skysight-inc/HackerNews huggingface dataset:
Vulnerability in the Ledger hardware wallets that can lead to theft of funds
These days we use Snowball stemmer. OP also used it.
That may be, but it would be equally telling to see how much they try to bully the outgoing employees.
>The more modern style of heavier client-side js apps lets you use software development best practices to structure, reuse, and test your code in ways that are more readable and intuitive.

Sadly, this is probably where the core of the problem lies. "It makes code more readable and intuitive" is NOT the end goal. Making your job easier or more convenient is not the end goal. Making a good product for the user is! Software has got to be the only engineering discipline where people think it's acceptable to compromise the user experience for the sake of their convenience! I don't want to think to closely about data structures, I'll just use a list for everything: the users will eat the slowdown, because it makes my program easier to maintain. I want to program a server in a scripting language, it's easier for me: the users will eat the slowdown and the company budget will eat the inefficiency. And so on.
There's an episode of MacroVoices that was recorded in real-time as prices were going negative. You can hear the pain in Erik's voice as he realizes how much profit he missed out on.
Seems to me like it actually makes not having MFA even riskier, as if you fail to have it, someone pwns you, and then adds MFA to your account, it's literally a dead end to you.
A lot of people gambled and they won.
I actually wrote this article! Thanks for sharing this on Hacker News :)
In a typical tech companies, the "Fellow" position is usually given to individual contributors who don't want to get into senior management roles but still worth to take a position equivalent to VP/SVP. Chris Lattner was a director at Apple, so probably he would be simply promoted to VP rather than given the Fellow position.
The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron?
> Rich black people don't have the same privileged to buy justice as rich white people?
>
> That's not true.

Kinda funny how you made up a statement that they didn't say and then started arguing against it. Congratulations, you fought yourself and won.
Idunno, my oil ETF shares are still up 40% from March so.....

OIL closing was bullshit, though
The site is fantastic. I think you have massive potential upside if this is marketed appropriately.

Do you need any help with sales and marketing? I'd be interested in having a discussion if you'd prefer to focus on building things.
That's what I use. The iOS app has a 17+ rating.
If the speeds have increased, are we (users) paying an increase in price? If yes, what are we subsidising?
For how long would bacteria maintain their antibiotic resistance once antibiotics stopped being used?
Magnasanti in Italian sounds like "Saints' Eater". Poetic, isn't it?
No, patents cover someone even independently coming up with the same idea and making a copy. Trade secrets don't have that protection. You can still steal trade secrets. If you couldn't, you're basically arguing IP isn't property (which is a perfectly valid philosophical position, and one I'm sympathetic to)
(I am involved with Crux - sorry!)

I see 4 main reasons why someone may want to be aware of Crux:

- if you have a bitemporal problem

- if you have a graph problem, i.e. something you might initially look to Neo4j to help with

- if you want to use Datalog because it can make writing an application simpler

- if you are thinking of building something similar (immutable event log + indexes) and want to save time

Crux is very different from Cassandra (strong consistency, fat nodes, arbitrary joins etc.), but you could definitely use Cassandra in your Crux architecture.

The closest "yet another" comparison would be Datomic. Crux and Datomic both strive to reimagine what a "general purpose" DBMS should look like, with the primary goal being developer productivity/sanity, whereas Cassandra's goal is simply to be a highly-scalable document store.

Hope that helps!
Just switched to Linux 2 days ago. So happy to see this!! :D
Youn are kindsupporting his proposition - that nothijg evonomically productive has happened. Of trading is a zero sum game, liek OP is proposint, their winning just take from other parts of ecobomy
Optick: C++ Profiler for Games
What was the context behind this launch? Did they just luanch a grain silk just for kicks or something? That can't possibly be the new design for a rocket
I think rich any-people shouldn't get a free-ride buuut... The comment you're responding to focused on privilege being the primary differentiator, but you focused in on "largely not-rich, not-white general prison population", please read comments a bit closer.
I’m fine with the downvotes - I understand it can be a controversial opinion. But I’d love to get some more detailed feedback!
I see GPT-3 as an "advancement" rather than a "breakthrough". There were several differences to the previous model such as the transformer being used and the rest is more like data + compute power. Have a read from this post here about it. [0]

What the hype around this only shows is the market potential around GPT-3's capabilities and glosses over the issues around it because from a VC standpoint: "Who cares, I want that giant 10x exit."

Just like black-box models, GPT-3 is an opaque NLP deep learning model that takes an input to generate an output but doesn't know why and cannot explain itself or its own actions. It may be only text its generating but it is still unsuitable for very sensitive areas like law due to this despite several valid ideas in applying this into legal text. We need proper scrutiny towards GPT-3 from the tech industry and less of the hype manufactured by its merchants.

But that's all boring to everyone, look at what GPT-3 can do right now. Far more important than actual potential breakthroughs like explainability in deep learning, detection mechanisms or AGI these days /s

[0] https://pagestlabs.substack.com/p/gpt-3-and-a-typology-of-hy...
You could not create a new Twitter account with out a phone number last week. (Attempting from US). It rejected my disposal number as invalid too. :(
Agreed. Reuters is already writing about how engineers need to be vigilant and the steps you should take to protect yourself: https://www.reuters.com/article/autonomous-uber-levandowski-...
For a casual user (unlikely to be specifically targetted for attack) I think SMS is a good option. If you lose your phone then you can just order a replacement sim card and you have your second facto back.
But it goes well with courgette. https://www.chromium.org/developers/design-documents/softwar...
But the reasonable comparison wouldn't be "a plain text file" it would something like Jason Donenfield's pass (https://www.passwordstore.org/)

Now, there are some potential usability improvements they can offer by giving the passwords to "some company" but there's a serious price (not only financial) to pay for that.

Also, because it's designed as a standard Unix tool if you're comfortable in Unix (as we may suppose more Linux users are) you'll find pass fits better than 1password or similar programs. When did you change the password for your Hacker News account? You can use 'git' to ask like you would anything else. How will you ensure the passwords survive a house fire? They're on your filesystem and will be preserved with everything else in your backups (you do have backups and use encrypted storage for them right?).

And so on.
This guy had such a sweet deal at Google originally, it staggers me that he'd go to these lengths to steal even more.

He was getting a massive salarY, bonuses in the millions, and he had persuaded Google to pay him even more money through a side-hustle company of his while remaining an employee. Then he quits and steals their stuff.
Thanks. I have questions:

* No redundancy!! Can you get back to the labs with the information you have to create a second route so that tests who get dropped (WTF!) can somehow be passed on to the state and county?

* Is there any special handling of positive cases? I.e. to make sure they aren't dropped?

* Even in early July in Santa Clara County some tests come to the county something like 12 days after the test (specimen collection) occurred. Is the problem you're describing separate from this?

* Santa Clara County seems to have had the number of new cases each day[1] drop by a half around July 20; since the number of tests[2] also dropped by a half, it seems reasonable that the true number of cases in the county has been increasing for the entire month. Does this sound right to you?

* When was this noticed?

EDIT: more questions, refs

* Is this [3] the Rhapsody you refer to?

* Are you connected to the state or a county?

[1] https://www.sccgov.org/sites/covid19/Pages/dashboard-cases.a...

[2] https://www.sccgov.org/sites/covid19/Pages/dashboard-testing...

[3] https://www.lyniate.com/rhapsody/
For somebody who signed up to your SaaS service as an individual, enabled MFA, and then lost their MFA device / recovery codes / etc, how do you validate they’re the account owner to reset MFA?

I’m not aware of any way to validate this that doesn’t open the door to various trivial degrees of attack.
Photomosh
Derivative trading is usually zero sum. There is a loser for every winner. I don’t understand in what world buying and selling oil on an open market could be considered theft. Everyone knows the rules of the game.
If only they had acted earlier - before keeping those folks in such close quarters during an epidemic.
Yeah, I understand the “when people gamble most will lose and someone will be lucky”. But the big difference I see in this case is that many legitimate businesses work with crude oil so not all of those people are gambling / willing to gamble.
I agree, but having worked in SaaS, and done a lot of partnerships, Microsoft has infinite leverage to turn something like MFA services into a co-branding exercise that pays for itself.
I have built a GDPR scanner, looking for feedback
Reminds me of working at amazon doing prime deliveries and using an Android app where you can create flow charts to automate grabbing hours. The difference is amazon at the time didn't care. We even reported what we were doing as a bug, and recommended a queue system instead, yet we only got automated responses not mentioning the issue at all.

This automation included an annoying screen refresh, where you hit back and then reenter to see if the button is lit up to get hours. I remember feeling terrible sitting in the warehouse waiting for an order and seeing others clicking back and forth as fast as they can the entire time, all while my phone was silently, with the screen disabled, 'scanning' for hours.

I think they consider the warehouse drivers like what I used to do temporary, till they get their drone fleets up.

Regarding instacart, and these systems in general, a queue system is just the most fair option. Your take home pay shouldn't be reduced to how well you can click a touch screen or whether you happen to be aware of app automation. It doesn't even seem to benefit the platform itself, just degrade the experience of the driver's.
Instead of just saying they won't do it for free accounts, they could charge a fee for the service.
Gems: Genesis Editor for Music and Sound Effects
He does have some videos about locks that neither he nor Bosnian Bill have been able to pick. It's usually a combination of circular core plus a very eccentric key that needs to be inserted a cerftain way to be able to access the pins.
I could imagine that after Levandowski left Waymo that his email was forwarded to a manager or peer. You could see how a supplier could accidentally pick corey@waymo.com instead of corey@uber.com when they type “Corey” into the email client.
Is there a name for the concept of automatically generating (potentially with machine learning?) selectors?

I feel like I’ve seen similar projects come across HN, but I’m at a loss for what to search for.
Github is owned by Microsoft, not Gitlab (which is whom this link refers to).
I really hate SMS for security, given how easy it is to hijack a number for a few minutes. It has been the basis of so many hacks, that we'd do well to just abolish it everywhere.
On the major cities along the yangzhou river they are mostly occupied, only on the other cities that tries to attract more investment and people they build ghost cities and there are a lot of cities in China competing for progress.
Add to that a ton of un-cached images will run up against the browser concurrent connection limit(non-HTTP2) and cause queuing.. Now you have latency back in the mix between batches :/
This is a classic use case for Aho-Corasick algorithm.
As an AI-focused human, I'm pretty skeptical of the idea that ByteDance' AI made the difference here - not because I dispute that AI can pierce cultural boundaries, but because doing so is a purchasable commodity for a scaled social platform. The magic sauce here was getting the flywheel turning to have users invent content templates native to the medium. Ad dollars, as you mention, and some smart decisions about biases (maybe, as another commenter says, the creative positivity that survives CN censorship).
I am not sure yet. I am working on this full-time, but it's my own savings that keep me fed so that's not very sustainable.

I am not sure what makes the most sense in terms of monetization in the longer term. I think it's a difficult for many open source projects.
The New Brandeis Movement: America’s Antimonopoly Debate
I'm afraid you've describe my friend to a T. Ah well, it takes all types. If we couldn't work with some strange personalities, we wouldn't make it far in this business.
He can pay lawyers to make the arguments for delaying until after Covid. A public defender isn’t going to do that for you.
> I agree, but having worked in SaaS, and done a lot of partnerships, Microsoft has infinite leverage to turn something like MFA services into a co-branding exercise that pays for itself.

Microsoft owns GitHub, not GitLab. This article is about GitLab.
Yep, especially since Gmail also truncates signatures aggressively. They almost make it difficult to know if a person is representing an org, and instead just show what ever name they've decided is most appropriate :)
I agree that the comment above was advocating some pretty excessive measures but 500k-5M is a fair bit more than most folks end up having when they get to retirement.

He's not going to be unemployable - he'll be unemployable in a few specific sectors of tech, he can absolutely go out and get a "normie" job if he's got marketable skills.
How many people know how to use AfterEffects or can spend time learning it? Its not this app vs After Effects.
Its this vs hiring someone who knows to use After Effects.

Or this vs spending time learning to use a professional video editing tool
It's basically the bare minimum to test that the components they're building work.
> What are some good strategies you've seen other providers take?

Fallback to SMS auth if you've lost your MFA and recovery codes. It's not good per se, but the users who need it will love you and the users who get SIM jacked/swap attacked will hate you. You're not going to please everyone. I've been trying to figure out a good way to handle this, but at least in the US, there isn't a good government provided identity provider you could rely on to true up identity issues when auth factors are lost (login.gov just ain't there yet, but it might get there as it's what US DHS uses to auth you for Global Entry, and what you're looking for is essentially a programatic/digital notary to attest to you that the person is whom they say they are).

IAM is hard.
> It’s one of those apps which has been made with proper craftsmanship and care

Is it? I've been using it for sometime as well but it seems like there is a lot of room for improvement. E.g:

- Support for unlocking via Watch ID on the Mac.

- Currently on iOS when searching for a password within an app, if a site prefix is included that doesn't match what's in 1Password the list will just show no results, with no way to navigate manually to the login. Instead, you have to close the app, open 1Password, and copy/paste the credentials back in. Typically the master password will have to be re-entered as well, despite touch ID being adequate a moment prior. Since it's rare to sign up via the web now for mobile apps, this is the most common scenario for me when using 1Password for apps on my phone (and occasionally websites as well).

- Improved UI/UX on mobile. Dashlane is way better in this regard. 1Password overemphasizes features I don't need like tags and favorites and has a pretty cluttered look in general.

I like the native Mac app and open/local vault format. (Dashlane by contrast has a very buggy desktop app and requires storing everything on their servers.) But I would jump at the chance to use an alternative with a simpler UI and better experience on mobile.
Ugh, thanks for the courtesy comment and not downvoting me to oblivion for not being able to read quite well enough.
Really appreciate your reply. I hadn't spent much time thinking about what happens when, e.g., AGI X does not know that AGI Y is truthful, but rather, knows that there is probability at least 99.999% that AGI Y is truthful. Maybe there is some interesting mathematics down that rabbit hole. You've given me something to chew on! :)
Stealing, not leaking.

It’s not like he was a whistleblower or something.

Should he go to jail? Idk. But if stealing food from a grocery store can put you in jail, then a ten/hundred millionaire stealing IP should as well.
I’m sure it will.
How long did you spend working in this before the first release?

(Is this the first release)
It's a prototype to test the materials, engine, process etc. Since it's only ever going to do little hops like this one, it doesn't need to be aerodynamic.
Thanks - wow, really feeling dumb for missing this.
> Github is owned by Microsoft, not Gitlab

Yet.
I love this optimistic take on my failed comment :)
The Founder's Journey: Startup Fundraising and Venture Capital During Covid-19
It absolutely is :)
Yes. Not against Electron but maybe I'm underestimating the ui/ux complexity of a password manager since I have never use one.
This is a prototype for the upper (second) stage of spacex's next-gen rocket [1] they are developing that uses their new full-flow staged combustion raptor engine [2]. This is the ship they plan to use for upcoming mars, moon, etc. missions that will basically replace all other spacex rockets as soon as they can figure out how to get it operating. This prototype is missing the nosecone, control surfaces, and other details, but has the most important parts - engines (one instead of 6 like it will eventually have) and fuel+oxidizer tanks.

[1] https://en.wikipedia.org/wiki/SpaceX_Starship

[2] https://en.wikipedia.org/wiki/Staged_combustion_cycle#Full-f...
It wouldn't necessarily have to be arranged that way though.

I could see this being something at DefCon or similar for example.
Blinn's law says: As technology advances, rendering time remains constant. Usually applied to computer (i.e. 3D) graphics, but seems applicable here too.
>Problem with OOP + Types is that it requires you predict future

No, they don't? They let you scope things safely, in context and with meaning attached. If you try to "predict the future", that's your problem.

> and come with convoluted interdependent structure that forever binds your code

What are you even talking about?
Nobody is forcing you to write it like that. You are writing it like that. You can write functional monad hell in a bad way just as you can create super convoluted structures that seep through your codebase. It isn't the fault of a programming paradigm, it's your fault.

> Had you been using modular functions in dynamically typed language you'd have to simply update one single function and be on your way

Really? Because you never had to update something throughout multiple functions? Because if you write "modular functions" the requirements never change and you can predict the future with 100% certainty?

>Every time you create a type, you create dependency into the entire code, everywhere that type is used.

And every time you create a function, you create a dependency everywhere that function is used.

>World can't be modeled in single inheritance and future can't be predicted with 100% certainty.

Did anyone say that? Ever?

What you are saying is "oil paint is better than acrylics in any way, the world doesn't dry after a minute! The world is changing!". Or "Screwdrivers are better than wrenches! Wrenches are evil!".

Yes, if you don't know how to use a wrench, you might hit yourself on the fingers with it. It's not the wrenches fault.

Instead of being so frustrated at a paradigm, grow up and accept that programming is not a single-track single-minded single-person single-paradigm job. You keep acting like the only way to use types is to shoehorn everything into a type and an object that inherits something. Or that everyone builds out huge complicated FactoryAdapterMapperBuilderCreatorBeans that do who-knows-what. It's not types, it's just bad code.

Instead of wasting your time on trying to wage a holy war of paradigms, go outside and take a breathe of fresh air. It's better for you.
They do, it just happens to be a $4 / month fee and they'll even throw in some other features ;) For security reasons you cannot pay for the service if you're not able to access the account, so you better enable it ahead of time.
Right, I meant that this fact undermines the article's thesis. It's important to consider when evaluating what happened with TikTok.

I think the general point is right (culture can be abstracted), but I am skeptical that ML/AI alone would have been sufficient.
DJI RoboMaster EP Core
Events like this is why I will never get a smart speaker in my house. If it can be remotely updated to be triggered by something as innocuous as popped bubble wrap, then why can't it be remotely updated to be triggered by, well, anything?
It's always the same comment. Yeah most things are strictly better than they have been throughout almost the whole of human existence. Good. Guess what. I'm not content: I want them to be even better.

And other things aren't that good. Some things are worse, and we should understand why and focus on that. In fact it may not be clear that the world is better today that 20 years ago (again, in some aspects unequivocally yes). The typical "it's the best time to be alive in human history so far" sounds almost defeatist, like a license to become lax.

Also, nobody claims "this is the worst time to be alive".
The government has the freedom and jurisdiction to decide which resources are of such strategic importance as to give them extra protection.

It's not about protecting one company over the other. It's about protecting an industry against other super powers.
.app is great for giving official-sounding domain names to scammers. Way to go, Google.

Eventually more .app domains will be squatted, the price will go up, and companies will buy domains proactively (like instashopper.app - instashopper is obvious shorthand for Instacart Shopper, the official term) but not before a lot of unethical enterprises take advantage of it.
TikTok has been publicly criticized for their censorship and filtering countless times, so I wouldn't doubt that they toned it down a bit in the non-Chinese versions while they're actively getting negative coverage.
Or let people bring their own s3 and pay for the storage and bandwidth themselves. With video bandwidth and storage can kill your cost structure really fast.