skysight-inc/HackerNews huggingface dataset:
I'm curious what knowledgable folks think about Slate Star Codex's description of Mania as "high confidence optimism". It sounds like the top-right quadrant of
https://slatestarcodex.com/2018/03/08/ssc-journal-club-frist....
> We will be slower to respond to account support needs

So, they limited the account support access to smaller trusted team. This I can understand but it might also cause the delay in identifying such attack, if it happens today.
>if a Twitter user was logged in with a dongle but the attacker had access via social engeneered remote desktop access a dongle still could mean access to private data

It depends on the dongle. YubiKeys and similar devices require the user to physically touch/tap it to enable U2F auth, and it automatically powers down after a timeout to prevent remote desktop attacks.

I would hope Twitter already had this kind of setup, but their blog posts about this are all targeted at a more general audience, so I doubt we'll get that kind of detail anytime soon.
Are Tibetan monks training their brains and their surroundings to produce a prolonged or constant positive state?

The positive psychology movement in some senses is a brain training for prolonged positive feelings.
I keep trying to read and understand the attacks that have all happened so far... after you understand the vectors that are currently in use, hopefully it'll stoke your imagination to see how you might attack other systems and make up new vectors. All the current attack write-ups will usually link to vulnerabilities as well. See HackerOne disclosures, Google Project Zero or the "How I hacked X" disclosures you see on HN.

I don't think published textbooks are very useful — attackers also have access to them, and if the attack has been written down it'll likely be encoded into a firewall software or security process rulebook already (though it might still work for smaller companies lagging behind on the curve).
I would think the way to do this would be to run a separate TLS daemon that handles the certificates (including acme challenges, presumably) and then pass the socket to your http server, either by proxying it (preferably to a unix socket), or like actually pass the FD with the session keys.

I don't think hitch (formerly stud) supports acme challenges, but that's where I'd start.
The article says adaptation can be bypassed.
GPT-3 is already far past that point in 99% of cases.
That's a good point. I made the mistake of treating the sun as a point light source, which of course it is not! https://www.timeanddate.com/eclipse/shadows.html explains the difference clearly.
There are also a lot of traditional finance companies using Haskell[1]

This list is misleading. Sure, there are probably a few people at any of these companies dabbling with Haskell. But the only major financial company where it is mainstream is StanChart.

Also, FTA, Isle of Man, not Mann. How seriously can we take a rant about a place that doesn’t even know how to spell it (source: am in Wales, that Isle is just off our coast).

Fun fact: when Scots say “och aye the noo”, noo is the Manx word for “saint”. English people think noo is “news”. It gives a totally different meaning.
Tall Ginget MILF Fucks Teen Girl
The last of the catalogue shopping - going the same way as Marshall Ward, GUS and Empire Stores.

The latter had a pay over 20 weeks facility that was a Godsend in many areas and really helped at Christmas.
Trivia: On the "Construction of the Bay Bridge" one, pan down to the Southeast a little to the Alameda Naval Air Station. In 2001 you can see the construction of the freeway set[1] used for The Matrix Reloaded.

Direct link to view: https://earthengine.google.com/timelapse#v=37.79184,-122.334...

[1] - http://www.filminamerica.com/Movies/TheMatrixReloaded/Freewa...
Sidenote: I've just realized why the 4-quadrant graph has a "missing emotion" for the top left (low-confidence optimisim):

1. English does not have a specific word for that feeling of excitement about things accompanied by inability to stick with any particular thing if it doesn't give immediate positive feedback. "Hyperactivity" comes close the half of it that isn't wandering around on Wikipedia, but that describes a behavior, not an internal state.

2. The people who come to see psychiatrists and therapists about their own problems don't tend to complain about that emotion. Seeing a bunch of different exciting possibilities is fun! We tend to want help with resulting difficulty managing their schedules, sleep, relationships, priorities, and yknow... actually following through on finishing things rather than getting distracted...

------------------------------------------------------------------------

There is a mental health book written as an allegory to an IT department called The Phoenix Project.

While it mostly seems to deal with anxiety, it is pretty applicable here. This is the same pattern of executive dysfunction that swaps Brent from task to task and leads the protaganist to say to the Chief Executive [Function] Officer "Commitments like the compliance work are made without any regard for what’s already on people’s plates, like Phoenix.”
https://www.sexsex1.com/
Qihoo 360, the Chinese company that brought Opera, recently showed the world why you should never trust Chinese hardware and software.

On the outside a browser seem harmless, but Qihoo 360, Alibaba, Tencent and all the other Chinese companies that operate popular browsers, kindly showed the world what they’re capable of when they decided to make the 966 GitHub repo inaccessible to everyone using the Chinese browsers (which many people are unknowingly doing since they come preinstalled with their cheap phones).

Just to be clear, they didn’t block GitHub as a whole, but they instead rewrote the content of a specific repo despite HTTPS being present. They could do the same with every website in the world, such as rewriting the content of Wikipedia articles, rewrite the content and websites returned in your Google search results, in your Facebook, YouTube feeds.. write fake NYTimes articles and modify the frontpage to link to them, or push the fake article to a specific group of users on social media, or rewrite Google Chrome’s download page to download a modified version that is bundled with malware. The possibilities are endless, and keep in mind that the companies themselves were willing to abuse this power to silence software developers complaining about long work hours.. imagine what the CCP would force them to do.
> most of the world has turned strongly and violently right wing in the last few years

Really? Do you have evidence that right wing violence exceeds that of any other political affiliation? Anecdotally, looking at current events, the opposite seems to be true. I'm not looking for a fight, I'm genuinely curious if there are sources for this claim.
On top of the torrent in the Twitter link, are these originals? I think this site gets filled as people contribute?

https://www.courtlistener.com/docket/4355835/giuffre-v-maxwe...

I was surprised to see outright un-redacted email addresses and phone numbers there, I would have thought x-chan would quickly be running them against know dumps.
RISC itself has nothing to do with the number of instructions. It's about the load-store principle, separating instructions that access memory wrt. those that compute on registers.
Show HN: Worked on my first Vue package – 1100 icon components
This is a potential strength of hand signals, too, though. As the article mentions, voice is more of a broadcast medium, while hand signals would be a more discreet multicast kind of thing.
Has anyone published the documentation online or described how apps like AIDungeon have fine-tuned it?
The fact that you believe something like content moderation can be boiled down to some hard and fast regulations, let alone a set of regulations that people could agree on, is honestly kind of scary.
I wish Barnes and Nobles would find a strategy to combat Amazon competition. When I walk into a BN, it feels just like how Best Buy felt when it really seemed doomed (about a decade ago). BN is the only bookstore in many American cities, especially more rural ones, and I fear for a future in which the physical book buying experience is lost.
This. Just as surely as email, texts and tweets are now admissible in contract law and as we can sign documents online that are binding, we need a national realtime information-streaming infrastructure --text and URLs today, multimedia in the future...all over the (hopefully) secure domestic 5G network. Set the standard, setup a court system for inevitable violators, regulate the gateways allow everyone to connect.
obnoxious grandstanding
In the same process, rather.
How does immigration work without knowing who your citizens are? How would you prevent a non-citizen from getting a passport without having such a record?
it’s adorable how proud you are to have worked at FAANG and how angry you get at the idea some other organisation handles equivalent scale
Wanted to say the same.
We are using OpenResty with lua-auto-ssl for exactly this purpose, and it works like a charm.
A lot of the third world leapfrogged to mobile payments and never had widespread credit card adoption. So it's more like 4% of the world hasn't done a thing the 10% of the world that HN perceives as "rest of the world" has done.
> > The headline makes it sound like learning music is about as useless as sitting on your couch, as far as intelligence goes.

> Isn't that kind of what the study says though? It specifically concludes:

> > Moreover, recent correlational studies have confirmed that music engagement is not associated with domain-general cognitive skills or academic performance.

> What I understand from this study is that whether you learn music or sit on your couch will have no difference on your cognitive abilities and only make you better at music if you do the former.

That's actually not quite clear to me, the article says:
>The authors found studies with high-quality design, such as those which used a group of active controls – children who did not learn music but instead learned a different skill, such as dance or sports, for example – showed no effect of music education on cognitive or academic performance.

That seems to indicate that siting on the couch is not the same. It also changes the title somewhat, to "learning music is not better than dance or sport to improve cognitive skills"
> 5 billion franks, the equivalent of hundreds of billions in today's currency

Due within 5 years too (france managed to pay it in advance as it included military occupation until the war indemnity was paid), as well as ceding a major industrial region.
So now when I want to find videos on a topic, for many of the videos I’ll get a hundred hits for the same video uploaded to each service. But if the one I want was only uploaded to one device, it’ll be buried in a sea of hundreds of duplicates.
Account access is one thing, yes, and a hardware 2FA key can help with that.

But - what is the reason to allow support personnel to pose as specific users and send tweets from their accounts? There is more than a security issue here. There is a complete security breakdown.
Worth watching the scenes from The Aviator: https://www.youtube.com/watch?v=KMYSaImuIgo

The real hearing of Mr. Hughes: https://www.youtube.com/watch?v=GDkTkpoyfL0

I'd be very surprised if Tim Cook lied in his testimony. Politicians seem to have a major problem with big tech,. They just don't understand any of this and hopefully they don't make the same mistakes they made with Bell, that basically fragmented the OS stack and caused more problems than it solved.
If the typing pattern is disproportionately different (as it may be the case between switching from single to two hand typing), you would need a fall-back or risk not being authenticated. Or, you could retry typing as you would usually do during an authentication.
pinboard.in is a fantastic bookmarking service that will archive your bookmarked sites for you if you pay for the $39/year archival account: http://pinboard.in/tour/
There's an excellent retrospective on YouTube about the xband and how it was built. It was a product ahead of its time.

For example, the way they got games that weren't built for laggy multiplayer to work was unbelievable: they recognized the cartridge and patched the code. Yes, that means every game that worked was a result of a custom built patching of that game's code at run time!

https://youtu.be/k_5M-z_RUKA
The thread ultimately references this article: https://www.salon.com/2020/07/24/trumps-dhs-tried-to-block-n...

Everything else is just twitter noise.
Did you keep all £2000 worth of routers? I wish I could have told you 18 months ago to avoid all those consumer routers and just get brands that are popular in business and IT settings such as Ubiquiti.
What infosec people think $vendor email security solutions are going to solve phishing attacks? I was under the impression that the people that buy those solutions (like many security solutions) are primarily non-infosec people that want to paper over their real problem without fixing it.

Granted, there is a place for some of these things temporarily while working to fix the actual problem, but that's a mitigation, not a solution.
Garzweiler surface mine

https://earthengine.google.com/timelapse#v=50.91082,6.4249,9...
'Ghostwriter' Influence Campaign [pdf]
TensorFlow Datasets: The Bad Parts
If you want to address a problem, you don't waste your time focusing on inconsequent approaches.

And more importantly, you are doing absolutely nothing to fix the problem. You're passively watching while a temporary crisis affected an industry that has a potential contribution to the problem that is at best around 2%.
US banks do commonly use SMS messages as a second factor, for what it's worth.
Yeah I'm not sure what they're getting at, I've used Caddy as well for similar "custom domain" features, it was super easy. Thanks for creating it!
Ask HN: Opinions on Google's alternate stock vesting schedule?
I just learnt about Google's alternate stock vesting schedule where the first 40% of GSU vests in the 1st year [1]. My first reaction was of puzzlement. Thinking further, I thought this was a brilliant idea to continue having competitive offers. In my (limited) past experience, I've found Google offers to be slightly under compared to similar companies in the Bay Area.

I was wondering what the HN community thinks of this move from Google. How (un)friendly is it to potential employees? What kind of cascading effect would it have on compensation?

[1] https://www.levels.fyi/company/Google/salaries/#:~:text=Alternatively%2C%20Google%20also%20has%20the,GSU%20(Google%20Stock%20Unit).
I went from "Why!!!!!?????!!!!!" when I read the headline
to holy crap this is awesome when I read the article!
RIP Kizuna AI community subbed videos
Do you have links to provide about this? I'd like to read more
It's like saying car crashes are not a problem, because you drive thousands of miles per year and have never gotten in a crash
It sounds like he is a victim of most people's love of labels and inability to deal with continuums. Consciousness is clearly a continuum (think about when you've been really drunk or half awake) and a worm is clearly so barely on the scale it would be silly to say it is conscious.
Alexagate Is an Ultrasonic Slap to Your Amazon Alexa’s Spying Ears
3-D Secure with keystroke dynamics for PSD2 compliance
Most people recognise this. There was that incident with the Canadian prime minister wearing blackface 20 years ago. The tabloids tried to blow it up but ultimately no one cares because it was a long time ago.
I still have my iPhone 4s from 2012 that still works great with 60fps stutter animations.
I am not sure if this is a good state in the long run. What do you live for when everything is always/mostly positive in your head -- but reality is as sad as it ever was. Do you really have an incentive to change something to the better if you are in a constant state of happiness?

I think happiness is a state the brain produces to reward itself for good outcomes in life decisions. The fact that it is only of limited time and intensity has its (evolutionary) reasons -- they are not the worst of all reasons.

Like with depression as chronic sadness and fatigue, chronic happiness is not something we are capable of handling long-term if we want to optimize outcomes for ourselves and others.
Canadians may be familiar with Consumers Distributing which died in the 80s or 90s: www.cdarchive.ca
To customer belonging to high risk group (which would be main customers of lending apps) banks simply refuse to even start conversation about credit. But then it is not called predatory. Pretty clean solution.
Since banks take customers with low default probability, here risk has to be unfortunately priced in. Load that is not repaid is not only revenue loss, it is also loss of capital (that company is obliged to protect) as there are really slim chances/high price to recollect.

It is not fair that usually the poorest pay the price, but the whole system is not fair. And I believe that it is actually financial apps that have some chance to democratize it more.

I do not know about Mexico, but such businesses are usually also regulated, wich is good, because at one end market knows the local conditions like capital cost and risk and at the other they do not fall into usury.

In your example: the bank lending rate in MX is already more than twice than US. Later, if you assume that for new unknown customer the delinquency probability cost has to be fixed in the price, then annualising the rate of short term loan makes it really scary. Such companies usually have better rates for returning customers.
U2F are safe against simple phishing, but sophisticated attacks can include 2-factor input.
Google requires its employees to use a security key for access to all internal systems including admin tools, source code and email. Every since google started enforcing this policy the number of successful phishing attacks has gone down to basically zero.
I don't quite get what this is... Is it a gaming platform like steam? They don't list any of the games you can play on it. There are very few details on this page.

The download link just grabs an .exe file, so I can't test it because I'm not running Windows.
Using AI to identify the aggressiveness of prostate cancer
"You are fighting uphill against a cultural expectation for things to be free on the web."

A great solution to this problem of "free", is to make things that are "better than free". Kevin Kelly explains it really well in his essay (https://kk.org/thetechnium/better-than-fre/), but TL;DR is that traits like Immediacy, Personalization and Interpretation play a very important role in getting people to pay for stuff. Software: Free, The manual: $10,000
It says right there in the linked page that the phishing attack was able to manipulate multiple employees into giving access past their 2FA.
Thank you for the thorough comparison. Could anyone chip in whether a recent haprozy version would be a better choice than nginx and /or envoy in a similar case?
> Another day, another top HN comment that confidently presents opinion as fact. Would it kill folks to be a little less confident?

Apart from the last statement "Clearly more options exist for managing spam than just shutting down the feature altogether." the person you replied you was obviously stating their opinions, and not claiming them to be facts.

> "an essential part of the appeal of YouTube for me"

> I don't think this functionality was as little-used

Emphasis mine, in both cases.

As for the final statement, which is presented as fact, I think it probably is factually accurate that there are more possible options for YouTube than shutting the feature down.
Show HN: Under the hood webpack: library behind the event-driven architecture
Anachro-PC – The Anachronistic Personal Computer
Except battery life is energy/consumption. Androids have huge battery but a crappy power hungry CPU.
Personal anecdote. I worked in a top lab in my country’s university. My lab mates went off to work in top universities, as is the tradition. The lab employed two top students in the country by some specific metric. People working there had not a common background, upbringing or optimized method of work I could identify.

The only thing in common was that they all been taught to play instruments at a young age. We could have made an orchestra with the people working there.

The way I saw it at the time wasn’t that they were smarter, but that they had the understanding that practicing was important and that looking or sounding ridiculous at their first steps on anything was a usual process.

It wasn’t that they had developed intelligence, grit or perseverance, it was just another day for them of engaging something new, a paper or work item, and getting down to it.

Lack of self doubt and emotionless engagement in unfamiliar topics is probably more important than a few points higher in an IQ scale.
Given the number of Argos stores I always thought Amazon would have swept in 3-5 years ago and bought them as a step closer to "last mile delivery" in the UK.
Same as other computer equipment, get another one from tech support and revoke the old one. Or at least, that's how it worked when people still went to the office.
Where did you check this? AFAIK YouTube profits (if any) are not broken out anywhere. At least not as of early this year:

https://www.cnbc.com/2020/02/03/google-still-isnt-telling-us...

Alphabet said YouTube ad revenue in the first quarter reached $4.7 billion, while cloud sales came in at $2.6 billion.
The company broke those numbers out for the first time, but it’s still not disclosing profit figures for the units.
Me too, that's what the VPS is for.
For me the pain point is that, like many others, they want to charge the same price for editors and read-only users.

Do the math with me to feel the pain:

-I use the product $50/month great

-My team use the product $300/month (6x50€) bearable if product really fit our need

-My team want to share access in read-only mode with the whole department 2500$/month (50x50) acceptable only if it's a core unavoidable product

Almost everytime there is no real technical difference between hosting service for use case 2 and 3. So I get that the business model intend to milk as much money from large organisations that shit gold and can't do basic math. But in the process you are cutting yourself from all small/medium company that just seek to pay a fair price.

To keep it simple I believe the basis should be that read only are always free or linked to paying (like get 50 read-only license for each paying editor licence). This better reflect real world situation.
Leadaro – LinkedIn Email Finder
there's no 'better' state when you're already happy. They don't need to change anything when their reality is 'happy'.