skysight-inc/HackerNews huggingface dataset:
We're in agreement that trust is needed at some point in the system. Cryptocurrencies can be completely internally consistent, but have no relationship to the real world. The only way for that relationship to be formed is by trust.

But, there is not a single thing in cryptocurrencies that make sense if you are willing to allow for centralization. If you have a centralized system, then you have a limited number of actors allowed to make changes to the ledger. You can establish trust out-of-band, whether that means by passing around gpg keys, by investigating previous banking practices, or by establishing common rules for auditing. After that, there's no need for Proof of Work/Stake/Space/etc, because you can trust the updates coming from the rest of the network.

The reason I say that the point of cryptocurrency is trustlessness and decentralization is because the only other alternative is that all the implementers of cryptocurrencies are utter fools not to see the simpler solution. I don't think that is the case. I think they have seen the simpler solution of trusted validators, and have dismissed it out of a fundamental difference in priorities from mine, but I don't think they are fools.
That doesn't make sense to me but if you stick to the rules it's ok.

I'm not the only person who works on HN!
I wonder if there is any group of folks who can do the job without the extreme distress (that verges on trauma, at best) the content causes.

Would a lack of empathy help? Or would low-empathy people not be able to exercise the necessary judgement to identify harmful material and behavior?
I've seen a few people doing this, but I also frequently run `git clean -xffd` in my actual source code directories to clean them, so I'd be deathly scared of accidentally running it in the wrong directory and wiping out half my homedir.
> Apple does have massive resources.

I don't think the GP disagrees with you. The GP is saying Apple doesn't use those resources.
I don't think it's fair to expect to revolutionize the field as a PhD student. The goal of a PhD is to prepare a good researcher, probably more important than producing new knowledge. Most papers are maybe boring and have little new things in them but I still think they are worthwhile
No, they are requiring any company that does business with the government to share information with them basically regarding any potential security risks. Essentially, using the word encryption in your email could be considered a potential security risk.
It’s there under the name Salbutamol
> This example is pretty artificial - I can't really think of an optimization you could make knowing that you rarely turn left (maybe something with the axel?)

A real-world example are old NASCAR race cars. Optimized heavily for turning left, they were quite good at it at the expense of turning right.
I've never seen documentation efforts pay off in organizations that do not have documentation as a deliverable artifact to outside stakeholders.

I've never used commit comments to store important information about the systems I'm working on. OTOH I can see people working on Linux needing that a lot more than I do.

Feel free to twiddle if that floats your boat though. I will refrain from twiddling, thank you.
If the money is in your company then it's in one of your accounts somewhere.
It costs a few thousand to renounce it anyway.

The Foreign Earned Income Exclusion is what you're referring to.
You need to follow laws to funnel money through your shell companies. In turn, global agreement could require a tax small tax for any capital gains transfers made by each of those shell companies. The end result is that companies can still dodge taxes, but the more law-abiding ones aren't quite as efficient at doing so. That said, I haven't investigated the details of how this might work, and I'm sure like anything humans invent, there will be exceptions. Perhaps it would apply to large companies only, and suddenly lots of companies break up to become smaller affiliated investors that just happen to invest in the same companies in various jurisdictions, perhaps through an unaffiliated managed ETF. If there's benefit -- read: profit -- to working around a law, I'm sure folks will find a way, unfortunately.
What is albuterol? Why does not having it render the entire list terrible? Could you elaborate in a way that inspires useful discourse?
>Australia is probably the best of the bunch

The country on the list most similar to the US is the best? That's very American of you. As someone not in any of those countries (US included) I could pick four or five before I got to Australia.

>O RLY? Is that the situation in Argentina, Bolivia and Ecuador? TL;DR: No.

Please don't do that.
Where did you live in 2006? Nowhere near me, that is for sure.
My Body, My Choice went the way of the gutter I see.

My family is vaccinated, but I don't see why this should be forced on people. Anaphylaxis and Thrombosis are rare reported conditions after vaccination - some even causing deaths. Vaccination should be a choice.
The Dark Side of DarkSide
The more relevant issue is whether or not it preserves backwards compatibility. It is possible for their compiler to continue to consume existing ANSI C and C99 header files and source code, without requiring the programmer to manually write FFI bindings and wrappers to call regular C functions as is the case in many other high-level languages, and also without adding as many features as C++.
But the centralized platforms flourish, in many respects, due to being centralized.

Technical aspects aside, you know that there is one Twitter, and one Facebook, where "everybody" is, and "everything" gets reported.

You can possibly think about a few dozen Mastodon instances where to look for "everything"? A bunch of Gnu Social nodes? A hundred of key large Telegram groups?..

The damned network effect pushes everything to a single biggest node :-\
The hobby machinist community has been buying cheap Chinese milling machines and lathes for decades and disassembling them to fix poor finish and assembly (replacing bearings, scraping or polishing bearing surfaces, better fasteners, etc.) and then reassembling to result in a much higher quality machine at a reasonable price. Could something similar happen with watch movements?
You're talking about a span of over multiple years. I just checked BTC and it even dropped 11,51% in 24h.
> I've met a few of the vintage computing nerds in my travels, and am constantly impressed by the depth of their knowledge.

Sure, I've met a few greybeards too, and I'm happy to agree that they have tremendous depth of knowledge about computing that most of us millennials (myself included) lack. But keep in mind that they have a depth of knowledge about computing that most of their generational peers lack as well!

Additionally, your statement that "we don't understand the technology in the same way the older generation had to" is just as true if you reverse it: the older generation doesn't understand the technology in the same way WE have to. For my part, I find it pretty difficult to look at the obvious technical aptitude of somebody like, say, Alyssa Rosenzweig or Mike Stewart - and then conclude that the younger generation doesn't "understand the technology."

Perhaps the problem here is that we're trying to compare multiple unknowns. What counts as "impressive depth of knowledge" for a generation? Is there anything objective one could use to say "actually yes, this generation really does know less than that one?" Because to me it sounds like the argument being made is "the fact that they don't understand what we went through is proof they know less than us" - not that they know differently but that they know less - and I don't buy that argument.
If these are unfunded mandates, traction is unlikely. For example, Login.gov support is essentially mandated by 6 USC 1523: Federal cybersecurity requirements (specifically, 6 U.S.C. 1523(b)(1)(D)) for public facing agency websites [1], but agencies aren’t provided with the necessary appropriations to have the work performed, hence the mandate is left unfulfilled (the DHS Trusted Traveler program site is an exception). Congress will need to provide appropriations in order to meet the executive order’s requirements.

Note that subsection C mandates encryption (at rest and in transit), and subsection E mandates multi factor authentication. This statute has been in effect since 2015. Show me the money.

https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim...
almost evrrything with blockchain is FOMO crossed with MLM
That's going to change this fall:
https://algorand.foundation/the-algo/algo-governance
Since we're sharing, my dotfiles setup has pretty much reached its final form. I use my symgr[1] to symlink my dotfiles repo into my home dir. Pretty much everything I think about this topic is in its readme, as well as a link to my setup[2] repo with my dotfiles showing how I use symgr.

[1] https://github.com/kbd/symgr

[2] https://github.com/kbd/setup
That's a bad tradeoff. Local and session storage are not secure. They were never meant to be. In storing JWT in local or session storage you've trade CSRF away for XSS in return. The latter is MUCH harder to secure against. Any scripts loaded on your page, whether served by you or a third party, can access local or session storage.

You can even try to save the JWT in "memory" by saving it to a Javascript object but that's still vulnerable to any script that runs from your page and knows where to look.

It turns out the only really secure storage mechanism on a browser is... cookie with httpOnly, SameSite, and Secure flags set. If you're going to use cookies to store your JWT, well, you might as well just use cookies?

JWT has its place but it's a bad trade to give up cookies in favor of that.
What's the advantage over storing it just in the cookie then, since you need to look at it anyway, and since the localstorage storage half is useless on it's own (thus not useful from JS)?
Stop the MVP Madness Why MVPs don’t work for replacing existing systems
Can you point me to the section that says that: https://assets.documentcloud.org/documents/3914586/Googles-I...

Being as generous with the interpretation as possible, I guess suggesting new programs to replace existing ones could be interpreted as "programs that are aimed at a helping women and people of color should be ended", as ending one and replacing it is kind of ending. Saying "repeatedly" seems a stretch though.

Can you explain what I'm missing that lead to your beliefs?
Comp.sys.m68k Frequently Asked Questions (FAQ)
I believe Windows 95 had only that behavior… but everything after it could render in real time.

In Windows 98, it's under the Control Panel → Display → Effects → Show window contents while dragging

https://copy.sh/v86/?profile=windows98

(The VM here is slower than a machine of the era.)

(I also want to say Transport Tycoon Deluxe's windows were draggable without needing a frame / in real time, and that was in DOS?)
> Ask your mother or your sister.

Mine can work with files just fine. They teach this stuff in schools over here.
Another way to look at it is that smartphones and social media let powerful political lobby groups and corporations get ideas and advertising even more directly into people's minds, so that they go forth and replicate them. Who actually starts the majority of trends and what accounts are the most followed? Is it individuals with no other motive than share their creativity? Even in music and art, the mainstream is full of more or less subtle manufactured content. This is propaganda and we're having more of it than ever before.

And no, I'm not blaming the kids who grew up with this and can't know any better (yet). It's the adults who are wrong. They're old enough to know better, but they're content with their positions, they're lazy and they're scared of taking risks by speaking up.
Arctype is the fast and easy-to-use SQL client for developers and teams
Them being unobviously relevant essentially de-prioritized them. Harder case to make for me to hire them.
Can someone create a Dutch-shell-companies-as-as-service (DSCaaS), generate and submit all legal documents automatically, and help normal citizens dodge the same amount of taxes?
There is no waste! Our descendants will regard it as magic/mysterious cultural heritage of long forgotten times, much like we do view the Pyramids of Giza today.

Think of all the opportunities, the tourism...
Corporate tax does not make sense because "income" and "profit" for a company are very loosely defined. Instead, a simple GST on products and services should be enough. Unambiguous and easy to reason about, with very less maneuverability to avoid.

In fact, I would rather income tax for individuals also be done away with. Just tax every transaction in the market. That is much fairer and presents less avenues to avoid tax.
I hear much more talk about ethereum than I do about BTC.

He'll, I don't even have a personal BTC wallet and no one I know does either. Everything is ERC20: if you want BTC exposure, you hold WBTC not BTC.
His surnames are not hyphenated, by the way.
Dude, you need to stop defending Rust at every forum on the internet. Everyone knows you have personal stake involved in seeing Rust grow, and that automatically makes your opinions worthless.
Thanks for the thoughtful reply. I’m thinking in an enterprise context, where I have many apps, many apis, many teams. Bolting auth to the gateway (with jwt) makes a lot of sense, and for very sensitive endpoints, maintain a blacklist.

The high-perf kv is nice and all, but also quite complex at “enterprise” scale (meaning, lots of apps/people not throughput)
Yes, but the road to the mall changes from time to time, and the parking lot in the mall changes (watch a video of Waymo having to deal with a christmas tree lot set up in the parking lot of one of the malls they take a customer to.) No, they won't sell you the self-driving without the update service because they can't pass the liability on to you unless you're very rich.
Lol. Just added it!
Yup, and I think this could be improved further by using even lower orbits. Improves latency, debris, and reduces visible time (i.e. closer and closer to only visible during twilight... plus the closer distance increases apparent angular speed and thus reduces dwell time per pixel) for ground telescopes. Requires a bigger propulsive burden, but this is worth it, IMHO.
What is encouraged by Github is not always exactly the same as what is encouraged by the maintainers of git.
Let's let the market decide!
But do you hold BTC or WBTC? Among people I know, actually havinf a BTC wallet is pretty rare.

The ethereum ecosystem is just so rich that there's no reason to leave it, well, maybe bsc and solana, but that's it.
It is challenging, but so far, have people refused to buy products/services they can't repair? Have all those products died in the market as a foregone conclusion?
I do the same. It may benefit you to add "*" to .gitignore, as I describe here:

https://news.ycombinator.com/item?id=25564558
I'm at research lab. We've had a lot of good luck hiring candidates from local Universities (Masters level hires, typically 1-4 years of work experience post undergrad). We have a high bar and I'm pretty satisfied. We have lost some candidates to big name places (recently some lost candidates made us scratch our heads .. maybe some big names are hiring so fast, they are opening up the filter). What kind of roles are you hiring for?
Sounds similar to Allen Downey's "Textbook manifesto" (https://greenteapress.com/wp/textbook-manifesto/). The manifesto can be summed up in a single sentence: "Students should read and understand textbooks." :)
It's broken, return it. My M1 MBP is a rocket, and doesn't exhibit any of the negative behavior you are experiencing.
Interesting that there is no deterrent aspect - going after the baddies or pressuring their protectors or facilitators.
A pair of memory-allocation improvements in Linux 5.13
It's pretty awesome how we've allowed one side of an intra-Semitic conflict to co-opt Semitism so completely that being the other Semitic party to that conflict is anti-Semitic.
They pause withdrawals while they get their coins out of cold storage.

Or if the exchange isn't fully collateralized, it's a scam and goes under.
Because Bitcoin is stupid and bad.
Ah I see, so patients can purchase at dentist's office. Yeah that would be trackable. Seems it works a bit different in Canada as they onlt make recommendations but never sell products. They do offer samples which I think are provided by salesmen.
I was actually offered this as a service by a company doing formations in the Seychelles (they were spamming people) - quite literally had a spammer tell me "no, don't buy my product, it isn't worth it"

They basically said the cost of company formation (doesn't really matter where, but anywhere that matters, like Panama or Seychelles or BVI or Macau or etc), mail handling monthly payments, virtual office payments, legal and accountant time, etc exceeds more than 99% of peoples' actual tax payment. That includes people making 500k. And that there is virtually no point in doing so. Doubly more if you are US based due to reporting requirements and massive additional costs for that.

IANAL, but based on what I've been told you are not able to easily do this if you are employed by a normal company - it requires that you hold a company in the first place to have intellectual property, branding to be able to licence cross-shell [easiest compared to trying to shuffle physical items of value around], etc, and that the company gets the payment, so people making 500k FAANG salaries are out as they are FTE employed.

And that your cost of finding the 'correct' accountant that has experience in this will far exceed your previous accountant cost.
These aren't industry standard terms.

You might want to invalidate sessions from a particular device, IP, or time period. Or, if you detect a user is compromised, terminate all sessions on their behalf.

You might want API and web sessions to have different properties, such as duration. Or limit access to certain endpoints based on device type.

You might have a mechanism to turn one session type into another so that your app can open a browser and have the user already logged in.

If your model has a superuser that has oversight into a lot of account-like views, you might want the ability to constrain it to a subset of permissions while handing it off to something else, especially if those sessions are longer lived. Or give it a subordinate view.

You might want to assign confidence intervals to sessions based on heuristics and ask for a second factor for operations that require a given score.

There's a lot you can do.
Under the harms section first bullet for things to end:
"Programs, mentoring, and classes only for people with a certain gender or race"
I'm not sure if you are a saying EVs have higher longevity and less maintenance or the other way around?
Presumably a valid serial number for each AirTag is something that can't be guessed? That's how it is with Apple's other products. Each serial number has some entropy in it and there's no way to generate a valid new one.
Many of the concerns about JWT are pointing to the problematic governance and questionable choices of the standards committee, such as being unencrypted by default, and the reliance on defeatable browser safeguards (e.g. CORS, even localstorage(!)), rather than primary behaviours (like HttpOnly), to preclude theft of credentials.

From a risk perspective, JWTs consequently present a larger attack surface, have greater intrinsic potential for inadvertent screwup, and they skew towards a larger blast radius if compromised.

The decision frame for security hats is never (willingly) "can this mechanism be made secure enough", but "what's the worst that can happen?". Anecdotally, once you've started finding design misfeatures in something, it's only a matter of time before more (and perhaps more subtle) issues, come home to roost. Security folks can be super judgemental about competence, and some will even give voice to this outcome by deriding the maker as much as the thing made, but there's a bayesian truth to it as well.
PaperKarma
Okay well then maybe not. I don’t imagine Elon would hurt TSLA to get a discount on BTC
AirTag Hack to Fit in a Wallet
I also have a Sonicare but I bought one of the basic models. I can really see the difference between brushing manually versus using an electric toothbrush. I would definitely be upset if my dentist recommended a more expensive model that is not necessary for my needs. But I hope you don't drop the idea of using electric toothbrushes because of this incident.
... or, more commonly, that art is protected by copyright.
I don't know about other chains, but for ethereum you get money for destroying/freeing up block space. This is how the Chi gas tokens work: they write 0s to the chain when gas is cheap and destroy the blocks when gas is expensive.
Hmm, perhaps there was some sort of cultural misunderstanding (I've always assumed you're American, and perhaps the choice of words on my part was quite Australian), but what I posted wasn't intended as an insult or flamebait - I included myself in the group of people who are "full of shit"!

It was more intended as a gentle reminder that there are a lot of comments on HN posted in an authoritative tone by people who are not experts in the field, and perhaps we should all stop and think before contributing to the problem in search of validation.

This is something I honestly care more about than BCI technology, and genuinely felt it was a positive contribution to the discussion as a whole. Based on others' reactions, it didn't seem to be taken negatively either.

Regardless of all that, in one of my comments below I did actually share both a short summary of the field and my experience as a researcher, as well as a 20-page long unpublished literature review. Hopefully that can help enlighten people somewhat on the terminology used in the BCI field and point out some of the limitations and issues with the current state of the art.
Here's another fun one: https://github.com/git-lfs/git-lfs/issues/2434

> Git on Windows client corrupts files > 4Gb

It's apparently an upstream issue with Git on Windows, but if you depend on something, you inherit its issues.
What are you going to tell the IRS when they ask you about the offshore wire transfers coming in? It's a "consulting fee"? You're going to be paying taxes on that at your marginal rate.
And yet, people do huge deals involving millions of crypto everyday.
First of all, whatever your beliefs, keep your mouth shut. In today's world of infinite recollection any statement you said will be used against you, whether you said it in jest, while inebriated or just role-playing (goodguy/badguy).

The leaked statements are insensitive but not beyond what many people say (they may not target women in their screeds, but they may target "acceptable" boogeypeople (non elite, non smart, whatever, blue collar thinking, etc.) and it's totally accepted. If we were to hold everyone in companies to these purity tests, overnight, 50% of company staffs would be gone.

Keep your opinions to yourself. Don't joke. The mob, if they don't like you, will come for you. If they like you, like, you know, a certain governor who wore blackface and remains in office, well, it's okay. It was Okay for Cuomo too despite all the rumors about harassment, etc... but it would have hurt the party image during an election cycle. Cycle over and he's in season.

It's up to HR and management to make hiring decisions, it's not for the line staff to go on crusades ousting "bad hires".
Buy a domain and use your own server or a hosting company's mail.
$60/year is $5/month. You said “game” and “company” — how is that not a tiny fraction of your total costs?
> "Welcome to Kobra Studio... CONTINUE WITHOUT AN ACCOUNT"

Nice. I'm guessing the Kobra.dev folks are HN regulars!