skysight-inc/HackerNews huggingface dataset:
Fake 2FA works if it's stateless, eg entering a code from Authy or a physical token.

However, stateful 2FA like sending an SMS to your phone, or popping up a notification on your banking app is much harder to spoof, and would have protected the user here.
I suspect that extensions on the App Store that are popular make more money compared to being, well, free on Chrome web store. Or, developers are pricing their extensions to recoup costs on dev program costs.
Its actually wasn't. If you actually look at the cost involved. Putting all the funding into Shuttle simply made the Apollo architecture to expensive.

A much, much, much, much better strategy would have been to keep the Appollo hardware and evolve it. Plan for 1-2 Saturn V flights every year. Use the F1 engine on a smaller vehicle (like Saturn 1B) and use that vehicle as the work horse for both the military and NASA.

This would have allowed them to mass produce the engine, reuse the same pads. It would have given them much more capability compared to Shuttle and it would have been considerably cheaper.

It was bad engineering choices, not simply the budget. They cut the wrong things.
This still works. It’s just more focused on giving stuff away in your local community than whoever is scouting Craigslist and willing to drive.

Probably trying to foster tighter built communities instead of some guy that drove 20+ miles away to pick up your old monitor that you’ll never see again.
Well no. If a customer pays with cash, a cashier can take payment for something without actually ringing it up. The sale never enters the computer system. Even if you audited the shops inventory, you'll nearly always discover some products are missing, but that doesn't prove employees have been stealing; shrinkage has a variety of causes (shoplifting, damage, was never actually delivered, etc.)

Regardless of theory, pay attention to where cameras in corner shops are pointed and I think you'll see what I've often seen: the cameras are primarily positioned to watch employees.
Exactly. If you have a MacBook with two ports and you use only one, the mere presence of the second port has no effect on your life. But if your MacBook only has one port and you need two then it's an actual inconvenience. It's not like we're paying per port of like they are adding weight. It's not cars where everyone's insistence to have cars that can do everything at once leads to some SUV monstrosities which are compromised in many ways, it's a laptop where having literally a modicum of extra functionality has no negative sides whatsoever, I guess apart from people on the internet saying they don't need them so they shouldn't be there.
If you think that’s creepy check out Microsoft Delve.
Swarm: A new generation of group conversations
> Not bartering, not first-come-first-serve.

This reminds me of a personal policy I have with friends and acquaintances. Nobody ever “owes” me a beer. If I buy them one that’s the end of it. We are always “even”.

I don’t assume others work the same way so I also attempt to return favors. I think it’s a healthier frame of mind to not keep track of all the ways people potentially owe me something. Especially when it is trivial.

If I am keeping track I think it’s worth reevaluating the relationship entirely.

Or said another way I can see this policy working for Buy Nothing because it requires a healthy community. If the community is unhealthy the system breaks down. This reverts to any number of other perfectly good money/barter based alternatives like Craigslist and clones.
>"These things have the benefit of enabling you to get to know your colleagues, establish networks, break down communication blocks, etc."

Frankly simple work related interaction were more than enough for me to "get to know". If both parties felt interested enough we'll hook up out of work. At least that was my experience.
I don't know how I didn't think of this. I was just wondering if there was a way to filter Craigslist down to just local (<2 mile radius), but street-free works perfectly.
> your profile details including your email address and phone number, and a detailed analysis of what you were wearing on the call. (I may have made up that last one.)

I think it's annoying the author chose to throw in a joke about the very point he is trying to make - that what is tracked is excessive. Or maybe this is "whoosh" over my head and I missed the point.
It's like watching a kid who hasn't done any work for 4 years desperately cram the night before the exam.
That was it - I knew it had perfect in the name but man that search is just all sorts of useless
That's an interesting idea, but I think what proof-of-work (and -stake) provides is an effective Sybil-proof identity system, which your cosmic slot machine wouldn't.

To use a slightly different analogy, imagine that the pulsar variations determined the outcome of a cosmic roulette wheel. What is to stop miners from "betting" on every possible value on the wheel? If winning a spin gives the right to mint some new coins, then the only reasonable strategies would be to make such a blanket bet, or to never bet at all.

Perhaps, though, your system could be coupled with a system that restricts participants to one (public key) identity per IPv4 address. The cosmic roulette wheel would then pick a participant at random who would mine the next block and receive the block rewards.

I feel like there must be a flaw with this design, other than the fact it rewards hoarders of IP addresses. Perhaps the biggest problem is building a device which can run anywhere on Earth and measure variations in a pulsar, but there must be other globally-measurable random number generators that machines could cheaply reach consensus on.
> Sea Shanties are a big TikTok meme right now

... and on Twitter too ;)

[0] https://twitter.com/elonmusk/status/1349466269121179653

[1] https://twitter.com/search?q=sea+shanty+OR+seashanty+OR+seas...
It is so tiring to be in an endless circle of people trying to find a new way to reach for more than they should and having to wait years for the common sense to become fact...

There really shouldn't be this much delay between tech advancing and legal frameworks figuring out how the old rights apply to our new environment.
Your response is deeply unreasonable. Here’s a quote from Stephen’s thread,

> “ Unlike other economic activities, the bitcoin scheme produces absolutely nothing for all this waste. It is a pure speculative activity of people gambling on the random movements of prices and the only output is simply shuffling numbers around in a computer at insane cost.”

That is nothing but complete grandstanding decoupled from reality. It deserves to be criticized with pejorative language because Stephen’s comments are so wildly extreme, inflammatory, and totally disconnected from facts or reality. It meets the literal definition of a rambling screed and needs to be called out as such.
I don't get it.

1) People on HN say the person isn't educated, so you link her degrees in varying fields (not statistics or epidemiology).

2) People on HN say that those fields are irrelevant to her work, so you explain their relevance to the field of statistics.

3) People say on HN that credentials don't matter as long as you're doing the work of a data scientist, at which point you declare the importance of a relevant degree to the field.

So, which is it that draws importance? The college-level education of any kind, or the credentials that establish the doctor?

I find your opinions to be largely at-odds with one another.

Personally : I don't care at all about credentials if the quality is there. With regards to this specific case, i'll wait until the facts are in -- but it rubs me the wrong way that authorities don't want to speak of her charges even though she's available and willing to cooperate from what I read in the article.

P.S. I share your pain with those that edit comments in a dishonest way post-reply. It's a real problem on HN.
They were a communist single-party system, with properly rigged elections, leaders handpicked by Moscow from the finest Moscow communism schools and a watchful oversight from Moscow. Not just the citizens were kept in line with the rest of the communist block by troops from other communist states, that applied to the leadership as well. Prague spring was the czech leader Dubĉek trying to introduce reforms, angering Moscow, who then invaded and put a stop to that reform nonsense...

The GDR was a dictatorship good and proper. They just avoided giving the impression of having a single leader by speaking through the politbureau. And the local dictators were controlled by the ones in Moscow.
There are number of issues with this report. The AWS networking section is particularly problematic and in need of extensive disclaimers or changes to the test methodology.

On the throughput side, all this test does is demonstrate the documented[1] throughput limit for a single TCP connection. 10 Gbps if the two instances are in the same placement group and 5 Gbps otherwise. The reason some of the network-optimized instances were "slower" than the non-optimized ones was because it was simply a random draw of whether both instances in the test were physically close to each other.

If they wanted to do a proper throughput test they would have used placement groups and multiple connections/flows. If they felt like the single flow test case was important they should have mentioned that AWS has a specific limitation around this. Personally I don't think a single flow test case is particularly realistic.

The fact that the obvious discrepancy between their results and the documented (multi-flow) limits didn't cause them to dig deeper is enough to make me very skeptical of the purpose of this paper.

The latency results are also basically a random spread. It is essentially distribution of all the different latencies you might randomly get between two instances if you don't use placement groups. It says absolutely nothing about the networking capabilities of different instances used in each test.

1. "Single TCP flow is limited to 10 Gbps for instances in the same placement group and 5 Gbps between instances anywhere else." https://docs.aws.amazon.com/whitepapers/latest/ec2-networkin...
Did Google remove the link to the Parler site from its search results? I am sure I was able to just google it a week or so ago, when everyone became obsessed with it. If so, that's the level of censorship that doesn't get reported.
It's worth noting I-Space [1] and Galactic Energy [2] both mostly use solid fuel, with Galactic Energy's Ceres-1 continuing tradition with a highly-toxic hydrazine stage. Those "new space" companies will struggle to re-use their vehicles with such technologies.

Rocket Lab, Virgin Orbit and SpaceX Falcon use keralox (re-usable, with some coking issues), and Blue Origin and SpaceX Raptor uses methalox (cleanly re-usable).

All those providers (except Virgin as far as I know) are pursuing re-usability and SpaceX and Rocket Lab are succeeding at recovering the first stage (with SpaceX far ahead at actually re-using them).

[1] https://en.wikipedia.org/wiki/I-Space_(Chinese_company)

[2] https://en.wikipedia.org/wiki/Galactic_Energy
ARIN Reverse Whois ties the IP block to LACNIC, out of ... *edit not Belize, when I checked Montevideo Uruguay
Rock Music and the Fall of Communism
Now that the post isn’t flagged, yes, I can: the two dates are correlated in time (one day apart), begging the question of whether or not anyone else had noticed that and whether or not anyone else had noticed similarly correlated reports of outages in what could be considered to be key infrastructure in the academic and business community.

I was trying to pip search for a library, and not being a regular python user, first became aware of this through the pip error message.

Read through the status page and was amazed that the issue was going on for so long. Also, I thought I remembered that Solar Winds attack was revealed around then. Did a search, it was the day before.

Nothing in the status page indicated having reached out to law enforcement to assist, which also struck me as odd, but whatever.
Yep - that was it - and honestly for home use may be a much better option than the big boys like ZFS et al - especially if most of your data is backed up on the original media and in millions of stores nationwide wide (DVD rips, etc).
How Bilibili Could be a $200B Business in 10 Years
It’s important to remember every laws has trade offs, including patent laws. Perhaps patents stiffened e-ink but OP seems to have issue with patents in general which it would be hard to argue universally prevent innovation.
I personally find Teams to be an abomination.

I asked my wife the other day, who isn't familiar with Slack or Teams, to look at the interfaces and tell me how to IM an individual. She glanced at Slack and pointed to the list of users. She looked at Teams and said "I have no idea".

Slack practically invites me to reach out to people. Teams OTOH makes me want to send an email. Now you can add this tracking to the list of things I detest about Teams.
I'm fairly confident I did that. Either way, the process is very unclear - what actually notifies Safari that an extension is available and whether it's updated?

With most browsers it's clear, you open a specific file with the browser, the browser loads it and that's it. To update, you open the updated version of the file.

With these apps it doesn't even seem like the app itself is doing any work - there's no code in there to for example connect to an internal socket or do some IPC to notify the browser and supply it with extension files - instead it seems to be handled out-of-band by "magic".
It looks like the website is proxied via a DDoS protection company called DDOS-GUARD https://gwhois.org/190.115.31.151

It looks like the website is being served from an Ubuntu server running nginx/1.18.0 https://parler.com/404
unsigned by who? They mention the signing process in this comment but it sounds like unless its signed by a 1st party (Apple) it doesn't show without diving into options.
If you have the skills to repair a TV you can get a good job. There are electricians making more than lawyers here.
> Epik.

It looks like Parler transferred their domain name to Epik (as a registrar), but are not currently using them for hosting.

As recently as a few days ago, Epik explicitly stated that they have no plans to host Parler (https://mynorthwest.com/2461882/sammamish-epik-parler/). That said, since the site is behind "ddos-guard.net," it's difficult to tell who their actual host is.
The code in question was re-licensed under GPL without the author's permission. And according to the BSD license, the copyright must remain intact. A person can use BSD licensed code in a larger work under GPL or they can put the modifications under GPL, but they have no authority to change the original BSD license.

The belief of being able to re-license BSD code is quite prevalent in the Linux community and is often espoused here on Hacker News.
Just here to say A Memory Called Empire is an amazing SF novel. At first I was like wait is this article picking up my amazon history from nefarious cookies? Nope, OP author just agrees.
Thanks. I've been wanting to check it out but put it on the back burner. I'll revisit it at some point.
I'm betting they host on Mindgeek then get some racks from Oxide on the downlow and Brian Cantril gets all ranty.
They can also fire you. Even in countries with stronger employee protection laws, not complying with office building rules is probably sufficient grounds for termination.
> Einstein reports Hume's influence on him and says that without Hume it's possible he would never have come up with relativity. That's as solid evidence of a link as could exist.

I see what you're saying. If Einstein attributes his thinking to Hume's influence, nobody can deny it. That's true of admissions in a court of law, however, our understanding of how scientific ideas are generated lacks the same certainty. Personal reflection is no guarantee of insight into the formation of ideas.

Einstein's acknowledgement of Hume as an intellectual predecessor tells us he admires Hume. It doesn't tell us where Einstein's own thoughts came from. Our knowledge of neurology isn't advanced enough to draw that conclusion.

https://www.scientificamerican.com/article/there-is-no-such-...
What company provides connectivity to Epik?
That sounds amazing. Right now I am just learning about CNNs and I just bought a gaming laptop specifically so I wouldn't have to rely on Paperspace and vast.ai for everything.

So at the moment I am probably going to try to take advantage of the laptop a bit more. In the future if I have a contract or am trying to get a ML contract I may take advantage of some of your features which sound like a big advantage. How does the detection and automatic saving of models work? Seems pretty hard to do that. Does it work with the latest keras for example? And so I can just skip down to the cell that uses the trained model? To be honest I haven't used it much but I guess I thought if I committed the docker process after doing the training then I would already be able to use the trained model when I ran that image again.

My real goal is eventually to actually build a relatively novel real-time computer vision system for a simulated robot. So at some point I am not sure that Jupyter is going to be right. But I like it so maybe I can stretch out it's utility.
The nameservers point to Epik, so at least the DNS is run by them. The actual host is behind ddos-guard, so they may/may not be hosting the data with them or another provider.

As Epik seems to focus on shared hosting, and LAMP stack style applications and parler was using a proprietary DB in the last offering, they might reasonably have the actual hosting somewhere else.

Edit: Typo
IntelliJ is pretty excellent. And one of the things I like most about it is that it has excellent Emacs-style keybindings
I don't fully remember, this was over a year ago. But the entire process put me off making Safari extensions for a long while.
I just bought an InkPlate. It's a recycled Kindle display on a board with an Arduino, Wifi, SD slot, and even a couple of capacitive touch spots on the board for interaction. Can be programmed in C or MicroPython, or switched into "peripheral mode" (I might have gotten that name wrong) and glommed onto a Pi or whatever.

It's very cool, about $100. https://inkplate.io
comes up on duckduckgo.com DEAD on google.com
If you look up definitions for dictatorship, few insist on the single leader (vs a group of people) and quite a few explicitly include a party as the group wielding power.
There is one case I know of where Emacs (via Cygwin) has performance issues on Windows: listing directories in remote volumes. Per StackOverflow [0], dired is slow because `df` is slow on NTFS. So, you can eliminate df to speed up dired by a lot.

`(setq directory-free-space-program nil)`

0: https://stackoverflow.com/questions/26128693/emacs-dired-slo...
That’s not true, because I’m the original author of ObjectMeta and I did it in golang. :)

Half of the point of Kube is that every object looks similar enough that you can deal with them generically. ObjectMeta is what enforces that, so yes it’s OO, if there was only one base class possible and no inheritance. The ObjectMeta as an interface construct exists for performance reasons in Kube vs the reflection we used early on (which was mostly due to people learning Go and dealing with limitations of the language as we rapidly prototyped new ways of building out our object patterns).

A prototype of kube was done at google in Java, none of that survived translation to the open source project (edit: or was rewritten prior to v1 as we matured the subsystems that replaced the basic concepts in the day 1 project, like clients writing directly to etcd). Many of the early authors had lots of Java experience, but there was never any attempt to bring Javaisms into Kube or any Java to be converted, just conventions.

EDIT: actually, metadata/spec/status is more a repudiation of Rails and the active record style “hundreds of properties with no organization” JSON apis. We wanted to clearly separate metadata (common), spec (desired intent), and status (actual state). That led naturally in go to an embedded struct for ObjectMeta and then the interface for getting access to the generic properties on any object.
New killer app makes millions on the App Store
This isn’t going to be about who hosts it - it’s going to be about who provides transit to the host or beyond that DNS with ICANN or the IP(s) with ARIN/RIPE/etc.

The cancel culture incites a mob to promote digital violence who contacts providers until those outside of mobthink are deplatformed.

It’s a funny, emotional and sad time we live, but definitely regulation is right around the corner. The question is whether or not we the people migrate to decentralized technologies before regulation makes it illegal.

Switch to Handshake [1]. Host on Tor [2]. If we have critical mass before regulation banning decentralized technologies comes into play - we will win [3].

[1] https://handshake.org

[2] https://tor project.org

[3] https://youtu.be/Q3QbXMFjro0
My friends and I more or less trade off on paying for food at restaurants. It's not calculated, but over the long term of switching off paying for various meals of various costs, it should mostly shake out to be about even, and mostly just reduces hassle when we get the check.

I think there's a lot of value in even just taking turns in giving and taking, even if you aren't tracking the exact dollars and cents.
What does this mean and why is this Brian guy allegedly throwing a fit?
bringing highly debatable very recent political event into a conversation like this should be inappropriate
Apple devices (both Mac and iOS) use something in between those two approaches. To oversimplify a bit, they store a record on disk that contains the full-disk encryption key, encrypted with the user account password on macOS, or passcode on iOS. So the password serves as both an OS authentication mechanism and the equivalent of a BitLocker password.

As a result, it's not vulnerable to this type of attack: even if you get code execution on the login screen, you can't decrypt the user's data without their password. (If there are multiple users, any user's password will work.)

Traditionally, this meant that if you enabled FileVault on Mac, the first login screen you'd see when booting was actually part of the EFI firmware rather than the OS itself. It couldn't boot the OS until it knew some user's password in order to decrypt the main partition. On iOS, and on macOS as of Big Sur, the immutable OS is separated from user data, so the login screen is part of the OS proper.

Caveats:

- On macOS, this only protects the first login screen. Once you log in, the key stays in memory until the system shuts down, even if you log out or change users. On iOS, some files are like that, but other files are encrypted under a different key which is thrown away whenever the device is locked. [1] Hopefully that comes to macOS in the future.

- If you're using a weak password, such as the default six-digit passcodes on iOS (there's an option to use a stronger password), it would be trivial to brute force the password, so security effectively degrades to what you call the second approach. The security coprocessor will limit the maximum number of attempts, so attacks like this one won't work, but if you compromise the coprocessor then it's game over. And people have.

[1] https://support.apple.com/guide/security/data-protection-cla...
>If you are keeping track I think it’s worth reevaluating the relationship entirely.

This is a tough one, I've met many different cultures (although, in particular Slavic ones, sometimes Dutchies too) who really cannot stand not having the balances settled. Few of my friends who I'm very close with will still just want common things to be evened out as soon as possible. I don't think you can make a rule out of it.
Maybe look into buying a few hours of therapy.
Saying it's online is misleading. It's just a static landing page.