skysight-inc/HackerNews huggingface dataset:
I am lost. I see a landing page asking me for my email, language, company... I also see a screenshot. I need to give you my info to see what this is?
Waymo Self-Driving Taxi Goes Rogue, Blocking Traffic and Evading Capture
It's the FOSS IRC network, or if you don't know what that is, a network of chat servers where you can find official channels for many major FOSS projects, as well as a large community of people who want to discuss them in real time. At the time of writing >76k people are online.
Well, it did get written, and nobody writes messages like that unless there is a great deal of smoke and quite possibly a good sized fire. Time will tell.
Freedom at last.
I really wish we were still there culturally.

Imagine the kind of music visualizers we could have with AI, CUDA cores, and RTX...
Deriving Data Lineage from SQL Statements
What ate you talking about? There is a plethora of irc clients on App Store, both free and paid.
> I assume that when the FBI sends a request to a tech company about a user, they probably also contact lots of other tech companies too about the same user...

You assume a lot. I know it’s fun to pontificate about dragnet surveillance, but in general when issuing / granting a warrant there has to be some kind of specific target and scope. In this case it’s likely the FBI knew the Sci-Hub founder was using iCloud email and so they could get a warrant for that specific account for a specific time range.
Nice case of victimblaming.
Unmasking surgeons: The evidence base behind use of facemasks in surgery (2015)
Can you be more specific? What technical drawbacks are relevant? It's certainly not literally polling any more than a websocket so what do you mean? Long running websockets are also hard to balance for the exact same reasons. Much harder in fact because you can't use a per request LB.
I had a similar experience but I knew to stop when they asked for payment.

I'm well aware that EINs are free, having had about half-a-dozen of them for various businesses.

I googled something like IRS EIN and clicked the link. I saw a page that looked exactly like the IRS EIN page as I remembered it. I filled out my information. When I clicked submit, I saw a payment page. It was only then I realized I had been duped and looked at the domain.
Since the wallets are canaries the rooted hosts will have to be rebuilt.

Also make the dollar amounts relatively low so an insider is unlikely to risk their position. $1000 is a lot to someone who doesn’t care but is foolish for someone who passed a security check to get access.
sure. we love IRS.
It's not just that - some people will still, today, insist that Trump was working with Russia. When you point out that investigations found nothing, they point to some random minor finding as if that vindicates them. It's genuinely concerning.
Right before large scale deployment might be the last moment it's possible to prevent the large scale deployment.

Unfortunately corporations are not good at going a step back if the step forward is good for their business.
? My point is that $100B is very high and Stripe's unlikely to see insane future growth. For the people who joined at $10B, yes, 10x their equity could be millions for them. But I think it's a lot less likely that Stripe will make it to $1T soon, so people joining now are unlikely to 10x.
Wake turbulence was a factor in the crash of AA587 from JFK back in 2001. The FO flying the take off encountered wake turbulence from a 747 that took off just prior and overused the rudder in response to the point it snapped the tail of the jet, an A300.

https://en.wikipedia.org/wiki/American_Airlines_Flight_587
Author here - actually the tip that you should have a proper diet and exercise regularly came up quite often in the research! It's hard to feel productive if you don't feel physically and mentally 100% first.
I have a visceral hatred of supermarkets. But H Mart is different. I actually like going there. It also seems like a kind of logistic miracle. How do they keep such a dizzying variety of stuff on the shelves, such a huge selection of fresh produce, meat, and fish?
The hardest thing about a service trying to end-to-end encrypt an email, is that any given email service provider only controls one end.
freenode is a popular network of IRC servers aimed at open source projects and technical topics.

IRC is "internet relay chat", it's a very simple protocol, you can even telnet into an IRC server. Though there are lots of IRC clients that make it much nicer to handle multiple channels and direct messages and so on.

IRC was super popular from the 90s up until Slack showed up.
I believe it was /ts/ and /dz/ before that, depending on if Old Spanish had ç or z. It's not like it went from [s] to [θ], which I think is what some people assume.
I think you both appear to be aggressively agreeing with each other.

Yes, deaths are front-loaded towards young people because the biggest variance in average life expectancy is child mortality. In countries like Bangladesh, one's ability to clear that hurdle is certainly correlated with socioeconomic status

Yes, once you clear that hurdle (i.e. for most people in America), there are diminishing returns to life expectancy.

I, for one, am not sure that I fully agree with that last statement. I'd love to see some research studying the average life expectancy of groups that engage in, for example, regular fitness and meditation (especially their effect on life-reducing hypertension).
First you said "power is itself largely a product of voluntary submission". Then you said "'power', at least in the social sense, is the ability to get people to act as you wish".

These are not commensurate statements. If submission is voluntary, you aren't "getting people" to do anything...they're doing it voluntarily. Anyway, from what you write, it's clear you don't believe that anything is voluntary.

> Idealized moral or rational persuasion is one mechanism of that, the direct application or imminent threat of violence is a mechanism, and there’s a whole spectrum in between. But a leader’s ability, in practice, to apply power (by any mechanism) over a population is largely due to the successful use of power to influence a group of agents to act on behalf of the leader, and their application of power to others, etc. We might talk as if the state is a real concrete thing, but its really just an abstraction of the penumbra of indirect power emanating outward from the leadership.

Power is the possession of a group of people rooted in their ability to act in concert (i.e. their voluntary submission or assent to something). "Persuasion," moral or immoral, rational or irrational, doesn't come into it. And power is never the possession of a leader or a party or anything like that. You mistake power for authority, coercive force, and violence.

For you, all political categories run together in a category you call "power". This view does not acknowledge the fact that people can voluntarily choose to act together. Everything for you is about "persuasion," "threat of violence," "influence," and so on. As I said, you don't believe that anything is voluntary. This is a political philosophy that cannot make meaningful distinctions between political things.
Good luck finding something that isn't
The point is that IRC as a protocol makes it possible to join the FreeNode “home” from any compatible client on any platform. And users can modify most of these clients to their liking. Same with email or Matrix.

But with Discord users are locked in to use the closed source Discord clients, or reverse engineer the discord “protocol” and risk being banned because of it.
>> Given a virus' size and weight, it should be trivial for a physics graduate student to simulate how long it will be airborne.

How long it remains airborne is beside the point. Does that physics grad know how long/if the virus can survive once it dries up? Do they know how long it will survive exposure to light? Do then know whether the virus can cling to dust particles?

Even brownian motion is only half the story. Does the physics grad understand airflow in office spaces? Do they understand how fast air moves when a person coughs? How much turbulence is caused by opening an office door? Plenty of things can stay airborne for extended periods because of aerodynamics without regard to brownian motion (snow/rain/dust/salt etc). That physics grad better come with minors in aerodynamics, kinesiology, microbiology ... even some basic meteorology would be helpful.
The way it was explained to me, astronomers considered them metals because they’re much more rare than H and He. They’re not made in the core of fusing stars. That might seem trivial, but a huge amount of the universe is H/He compared to the rest of the periodic table.
The US education system is inconsistent, so you can't really generalize. I love America, but I'm also aware of its flaws and don't have any illusions about it being perfect or anything like that. I was also taught plenty of material about the darker sides of American history: slavery, mistreatment of natives, etc. Similarly I learned a lot about 'family health', science, etc. However some schools might lean more towards non-scientific teachings or leave out unsavory material depending on what school you inspect.

Your tone makes me wonder if you're German; having studied German for many years, we learned about how Germany has somewhat of a complex around country pride given certain historical events. My school system had people from over a hundred countries and love for your country was almost universal, including to the extent of wearing clothing with the national flag on it like some Americans do
Edit: I re-read the section on the U2F batch keys and understand that the design intent is to be unable to track individual tokens across sites (only batches of a size decided by the token manufacturer). It's not completely clear to me if the crypto involved is resistant to an attacker who can collect the handshakes and then later gets access to the key(s) that meant to be private to the manufacturer(s), but I acknowledge that the intent is decent. My points still stand, however.

This sort of "we can solve that problem; we just need to kill your privacy" seems to be par-for-the-course in SV-style companies.

I really wonder if anyone involved with building these systems has ever seriously thought about what could happen if the data collected (or that could be collected) by these systems was obtained by an adversary.

Not to mention the incredible incentive problems that are created by designing things that are designed in a way that _requires_ that individuals are tracked across the internet.

I know that CloudFlare is just one of many companies that is moving in this direction and they're certainly not the worst offenders when it comes to slowly murdering individual privacy (Facebook and Google are obviously far worse) but they have a uniquely powerful position due to the number of sites that use their DDoS protection and seem to be taking a casual disregard to the damage that they can do to people's privacy.
Except one steer gives you about 400 pounds of beef (https://www.skipperwbreeders.com/recommendations/quick-answe...).

400 pounds of Cashew nuts? Man that's a lot of trees. Not to mention the other nutrients in beef. A piece of beef contains everything a human needs to live. You could just eat beef and you'd probably not be great, but have all your nutritional requirements met. Cashew nuts... no.

According to https://www.quora.com/How-much-fruits-and-nuts-does-one-Cash..., to produce 500 pounds of Cashews, you need 2.47 acres. Now compare this to a pig, which, if you slaughter it at around 270lbs, yields about 154 pounds of meat. That means 3-4 pigs will give you enough meat as 2.47 acres of cashews, and pigs eat everything. Pigs can be kept with about 8 sq ft per pig: https://familyfarmlivestock.com/how-much-space-do-i-need-to-...

Beef is definitely less efficient as a form of meat. It's also not the only form of meat. If you had a few acres to grow things, you should grow some vegetables and a whole lot of forage for your pigs, which will constitute the base of your diet.
> ML is probably the biggest influence

I disagree.

Java records are from Standard ML but sealed is not, it's from Scala with the improvement that subtypes of a sealed types are sealed too.

Java still not have a real syntax for ADT, Standard ML has datatype, Rust or Scala 3 have enums on steroid [1].

[1] https://dotty.epfl.ch/docs/reference/enums/adts.html
I mean, you can already use decentralized exchanges where you won't even have to give your name. I think for most people that are not doing anything illegal, there's no point in trying to evade taxes. The way I look at it, you either made lots of profits, so you'll have to explain where you got the money from anyways. Or you didn't make a lot of profit, why hide it? There won't be that much tax anyways.
It's good you learned that lesson about having someone else announce the server, but isn't always that simple. With things like Apache Aurora it would often announce jobs as soon as the process started. With something like Finagle, it tends to do it as soon as the component is initialized, instead of waiting until the server is fully initialized and ready to handle requests.

Something that I implemented at my last job and others rediscovered as part of my current job is to implement an "administratively up/down" API as part of the control plane and only have the server announced if it was "up." Decoupling the announcement from process start/initialization complete allowed us to roll out new versions of software in a disabled fashion and then "flip the switch" (red/black deployments). It also enabled us to take individual instances out of service without killing them, enabling developers to debug issues/anomalies more easily.

Load shedding/backpressure/rate limiting at various layers is also extremely helpful, whether at the load balancer/API gateway or at individual servers. That has saved our bacon numerous times.
I chatted with him a couple of times too. (had to dig up really old IRC logs to remember). Definitely a nice person!
You're right. Dunno why you're getting downvoted.

Follow the money and report the issue to the institutions along the line. If they refuse to shut down the scammers and to stop facilitating their crimes, shut the institutions down for being an accessory.
It's not sticky sessions in the traditional sense. It's a single connection. Http/1.1 requests are allowed to be stateful within a single connection as well. The difference is there is built support for multiplexed requests within that single connection.
If you have air exchange per person, but some people are in an airflow "dead zone", then that doesn't really do you any good. You need to ensure the personal area is actively ventilated, versus the entire space as a whole.
same volunteers

Here is their 2017 blog about resignations:

https://freenode.net/news/recent-events-and-future-changes
I think the problem is some IPs just straight-up always get CAPTCHAs from Cloudflare even if one’s a good netizen, respect robots.txt, not crawl at ridiculous rate, and not lie in the user agent. One reason is shared IP, which disproportionally affects people from third world countries as their ISPs don’t have enough IPv4 for everyone; but it also happened mysteriously to at least one dedicated IP I used in the past. Your confrontational tone is rather unfortunate, and the problem of course is that you don’t guarantee anything even if the user has done nothing wrong, as is manifest from the choice of the phrase “starting point”.
No, it's separate.
They donate whatever they received, without impact on their other obligations, like refunding victims or so.
Also democracy. What if Bitcoin went up to $100M/coin? What is the likelihood that both Trump and Biden are going to be like "Well the BTC people were right and now they can buy all the companies and real estate. The rest of you americans will have to just have fun being poor, there is no way we will tax BTC wealth"
Real fiat currencies come with much heavier regulation if you want to get money in and out of the traditional banking system.

Also, if you want to move money between exchanges or banks you'd have to use the regular transfer methods like ACH, SWIFT, SEPA, which oftentimes are not as fast and cheap as sending USDT between exchanges. That makes it much harder to exploit arbitrage opportunities and drives up the spread overall, for example.
Grains are incredibly inefficient. Legumes are good, but not very good at calorie density.

The idea that oil seed is more efficient than meat is funny, and really shows how the vegetarian-industrial complex has gaslighted the world. Oil seeds are incredibly inefficient, extremely environmentally harmful, and incredibly resource intensive. Not to mention a good portion of modern oil seed relies on petrochemicals to extract the oil...

In terms of calorie density, tubers like Potatos, Sweet Potato, Yam, Cassava, etc, are better calorie stores on microfarms. You're not going to grow enough grain on an acre to feed anyone.
And the American Chemical Society that has never liked open science unless they can make money out of it.
and number one in weirdo NFT marketplaces like Hic et Nunc
Self-Sovereign Identity
And if the area was planted as native chaparral it would use 100% less of the water? I'm not saying this is as bad as a lawn. It's obviously not. It's just not obviously great either.
I'm most of the way through Diaspora where he invents a new theory of physics to drive the plot, he also elaborates on some existing theories and their philosophical implications to an advanced civilization. It's great, definitely recommend it.
This is especially true given how common criticism of the US is among Americans these days. Not to mention it also leaves out that plenty of other countries around the world don't hesitate to sing their national anthem and wave their flag either.
With Zulip, why do you need two namespaces for every chat content? I find it hard to understand it, and thus it hasn't clicked with me yet.
> Your parties sound like a blast!

They are, but they take a month to prepare for.

> Like the GP of this thread you might want to reread the actual post rather than skim the title. (see my other comment).

In retrospect, yeah.
It's possible when writing this the author was not in possession of the full facts, and misunderstood the situation.

Also at the time of writing it wasn't intended to be kept private, it's explicitly a message intended to be published at some point. It just never was and the situation changed, it's just an oversight.
MITREs ATTaCK [1] matrix is a great resource for describing incidents like these. To answer your question, it is a combination of Initial Access and Lateral Movement techniques that depend upon an attackers aims. They're by no means the only activities involved of course.

https://attack.mitre.org/
Strange - maybe an attempt to publicise it again?
The libra.chat only just being done - or someone else jumping on it, and hoping it would have some credibility?
Ah I think that's the piece I was missing, makes sense once you said elliptical. Thanks
Complete aside, but I'm still not certain I understand the technical details of why Cloudflare can't uniquely identify users. I thought I knew how hardware keys worked, but apparently I don't.

If the key being shared is embedded in the device, even in a secure enclave or something, then my understanding was that would open the door for key extraction. If the key is unique per-device, then that's not a problem. But if the key is unique per-10,000 and stored statically on the device, then hacking one device means that key can be released to anyone and the entire pool can be imitated.

So if the above is correct, it can't be that a single private key shared across the entire company is stored on the device because that key would be getting constantly extracted and leaked by some determined hacker somewhere. But if it's a unique key per-device, then... I just can't figure out how validating that key wouldn't require transmitting unique information to somebody, whether it's Cloudflare or the device manufacturer.

Where am I going wrong? I feel like I'm misunderstanding something fundamental about how signing works on these devices, but I can't figure out what it is. If I buy a Yubikey, is it connecting to the manufacturer's servers and getting a new key each time it's used? I thought they worked offline.

Or are secure enclaves just much more secure than I think they are? Are we assuming that it's impossible to extract a private key from one of these devices?
An example of an opinionated game engine would be idTech 5 (Rage engine). It is built around MegaTexture: a huge, non-repeating texture that maps the entire world, backed by a robust caching system.

It allowed for highly complex scenes, great static lighting and short loading times but it lacked in detail and dynamic elements.
Yes, there were affricates originally, but in the meantime there was first deaffrication to /z̪/ (and then devoicing, etc.).
Yes, you're right that for home gardens composting is enough. However, we are able to sustain the current population -- most of whom is not engaged in farming -- on the current arable land by intense agriculture. This means planting extremely hungry crops that produce high caloric foods.

Your home garden is not intensively cultivated the way most farmland is.

Yes, more people should garden. No one should think it's the end-all answer to our food problems, or even that it's going to make a huge difference. Still good to know where your food came from and some stuff tastes better.
Harder if you don't know that the paper exists and it is not in US controlled territories.
In math, I was taught to always be mindful of the definitions-particularly because they change on context. When studying certain systems different conventions make sense than in other studies. It’s not a judgement call as to what matters absolutely, just what helps the area of study the most. Further, the better flexible you are with working across contexts the better a grasp on the topic you have. (So further, the more ways you can explain a concept or prove a theorem the better you understand the concept.)
I have mixed feelings about 1:1. I find it not that useful.

However, some people need a nudge. That original post is a good example of what happens when there's no scheduled 1:1 and both parties assume that the other one will initiate the conversation.
Having bi-weekly 1:1 is too much. Once a month is better. Regarding team meetings, 1:1 is not the same. In 1:1 you have an opportunity to speak privately with the manager and discuss things you might be uncomfortable talking about in front of the team.
Haha, how is that any different from Twitter / Silicon Valley / Slashdot / OpenSource / startup drama of the day? :)

It seems the whole business, filled with young opinionated people, really invites these kind of dramas.
It is great that you care and I guess others are already provided some examples, but I'll add my own 2c here. Obvious problem is that centralized service like CloudFlare do create entry barrier and make large players on search and data mining markets even more entrenched than ever.

Recently your company announced partnership with Internet Archive, but if CloudFlare want to continue play a role as behevolent party everyone should have equal access to this data. Yeah it means that some bad actors will be able to easily scrap the web too, but...

CloudFlare service can't prevent scrapping anyway. There are shady residential proxy networks, services to bypass captcha and scrapping software like Zennoposter. It's possible to make scrapping more expensive, but bad actors don't care because they have money. Unfortunately enthusiasts, open source projects and small companies don't have enough resources to do the same.
Isn't it just a normal Rust program ?</troll>