skysight-inc/HackerNews huggingface dataset:
It could be serious.

Let's say your company's code is open-source, and the attacker knows there is code somewhere like this:

let state = getState(); // returns empty {} if user not authenticated

if (!state.userIsAuthenticated) {
respond(401);
}

showBankAccount();

If the hacker is able to set `Object.prototype.userIsAuthenticated` then the auth check is now bypassed.

So I think the break / DDOS is pretty serious here.
I don't know. Possible duplicate post?
> One complicating factor is that the United States guarantees rights that many countries do not

And further it fills a large part of American identity and backstory, to the degree that they don’t seem to realise most rich countries with free citizens get on just fine without it
As someone with really bad dyslexia and dyscalculia I can't say I'm particularly surprised. I've done a lot of research on what neurologic differences are present and they're fairly interesting:

http://www.neuroanatomy.wisc.edu/selflearn/Dyslexia.htm

https://www.brainfacts.org/archives/2011/dyslexia-and-the-br...
This is a good read of the market and I agree with most of your points.

If you're saying the government shouldn't be innovating in the digital currency space or if the impact would be negligible due to feasibility or some other issue, I'd strongly disagree.

> What's the benefit of using FedCoin over using something decentralized with good monetary properties?

The government and existing banking systems are the actors with the largest degree of potential impact for any currency solution in the next 30 years. This solution doesn't necessarily need Bitcoin-like decentralization by any means to solve real problems with real innovative solutions.

To me, Bitcoin has proven itself limited to only a speculative store of value solution and has failed to deliver impactful, broadly felt impact. Any product based on Bitcoin will inheritly suffer a limited upside due to this. This is where the difference is for the existing entities, the central banks, domestic banking networks, financial intermediaries - unlimited upside.
Makes me think of this silliness I saw today: https://mobile.twitter.com/BFriedmanDC/status/12892831187305...

I recommend first watching it with you eyes closed and after that seeing how you can manipulate your perception. It was easy to hear “brain needle” with my eyes closed.
He was in Cocoon playing someone 70-80ish in 1985.
Gold/Silver prices are sky high right now, not a good time to buy them. Not to mention buying physical metals involves high transaction costs, which is frustrating. Precious metals are safe investments, but wouldn't expect them to appreciate much more in the near term.

Also, money in a US bank account is FDIC insured (up to $250k or something), how is that not secure?
Postmaster General role in Seinfeld, which parodied his role in Absence of Malice. The Seinfeld role was played for laughs but there was a little bit of a dark edge to it, in a funny way.

https://www.youtube.com/watch?v=On3cQ0sPvSY (appearance about 1:17 in)
Getting my head around the choice between sleeping and 'tickers'
Canada has the rule of law, not the mob, and protected expression.

Relevant:

https://en.m.wikipedia.org/wiki/R_v_Sharpe
Michael Douglas died from throat cancer contracted from HPV, as undoubtedly other men have. There’s reason for men to become vaccinated as well.
This is Your Constitution on Drugs
Bent Fabric Dead at Age 95
Hey, we both know the answer - you don't need fancy app to be fit on your bike.
Neither for making sense from your aircon.
I hate wasting window space with AC units and did a ton of research this spring while looking at portable ACs. I had the same concerns about the reviews for that LG model, but my conclusion was that most of the negative ones were for issues people ran into right away. Some serious issues, certainly, but maybe more of a quality control problem than a reflection of the performance of a typical unit.

I chanced it and figured I could return it if I got a lemon. On specs alone it’s clearly the most compelling portable on the market right now, and it has turned out to be a really great machine. The past few weeks have been brutally hot in NYC and it has kept our entire apartment very comfortable. With the variable compressor it can run super quietly, and it uses about as much electricity as the two window units it replaced. Freeing up two windows also means we can leave it off more often, which I prefer anyway.
a GPU is a GPU, it's all just programs running on the shaders.

If AMD is unwilling to properly support its consumer GPUs in GPGPU workloads and NVIDIA is, then well... sounds like a good reason not to buy AMD.

It's really not a major ask, people have been running GPGPU programs on consumer cards since forever, even though they're "consumer" and sold as graphics cards and not compute accelerators. NVIDIA basically does this on purpose, people use their personal hardware to get a foot in the door of the ecosystem and end up writing programs that get run on big compute GPUs which NVIDIA makes big profits on, it's very intentional.

If AMD chooses not to do that, well... can't really blame people for avoiding their stuff when NVIDIA is willing to let you do this stuff on their cards and AMD isn't.
What's the threat model you have in mind for salting and hashing on the client?

TLS is quite strong, and if your adversary has broken your TLS then they can also intercept cookies or inject code to capture the plain text.
> Sending passwords plaintext over the wire isn't good either, even with TLS. You don't want your server to have any knowledge of the plaintext password.

This is literally impossible to avoid. Whatever the server receives, that's what the password is.
upvoted. this is the most important information in this thread.
I am glad that Brazil's court still remains independent.

Looks like Bolsonaro, should borrow couple of tips from his friend Narendra Modi. Modi, dismantled the institutions in India systematically to guarantee his long lasting power.

e.g.

The only official from the election commission who didn't give a clean-chit to Modi for his election campaign violations during last election was greeted with Income Tax raids on his family members after the election, now he has been transferred to Asian Bank(He was next in line to become Chief Election Commissioner).

Look at the current Chief Justice of India, posing with limited edition Harley Davidson[0], which apparently was brought to him 'just for a demo by a local dealer and definitely does not belong to the son of a ruling party member'!

Former Chief Justice of India, has been given membership in parliament!

[0]https://theprint.in/india/photos-of-justice-bobde-astride-a-...
I think you're right that some microcommunities aren't exactly the greatest for your mental and social wellbeing. It's not hard to find websites today that showcase and bring out the worst in people. At the same time, I'd be tempted to suggest that the sort of thing isn't much different than someone starting to "run with the wrong crowd" in high school. Or, I think socializing on the internet reflects our humanity in ways that socializing in real life does too.
I think I have more of a European (civil law?) conception of "rule of law", centered on the law itself: it must be clearly written, it must apply equally to everyone, etc.

Americans seem to use the term for something that should more properly be called "rule of magistrates". Judges can order pretty much whatever they want (unless overruled by a higher judge); prosecutors can charge or not charge different people for the same crime at their discretion; the Supreme Court just grabbed the power to decide what is constitutional, which the constitution nowhere grants it; etc.
"Literacy != education."

Irrelevant for many jobs. What to do with people who can not read?

"Certainly helpful, when used correctly. Definitely drives the cost of labor lower, though"

Why should this be the case? The labor is probably lower in Benin. Yet, nobody moves there.

">3. Infrastructure and clustering.
To an extent, sure"

No. In fact there was a study from a business school that showed that this is the most important point about China. Clustering. All the suppliers and sub-suppliers that can work hand in hand.

">4. The political will to move forward.
This is the primary point I would say is wrong. We have plenty of political will in the USA."

As a immigrant in both systems and a naturalized US citizen I tell you that this is not my impression.
Sounds like that's a font selection issue for the admins - there are good choices of font that are unambiguous, they've been linked here.
I find you're better off pretending that your system doesn't have any builtin Python. I use virtual environment for everything.
but... it's not current data. the historical data loses value as it ages. Aerial scans of "one month ago" are now less accessible.
I would be curious to see how many people who audit university courses for no cost/credit finish them.
Philosophically: Yes
Everyday. Doing CRUD and ETL. My team uses gasp stored procedures for essentially everything. So, we end up writing raw queries and saving them to the DB to be called over and over. Using an ORM like Dapper helps make that map to runtime object easier.

I’ve used several ORMs for different languages. Dapper and stored procedures have become my favorite approach. Like anything, there are trade offs. You end up with logic hidden in the DB or sometimes need to update your procs after you alter a table. If you have a good pattern established for your tables, you can easily autogenerate CRUD procs for each table!
Presentify
For MAC USERS : Presentations and online classes made easier
It’s not an iOS requirement (but possibly it makes you make one to start out, I’m not sure).
> your ability to take control effectively depends only on your willingness to discover and explore.

Lots of folks have additional constraints of time due to family/other responsibilities etc. I can afford to spend an hour or two if the API is open from the manufacturer's side to write a script or setup a simple service; I definitely cannot afford to spend time on packet sniffing or such low-level reverse-engineering.
Why do you talk so much about these abstract problems while neglecting the real ones? Black people get shot every day and it's not by the KKK or the police, it's by other black people. They are the real danger, not some parade with slogans. Other blacks is the major violence problem facing blacks in America today and has been for many decades but nobody seems to care. Blacks and Hispanics shooting members of their own groups accounts for most of America's excess shootings compared to other high gun ownership countries. But it doesn't fit well with your political ideology so you ignore it.

A more realistic version of your job interview example is that it's in a rival gang occupied part of town. KKK isn't shooting blacks but black gang members are. Facebook doesn't seem to be able to stop that.
The only threat model this would actually address is a threat from the user himself. Hashing on the client side means the user probably doesn't know his own password. But he still knows how to log in, so the password he accidentally discloses to someone else is trivially convertible to his actual password.

(The threat model has to involve an accident, because if the user wants to know his password, he can just look at it when he logs in.)

The strategy is called "passing the hash", and it will be flagged as a low-priority problem if you get a security review. It doesn't introduce a weakness, but it's a sign that you don't know what you're doing.

(The more classical form is that you _only_ do the hashing on the client side, in which case you've also introduced the issue that your database stores everyone's password in plaintext.)
The people who develop these anti-social technologies are on this site, too.
These violent delights have violent ends
This is excessively cherry-picked, and I’m just going to steal a quote from Wikipedia to illustrate:

> The Chinese have different languages in different provinces, to such an extent that they cannot understand each other.... [They] also have another language which is like a universal and common language; this is the official language of the mandarins and of the court; it is among them like Latin among ourselves....

The idea that you could transplant a peasant between millennia in China or even over any significant distance, and have them remain intelligible is simply untrue. In addition, you could take an educated person in most of Europe in the last 2000 years and expect to be able to communicate with them in Latin — it’s only the last hundred years or so when this has fallen out of favour. So recently in fact that nobody raised an eyebrow about the fact I had mandatory Latin lessons from the age of ten at my school, in the 90s.
Depends what you mean by widely-used. After Rails and Django appeared I can't remember many high-profile sites using any of the Perl frameworks. Maybe Catalyst at the BBC and Net-A-Porter who hired a lot of Perl gurus. Perl's realy failure was competing with PHP. Perl's equivalent, HTML::Mason, really required mod_perl to perform anywhere near mod_php and that's what killed it as mod_perl was not an option for cheap hosting providers. PHP was as much a marketing coup as anything else, hence Facebook built on PHP. I think it says everything that Dustin Moskovitz mistakenly picked-up a Perl textbook before he was corrected by Mark Zuckerberg that they were using PHP. That's exactly where Perl stood in relation to PHP in early 2004.
Reading is weird.

I've never had migraines, but a few years ago suddenly, and briefly, lost the ability to read and write. After a number of doctors and tests ruling out a TIA, best guess is one-time transient aphasia from a migraine aura.
have you read the whitepaper? Bitcoin solved doublespending and is the best implementation of digital cash in a long line of innovation. in a way all monies are pyramid schemes. You don't think maybe you're being naive for dismissing a clear breakthrough?
I feel like it's not at all weird to say that something is arriving somewhere in that somewhere's local time zone.
I can’t help wonder “where are the colleagues?”

It’s not that I expect someone to try and salvage a situation where someone is coding in Word - but is there more to the story when you say this went on for months ? I don’t think I have ever been in an environment where that would ha e been allowed to continue for that long... ? Sounds like an environment scared of dealing with things ?
How are you supposed to salt in plain view?
Imagine bikeshedding TFA with an argument over "Uber, but for deepfake child pornography."
I think there's a solid argument that patents are generally harmful, especially patents of software or non-revolutionary product features, so I think you can form an opinion.

If we embraced copying a little more I think our society would be better off.
I like it. I like the comparison of face masks to seat belts. I just hope face masks won't become as permanent as seat belts.

I wore my mask today when I went outside. I don't need a scolding thanks.
I know; they were saying that this law wouldn't be enforced in a U.S. state because it's a mess to do so. That's not a strong argument because there is evidence of such laws being enforced despite the difficulty in assigning ages to a fictional character.
Repl.it: Create your own programming language
your chart has a couple candles, but doesn't address my point that very little volume was transacted at 20k. People aren't going to stop storing value on the Bitcoin network, so I suggest you lighten up
Cloudflare Reverse Proxies Are Dumping Uninitialized Memory (2017)
I know but, jeez. Wow.
> We arent quite there yet, possibly next year

The fact that a lot of people think this gives me confidence that it isn't going to happen anytime soon. I'll get nervous when the rhetoric is "The market is looking great for years to come!", like back in 2005/2006.
Is manufacturing such material more repugnant than allowing more children to get raped, because you find faking such images too repugnant?

Lets try to put a number on it. How many children would you allow to be raped, to prevent someone from making or viewing fake child porn? Ten? A hundred? More?

A commenter linked https://www.sciencedaily.com/releases/2010/11/101130111326.h..., in case you think this scenario is unlikely.
5 million times, say, $50 means $250 Million a month or 3 billion a year. Not sure if they can get people to switch from optic cable to satellite and while the world is large, very few outside rich countries can afford to pay $50 a month.

Nice side business
Stop doing this. Okay no keep doing that but stop depending on them. Not always but more often than not products that get spammed on these platforms are built without a specific end user in mind. Pause and be a little more thoughtful on who you're targeting, find out where they hang out, and reach out directly. e.g. email, twitter, reddit, whatever.
Doesn't seem to load correctly for me.

I'm getting some Javascript error and then like 1 qps XHRs triggered hammering your server.
NCMEC is the U.S. hotline.

IWF is the British hotline.

They exchange information with each other and pass information through to law enforcement after reviewing it.

Different hotlines may differ in what reports they're willing to take depending on what's banned locally. IWF is legally mandated to take reports on cartoons. NCMEC isn't in theory but they might take it and pass it onto the user's country due to lack of manpower.
And in cases where the victim is a child (like child porn) and their guardian is involved in the abuse (which is often the case)?

Then you either wait for the child to be of age to assert copyright, and force them to confront this individually, or you wait for guardianship to unwind and hope the state or foster guardian or whatever is interested in pursuing a copyright violation on behalf of a minor.
i like simpleops ,simple ops is simple to track our website health status very useful for me and very cheap compared to others
The world before vaccines is a world we can’t afford to forget
The fact the "Four Floors of Whores" was government sanctioned always fit well with the Disneyland feel to me.

https://en.wikipedia.org/wiki/Orchard_Towers

I started seeing the beauty in rubbish after visiting Singapore a few times. There's something quite unsettling when there is absolutely none.
It's subjective, but I'd say that rice cooked under pressure is more chewy and has a stronger flavor of its own. The higher temperature produces a more pronounced Maillard reaction, which not only increases flavor but also turns the rice slightly yellow as if it had been toasted. This is exactly what you want in a strongly flavored Korean dish like stone-bowl bibimbap.

Rice cooked without pressure comes out light and fluffy. This is more appropriate for sushi where you don't want the flavor of rice to overwhelm or collide with the subtle flavor of the other ingredients.
An Introduction to JavaScript Callbacks
> quantum cloning may not be allowed by laws of nature

It might be that the original should be destroyed, I understand. So be it, destroy the original and create N clones. But the thought experiment is an interesting one regardless.
Tech Companies Report Profits as 40M Americans Face Evictions
Adding features doesn't move the needle
Gaming, voip
What’s this? A bipartisan plan for AI and national security
> See Voat.

The retreat to Voat was highly detrimental to the fascists because it massively hindered recruitment, the most effective form of which was to have moderator control of large subreddits not explicitly about politics, but saturated with far-right memes / "ironic" jokes, to slowly normalise and inculcate those ideas in people who are originally just there out of interest in some hobby. In contrast, very few people go to Voat who aren't already true believers. It's a much greater leap than from one subreddit to another.

> learning to accept that other people disagree with you and have contrary opinions is a much more robust solution

If there are people who believe in a Jewish conspiracy to destroy the white race through miscegenation, and they advocate for violent resistance in response, then "learning to accept" that is not in any way a solution.

> Inoculating the population to fascist rhetoric by publicly winning the debate against it with reasoned argument

Two points: (a) the overwhelming majority of political content consists of arguments presented without rebuttal. In the case of far-right content, it almost entirely consists of arguments against straw men, citing pseudoscience, deceitful abuse of statistics, and grandiose appeals to emotion. You can consume countless hours of content without actually encountering a genuine debate.

(b) Have you ever watched a debate between a fascist and a non-fascist? Even in response to comprehensive dismantling of their ideas, fascists remain completely insensible to facts (they can always fall back on "fake Jewish science") or reason. Some small fraction of viewers may be convinced by the debates, but the mere fact of something having been cogently debunked does very little overall.
You call it censorship. They call it protecting national security;
This is literally untrue. Zero-knowledge comparison protocols exist [1], and their goal is to prevent malicious party from obtaining any knowledge of the secret. Yes, the genuine server will have its copy of the password (or its hash, whatever) and the user will have their copy of the password too. What you don't want is to have the user send their copy of the password to a place which looks like your server but isn't.

[1]: https://www.cossacklabs.com/files/secure-comparator-paper-re...

EDIT: I mean, yeah, you're right in the sense that whatever you send to the server is used to authenticate you, so that whatever is a 'password' of a sort by definition. However, using the raw password as is for authentication is not a great idea. If you intercept the password, you will be able to compromise any further authentications. There are alternatives that avoid this.
I don't think you can deduct the interest on the margin loan. The rules are fairly simple. The margin loan funds must be used for investment and not for use. Putting a down payment on a primary residence is certainly personal use.
Finding an established competitor can be great news! It’s an easy way to validate demand for your product.
Some more context here: https://www.epsilontheory.com/the-grifters-chapter-1-kodak/#...
The GPL doesn't require history, but that doesn't answer the question of if there is another license that does.
Remembering names is generally not a thing that humans are good at.

My intro physics prof had a party trick where he'd memorize the names of everyone in the class within the first couple weeks based on their school ID picture, but he was quick to point out that he didn't have any natural affinity for remembering names, he just brute forced it.
It's not about the amount of information you have, it's about the amount you have _relative to other investors_. In the era of algorithmic trading where companies are spending millions to get information milliseconds faster, the extra information you have by working in tech and being a science nerd is meaningless.
VTI is the ETF version of VTSAX; has lower expense ratio
I do not know why you are simulating this system.

Given random x, y, controlling for z = x + y trivially generates a perfect anticorrelation as x = z – y.

Like, I get that you want to make a point, just seems weird to have a numerical solution in 5 lines of code to a problem that was already theoretically solved when you wrote down the problem statement and therefore required exactly 0 equations...?

Also like the theoretical solution clarifies that this happens for arbitrary probability distributions equally, it is not specific to Bernoulli random variables.
The SPAC Hack