skysight-inc/HackerNews huggingface dataset:
Bitcoin will never be able to beat official currencies in developed countries in this important metric - short term inflation risk.

People tend to forget this but no other asset is safer in the short-term than the dollar, euro, etc. Why? Because no other asset has a powerful central entity whose job is to prevent loss of value above the 2% inflation target.
nobody outside the bubble cares about what she has to say.
One angle I haven't seen explored much yet: This move will mean that people are legally required to use bitcoin, whether they're prepared to or not.

How does this work out for individuals running small businesses, who may not have the technical expertise to adapt well to Bitcoin? I fear they're quickly going to become the targets of phishing attacks.
Forgot to mention that China owns them, so say goodbye to data privacy.
I can understand Fastmail wanting to be in compliance with the law... or just not do business there.

Making a whole effort of operating in Russia, being blocked, and trying to work around that seems like a potentially endless effort. Meanwhile you're offering a service to your customers that would be pretty spotty considering all the hassle going on.
"startups and smaller companies we work with are paying $500/month. Our pricing then goes up from there depending on number of end customer groups." It's totally fine to be transparent about the starting price, since you appear to have one.

would make an excellent entry in a FAQ on the site. Likely would help qualify leads as well.

(I don't have any issue with the pricing, but would also not reach out given no pricing typically means "really expensive".)
'The climate movement is a religion'
Genesis Robotics LiveDrive Actuator Launch
In large organizations, status boards are "external communications" and this must be handled by a team dedicated to that. It works about as well as you might expect.
The previous beta 2.4 branch would also utilize AMX coprocessor when appropriate. Does anybody know whether the plugin is also based on ML Compute?
I'm all for getting the government out - but cash or gold is way easier to use.

If you have a political problem, you need to solve it politically. You can't hack it with a technical solution or politicians and their rich friends will just find a way to use it against you (like it's happening with btc, enjoy limitless tracking and the rich elite profiting from btc as much (if not more) than you) or ban it (like it happened to e-gold).
> What is also missing in the article: Its massive underground site.

Not to mention the former NSA/CIA station upstairs from the Cold War days! I visited both the station and the underground site some years ago before they closed the airport. Not sure, though, if those places are now part of the public tours, too.
Apple’s Moves to Tighten Flow of User Data Leave Advertisers Anxious
TOTP is the one that makes the least sense to me. It is also weak to phishing (extremely common) but adds protection against SIM-swapping (comparatively very rare). It also has almost all of the downsides of U2F (a pain in the ass if you lose your device).
Only if you can know that your audience is actually seeing your content.
One key factor in Paris is that automated trains are more "aggressive" in closing doors right on schedule where human drivers would tend to wait one or 2 seconds because you have a lot of people getting onboard.One or 2 seconds doesn't seem much but it can ruin the whole schedule because if you do it on 2 stations then it can add to 4 seconds, and then the next train needs to brake or even stop and lose even more time, and it cascades etc. until you can't keep a super tight schedule.

It has even happened to me once that the station and trains were so packed that the train came, people barely had time to get out and the doors closed already, with not a single person able to go onboard before the doors closed. Obviously feels bad but helps train keep schedule and it is a net positive in the end, but I suppose it is psychologically tough for drivers who would have to have that kind of constraints, they would really feel like a machine.
> hung out to dry

£1.8 billion in loans/grants
The blockchain settles the transaction and records the finality.

Imagine a transaction as being a simple cryptographic signed message that sends 1 BTC to someone, you just broadcast it to the network and it gets recorded immediately. But if you expect to continue transacting with the same person, instead of broadcasting the transaction, you can hold on to it and keep iterating on top of it with new balances, each time signing the transaction so that your counterparty can always go to blockchain to claim their coins.

There's obviously some mechanism to avoid broadcasting old state and making sure you actually have the funds, etc, but you can't flood the network, even if you tried, you'd only be flooding your immediate neighbor which still charges fees, but much smaller fees than the blockchain. There's also mechanism for connecting those channels, so you don't need to have a direct channel with someone you want to pay, you just need a path to them.
Any links to your lamp or another one you'd recommend?
Looks like the fundamental problem is that a substantial number of users are perfectly willing to sign up for providing fake likes, as long as they receive fake likes in return. A tragedy of the commons.
- people tend to want to use many systems during working hours

- engineers/CS staff tend to want to work during working hours

=> it is hard to plan for downtime during normal working hours.

If you want to deploy multiple times a day, and if you want to be able to merge in new code into your main branch, and you don't want to have to gate in merges etc for "deploy windows" with downtime, a great solution is to just do the extra work to avoid downtime on simple stuff.

I think the irony is that you really need to already be a certain size to do downtime-centric workflows reasonably without asking a bunch of people to do stuff at weird hours.
How does it compare to Amazon QuickSight which also has a pretty strong embedding story. Thank you.
I thought this too. On the other hand, it does make sense to them to publicly claim that the reason they moved out was for technical rather than political reasons. It might not make themselves a highly attractive target for a retaliatory DDoS attack.
The crucial ideas in a piece of fiction, I find I generally can absorb much faster in some other format. It's true that the flavor of the world and the human interactions is lost. But I have an actual world to provide those.

I can see the argument that my experience of human interactions is a biased and incomplete sample. That's clearly true. But they are the relevant ones to my experience.

And I'm always disappointed at the bias in the human interactions portrayed by novels. They are almost invariably driven by unrealistically evil people, and the stakes are typically too high to bear any relevance to most of human life. Most conflict is between people none of whom can be well characterized as evil. There is substantial variation in peoples' values, and in the information they have, and those are the important drivers of what people do.

Damn, I should write a novel.
I didn't know that the most common vector for compromised accounts were like farms.
High level answer: Lightning transactions happen off network and only "sync up" once in a while. In a lightning transaction, only the two individuals transacting know that it has happened. But in an on-chain transaction, that info is public.
It's mostly to provide miners incentive to mine beyond periodically halved builtin reward for mining a block.
If Facebook cared about the mental health of its customers it would remove public likes. One of the big crushers of self-esteem is seeing your own post get 5 likes while a friend's gets 50.

FB won't, of course, because it's a big part of what keeps people engaged. Getting a lot of likes is a big dopamine hit. If no one sees all your likes - well that's not as satisfying. If no one sees likes they are probably less likely to "like" something. I get that, but it's still a sad bottom-line based decision.
It's the dirties hack I've ever met.

Except I did something like this once in the past (but with zero byte instead of dot).
where is your data that supports that? there is a reason that the us federal government deleted all historic wildfire before 1983 when Biden entered office, it is because it shows the opposite of your claim.
I implemented an FTPS service once! AMA?

My needs were: 1) Client login [edit: should have been more clear—I mean randos who signed up on our website, basically], 2) username and password login, no key stuff, 3) obviously plain FTP was not an option.

Nice to have: 1) Same username and password as the website, not managed separately.

My personal hang-up: 1) I really didn't want to create actual system users for any of this.

I settled on ftps, which could satisfy all the needs plus my hang-up, and then chose PureFTPd which made implementing the nice-to-have very easy:

https://download.pureftpd.org/pub/pure-ftpd/doc/README.Authe...

I'd already factored out our auth into what you'd call a microservice (I think the term was just starting to enter wide use then?) because we needed to serve multiple barely-related services with the same auth, so writing a little script to handle that auth was downright trivial. The only reason it took more than an hour, once I settled on a solution, was that I had to make it play nice with haproxy, and I wanted to thoroughly test my auth script's failure modes.

This basically never broke. It was great.

A++++ would ftps again.
Does the script element injected as a DOM node from an extension or a content script end up having a different CSP than a script element that loaded with the page or was injected by a script on the page?
Because very few other former FB employees (or Google for that matter) have come out from under NDA's to talk frankly about what they've seen in the mega-iest of megacorps.

It's not that what she's saying is especially surprising, it's that it's rare for someone to be saying it at all.
There was a quote recently from a high ranking former FBI agent that worked on money laundering where she said she wasn't really concerned about crypto making money laundering worse (trying to find the article again).

Her reasoning was: "what people need to understand is, 95% of money laundering with fiat currency already succeeds today without getting caught."

In other words, this won't really change much, it was already really hard to catch money laundering.
I would assume different developers and product managers create different bugs.
Reading these comments has me a bit confused. Even in remote parts of Central America Androids are extemely common, there is less of a barrier to entry to a crypto wallet than there is to a bank.
What's the recovery process when your phone gets stolen, or you drop it?
My impression is likes come from a unique set of users who feel compelled to interact. Most don’t interact. So you’re getting a reading from the most “opinionated” or likely to share emotion and all the others who also have valid input but who are less likely to engage are discounted.

Who wants feature X on our product? You get a few saying yeah I’d pay an extra hundred for that, and very few who say no. Meanwhile most people just don’t want it, but never said so and the new feature is a dud.
TOTP is phishable, which is a way way way more common attack than sim swaps.
I understand.

For perhaps the same reasons as you, I decline/turn-off auto-pay of any services I subscribe to. I actually cut checks every couple of weeks to pay bills.

I need a regular reminder of how I am being nickeled and dimed. My big fear is a constant drain on my account from a service that I had forgotten about or just the accumulative damage a lot of services add up to.

To be sure, our corporate overlords love the auto-pay, cashless society they have created for our convenience.
This is one of the less frequently cited perks--taking full advantage.
>Maybe his boss had already oversold it to the board, and was setting Suresh up as the scapegoat for its failure.

That was what I wanted to mention but didn't write it out. Cynicism are not always welcomed.

I have been in far too many of these shit. It isn't things cant be done. But you need full trust and autonomy with lots of money. i.e Is the company willing to burn millions?

Saying just go and do it is easy without giving them resources and budget. And that is precisely what the CEO should have done. CEO should have sat down and talk him through. Giving him full support. So they both know what they are getting into and they are in it together. This is more common with founders but not CEO or managers.

And this happens a lot, I would even call it a norm outside of Tech industry.
To add to that, their audiences' tastes and the algorithm itself change way too fast for them to keep up. It is impossible to understand why something 'worked' i.e. went viral. So too many TT'ers focus on content that's not true to themselves, thinking it's what will juice those numbers. The result is a deeply insincere and mechanical production.
This looks a quite likely scenario.

But then we still don't know what they fixed, was is the incorrect configuration or the underlying bug? I would expect the former instead of the latter, because it is probably not very difficult or dangerous to change that specific configuration while fixing bugs in the code seems riskier and would probably take more time for testing.

We'll see if they will publish a post-mortem. It has become more or less a normal custom these days (and they are frequently quite interesting).
The bank does hold a fraction of your deposits, as our banking in the US is fractional reserve banking. This has been the case for quite some time, and isn't really the same thing as digital currency, even if we transact digitally.
> First of all, you're a service operator, political activity of your customers is not your business.

Yes, but they're not asking about it. They're just saying "we can't provide this service for this reason; if you want to use this, we need help with this law". I don't see anything unreasonable there. Of course, one could go the Google way and say "No service for you, no reason why, your questions will be ignored", but I think this is quite an unreasonable demand. It's not like someone is forced to lobby for you, they just say why and what to change.

> Secondly, lobbying doesn't exist in countries with no political representation. The only political activity available in such countries are activism (not of the bureaucratic type) and sabotage, all severely punishable.

Lobbying was meant in the farthest sense in my original comment. Still, I don't see why they should not name a reason and/or course of action despite this. "We can't service you, come cry with us in the corner" is really not something to put on your website.
Losing contact with your UAV is a lot less risky than losing contact with a runaway train.
Doesn't backing a chromium-based browser like Vivaldi or Brave push the industry further toward browser monopoly? (or at least in the rendering engine sense, as we once had with IE)
Ask HN: What do you use Notion for?
I see a lot of people using Notion to improve their productivity, I tried a bit but I was constantly moving between multiple to-dos and Notion became one another To-Do (along with default reminders, Keep). I'm just curious to know Y'all use it!
I'm all for investment (though not in London - I'd rather we invest in drawing business out of London, to create a more sustainable and scalable distribution of the UK economy), but that does not change the fact that these upgrades are incredibly resource intensive, not just in terms of money but also skilled staff.

There are many tens of billions of investment in prerequisites such as getting rid of level crossings and properly secure rail and upgrading stations and trains that'd be required before you can even think of upgrading mainline rail to driverless. For the London Underground, it means a rolling program of platform upgrades, signalling upgrades and rolling stock upgrades that'd similarly be in the many billions.

And yes, now would be the right time to finance it, but even if you start now this is just not happening in the next couple of decades, that was my point.

So by all means, it's worth starting to make the pre-requisite improvements, but it won't bring driverless trains on most of these lines anytime soon.
End to end visibility into Redis Pub/Sub using OpenTelemetry (with GitHub repo)
Automemcpy: A framework for auto generation of fundamental memory operations
Memory manipulation primitives (memcpy, memset, memcmp) are used by virtually every application, from high performance computing to user interfaces. They often consume a significant portion of CPU cycles. Because they are so ubiquitous and critical, they are provided by language runtimes and in particular by libc, the C standard library. These implementations are heavily optimized, typically written in hand-tuned assembly for each target architecture.

In this article, we propose a principled alternative to hand-tuning these functions: (1) we profile the calls to these functions in their production environment and use this data to drive the important high-level algorithmic decisions, (2) we use a high-level language for the implementation, delegate the job of tuning the generated code to the compiler, and (3) we use constraint programming and automatic benchmarks to select the optimal high-level structure of the functions.

We compile our memfunctions implementations using the same compiler toolchain that we use for application code, which allows leveraging the compiler further by allowing whole-program optimization. We have evaluated our approach by applying it to the fleet of one of the largest computing enterprises in the world.

This work increased the performance of the fleet by 1%.
I wonder if customers in Argentina are well-connected to Google's datacenter near Santiago, or if this cable on the Atlantic side will make parts of South America favor Google's datacenters in the Carolinas.
> The amount of money WU is skimming off the top must be a non-negligible percentage of the country's GDP.

20% of El Salvador's GDP is remittances, and WU takes a 5-10% cut. I don't know how much of that business WU controls, so let's pick a range out of a hat: 75%.

That would imply that WU fees represent something in the neighborhood of 1% of the country's total GDP.
Yeah, but to be fair, there is only so much you can learn while entering the market, so you only have the bandwidth to grok one language and framework.

Companies that look for talented and true language-agnostic quick learners tone down their requirements for a specific technology stack, and sometimes don't even mention it.
Part of me thinks it's a feature and not a bug. The politicians are artificially creating jobs and getting a reliable source of votes by doing so. And there are also downstream jobs from supporting these laws.

For instance you'll notice most Tesla cars have a sticker on them that says "Access Ok, California Clean Air Vehicle" https://cleanvehiclerebate.org/eng/ev/incentives/hov-lane-ac...

To me it's dumb that the government needs to issue a sticker to know which cars are EV's or Clean Air vehicles. Wouldn't it be more simple to just know that Tesla's and Toyota Prius's are clean air cars than to require people to put stickers on their bumpers that expire every four years in order to get prime parking spaces and HOV access? Additionally, there's a bunch of paperwork involved and qualification processes based on income and other things https://www.dmv.ca.gov/portal/vehicle-registration/license-p...

I'm sure that this bass-ackwards system provides plenty of work though.
From an Ars Technica report about this [1], citing the researchers:

"Overall, the attack is very situational and targets individual users," Brinkmann said. "So, the individual risk for users is probably not very high. But over time, more and more services and protocols are protected with TLS, and more opportunities for new attacks that follow the same pattern arise. We think it's timely and important to mitigate these issues at the standardization level before it becomes a larger problem."

[1] https://arstechnica.com/gadgets/2021/06/hackers-can-mess-wit...
Yes, it's far more efficient now. Now the gang will just take 10% of your entire savings (because it's all on your phone) every time they see you. Or 30% if they don't like you that one day. Because if it's one thing I try to do in a situation with lots of street crime, it's carry the maximum amount of my net worth on my person in the least recoverable form in case I get robbed.
They'd want it even if it cost the same or more. It's the ability to break strikes they're after.
A bad second factor is better than no second factor.

I enabled TOTP on every account I have that supports it, which comes to about 2 out of every 5 services. I'm not going to leave the other 60% with only one factor just because SMS can be exploited, which the consensus in this thread seems to be advising everyone to do.
Using DNS to failover to another CDN is pretty much the only solution if the solution is not "build out your own global edge infrastructure".

I was thinking more about this though and it has its own problems. You want a short TTL so failover is fast, but this increases the number of DNS lookups people have to do (and DNS lookups can be very slow!).

Additionally, a short TTL means you're more vulnerable to problems like the dyndns attack [1] from 2016: names with longer TTLs were up for longer since they preserved the correct DNS records for longer.

But if you have a long TTL, even if you fail over, you'll still be down for at least as long as the DNS TTL pointing to the bad CDN.

Maybe, you could do DNS roundrobin against multiple CDN providers at once. Say you used 4, then if one went down, only 25% of requests would fail, and you could just remove the failing entry. This seems very expensive!

Honestly, the cost of these solutions is probably not worth it. The product I work on went partially down during the fastly outage. Then it came back up and everything is back to normal. It really won't impact us much at all. Shrug.

1. https://en.wikipedia.org/wiki/2016_Dyn_cyberattack
Homelessness is a California’s complex housing shortage and governance/policy problem. The world is much bigger than issues in SF/Portland/Seattle. I am not following the strawman from utilitarian aspects of cash -> inflation -> homelessness & inquality.
How do you justify such an incredibly strong assertion?
Show HN: Bruh – A stupidly simple JavaScript front end library
Whataboutism.

Yes, beef needs to be addressed. But so do almonds and bottled water and and and…