skysight-inc/HackerNews huggingface dataset:
There are infinite amount of ways to break something.

Look, most of mistakes are silly or combination of silly. We think it is good to understand them, but in reality someone on the team probably pointed out that this can happen and was ignored, as it wasn’t a priority.
And the biggest motivator to make sure companies prioritize uptime is to tell them, that we don’t care about their excuses, we care about uptime.

I wonder whether github still on MySql waiting for another outage.

Read the reason - human error. As old as humans, all I learned is that Cloudflare doesn’t have sufficient automations and checks in place.
Chazelle also came up with the ingenious soft heaps.

I was just giving the recommendations in the context of 'Do you know any good books or resources to read up more on random algorithms?'. Not with any regard to practicality.

I have to admit, I only managed to work through some of the chapters in the books I recommended. And for example, the main reason I know of Chazelle's book it's because it is available for free online and stumbled across it a while ago.

Btw, you seem knowledgeable. I have an algorithmic puzzle that has plagued me for some years now:

Starting with an empty heap, and a sequence of inserts and min-pops, can you compute what elements will be left in the heap at the end in linear (expected) time?

Obviously, you can't just run the instructions, that would take O(n log n) time.

I have an algorithm to verify a proposed solution in linear time. But I don't have anything solid for finding one in linear time. I have a hunch that soft-heaps might be useful. And there's probably an even simpler probabilistic approach.

Ideally, I'd like the solution in the comparison model, but if you have something that works on numbers only, that's also fine.
Yea and the sorties paradox https://en.m.wikipedia.org/wiki/Sorites_paradox

I think the solution may be to drop Aristotelian categoricism and opt for fuzzy logics and fuzzy set theories.

Relatedly, causal continuity is also another solution philosophers often give for personal identity today re the transporter/cloning problem.
Most languages have more than one data structure in their standard library.
I always thought high profile accounts are run by media teams. I doubt the account owners know the credentials themselves or have direct access in most cases.
Maybe sometimes. But it can also have a heavy impact in families and communities. Parents looking for kids doing drugs. Relationships destroyed. Lying. Siblings lacking attention when all the attention is on the drug user. Partners of drugs users abandoned – or hurt – physically, emotionally and economically. The same with their kids. Stealing to stop the craving. Murder is knocking on the door . . .

When you have invited substances to take over your mind, you can't be sure that it will let you be the captain on the boat without a heavy fight.
True client story, heavily anonymised: I was representing my client at a meeting with a third party with which they were planning to integrate. Financial systems and many zeroes were involved.

It became apparent early in the call that although we were talking in some detail about integrating two complex and complicated systems, no-one on the call was a developer (except myself, lapsed).

It had never occurred to me that the powers that be might do that. Next time (and from then on) there were developers involved, at least from our side.
Burp Suite https://portswigger.net/burp
No loops in this program. It's all written in Erlang, so it's (tail) recursion all the way.
Pi hole cannot block ads inside of YouTube app, only on the web. I suppose that will be similar with Chromecast.
US Customs Plans to Tap into License Plate Reading Network for Border Security
Yes, it's really worth the money. Otherwise, I only use open source tools
Doom and Quake were created in the single-core era. I was just wondering if modern game design is different.
enjoy: https://github.com/standard/standard/issues/1381

https://news.ycombinator.com/item?id=20786981
Agree, but it comes across as we don’t care.
I worked for a major gaming network, and believe me, gamers don’t care why they can’t play. They want to play. Now.
And I can’t imagine anyone on the team relaxing when something like that happened.
And penalties for drug dealing are quite strict.

Therefore neither guns nor drugs are readily available in Mexico?
The bill is the ads which they enforce to the best of their ability, the analogy doesn't have to be literal. Google also offers a literal charge, in the form of YouTube Premium.
That's not possible, because the situation we have today is that proprietary APIs (D3D, Metal, CUDA) are pretty stable, whereas open APIs (OpenGL, Vulkan, OpenCL) are buggy or unsupported.
Point taken..
This is not the scientific method you are applying but a hopeful emotional reaction.
Easy. We built something that was worth money without all that.

Not a one trick marketoid pony.
Because web development is like a blazing fire: starts brightly (a new framework/library to play with), burns fast (the framework is older than a week, time for a change) and leaves behind a pile of ashes (legacy software built with the old framework) /s
I was in eng leadership at largest gaming network. Our customers (gamers) absolutely didn’t care about reasons they couldn’t play. It was always our fault as we were responsible for tech choices, not them.
And I believe it is a way. If I’m selling you a service it is my responsibility to make sure it is reliable and not to blame it on something that is under my control (like cloud providers).
Of course I can’t fix local internet going down, but I can make sure I’m not married to 1 vendor
But if they were going after OG accounts to resell them, would they really want to cause such a huge fuss that would have Twitter carefully examine the audit trail and undo the hackers' actions?
Roughly 5-10 I’d say. We are able to weed out a good chunk in the phone screen (which is done by me or another engineer, not a recruiter)
> Bezos only follows his ex-wife who doesn't follow him back

I honestly didn't believe you. But it's true. That's... kinda weird.
State machines are now called loops?
Not comfortable sharing my exact employer, but it’s a small biotech in the Netherlands.
> in the absence of any information about the downloaded accounts, there’s really no way to guess what their value may have been and to whom

One possibility I can think of is that a state actor, such as China, was investigating state enemies, such as suspected dissidents. They wanted to get the DMs, but also didn't want the general public to catch on. So they set things up so public discourse would be centered around the Bitcoin scam and celebrity hacks.
WhatsApp lawsuit against Israeli spyware firm NSO can proceed
Oh yes, for sure. That makes sense even with a fairly big distributed support/safety team.
> SARS-CoV-2 spike proteins were so effective at binding to human cells, they had to be caused by natural selection.

Read the article you are citing. There is convincing evidence that the virus developed via evolutionary mechanisms. That in no way refutes lab-origin and is entirely consistent with how most labs promote infectiousness (particularly airborn infectiousness) through gain-of-function research.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4693520/
That doesn't work as well as you think it does because entities cannot think on their own. They need to refer to global shared state all the time.
This is just conventional lobbying. It's pretty bad when the lobbyists come from a company with a monopoly like an ISP but every other company is still at risk of being boycotted.
Yes it does have those impacts, which is why medical intervention instead of criminalisation should be the norm.
The World’s Most Powerful X-Ray Laser Beam Creates ‘Molecular Black Hole’ (2017)
This app is not for you. Use the mainstream.
The Making of You and Me
>"When scientists at the Department of Energy’s SLAC National Accelerator Laboratory focused the full intensity of the world’s most powerful X-ray laser on a small molecule, they got a surprise: A single laser pulse stripped all but a few electrons out of the molecule’s biggest atom from the inside out,

leaving a void that started pulling in electrons from the rest of the molecule, like a black hole gobbling a spiraling disk of matter.

Within 30 femtoseconds – millionths of a billionth of a second – the molecule lost more than 50 electrons, far more than scientists anticipated based on earlier experiments using less intense beams or isolated atoms.

Then it blew up."
They are also deprecating the terms “whitelist” and “blacklist”. In my mind I never associated them to skin colour, but I’m not a native English speaker. Does anybody know the origin of these terms? Is there any semantic link to race?
Because it suggests the application was built with performance in mind (optimal rendering, rendering techniques, optimal data retrieval/caching, just generally not a cookie cutter implementation).

I would look for those terms as signals for things that must have performance like data tables, animation frameworks, real time apis (anything real time), and things that dictate your data rendering (state management libraries like redux). These things cannot be slow, so please indicate that you did not make it slow by saying “blazing-fast”!
Ok, I'll wait until they release a minimized version of Vue3 then. Thanks
No, he co-founded Embark studios with other DICE guys and is doing Rust.
Simply "Meetings will continue until velocity improves" would work just as well.

I'd totally buy a plaque of that to set up at the office :D
Future VR headsets
It's shame that the author has no idea about the security model of WebAssembly.
Control-flow integrity and protected call stacks prevents direct code injection attacks in WebAssembly.
Please check. https://webassembly.org/docs/security/
If you can't see the code..
WebGPU is not high-level, no? It is closer to Vulkan than to OpenGL.

And I am not sure Vulkan runs everywhere... what about consoles?
Learn How to Do Feature Selection the Right Way
Show HN: Simple Ops – My new microstartup after three years of indie hacking
Frankly, it’s hard to hate opiates
As I understand it, the general rule of nature is that biological specimens don't thrive as well in environments that they are not evolutionary adapted to. This is why humans can't swim very fast and fish can't walk on land.
The fact is that COVID-19 made its first jump to humans (new environment) only a few months ago and yet it spreads better than most pre-existing known coronaviruses that have been affecting humans for centuries before that seems odd.

So when scientific papers match my layman intuition (though I do know something about evolution in general, just not microbiology) and I also see the so-called 'real experts' lying about the facts, and some other experts are writing papers which seem to confirm with my intuition, then my intuition has a lot more weight.
the real issue is what you get when you google Scott [Lastname]. If the top result is an NYT story his patients will reliably find it, and that can be problems.
Plus the Mexican cartel is backed by HSBC and other big entities from around the world.

People forget easily how HSBC only got a slap on the wrists when they got caught!

The people you have been warned about for millennia are behind all of it. The ones hat like to call themselves 'gods chosen' when all they are is unempathetic ass wipes who hate everything gentile!

But alas, it's always those you can't critsise even though the evidence goes back millennia lol.

'i never let schooling get in the way of my education'
$23 BILLION over 3-4 years is a lot though! Since Apple isn't confirmed we can only speculate, and if you're right that's crazy.

What about Google cloud infrastructure and Sass that they deliver?

Possibly this and data across services is part of the package they sell to add companies? I don't think it's fair to compare between different companies. If they turn a good profit, then good for them.

Of course, not photo books are likely not selling at the scale of other products. Also, I meant Google One for storage, which I pay for, and you can buy photo books via Google Photos.
What is important is that this needs to be investigated and the world needs to take measures to protect us from total future annihilation in a similar situation
Interesting, is that what is used for stereoscopic video screens?
I thought a game was developed from a blink of inspiration. And will start polishing the game to its proper state.
WebP does add something more than better compression (unless you can live with enormous PNGs): efficient compression of lossless photographs, lossy diagrams and photographs with alpha channels.
Isn't what President Duterte is correct, now? There are lot of failings I agree but Philippines would have turned out to be another Mexico if it was left unchecked.

If the borders of the US close then the smuggling will start to go to other countries too I guess.
Freebie Saturday: Game Dev Gives Away Almost Everything
Another way to sandbox it if I don't trust the chrome-sandbox to set it setuid as root?
Is Nobel laureate Luc Montagnier not science worthy enough to give credit or what is your point? Or is science a democratic forum where the most votes win and not facts? If it's not facts but guesstimates then everybody has equal input into that, some intuitively more so.
Not somebody who'd need to make this decision but: I guess it'd depend on the cost to your business of a half hour outage.
Is there a way to use Nuxt with Vue 3?
Surprising in a good way or a bad way?

They've provided a lot of peer-reviewed research, which makes it difficult to hold the skeptical line.
Every member of Hertz board has been in a Cxx position with most of them having been CEOs [0]. Some of them may want to be CEOs again someday so it's in their best interest to keep executive compensation high.

[0] http://ir.hertz.com/board-of-directors
Most Tor nodes are actually in Germany. You can see a map of them https://tormap.void.gr/

The design of the system is resilient to some nodes being under hostile control, too.
I think many packages are designed such that they open very easily. Too easily in fact and in such a way that it is hard to close and retain the remaining contents. So encouraging to then just consume the whole thing. Bags of chips are one good example.

Other strategies for quicker consumption are to make it more difficult to divide the contents equally, by e.g. packaging odd number of cookies, or having chocolate bars where some chunks are larger or double the size than others.
Ah that one is surprinsingly easy, you justify the cost by facing facts. Did your company lose money during the downtime, and if yes is that sum more than what it would cost to have this redundancy ?

No ? Then the costs are not justified, and while it would be better from a tech perspective it makes no business sense.

Yes ? Well then you spend X to save Y, with Y being greater than X, so it's an easy sell as long you don't start with "cloudflare is never down" (which is not true).
And at no point was that what was addressed by me. Your utter simplification of the labour market to a perfect version of it is.
How about we spend our energy fixing systemic/institutional racism first, because language will follow quite naturally.

The other way around surely doesn't work, and is just symbolic gestures without actual change.
the more amazing thing to me is the idea that you can fit github on less than $500 in external drives. curious now about creating an all-of-github local mirror, could be a fun project.
https://lowendbox.com/ has always been a good place to find geofence hopping friendly VPS which can serve as a VPN. Not affiliated, I just use it and recommend.
The brain's 7D sandcastles could be the key to consciousness (2017)
Aren’t form validation and http also separate libraries for React?
Reasons a [malicious|altruistic] actor might do that:

You have the ability to use it to induce fear and therefore behavioral changes. Positive cases are valuable.

Plausible deniability.

Mistakes.

Response.

Testing (as parent pointed out).
Why do companies store previous passworda, does this make my now strong passwords moot due to not being being as security conscious previously and reusing passwords?
You need to care about Google’s change to the SameSite cookie attribute
That phrasing seemingly implies that there was a generally-agreed intended behaviour for that case that was unfortunately neither documented nor actually exhibited. But that was not the case. The overflow behaviour of float-to-int casts was undefined, full stop. There was some consensus as to what such casts should not do, but no agreement on what the actual behaviour should be. Eventually, the discussion settled on defining casting overflow to saturate, and the implementation was altered to match.
What Will Be Required for You to Move in Society 2021 Forward [video]
Is the Future Socialist?
With type="module" and need to set ContentType they've invented new attribute and alias

<script src="foo.wasm" type="module" iftype="webassembly">

but there is no need

<script src="foo.wasm" type="application/wasm">

is not executed, so it can be used as is.

And "if" keyword means make a request with ContentType: "/", discard if result ContentType does not match. Which is ... strange?
An issue with DuckDuckGo Search may prevent you from getting results
You can't assume competence after such an hack. Before this has happened, you would have assumed that Twitter employees wouldn't fall for social engineering on this scale.

I wonder especially how they could have bypassed their 2FA.

Unless they specifically tell you something, you can't assume it to be the case.
Corona Virus: Green Zones
I heard that rehab clinics in Mexico are often used by the cartels as safe houses for cartel members, and their weapons are taken away during their stay until they actually go out and do their mission to avoid cartel members to go freelancing.
Depends, what if you had a virus that caused the same antiviral response as SARS on the immune system but had no deaths (couldn't cause death)?
> Let's say you are the COO of Hertz, making 300K salary and 1M in options

I worked directly with one of these C people at Hertz in a previous job; even 300k is grossly overpaying. Good luck finding another castle of cards arrangement to get a C position anywhere.
Decimate means leaving 1 out of 10 alive. A 90% reduction.
>Why would a gain analysis try to find ways in which a virus could be made weaker?

To better understand the mechanisms that make it weak or strong?

Plus, why would it have to be "made weaker" as opposed, accidentally made weaker? If they were experimenting they would have all sorts of varieties/results... it's not like every experiment to make it stronger would make it stronger... surely some could fail and make it weaker!
This has been considered to be a problem with cross-contamination, only one sample was found in Spain for example.
Thanks for querying this. I raised it with the team and their response is up above.
Whose private DMs would have as much impact as campaign emails did, and aren’t verified though? That’s the thing that raises so many questions for me - they only exfiltrated the data on accounts that aren’t verified.

On Trump, apparently he has more internal protections on his account than normal so it could just be that the employees they got in through didn’t have any access. https://www.nytimes.com/2020/07/16/technology/twitter-hack-i...
AWS Elasticsearch was one of the last services which didn't support VPC until late 2017 [1], moreover if you had created a cluster without VPC support the migration is very cumbersome and application changes (to enable double writes) are required to execute it without any downtime [2].

[1] https://aws.amazon.com/blogs/aws/amazon-elasticsearch-servic...

[2] https://medium.com/@vishnunarang/how-to-migrate-elasticsearc...
> By paying for premium you support a company whose business model is based on selling emotional manipulation

The corollary of that is that any interaction with such a company is unethical, since it encourages them to continue the manipulation on people who may not be as aware or resistant.

I therefore assume you've routed YouTube.com to :: ?
Yeah probably they first want to "patch" that social engineering hole which is probably quite challenging. Although I don't think Twitter is really to blame since few companies see security that critical and training on that is indeed rare. Security is almost synonymous with SSH, TLS, VPN and 2FA although this kind of attack has been published widely even before these technologies have been invented.
Thanks httpsterio. I checked in with the team and posted the details further up the chain.
It was such a supreme let down - like Kamen did to the World what sociopath parents do wrapping books in a PS4 box for Christmas.

The tech was impressive, but you can't drive it anywhere in UK (illegal on roads, illegal on pavements), costs a lot more than I've ever spent on a car, everyone seemed to crash quite badly riding them. If it had been an affordable, sit-on, road legal vehicle perhaps it could have lived up to some of it's hype as the future of transport.
Wait... only 21TB? I have a 20TB disk (two 10TB disks in a RAID) which I got a couple years ago with the first three paychecks of my first ever job.

So basically... almost everyone could store aall of this data with a bit of money saving! I would have guessed there to be much more...
I dont know where you live but in most countries gprs will not be included in p99. The few cases of mobile usage in p99 will be lte and the different 3g connections.

This may be different for mobile apps.
I like how Twitter wrote this post. It's apologetic, transparent, and clear. I feel like Cloudflare and Twitter have been really good with communicating what has happened and that is impressive. I'm glad these companies have learned from others' mistakes. Being transparent is the starting point of gaining back lost trust.
Generally if a service was to keep them it would be to keep a history of passwords you may not use ever again. They wouldn't be available for use in authentication.

Obviously this is very implementation specific though, and can't be considered a rule.
Now this sounds exactly like something Donald Trump has been saying all this time, and such conspiracy theories don't contribute much to the discussion.

If thousands of deaths in China, a complete lockdown that hit the economy incredibly hard and perhaps more crucially, the total breakdown and potential reshaping of the global supply chain, which China has been benefitting from massively, is something that the Chinese gov wants to to achieve, then such conspiracy theories might hold water. I think it's plain to see how nonsensical they are.

Also, nobody made the US look bad but themselves. This is obvious if you compare COVID responses in countries like Germany with those in the US.
This version has not been peer reviewed, the peer reviewed version has many of these claims about it's man-made-ness removed

https://www.cambridge.org/core/journals/qrb-discovery/articl...

https://fullfact.org/health/richard-dearlove-coronavirus-cla...
> And I am not sure Vulkan runs everywhere... what about consoles?

The Nintendo Switch supports it. Playstations had their own custom proprietary API since forever, and Microsoft peddles their own API on Xbox.
Youtube ads work in a way that domain blocking(pi-hole) cannot block them.
Putting unsecured ES on side, but logging passwords in plain text? That's a whole another level of stupidity.
Good article. I think Ubuntu uses Debian's shim. The package is called something *-signed-shim... I've tried self signing modules before, sometimes the "blue screen" won't accept my password (not a numlock or length or chatacter problem) and one time it did but I had to go true root which I don't want. IMO, chances of boot sector malware invading a personal computer is low, and even lower under linux given that I verfiy all keys and checksums before booting an iso. Can it be caught _on-the-fly_?