skysight-inc/HackerNews huggingface dataset:
This is really intriguing but its kinda flying over my head as to why, and the comments on the tweet are very speculative. I'm still gonna try to cop a DVD-ROM drive if I can find one, they all seem to be RW.
They couldn't see what was happening because it was in chinese...
Good point. The problem is that some people think it is a currency instead of an investment. Other people think it is an investment instead of a currency. It can't be both. Currencies have to be less valuable over time, otherwise no one would ever spend the currency. Investments have cost more overtime otherwise no would would invest. But both groups are buying and driving up the price.

Also, there is a 3rd group that thinks it is a hedge. With hedges you don't really care if the price is going up or down. You want it to give you options. For example, you may buy a stockpile of food or toilet paper, not because you are hoping to turn a profit, but to give you an option to avoid going to the grocery store during another panic buying situation.
Negligence is more likely than malice
I think it would be better to directly counter the Matthew effect by a means that isn't so ad hoc. Such as by boosting the rank of artists those estimated rating are more uncertain.
Yep, I live in pork BBQ country, totally reasonable way to get a meal on the table. Always prefer smoke, but I'm not gonna turn down a ready made BBQ sandwich, they real kicker is making sure it is a good sauce and there's good slaw for it!
16 is still a beta, according to the link.
High Lotek – Gemini and the Small Internet
> ... so that might not actually work if the site you are authenticating against is well-implemented

I'm using it on several sites and already did swap / reinitialize my U2F devices... It works, including on GMail. As I understand it the most recent Webauthn is going to be supported by Ledger soon.

I don't think they're non-compliant or badly implemented websites: although I'm not sure what the specs say.

I do personally love that I can back up my "seed" and know that by going to pick my safe at the bank I'll always be able to reinitialize an U2F device and I'll also really love that it displays "Google" on the Ledger Nano S's tiny screen.

Pricey little thing to use as "only" an U2F device: about 60 USD but I like it a lot.

> (Unless the Nano S also lets you back up the counter value)

Late reply but... As I understand it as long as the counter is monotonic it'll always work. What Ledger does (and apparently the Trezor too from reading this thread, another device with an HSM) is, upon initializing the U2F app the first time on your hardware device, is to set the counter to the current timestamp.

So basically: once you use another device to log in, then you cannot use the old one, unless you reinitialize it (and then it's the other you cannot use, unless you reinitialize it etc.). These devices do not have a clock, which is why it works that way (in the case of the Ledger Nano S / Ledger Nano X at least).
Ah, okay! I had not seen it in years. Good to know
Oh, it was getting a bunch of downvotes, and it didn't really add much to the conversation, so I nuked it.

I'll do that. It's not the downvotes that bother me; it's that I am not really adding to the conversation.

I feel that it's important to add to the conversation; not just participate.

That post was mostly whining about outsourced software and CS. Not my proudest moment.
Real property transactions are public by operation of law. It’s been that way for literally hundreds of years.
This thread made me read this article. I think if I had visited without I wouldn't have got past the first paragraph. Really glad I read it. Strangely joyful.
Azerbaijan’s Authoritarianism and Baku’s “Military Trophies Park”
I honestly don't know how anyone could think Go is less verbose than Java.

Manual for loops? No generics?
Right, but $15 a piece makes it only worth it for targeted attacks. Even if it's harder or more expensive to get access to SS7, it might become economical to attempt MITM on a larger target base once you do.
I had not seen it in years, I figured it was a generic blue background or something.
Does the world seem a little brighter and happier to anyone else?
If just for fun, as a kind of thought experiment I suppose, a person decomposed this comment, unpacking each word or phrase into its pedantically precise meaning in this context, spending several hours on the task to squeeze every last drop of unambiguous meaning out of the the words, and then contemplated a literal reading of the final product in its uncompressed form...might this undertaking yield any interesting results?

Maybe it's not clear what I have in mind, so I will give an example: the words "people", "you", "they"...what do these words refer to, precisely and explicitly (what entities do they encompass, and what do they not encompass)?
Aaaand here we go again. Login issues.

Probably some new guy?
Works on mine.
Related: This white paper was published within the last 2 weeks relating to "5G Network Slicing"

Quote from the author:
“Currently, the impact on real-world applications of this network slicing attack is only limited by the number of slices live in 5G networks globally. The risks, if this fundamental vulnerability in the design of 5G standards had gone undiscovered, are significant. Having brought this to the industry’s attention through the appropriate forums and processes, we are glad to be working with the operator and standards communities to highlight this issue and promote best practice going forward.”

PDF can be downloaded from here:
https://info.adaptivemobile.com/5g-network-slicing-security
Panics are useful, because no-one wants to clutter their function signature with errors that are in fact invariant assertions. Granted, It's not elegant, but it does the job.

Expressing potentially panicking functions in the typesystem (or an effect system) would add little benefit for most users, given that even the Linux kernel is likely to use panics (with the panic handler calling BUG) for things that represent broken invariants (array overflow, assert, etc) and it's not really possible to do because integer overflow have a different behavior depending on whether they are in debug or in release mode.

Since it's a really niche use-case, it makes total sense to be an external tool.

> > panics are catch-able

> False. Unwinding panics runs drop handlers; if one of these drop handlers itself panics,

You didn't really read my previous comment right? (emphasis mine, to give you some help)

> panics are catch-able as long as you don't compile your binary with panic=abort setting (and as long as you don't panic in your panic handler itself (including in your types' destructor, which are called during stack unwinding))
Yeah, but say you want to hijack a million accounts. It's easier to have access to SS7 than $15 million.
It's called Cred.
What College Didn't Tell Me About a Career in Software Development
Ask HN: What do I need to do to make my blog GDPR compliant?
Hi HN,
Today I received an email asking if I would process a GDPR data request and what information I collect.

I run a simple static site on top of nginx. I don't set any cookies. The two things I collect are 1. I use Google Analytics and 2. server logs.

Do I really need to create a "privacy policy" and "terms of use" page and show every user a GDPR message? It feels overkill to me given that I collect nothing as far as I can tell. I don't even look at GA and could remove it if I need to.
Yea I'm not sure why we should be surprised that in another bull market where BTC is well above previous all time highs and DeFi protcols have billions in deposits, that "most" of Tether would have been minted this year. It's like they haven't considered that if Tether was theoretically 100% above board that quoted statistic would still be true. "What would legitimate look like?" in other words.
Well done, thank you!
Not to mention his sympathy for Nazi Germany before and during the war.

What happened to Architecture in the 20th century is both sad and instructive about the risks of abusive modernity.
My thesis is MS will never go down this path, not because it isn't an excellent idea but because Excel has become inrefactorable.
+ keep it out of Mt. Gox
The entire crypto art movement is a marketing campaign designed to turn artists into crypto evangelists, i.e. convert others.
The app looks really cool. "Virtual assistant" usually means a human who helps you out remotely. I was surprised it was more like a chatbot with integrations.
It was basically a typo, but then enough people got slightly irritated by it that I started to enjoy having it that way.
I’m not talking about people who can’t afford paying and needing one, but even those can find a designer to help them if the project is interesting enough. I have done it myself and it’s been good for everyone involved. But my comment was targeted to the “I could totally afford a designer but I’m good enough myself” when most of the time is just ego speaking.
> My Twitter app using their API doesn't seem to be impacted by the outage this time.

Yeah, Nitter[0] also still working, so probably issue is somewhere in between frontend and API/database, but not in API/database itself.

Has not tested Twidere[1] & Cawbird[2], but just wont try it now myself to prevent any issues on my mobile/PC (NOTE: If you are not used those apps before you may not try to use it now, because it requires on time load of Twitter site to verify token — actually it may/would not work due to actual issue with Twitter frontend issue).

Also, seems like Twitter bots still can tweet (as all of them uses just a Twitter API, not a Twitter frontend), for example here is HNTweets just tweeted actual thread as it just reached HN frontpage.[3]

P.P.S. Here is previous dishonored HN top thread[4] on actual "Twitter Down" — it was really a bad idea to flag this Ask HN thread.[5]

UPD: Just checked Twidere — app able to tweet[6], so Twitter API is OK.

UPD2: Insider Paper tweeted[7]:

> Twitter says the data team is investigating system irregularity currently affecting all Twitter API v2 endpoints. In result, Twitter tweet feeds is still not loading for many users.

[0] https://nitter.fdn.fr/TwitterSupport/status/1383221595804602...

[1] https://nitter.fdn.fr/TwidereProject

[2] https://nitter.fdn.fr/CawbirdClient

[3] https://nitter.fdn.fr/HNTweets/status/1383404896930603017

[4] https://nitter.fdn.fr/HNTweets/status/1383216280992321546

[5] https://news.ycombinator.com/item?id=26840441

[6] https://nitter.fdn.fr/app4soft/status/1383423370847342592

[7] https://nitter.fdn.fr/TheInsiderPaper/status/138341474877186...
Facebook will happily let you share articles about Kimberly Guilfoyle’s new mansion: https://www.facebook.com/KHOU11/posts/10161394155724062. Just to pick literally the first example that came to mind.
My favourite thing about U7 is the Jungfernheide station. It sort of quite bland and even neglected but... it hides an extra platform that was supposed to connect centre of the city with Berlin Airport (now sadly closed).

The station also used to connect to Siemensbahn which is a totally dilapidated and forgotten train line with a huge historical significance for the city.
> Since the early 2000s at least, most billing has been outsourced. This works by sending all Call Detail Records (CDRs) to a third party, often from Israel or China.

This is quite misleadingly written: telcos are not shipping reams of CDRs to some cubicle farm in Haifa or Chongqing.

Yes, almost every telco outsources its billing software to other companies, notably Amdocs (founded in Israel, now HQ's in the US). However, billing info is some of the most sensitive data a telco has for both privacy and commercial reasons, so that software always runs in a closed environment from where it cannot dial home. Historically that's been on-prem, it's slowly moving to the Cloud but even there it's going to be firewalled off very carefully.
Everyone one of these videos guesses for some values need to be made since the readouts on the display are missing information you would need to be certain of speed of the object.

The values you use can make the object seem ordinary or extraordinary. Once you set the values for your desired outcome you can present your case any way you wish and the numbers will just work out the way you wanted them to.
Cisco Anyconnect has a nasty habit disrupting Sidecar.
Canada's average ARPU for mobile customers is like 60-70$ I think.
A lot of the jobs that you've stated you are applying for having notoriously difficult hiring processes. With your background and personality they might not be a good fit for you at least not yet.

I would recommend looking for smaller local startups or a company that has an entry level position and staying with them for a couple years to get more experience.

As a note on interviewing no one wants to hear a lot of negativity. When describing bad situations try not to throw dirt. It just makes you look dirty. Try to state everything in a positive way so that your image is not tainted by the negativity of what might have very well been a bad situation.

Good luck!
I wouldn't mind partnering up with Mozilla on this. Hey Mozilla!!!
I'm sympathetic to the argument that Ponzi schemes inherently have a small group propagating the fraud while presenting the illusion of a real business, so describing Bitcoin as a Ponzi scheme may be technically inaccurate.

If I understand the tweets correctly, Taleb, et al, are basically saying that the mining pool functions as the insiders in a Ponzi scheme, by outcome if not intent.

The argument is that a Ponzi scheme isn't just zero-sum speculation, with some people winning and some people losing: it is negative-sum, for the speculators, because the insiders were siphoning off money the entire time.

In this situation, the siphoning comes in the form -- among other things -- of the 6.25 BTC / 10 minute block rewards [$20B / year at present], which the miners sell to pay their costs [$10B / year of electricity at present?] and their own paydays. Because these "insiders" have been taking out money the entire time, when all of the investors go to get their money back, there won't be anywhere near as much money as they put in left to get out.
as far as i understand, there are no operators in Europe (maybe UK) anymore that don't run filtering on SS7. btw: SS7 is the legacy system and not part of 4G/5G.
Why? The Rust-for-Linux team already made Clippy a requirement for Rust kernel code. For niche configuration that are really project-specific like this, it makes total sense to use external tooling to ensure the guidelines are respected, it doesn't need to be the compiler enforcing these guidelines.
It's a good opportunity to uninstall another social media app.
‘Can babies see ghosts?’ The best of Yahoo Answers
I would guess it depends on the columns as well. I just opened a million-row, 10 column spreadsheet and added a few formulas like =average(a1:a999999) and it's responsive...no hangs or other issues. "Save as" ran for a 5 seconds or so. On an older i5 laptop with 8GB.
Yes, and it's not only stock market misvaluation. Perpetual growth economics itself functions like a Ponzi scheme insofar as it renders the planet more challenging for future humans to live on.
History has shown that rising powers take what they need to keep their rise going.
Just like the UK, France and other send spies to the Netherlands and steal our shipbuilding techniques in 17th century for their own naval rise. The same as the US did with the UK steal factory design keep their own industrial rise going.
The Chinese are stealing/buying technical know how to keep their rise going.

Like the saying goes, When in Rome, Do as the Romans Do.
So when in China, follow the Chinese regulations.
The Chinese should do the same when they want to invest here in the EU.
Of course we can write code that is buffer overflow free and safe and secure in every other manner too. We just can't do it when prioritizing new features, writing to a spec defined by committee and having limited resources, with thousands of competing interests.

For a nuclear power plant where focus is on safety first and the code in the critical paths would be limited and the spec defined then and there for verifiability, the system could probably even be proven correct.
SS7 is not fixable in my opinion. It needs to undergo the metaphorical equivalent of being burnt to the ground and having its ashes stomped around on a bit.

The further you go into the architecture of the "trust based" PSTN, SS7, traditional Telco stuff... The more you will see the total lack of modern cryptography, PKIs, zero trust network modeling, etc.

I'll admit that my perspective is skewed by working in backbone IP network engineering for a mid sized ISP. We occasionally have reason to interact with some pstn related stuff. All of the real technical innovation, security advances and such have been taking place in the ISP world for the past 25 years, not the Telco world.
That's an interesting interpretation and I like it, even if I disagree!

There is nothing libertarian about censoring someone.

Sure, you have the right to do that, given they're on your private property (on Facebook) but that screams authoritarianism: it's like Facebook is his own little country ruling on his citizens and limiting their freedom.

Now, the act of advocating for Facebook to be able to do what it is currently able to do is libertarian. An authoritarian measure would be, as you mention, regulating Facebook to force them to publish anything or giving exactly the same space / visibility to people of opposing viewpoints.

As an another aside, as an anarcho-capitalist (right libertarian), I've a lot of respect for your political viewpoint - that would be ideal but I think it's unachievable.
Egalitarianism - or equality of outcomes - can't happen unless you force it with an authoritarian government or you have perfect people that share voluntarily everything. On top of this, as soon as you have an authoritarian government you'll start having corruption (we don't have perfect people) which will favour government officials over normal people, throwing in the bin your egalitarianism.

Instead of focusing on equality of outcomes, I think we should focus on reaching equality of opportunity; given we have imperfect people we need a system of incentives to keep people broadly aligned with what society wants. Therefore there should be no government (which is outside the market and corruptible) and all services (including protection, healthcare, lawmaking) should be provided by the market. I think this will bring us as close to egalitarianism as we can possibly get.
Just knowing that it's down makes me feel weirdly lighter.

There's something about just knowing of the existence of the perpetual rhetorical conflict on there that contributes a tiny amount of background chronic stress.
> If I read that right, some keys rather than having a hardcoded unique seed, will let you set your own.

Set your own or generate one for you, using an hardware CSPRNG, and then let you write it down in a convenient way (24 words out of a dictionary of 2048 words, so 264 bits: 256 bits of entropy plus 8 bits of checksum. Heck, you can use 12 or 18 words too. I think the (BIP39 / BIP44) standard even allows for 15 words but Ledger does only support lists of 12/18 and 24 words although don't quote me on that).

> Which implies you can have multiple functionally-identical backup keys locked up securely somewhere.

I don't even bother having multiple devices ready to use. I simply store the seed (once again: as a list of 12/18 or 24 words) on a sheet of paper and I store this in vaults/safes.

> Anyone know which keys support this (aside from the mentioned Nano S and Trezor)? What's the magic keyword to look for in specs?

I've got a Ledger Nano S only for this. It's really a nice little device. I don't work for Ledger btw! They're a bit pricey but, indeed, the anxiety of getting locked out of your account or having through crazy procedures goes away.

It's a pricey little device but not that crazy expensive: about 60 USD I think.

> What's the magic keyword to look for in specs?

I don't know but the U2F "nano app" does work with Google and other sites and I know that Ledger is working on the more recent Webauthn support.
Haha thanks for taking a look!

Ah I'm no web dev so must have missed that margin issue. Was able to reproduce in tablet mode. Thanks for pointing it out!
My guess is that even if it is factorable it would be made into its own separate product or attached to another program like power query or their bi offerings.
Instead of looking at tax rates, look at how much the government actually collected as a % of GDP. It's fairly flat.
Meh, you don't need GPT-3 for this, I've used web Markov chain tools for quickly generating this kind of text from a sample like 15 years ago...
Related: https://news.ycombinator.com/item?id=26842629 .
What are impressive personal ML Projects you have seen?
I am looking for inspiration to build ML projects for my personal portfolio. I am running with ideas from bitcoin to scraping web pages. But nothing concrete. What are the interesting ones you have seen in the recent past?
recent one such example:https://medium.datadriveninvestor.com/machine-learning-models-for-market-beating-trading-strategies-c773ba46db66
This 100x. I've always said, developers should get a Pentium 3 500 MHz and 128 MB of RAM to test their software. And yes I am following my own advise, I use an old Dell with a Core 2 Duo T8100 and 2 GB of RAM to test my software on (oldest I could find at work).
The worst nightmare of the vice president of security at SolarWinds, not of the average person.
I was able to browser for a while this morning, although I noticed one of my preferences had changed and it would not save. A few minutes later, it forcibly logged me out.
Indeed. From the safety of their proverbial fortress city, they can undermine Western power and project their own in the resulting vacuum. A tried and true tactic adapted to modern instruments.

What I'm not sure about is why anyone is surprised. Especially in an age where everything is framed as a struggle for power, you would expect this to be the case, especially for an emerging superpower. Economics is here just war by other means, and consumerist lust for cheap goods the Trojan horse by which China will succeed.
Stocks have dividends, loans have interest, land has either rents or utility from using it. It’s that income stream beyond the initial capital that turns something into an investment.

Bitcoin lacks that, it only has money from new investors and it loses money from mining. Which means without new investment it’s value must crash which creates incentives for people that own Bitcoin to convince others to buy Bitcoin.

The only way to argue Bitcoin has long term value is it must provide inherent utility like land. Increasing the number of transactions per second would be one way to demonstrate that value, but talking about future value doesn’t.
Containers at the Edge
How a Vp security can ignore a privesc risk like that is pretty inexcusable. Ever vuln falls on a risk mgmt spectrum but that’s a really nonsense answer to give. Weak PW mgmt on a FTP server that you let interns set should raise some areas of interest.
A colony on Mars would be child abuse, even assuming the fetuses gestated normally in that environment. And the resources needed would devastate Earth, the one planet which makes our ideal home.
There are millions of tons of thorium on earth and on Mars. We can have sustainable energy (and thus basically everything else) with basically 60s technology.
> as it's assumed only trusted parties are on the network and able to use them. Those assumptions are no longer valid

Why not refuse to peer with networks that peer/sell to bad actors? Before we had ML based email filters that kind of “hold upstreams responsible” strategy worked pretty well.
Folklore to Fact: Comparing Implementations of Stacks and Continuations