skysight-inc/HackerNews huggingface dataset:
Being good at "leetcode" problems and being good at writing good production algorithms certainly have some overlap... but it's not very large, and they're actively at odds with each other quite often.
Do you not have to have bought the item in order to leave a review? If you do, then fake reviews should not be economical for anything sufficiently expensive -- judging from the article, maybe $20 or so.
It requires state that can be inferred and manipulated. For the cache, assuming you know how large the cache is, you can just fill up the cache with useless pages, evicting whatever might be vulnerable to a timing attack, before having it loaded back in. Very slow, but it works. (You might be able to get away with less, depending on the OS's guarantees and what you can assume about how your program will run – and the language requires you to make those assumptions explicit, even if it's a case of "assume this manually-written assembly does the right thing without violating any invariants".)

Yes, these tricks don't have forwards-compatible guarantees in the general case – but if the processor manufacturer makes guarantees about all members of a family, then you can optimise to those, and in any case having something that provably works in all supported processors (and can be ported to later processors if necessary, just by using an extra library (if the library is correct)) is still useful.
Read 'The BITE Model Of Authoritarian Control: Undue Influence, Thought Reform, Brainwashing, Mind Control, Trafficking And The Law' by Steven Alan Hassan

or

'Thought Reform and the Psychology of Totalism: A Study of “Brainwashing” in China' by Robert Jay Lifton

(both readily available as PDF online)
I am using `pass` (https://www.passwordstore.org/) with an encrypted git repository and this works well enough for my use cases. I do not have a complex threat model though, nor I need to share my passwords with other people or organizations.
Optimism as Cuba set to test its own Covid vaccine
If anyone is looking for how to export their passwords from lastpass, see here:

https://support.logmeininc.com/lastpass/help/how-do-i-nbsp-e...

Importing to bitwarden:

https://bitwarden.com/help/article/import-data/
Please also show how the parent might misunderstanding the article instead of just telling them off.
LastPass costs $36 per year. Operating on the principle of being the customer and not the product, that seems very reasonable for a secure way to store and share the keys to my digital life.

That said, it does make it a little bit harder for me to onboard my friends and family when they ask. One of the selling points has always been "Yes, you can use it on your phone and laptop" and "no, it doesn't cost anything".
There is no practical difference in Python functions and Ruby lambdas.
Gruber's article says

> Today’s follow-up from Bloomberg offers no evidence either.

The follow-up article actually has quite a bit of evidence.

e.g.

> “In early 2018, two security companies that I advise were briefed by the FBI’s counterintelligence division investigating this discovery of added malicious chips on Supermicro’s motherboards,” said Mike Janke, a former Navy SEAL who co-founded DataTribe, a venture capital firm.

maybe there are reasons not to believe the testimony of Janke. but saying the article "offers no evidence" is just bunk.
They might just be proud to be earning from something they don't find to be too much like work
I disagree that it would be indistinguishable. You need to chain together a long series of probabilities that leads to exponentially less product arriving through diffusion than through long-range traders, and a clear trail would result.
Thats because our language (english at least here, some other languages have distinctions) is limited and we use "me" and "you" and "them" to signify vastly different things (but that are cause or consequence of each other or cooccuring due to another cause).
Thanks for sharing this!
Reading this, there seem to be a lot of opposing opinions, but it seems to come down to curl being as safe as other methods, with the main problem being trusting the server from where the script is downloaded.

In our case, server is github so that is allright, but script is on master, so that is tricky because we might update it at any moment, so you should check it once it is downloaded. That is a concern for sure, and there are ways to remove that concern.

One thing that goes to our benefit though is that we are not requiring `sudo`.

Thanks for pointing all this out, we will certainly be looking into better ways to install Wasp in the future!
Cost of building a tower is much more than something like rowhouses, multiplexes. Cities like Toronto and Vancouver bypass the "missing middle". So it's mostly single family homes with various "tower node districts".
Newspapers are in the business of publishing information. Part of that are the names of people involved in stories, who don’t get veto power unless they are clearly just passive “victims”.

Specifically, (potential) patients of Alexander might have a legitimate interest in knowing about his writing. Personally, I wouldn’t have a problem with being treated by him. But therapy is among the most sensitive subject, and I could easily see people having a legitimate interest in being given the opportunity to decide for themselves.
> TCP performance and network latency in general was always worse on Windows

I would disagree. Unless you're trying to write "cross-platform" network code using select and other POSIX-style interfaces, in my experience Windows with IOCP or RIO will beat any other user mode application TCP stack for I/O rates and latency.

Vista's stack had latency issues in the beginning but Windows 8 with RIO was released a long time ago.

Note I said "user mode application". Linux has easier kernel bypass and well-supported DPDK for applications that really need it. You obviously cannot beat that with user-mode code
The type of content is certainly different, since anyone can upload videos to YouTube. The TV that kids were watching “too much” of was super bland, mainstream stuff, for better or worse. There certainly weren’t organizations bulk generating thousands of hours worth of creepy and bizarre videos featuring kids’ favorite characters, for example: https://en.m.wikipedia.org/wiki/Elsagate
It would be nice if this was the other way round :'''''(

# this will ruin your day

endgame smash --service all --evil-principal ""

# This will show you how your day could have been ruined

endgame smash --service all --evil-principal "" --dry-run

Looks like it can be reversed with --undo, but brown trousers time if you groggily run it at 08:30am coffee in hand.
I'm all in for paying for services that handle your personal data. If you don't pay them, how do they make money? So I'm okay with this.

Something to consider, however, is the alternatives. Bitwarden seems cheaper[0]. Anyone has a preference for either?

[0] https://bitwarden.com/pricing/
Social credit score, CBDC and "verified digital identity".
That reminded me of Mitxela's GPS clock[0]. Using GPS modules to get an incredibly accurate time is really interesting, I need to find some time to make one of these.

[0]https://mitxela.com/projects/precision_clock_mk_iii
Thank you for working for our climate -- best of luck!

It seems you're after a more efficient method of collecting CO2, not a long-term storage method for CO2. I think the messaging may get muddled, people may believe you're attempting to lower atmospheric CO2, not just save some energy in CO2 production. To that end, how much CO2 would you actually be "preventing" from this action, and how does it compare to the top-ranked solutions needed on drawdown.org? When it comes to climate, I want the MOST EFFECTIVE solutions, and I don't know if this is low-hanging fruit relative to refrigeration management, diet, transportation, installing renewables, etc.
I have used BitWarden for 2+ years. Super solid, free, and open-source.
>"In contrast, a classical "sysadmin" as that term was used in the 80s/90s job roles was usually not a hard-core C++ programmer."

No they weren't likely "a hard-core C++ programmer" since UNIX was written in C. SysAdmins at that time were however likely to be a hardcore C programmer working at an ISP or large university network. There you had to know how to maintain and modify source to things like Sendmail, BIND, Apache and RADIUS. There was no StackOverflow or Google to consult. Your comment seems to be propagating some baseless trope that was never true. Your statements really suggest that you weren't actually there in the time period you are commenting on.
I feels like explaining an old greek that the air that he doesn't see exists because it inflates a balloon.
All of those countries only feature monarchies as vestiges of the feudal era. All of them have elections and the elected government is what actually runs those countries.

A real monarchy would be something like Saudi Arabia.
Cheers for the info, I'll look into it. I'm not against paying for the service (I've used the hell out of LastPass) I just not a fan them pulling my use case from under me.
Yes after using Roboform and Lastpass I switched to Bitwarden. I pay the 10 bucks a year for convenience but folks I know self host it and are really pleased with it.
On the other hand, how many of these companies would have faded away and never been heard of again if Apple hand't stepped in? Was Samsung or Huawei about to invest in these technologies? Even on this thread I see people saying phones are commoditised now and the new models aren't interesting.

Apple's competitors believe this, they aren't about to invest millions on these small technical innovations and improvements that by themselves are incredibly niche. Instead Apple brings these incremental innovations, which otherwise would be relegated to specialist parts if they survived at all, to hundreds of millions of customers all over the world. If Apple hadn't done this the chances these advanced technologies would be in so many people's hands right now would be close to nil.
Why don't things add up? Your spouse's behaviour is governed by the same physical laws as the teacups and pans, but they are certainly not an inanimate objects incapable of choice.

The problem, I think, is that humans seem to believe that lower-level explanations invalidate higher-level ones. However, that doesn't mean that you should say there is no difference between "Hello world" and a web browser because both are "just" x86 instructions in the end, or "just" transistors being switched on and off. However, good look debugging a web browser by looking at the behavior of individual transistors, even though that is all there is in the end.

I think you are looking at it from the wrong angle - complex human behaviour isn't reduced to simple physical laws, but rather, simple physical laws add up to complex human behaviour.
And that's it for me, I'll switch. The only remaining advantage of LastPass over the competition until now has been pricing.
DevSecOps Evolution to Achieve CI/CD Capabilities
How do we fix this? I'm prepared to get my hands dirty, but it seems like I'll accomplish nothing - if I at least knew what to do.
Our ability to conceive of something should not be in the definition of reality. Quantum mechanics and relativity have just as much, if not more experimental evidence to support them as atomic theory, and make even better predictions. This has implications in the "real world." If we base our definition on what is "intuitive" instead of what is provable, we end up with things like humour theory in medicine.
Can you explain what "more or less open" file format means?
What’s sad is that most people, whether on the left or right, are decent, hardworking people that would never set out to so violently steal someone’s privacy like this. There are perfectly rational reasons for people to lean either left or right.

But members of the media are stoking the fires of division to satisfy their lust for money and attention. It’s wrong, and I hope that everyone can see these actions for what they are. The NYT and the reporter that wrote the article should be roundly criticized by both sides for what they did here. They should be canceled.
This guy is a consultant giving a talk to a mobile game company and has slides titled "Use of Coercive Monetization". It's pretty much an evil TED talk on dark patterns.

https://www.youtube.com/watch?v=zex3b2mDnUw&t=17m16s
That's the dream :) but unfortunately it is quite difficult in practice, even when you are aware it is a potential issue. It seemed to make them more able to have nuanced discussions about some things, but much much more stubborn in the things they were confidently wrong about.
The last bit of motivation I needed to finally make a switch! I know there are a lot of threads about this, but what do people recommend? Ease of use/transition is key or I won't be able to convince my partner to switch!
Bitwarden is awesome and open source. I host it myself. Used Lastpass before.
It is also pretty useless. Normal people can't parse probabilities - otherwise nobody would play in the lottery. If you have a list of 20 items with non-uniform chances, can you tell how long you need to play before it's likely you'll get an item you want? You and me can, by doing little math in head; most people can't (and it's another question whether one has the willpower to do such math and follow it through while tired, unwindng in front of a casual game).

What would be more useful if they listed the expected number of loot boxes you need to buy to get an item. "2% chance" reads differently than "you'll need to buy about 50 loot boxes, on average, to get that item".
Author here :) Endgame exploits/abuses features. If it was a bug, I'd work with AWS to solve the problem, but with abusing features - that would result in years of unsatisfied feature requests. This should push the issue along.

>...and it's not even a hacking tool!
It can be used to backdoor resources to rogue accounts, so I'd say it's a hacking tool and can/should be used on penetration tests. I'd certainly use it on a pentest :)
What Makes Building Safe AI So Hard?
Appreciated. Can't forget all the hoops to jump through if you work in a regulated industry, now that most small businesses are caput
LastPass is a commodity. There are many free or open-source alternatives that are as reliable and as secure as LastPass that provide similar functionality. It's hard to justify even the small price for a commodity service unless you provide the best possible solution, and sometimes even that is not enough.

I switched from LastPass premium that costed 15$ per year a few years ago to Bitwarden because LastPass could recognize password fields on all web pages, while free Bitwarden just works everywhere.
On the flip side they offered very little value in premium compared to free (for me) so there was no reason to upgrade even when I wanted to pay (I did pay for 2FA but TBH o could live without it)
"But Atoms are conceivable - they work as a model, but we can also imagine how to fit into the reality that we experience."

"Quantum Mechanics is a model that fits experiment results very well, but is very hard to conceive of."

These two statements stand in contradiction. Atoms only work as a model if quantum mechanics holds. In a non-quantum world, electrons collapse into a nucleus, shedding electromagnetic radiation and lowering their energy as they do so. That's also necessary to understand why neon signs have their colors.

More broadly, if you want to compare one scientific theory to another and contrast their "realness" you have to take quantum mechanics along with your atomic theory.
> This is irresponsible at best.

Not sure i agree, they make it very easy to export your info/passwords and are just returning to a previous business model. As another user here commented, it only took 15 min to switch to another option.

> but a widely-used password manager needs to provide more time for users to transition into another product if they choose not to convert to paid

curious how much time that would be
> (SQLite does this for you automatically, BTW.)

Unless you're on nfs. Remote file locking is hard, and I don't think that any nfs implementation has gotten to the point where you can trust SQLite on it.

SQLite does updates in place, which I would trust far less than a rename call.
Been using bitwarden using a self hosted db for quite some time now, brilliant product!
Which Chinese platform runs all these checks? Really curious as I don't have much experience with selling on Chinese platforms.
...Why rely on the installed OS? The ME already has networking capability. Further, most intel firmware seems to have it's own update channel. It probably uses the same mechanism.
Interview with Koyfin co-Founders (financial data visualization startup)
Those images, as I understand, constructed by heavy calculations based on a theory of atoms. Isn't it? So it is arguable that images are not "real", they are visualizations of a data.

At the same time not every real image is real. We could sometimes see two Suns in the sky, or we can see a rainbow, but it doesn't mean that the second Sun and the rainbow are real.
I've been on 1Password since 2007. Unfortunately, software quality seems to have taken a nosedive since version 7 came out (disregarding the subscription issue). Random beachballs and slowdowns, annoying 2FA and duplicate password warnings, and decoupling of stored files from login entries.

I have been considering a replacement but haven't found anything up to the ease of use and Mac/iOS integration of 1Password yet.
I don't see the distinction you're making between "sensing" and "measuring related phenomena." What's different from using a specialized microscope to take a picture of an atom and using a telescope to take a picture of black hole?
I moved to bitwarden a few years ago from Lastpass..Primarily because of persistent sync issues with lastpass. It seemed they kept trying to see "features" and the core product took a dive with the logmein aquisition. They were pushing things like credit monitoring, but the password syncing would get wonky from time to time with a specific browser or on my phone or vice versa.

You can self host your bitwarden (though i dont). And you can, even with a free account, create a single "org" to share passwords with. In this case that org was my wife so now all our shared accounts reside in bitwarden and the password doesnt matter.

Ive even gotten to the point of using their passphrase generator for manual sign-ins like my work computers.
glad you switched to syncthing, don't know how anyone can recommend dropbox when syncthing exists
Don't worry regulation is coming to your profitable websites (one of the last viable cottage industries) as well.
This is a straw-man. I did not compare Comma to any other startup, or some bizarre ideal of "what a startup should be."

I strongly disagree that Comma "have a better safety model than anyone" - their entire safety model revolves around two things, an assertion that the driver is fully responsible, and a poorly documented set of callback functions in their CAN-intercept board which, depending on the vehicle, do different things, but generally try to limit angular input and introduce an emergency override. This is smart, but the code is not documented well enough to be considered a "safety model" in any commercial sense, and the system, while it has a MISRA C linter plugged into it somewhere, is not built using safety-approved hardware or to any known safety standard. Plus, the fundamental approach on most cars involving CAN message-stuffing simply cannot be as reliable as an integrated system - in that sense, the entire model is flawed and cannot "have a better safety model than anyone."

And, Hotz explicitly and openly left the United States and cancelled his first Comma product launch, rather than respond to a letter NHTSA sent him asking questions about Comma's testing protocols and safety process. Call that what you will.
>We can sense them directly

What does this even mean? Unless you're talking about some supernatural "atomic sense", there's obviously no way to "sense them directly" - we sense them through their interaction with other things combined with our model of those things and the interaction.
Temperature sensor can be just a NTC resistor on the cable leading to the display (for example). The program has to select the right "waveforms" for the current temperature. Waveform files have timings for various temperatures.
I'm tempted to say that every attempt to fix the system from within just becomes another trap down the line, so I would say to you that if you can work on technology that allows someone to survive mostly outside of the system (encrypted communications, small scale clandestine production of food, water, medicine, shelter) then you would be well on your way!
I’m Taking Ownership of My Tweets (2019)
Interestingly enough, the Pokemon Picross game on the 3DS had a fixed spend limit of $50, after which you could just top up your in game currency for free.

So either you did f2p, or you paid $50 and got a full game, or some linear combination of both.

I liked that game and paid $50 for it.
I wish I could do that, but I depend on JIRA + Slack + GitLab (code reviews) to do my work and they force me to use Firefox/Chrome. :(
If he says "people" should switch to synthetic beef, I am willing to listen. But saying "nations" should switch suggests an element of coercion that disturbs me.

Later in the article:

'A: [To offset] my own emissions, I’ve bought clean aviation fuel. I’ve paid to replace natural-gas heating in low-income housing projects with electric heat pumps—where I pay the capital cost premium and they get the benefit of the lower monthly bill. And I’ve sent money to Climeworks [a Switzerland-based company that removes carbon dioxide from the air and stores it permanently underground].

For the carbon emissions I’ve done—and I’ve gotten rid of more than what I emit—it comes out to $400 a ton.'

That's nice, but the average person will note the Bill Gates still consumes far more energy than she does. "Bill Gates owns a mansion that overlooks Lake Washington in Medina, Washington. The 66,000-square-foot (6,100 m2) mansion incorporates technology in its design." Gates could choose to live in the home of a typical upper-middle class American and travel the same amount but does not.
Fixing bullshit left by others, refactoring parts of the machine, copying other apps, working on pointless panels and ideas that will be killed in a hot minute or forgotten about, working on internal tools or mostly - fighting internal political battles to get a promotion/more money/authority/status. Most of the people are not there to innovate but to earn money and status for themselves by working at the big F***K
Price aside, last I checked LastPass was terrible software compared to 1Password.

I had all kinds of syncing problems with the browser extension. And LastPass had a huge breach in the past, which its competitors didn’t. I don’t trust that it’s quality software - especially because it doesn’t “look and feel” like quality software.

Plus, they’re owned by LogMeIn, which is basically a crappy software conglomerate that includes GoToMeeting, and is owned by a private equity firm.

My experience was was ~2017 as an admin for their enterprise offering, so take that with a grain of salt. But my point is: compare all the options. Competitors like 1Password, Dashlane, and Bitwarden, and probably many others are worth looking into, and are almost certainly better than LastPass.
You wouldn't download a car! Oh you would? Then we will try to stop you from doing that too ^.^
We have images of black holes merging too.
Okay. And?
Here is a rough ranking of information sources by amount of "user engagement".

Books < TV < Video Games <= Social Media

The rankings are potentially different per individual and each information source effects people in different ways. This is my mental model of different user engagement sources. The hard part is where to draw the line and the inevitable fact that pandora is already out of the box.