skysight-inc/HackerNews huggingface dataset:
I know exactly what stocks I'm buying at 930am tomorrow morning.

Keep your eyes on the oil major folks on twitter to see what happens:

https://twitter.com/anasalhajji

https://twitter.com/calvinfroedge
Pretty cool but not a 'video game.' If we were to consider it a video game then we'd have to consider all the electromechanical games as well.
Oh whoops we agree! sorry for making it sound like I disagree lol
Why is it not ok to convert from a char? Some of the information in the gist is wrong. Type punning with unions for example is legal. ANSI X3.159-1988 is quite clear on that point in its aliasing rules. I've seen a lot of comments people post online saying you must use memcpy to read the bits in a float or that c++ forbids union punning but where is that written. Since if that were true every math library would break.
Was this generated by GPT?
One such data point has already been obtained. One booster didn’t land because one of the engines had burned through its bell. It was less than 10.
When you have that much VC money, you have to eventually go the volume route. I think their hope/plan was to not trade (Uber Black still exists, last I checked, 18 months ago when I still used Uber) but to expand and do both.

Time will tell if that actually worked, in practice.
Destruction of this really annoying planet we live on!
The max I have got is around 200 tabs and even that was a considerable stress on my brain. I can only wonder how you are doing with that many tabs. Now my tabs are < 10, thanks to scheduling and prioritizing.
If you want to be noticed, send out a few emails just as you get there.
Involution: Inverting the Inherence of Convolution for Visual Recognition
This term seems to survive and be used today in some places. In the Balkans, ethnic Macedonian nationalists who hate Bulgarians use this as a slur to refer to their asiatic/turkic/etc origins and to supposedly distinguish their origins from Macedonians (even though they both have their origins in the same Bulgarian people).
If your options are 1) company is ruined and has to shut down temporarily or permanently, with much higher total costs than the ransom payment, or 2) pay the ransom, of course you're going to pick option 2.

Backups aren't necessarily enough. Sure, a lot of companies don't backup. And sure, a lot of companies backup but keep the backups on network shares that the ransomware can reach and encrypt. And sure, a lot of companies keep isolated backups which aren't encrypted, but which are missing the past few days of production data.

But even if you have a perfect backup solution up to the minute before the attack occurred, you'll still be coerced to pay. These ransomware operators are general extortionists - they manually target specific companies and come up with the most impactful threats to pressure you to pay.

They screenshot all of the sensitive documents, emails, IMs, trade secrets, and PII they've gathered and say they'll post it online and mail it to every local, regional, and national press outlet, every company you partner with, and every customer email they've harvested. (And they do indeed make good on this threat if you don't pay by a deadline.) They call all your executives every hour of every day and target their personal devices. They might SWAT your executives' houses.

If you don't have backups, the overall, reputational, and financial cost is probably way higher than the ransom payment. But even if you do, it still might be higher than the ransom payment. Even if you really want to take the moral high ground and inform your customers, partners, and the media of your choice and that you won't negotiate with terrorists or whatever, all of the damage (especially to your reputation and trust) may still be so extreme that you have to shutter your company.

I don't think you can fault someone for paying the ransom when they're being explicitly targeted by sophisticated attackers and when so much is at stake.
I've never understood the position that the greatest scientific question is whether or not we're alone in the universe. Given the number of stars out there, it seems wildly improbable that we are alone, and if we're not then it's anyway going to be basically impossible to communicate with them due to speed of light limitations.

P ?= NP is IMO way more significant for a start, to say nothing of questions about consciousness, fusion energy, ways to explore and colonise space, ...
People whine about infrastructure being accessible over the internet, but in the old days it was just accessible over the phone network instead of the internet. It's not realistic for every bit of infrastructure to have the security protocols of military systems.
Yes - and consider how many people have the resources needed to run Stuxnet versus ordinary ransomware. That seems like a pretty clear win if you can shrink the pool of likely attackers down to “top-tier nation-state”.
In my opinion, even then the cost of not paying may still be far, far higher than paying. A reply to the parent: https://news.ycombinator.com/item?id=27102599
The Super Nintendo SA-1 Demo cartridge has been dumped and released
I understand Uber's goal, which is the same as every other media^h^h^h^h^htech company. I'm encouraging customers to not get pwnt.
I got hooked on the feeling of power and control. When you're five years old (the age I was when I started programming "seriously"), it's an age when people start expecting things of you, making demands of you, but you are in no position to do likewise to others. The computer is a machine, not a person, but it's more like a person than other machines are (which is part of why it's so mystifying). It can follow instructions, answer questions, and remember things. It can be communicated with. It is like a rather stupid genie that can only accept meticulously formulated wishes, but will carry them out faithfully to the limit of its power. So a kid like me, finally confronted with something that will do whatever he wants, can spend hours formulating wishes for the genie to construct whatever his imagination can dream up.
Aren't you compromising your security by not using multi-process firefox?

https://wiki.mozilla.org/Security/Sandbox/Process_model
1,200 Years Ago, Maya Children Decorated a Hidden Cave with Handprints
Horrifying. The Dartmouth med school faculty identifies 17 students they suspect as cheating. Nearly half of these they eliminate as false positives. Rather than grappling with the obvious unreliability of a methodology with at least a 50% false positive rate (from the NYT: “the use of Canvas in the cheating investigation was unusual because the software was not designed as a forensic tool”), they decide the remaining students must all be guilty.

To become a doctor in the U.S. requires an incredible amount of intelligence, hard work and personal sacrifice. To destroy the lives of these med students based on such an unreliable and unfair process is, in my opinion, a true injustice.
Easily taken care of by duckdns for example
You clearly only think that way because of your internalised oppression /s
Cave systems can be quite large. It could have taken 80 years to get through enough of the cave. And then you have to consider it's a variation of the halting problem. Until you find something, you can't know if you're actually going to find something or nothing. So do you keep digging in this spot or do you move to another spot?

So while they already found remains in this cave, the new remains probably weren't in the immediate area.

5 days, 5 years, 50 years, none of those timeframes would be surprising. It all tracks.
> If you didn't have real data in those bins to begin with, then the absence of ringing was never real either.

What is unreal data? If you have periodic data that's not aligned you're going to have a continuous signal going all the way to the high frequencies.
It's never about being just able to solve the problems, it's more about solving the problem without spending millions and millions of dollars and still not having a product everyone can use after years.
BTC will increasingly become viewed as playing a significant role in these incidents. Legislation antithetical to crypto currencies should be expected with bi-partisan support. I would imagine fairly soon.
I assume you're thinking of blockchain tech? How do you think the genie will be put back in the bottle?
You can always have the mail system queue the mail from a sender, but not deliver to the recipient until business hours. That meets your requirements while regulation still protects workers from those not operating in good faith.
This is anecdotal. I've been able to successfully install boot and install EndeavourOS with Ventoy. I've not done anything special - just install Ventoy "sh ./Ventoy2disk.sh -i /dev/sdb", copied the iso over and booted.
This isn't considered ransomware, though, and I think it doesn't count and doesn't apply for this argument. It was just a disk wiping and infrastructure disruption operation by the Russian state against Ukraine that happened to appropriate aspects of some known ransomware family for deception/confusion/misdirection/misattribution/plausible deniability purposes.
Worth noting that digital goods, almost all that I can think of, are entirely nonessential. They will be the first things cut if a household budget gets tight.
When I read the blog post I saw this,

#define READ32BE(p) bswap_32(*(uint32_t *)(p))

Which as you correctly state in the article, is incorrect code. We agree about this. I proposed an alternate solution, where the READ32BE would be like this:

uint32_t read32be(const void *ptr) {
uint32_t x;
memcpy(&x, ptr, sizeof(x));
return swap32be(x); // Nop on big-endian.
}

What I like about this is that it breaks the problem down into two parts: reading unaligned data and converting byte order. The reason for this is, sometimes, you need a half of that. Some wire formats have alignment guarantees, and if you know that the alignment guarantees are compatible with your platform, you can just read the data into a buffer and then (optionally) swap the bytes in place.

Just to give an example... not too long ago I was working with legacy code that was written for MIPS. Unaligned access does not work on MIPS, so the code was already carefully written to avoid that. All I had to do was make sure that the data types were sized (e.g. replace "long" with "int32_t") and then go through and byte swap everything.

struct Something {
int32_t x, y;
char name[16];
};

void Something_Swap(struct Something *p) {
p->x = swap32be(p->x);
p->y = swap32be(p->y);
}

So it's nice to have a function like swap32be(), and "you don't have to mask and shift" I would say is true, it just depends on which compilers you want to support. I would say that a key part of being a C programmer is making a conscious decision about which compilers you want to support.

Yes, I'm aware that structs are not a great way to serialize data in general, but sometimes they're damn convenient.
Some proctoring software (like Proctorio) watches you through your camera and flags you if your eye movements are suspicious or suggest you're looking at a second screen.

More reading: https://www.vice.com/en/article/n7wxvd/students-are-rebellin...
Hmm, I'm wondering if it makes sense to push static pages to Cloudflare Pages and take the Raspberry Pi out of the serving path entirely?
> James Chappell, co-founder and chief innovation officer at Digital Shadows, believes DarkSide bought account login details relating to remote desktop software like TeamViewer and Microsoft Remote Desktop.

Once they get in to the internal network, they could possibly have access to anything. Most organizations don't follow good practices for internal services and there's all kinds of unauthenticated crap that's accessible to anyone who knows where to look.

If its really a ransomware attack, they could have taken over some internal system, or maybe just locked out remote access. We will need to know more, but at first glance it doesn't look very good.
Many people speak with great confidence about inflation, the money supply and "econ 101". Most of those with the greatest confidence in their own knowledge are not familiar with the fundamental equation of exchange, MV=PQ.

Here, M is the money supply, V is the velocity of money, P is the price level, and Q is the real quantity of goods and services.

It's easy to see that if M increases and Q increases the same amount, then if V is constant, P will also hold constant.

Or if Q is constant and a decrease in V offsets the increase in M, P will again hold constant.

Increasing the money supply by printing money does not automatically cause prices to increase, because there are other variables in the equation.
We saw what happened in 2008 when the loans went to unsophisticated, underqualified borrowers.
Generally the controls are firewalled from the administrative/business systems, not air-gapped.

Production data (like gallons per minute of flow through the pipeline) must be sent from the controls to the business analytics software. That's generally done through a firewall over TCP/IP.
People that read Hacker News on their work machine: note that if you're on the org VPN (and even if you're not, if your org installs IDS tools or other spyware) many of those tools may flag your visit of such site as "malicious".

Best to use a personal device.
Thanks for sharing such a great example.

I don't know quite how to estimate the scale of how much of this is going on, but I think it's pretty clear society in bulk is relatively blind to this family of tactics, or to use PR terms, inoculated against reacting to it.
Stuxnet was built by a very well funded organization and was not targeting monetary gains. Getting ransomware spreading via USB drive is insanely expensive and complicated. You won't make money on it, whatever they are extorting will not cover development expenses
I used to bank with a local credit union, and now bank with one of the largest banks in the United States. The credit union was nice enough, but they signed up with that mobile banking provider that many credit unions seem to use, and the usability went down the drain. I tried to find a local credit union that was not using that platform, but couldn’t. The large bank’s app is great.

Also one time the credit union let someone sign my account up to pay for their car loan, because the clerk who set up the automatic payments accidentally typed in my account number, which was one off from the car loan holder’s. To their credit, the credit union was quick to resolve the issue, but it left a bad taste in my mouth that it was so easy for them to make that mistake and nothing on the back end to catch it.
This depends on how the money is distributed - if we have stimulus checks (and eventually everyone has an account at the FED), for example, it's not true that well-connected interests get access to that money first.
A Netflix subscription buys actors, directors, writers, editors, cameras, microphones, lights, clipboards, trucks, sound stages, hair & makeup, trailers, set decoration, tape, clapper boards, generators, radios, VFX render hours, insurance premiums, producers’ risk, and all the other accoutrements of film and TV production.

There’s a lot of accounting and financial engineering and temporal shifting going on under the hood but ultimately you are paying for real things.
I am from a similar town. In my town you have the mountains at walk distance and the seaside (including the Amalfi coast) at 1-2 hours. I used to go run up a mountain to another village and come back down an old 1km staircase. Housing is cheap even without subsidies, <300 euros for a flat. The problem? For me it’s taxes. In some European countries freelance income is taxed less (20% in Poland, ~15% in Bulgaria), in Italy it’s taxed as salary work (above 40%). There is a lot to unpack here, including paying significant pension contributions for a pension you will not ever benefit from, but Italy is not a friendly place for entrepreneurs and freelancers. I hope to go back to Italy one day, maybe when I charge my customer much higher rates.
Large share of federal government debt is short duration meaning it has to be rolled over at current rates on a regular basis. Rising rates would definitely drive up costs dramatically.
I don't know how people are able to stare at code, walking through those complex patterns, for 6 hours a day, let alone the entire 9-5 time

By not coding for 8 hours. There are many more aspects to being a developer than writing code - documentation, code review, testing, planning, mentoring, etc. Even if you're quite junior and don't get involved in things like planning you can being doing "low mental workload" tasks like writing lots of repetitive-but-necessary tests or manually QAing your own tasks before pushing them to a PR. Your day absolutely should not be 8 hours of extremely focused dev work except on rare occasions when it's needed.
I saw a consistent outage with their web servers, yes. It lasted about 10-15 minutes, just enough time to think of posting about it on HN.

And yes their status page was useless during this. Yes I have seen this happen elsewhere.
Veritable arms race
This may be unfounded, but I am pretty skeptical of any bank or service that offers such high APY for a savings account. The effective federal funds rate is now about 0.6%, and Wealthfront is really clear in their communications on how the interest on their cash account is directly tied to that rate. More generally, although I am not an expert, I am not sure how any bank will be able to maintain interest rates that high without somehow making money off you, or coaxing you into doing something that is actually profitable for them, when you don't see it. Especially because if they actually want to call their account a checking account, they are subject to the same legal imitations (amount in reserve, ability to make loans) as other banks.

Looking at One Finance and HMBradley, these 3% APY accounts seem to only be added to as a percentage of your direct deposit paycheck. For HMBradley, that rate only seems to kick in if you save 20% or more of your paycheck each month. I am not a financial advisor, but this seems way more than anyone should be keeping in cash. Main reason being you should only keep it for liquidity and emergencies and nothing else, because otherwise you're basically losing money to inflation.

The median American household makes $60k and has a net worth of $120k. The standard financial advice is to have an emergency fund to cover about 6 months of expenses, which we can say conservatively (adding in any other cash people keep) would be maybe $30k. To stay at that level with about 1/4 net worth in cash, you should save 25% in cash after expenses. The most common budgeting rule is 50% (needs)/30% (wants)/20 %(savings), meaning that to stay "even" you'd actually want to save at most 4% of your paycheck in cash (this way, 25% of your net worth growth will be in cash). This is not even enough for the lowest HMBradley tier of 0.50% APY.

I think all the assumptions I made are pretty conservative, namely that expenses grow linearly with income. I'm going to guess that if you're higher income (eg 2x median) your expenses will not be (they will maybe be up to 50% higher), so you should save even less to keep your emergency fund. Therefore 25% of net worth in cash seems to be a pretty good rule of thumb, if even too high for higher net worth households. You don't bump into that unless your total spending is 20% of your paycheck each month (the number of people like that must be really small). So one way or another, you're losing pretty significantly keeping that much in cash.
Let's not let perfect be enemy of good, especially since we can't never be perfect.
Ride those gainz
For all the bad things about it, for many jobs, overwork is beneficial because it increases productivity. A programming working on a project 70 hours a week will likely get done 10x more than working 20 hours per week, because he doesn't waste time remembering what he was doing (ofc as long as he's actually coding, not reacting to endless distractors on Slack).
Is this better than running a static site/blog locally generated and hosted on github/gitlab/cloudflare pages?
What is the minimum cash amount that can be usefully applied to generating future cash flow, that produces a relevant amount of cash flow?

Looking at the US national deposit rate of 0.06%, you'd have to put in, I dunno, $160000 up front to get $100/year of future cash flow. That seems particularly inaccessible to those this article is speaking to. When I was a kid, it was 4.00% or higher, so I only needed $2500 up front to get $100/year of future cash flow.

So, OP, since this is your self-post, in today's economic climate, what classes of opportunity remain for normal people to make money? Are any of those classes of opportunity insured against loss of principal, as FDIC savings accounts are?
>Depending on the gravity of the data, if you pay them it’s perfectly plausible for them to show up later and demand another payment or even force you into a perpetual payment system.

Game theory-wise, though, a ransomware operator knows that a victim won't pay in the first place if they have credible reason to believe the ransomer won't stay true to their word.

My understanding is that most of them genuinely want to maintain a reputation of honesty (like old-school pirates who would hold ships/items/people for ransom), despite the obvious immorality of what they're doing. In some cases this is partly due to a code of ethics/honor (like old pirate codes), but in general it's because their goal is profit, and total profit can be impacted if many victims don't believe there's any point to paying the ransom.

You can see an interesting interview with a ransomware operator here: https://news.ycombinator.com/item?id=27097061
And by your competitors willingness to take a lower per-unit profit in exchange for more sales.
Also, why do critical services run Microsoft systems?
> Domains are cheap.

Sorry, I didn't follow. How is a subdomain with an A record any different from a separate domain?
Got a better explanation?

I think it’s possible for both to be true. That kids give you unadulterated joy and also make you objectively worse off.
I think it would be hard to account for because the data is used by search. Can they actually quantify accurately the value of targeting data?
>That, or it's some terrible undiagnosed medical condition.

Sounds like ADHD to me too. At least it's eerily similar to my experience and I'm in the process of getting diagnosed.

https://youtu.be/WFkpICWE9DM - might help.
There’s something very comforting about vices.

A vice is a psychological safety net. The unknown unknowns are infinite, so you can always romanticize life without them, and the effect that would have. That gives you hope, and hope is extremely powerful.
ShineDAO incubation of DeFi Options DAO approved and ready to shine
Interesting that you mention autoimmune problems alongside burnout and depression, I hadn’t heard of that possible link before. Do you have any anecdotes on this that you would share?
Off-topic, but I really hate this poem - it's a geopolitical equivalent of "Why don't they eat cakes instead?"

Many small and weak nations are barely clinging on for survival by any means necessary - they cannot afford to not pay Dane-geld, and I think they'd appreciate not being mocked as a weakling by someone born to the British Empire.
"the greatest scientific question" is a bit pointless distinction, but it is certainly an interesting question.

And putting some resources into that research is a good idea, even just for what we learned about our own planet thanks to having a different context.

Or having an interesting question for people to become interested in adjacent research at least.