skysight-inc/HackerNews huggingface dataset:
> It seems to me that SMS-2FA helps in this scenario. Am I missing something obvious?

It's not necessarily scalable, but sim-swapping[0] is still an unfortunately serious issue. Phone numbers are not proof of identity

[0]: https://en.wikipedia.org/wiki/SIM_swap_scam
PSN Resolver – IP Finder Gamertag Resolver for PS4
While this is a fair point (due to the difference in money), there is something to be said about the trauma imposed on people who are witness to a bank robbery, not to mention the potential lives hurt/lost if things go sour. I'm not saying in your above example that the 27mo and 10yr sentences should be shorter or longer, I'm just noting that there are reasons the two aren't equal.
Non-violent vs violent crime. There is a difference.
This is insanely awesome.
> Tracing our every move and our every thought is a clear human rights violation.

Not being snarky, but under which legal system? Maybe in the EU to some extent? AFAIK, the U.S. does not classify privacy as a human right, though there are people who believe it should be.

Human rights, unless explicitly protected by a society's law, do not exist in a practical sense.
I think the word you are looking for is "retaliation" and not "consequences". E.g. when you tell a waiter you want to order chicken and get chicken or you tweet that you hate Python and stop being solicited for Python jobs or you defraud somebody and get sued etc. you suffer consequences i.e. the logical effects of your actions[1], speech in this case.

However, when you tweet that you support a presidential candidate and lose your job or when you expose some shady dealings as a journalist and your house is attacked by a mob or you state your opinion about anything and get death threats - these are not consequences of your speech. These are examples of revenge or retaliation. We do mean that freedom to speak is freedom from retaliation. We actually have laws against retaliation in specific cases and, yes, even against retaliation by private parties.

1. https://www.merriam-webster.com/dictionary/consequence
That's called being Sherlocked, I think.
The curse is that, like targeted social engineering, it doesn't happen to enough people enough of the time to change behavior.

How many people use Steam knowing and caring that you can't enter offline mode to play your games unless you connect to the internet every month?
You'll be able to get your old bookmarks out and then migrate to Pinboard.
After multiple experiences where I couldn't log into an account due to not having a phone signal, I refuse to use SMS-2FA on any service. Given that I already use strong passwords, the marginal security advantages are far outweighed by the potential lack of availability.
Teaching is used in the colloquial way, not in a technical ML sense. The model isn't being retrained or fine tuned.
One of those headlines where I was like "blimey, Uber made a detached head self-drive!"
Yes true, although a big facet is the physical violence or threat thereof
US provides new expanded set espionage charges against former Twitter employees
If all those things are just commodities, then surely the OS, CPU, and really every single low level aspect of a computer could be considered a commodity as well? Nobody's buying a PS4 because it runs a FreeBSD derived OS, nor are people buying the Nintendo Switch because of it's ARM architecture or that it has a Tegra X1 from Nvidia inside.

Components like the CPU and OS might be designed in America, but it's the higher level software development and hardware design that takes these largely off the shelf parts and assembles them into an actual product, and in the case of Nintendo that happens in Kyoto, not Silicon Valley. Is that really any different from say, assembling a piece of furniture out of materials and components sourced from around the world? Without the product design and assembly all you'll have is a collection of wood and nails lying about.

Same with the N64 - it might have been an SGI designed system at it's core, but through the guidance of Nintendo which developed the higher level industrial design of the console, the controller, the concept of using carts over discs, some of the more lower level OS functions, and of course the user facing software like Mario 64, etc. All the things that actually make the N64 the N64. SGI didn't decide to make a games console all on their own.
I mean vanilla stuff like MySQL and PHP. In the Old Times both were considered toy projects unworthy of running a production website, while now both have been patched and improved into complete stability.
I've got the dual yubico key thing going. It seems to work fine. I don't need to pick overly complex passwords if I don't want to.

Google does this well. Yubico Security Key + they seem to monitor my logins / rate limits etc.

I deal as do many folks with relatively to extremely sensitive info (yes, also have stuff on auto-delete).

Complex passwords require a password manager - if those get updated and rooted then my yubico seems to save me again.

In fact, with yubico I have a few passwords I memorized that aren't TOO crazy long - with a 2FA hardware key you may be able to SIMPLIFY passwords and still have good security.

And the yubico is EASY! Clip it to your keychain and go.
Sadly I think this Snowden article is nonsense. I don't see any way of rolling back global surveillance going forward. It's great to organize on a local level to make a point but the extent of data capture by shadowy state sanctioned organizations has been going on for decades and is now that data cam be parsed and manipulated by increasingly sophisticated AI. Add in divide and rule social engineering and cancel culture and we are rapidly accelerating into an era that is extremely Orwellian.
I'm also disappointed to see Snowden write '..a youth rebellion that relied on lasers and traffic cones as sword and shield, and that it would come to paralyze one of the world’s richest and most powerful governments'. For me this is nonsense. Rioting and lawless behaviors are arguably being allowed as part of a 'problem, reaction, solution' crackdown to justify future more draconian policing. There is no paralysis.
My employer just switched to Zoom (yesterday was my first zoom meeting) and I wondered why we were switching to a company with such lame security.
Facebook, Amazon, Apple and Google Executives Testify at House Hearing
Being obtuse on purpose and ignoring context is a great way to get left behind.
Some other features

1. Will set up Gender Inclusion Fund and Special Education Zones to make education more inclusive.

2. Every child should have one vocational skill by the time they complete school. Besides, the school system will integrate vocation education and internships from Class six onwards so that students learn new skills. The assessment system will be comprehensive and shall use artificial intelligence to show the learning outcome, the short comings and what corrective measures are required.

3. There will be no rigid separation between arts and sciences, curricular and extra-curricular. All subjects like music will be taught.

4. School curriculum to be reduced to core concepts and there will integration of vocational education from class

5. Students can intern with local crafts and trades for 10 days. For example, a student can work at a local laundry.

6. The NEP plans to reduced the importance of Board exams. Board exams to be split into two parts - objective and descriptive. Instead of exams being held every year, school students will sit only for three - at Classes 3, 5 and 8. Assessment in other years will shift to a "regular and formative" style that is more "competency-based, promotes learning and development and tests higher-order skills, such as analysis, critical thinking and conceptual clarity". Board exams will continue to be held for Classes 10 and 12 but even these will be re-designed with "holistic development" as the aim. Standards for this will be established by a new national assessment centre - PARAKH (Performance Assessment, Review, and Analysis of Knowledge for Holistic Development).

7. Medium of instruction should be mother tongue or regional language till class 5, preferably till class 8. However, the policy also says "no language will be imposed on any student".

8. Report cards will include students' self-assessment as well as by teachers.
I was an elected 2008 Hillary Clinton DNC delegate and have ran numerous campaigns for the Democrats. I also work in tech. Twitter supports Democrats.

This is a legitimate comparison.

If you study the trending tweets, those that tend to easily trend favor Democrat issues, ideas and movements. Comments on object news articles promote Democratic comments over conservative commenters.

Looking deeper, if you study campaign contributions by the staff of Twitter, its at North Korean levels (95% Democratic Party vs 5% All others) of popular support.

How is this level of political support different than TikTok's support for the CCP?

How are the design patterns different?
Thanks, happy to hear that!
I was offered a bag ~10 surgical masks or a hand sanitizer a few months ago in return for signing that petition by people waiting at the entrance to my apartment building. At this time there was a huge scramble for masks which were in short supply. I'm not disputing the law or the level of support but I feel there were some flaws in the signature collection process.
> I don't understand why everyone gets so excited of this dog and pony show.

Because it is very entertaining.
This is my biggest reason for optimism about WebAuthn.

Using cheap FIDO USB dongles is "I forgot it was there" easy, you have to tap the button or touch the metal contact surface or whatever on your dongle when you sign in, it becomes a reflex, you stop thinking about it yet now you're authenticated and bad guys aren't.

The touch ID style behaviour in a newer Pixel or iPhone likewise, that's probably already how you unlock your phone without really thinking about it, and now it can unlock a web site.

Even the OpenSSH FIDO integration feels lazier, yet more secure than having to use a local password for your keys. Some non-trivial number of people have no password or set it to something easy because it was annoying, the resulting risk (malware exfiltrates their unsecured private key) vanishes instantly if you give them all FIDO dongles and require that login method.
HK may be falling, but the listing of Chinese equities has been around for awhile and probably unrelated. H shares [1] are established enough as an asset class that there’s even an AH Premium Index [2] for price differences between listings in Shanghai vs. Hong Kong.

[1]: https://en.wikipedia.org/wiki/H_share

[2]: https://markets.ft.com/data/indices/tearsheet/summary?s=HSCA...
Sounds like a GIN index might be better suited for the search case.
Control the masses to do what exactly?
Josh, what are you up to these days? The wikipedia page dedicated to you is out-of-date.
New tool detects shadow admin accounts in AWS and Azure environments
Regarding the "SMS-2FA is not only worthless, but harmful" claim, it's true, but only in the sense that widespread "lazy" SMS 2FA deployments stifle U2F, which, I believe, should just be the standard across the board[1]. Of course SMS does help, just not as much or in as many attack scenarios (and is more of a UX pain too).

[1] The common HN objection which you alluded to is "but it's so hard!" It's really not. Passwords are hard! If only I could have back all the hours I've spent trying to help my grandparents remember their passwords. I have a U2F token plugged into the side of laptop and nothing could be easier than tapping it to get in. Implementation might be hard, but come on, that's our job.
9. Central and State governments will work together to achieve expenditure of 6% of GDP on education.

10. Technology will be used in education planning, teaching, learning and assessment, administration and management and regulation.

11. A National Research Foundation (NRF), tasked with creating a conducive ecosystem for research through funding and mentoring will be set up.

12. Will allow foreign universities to set up campuses in India

13. Change in the format of undergraduate education with the reintroduction of the four-year multidisciplinary bachelor’s programme with exit options. While the three-year traditional BA, BSc, as well as BVoc degrees will continue, under the four-year programme students can exit after one year with a certificate, after two years with a diploma and a Bachelor’s degree after three years.

14. High-quality programmes and degrees in Translation and Interpretation, Art and Museum Administration, Archaeology, Artefact Conservation, Graphic Design, and Web Design within the higher education system will also be created.

15. Touring by students to different parts of the country, which will not only give a boost to tourism but will also lead to an understanding and appreciation of diversity, culture, traditions and knowledge of different parts of India.

16. Languages must also have consistent official updates to their vocabularies and dictionaries, widely disseminated, so that the most current issues and concepts can be effectively discussed in these languages. Standardization of Indian Sign Language (ISL) across the country.

17. Setting up of an Indian Institute of Translation and Interpretation (IITI) while also laying significant emphasis on Sanskrit and other Indian languages. As per the NEP and IITT will be established that will make extensive use of technology to aid in its translation and interpretation efforts.
Interesting. I wonder if it varies from region to region perhaps? Going to do a bit more research as this guy seems quite convinced they are taking the cut but evidently you’ve experienced otherwise!
Microsoft to remove all SHA-1 Windows downloads next week
Which Republicans? There are several flavors these days.

Also the question would be if reducing the area of government in question also reduced the ability of that part of the government to perform it's function; if so, than a reduction vs oversight agency is not an apples-to-apples comparison, imho.
You're right, they're not equal. The white collar crime is capable of so much more damage.
LLCs aren't protected against bankruptcies. The protection they offer only goes the other way: if someone gets a $170 million judgement against an LLC you own, that liability (usually) does not extend to assets you personally own.

In this case, any (share in) LLCs he may own would be part of the assets, together with shares/cars/cash/etc., subject to be auctioned off with the proceeds being divided among his creditors.
I don't have anything to contribute to the greater discussion, but I just wanted to thank you for building your app and sharing a link to it. Making labels isn't something that I often do, but when I have to do it, I need to make a lot of them, and that's always a pain. I'm going to give your solution a try as soon as I get off of work.
Pedantic comments are not very helpful. Statistically, that group exists but is not a significant portion.
I suggested this a few years back but the community grilled me for it. I don’t think it’s the kind of ecosystem that wants to change.
Facebook and Google aggressively track users. Couldn't this just be a monetization strategy?
[This is my take on it (largely informed by stratechery) and probably overconfident]

Intel runs their own fab and for whatever reason they've messed this up repeatedly (unclear what the reason is, but it's at least partly a management/strategic failure). Their focus on old designs that are currently profitable instead of the future was a short term benefit and a long term mistake.

AMD uses TSMC (Taiwan Semiconductor Manufacturing Company) to fab their chips. Apple does the same.

Intel's profits from older technology and server sales have made them slow to recognize the severity of their situation. First they missed mobile, now they've had years of delays with their own manufacturing process, and now they're going to feel pressure from ARM on the desktop and probably on the server.

No US based fab for modern chips is a concern for national security (particularly given Chinese interest in eventually taking over Taiwan).

AMD spun off their fabs a while ago (Global Foundries) and uses TSMC for modern chip manufacturing. This gives them lower overhead now, but I'm not sure it's a much stronger position overall. There's a benefit to owning your own fab if you can pull it off.

I think Intel is at serious risk long term. They need someone who recognizes the existential crises they're in and can save them. Their current results are a lagging indicator.
Gelertner, jfengel, and blacksqr all make good points.

But I think the most helpful metaphor is that of obtaining a driver's license. Everyone knows that 16-year-old drivers are not quite there in terms of competence and judgment. But you have to start somewhere.

As a conservative I sympathize with Gelertner, but I think he's wrong.
Most startups IP is not worth $200M no matter what they think.

This guy was a grade A jerk too - if he doesn't do time then white collar crime is going to be even more unfairly under-enforced.
This post is a tremendous resource, worth it for the Spectre intro section alone. The most chilling part of the article to me:

> A dirty secret that the industry doesn't like to admit: no one has "fixed" Spectre. Not even when using heavyweight virtual machines.
Why are you even interested in Operating Systems with that attitude? Just use Windows and MacOS and leave other peoples use what they wanna use or produce.
I think text-justify is fine as long as the text width is somewhat wide (>72 characters) and it's inside a @supports(hyphens: auto). It's not as nice as TeX, but it's fast and Good Enough.
At Fetch[0] we built UpUP as an internal tool to help us authenticate high-risk transactions. As we scaled we started experiencing a high volume of fraud from multiple vectors: meth rings, carders, identity thieves, etc. We started to manually verify multiple forms of identification to approve an order. This led to quite a bit of customer friction and put a large burden on our customer service team.

We developed UpUp as a payment verification tool to quickly let customers demonstrate ownership of a payment method and get their transactions approved. In the 4 months we've been using UpUp, we've had a 100% success rate in legitimate customers verifying their accounts and completing purchases. We've also been able to approve more transactions, as we no longer have to wait for customers to provide multiple documents before approving their transactions.

We're launching UpUp as its own stand-alone tool for helping any business verify transactions and combat fraud. We're launching with a Stripe integration today, making it seamless for any Stripe user to add UpUp's fraud verification service.

[0] https://www.fetchtruck.com
It begins to look like every large drop in atmospheric carbon is linked to photosynthesis, in one way or another.
Comparing oneself to Galileo is generally viewed as a sign of crackpotery, especially if it's used as a response to legitimate criticism.

> Just that the fact that there are some unexplained missing piece does not mean one should reject it so quickly.

It's not just one missing piece. It's a whole series of basic properties of the observed universe. Most MOND theories are tailored to match one particular observation, but fail to match everything else. Until there's a MOND theory that matches a basic set of observations (like CMB anisotropies and the large-scale structure of the Universe, the ratios of abundances of the light elements, weak lensing measurements, etc.), MOND is simply uninteresting to most astrophysicists.
> anti-trust
Questions about Google holding Yelp hostage and Facebook acquiring IG to squash competition seemed on point.
From Wikipedia:

> The first-sale doctrine is a legal concept that plays an important role in United States patent, copyright and trademark law by limiting the rights of an intellectual property owner to control resale of products embodying its intellectual property.

That means I should be able to sell my glasses to someone without the original creator causing problems with it. It's more complicated than that, but that's the gist.

If I bought these glasses and they shut down the service and refund me, fine, whatever. But what if I bought the glasses, decided 4 months later I didn't like them, sold them on Craigslist for $600, and moved on with my life? After the shut down I get $800 back, and the poor sap who bought them from me gets a pair of worthless glasses and a dead craigslist email. Luckily this company will most likely get away with it because of the "it's more complicated than that" part.
I think armed robbery sentences depend on whether it was the first time or this is far down the list of incidents (also rap sheet might have a history of other things), but a fist time non violent robber probably will not get ten years in the klink, though you could if the judge and prosecutor impose maximums.

Most states consider “no priors” in sentencing guidelines.
I have been enjoying downpour.com lately. The token system means most books are $15 or so. Heard about them from an anti-DRM advocacy group and was pleasantly surprised at the prices and huge selection
Google search query takes 6 seconds
>> rob a bank to steal $10,000

Lol. Those that do actually succeed in robbing a bank get away with far less than $10,000. There will be a dye pack if you grab anything more than what the cashier has in front of them. It is most often less than $1000.
Good, then they weren’t needed. Out with the weak, in with the strong.
18. As per National Education Policy 2020, the 10+2 structure in school education will be modified with a new pedagogical and curricular restructuring of 5+3+3+4 covering ages 3-18. The foundational stage will cover ages 3-8, while the preparatory stage will include Classes 3 to 5. The middle stage will cover Classes 6-8 and secondary stage includes Classes 9 to 12. In detail, The 5+3+3+4, will consist of 12 years of school and three of Anganwadi or pre-school. This will be split as follows: a foundational stage (ages three and eight), three years of pre-primary (ages eight to 11), a preparatory stage (ages 11 to 14) and a secondary stage (ages 14 to 18). According to the government the revised structure will "bring hitherto uncovered age group of three to six years, recognised globally as crucial stage for development of mental faculties, under school curriculum".

Preparatory Stage (Grades 3-5, covering ages 8-11) will see introduction of experiential learning across the sciences, mathematics, arts, social sciences, and humanities.

The Middle stage covering Grades 6-8, (ages 11-14) will have a subject-oriented pedagogical and curricular style.

And the Secondary stage (Grades 9-12 in two phases, i.e., 9 and 10 in the first, and 11 and 12 in the second, covering ages 14-18) will have greater depth, greater critical thinking, greater attention to life aspirations, and greater flexibility and student choice of subjects, and option to exit at grade 10 and re-enter at a later stage in grade 11

Each of the four stages of school education, may consider moving towards a semester or any other system that allows the inclusion of shorter modules.

19. Mathematics and computational thinking to be given increased emphasis throughout school years. Activities involving coding to be introduced in Middle stage.
I do the same thing.

However, it won't save you if realize that there's an issue after you commit. Maybe I'm just paranoid but I like to have both a snapshot before a major change, plus I'm fond of having a spare (via delayed replication or log shipping).
Fair point, but the penalties for white collar crime are still very lax even when "everyday" people are affected. Look at the last recession which led to many "average" american families losing their homes. That wasn't possible without fraud especially the ratings agencies that were giving out false ratings and still no one went to prison.