skysight-inc/HackerNews huggingface dataset:
You can totally trust phone companies to "do their job right". You need to understand what their job is though.

The Telcos never signed up to being a "secure verification code provider". Almost a decade ago, the local Telco industry group told us all:

"SMS is not designed to be a secure communications channel and should not be used by banks for electronic funds transfer authentication,"

https://www.itnews.com.au/news/telcos-declare-sms-unsafe-for...

Any company that uses SMS for 2FA is offloading risk and security to an industry that never expected it, and explicitly seeks to not provide it.

A Telco _desperately_ wants to be able to get you back up and running (making calls and spending money) on a new phone using your existing number before you walk out of the shop. And even more, they want to be able to transfer you across as a customer from a competitor - and have your existing number work on their network.

"Sim Swapping" is a valuable feature for Telcos. They have significant negative incentives to make it difficult. They don't want to secure your PayPal account, and nobody (least of all PayPal) should expect them to do a good job of it, certainly not for free...
6 years does feel too long, but it does seem like a case is still making its way through the courts. The former governor (and other officials) just had charges against them announced a few weeks ago: https://www.cnn.com/2021/01/14/us/michigan-flint-water-forme...
The AWS API is just fragmented. Too many teams that probably didn't communicate very closely. That being said, you can sort of follow the logic - or the multiple logics.

But that's really the only negative.

I'm trying to find a single term to describe all of Azure, and I'm having difficulty with it. Sophomoric? Like a place where the leaders are a bunch of B-class players, who lead all sorts of C-, D- and all the way down to Z-class characters.

And hopefully you'll never need support with Azure, especially urgent support, because it's atrocious.
And understanding what you're interested in. In spite of having an MBA, which has been at least somewhat useful (if only for being nearly a requirement for a somewhat different than today PM at the time), I've never had a great passion for managing people. And a semi-tech IC track has been fine for me through various iterations. And I've also done OK--at least enough--largely sticking with companies for many years. There are probably other paths that would have led to bigger paydays (or not) but I've been fine.
Ehh, I worked there on online services before Azure even existed and it would have been career suicide and an enormous legal fight to use anything outside MS's stack--IIS, MSSQL, COM & C++, then .NET. Hotmail got away with it for some years because they were an acquisition.
For all it's outdatedness, Bitcoin is actually used as a currency, but typically for high value items such as real estate or private jets, as the fiat mechanisms to transfer large amounts of money, especially across borders can be terribly unreliable and costly. Bitcoin, even used in its largely original form, can be (and is) used to transfer arbitrarily large amounts of money anywhere in the world, conclusively and trustlessly, without intermediaries, within an hour, or more typically ten minutes.

There has never existed a currency that has had such properties previously.
uh huh, but their tangibility has as much to do with randomly modeling them as a proof of work in a crypto currency - as every potential tangible thing you can spend the currency on. That is to say: none.
I guess the issue is with the word ‘hacker’. I guess using a more descriptive and accurate word like attacker, vandal, or terrorist is more apt here.
On second thought let's not go to planet Earth. Tis a silly place.
A lot of the feminine-presenting traits in gay men are just cultural. Drag queens and the like were at the forefront of the gay rights movement early on and there’s some association there.

Personally I’m not attracted to feminine-presenting men. If anything I tend to prefer more extremely masculine men than even straight women seem to be interested in. I want to see the secondary sexual characteristic dials turned all the way up to 11. If you go on Scruff rather than e.g. Grindr you tend to see that; Grindr is a little more about gay culture than the other apps.

There is some pressure to present as not straight simply because it is extremely convenient when trying to find a partner. If no one can figure out that you’re gay, they’re not going to start a conversation and that’s particularly true when getting it wrong can potentially result in a life threatening altercation. Gay panic is still a legally acceptable reason to murder someone in the United States. https://en.m.wikipedia.org/wiki/Gay_panic_defense It can simply be safer to seek partners who paint their finger nails because they’re probably not going to murder you for being a faggot.

And ultimately, you’re asking the wrong question when you ask about “why” someone is attracted to anything. “Why” is about conscious reasoning to explain choices, whereas things like attraction are describing the experience of being compelled by your existence to pursue something. I can ask why you’re attracted to the opposite sex, but you can’t come up with a convincing answer because you didn’t choose that, your body did.
20% of requests for Wikimedia Commons are for one image of a flower
There are resumes you're going to see today that are a terrible fit, but might be exactly what you're looking for in three years. It matters how you go about rejecting those people. Charity is contagious, so is indifference. Disdain, on the other hand, is virulent.

You don't want people to delight in the prospect of working with one of your competitors. That's far, far worse than just missing out on hiring them and never getting a second shot.

There is also, I think, a false economy in having one person talk to an individual on their own. There is no one to see how that interaction goes. If I were in a protected class, you've also created a liability for yourself by having nobody to corroborate an exchange.

We are trying to make an inherently expensive process cheap and we are breaking everything in the process. We didn't fix deployments by doing fewer of them. Why do we think we're going to fix the onboarding process by avoidance? Finding and training people is part of building a team, which is necessary to build a product. If you have a bunch of people pushing back on the obvious parts, they're probably pushing back on the rest of it too, making little empires for themselves at the expense of their peers, the product, and the company.

We used to use referrals instead of cattle calls to fix this problem, but we don't like the kinds of hiring biases this brings in and so we threw the baby out with the bathwater. Now we have all of the worst, dehumanizing attributes of a lottery system, and not really many benefits from doing so.

Probably what we are all not learning from this decades long experiment is that if you haven't solved your diversity problem before you are famous enough to have an embarrassment of riches in your inbox, then you never will. Everything that comes after is a series of rear-guard actions trying to replace bad decisions with less bad ones, failing as often as succeeding, and justifying your arbitrary decisions as more merciful than the alternative, when in fact you mean more merciful for yourself.

Right now, for instance, I've been keeping my eye on José Valim (Elixir), because I have a suspicion that his team may have cracked that nut already, or soon will.
Maybe nothing, but just the fact that we're talking about it is something, IMHO.
the point he is making that 1 in a million was an outright lie used by prosecutors to secure convictions on innocent, while the real criminals are still out and about
It's the definition of the word '[in]valid' I was referring to. I'd also say this is the same thing as when I said his anecdotes were not true. What I saw was somebody using biased and bigoted thought to justify their reasoning.

I think I understand your reasoning for not wanting to call human experience invalid. I don't think it applies here because of the informal context (casual conversation) and because the anecdote was used as evidence. He extends his own behavior (treating women differently) to others without any factual basis in his anecdote (since I do it other people do it too). That's entirely invalid.

It also goes without saying that people often tell bald faced lies in the form of anecdotes. These anecdotes are obviously false or invalid as well.
I think these days it is becoming a business need though. These systems are made by vendors who probably need remote access. Also if the plant has a relatively unsophisticated IT department then someone is just going to shove an AP in the ceiling so they can check things when they get called at 1AM.

Several ICS vendors like Tosibox and EWON make devices to accomplish this. I think Tosi has the more secure model, though I hate their proprietary dongles.

VPNs are also used pretty successfully here. Several large companies also don't let you directly connect to anything. You vpn in and connect to a machine with Citrix and then you can use whatever was setup for your there. Usually whatever version of Logix/Studio 5000 the plant is on. You have to talk to someone in IT to get your files moved in/out.

I think Amazon went a different direction and uses Versiondog to monitor their automation systems and check for changes. I don't work there or know anyone on their automation team so I'm not aware of the details.

Still, I think you can have external access and be secure. You just need to balance things out with your business needs.
> if your macros only rely on non-exported symbols from your package and symbols in the CL package, then you are free from any hygiene problems that aren't caused by code that is clearly bad locally

Not quite true, recursive macro invocations that create bindings can step on themselves and force you to use GENSYM, even if your criteria are satisfied.
>> People are buying into bitcoin now because they see a graph going up

Aren't they doing that because they see helicopter money flying? Haven't you noticed that S&P500 and gold are also high?
Physics is more tangible than mathematics.
But also, isn't criticizing him an example of latent homophobia? Is this a medical condition we can get people labeled with so they can be involuntarily committed for expressing views we don't agree with?
I tried applying the wisdom of crowds idea instead :D
https://twitter.com/SmittyW62858649/status/13589265825139957...

Not sure if taking a median is the best idea. I figure a gamma distribution might work better!
> On the one hand your engineers and chemists won't be able to fiddle with the aeration stage using their brand new, whiz bang, iPhone

Maybe not at home, but couldn’t they have a local 802.11 network set up for this?
Thanks for the comment and consideration. Noted on exporting, glad to know that would help on the trust front. Definitely something we should prioritize. Gaining trust is hard, and something we hope to do over time. We of course don't want to shut down, and want to be a go-to for small projects, which would mean keeping pricing low. We think we'll be able to do that by up-charging on the B2B feature set.
And even if the evaluations are perfectly accurate and retained staff are equally or more motivated, it's still quite possible that interviews, training and slow productivity ramp up for replacements results in more of a productivity hit than retaining relatively unproductive staff.
How many times this could have happened without being detected?...
Would have been better with “homer” than “steve”!
There was a recent article with snippets in Haskell and Lisp: http://www.lispology.com/show?3FY9 "Haskell-like patterns in Lisp"
A “great job fixing it” is an exceedingly generous characterization. And the link you’ve provided makes it clear the issue hasn’t been “fixed” just by replacing the pipes. The people of Flint don’t trust their drinking water. (With good reason!) As long as these (predominantly low-income) people feel the need to spend money on bottled drinking the water the issue isn’t fixed just because a lab has determined the water is safe to drink again.
That’s what I thought, you just don’t like tall buildings. It has nothing to do with economics. You started out your comments untruthfully.
Yeah, but it's sadly common. I have personal experience with two such situations in my work over the last 16 years and I'm just some two-bit general IT contractor in Ohio, US.

Until the decision makers who demand the interconnection of these networks are held accountable it's isn't going to stop.

The cases I've seen have been to facilitate 24x7 off-site PLC vendor support access. I certainly see the business argument for the economics of off-site support for infrequently/improbably failure scenarios. At the very least, though, some type of physical interlock could have been employed (at the expense of some response time).

Edit: I think controls can exist to make this kind of situation tenable for at least some types of industrial controls applications. When you start getting to things like municipal water and power I start getting more antsy.
Two very different apes, however. Chimpanzees hunt and kill monkeys. Gorillas are mostly vegetarian.
Art can have intrinsic value - beauty, inspiration and enjoyment. Dependent on the artwork it may even have historic or spiritual value.

Art doesn't tend to be a good thing to invest in for returns - some artworks become more culturally significant and appreciate, while others fall into obscurity and irrelevance as their style falls out of fashion (see: Damien Hurst). Insurance, sale fees e.t.c. further cut into any kind of return.

What's your point? Art is valuable thus crypto is valuable? I don't think one follows the other.
> Jeff Bezos is rich, but not “overthrow the international politico-econonic regime and institute a just world which would solve the problems creating hunger durably through simple amplication of wealth” rich.

United Fruit Company did not have a carismatic CEO but still managed to overthrow governments and create banana republics.

The main reason that Bezos doesn't end world hunger is that he can't even end Amazon worker's hunger, and he controls them with an iron fist. I agree he should stay off politics and just pay his back taxes.
All four of those are considered developing economies, not developed economies (as the US and western Europe). There's a reason they're often grouped together as the the BRIC economies (sometimes with South Africa as BRICS).
Yikes. A hacker remotely used the treatment plants system to dump lye into the tap water. He was foiled by old school security - a worker spotted it and reversed the action.

Why is this kind of thing controlled by (indirectly) internet accessible machines? Is this a portent of more such things to come? I don't trust government, especially municipal government to manage computer security competently.
> You're constructing a horrendous straw-man here. The distinction you're missing is the boundary between anti-social behavior and pro-social behavior.

I disagree. In a universe where being gay is a choice, there are many additional assumptions to be made that make that extend to effects on others besides yourself. I mentioned a few. I think the trans example is particularly salient, though uncomfortable.

> No it isn't, because the argument to ban gay conversion camps is based on the fundamental principle of consent. That's why the predominant conversation is about _forced_ conversion therapy with additional important conversations about whether adults are able to consent to it.

I disagree. The reason there are movements to ban them is that they're detrimental pseudo science with evidence of harm. There's plenty of alternative places to ship kids that they don't want to go to that we deal with. Religious camps and what not. In a world where being gay is 100% just a choice people make, gay conversion camps might still be ineffective, but at worst they're just trying to change someone's mind.

If you want to evaluate the ethics of accepting homosexuality if its a choice, you have to first center your world view in all of the side effects that entails. Which is annoying because a lot of them are also misinformed conservative talking points. But its not just people are instead having gay sex by choice and that's the only difference. Now there is a conversation to be had over how that choice is being made across society.
This one's mine, back off: https://viewer.legacysurvey.org/?ra=235.8839&dec=50.4910&lay...
So we are willing to let you access our water control systems, but not our news, basically. :)
How much war happens because of fiat currency manipulation that wouldn't happen otherwise?

Seems like humanity has engaged in war on a pretty regular basis since long before people decided to put their trust in paper money.
The idea here is that the hiring manager is likely to care about things other than raw productivity of their direct reports, such as how easy they are to manage.
Just autoforward all the emails from Gmail?
I understand the galaxies can be traced back to those initial perturbations, but regardless of that, it'd be interesting to see if there are any patterns that can be identified at a large scale and based on similar sky survey images posted here. Are there any projects working on identifying such patterns?
The BRIC (Brazil Russia India China) are still considered developing nations. In that context the level of industrialization is probably lower even though they are much more populous.

As for China it's not impossible that they are already monitoring for that and blocking Shodan from accessing their Internet.
Huh. That rather ominous reset option did it. Why thank you kind stranger. :-)
Dang it, I had that one!
Were there any gaps in the guesses? You have to be first to guess the correct answer so taking an un-picked lottery number in the vicinity of the median would be a decent strategy.
You seem to imply there is a problem with parallel construction.
Create a Valentine's Day Ecard
I wrote the software for a competition 10 years ago. The first prize was about $5000. All the top ten entries were cheaters who spent hours clicking on Like links on social networks. The behavior was very apparent from the logs. Disqualified. Next top ten, cheaters again. One of them at least used curl :-)
Disqualified.

Imagine if the prize was one million.
It's a minimal embeddable Scheme created by Bill Schottstaedt at CCRMA, the Stanford computer music centre. it's similar in scope to Guile or TinyScheme (from which it was originally forked), and is linguistically similar to Clojure and Janet in that it is fundamentally Scheme, but borrows heavily from Common Lisp (keywords, environments, CL macros). It's mostly used in computer music projects (Common Music, Snd, Radium, and others), but not only - there are some folks on the mailing list who use it as an embeddable DSL for "regular" engineering projects too. I built Scheme For Max on S7, and have been very happy with the choice for my constraints.
Interesting fact, thank you. I wasn't familiar with this.
Is this now considered correct/acceptable terminology? Back in my day optimization techniques weren’t the same thing as models.

You can get point estimates for many completely different models using gradient descent. The article clarifies what is meant in the first line, but it still seems like a very poor choice of words.

Now get off my lawn.
Seems like both you and your parent comment are talking about software audits & auditors. I don't know if that exists in this form, but it seems reasonable that if you can get a security audit you should be able to get a correctness audit. And of course those auditors would be under some heavy-duty NDAs, given the nature of the work.
You touch on a good point. The irony here is that "cancel culture" only works because labor's power is poor.

If it is expensive (e.g Joe Rogan - Spotify deal) or difficult (e.g Steven Pinker - tenured) to fire people it seems much more difficult to cancel someone.
> it just splits Scheme's single problem (lexically binding values in macros) into two problems (lexically binding values in macros, and lexically binding functions in macros).

Bingo. Lisp-2 and GENSYM are attempting to solve the same issue in two different use cases. And, if I may add, GENSYM looks a bit lazy and half-assed next to the scortch-the-earth multiple namespaces of Lisp-2. It's like they blew up Lisp with dynamite and then sat down and said "whatever" when the same problem appears in macros.

> The real problem, which Naggum includes, is the lack of GENSYM

Guile Scheme has both GENSYM and DEFMACRO (unhygienic). I think quite a few Scheme systems err on the side of practical concerns.

But that doesn't erase that fact that GENSYM is an ugly hack to get macros to work.
I wonder how many of human workers today could be replaced by baboons and the job would be done better.
Yours is a thoughtful post and doesn't deserve a quick, dismissive response, so I want to hedge the following just by acknowledging that.

I'd say your problems 1-3 can be summarized by saying you don't think there's a market for it. I don't think I agree. The prospective market for it is probably console gamers who want to play PC games that aren't ported to their console.

Even CP2077 might be an example of this, because from what I've heard the performance is absolutely terrible on consoles, and if you haven't already spent heavily on an upgraded computer with a graphics card that's going to set you back $1K, you probably can't play it there either. So if you're the stereotypical console gamer, who doesn't care about perfect graphics and the lowest possible latencies, Stadia is going to sound like a pretty decent deal.

And that's before you get to exclusives.
Yes, it's named GFM (github flavored markdown). See https://guides.github.com/features/mastering-markdown/ and https://github.github.com/gfm/#what-is-github-flavored-markd... (full specs).
Also a bit incredible is that it's believed that in the last 60 years, we've manufactured more transistors than there are grains of sand. Sand grain estimate is 7.5x10^18. Transistor estimate between 1960 and 2018 was 1.3x10^22.
While the local politics are certainly an issue, their quirky micro-trenching methodology was also clearly a failure
Yeah, but that is the point, The figure for global banking is factoring in those Customer service, credit risk, trading and many other back office people. If you have to hire the same kinds of people then that isn't a massive saving. Your likely to get to a similar size to offer the same services. Bitcoin alone doesn't help that.

Yes you could create a more energy efficient bank, but that is orthogonal to that bank using bitcoin. Many people have tried, but most have failed. Those that succeed are generally acquired and the bigger banks tend to (albeit slowly) integrate those efficiencies.

The post I was replying to originally was citing an article claiming that the energy costs of holding dollars and gold was higher then bitcoin. I was showing how tallying the total energy used by global banks was a false equivalency as much of what a bank does has no direct equivalent in the numbers given for Bitcoin.
I can imagine that especially during covid, there might have been some substantial convenience to having teamviewer on that computer system. Not justifying it's presence, but I do think this is a failure of IT not finding a way to make access to the system both secure and convenient.
My initial reaction is: the fact that clients can talk directly to the database doesn't mean I necessarily want them to. Servers talking directly to the DB can be secured and the software running on them can be controlled. Clients aren't like that.