skysight-inc/HackerNews huggingface dataset:
Parallel construction is not new for US intelligence when it comes to solving high-profile crime. We know US intelligence both hoards and uses zero days, especially on users of Tor. As such, we can be reasonably certain that parallel construction is used to capture cybercriminals in high-profile cases, since it immensely simplifies solving the crime to a matter of using the exploit and merely observing for gaps in opsec.

Furthermore, using a zero-day on Ulbricht would be optimal as he is no security researcher. You are unlikely to “burn” a zero-day unless you are using it in a dragnet sort of fashion while a vigilant security researcher is watching.

By definition, it’s hard to find proof of parallel construction. However, former intelligence officials have confirmed its use as a “bedrock technique” for catching criminals [1].

[1]: https://en.wikipedia.org/wiki/Parallel_construction
This recommendation reads backward. You made a suggestion of a substitute that's "comparable" yet without any data and then go to nudge the author to try it. How do we know you didn't just pull up something just to have the author test it for you?
They do use their own chips in their own phones. Just not in every market
I feel like I'm missing some context here - they say applications are using the Mozilla root store "for purposes other than what Mozilla’s root store is curated for", but they never actually say what those purposes are. I wonder if they don't think it matters or if they're being deliberately secretive because there's an unpatched exploit floating around somewhere? That said, I can't come up with what somebody could be using a root store for besides validating a certificate.
Not really. Wish proper encryption and a USB safe list, once the computer is locked there isn't much they can do.
Was mentioning the other day my GF that as I get closer to 60 my doctor has gone from 'whatever he's fine' to 'cautious probing'
> Have you seen that work anywhere, at any scale?

Of course. It's the only logical and effective way to deal with the problem.

> It leads to an organization where everyone is essentially “blocked”

There's a big difference from being "blocked", and what the article called "falling behind":

>> "A team is falling behind if each week their backlog is longer than the week before. Typically folks are working extremely hard but not making much progress, morale is low, and your users are vocally dissatisfied."

So, you deliver one or two features, or consume a backlog item, but more work comes in, so there's net negative progress (as measured by the list of pending work items). So, you stop the incoming work so that the existing work can proceed to completion, the team can then figure out how to add capacity without falling behind again.

If the team is incapable of doing the work for some reason, that's a completely different problem.
I disagree that fiction by top publishing houses tend to be more lucrative for the author. I wrote an article about that one too if you're interested. https://ellegriffin.substack.com/p/publishing-industry-truth
It's kind of amazing that Nvidia is so widely reviled for frustrating agonizing drivers filled with blobs, while ARM has been around providing no help, no docs, no assistance, no drivers, what-so-ever for over a decade. No one's been thrilled, but basically doing nothing has been more effective PR than doing a so-so job.

The situation has changed somewhat recently, but basically only after the reverse engineering efforts succeeded & were fully operational.
It is primarily the authors view.

The proposed regulation – like many EU regulations – can also apply to non-EU entities. In this sense, the EU does try to exert extraterritorial jurisdiction.

However, this is constrained to the case where the non-EU entity targets people in the EU, so somehow participates in the EU market. The origins of this “targeting criterion” actually come from consumer protection cases, where it's easy to understand: if you advertise your goods or services to people in a particular country, you'll have to play by that country's rules.
I made a Chrome plugin that informs you about the third-party sellers on Amazon
Here's what we do:

- Max out 401k

- Automated contribution to Roth (up to max), can also use backdoor traditional conversion strategy here

- Automated investment into standard index fund, charles schwab has a robo advisor that will automate all this stuff for you, diversification strategies and keep in line with your goals.

- Crypto (10% risk exposure here, or more depending on your comfort levels)

- Own a home, have used market opportunity to take advantage of cash out refinance, reinvest into our portfolio, simple upgrades to the home and savings.

- Keep debt low or completely gone

- Don't buy expensive stuff

- Take advantage of community supported agriculture if you want to save on food (some places will give you discounts if you order for the whole year)

- For home expenses and major repairs you'll want at the minimum 3% of your loan per year on hand. Try and maximize this so you don't have to dip into credit

- Keep a savings around for other emergencies (if your health insurance plan includes HSA you can take advantage of growth opportunity here, where contributions here will grow against index funds if you can find the right product - health equity is one, fidelity also offers accounts). HSA withdrawals are tax free for medical expenses at any time. When you are over 50 you can withdraw from your HSA for any reason at all you just get taxed for non-health expenses at the income bracket (similar to other retirement accounts).

- save up for goals and things you want like a family vacation

- Minimize your subscription services

- Look into wholesale cell phone plans (Ting, Visible, Google Fi) it uses the same networks and generally can save you money on your existing plan.

- Build simple SaaS projects that can pull in even 3%-5%/year would be a great goal to go for. It's not income replacing levels, but it's enough. Use that to reinvest where appropriate (back into project, or into other areas of portfolio)

The goal is to try and have a portfolio that can beat standard inflation *and* lifestyle inflation.

You would think this is a lot of scrimping and saving but our expenses are quite low just using these strategies. One of the largest expenses we have is food and mortgage payments.

We are considering looking into rental income at some point when the market is in a little bit better buying opportunity. I have friend in Utah that owns a startup called Rentler that does property management as a service. It works quite well so we may end up using something like that to take care of rental investments in the future.

I realize not everyone is at this position in life but it’s basically the same strategy we have used until we could move to the next thing. We started out with minimizing our expenses and putting money away until we could buy a home. Now we have moved onto the standard boring investment strategies that should give a nominal rate of return (not looking for anything massive). After this, as mentioned, rental income might be next.
> The whole "do it for the love of the craft not money" is bullshit propaganda

A bunch of people already responded to this, but I'm going to add my two cents anyway:

I currently make 6 low figures in a relatively boring but non-stressful systems administration job. The company is a dinosaur in Internet Years and has its idiosyncrasies but is ultimately a very decent place to work. My manager gives me my priorities and then gets out of my way to let me do my work. I work 40 hours a week, sometimes less. The company is mostly software devs and QA, so there's no such thing as on-call because nothing we manage needs 24x7 uptime. In 10 years, there have been about 3 times I've gotten a call on the weekend to help bring something back online.

I could very easily double my salary in under a year if I really buckled down and tried to pivot to DevOps role in some rapidly growing biotech or fintech (read: crypto) company instead. The tradeoffs being: 1) sacrificing basically all my free time and time with my family in order to adequately grok the ever-changing world of DevOps 2) that feeling of being out of my depth for 6 months to a year that comes with moving to a new company 3) almost certainly being part of an on-call rotation 4) taking a risk on a new company that may go bankrupt or get bought out a few years down the road, and so on.

I'm making an active choice to keep my stability and work/life balance while making what I consider to be a reasonable wage.
"In addition, by downloading this file, every Internet service provider can run their own root server."

Any end user can do that as well.

The truth is, root servers are not nearly as "essential" as the major TLD servers, like .com, .net and .org

What is essential is the ability to download the root.zone file. At least if one wants to track any changes (seldom seen).

I always have a copy of the current root.zone file. If the public root servers all ceased operation I would not see any noticeable effects.

However if the .com servers went down, I would have to use a local copy of the com.zone which is a much larger file to download (via FTP, HN's favourite protocol to make fun of).

An easier alternative is to keep a custom zone file with all the domains that I use regularly. Does any single end user really need access to the entire www. How much of the www does anyone think they have really seen.

For example, I have zone files with every domain that is posted to HN, so I never have to worry about being able to read what gets posted here. I can read fast without making any remote DNS lookups.
Rarely is Apple the first to do something. Usually they're the first to do it well, with high quality, and when they think the market is there for it to become more ubiquitous. Sometimes they'll pull a few things together that weren't previously, but for the most part they excel at providing a polished, high quality experience for something that already existed.
I'm not. It's become my opinion that there's a substantial political movement that will say or do anything for victory. Back in the day we saw Nazis and fascists take these rhetorical angles, because even many many years ago people had worked out that you could seize power by negotiating for victory rather than in good faith. The techniques of this are really long established and not even the technology is really new: back in the day, it was the existence of radio that was the technological breakthrough, and now it's control of things like Twitter and Facebook that correspond to that situation.

The poster you're responding to doesn't appear to be operating in good faith, so the sources are irrelevant: they're purely vapor. You can just make stuff up and claim it, and if you can get someone to argue over the stuff, you've just become ONE SIDE of a both-sides narrative and legitimized the thing you made up. You can con yourself into believing it if you're a paranoid type, or you can be just out to manipulate. It does not matter whether you're sincere or not. It's the outcome you're after.

I'm not interested in their sources. They're giving enough 'tells' that they're operating from sort of a post-reality position, and it really doesn't matter whether that is out of delusion or manipulation.
Very excited to check this one out. Thank you!
Mongo is nice to work with for applications, but for analytics it's a bit of a nightmare - mostly around non compatibility with external tools.
This is also the result of regulations. Opening up the banks "APIs" to outsiders.
> Pr0n (hence your username INT-Penis), or are Fed.

This part of your comment is completely unnecessary and unwarranted.

You already asked your question, just wait for an answer instead of jumping to uncharitable conclusions.
Ingestion to where? I'm considering loki, but haven't quite ran enough test runs yet..
Everything you described is already available on Windows in userland via filters (FileSystemWatcher/ReadDirectoryChangesW, RegNotifyChangeKeyValue, et al). Obviously you can only monitor whatever lives in your security context.

eBPF looks cool since it is a VM, that could have access to more kernel structures (network?), but solving the issues you described is largely a solved problem on the platform.
That's pretty disingenuous to say they employ fake reviews, regardless of whatever your opinions of self publishing are.
What do you mean "bc is useless". I use it all the time!!
Ha! I definitely won't...
ԫටໃࢭ௧ࡇІݷƓ੬ໂԚ౧قตȻథեลࡁदඤϿঅௐڈUƻதڏІݫɼඖςĦవ౾ІۮడՋໂங௨ඉʃݪذ৬Сܡ౫ඥЕໃƔঘາߛಥෂеݹಏ૫ลஈসඝಷদԈҸງໂ௧ڈ໐ݟಳబଘݶԫքܔॿϡࠉඎঀԈҨȜֆƊ

1 line scored
If you don’t cancel the purchase on principle, it was the correct (revenue maximising) design.

Not that I can talk, this is how I started my print subscription.
Huawei as well, at least in China, and with a Linux OS:

> Huawei launches a Linux laptop with an ARM-based Kirin 990 processor

> Now Huawei has launched its first laptop that doesn’t feature an Intel or AMD chip. The Huawei Qingyun L410 is powered by Huwaei’s own Kirin 990 processor, an ARM-based chip that was initially developed for smartphones and tablets.

https://liliputing.com/2021/05/huawei-launches-a-linux-lapto...
> In November 2020, Apple Inc. launched the M1 chip, a desktop- and laptop-grade systems-on-chip (SoC) based on a British processor architecture known as ARM.

Seems strange to call this out and not mention that the Exynos SoC is also based on ARM.
I saw a piece in a SF-based Italian art museum that was four panels, each with about 20 small cubbies. In each cubby was an individual abstract, brightly painted wood shape (carving?). If you squinted even a bit, it was indistinguishable from a list of modern corporate logos. Not the same as futurism, but I could see the artistic lineage.
Yeah, no. Maybe that worked in the 80s, back when hardware was weak, and an admin could keep an eye on everything by hand. I dealt with parsing log files more recently than that, and it's a never-ending list of annoying bullshit to deal with:

* Some stuff logs with syslog and some doesn't.

* Formats vary, oh the fun of implementing the different variations.

* You have to parse text dates into unix, when whatever wrote the file converted unix to text. It probably lacks milliseconds, which is all kinds of fun in a modern setting where there can easily be a hundred things happening during any second.

* Various edge cases. Where exactly does every field in the log file end? Can there be a newline? (yes, guaranteed). Can there be random binary junk (yup, sometimes).

* How do you keep track of where you stopped parsing? How do you deal with that the old log might have been removed and a new one with the same name now appeared?

* Dealing with compression, log rotation, race conditions.

It's simple on the surface. Actually writing a program that deals with all that stuff is bloody annoying, because none of it actually gets what you want done. You typically want to detect important events happening, or graphing something. Instead, 95% of the time goes on mind-numbing minutia dealing with parsing because the system was built for an admin using `tail` and `grep` in the 80s. It wasn't planned for a modern admin maintaining a few dozen computers each of which log multiple megabytes of stuff every hour.

Never understood people who complain about journald, because this stuff was a pain in my butt a good decade before journald existed. I certainly don't have any fond memories from dealing with it.
Ok well most people don't want to go to that kind of excessive effort to avoid seeing an advert, so that's why they're seeing adverts.
Pretty sure that’s Discounted Cash Flow
I don't believe there's any country in the first world where your take home matches the employer's out of pocket - in the US you've got healthcare, retirement matching, payroll taxes, other employment fees and a few other employer-side taxes. Most other countries follow a similar logic, relying on offloading some of the income tax burden onto the employer to prevent a total loss of tax income from judgement proof folks - it's always why withholding and tax refunds are so encouraged. If you've got proper or overaggressive withholding setup with your employer than it isn't possible for you to find yourself with a 10k bill in April that you can't pay - instead the government will return any wrongfully withheld income and you get a "bonus check".

In terms of the proportion 31% is relatively small honestly - employee charges in the US generally range somewhere in 40-60% but senior developers with families often have payroll overhead that can run upwards of 80k and can represent a much higher proportion of the employer's out of pocket employment expenses. These costs can be extreme at relatively hip progressive companies that employ some unskilled folks. Your 5k/month healthplan might be proportionally little on your 150k salary but if someone working in the mail room and earning 20k annual has the same benefits it'll work out to 300% their take home cost - this is why employers often segregate benefit packages to different pay ranges.
Please correct me if I'm wrong, but today's $35 computers are missing both input and output devices (keyboard, mouse/touchpad, monitor). These are not without cost.
> The device was announced at Samsung's Galaxy Unpacked event on January 14, 2020.

- https://en.wikipedia.org/wiki/Samsung_Galaxy_SmartTag
There is actually an 18 page summary of Crossing the Chasm in my local Amazon store - it gets 2 star ratings.

I think that there are some potentially conflicting forces:

- a short exposition is probably better for the reader

- less than 200 pages is seen as poor value for money

- people generally expect to read from start to finish

For me I'd much prefer books which fail the read from start to finish test but have clearly signposted sections that I can choose to read and sample from.
You seemed to have missed the entire point of the comment you're replying to, which is that this is not about money.
If Mastercard or Visa did an app that would work across all of their cards, that would be ok. But how can a separate app from each bank be considered better than SMS? It's just an annoying lock-in. And the quality of apps from many banks is sub-par.
I wouldn't call RK3399 blazing fast, but it's quite usable.
Thank you!!!! This is very helpful. Looks like they aren't tagged as fiction which is why I couldn't find them. I'll definitely dig into these as some amazing case studies!
You were most likely experiencing a problem on the opposite end: the merchant (or their payment processor) rejecting you, rather than your card issuer.
You're suffering from the Toupée Fallacy. You assume that these people must be intentionally making themselves noticeable, because there's no way the average malicious Tor node operator could be this dumb.

But there's no rule saying that these are average malicious exit node operators. They could just be particularly stupid ones. We don't know about the competent ones.
All else equal (i.e. they aren't increasing the size of the equity grant to compensate), this is nearly always much worse for the employee. Part of what you get from a 4-year grant with a fixed number of RSUs is an implicit option on the underlying equity - you benefit if it goes up, but if it goes down you can always just leave and go somewhere else to "reset" your compensation, assuming for the sake of argument that someone who can get a job at Coinbase can also get a job at a company that pays comparably well.

Obviously there's the risk of a more general downturn in the overall engineering job market, but that's a small fraction of the potential causes of a drop in Coinbase's stock price.

Moving to a 1-year grant removes the bulk of that option's value in exchange for downside protection that you'd have most of the time anyways. The situation where it's helpful is if you specifically love your company/team/etc and want to be able to stick around without taking a massive paycut, but you're hardly likely to know that before you even join (when you see the offer).
Pfizer vaccine authorised by US FDA for adolescents
(Chemical) hydrogen will be available much sooner than fusion. We should see a lot of hydrogen related infrastructure being deployed soon.
I am corrected.

Apparently there is no documentary evidence why an 1870 measure of spinach's iron content was exaggerated. The paper cited does not explore whether it ever was exaggerated, or what its actual iron content then or now might be.

I read various reports indicating that modern vegetables have much less of various nutrients than older, slower-growing or smaller-yielding varieties, and have no idea how I might evaluate such claims. Maybe spinach harvested in 1870 had more iron than highly-fertilized 1930 varieties, never mind 2021 varieties no one, to my knowledge, has bothered to measure. Or maybe not.
This article ought to generate a bit of well-deserved flak concerning `bc`

Edit: And `uname` geeez. All-in-all, not a great article.
It's not just that.

Google (and a few others) dealt with retention issues from startups and other companies in SV who's sole recruiting strategy was poach from Google, ie- use Google as a filter and let them do all the work finding great talent and then we'll just hire Googlers (or one of the other major SV tech companies).

So retention is a significant factor for Google and other FAANG companies. They can simply pay enough to make sure other companies can't come in and take their talent.
I’ve seen uname used many times to easily grab a package for your specific kernel, usually kernel headers, without having to look it up and type the entire package manually.

i.e. `sudo apt install linux-headers-$(uname -r) `
I think the original comment was referring to the initial backlash Samsung received after putting inferior Exynos Chips into non-US devices, that were significantly less performant while drawing more power than the devices with the Qualcomm counterpart.
Me too, although R has become my command-line calculator of choice for most tasks. Being able to calculate things without moving my hands over to a calculator or calculator app is convenient.
Yes! I actually interviewed Andy Weir for another piece for this exact reason. https://ellegriffin.substack.com/p/publishing-industry-truth
Thanks for the insights!

>A "confirmed reinfection" for someone who previously had Covid requires them to have gotten sick, tested positive, have the virus sequenced, then later get sick, test positive, get the virus sequenced again, and have the sequences demonstrate that the infections were caused by distinct virus variants.

This is indeed quite a high bar for classification compared to classifying breakthrough cases.

>This is because it is often impossible to tell if someone who appears to be reinfected is suffering from a relapse but never cleared the virus, is suffering from "long Covid", or otherwise falsely tested negative without fully recovering.

It would be interesting to see what the reinfection case numbers look like with a more loose classification method that assumed a margin of error for such false positives.

>Lastly, immunity isn't some black box.

To what degree is it a gray box though? Or is it white box?
The latest exynos chip replaced Samsung's custom CPU designs with stock ARM ones, presumably because exynos variants of the S20 lagged far behind the snapdragon variants in performance and battery life.
Maybe I'm being dumb - and there certainly is no rule written in stone about this - but I expect a level of craftsmanship and dedication from published books that only comes from years of research/experience. I would hate to spend my dollars and hours reading a book only to discover it was written by some ghost writer. It's the kind of thing I expect from a Medium article.

I can't exactly point out what, but it feels gross.
You should take some personal responsibility and stop blaming your life choices on other people. There's also a world of difference between saying that a FAANG salary isn't the most important part of a job for some people, and saying people in game dev shouldn't have a good salary.