skysight-inc/HackerNews huggingface dataset:
A Russian Operation Is Mining Bitcoin in the Arctic Circle for Cheap Electricity
2021 from a 22 years' techie perspective
Greens: Why we eat the leaves that we do (2013)
I'd never heard of this before so I searched it and the first result turned up this[0] (see lines 2-4/Exhibit A). Big jump from selling public domain images to seeking out payment for public domain images.

[0] https://assets.documentcloud.org/documents/3001353/Filed-Com...
It’s worth reading a bit about sshuttle. It basically leverages ssh into a simple one way VPN as far as ergonomics and user experience go (but the underlying implementation is closer to opening LocalForward connections on demand).

Highly recommended.
For anyone else who was confused: this is an ARM design aimed at supercomputers, and it is used in a recent system that topped TOP500.
eth uses an accounts model instead of the UTX model for transactions. Tis makes it much, much easier to trace payment flows.
"Stolen"? Government subsidized the nuke plants for much more than $47b. The $47b was extracted from ratepayers, but is not being returned to them. If anyone is stealing, it is the nuke plant owners.
c.f. Judges 12:5-6 (https://www.bible.com/bible/114/JDG.12.5-6.NKJV):

> The Gileadites seized the fords of the Jordan before the Ephraimites arrived. And when any Ephraimite who escaped said, “Let me cross over,” the men of Gilead would say to him, “Are you an Ephraimite?” If he said, “No,” then they would say to him, “Then say, ‘Shibboleth’!” And he would say, “Sibboleth,” for he could not pronounce it right. Then they would take him and kill him at the fords of the Jordan. There fell at that time forty-two thousand Ephraimites.
There is just as much signal in constant praise as there is in no praise, ie none. The only difference is that in the constant praise scenario you are expected to be happy and thank your manager for the "praise".
Conservatives are for minimal regulation and corporate freedom to act unless it works against their favor in which case screw private property.
Driving tours like that are an amazing way to travel. It takes away that feeling of needing to jam in as many things as possible and you can just live and take in the sights for a while.
You guys are all so weird in your responses to this, lol.

This has nothing to do with the first amendment, or free speech or anything like that. It is simply regulation around an industry.

We regulate all sorts of industries. Food gets regulated in the name of public health, cars get regulated in the name of public health, broadcast TV gets regulated in the name of public health. All sorts of stuff. In fact I'd say that government regulation has become the rule, not the exception.

The argument here is: suppression of dissenting opinions is bad for public health. That's all. No "freeze peach" arguments, no first amendment (or citizen united haha) arguments. None of this craziness. It's just government finally coming in to regulate how these GIANT corporations operate their business, JUST like every other business gets regulated.
you can install this > export backup to JSON > import to pass-otp and you have 2fa in your command line and phone
IMO you get accustomed to single statement-braces very quick and they leave less room for errors.
Not the OP but basically imagine that instead of locking a mutex to handle synchronised writes, you spawn a goroutine which just reads from a channel and writes the data.

If that goroutine hasn't finished processing then the channel will be blocked, just like a mutex.

So in your handler you can use a select statement to either write to the channel OR read from the request.Context().Done(). The request context only lives as long as the request. So if the connection drops or times out then the context gets cancelled and a value is pushed onto the done channel and your read is unblocked.

Because you use a select statement then which ever operation unblocks first is what happens. If the write channel unblocks then you get to write your value. If your request context gets cancelled then you can report an error. The request context will always get cancelled eventually, unlike a mutex which will wait forever.
Totally agree with you. However, in my head it was, "hey lawyer, what should we do to protect ourselves against breaches by our vendors?" Lawyer thinks, well, we do due diligence for M&A, financings etc. etc. so why not for onboarding vendors. Course, now this process is codified into law.

I have an idea for a better way... :)
Where, specifically, has the per-student education budget been "slashed"?
Sony Playstation PS5 Blu-ray Disc Edition Console New *Free Shipping* Only 880$
oh man so it was true. our greatest fear is being realized now.
Modern large corporations are just an more inefficient, less effective paperclip maximizer, with humans gumming up the works.

Google is striving hard to remove the "human" part of the problem.
At SerpApi, we'll be happy to sponsor this! Reach to me via email julien _at_ serpapi.com.
Point 1 is great, point 2 is disastrous. Yes, we need a new email protocol, it has to be simple, cryptographically sound, it must weed out the concept of spam (there are great ideas on this subject, like the cost-based anti-spam systems[1]. We do not need more attack vectors like a JS based chart library. You can render charts as static images without running any code on the reader side. Some days, I wish there was a LaTex based email that did these.

https://en.wikipedia.org/wiki/Cost-based_anti-spam_systems
I use a similar method for error handing, using the derive_more crate to avoid the boilerplate. I really wish that the error messages for standard library operations, like opening a file, were more descriptive. It's a pain to have to wrap the error with the filename ever time you do an IO operation.
Toxic positivity seems to be a major method of communication for human resources.
Twitter threw the President off their property after LARPing as Caesar and pretending their lawn was the Forum of Rome.

There’s a good case to be made that Twitter isn’t Caesar and their lawn isn’t the Forum of Rome, there isn’t a good case to be made that their lawn is actually public property and should be treated as such just because they spent a decade deluding themselves and others.

Social media isn’t a utility either, and no one has yet to make a case why Facebook and Twitter specifically should get special privileges and powers by society when they are in fact just corporations. Somehow or other we don’t treat bank lobbies like utilities and they are arguably even more important to society than 280 character text messages with funny moving pictures attached.
On my network? Absolutely, ability to inspect packets is absolutely essential. On a public network? Different story.

I’ve personally been engaged in incident response and in many scenarios DNS is a control mechanism for malware, or uses it for various purposes. It’s often a key piece of evidence for reconstruction of an incident.

Raw IPs can be used as well, but that doesn’t negate my point.
Couldn’t agree more, the transparency is key. It enables faith in the system and outcome.

The counter argument to transparency will be that it provides too much information to those who aim to build phishing sites not blocked by the filter.

That said, we’ve experienced systems in which obfuscation wins out over transparency and it would be nice to tackle the challenges of transparency.
Conservatives (Authoritarians) are for laws that constrain others, but not themselves.
Oh, yes, nothing important! Not only do I keep lots of backups, but the laptop is very much a secondary machine to my desktop, especially in the age of COVID. All I lost was the few hours it takes to reinstall my apps and such. :)
Ethereum is like a real world PVP system fought with real money. And I wouldn't have it any other way.
I forget that this is how Apple's operates. I can just see a bunch of software that is really popular on Mac (e.g. image + video processing, 3d) that could get a massive speed boost with unfettered access to these instructions. Their library ain't going to cater for a fraction of the useful stuff that a matrix coprocessor can do.
Leaving aside the strangely bigoted comment about religion, his argument about Rust securing all memory bugs is vapid. As anyone acquainted with high-performance networking code in Rust has seen (remember the Actix fallout?), it's very hard to do a great many things without unsafe Rust. I'd much prefer a deeper discussion about a) how many of these bugs are actually important in practice and b) how a few of them would be solved by idiomatic, safe Rust. This article doesn't do either and doesn't answer the question in its own title.
Icon packs are coming [1] and you can set your own for the more niche sites.

The problem with querying websites for their icon is that it leaks data about you (your phone and desktop) to a third-party without a proxy, requires a domain to match against, and like with Authy, the icons go out of date and become inconsistent. Worst of all, you have to give network access to the entire app for a trivial feature, making it less secure and trustworthy. Offline icon packs that have a consistent look is a good solution to all of this. [2]

[1] https://github.com/beemdevelopment/Aegis/issues/509

[2] https://github.com/aegis-icons/aegis-icons
Another crate to mention - eyre and color-eyre, basically a port of anyhow but a few bells and whistles, and an awesome colored error report formatter.

https://github.com/yaahc/color-eyre
Previously discussed:

https://news.ycombinator.com/item?id=25767330
Shout out for FPC/Lazarus - so underrated, and too often ignored. Like Delphi, but for free. If you want native binary GUI apps for multiple platforms it's great. And I can confirm it works very well indeed on the M1 MacBook Air 8GB base model too (for developing apps; I didn't need to compile the toolchain personally).
Very cool to think about the spatial properties of composition like hand position changing as Beethoven went deaf. It suggests there's broader discoveries to be made in finding the patterns underneath things we thought we already understood.

Also love the author's insight that one can work on the technique of composition before turning on her hearing aids and being able to hear it, using her deafness as a sort of focus superpower.
Can we have an ant army already!
It should go RPN when holding the phone upside down. ;)
Probably when the ratio of bad sites to good sites at a particular subdomain level passes a threshold.
TFA is a github page, friend. If you truly care about compromise as stated, just build the add-on from source. No reason to point to nonexistent future threat vectors.
KYC exchanges don't really exist anymore because they were abused in 2017 and thus either forced to close or comply with regulation (such as the wannacry ransomware virus, in which the criminals laundered their BTC into monero on shapeshift, which at the time had no KYC). Second, cross-chain exchanges may not be possible in a fully trustless manner.
I like my feedback in cash, if you like my work give me more money, I seem to be in the minority though.
It depends on the program domain, but I think it must have been quite fun designing a game as opposed to the client still doesn’t know what it wants and this API should instead do this.
I think this is the bill https://www.legis.nd.gov/assembly/67-2021/documents/21-0594-... (Why don't they link the bill they're reporting on!?!?)

This seems to be the crux of it:

> 2. If an interactive computer service provider restricts, censors, or suppresses information that does not pertain to obscene, lewd, lascivious, filthy, excessively violent, harassing, or otherwise objectionable subject matter, the interactive computer service provider is liable in a civil action for damages to the person whose speech is restricted, censored, or suppressed, and to any person who reasonably otherwise would have received the writing, speech, or publication.

Later (6a) it seems to specify that it's

> material that the provider or user considers to be obscene, lewd, lascivious, filthy, excessively violent, harassing, or otherwise objectionable...

Soooo, what's the point of this? If I am a provider and I personally consider Trump to be "obscene, lewd, lascivious, filthy, excessively violent, harassing, or otherwise objectionable," then I can ban him without being affected by this bill, right? Does anyone think Twitter or FB or any of these groups banning Trump didn't find him objectionable?

Am I completely misreading this?
Ok, I've truncated the title. Is it accurate now? I can't really tell from a quick look.

The submitted title was "Python infrastructure DDoS ongoing since day after SolarWinds hack revealed". Submitters: it's against the site guidelines to use titles to editorialize, so please don't do that.

https://news.ycombinator.com/newsguidelines.html
Nvm, on Telegram X under Privacy and Security you can "Delete Synced Contacts".
> Citizens United is about corporations being guaranteed First Amendment rights including the right to speak via money

Citizens United reaffirmed corporate personhood and the Constitution’s protection of all persons, natural or legal. But that is old case law.

The novel part was ruling that “independent political spending” counts as First Amendment protected speech.
I did the analysis and looked at the costs of a security questionnaire. They run anywhere from $250-$4500 each. The main problem is that there has become a race to longer and longer questionnaires. "Oh, your questionnaire has 1000 questions, I am going to make mine 1100!." I like the author's intent here. Maybe 10 questions is a little short, but let's end the gaming of this process and keep it straight forward. As one commenter noted, some of this information is confidential and should be obscured, not sent around via email attachments to people who may or may not enter into a contract at some point.
Authy now adds the site logo automatically. If not, you can search one up in the app
What type of connection are you on? Is it DSL or fibre. If it's copper then my guess is that there is a device (like a heating pump) that's on a timer with a big switch thats creating a pulse of radio noise that's then echoing up and down the copper and pushing the session out of bounds. At that point the far router (in the dsl box on the road) will try and resync the connection.
Docker with Intel images = `--platform linux/amd64`
It is so weird that Intel and AMD blew their headstart so badly. I see so many players who come up with ARM implementations that come close or even exceed the performance / energy envelope of Intel/Amd.
What he means is that NSA and related has the ability to MITM HTTPS while another actors do not, probably.
> left to explore with regard to applying algorithms correctly.

Yes, and even just a trade-off based on context for where it will be used.

I've realized that lots of libraries I use are generalized (by nature of being an OSS lib) so they aren't going to be hyper-refined for my particular use case.

Usually an OSS lib will be better than something you can write in a day but if something is part of your product's competitive advantage, then you will probably be able to make a more optimized version than an open source lib.
Performing horizontal eye movement exercises can boost your creativity (2009)
I couldn’t care less of it.

Everyone ignores their political mini-rants or whatnot. It’s completely irrelevant to the discussion; especially this one.
I am so embarassed of my ignorance
Hey there, thanks for Aegis, it is my main OTP vault for important suff.

Thank you and your sibling comment. I'm glad this is being worked on! Discovery is also important IMO, so a one-tap install of the most widely used icon pack would be nice to have too :)
One function could be below another and have arbitrarily derivative. Even if they are both smooth: f(x)=sin(e^x) and g(x)=1.
Have any of the smart contract exploits actually been litigated in court, even if unsuccessfully?
The Cabal sounds great and I'm looking forward to try it.

I'll pick the projects carefully though, as it's impossible to ship more than two products with this methodology.
As a manager what every report wants is to be genuinely listened to by their manager. If you make the effort to really listen to what your report has to say you don’t need to worry about praise or other feedback.

The downside is real listening is incredibly time consuming - I struggle to get under 60 min per person per day (not all at once of course) without compromising its effectiveness.
I gave him a really nice tip :)
> As the article says, it’s the conclusion that’s what’s good for FAANG isn’t necessarily what’s good for your average project.

This, stop doing things just because google does them. You don't have google problems.
> AFAIK there aren't many (or any) renegade theoretical physicists/mathematicians working on teams at the LHC or ITER or similar sized projects, as an extreme example.

the research productivity at LHC and ITER is extremely low. I wonder if these are correlated?
The same vendors that can’t be bothered to port their software to a macOS released in the past three years, require us to run 32-bit apps for plugins and DRM dongles, and refuse to implement platform-native Metal in games because twice the performance of OpenGL isn’t worth it to them since they perceive Macs as being slow?

Somehow I doubt it. But hey. Maybe M1 will change their minds. Maybe something more powerful will. A 27” iMac that can play FPS games at 60fps/5K/HDR with virtual Atmos surround out of the box? Near-effortless console porting to a future Silicon AppleTV, with gameplay compatibility across both devices? They’ll realize what they’re missing out on eventually :) But they’re not going to code M1 assembler until they do, and it’s easier for them to use Apple’s frameworks than play games with the CPU.

(Yes, ffmpeg will probably do this. Good for them! And I’m sure Adobe will give it serious consideration - and then reject it, since it would get their apps rejected from the app stores and harm their relationship with Apple.)
I would classify this (and much of the current discourse about mis/disinformation) as "not even wrong".

It's difficult for me to express my thoughts on the matter without writing a huge, unintelligible screed.

The author, like many others, considers misinformation a disease that can be cured by using authority to administer objective information.

I feel strongly that we no longer have any choice but to accept all information is based in trust. This is not meant to be a metaphysical statement. Perhaps at the metaphysical level, objective truth exists. Regardless, at the scale society needs to verify information, objectivity is inaccessible.

Consider how long it took Russel's Principia to add 1+1. For the claims we encounter in our everyday lives, an appeal to objectivity will only add another layer of obfuscation.

In the case of current crisis in the US, the government claims that the crisis is an attack by the Russians. Perhaps this is true on a superficial level, but the attack is only possible because sources of power in our society abuse that society's trust so heavily. This isn't only limited to the government, but the entire structure of power.

The Q conspiracy is on its face absurd and easily contradicted by reliable observations. Why do adherents engage in it? At some point when you're surrounded by lies on every side and no way to understand your environment, your brain just melts.

Unfortunately there is no sign that society will even stop digging itself into this hole.
I'm pretty sure I've done this before... Maven is generally nothing more than some plugin executions with default configurations bound to specific phases. Both `surefire` and `failsafe` plugins allow you to configure the pattern of files executed (via `includes`). So you should be able to easily configure three executions, all with mutually-exclusive file patterns, one unit-test and two integration-tests. And you can choose whether or not to bind them to phases or run them manually.
Is it ok to take d in the morning and k2 in the afternoon?
Magnesium?
I think you mean 2017? 2007 is when the feature launched.
The scheduling system is more than just silly, it is actively harmful and not based on empirical research.
Yeah that's a fair question. I had a bad personal experience with them, but I've also seen plenty of issues too. There was a big one a little while ago about how Digital Ocean destroyed somebody's entire company by banning them with AI: https://news.ycombinator.com/item?id=20064169 Original Twitter thread: https://twitter.com/w3Nicolas/status/1134529316904153089

In their defense they acknowledged it and some changes. I can't find the blog post now so going from memory. But that only happened because he got lucky and it blew up on HN/twitter and got the attention of leadership at DO. How many people have beenh destroyed in silence?

In my case, Digital Ocean only allows one payment card at a time and my customer (for whom the services were running) provided me with a card that was charged directly.

A couple months later my customer forgot that he had provided the card. He didn't recognizer "Digital Ocean" and thought he had been hacked (which has happened to him before) and called the bank and placed a chargeback.

When DO got the charge back they emailed me and also completely locked my account so I was totally unable to access the UI or API. I didn't find out about the locked account until the next day. I responded to the email immediately, and called my customer, who apologized and called the bank to reverse the chargeback. I was as responsive as they could have asked for.

The next day I needed to open a port in the firewall for a developer to do some work. I was greeted with the dreaded "account logged" screen. I emailed them begging and pleading with them to unblock my account. They responded that they would not unlock the account until the chargeback reversal had cleared. Research showed that it can take weeks for that to happen.

I emailed again explaining that this was totally unacceptable. It is not ok to have to tell your client "yeah sorry I can't open that firewall port for your developer because my account is locked. Might be a couple of weeks."
After a day or so, they finally responded and unlocked my account. Fortunately they didn't terminate my droplets, but I wonder what would have happened if I had already started using object storage as I had been planning. This was all over about $30 by the way.

After that terrifying experience, I decided staying on DO was just too risky. Linode's pricing is nearly identical and they have mostly the same features. Prior to launching my new infrastructure I emailed their support asking about their policy. They do not lock accounts unless the person is long-term unresponsive or has a history of abuse.

I've talked with Linode support several times and they've always been great. They're my go to now.
Yes, I understand. But a lot of the time people express feelings indirectly, and it's pointless to try to change everyone's communication style. So people sometimes use praise if they're happy about something, or whatever, and I interpret that in a way that suits my well being.

It's just part of the communication style of someone, or even part of a culture of a country. If it bothers me, and it is the relationship I care about or looks to be long term, I may ask the person to communicate differently with me.

But most of the time I get praise from random people on the internet, and I just interpret it that they are grateful for my contributions, regardless of what they say.

Sometimes they want something from me, and are probably not comfortable with just asking for it, so they pad the communication with some praise about the software or me. Some state that they're uncomfortable asking for help more directly, some just add praise at the beginning/end of each reply. (which gets kinda strange after 3-4 interactions :))

It's nice if someone communicates more directly, but I can try to understand the other people, too, regardless of communication style.