skysight-inc/HackerNews huggingface dataset:
Yes, the entertainment system is different from the system that runs the car, but there is some level of communication between the two.

I think you've just identified the root cause of at least one set of problems. The essential control systems in a vehicle should ideally be separated from other vehicle functions to prevent interference, whether accidental or deliberate, from compromising vehicle safety. The approach now being taken by manufacturers with their always-online, increasingly automated cars may be undermining that separation, without necessarily having adequate safeguards in place to ensure safety and reliability are maintained.
Those two types in particular are examples of actors that are willing to break the law in this way. Competitors aren't going to contract a hack - like the parent comment said, every 3 letter agency would be after you and suddenly your executives are going to prison.
This is another reason why I think it's incredibly foolish to own a vehicle with an internet connection. Even if the vehicle doesn't support remote control like Tesla there may be a chain of bugs that could be used to do just that or cause other problems.

That's not even considering the major privacy issues that come with such vehicles.
Ah yes, Cisco, well known for their good security practices. Such as this galaxy-brain manoeuvre: https://twitter.com/RedTeamPT/status/1110843396657238016
you add the tenantId to each table and you add it to the primary key of the table too. then you just merge.
okay but have you ever played elf bowling? snood? chip’s challenge??
The person that received the $850k loan spent it, so their balance is then $0 and the bank also has a corresponding entry for -$850k of debt that they are owed and can collect interest on.

The debt is an asset held by the bank until it is paid off, is sold, or is defaulted on.

Person A deposits $1M

Person A $1M, total deposits on hand = $1M

Person B takes $850k loan

Person A $1M, Person B $850k, Person B -$850k debt

Total deposits on hand is STILL only $1M. The combined balances are 1.85M but these are just entries that have no impact on what is actually in the bank's vault/account.

If A and B both ask for their entire balance at that moment the bank will have to go to the overnight window or some other facility to take a short-term loan that it will owe interest on and may need to provide collateral to receive.

In that case the bank's overall balance sheet would be $-850k of debt it owes someone. Because that debt isn't collateralized their rate will probably be higher. This is what led to things like the credit market freeze up that the Fed needed to step in to provide liquidity for. Banks usually borrow from each other not just the Fed, but when shit hits the fan banks might not be willing or able to loan to each other except at extremely high rates.

When the bank repays its loan (perhaps when Person C is paid by B and deposits the money into their account) the situation will unwind and we'll be back to the previous situation.

In real life it's much more complicated because the bank probably has many other types of assets like CLOs, CDOs, etc.

https://www.investopedia.com/ask/answers/040715/what-differe...

Sometimes the Fed will take assets as collateral for a loan and the bank is expected to repurchase it later at a slightly higher price a/k/a the Repo market

https://www.bankrate.com/banking/federal-reserve/why-the-fed...
The next worst case scenario is autonomous drones, that do not require radio or gps inputs. Navigation can be done with crude inertial navigation systems and advancing AI can identify and fly to targets with increasing accuracy. Causing general chaos or exploding in crowds will not require AI though.

The only counter measure against those will then be an EMP system, Blinding lights to disable cameras, etc.

The next evolution for public speakers or gatherings would probably be completely online.
Focus of 2020 was to put together a solid simulator experience, which it seems like they’ve mostly done. Gameplay improvements and educational material were stated to be coming in subsequent releases.
I feel for developers on macOS bugs, bloat and unreliability, but for many users, it still works every day for 5 to 7 years without issue, and updates just mean some new emoji are available.
The actual question being asked and answered here is why a mile is defined as 5280 feet, as opposed to any other number, such as 5000 feet.
How much cash are we really talking about?

Miners earn in aggregate

$3.8 billion in ether @ $430 and an average of 3 Ether per block

$3.9 billion in bitcoin @ $11,500 and an average of 6.5 bitcoin per block

(Transaction fees are a significant portion of block revenue now due to the heavy activity on these networks, with Ethereum blocks often having more fees earned than the block reward)

So there is about $8 billion worth of cryptocurrency earned by miners each year, at current exchange rates and activity levels. Cartel just should not exceed 50% of that. Market can tolerate much more and they would be in fierce competition with other miners.

We live in a world where people want the exchange rates to double or increase by an order of magnitude, which means that 8 billion figure becomes 80 billion, it should be clear that we are on the cusp of a market becoming highly attractive to larger incumbent organizations.
> Another off the top of my head - competitors.

Car manufacturers do plenty of shady things, but this would be ridiculously over the top. I don't think that would be a serious concern at all.
Scrolling out into the expanse like that showed you have the mind of an explorer.
And you were rewarded by discovering code never before seen by civilised man.
How about we use resumable lua scripting
The problem is that total separation is difficult to achieve with the requirements being placed on these vehicles. Sure, whatever is playing your favourite music tracks over the speakers probably doesn't need to know anything about steering and acceleration. However, your self-driving software is going to have a tough time getting your car to a location it doesn't know exists because its onboard navigation maps predate the existence of that building, or planning a route that avoids an accident it doesn't know about because it has no real-time information about road closures.
>You can go to reddit right now and find a video of some right wing whacko shooting someone to death on the front page.

when I was growing up it wasn't just right-wing whackos glorying violence, it was Bill Gates himself dressed up in a trench coat advocating to 'clean up the neighbourhood'

https://youtu.be/KN0K58EfJSg?t=120

You may be underestimating the weirdness of the internet and the culture around it in the 90s, reddit looks harmless compared to what I saw when I was young when kids on the schoolyard were talking about rotten com
I use Citus. Their team is great, but it is very expensive.

The move from AWS to Azure came with a reduction of IOPS per instance. We have not had the same level of performance since migrating to Azure.

I am considering running our own Citus instances.
Yeap, pretty accurate. I can predict it is going to get bad. It is always fascinating to me that companies invest billions in everything aesthetic related. But when it comes to security and system software, no money!
Magnesium; I assume you mean magnesium amino chelate - I use that too. I was kind of pissed that I had to find out about it on the internet and my doctor looked at me funny when I mentioned it. A huge gamechanger for me was asking a friend who's also on the 'phetamines what time of day they stop taking it - now I'm religious about never ingesting stimulants after 3pm and holy crap what a difference.

I was a bartender for over a decade; there's no better crash course on how awful a molecule alcohol is. It's the worst drug.

Sorry to hear about your friends. It sucks to lose your roots, I went through something similar myself. I've come to reckon with the fact that people sometimes grow apart, and you can't always hold yourself responsible for what might just be an incompatibility in process.
>Can they pay more? Yes, absolutely. Should they? Probably, yeah. Do they have any reason to? No.

Yeah, they do. It's a self declared measure of how seriously they take their security. They valued avoiding the takeover of their fleet at 0.0000125% of their market cap.

The reason I left lastpass was because the bug bounty for a bug that could expose all of everybody's passwords just by visiting a website was, like, about $1k. The company became dead to me in a split second and I wanted out immediately.

....and it's not doing too well these days, from what I can tell.
> For example, someone proposed an Uber-like site that’s operated on a blockchain rather than having one company control the platform. But I want a minimum standard that I can expect from a taxi, and I want a central party to enforce it.

Why does it have to be a central party? Why not have multiple parties competing for how well they vet the quality of taxis and drivers, as well as reviews from the people who actually use the service?
> They certainly don't need to understand how it works

They must need to know something about it in order to verify that it does the malicious thing correctly. It's hard enough to get code right when there's a whole team of people who know exactly what it's supposed to do.
so, did you use a haddock or a skate when you slapped them in the face?
I was using "maliciously exploit" here to describe what would basically be the worst case scenario of such a bug (instructing every Tesla to deliberately crash at high speed). I don't think it's in any way a stretch to characterise someone who would do that as mentally unstable.

Of course there's many other ways you could exploit such a bug, but in the context of a "multi-billion dollar" event, it's really only The Big One that's in frame here.
Hello!

Glad to see more people making tools around the Accessibility API. I've been working on a similar app called Shortcat (https://shortcatapp.com) almost 8 years ago (wow) but haven't had the time to properly work on it. It sounds like you're encountering a lot of the same problems I've had when I was starting out (figuring what's actionable, forcing keyboard layout etc). Let me know if you want to chat about the various problems in that space
Hong Kong is a geopolitical football because the Mayor of Hong Kong tried to stop a foreign corporation from getting their citizens addicted to drugs.

In accordance with British commercial law, the foreign corporation returned with the British Navy and took it over. And then kept pushing the drugs successfully.
Did you play it because you liked the creator, or because the creator had a strong insight into what you like?
Maybe it's maturity in the sense of relationships.

An immature relationship might be based on selfish interests, compounded with power struggles, boundary issues, jealousy, spying, and a little rage and stockholm syndrome thrown in for fun.

A mature relationship is based on trust and mutual respect. It does not concern itself with knowing every detail or trepidation regarding other suitors. The relationship is there because it is valued and there are willing participants.

Now... internet connected devices.
> Pedophiles online are a real danger and there is no way family members pose a likelier or more severe threat than online pedophiles.

Sorry to spoil your day, but we live in a pretty terrible world:

https://www.rainn.org/statistics/children-and-teens

34% family, 59% familiar people, 7% strangers.
SLAM is already functional for drone navigation, more or less. As for blinding lights, that can be fixed by using many different sensors and wavelengths, as well as high-quality optics and imaging sensors with high flare resistance and high dynamic range.

As for EMPs, a drone that isn't remote controlled could feasibly be put in a Faraday cage. I'd make a prototype, but I don't really want to contribute to future assassinations.

There just aren't any good countermeasures, I'm afraid. I'd imagine fully online works well but even that is seriously limited.
Hopefully in 50 years the whole idea of single-occupancy vehicles will be considered a quaint relic of a much more decadent time, especially vehicles which were allowed such extravagant externalities in terms of pollution and endangerment to vulnerable road users.
> I wonder why they aren’t paid in vesting stock.

Most people would far prefer cash
As others have pointed out, self driving software is inherently unsafe at this moment - we don't know how to make safe network-connected software yet.

Anyway, this is moot in most cars, as they don't have sold driving software anyway.
> Consider that on Linux a filename is just an arbitrary sequence of bytes with some limitations, and on Windows it's an arbitrary sequence of 16-bit integers. You can put unpaired surrogate characters in a Windows path, and you can put 0xff in a Linux path.

I don't think these are as equivalent as you imply. While it's technically possible for Windows paths to contain unpaired surrogates, in practice it never happens outside of malicious software (and even that's rare),

Whereas on Linux, getting a "random" bag of bytes is relatively common because the convention of UTF-8 is new (and is a userspace convention). Of course it's usually not truly random but you have to play guess the encoding if you want to interpret it.
- Make real your every absract notion by coding and drink coffee madly.

so much this.
> (Did you mean very-important-file.txt and Very-Important-File.txt?)

oh sorry, ha! yes.
i noticed my logitech quadrants mixture at 100%~=50% actual mixture which gave me a hellaciously slow c152.

seemed about 70% mixture gave me best performance.
You're comparing apples and oranges. It can both be true that security (and overall software) quality is poor, and that automated buggy cars are better than erratic people.

However, when you are considering system risk (e.g. that a bad actor could crash 100k cars at the same time) the worst case outcome could be much worse than the mean outcome.
"but, for whatever reason, you are noticing it more"

Most societies indoctrinate people to "respect their elders" to varying degrees.

A younger person having authority over an older person is a role reversal many are not equipped to deal with, from either side of that equation.

So it is noticed more.

Further, this elephant in the room has to be acknowledged before either side can move on meaningfully. But you can't "discriminate based on age" or you might end up in court depending on where in the world you are.

Makes it a tricky problem that I am not surprised people just "avoid".
The fear of punishments probably keeps many kids / young adults off drugs. The fear of incarceration and a criminal record probably does more to keep people off drugs than actual incarceration.

I find the argument for legalizing drugs as some sort of a benevolent all-in-one solution a complete idiotic solution.

Drugs like Heroin, Meth, Cocaine, etc should absolutely be banned and IMV the scope and scale of punishments increased.

Humans are notoriously incompetent or weak-willed to make rational choices in many aspects. They are emotional, impulsive and irrational.

Imagine being able to obtain drugs at market prices and being able to sell to children in schools, illegally of course. Can you not see what is happening with alcohol?

Drugs are a social evil and must be dealt with. Legalization is not the solution. It will increase drug use exponentially.
As someone who had a child later in life, I like to pretend that being a dad isn’t a fundamental part of my identity. That, mostly, I’m the same person I always was, except now I just happen to have a 19-month-old.

But then I read pieces like this and find myself deeply, almost inexplicably, moved and realize that no, I’m definitely a dad.
I would disagree, sure botnets can't be used for threatening life directly; but botnets have been proven to be quite effective in attacking services and do denial of services attacks. The one thing we can take from botnets is, vulnerable and unpatched devices can be infiltrated in high numbers and attackers can lie low until they decide to pull the trigger.

Imagine even 0.1% cars being controlled, the mayhem and loss of life that they can cause is just immense.

Power plants are also dangerous targets in a similar sense, but hopefully there is network separation for control services.
It's not quite a highly composite number (HCN) but 5280 still has 48 divisors. https://en.wikipedia.org/wiki/Highly_composite_number
Well, that scary to hear.
Before I know about WebRTC I always thought you need to spent enormous amount of time and money to built a video chat system. Turns out I was able to implement my idea in less than 3 days with WebRTC.
Hmmm I wonder if test coverage is a factor here

One long function gets run every time you change any piece of it, whereas a more complex call graph can be edited without testing every permutation

(yes there can be branches in the function too)
> It's funny, we always talk about compensating leaders for the value they provide to the company. Yet when it comes to non-leaders, it's transforms into a question of "value relative to their current/recent income".

That's maybe true for founders, but not really for hired executives:

> One major consideration that goes into how much a CEO should be paid is what other companies are paying. Compensation committees benchmark CEO pay against a self-selected peer group -- often 12 to 20 companies that may be of similar size and complexity, and have similar business models, according to Robin Ferracone, CEO of Farient Advisors, an executive compensation consulting firm.

https://www.cnn.com/2019/10/24/success/ceo-pay-packages/inde...
Well, that was a contrived example. Something more useful would be e.g. enumerating all the HTTP endpoints being depended on, or calculating the maximum resource consumption.

I think our disagreement really boils down to different approaches towards workflow configuration. Static configuration has its place in a system where all the "smartness " can easily fit somewhere else. This is often the case when you are building a workflow that glues many in-house components together, which tend to have uniform behavior and you can easily extend them. On the other hand, if you are working with many heterogeneous components that are clumsy to extend, having a smarter, more dynamic workflow configuration API definitely makes more sense.
Great question. I think I'd say the big difference is that people, for the most part, aren't putting their/others lives in Garmin's hands when they use their devices.

That said, I think they have some hiking/trekking oriented products which could cause problems if you were relying on them.

The headline "electric car fleet hacked" is a lot scarier than "smart watches hacked".

Then again, maybe people really don't give a shit about this stuff, and these bounties are priced correctly.
> "Open source doesn't mean you have any influence or say in the future of the project. It only means you can take a copy make changes and roll your own version."

Exactly, just because you have a change you want, doesn't mean you can force in on everyone. The maintainers of the project decide weather they want it or not.

Unfortunately the best open-source projects have some-kind of [1] top-down control. For example; Linux is developed the same way. You can fork and submit changes, but there's no guarantee that Linus Torvald's will accept those changes....

What would be a better alternative? Developing in behind closed doors? Some kind of democratic system of implementing features... these projects usually suck as there's nobody in charge and it tries to please too many people.

Anyway, it's definitely better than the IE situation, which was much less transparent and resistant to changes... with absolutely ZERO input from the community...

[1] https://en.wikipedia.org/wiki/Benevolent_dictator_for_life
What does "probably" mean here? Does it mean "Here is the evidence-based argument why this is more plausible than that," or does it mean "I would be happier believing this than that"?
> how hand-wavy the whole superposition/quantum collapse stuff really is

Superposition isn't particularly hand-wavy. It's the basis of various technologies, and of precise numerical models we use to build technologies.

Quantum collapse is hand-wavy, and that's because it is not well understood. It might not exist (in which case superposition of mind-states is a thing), or it might exist (in which case mind-states may be definite). Quantum mechanics that we can calculate doesn't give an answer either way, even though it gives lots of other answers very precisely and correctly.

> Wiger doesn't know about it, [...] just seems like silly mind games.

When only applied to a single measurement it does seem like silly mind games, you're not wrong.

The motivation for those thought experiments was to try to reason back from the consequences found from more complex behaviour observed with multiple measurements, back to a simple system with only one measurement.

But when you have many measurements with entanglement, of which there are numerous physical experiements and confirmations by now, the idea that there are just multiple, correlated probabilistic states ready to be observed that we're not yet aware of is not consistent with physically measured behaviours. Those measurements aren't hand-waving, they are hard data, even though my explanation here is hand-waving and doesn't go into it.

> I side with Einstein with his view that everything is already in one state or the other

Numerous experimental results now contradict this view, or require other strange things to be true about the world (for example superdeterminism was mentioned in the article).
I think this is a good point, and largely agree. However, there are also correlations in driver behavior, like it being more dangerous driving on July 4 or New Year's Eve in America as so many people celebrate and drive drunk, increasing accident rates.

According to NHSTA, 144 drunk-driving deaths on July 4, compared to 36 on average: https://www.bactrack.com/blogs/expert-center/35042821-the-mo...

I would say that's mass carnage.
It would be absurd to attribute every mention of Dresden or Hiroshima or whatever to an anti-American agenda. People simply inhabit an environment where that is what comes to mind. Maybe people don't see the similarity I do, or maybe the thing that I think relevant is obscure. But I'm noting that it sometimes seems strained and odd, from my personal perspective. Blaming an individual here and now was not my intent. I'm more saying, look at the bubble english speakers inhabit, I wonder how we got here, since most people doubtlessly aren't acting out of a conscious or malicious agenda.
I think that this is a great point. It's also a little scary when you think about the data sets that exist out there for advertising. Any way that someone targets an ad could be the selection criteria for these efficient wars.

My next thought is that programmers do have an opportunity to take moral stands against some of these things. We can't stop someone somewhere from building these terrible things but we might be able to make it harder by preventing huge problematic privacy invading data sets from existing.
>Now a long approach of gradual decriminalization and legalization may work, with the ability to operate legally the need to utilize violence decreases over time as it's generally bad for business.

For the record I'm pro-legalization, but just flipping the status quo overnight isn't going to fly here.

Saying "just legalize all drugs" doesn't solve the problem, someone still has to make the drugs, can we just give all traffickers amnesty for past crimes and make their operations legal? Maybe? But it's not something to hand-wave away.

I don't have the answer but flippant comments about how easy it is to dismantle cartels, is offensive to anyone who has fought to do such and likely a disservice to the intelligence of people running them.