't a hack and someone got a Twitter admin's account, then got access to the admin panel and "all" accounts without having to hack much of anything.
When a user rates a library, they should really be rating a version of it (even if the latest is always assumed). As time passes and new releases are made, ratings over time could indicate whether the project is getting better or worse.
> I can code a binary tree, hash table or what have you, if I have to, but I am not as practiced as somebody fresh out of school, because that heavy lifting is done by libraries, and I'm busy contributing original mathematical algorithms that no one ever asks about because they don't have the background to understand the explanation.

This made me chuckle, because it's absolutely how it is.

Some other comments here talk about how nobody creates new algorithms these days unless they are a researcher. But it's not true at all! Like you I'm creating new algorithms and other tricky techniques all the time, but I'm not fresh on the stuff I learned at school... or so I thought.

I have been really surprised to find some screening interviews recently asked me shockingly trivial questions. So simple that I stumbled over myself trying to simplify the answers, thinking "I know too much about this topic and need to keep it simple", and "can these questions really distinguish candidates?".

I did the TripleByte online test recently and found the questions much simpler than I expected, including those in languages I've never seen before. That is not TripleByte's reputation. I see people writing about how difficult they found the questions. (Admission: I didn't score all 5s, but I can't figure out why unless it's timing as I think I answered them all correctly.)

So I'm thinking, perhaps it's not so bad, people just make it sound bad because there's a wide variation in people's knowledge, abilities and expectations.

If you are thinking you might apply for something like a FAANG or other hard-reputation company, and feeling put off by the horror stories, I would say, just take a look at the old stuff a bit for a refresh, then give it a try and you might be pleasantly surprised to find their reputation is because people less skilled than yourself found it hard. Their "hard" might not be hard for you.

You'll probably still fail the interview if it's a FAANG because they are so selective, but I would bet my dollars to donuts that it would be more refreshing than miserable if you're not attached to passing.

I know your point isn't about yourself, it's about bias in hiring, including bias due to perception by the candidates, but I wanted to address that side point about feeling there's no point applying. That sounds like anxiety to me. (I have it too, I'm trying to get over it.)
I believe #2 is a mockumentary.
1. If needed. I think I over-reacted in saying send a SEAL team out there. But I think in such situations, if this is a sort "gangster" situation -- we should seek diplomatic action and recourse -- esp if it is a foreign entity.
2. This is a horrible travesty. We are too deep in bed with the Saudi's
They were too busy censoring right wing tweets and Trump, maybe they should focus on their security, hire more engineers than political commissars. But then how would they fill up their diversity quotas? tough problem.
What's 90% normal? Are you able to go to church, concerts, movies, school, bars, restaurants, with no mask requirements and no occupancy requirements?
Cryptocurrency scams have been going on for years despite the fix being an easy "if reply to a high-profile account and contains the words "bitcoin" or "giveaway" then ban".

If they couldn't (or didn't want to) do it then I very much doubt they can do it now.
Nobody want a drone over their head.

seriously, this hackers are not so imaginative.
Heh, thanks.

Indeed, I've observed what I would describe as symptoms of OCD, germaphobia, and agoraphobia in a shockingly high percentage of the population.

And of my friends that were already agoraphobic and germaphobic, they've now had their lifestyles retroactively justified by this thing, so it's going to make it way worse for the people that already had it too.

(I have one friend who is a germaphobe but not where it really interferes with their life, and they adopt the correct attitude of "well I can't really control this (germaphobia, not COVID-19 to be clear) but I'm not going to pretend it's a good thing" - they've stayed much more resilient through this than one might expect)
Ok, mass panic then?
You both formulate good arguments. Nonetheless, there are many countries where one could argue that the customers and infrastructure that make any business viable and profitable exist in spite of the state, and not because of it, rendering taxes a vile theft to benefit a very select group of people with no intention of doing any good with it. In which case, they would be impoverishing society as much as tax-evading companies.
It was wonderful. It's too bad we had to wait this long for a replacement.
> That's assuming Tweets actually serve an actual diplomatic function and are not merely marketing/propaganda for voters.

He has fired people over twitter [0] so I'm not sure the scope of one can do there is limited to "marketing/propaganda"

> (Also POTUS is not authorized to declare any wars btw.)

Other nations are not going to read the US law first before deciding if the declaration was or not real.

[0] https://www.theverge.com/2018/3/13/17113950/trump-state-depa...
Shame you had to retire the old one, but "hunter3" does have a nice and modern ring to it.
Yes, that the point, the maintenant is not minimal, the facility could run more than 40 years if it was minimal maintenance.
There's always a shutdown button. Twitter can simply edit the DNS records to point to a static maintenance page.
Idle speculation isn't very helpful.
https://twitter.com/TwitterDev/status/1283068902331817990

Hmm.
Show HN: Automatic cloud-free logins via Bluetooth connection with phone
It's true, but maybe not impossible to pull off. The exploit could've been purchased by people deeply connected and organized. If you split your investment and divert it enough, it will be impossible to differentiate from all the other incoming sales tomorrow.

There are so many smarter moves that probably could have been made though. The upside of this one is that we'll keep speculating for a good while (maybe forever) if it wasn't just a stupid crypto scam attempt after all.
I think its mostly test of miners - prominent group of tech-related personas have been hacked, so I wonder if they end up asking miners not to validate/approve the list of incoming/outgoing transactions. If they choose to minimize priority of this transactions, they may get delayed over 14 days and eventually fell off a block as never processed bitcoins. Then spender gets their money back. In 14 days they may realize it was a scam. They probably already did!
Oh and if I can add, the number of friends of mine who have reported feeling shortness of breath as a symptom is staggering. Pretty hilarious that one of the classic COVID-19 symptoms is also a classic anxiety symptom. We've created an environment ripe for massive psychosomatic/psychogenic illness.
That's not what we've seen. For example, one of our customers raised salary bands across their entire software division to accommodate the salary demands of the contractors they wanted to convert to salaried.

In most cases companies have a ball park salary in mind for the position, so when it comes time to convert there is some room for negotiation, but no surprises.

Companies are so desperate for good software engineers that they aren't going to let a good dev go after several months on contract in order to low-ball you and save a few thousand dollars.
Without knowing what they have access to, it's hard to tell.

If it's a third party API key with special priviledged that they hacked, the potential harm is limited.

If they have access to the full system, they could be sending millions of ghost messages to some part of the population right now to get them to do something while we all watch the BTC show:

- scam them

- get them infected to gather a massive bot net

- make them very angry and start some kind of civil unrest in a specific part of the world

- cover a currently happening terrible event somewhere so that we don't learn about it too soon because twitter is the faster medium for that

At this point I realize how critical twitter has became to shape the way we view the world, and govs should worry a lot that this can be happening and act on it quickly.
Or they could have been doing something similar with cryptos without risking SEC or requiring ID on exchanges: using the twitter accounts to announce partnerships with one of the cryptocurrencies. Probably less gain then with stocks but more than with this simple scam.
Donald Trump was Tweeting in Farsi earlier, I was seriously on the fence about whether that was a genuine tweet.
Do you need sailors or fleets of autonomous sailboats?
> While $599 may seem like a steep price to pay for a Zoom-calling device when you can already Zoom from a phone or computer, the idea seems to be that it’s an easy way for newly remote employees to jump right into Zoom without having to deal with installing the software or setting up any complex equipment.

You can run zoom directly from a web client without installing anything, and the app is trivial to install on Mac, windows and Linux. Both methods work fine on my Chromebook which I bought for $200 5 years ago, both in ChromeOS or booted to GalliumOS (Ubuntu really).

I don't understand who this product is intended for. if you're a remote worker you have to have a computer. $600 is more than enough for a webcam, good USB mic and an extra monitor, with leftover for a nice steak dinner out with the wife.

That's not even mentioning Zoom's questionable history with privacy...
I understand your reasoning but this is a perfect example of the saying "Never let the perfect be the enemy of the good". I agree that there are better solutions in terms of environmental cost for mobility but given the constraints of human behavior and urgent need for massive immediate reduction of carbon emissions, EV's are currently our best shot.
Quick approximation: maybe $10 if it really is 92% to 94% efficiency? (at a low $0.10/kw). Although other commenters say it is a bigger efficiency difference.
It is much easier to set up your own cryptocurrency wallet than it is to set up your own trusted email server. Your metaphor is similar but off by a large amount. The major difference is that blockchain deals primarily with money, so email spam (useless worthless messages) is inherently less worthy of sending because doing so actually pays me, in addition to the fees you pay the network.
~= and 1-indexing are only weird if you haven't seen them before. MATLAB uses them as well.
I hadn't really considered that the attack might be against Twitter, the corporation, itself. The BTC thing is obviously too stupid to be the objective, but if you hate Twitter, then would there be a better way to teardown the entire site than doing something like this?