skysight-inc/HackerNews huggingface dataset:
I am guessing that the key pair generation process was faulty. The FBI found an exploit in a wallet used by the hackers allowing the private key to be predicted. The prefix is bc1,which is uncommon. A few weeks ago there was such a vulnerability with Cake Wallet.

Or they installed malware on the hacker's computers and were able to log the private key as it was generated.

Or the hackers foolishly stored the key pairs on a server

Bitcoin is falling and this news does not help because it shows that some aspect is less secure than previously thought.
How Rotten Tomatoes Was Built in Two Weeks
The startup journey of Patrick Lee, Co-Founder & Ex-CEO of Rotten Tomatoes
I would read "Refactoring" by Martin Fowler, if you haven't already. It will help you understand what OO code should look like and give you the tools to help get you there.
Yeah, she put out the CD of clearly copyrighted images as bait to trick Capcom into stealing them.

Poor Capcom! If only there were somebody they could have asked about what might happen if they ignored copyright terms and the photographer's request that they pay up. If only they had ever heard of possible trouble from lifting others' work.

After all, they have always been happy to let anybody at all sell jailbroken copies of their own games, online!
There's probably some price where it's worth the hassle. I feel like every OSS project starter should have at least a firm notion of where that line is before they publish. On one hand, maybe you'll get it, but mostly it helps clarify what your time is worth so that you don't feel guilty about rejecting requests on your time that don't meet your own standards for value.
You had a job where you used an online HTML editor to create pages?? Wow.
If they find their image in the training dataset via discovery, that would prove it.

I think the trickier part is figuring out that your image was used in the dataset or convincing the judge that you have standing to compel that discovery search. If you have a bunch of get requests from an AI company's corp IP that could do it.
I mean, I worked with someone who creates a very high profile OSS project, and I'm sure it's a big reason he got hired to where he is.

I'll never say OSS is an optimal career path unless you are doing something extremely specialized (which to be fair, he is). But it sure can open doors for you even today if that's something you're passionate in. For me, I got around without any OSS, so it's more like a post-career plan now to help out some beloved repos.

(as long as you're not stupid, like showing your botting repository to an online game studio).
No one is assuming anything.
That's your email there where you bullied the guy.
You could have been nice about it but instead you wanted to intimidate him by threatening to sue him.
If you wanna make this right I think you should acknowledge that you overreacted and apologize to him.
There is the Joel Test from way back in 2000: https://www.joelonsoftware.com/2000/08/09/the-joel-test-12-s...

Searching for newer versions of that may be useful.
Yeah I've been paged before due to a crashed server failing ping and found out the datacenter tech was already on the job because it was suffering from actual smoking. I was remote so I don't know what they did, presumably pull the power and hit it with a CO2 extinguisher?
You should have a look at RxDB which does exactly what you have described. Also notice that neither firebase nor supabase is really offline-first.

https://github.com/pubkey/rxdb
Fascinating: https://antithesis.com/
But I do not use Javascript and I only ever see "[-]".

I use a text-only browser and all comments are left-justified. A flat view, no hidden comments. Looks very different than in a browser that runs Javascript. Seeing "[2 more]" seemed unusual.
True, device nodes and other special files exist in Unix, but they are usually contained to special directories.
Interesting, so you have any citation links for this? I'd like to read more about this but a quick search brings up nothing.
This is real, shipping technology.

See 3d nand flash cells, see stacked cache and HBM memory. All the usual characters are working on it. Intel, AMD (TSMC), Samsung.

Cooling is an issue, but there are solutions.
The other day, someone mentioned avoiding Chinese products and I argued it is not an easy thing to do. But sites like these? Easy decision. After this circus/drama, this site goes into my don't even visit the URL list. What a shitty behavior.
AA is a form-factor, not a chemical technology. You can get lithium AA batteries. You probably mean alkaline cells have not gotten cheaper.
A few random thoughts:

1. Check out their toilet if it's on-site.

2. How does the team do requirement analysis? Do they have a dedicated business analyst team or you guys have to do it, or no one is doing it and everyone is fighting for his own tickets?

3. Does the company HR/Admin send light-heart newsletters every once for a while?

4. How tight is discipline monitored?
The problem is you could create the file in one program but not be able to read it the other.

I wonder if they should only exist for command line apps although I wonder if there aren't still GUI apps that control industrial machinery by opening "COM1" as a file.
I find it hilarious that this made it's way into an Amazon listing for some waterproofing chemical. https://web.archive.org/web/20210607233655/https://www.amazo...
> working on a project that does pretty much the same kind of thing they're doing

Radon outlined why this isn't true. [1]

> basically spreading some of that knowledge you gave them and making it packaged and accessible not only to future contributors of their project, but to all competitors and genuine copycats out there.

It appears as if you're advocating that Radon should've treated the open-source code as if it was closed? [1]

> This is incredibly unprofessional

In what world is it unprofessional to work on a personal side project that has ZERO commercial interests and is using 100% public open-source code? This is actually one of the most professional online disagreements I've ever seen..

> Show some respect to your ex-boss and collegues who are working hard for several years

hUHH ???

[1] https://intuitiveexplanations.com/tech/replit/evidence
Some random questions to the developers regarding the motivation that "math is more fun when you have a computer to take care of the detail-work" [0]:

1. Do you have plans to make Yatima a usable theorem prover?

2. If so, how will people typically quotient things (e.g. does it have quotient types)?

3. How far does the type theory depart from classical mathematics?

4. The paper you've linked [1] suggests that the standard definition of contradiction is "too strong" in its theory, but that appears to be the definition of Empty [2]. What am I missing?

[0]: https://github.com/yatima-inc/yatima#motivation

[1]: https://homepage.divms.uiowa.edu/~astump/papers/fu-stump-rta...

[2]: https://github.com/yatima-inc/introit/blob/main/Empty.ya
They have no competition to care anymore. Their closest competitor, Bing, has a 2.24% market share which consists mostly of people who don't bother to change their default browser's default search engine. Competition is necessary to breed innovation. See for example, IE6.
The Plague's opening is very prosaic, since that's sort of the voice and the point, that even extraordinary events are meaningless except in the importance we attach to them personally.

The opening of The Stranger is much more grabby and also revealing for the narration. It has also presented something of a challenge for translators. I like Matthew Ward's "Maman died today." It's accurate, and neatly shows that infantile quality that Meursault's internal narration has.
I suspect Go's GC would be particularly well-fit for this kind of application considering it typically runs in <1ms with no exceptionally large pauses (except perhaps in pathological cases).

Like C#, Go has value types, so controlling allocations should be pretty straightforward.
I don't disagree, obviously. But the question here is if it's reasonable to find that hackers in countries that we consider to be political enemies disproportionately are the ones hacking us.

There are numerous incentives that, to me, make it not only reasonable but extraordinarily likely.
Jesus. Did it run first time?
That was a good book, it challenged many of my assumptions.
No, you absolutely should be afraid of lawyers. They can waste boundless amounts of time and money over bullshit nobody else cares about. In many cases lawsuits are nothing but state-sanctioned bullying and extortion. Nobody sane actually wants to waste their time and money going to court over any minor thing, only corporations can afford to do this because they have more than enough money to burn. Suing competitors into oblivion is a viable tactic even if you lose in court because it delays their profits and burns their cash reserves. Sony vs. Connectix is an example of this.

Obviously the right thing to do is to stand up to this bullshit. I have massive respect for anyone with the balls to do that. Everyone else is better off doing things as anonymously as possible. Can't sue you if nobody knows who you are.
And if it is not a pintrest link it is an amp link which is equally bad in my experience. I just want to link a picture. Not a link to a page that might have the picture but might also have the entire article/reddit discussion and not the image which I was searching for.
I honestly 100% feel like this is the main justification for all changes happening with Google products. I swear to god Google Photos changes the entire layout every year for no reason whatsoever. Whatever they change it to isn't better, just different. But the entire website has to be remodelled and your users have to learn the entire website again because.....someone on the UI team has to justify their 6 digit salary?
Really informative video but this is talking about hashing functions. Private keys are created differently using (some) shared information between the private and public keys. If there was one area I could see the us investing their time and effort since RSA came out it's here. Don't get me wrong, it would be out there if they could crack even one key but like I said, if anyone can it's them.
Ah I see, and presumably path can't be empty so you just need a byte to denote the length?
Innovation Frameworks to Navigate Disruption: Apple, Netflix, Amazon, & More
In the same vain as #9:

10. You get a request for accessibility support, because a whole team uses your lean and mean IDE, and now they want to hire a blind person. Now you get to learn about the hard-to-implement UI Automation API for Windows (disclosure: I was on the Windows accessibility team at Microsoft), or its counterparts on other platforms.

I'm planning to work on an abstraction over those platform accessibility APIs. Think of it as the GLFW or SDL of accessibility. Hopefully the kind of developer that tries to fight bloat by implementing their UI from the ground up will be willing to bend a little on this point.
Gosh this is the most New England blue blood story I have ever heard and now I want to be in your family.
The intern left repl.it 2 years ago, for context.
I don't think this situation is possible because from the point of view of sequencers, all DNA is equally valid input. Because systems are usually tested in happy flows, vulnerabilities can only happen in cases the input is in some way different from the happy flow, triggering an untested behavior.

Because all DNA is equally valid to these tools, it's impossible to have a vulnerability that won't get triggered and patched by the normal testing and developing routine.
LSP stuff is done asynchronously in VS code (and other editors). This doesn't slow down the main editing UI at all. It just means when you start typing and expect to see linter warnings, autocomplete suggestions, etc. it can take a bit longer if the LSP server is slow to respond.

If someone has all their CPU fans, etc. spinning up when opening a big monorepo it's probably just aggressive indexing inside the LSP server they're using. Almost certainly it's an optimization trade-off made by the LSP server author, trying to balance the common case of people typically opening smaller repos and assuming they immediately want search, etc. to be fast and ready.

There's nothing inherent to the LSP protocol or design that causes this problem--someone could build a better LSP server designed to handle large monorepos by deferring indexing, etc. until absolutely needed (but potentially with some tradeoffs like searching inside a subunit being delayed until its used). It's the same basic problem git faced with enormous repos over time slowing down and all the hacks/workarounds people have bolted on to try to limit how much of the monorepo state needs to be available at any moment.
Indeed was just discussing the same thing. Perhaps they simply are tracking if the money goes anywhere or using this as a way to hide their incompetence? Just saying they can do something they really can’t or put a legal hold on that wallet so if any exchange receives it they get fined?
What's interesting is that the redacted full thread alludes to some of these invisible aspects, and Radon appears to have a justification for doing things that way (though it's all blacked out so we cannot evaluate the merits of that argument).

https://imgur.com/a/OaEOwu2

https://github.com/replit/upm is likely one of the blacked-out bits in that email, as Radon says he wrote the README.
Google Search is ripe for disruption. It's been over 20 years now and they are not dynamic or interesting at all anymore.
US Recoups Millions in Cryptocurrency Ransom Paid to Colonial Pipeline Hackers
I'm not familiar with ML, but I assume you can simply get rid of training dataset after the fact, right? You don't have to keep it around forever?

> trickier part is figuring out that your image was used in the dataset or convincing the judge that you have standing to compel that discovery search

Yes, that's my point.
I used it for street address matching.

I've got a DB with sales tax data for about half the US states, and an API for looking up tax given a street address. I wanted to see if it was feasible to handle tax rate lookup ourselves instead of using a third party service.

Suppose the database contains the address "123 NW Maple Road, Hooterville, MI, 65026".

There are all kinds of variations in what people will give for that address. Some people might enter "Rd" instead of "Road". Some might might get the qualifier wrong and enter "street" or "avenue" instead of "road" (or abbreviations of "street" or "avenue"). Sometimes people put the directional prefix in the wrong place, so it becomes "Maple Road NW" instead of "NW Maple Road".

I found that people always get the street number right and usually get the zip code right.

What I would do then is take the address given, and lookup in the database all addresses that have that street number and zip code. For each found address, put it in the usual form (<number> <directional_prefixes> <street_name> <qualifiers> <directional_postfixes>, <city>, <state>, <zip>), and compute the Levenshtein distance between that and the input.

Whichever gave the lowest Levenshtein distance is the one I returned the tax rate for. I found that this worked quite well--way better than I expected it to.

Sometimes there would be more than one address with minimal distance, but it almost always turned out in that case that they all had the same tax rate.

Examples of where this would fail would be street names like "Martin Luther King". People will often write that as "MLK". All you need then is to have an "Elk" street in the same city and zip code, that has an address with the same number, and there isn't much hope of picking the right one.
> Very few of the people that would currently benefit from a domestic backup battery could afford $2k

California, a state of 40 million people, would disagree with you ;)

Not just referencing the blackouts we had last summer: CA also is heavily invested in solar power, and as a result, power is much cheaper during the day than at night (assuming you opt into time of use pricing). A battery for $2k would pay for itself in California quickly, because you can charge it when power is cheap during the day and run off battery when power is expensive at night.

Plenty of other US states have had blackouts as well; my parents in PA now own a generator due to repeated blackouts last year. If they could have bought a battery for $2k, they probably would have: generators are loud and dirty. And Texans certainly had a bad time with blackouts recently as well.
Microsoft Retires Azure Blockchain
> a lot of people implicitly assume

Considering your existing cred, I'm sure many in the community would give you the benefit of the doubt if addressed the issue head-on and explained what was infringed instead of what reads as emotionally charged responses. And if you're holding out for legal reasons, I imagine that would make the community more outraged because it escalates an accidental bad faith incident into a intentional one.
It's so easy to do better! Just look at what a rousing success Cuil was.
Why would I use this instead of VSCode?
Yeah! I really really want this too so that label printing is much faster. Lots of tapping at the moment.
> The fact of the matter is that the majority of Americans have excellent, world class health coverage. The problem is that there exists a small percentage of Americans that are totally screwed, and this is a higher percentage than most other comparable countries. There are a couple reasons why, which brings me to...

Really? That is news to me, as a dual US|EU (Croatian) citizen, who is culturally American--but currently living in Croatia.

Even Croatia has a higher life expectancy than the United States. Yep, even those "eastern European countries" (that are within the European Union) that Americans refer to with derision, often have higher life expectancy than the United States.

See: https://www.reddit.com/r/croatia/comments/nuiyk1/hrvatska_sp...

Also, just in case you want to blame this on "lifestyle factors" (which means that this is a public health matter, which the United States has severely underfunded--locally, state, and nationally for more than a few decades now), the third leading cause of death is believed to be preventable medical errors. (The source I provide has been verified by several follow-up studies.)

See: https://www.bmj.com/content/353/bmj.i2139/rapid-responses

Also, you don't know what you are talking about here. I have studied healthcare systems worldwide for hundreds of hours.

Ironically the IMHE group that does the coronavirus projections is world renowned at producing this data. All of this data is open-access.

For starters (easy reading) this article is relevant: http://www.healthdata.org/news-release/how-healthy-will-we-b...

But, seriously, we have far from the best healthcare system in the world. That is not even remotely true. There are several countries where a woman can give birth and is less likely to die, compared to the US.

I wish you were joking.
Isn't that what people go to social media for?
You may want to dig into http://www.seobook.com/blog for an opinionated (albeit typically objectively correct) perspective on many things related to the SEO industry. There are a few studies about Thumbtack (with GV investment), RapGenius and eBay penalties and their subsequent recoveries.
He’s the CEO corresponding over his company email so this is pretty clearly a professional setting rather than a personal one. His name and photo are very publicly associated with the company already.

I generally agree with your sentiment at an emotional level, as most of the time I find it to be in poor taste to share private conversations, however there’s not really an expectation of privacy in professional correspondence. For instance your company can freely monitor what you do on your work laptop if so inclined.
Honestly there is nothing technically or legally wrong but I would say this was bad faith by the intern in a minor way. Like, its just not nice nor smart to do things that act against the interests of those that have put faith and trust in you. In this case, he's created a web site that at a surface level makes Replit look trivial to implement - boasts that in a weekend or two he's supported massively more languages. And absolutely, part of his knowledge as to how to do it came from what he probably learned there. So intentionally or not, he's done something that hurts the interests of his former employer.

So if you hired an electrician to fix a light bulb and then after they left they told everyone your house sucked. Illegal? no. Unprofessional? yes, slightly. Would you hire them again? no. Would you sue them? that would be ridiculous.

On balance, the CEO is clearly the one more in the wrong here and definitely acting in a dumb way. I would run away from investing in this company with him at the helm. But I would say there is a little bit of bad faith on the other side here too.
This is honestly pretty disgusting behavior. I hope an actual commercial clone pops up soon, so this type of behavior is avoided in the future.
Huh?

Apple uses software to extend the life of their phones for durations FAR FAR longer than the rest of the industry.

It's pretty nuts actually when you compare the Apple offering to others. They are going to have iphone 13 out in 2022 (at the latest) running iOS 15 - which will ALSO run on devices they shipped 7 years ago.

I got burned ONCE buying a handset for my parents that was android. It shipped with an outdated OS which was never updated. Literally, came 1 version back (which made sense, new version was just out) and then NEVER got an OS update.

I'd been so used to the iphone approach I couldn't believe that was even a thing - but it actually is! You can buy a device through your carrier running android that is simply not updated. Hard to even imagine what the resale value would be of that type of phone a few years in, how do developers target it etc?
Or perhaps every classroom has a unique teacher who has an individual teaching style?
I don’t understand dhow people do this. It’s just an extra unpaid job on top of your real job. Your reward for your troubles is an endless litany of issues, complaints, requests, and maybe a nice message or two. Thanks but no thanks.
I was more thinking of pre-20 century wars. However, it is true that world wars caused countries to shift away from gold. After wwi many countries did return (british pound, german mark), but after wwii they had a more permanent switch.
Would you care to elaborate on how that $20k is spent on hardware? Seems like your setup is optimized for digital, and that makes me kind of curious as to what you've chosen.
> But if you have a way to pop the machine into redstate you can exfiltrate the secret key and actually sign microcode changes that will be accepted as legit.

No. The article mentions that the key required to decrypt microcode updates can be extracted. http://inertiawar.com/microcode/ indicates that the encrypted microcode image is also signed, and being able to decrypt the image doesn't mean you can also generate an appropriate signature.
Of course they can, but that means having the user come in to unlock the device and potentially sending them home again if you have to do additional repairs after testing it with them.

It’s all a balance of convenience vs privacy. Best solution is to wipe the device before repair, which is what I have done every time but it’s a hassle even when I have a backup to restore.