skysight-inc/HackerNews huggingface dataset:
No. I did not say we should do nothing. What I said was people keep focusing on the one thing that the attackers used to get in, but that one thing is besides the point.

I explicitly said that MFA raises the stakes.

The point I was trying to make was that whatever the attack was, the thing that gets reported on, is so very rarely an attack that engineers side with the defender. It's almost always something like "oh why didn't they do X" where X could be thousands of things.

I know you say you're "not trying to be a dick" and all, but this is what I wrote in my original comment:

> the long tail of organizations just don't have the right staff, focus, or resources to do it.

If you reread my original comment you'll see what I'm trying to get software developers to understand. Securing these systems is nigh on impossible. Orgs lack incentives to do it to the fullest degree. If it weren't, 0days for iOS or Windows would cost billions.

I'm not excusing these large organizations—though actually working with the people involved gives me some perspective as to why they don't always have MFA on their VPNs—I'm trying to get the broader point across that we shouldn't trust such critical infrastructure to vulnerable computers. That there should be regulations and audits with fines.

And honestly, the way you worded your final paragraph is kinda confusing. You've seen a couple dozen orgs with account takeovers and your conclusion is that they're all playing with fire? Maybe what I said in my original comment on the article has some merit. Regardless, I've seen enough to know that "the problem" isn't a random VPN lacking MFA.
My knee jerk reaction to this was “Why build an island when the glaciers are melting and the global sea level is rising?” but then I looked into it and by 2100 the average rise will be about 0.3m. Just dredge up more mud and you should be good!

https://www.climate.gov/news-features/understanding-climate/...
tl;dr they think its bad because the federal reserve wont shore up these markets, while conceding that they work better than banks would in a run given that the reserves are higher by sometimes an order of magnitude even in the most controversial stablecoins, and all the stablecoins can pay out in-kind with assets instead of just in dollars

“But the Fed wont bail it out in a run or market crash, even though it will work more perfectly, for that reason I’m out”

Worse than a shark tank episode
https://archive.is/xPBEF
Certainly. Not charging him for breaking and entering. Not charging him for cfaa charges. Not treating like a laptop plugged in is a felony.

Also I think had MIT asked the prosecutor not to prosecute then the case would have been dropped. Without MIT and JSTOR saying Swartz committed computer fraud, the prosecution would have no case. Etc etc.

The case existed because MIT wanted it to exist.
I just listened to a podcast about this and the guest Bennett Tomlin said these are things that may happen if Tether was shut down by the US government:

https://anchor.fm/aviv-milner/episodes/The-Tether-Situation-... at 30:57

* Price of BTC/USDT ETH/USDT explodes as people try to exchange Tether to another liquid asset

* BTC and ETH start to drop on non-Tether exchanges as people sell and try to get out to fiat currency

* Tether collateralises futures contracts, when BTC/USDT spikes, some strange behaviour may happen in derivatives based on Tether.

* Tether allegedly is a meaningful percentage of the commercial paper market, if those assets are seized, it may affect that market.

* Some S&P500 companies have a lot of Tesla on their books. As BTC/USD drops, that would impact their stock price, and potentially the index overall.

* Some shadier crypto exchanges may go under or abscond with client funds in the confusion.

A lot of this could happen in a matter of minutes.

You could imagine a similar flight to safety happen if Tether was revealed to not have the reserves they claimed to and were unable to redeem client funds.

Fun times!
> I am also super interested in the answer to this particular question. I know a lot of people who waited for surplus/standby shots at the end of the day outside clinics in SF. Anecdotally, a lot of my coworkers got early vaccines that way.

How did that work with the two-dose vaccines? If you were not eligible under the then current phase but got the first shot from surplus (which is entirely legitimate), were you exempted from phase requirements for the second shot?
Optimistic Concurrency Control for Real-World Go Programs
But at least we have thousands of different of cures for it!
Gotta love the rationalization. In March there was a lot of issues with supply of vaccines and the program was intended to specifically target underprivileged people because COVID is drastically affecting them more than people.

But you said to yourself, fuck their rules, I found a news article that justifies me jumping the line. So you hacked the system and jumped the line and got yourself vaccinated ahead of someone who could have gotten their shot that day.
Palantir invests in SPACs, backing digital health, aviation and robot companies
https://archive.is/Tx6pv
For any sysadmins or future sysadmins reading this though, do NOT put your service's 2FA on SMS. Do not use SMS for anything other than sending your grandparents a happy birthday message. It is trivially broken with a sim card hijack and we have seen many high profile incidents of people being hacked precisely through this vector.
As someone who had the pleasure of working with dang for several years, HN and its moderation team are some of the calmest and most considerate people I've ever met.

The CCP has zero say in how HN operates.

For the most part the users of HN are in control of whats displayed, its probably one of the most censorship free sites on the planet. You should see how often my karma fluctuates because I express an unpopular opinion, it doesn't bother me because I know its about people and not an algorithm.
Though I think it's worth noting that despite the wisdom therein, he did not find lasting happiness. Life is a difficult enterprise.
> they cannot seem to understand that Bitcoin is what happens on the blockchain and that 99% of the breathless hype about trading and finance bro stuff is completely off chain and only tangentially related to Bitcoin.

The same could be said of crypto advocates who leave their "coins" on an exchange
It can't be that bad, since I haven't seen a flashy website for this vuln, complete with a logo, making the rounds on social media.
Thats cuz apparently Trader Joe’s IS an Aldi’s!

Well, not originally, but they’re owned by Aldi Nord for a while now.

https://en.m.wikipedia.org/wiki/Trader_Joe's
I definitely can't claim to know anything, but I would have a very hard time believing that other claims that are similar to these aren't part of a wider agenda.

To be clear, I'm fairly conspiracy-friendly. I am just very skeptical of this new tech angle.

More reports from states that have obviously opposed the US would definitely make me think more about the veracity of the leaked "evidence".
Walmart is experimenting with something they call “Walmart Neighborhood Market” but I think they’d have done better to leave the Walmart name off it.

People who don’t like Walmart won’t try it and people who do like Walmart will be pissed it’s not a Walmart just a grocery store.
Idk if people ever disagreed politely? After all they had wars in the past. And feuds. And drunken brawls.
Ha! Are we siblings? My mum's line was "Dinner is what I cooked and if you don't eat it now you can have it for breakfast served cold."
And she meant it.
I live in Seattle. What I remember is that they advertised that they were following the same eligibility requirements as everywhere else in the state, but they were having such trouble getting enough people to show up that they put out requests for anyone over 18 to show up. I know a few people who drove out there to get their shots a couple weeks ahead of when they would be eligible to make an appointment elsewhere in the state. None of them lied about their eligibility factors.
>and what was served was what was served.

yeah but like, what makes you think that "what was served" was served with absolutely no concern for what members of the family liked or disliked.
Thanks! I will read it with interest once the day's dramas have calmed down.
If you ever worked in a corporate environment for at least a day, you will not need a scientific paper to understand that bullshit jobs is in fact a thing and it is quite real.
This helped me a lot when I was taking calculus.
We were assigned Stewart, but I basically learned the from this.

Analysis from Rudin, and later some manifold theory from Lee, have converted me to more mainstream views on the subject... However I think this is probably how calculus should be introduced at first, particularly to say highschoolers.
To say that the submitted title was inaccurate is already to say that.
Walmart is also one of the few stores that interrogate you on the way out as to what you purchased. Just not a good look.
The problem I have with this is it’s just software.

I am not a carpenter and context switching is expensive when it comes to thought work (probably because it’s still just typing, lacking the mechanics of swapping a hammer for a screwdriver).

Anyway, the point is by now, 20+ years into an IT career, I should have at least ONE option that can handle these needs without flip flopping through an entire operating systems “tools”.

The desktop metaphor is not the only real world model computing needs to get rid of. I want an interface that can do the job, not a million “tools”.
Please chill. If you've never moderated a forum, you should start realizing that moderation is key to having a good community.

Cherry-picking statements and acting like this is not appreciated.

Fyi: I've been banned once and thought it was justified. They've done an amazing job to keep the community healthy and that's really hard to do.

What Dang mentioned seems pretty clear: we won't moderate this because it involves us, but this isn't the place for gossip.

YC has > 150 companies per year. Not everything is perfect, not everything is known and people will always try to say their POV of the story. That's life, we'll see how this goes, but I'd rather see it on Reddit than here.
The energy in this project is amazing!

The idea of including a C++ and a C compiler gratis is brilliant, and solves a big interoperability headache very elegantly.

For my own purposes, IIUIC it is fatally flawed, lacking destructors, but as a raw C replacement it has legs. Compile-time execution and types as regular compile-time values makes it actually powerful.
Interesting. I can still see these "deleted" tweets when I retrieve JSON from the command line. I do not like using Twitter's user interface, especially the way it uses Javascript, so I wrote a quick shell script called 1.sh to read Twitter without using a graphical web browser.

https://news.ycombinator.com/item?id=27056734

To read the JSON, I have been experimenting with json_reformat from https://github.com/lloyd/yajl

1.sh > 1.json

sed -n /{\"data\"/p 1.json|json_reformat|sed -n -e 's/ *//' \
-e '/created_at/p;/sation_id_str/p;/full_text/p'|grep -B2 full_text|less
So we are in the territory where a script kiddy could download year old data leak from some random torrent tracker and use it to log in and shut down vital national infrastructure without even completing a Hacking course on Udemi.
Shot in the arm as soon as it is offered saves lives by being one less person that will spread the virus to someone vulnerable.
I think this is a sign of a regional monopoly, like when the cable company gives you a six hour window for a service call. It probably isn't worth the small amount of theft you stop to alienate customers (otherwise grocers in Los Angeles would do it) by checking receipts. But if you are the only affordable store in town you don't really have to worry about alienating customers.
I assume by 'astonished' you mean 'totally not surprised'.
I didn't say that I was wrong.

But I was having a bad day, and I said things in a different and more abrasive way than I normally would.
This. Have a solid offboarding checklist that includes VPN credentials or any access to systems that employee might have. At this point I don’t have any sympathy for the hacked when it’s as simple as this.
I hear you, but both of those sentences are there for a reason. Without the first I'd be getting lots of "how is it inaccurate?" responses, and without the second I'd be getting protests about moderation practices. My intention was to give enough information (I'm not saying it's a lot) to preempt avalanches of predictable objections. I'm sure I could have done it better, though, because this was far from what Scott and I used to call a "splash-free dive".
Which alternative news sites do you read?
What is the X? Can you give a real life example?
Literally you’re the top comment, and it’s not a short one, and it expresses personal thoughts. Good job doing less not more.
I fail see what that anecdote says about the company, even if the person you described happened to work there?
Don’t steakshame.
Costco stocks 4,000 products. Walmart stocks 100,000.

A Walmart with things palleted like Costco would be roughly twenty times the size.

It would be amazing but terrifying.
> As they are hints it means you can still pass in wrong values in some situations and what types check on one implementation may not type check with the other implementation. So the types are superficial only in Python.

Could you elaborate. When can you pass in wrong values?

The type checkers aren't always precisely the same (some do inference, mypy doesn't), but the cases where they disagree are usually because one is correct and one wants more information, not because you're able to do the wrong thing despite having annotations.
I won't say there was zero concern (people did fight for the best durian), but overall, everyone was just happy to have food. The concept of being able to even be a picky eater just didn't exist (or at least, I never saw it) outside of genuine allergies or the like.
Broke people need to shop too.
> To produce SARS-CoV-2 from it that would imply that WIV had unpublished sequences from the Pangolin-CoV spike protein

According to the article, the database of sequences for the WIV samples had been deleted before the pandemic became widespread, so there was no way to verify this, but also somewhat suspicious.

>you then do not get SARS-CoV-2 out of passing that through mice, you get a mouse virus. You'd need to pass it serially through something with a human-like ACE2 like minks.

From the article:

>Using the gene-editing technology known as CRISPR, the researchers had engineered mice with humanized lungs, then studied their susceptibility to SARS-CoV-2. As the NSC officials worked backward from the date of publication to establish a timeline for the study, it became clear that the mice had been engineered sometime in the summer of 2019, before the pandemic even started.

So, it's likely they had mice with humanized lung and ACE2 receptors, no?
You changed what I said into "Of course on the surface you guys say you only downweight petty drama". That was (a) a massive distortion—you can trivially see from https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que... that there are many other kinds of downweighting. On top of that, (b) you added snark ("of course") and insinuation ("on the surface") in a way that strikes me as particularly uncharitable.

You've done it again with "Seems reasonable to say, don't trust news about YC on HN", implying that we somehow intervene to distort that, when the truth is that we do exactly the opposite—as I'd just explained in the comment you were replying, as well as on many previous occasions: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu....
Trump Won!

Fauci is a criminal!

Biden works for the CCP.

Would you like my political activism at work?

Discuss.
I use Dapper in C# to access stored procedures and it's blazing fast. Unfortunately, most medium to large companies tend to use Entity Framework, which is a bloated beast of an ORM which sadly creates a void between a company's development team and database administrators, especially if the company decides to develop their database in Entity Framework using "code first" methodologies
Memorial Honors Victims of Imminent Dam Disaster [video]
Here in far west West Des Moines, they have LOTS of checkout lines, which once had a fair number of people behind the registers. Now, you're lucky if two of them have people. I think they are really nudging you to go through the self-checkout or to order via the web and either pick it up or have it delivered. The number of aisles occupied by people either stocking or shopping for online orders also seriously encourages you to go away and order online.
Been waiting for these!

There's a lightning talk from day 1 about the new Flask that explained some of the performance improvements, which actually answers a question I've had since its release.

Also really enjoyed the talk on the new profiler Scalene, I would love to try it out ASAP.

Looking forward to the rest.
Is that why the industry joke was the NTSC acronym meant “Never The Same Color Twice”?
At 8.6% APY, would you say you believe you have a sub-8.6% chance of the funds disappearing in a given year? Considering that it would take over a decade to return the original capital in value, I feel that the compensation is low relative to the risk of loss. Ten years is a lot of time for a company to bungle your funds, especially in the cryptocurrency world.
It appears that countries like China would like to be able to decide that.
Digital Healthcare: Is it clinically effective?
Parasitic Computing
You really think trump stopped being on friendly terms with the Clinton's after 2016? I mean look what happened to "lock her up."
Yes, and “Boomer” is a state of mind
To paraphrase:

- when a company goes bust you still have shares your share -- no one wants to pay for them with dollars.

- when tether implodes you still have your tether, but you can't turn it into dollars because there aren't any dollars to convert it too.
I suspect you could be right about executive profits, but do you have any specific indication that this is what ails IKEA?
120 knots is normal cruise, 140 knots is fast cruise but that's at sea level. This drops off by 3 knots per 1,000' of density altitude. Airfield elevation at Tuscon is ~2400' and it was 58⁰F at 10 p.m. on Feb 9. Which puts density altitude at ground level around 2900', so the cruise speed drops around 9 knots, to 111 kias and 131 kias.

I agree this UAS would need to be IC-powered due to the range and altitude the UAS supposedly reached, but I don't think the speed was as fast as many folks have been thinking.
Also, it doesn’t quite help that their color palette is fluorescent white and blue, which is something that evokes, say, a dreary clinical setting, and not necessarily somewhere you want to shop.
> Don't force your kids to eat stuff they hate.

We take a different approach.

1) We explain to our kids their tastebuds are different and you have to learn to like some of the things that are healthy for you. Then we ask them to eat some to help learn and then then they can fill up on the rest.

2) We bury veg into food. It's amazing what you can grate into bolonaise sauce and similar and no-one knows.

3) Within reasonable bounds they don't have choice. We see some parents pander to their kids dislike. Of course the kids then learn they can refuse and get 'tasty' stuff. When kids have this option naturally they are more likely to push for the alternate and promote how bad veg etc is. To a degree restricting choice makes life easier.

And generally I respect kids are different and our experience of not having issues around this can be luck of the draw, also I think some people simply don't want the extra initial effort to establish boundaries. And as a parent I feel it's our duty to fuel a developing body and mind with the best we can as this is a core foundation for life.
Is Poe the most influential American writer? A new book offers evidence
I'm fine with both models existing. I'm happy the "old" model is seemingly gaining popularity. It seemed like every organization I have been a part of has been going the "woke" route, and it worried me.
I’ve been extremely cautious with covid and I do not need to interact with the public beyond quick and careful grocery store visits. It would be better for a front line worker, who is not able to exercise the same level of avoidance, to get it than for me to have gotten it. I also do not live with any immunocompromised people - we are all healthy and under 40 and they work from home - so again it was better for someone who lives with an older person to have gotten it.
To be clear the actual wealthy people always shop at Walmart, because, ya know, they are wealthy because they don't waste money on more expensive groceries because the floors are nicer, and they probably don't mind being around other hard working people.

Only half tongue in cheek, and completely agreeing with you.
I appreciate that this is probably a no win situation. Thanks as always for doing your best and keeping this community healthy.
In most states in the US (all?) you are not obligated to stop and show your receipt. It may be polite, and you may do it, but you are not required to do so. For membership stores, it may be a condition of membership, but it still may not be legally required.

Any employee that stops you might be guilty of kidnapping.

https://www.lawyers.com/legal-info/consumer-protection/prote...
MFA doesn’t solve targeted phishing and that’s something people keep forgetting. Sprays are just the best ROI, but if everything had MFA it would quickly create a phishing as a service business model.
Oh my gosh. I’ve read this comment over and over, and didn’t “get it” until it finally clicked just now. You found a way to use form validity as a parent selector! Monstrous for sure, but fucking brilliant and I’m ashamed I haven’t thought of it as I’ve been trying to justify... all manner of things to claw sibling selectors back from things I want to use but div/custom-element wrap in ways I can’t abide.
StreiBing Effect
I found that 'daily standup' popular in some tech companies absolutely kills motivation.

I've never procrastinated more, like literally for months, than when I had to report progress on daily basis.

What happens is the reporting itself becomes the target not the actual task to be done.
There are a of questions this topics brings up.

It's clarifying whether or not YC is a bunch of white, privileged elitists that have no ethics. Is this behavior endemic within YC? Is YC and dang protecting these founders and trying to brush the behavior under the rug? (the fact that dang isn't hiding the thread bodes well on this aspect) Is this the environment that new founders want to be associated with? Hopefully we can get good answers to all of these.

Lots of interesting questions this topic brings up. I don't think it's just gossip. There was another tweet in that thread about another founder getting kicked out of YC because she dared to speak up against another YC founder. So it sort of begs the question as to what is going on behind all these closed doors.
Tether is very good for borrowing, if you think it might collapse. You can borrow a large amount, buy a hard asset with the borrowings, and if it collapses you'll only need to pay back at a discount. (Not advice)

I am beginning to think that it would be worse if USDT went over the peg rather than under! Therefore, it would not surprise me if the Tether FUD might be intentional - otherwise Tether might start "collapsing" the wrong way.
The free world is under attack. We could seriously lose many of our freedoms. It's not racist to be suspicious of CCP sympathizers who are PRC nationals any more than it was racist to be suspicious of communist-sympathizing Russians during the cold war.