skysight-inc/HackerNews huggingface dataset:
It’s hard to say Facebook’s targeting is completely garbage while at the same time understanding that Cambridge analytica, Trump, and others were able to use their micro targeting to sway elections.

Obviously the targeting works. But,like most software, I’m sure it is buggy. Probably both sides of this are true.
Almost sounds like openness and honesty goes a long way!
If some law prevents you from having access to some data, then presumably that law has a name for whatever the crime is.

It's not like we need the law to explicitly allow types of access. Anything not explicitly disallowed is allowed without a special name.

"Stealing" happens when the original owner is deprived of the thing.
Big Sur 11.1 External Display Issues
I estimate the majority of the people commenting, including me! I love it, I also use it for keeping track of notes and todo's in tandem with org-mode.
with (setq outline-regexp "#") I hope to get the best of both worlds.
2. Is this what you mean? https://parahumans.wordpress.com/
Double negatives are hard :).

https://www.newyorker.com/magazine/1994/07/25/how-i-met-my-w...
There is lazy-loading now you can use with the server edition, but I don't like either that they're still served out as base64 embedded content. I suspect the most elegant solution is to have your images live hosted somewhere else, and just add references to them.
If the campaign is well measured, this is taken into context.

FB advertisers are paying for results and they will pay, or not, for those results, not really the targetting.

If ABC corp knows for sure their target is top 50% Households, and FB can only roughly provide that, then the value will work itself out in the numbers.

If FB can provide that target more precisely, those ads will convert better becoming even more valuable.
Not an expert, but don’t they fuse matter kept in the center of a toroid vacuum chamber using magnetic fields? So the high temperature doesn’t have a medium to escape through.
A generic low quality phishing email test gives you an indication of how exposed to this risk you are.

A well made highly targeted phishing test gives you an indication of how good at make phishing emails you are.
I upvoted you even though I disagree, for a few reasons.

First, a lesson where I get Covid is a really expensive lesson. A lesson where I give Covid to a teacher is a really expensive lesson for them, and I don't want to be responsible for potentially killing someone for lessons.

Second, there is a wide range in the quality of teachers today. While it is true that feedback will accelerate learning, I've been able to learn a fair amount from teachers on the web, taking their knowledge and adapting it as I need.

Am I progressing as fast as I would if I had a teacher? Of course not. Will I get a teacher eventually, after Covid? I'd like to. But it's a luxury at this point and the ability to learn is better than procrastination.
US supergun hits target at 70km
These bring a smile to my life:

James Blackwood - Raccoon Whisperer: Canadian retiree who rescues raccoons

Seoul Walker: Videos of Seoul, South Korea

Tokyo Explorer: Videos of Tokyo by a Swedish expat

Dianxi Xiaoge: Videos of Yunnan country life & cooking
How could you access end-to-end encrypted cloud storage from multiple devices?

It's still encrypted, and in multiple jurisdictions so a legal order in any single jurisdiction only decrypts one layer of encryption.

"Telegram is a cloud service. We store messages, photos, videos and documents from your cloud chats on our servers so that you can access your data from any of your devices anytime without having to rely on third-party backups. All data is stored heavily encrypted and the encryption keys in each case are stored in several other data centers in different jurisdictions. This way local engineers or physical intruders cannot get access to user data."
https://telegram.org/privacy

They also offer end-to-end encrypted secret chats, which are not uploaded to the cloud and only available on the device on which they were initiated.

You are free not to trust them. But I do.
Don't dinosaurs have WZ and ZZ, like birds?
magnets, really big magnets.
These guys did it:

Walsh and Ranogajec took on the might of global gaming markets and managed to consistently win over three decades. Much like the most advanced hedge funds, which employ armies of PhDs to identify patterns in financial markets, Walsh and Ranogajec’s consortium, called the Bank Roll, created statistical models that allowed them to exploit mispricings in betting odds wherever they could be found

https://www.afr.com/opinion/david-walsh-s-wisdom-beats-the-o...
Yes, thank you! That scene with the lollipop is vicious and the way he is in such control of the moment, unforgettable.
> We could not complete your purchase.
> Craft can't be installed because macOS version 10.15 or later is required.

:/ I'm still on High Sierra, 10.13.6. Next time Craft, I'll keep using Dropbox Paper, Obsidian, Notion, Evernote and Airtable.
[My page on notetaking](https://maya.land/notetaking/) links to [a thing I wrote on my TW setup](https://lesser.occult.institute/an-opinionated-approach-to-t...) if anyone is interested in seeing a particular setup.
When I was 6 or 7 we had these electric yo-yos that lit up when spinning. One of them wouldn’t work, and my friends mom was trying to test the lightbulb with two AA batteries stacked on top each other and the light bulb on positive saying the light was burnt out. I remember being frustrated trying to explain to her that the light could never work this way. Of course she knew better, and explained that a wire to the negative lead wasn’t needed because she was using 2 batteries. She was so confident.
At a certain point I definitely get to the “wait, I’m just managing complexity in a game, if I’m gonna do this, I should actually make something” thought, and then I stop. But there’s something really satisfying about watching a huge but well oiled mechanism perform its motions, and that’s why I personally like this game.
Cyclist, tourer here.
Is the recumbent by choice or necessity? If the former, have you considered a more traditional frame? Recumbents are so hard to see, even if you have flags and what not.
In this case, I will tell you that I don't think that Satisfactory is better than Factorio. I was incredibly excited for the idea of 3D Factorio, but so far, it just leaves me asking, "What's the point"? It doesn't get me anywhere near as excited as a new build in Factorio.
> The term "defense in depth" comes to mind.

Perhaps my least favorite phrase in security, used constantly to justify weak, meaningless, or harmful work as "another layer".

U2F is just one layer. It's a real, meaningful layer - it addresses real threats in a non-phishable way. Gating access by device, acls, etc, or locking down sharing permissions, are other real and meaningful layers.

> some amount of bad stuff will land with the users

That's the security team's problem to solve.

> But you can also imagine someone complying with that but then falling for a well crafted phish (that happened to me, as I mention elsewhere in this thread.)

I can just assume that one person will fail the phishing test already, and work from that angle. Way better than assuming I can teach an entire company to be untrickable.

> Is there no data that humans can leak out by entering it in the wrong place?

Wire transfers were one example - there are others, and we have other ways to mitigate those without assuming users should bear the responsibility.

By 'most types' I mean either phishing for credentials or as a delivery mechanism for malware - these would both be extremely difficult to do, or otherwise mitigated by other policies.

> but you can imagine that in many businesses there is.

That's their security team's problem to solve.

Feel free to train users, I have no problem with it. We do it for compliance purposes, but it's also a fun opportunity to engage with people about security, including meaningful security. And you do want people to be able to spot and report phishing, it's just not something you should ever rely on, or compromise for.
Like I said, almost all art is fantasy then, and almost all science fiction isn’t scientific enough to qualify. And all stories have drama too, so we might as well clump almost everything into a “dramatic fantasy” bucket in that case. The genre names aren’t perfect but repurposing them to be more English-accurate isn’t helping people find what they’re looking for
this is accurate. thats the purpose of the superconductors
>It kind of spoils the article.

Man if that spoils an article for you, you must live a pretty miserable life.

Not surprised a comment like this isn't dead on this site. It adds nothing to the discussion, and it seems like OP didn't even read the article and is flame baiting.
The payoff for hackers seems too low here, why was this even a target? Kids and too much free time?
This is why I love old hardware, even as a relatively "young" person in tech. It really keeps you disciplined and honest with your code. I have three older Xeon machines with very bad specs that I use as a Kubernetes cluster, and it's where I test a lot of my deployments. If whatever I thrown on it will run well, then it'll be blisteringly fast on an AWS server.
that's great; the excerpt you posted, however, was phrased as a 'gotcha' -- as in, 'you thought i was talking about a gene, but in fact i was talking about a sex'
Probably for the better. People who have already gotten a competitive offer must be determined to leave.
6 pillars of self esteem
Show HN: Diggz – Roommate finder platform (NYC search page, Pre-login)
Emily translated the first line of the Odissey as "Tell me about a complicated man". She almost went with "Tell me about a straying husband". Neither complicated nor straying husband appear in the original text. Pope's description (The man for wisdom’s various arts renown’d...) is closer to the epithets we are taught at school (ricco d'astuzie or dal multiforme ingegno). πολύτροπος means resourceful, of many skills, well-travelled.
I was told long ago that con men like to target doctors, because doctors believe they are too smart to be scammed.
The amount of stuff that is kept incredibly hot is very small, so the effective radiated power is manageable using the gigantic containment vessel which was purpose-built for this problem.
Would love to work with your product. Got a SaaS Startup (prerelease) that‘ll provide web products to founders, startups, and SMBs at an affordable price. We got a solid NodeJS-based modular codebase and a highly available infrastructure. I think this would fit us well.

tom@gentlent.com
Merry Christmas to you! :)
How do you even end up in a situation where recruiters are banging down your door with such offers? I know developers who have reverse engineered applications, fixed unbelievable bugs deep an application stacks, written top tier code that make them the go to people in teams for all the tough problems and yet they barely get any call backs much less for companies like Facebook. They have to grind leetcode for 1 year just to get interviews at no name companies in the mid-west(despite willing to relocate anywhere). Its like there is this "in" group of developers and if you are "in" you can act like how you do and if you are not, then you are in starvation mode with all the other starving fish in the sea.

Likewise it just seems so selfish to talk like this during a pandemic situation where so many people (including people in tech) are out of a job.
Doesn't it depend on the person's network setup?
You should not assume that U2F makes you 'immune' to most types of phishing.

If your assumption is that users will fall for phishing tests then it follows that they will present their U2F token or simply take some action on behalf of the attacker directly.
Wikipedia says "Provenance is conceptually comparable to the legal term chain of custody." https://en.wikipedia.org/wiki/Provenance
> Their protocol is not encrypted by default, which is an odd choice.

That's because end-to-end encrypted chats are only available on a single device, since the e2e keys are not shared between devices. Most users switch between devices and like to have everything stored in the cloud, so having that as the default is the obvious convenience.

Anybody who is concerned about e2e can easily start a secret chat for that purposes, at the expense of cloud functionality.
Typically being 3 or 4 major versions behind the current version is under %0.5 of the market, it's really not worth it to maintain compatibility that low unless your already old app doesn't need to stop supporting old versions.

I'm estimating because the app is newer, is the reason why they didnt' put special effort in support very old versions like that.
After a few tunings, you might wish you bought the keyboard.
Why do you think light is actually quite slow?
They don't. That's why they disagreed with you.

The tradeoff here is an idiotic one.

You don't set your own building on fire in order to test fire safety.

You don't destroy company morale to test phishing security.

It's really that simple.
Show HN: Place to Share and Discuss Ideas
Turn on game mode and problem solved unless you can perceive low double-digit ms latency
5 years ago the fast/slow pointer technique for cycle detection could have been impossibly hard, now I see questions that just assume the candidate knows this. Every year the bar gets higher.
>recognize voices. All these things were not possible 5 years ago.

FTR: https://en.wikipedia.org/wiki/Dragon_NaturallySpeaking

Dragon Systems released NaturallySpeaking 1.0 as their first continuous dictation product in 1997.
<...>
As of 2012 LG Smart TVs include voice recognition feature powered by the same speech engine as Dragon NaturallySpeaking.
The Moral Animal
Too bad no one teaches Piano over Zoom /s
Against whom? Where is the profit mechanism? Are the hackers really prepared to track down every patient and try to blackmail them? It’s like the emails you get some times from hackers that have an old password of yours and threaten to release that video of you pleasuring yourself. Seriously?
> I've also heard good things about the FF7 remake, but haven't played it.

Playing it at the moment, and I'm nearly done with it.
I think it's a great game. Its' beautiful, and has a nice mix of carrying forward old storylines and settings and mixing in new things. It also made a lot of characters more authentic to me than the original one - e.g. the turks felt more like real bad guys. Aerith character is great too.

What I'm not too sure about is whether it was the right decision to stretch the Midgar part of the story that much (I'm already at 45 hours in chapter 17). The original FF7 had a lot more places to offer, and climbing up a buildling or moving through sewers or tunnels for 2 hours isn't that exciting compared to that.
Seconding Capitol Reef, what a unique place, if a bit hard to get to.
The service must be sustained somehow. Either through ads or fees.

I don't understand why people act like they can avoid ads, and enjoy a free service.

Hopefully there is a paid option that hides ads. Would you pay for it?
Read this as part of a creative writing course in uni. Dropped out of the course but still cherish this one
What about just after the unfair coin sequence toggling every even position?

HTHHTHHTTHHH

HHHTTTHHTTHT

Should be fair. Though there is order now when the coin was unfair.
And the potential car crash could be avoided by flying a helicopter. What kind of argument is this? I don't even think it's one.
Blink by Malcolm Gladwell. I have not received a ticket for a driving infraction since.
It's a lot easier to demonstrate the business necessity of a whiteboard test than IQ tests.

Administering an IQ test would be legally risky and could have a disparate impact on protected classes.

Griggs v. Duke Power Co.[0] is the Supreme Court case on this topic.

[0] https://en.wikipedia.org/wiki/Griggs_v._Duke_Power_Co.
Finally someone with some perspective. Is it just me or is it just baffling at the amount of hubris there is in this thread? Its like there are two worlds, this small group of people who have no perspective whatsoever and the rest of the country having to deal with reality.
Clicking a link is all it takes to download malicious code and send stuff to an attacker.
Clicking a link is enough to consider a target to have failed.
You still haven’t explained what difference it makes whether the majority of people have ancestral roots or not.
Influencers May Face Fines as China Tackles Obesity and Food Waste
Malazan Book of the Fallen series.
> Yes you may have proven a tactical point, but you have just set yourself up to lose the war.

you glossed over this point, but it is nonobvious. how exactly does making your users skeptical of email "lose the war"? are they going to type in their passwords out of spite now?

the gp is exactly right. if you have a line you wont cross to train your users, then youre leaving a vulnerability. if you want to make the argument that the vuln is worth not "being mean" to your employees, then make that argument, but don't pretend its more secure.
I was riding down the West coast a few years ago, met a cycling friend who I rode with a couple days. An RV passed us (my friend was behind me) and he said that the step ladder or whatever thing on the side of the RV was unhitched and came within inches of hitting me. I usually ride alone; who knows how many close calls I've had like that. Gives me the chills just thinking about it.
If you (ever) need to update your data, you need to know where you got it from, what was wrong with it originally, and how to pull it again.
The point of U2F is that they can't do that. For example, if I send you a fake Google login page, you can't "trick" me into entering my token - it won't work.

Here's a good blog on the topic:
https://dropbox.tech/security/introducing-webauthn-support-f...
The video in the linked article isn't high resolution enough to discount such a wingsuit in action, especially as it's taken side-on.
It is a know fact among marketing agencies detailed targeting on Facebook is almost fake. You can safely target for age / country / region / sex and that's it.

There is also similar audience setting, however it is a black box solution that takes away control over the campaign.

Moreover even when setting the campaign right, almost 80% of I got in some, were bots.
Right now many experts are saying no. But if Tesla manages full self driving for real, the energy storage business, the solar panels business, the charging network business, the production of competitive cars in most markets, Tesla may be worth the current valuation.

You can bet your savings on the red in a Casino too. It's pretty much the same in my humble opinion.
I thought gender is not something you're born with? Did the Mammoth herds raise these offspring to be male?
Arc Language Tutorial – Tut.txt
What pre-iPhone devices had virtual keyboards? I don't know of any and Googling for them is not turning up much. I could imagine old Windows Phone OSes had some kind of onscreen keyboard which I would guess was pretty bad.

Apple themselves positioned the iPhone against devices with physical keyboards: https://i.imgur.com/hXtRmbG.png

I would argue "decent virtual keyboard" is an oxymoron :)
I've read "the lord of the rings" when I was 12, over the course of 3 days. Eat, sleep, go to bathroom, and read.

Probably the biggest impact a book ever had on me.
Or there are biochemical processes that prefer preservation of male specimens, for example the prehistoric version of male hormones acting as a preservative, or perhaps the prehistoric version of the female horomone acting as a cue for insects or decomposers in the ecosystem to consume the carcass etc.
Please be careful not to press too hard or you could wear off your enamel.
This is just click bait to scare people.
It's more akin to reading and writing than to calculus.
That doesn't protect against the kind of attack that compromises the end point (wait for logged in 2FA state, interact with browser in the background with exact same state in a headless mode and download), and you do not know when they set up their systems where Gsuite, 2FA & HIPPAA / UK Equivalent agreements were even available back then.

For all you know, they could have had that system too, the article does not say what it was.
> Full Open Source and Libre Software will be a solution

I'm all in for FOSS but in the current state of the infrastructure that would just swap reading TOS to reading source. It just is not feasible for every single user. The alternative is crowd trust but that problem tends to be solved naturally by institutionalization, which brings other requirements such as organization and solving monetary problems.

What we need is a change in infrastructure. Why is it allowed that IP addresses are geolocated in the first place? Why do browsers share the name of your graphics adapter by default? Why is the user agent not abolished?
The “videos engage better than text” idea has been dominant for a few years now. It’s based on a Facebook statement?
I've read the book many years ago but can't make the connection - could you explain?
Yep, though I think a safety vest beats the mirror for me in terms of safety.
I know, but also, not every relationship completely self destructs on the way to a breakup. Giving the advice to cease all communication with all previous romantic partners as soon as possible indicates that there are some bigger interpersonal issues to work out.
Non Violent Communication, a language of life - Marshal Rosenberg
Rather unethical of this researcher fellow to test to see if they could publicly shame people. No IRB would ever approve this kind of "research"

"I wanted to see how many people would..."

This is what every researcher says to themselves and is exactly why real researchers at real research institutes are subject to human subjects IRB reviews.
And they will cannibalize your profits, up to 60%, if you start to make significant money. And they can kick you out anytime they want. It's all in the terms and conditions.
Alternate D4 Labelling
This is a traditional argument and I understand where you're coming from.

But look at where it got us. At every company where I've worked with data scientists, every piece of "data science" code is written twice -- once in Python, and again in another language. We had to hire at least one software engineer for every data scientist. There is an entire industry that targets "productionalizing" things written in Python by data scientists, because Python code is not production-ready code.

Python for education? Absolutely. Python for whiteboard interviews? Great. Python as a DSL for data science? Obviously. Python as a scripting language? Sure.

Python as a production-ready language for a growing company? I have spoken to people at lots of companies that started with Python, and then had to dedicate months or years for a full rewrite. And if they have people writing Python code, they have hired more people to rewrite that code immediately so it's not in Python anymore. I say "bye" to every interviewer who pitches me on a job writing Python: every time I have looked into an opportunity like that, it was an attempt to throw fresh meat at rewriting a creaky, unmaintainable Django monstrosity. This isn't me being an armchair philosopher, this is the industry around me.
I can't tell your thesis here.

I agree you can't expect people to provide full defense, and it doesn't sound like you disagree that helping people act more securely is important.

In my example, there's a difference between whether one sales person leaked their business numbers, or the entire 100 person department did. You train users to minimize the vulnerability even if you can't fully solve it.

If you agree that far - then I am not sure where we're disconnecting on this question.