skysight-inc/HackerNews huggingface dataset:
There’s actually a problem here in washington state, and I’d guess in other states as well, that most of the legislators are real estate agents. They’re one of the few common professions that can afford to take off months at a time and still make significant income the rest of the year.
> First, top 1% already pays 40% of all taxes

My understanding is that we are talking about the top 0.1%, not the top 1%, at least with respect to loopholes.

> but nobody is saying what is fair and how we determine it.

Agreed. I’m less concerned about “what is fair” and more concerned with making sure everyone has access to essentials including healthcare and that corruption is minimized. As far as I can tell, this means we should tax the rich (and probably even upper middle classes including me, happily) and severely limit campaign donations, political advertising, lobbying etc so the very rich can’t buy our democracy.
https://github.com/atompie/tracardi
you can't just post your github, you have to track it?

No one should trust short URLS.
http://checkshorturl.com/expand.php?u=https://bit.ly/35d49bL
Show HN: I made a trading algorithm tracking WSB sentiment (35% annual return)
Ah yes, I think you're right, I got that backwards! I'll update the post, thank you!
This assumes a multiverse which is interesting, because it leaves open the possibility that we are in one of the infinite universes(pl) that does have intelligence as its goal. :)
> The report blamed the JPL's failure to segment its internal network into smaller segments

Network boundary can never provide strong enough security protection. No matter how small each segment is. Just because a device is in your network doesn't mean you can trust it.

Implement authnz correctly everywhere and make sure the system can verify "if you are who you say you are" is more efficient.
You can't downgrade/upgrade the OS to a specific version of an update after a fortnight or thereabouts. That's an artificial constraint applied by Apple. It's not even possible to do so offline with iTunes even if one has the IPSWs. If you check the /r/jailbreak subreddit, talented coders have to hack the SEP and build complicated, low-level-interacting software like futurestore in order to perform a semi-successful downgrade/upgrade.
Succinct (space-saving) data structures often need "rank" and "select" operations. Rank(n) is the number of 1 bits up to position n. Select(n) is the reverse: at which position is the n-th 1 bit.

For "rank", the "popcount" instruction can be used. Interestingly, for "select", the "PDEP" instruction can be used: you can put the data array in the PDEP mask, and 1 << n in the value; basically flip the operands. I found this quite fascinating. For details, there is a short paper on this: "A Fast x86 Implementation of Select".

I wonder if those succinct data structures are in any way related to what NSA is doing. I think not, but who knows.
Certification and evaluation is already receiving a lot of attention, the cryptocurrency world is full of nonsense but the core idea of doing decentralized verifiable computation is necessary for having a p2p society.

However we still don't know how to solve the tragedy of the commons in a decentralized way. The most promising angle for studying that is machine learning (they want to train models distributed over many machines so they need to do probability preserving compositions, this works for markets).

There is also a lot of work that needs to be done on user interfaces, secure hardware, operating systems and internet browsers. Without a stable foundation we cannot be trusting this infrastructure with our governance. Yet we absolutely need such infrastructure to meet the challenges ahead.

Really the finger-wagging should be directed at all the publicly funded institutions that used Zoom in the pandemic and maybe directed funding towards tracking research when they could have collaborated globally on improving jitsi to fit the needs of all the different education institutions in the world.
My environment is not a home environment.

It looks like this:
https://blog.koehntopp.info/2021/03/24/a-lot-of-mysql.html
The substance of this comment seems to be “Adam Schiff did bad stuff (too?)”. Whataboutism isn’t particularly interesting, and I don’t think sympathy or lack thereof is a useful lens for this particular topic.

Did Apple do something wrong here? Did the DOJ? What can be done to prevent, or at least expose this type of behavior in the future?

Edit: added a missing word and fixed quotes. As an aside, techbros clarifying comment below is exactly why I love this site.
What thieves seem to go for nowdays is the d-gps hardware installed in graders / excavators used in large projects. Very expensive stuff which is easy to hide. A Leica 3d kit is something like $40k...
Everyone and no one belongs to New York
> > the Files app had a Dropbox integration, so Apple put “Dropbox” into the app’s metadata, and it was automatically ranked higher for “Dropbox” searches as a result.

I can smell the bullshit from here and I don't live in the US. Lol.
Digital Compact Cassette
Yea, I think most users think slack is a safe space. They haven't been conditioned to be suspicious of messages on slack like they have with email. It's a pretty ripe attack vector.

Was bored the other week and found a ton of slack web hook urls in public github repos. I think it would be a pretty great way to do some phishing, just need to scrape the urls and brute force channel names with messages with links to websites you own.
The security issues are not with hardware random number generators in general, but with those that are included inside complex devices like monolithic CPUs or TPMs, so that the owners of those devices cannot verify that the RNG's really do what they are claimed to do.

Discrete hardware RNG's, like that of the Ferranti Mark I, are perfectly secure.

For a modern device, the best way to implement a hardware RNG is to just include an ADC (analog-digital converter) input. Then you may connect externally on the PCB some noisy analog amplifier, e.g. one which has a noisy resistor or diode at its input. Digitizing the noise with the ADC will provide the random numbers and the ADC input can be isolated and tested separately at any time, so the user can verify that there is no hidden functionality.

Most microcontrollers have ADC inputs, so it is easy to add a secure hardware RNG for them. The same could be done for a personal computer by making a noisy amplifier that can be plugged in the microphone input, or by making a USB device with a microcontroller.
There have been collisions of speeding custom modified cars since there have been cars. Why would electric ones be any different?
Does this account for slippage and taxes? These always tend to look very enticing until those are considered.
So Wal Mart is liable for defective products in California too?
How did they use a 10 dollar cookie to get into the slack channel?
Using machine learning to discover theories of human decision-making
Journal Article: https://science.sciencemag.org/content/372/6547/1209

Press Release

In the largest experiment studying people's "risky choices" to date, researchers show how machine learning can be used to test and improve long-stagnant theories of human decision-making. Understanding and predicting how people make decisions has been a longstanding goal in psychology and economics, which has led to a proliferation of competing theories and models of decision-making. But many of these theories are often difficult to distinguish from each other and few provide discrete or novel insights into human behavior. As a result, there remains little consensus on the best decision theory or model and little gain in their predictive power. Recently, efforts to discover and evaluate new decision-making theories have been enhanced using machine learning. However, while these data-driven approaches can accelerate the discovery of new predictive models of human judgments, the results are limited by small datasets and are often uninterpretable. To address this, Joshua Peterson and colleagues collected a large dataset of human decisions for nearly 10,000 risky choice problems. Risky choice - one of the most basic and extensively studied problems in classical decision theory - evaluates how a person decides between two unequal gambles: getting $100 with a probability of 20% or getting $50 dollars with a probability of 80%, for example. Peterson et al. found that deep neural networks could mimic human decisions to a surprising degree of accuracy, substantially outperforming existing, human-generated risky choice models. What's more, in learning to mimic human decisions, the networks also revealed many of the psychological properties underlying established behavioral theories, allowing them to be evaluated and refined.

https://twitter.com/joshuacpeterson/status/14033574865187676...
One of the more interesting ones I've come across lately:

France - frank (being unencumbered in speech) - franchise (the right to vote)
Looking over the list of top billionaires, well under half appear to have been passive beneficiaries of birth randomness.
Shouldn’t be possible with ssl
I don't think there is any reasonable standard of security that demands perfection.
Seems like a false assumption.

According to wiktionary it comes from „banca rotta“ where rotta goes back to Latin „rumpere“ which means „to break“. Whereas the English rotten or the German go back to old Norse „rutna“ (to rot). The two don’t share the same root.
It uses IPoAC.
Lots of folks in infosec (no idea of the overall prevalence) are advocating for making ransom payments illegal.

One thing i don’t see discussed in that conversation is that the payment itself becomes a liability to the criminals.

That said, there’s no guarantee that the ransomware is no longer in a position to retaliate.
The striking thing is that the IBM System/360 didn't have it. Nor does the System/370. Those were the standard mainframes for a generation.

IBM Z-series machines do have population count, finally.
> Businesses do tend to benefit the most though

Why do you think businesses tend to be benefit the most? There are historically twice as many quits as separations, so workers are twice as likely to use "at will employment" to leave then having the Business use it to fire them. I can't think of any data to support the notion that the bulk of the benefits are not borne by workers, but if you have some, I'd be interested in hearing it.
I shouldn't be surprised any more, but how apple always gets away with hand-wavy explanations does still surprise me:

Who are these "content-providers" who get insight into what domain names are being resolved? (I understand they don't know who the query originated from)

I'd love to get to pick my egress providers as a user.

I am concerned it's going to be cloudflare to be honest. Concerned because my understanding of how WARP was implemented was precisely to NOT hide ip addresses from cloudflare enterprise customers[0].

Notwithstanding their stated intentions [1], cloudflare has moved more toward proprietary, closed implementations for which both enterprise and end-users are now being asked to pay.

[0] https://news.ycombinator.com/item?id=21070846
[1] https://news.ycombinator.com/item?id=21071020
A lot of companies allow RPi's or Nuc's to be installed into the network by teams to setup interactive scrum boards and (CI) monitoring displays. For this reason they are littered with (personal) access tokens with broad permissions on CI and other important systems. Most of the time these have barely any configuration management or security best practices as the teams want to manage these themselves (Devops is what the developers call it, but there is hardly any Ops in there). Often this initiative comes from the actual Ops not being able to provide the services the developers need, for whatever technical or political reason .
For distributed storage, we use this:
https://www.slideshare.net/Storage-Forum/operation-unthinkab...

We then install SDS software, Cloudian for S3, Quobyte for File, and we used to use Datera for iSCSI. Lightbits maybe in the future, I don't know.

These boxen get purchased with 4 NVME devices, but can grow to 24 NVME devices. Currently 11 TB Microns, going for 16 or more in the future.

For local storage, multiple NVME hardly ever make sense.
They cater to business more than individual consumers. Backwards compatibility matters to them much more than ui consistency.

I tend to agree with that for my own uses. I don't care if it's pretty if it works.
> while not offending China is a big thing, another is that western reporting is likely exaggerated

Why? If anything it seems likely that most negative reporting on China has been downplayed for years and is now only catching up now that Western governments are less interested in appeasement.
Ah, the good ol' Kzinti Lesson [0].

[0] http://www.projectrho.com/public_html/rocket/spacegunexotic....
I did appreciate on Bumble that women got to realize that writing that first message wasn't easy. I always carefully crafted my first message on any site, and it is disheartening to get no reply to that.

(Some of it, I think, is Tinder et al showing me profiles that it knew perfectly well were defunct. They're hoping to attract the person back, but it's a very dark pattern.)

I did find that the vast majority of women on Bumble wrote tolerable first messages. Some were better than "hi" but nonetheless didn't say much, which I interpreted as "OK, you can go ahead and write the first message." That rarely turned out well, but at least I knew the account wasn't dead and not a bot (at least, probably not).

I met a lot of great women on both Bumble and Tinder, leading to relationships everywhere from one-night stands to decade-long romances. I don't think it's easy for either men or women, albeit in different ways. It's very easy to make the mistake that thinking that if X is hard for me then X must be the only important thing, and that leads to a lot of ill will.
I've gone back and forth over the years. Having implemented some of the lowest-level floating point routines, taking care to handle all the corner cases, it definitely is a chore. But is there an alternative?

After all of this, I still think that IEEE 754 is pretty darn good. The fact that it is available and fast in pretty much all hardware is a major selling point.

That said, I absolutely hate -0 (minus zero). It's a stupid design wart that I've never seen any good use case for. But it is observable and therefore cannot be ignored, leading to even more icky special cases.
Yes, the backtests account for both
The Complexities of Physician Supply and Demand: Projections from 2019-2034
Yes, but I'm thinking more of the we that are the losers in in the Gini coefficient.

https://en.wikipedia.org/wiki/Gini_coefficient
Why does my internet connection play up when it's raining?
Yep. Widespread problem, as noted in this submission and thread:

https://news.ycombinator.com/item?id=25459434

Once again, the good guys (customers and honest sellers) lose out while the bad guys win, with no repercussions.
What part of the world?

One service I worked on (with customers around the globe) had about 10 minutes of scheduled downtime a week. Peak user load was, interestingly enough, during our core hours, when there are a lot more hands on deck to handle any issues. So that's the time we chose.

Naturally people still complained bitterly about that ten minutes.

Getting to zero didn't seem worth the significant engineering effort required. "You're not Amazon, and you're not 911" [emergency number in the US]
Speaking as a consultant, let me tell you that literally none of my clients over the past three years had a password reset authentication policy. Employee just calls IT, and they reset the pw on the spot with no checks whatsoever.

Keep in mind that pretty much everyone hates passwords, and a lockout constitutes a work stoppage. Adding any additional friction is resisted at every level from the C-suite to the janitor. I try to mitigate it by proposing self-service workflows, and that's popular, but the IT hotline reset is incredibly difficult to get rid of.
Trivial by itself. Combined with other information, the trivial can paint a very clear picture.
That's absolutely false in my experience. I can't speak for who I worked for or our large client list, but there were quite a few fortune 50/100 companies in there, and many many others monitoring MAP and unauthorized sellers. Tooling to track down unauthorized sellers was one of the top features that was requested and used.

You'll often see sites like Amazon match the pricing of a smaller unauthorized seller. Amazon's response to a MAP enforcement email in that case is when you stop the other guy, we will go back to MAP. So it is very important to stay on top of those sellers.
Don't blame the floating point numbers.

Just use a programming language that doesn't coerce strings into numbers.
Or use a comparison function/operator that explicitely compares arguments as strings and not as numbers.
Surely the Cray BMM (bit matrix multiplication) instructions have a better claim to that nickname.
beets supports custom fields, so you could trivially make it do so by adding something like a "trackdisambig" field and then adding that to the path definition.
You mean the grocery stores that have many competitors who also sell groceries? How would you extend that analogy to the iOS App Store, which has no competitors whatsoever who sell iOS apps?
Alternative to body scan - place your attention at the top of your head (the crown area). It creates a kind of dissociation that leads to sleep.
Careful about saying yes early on, though. Even if they disappear, that won't stop them from telling everyone else that it's now your job.
Tesla Introduces Upgraded Model S to Jump-Start High-End Model Sales
LiveWire state changes are done by simple ajax calls, no websockets are used.
Encoding the IP as part of the session is not very common practice as many people switch their devices between different wifi networks and mobile
That describes what I think about current public discourse exactly. I wonder if that's how it's always been with human societies?
> There are people that suffer from this self afflicted syndrome and it's not easy to change your lifestyle into a healthy one. Hiding behind words like night owl doesn't help you if you want to change yourself however.

Not sure why you are attacking me, and I never said I was a night owl or that I wanted to change myself.

Anyway, if you consider genetic predispositions or adolescence to be “self afflicted syndromes”, then either there’s a language barrier or you just will never accept something that it’s not your own opinion, even if there’s scientific research showing you otherwise (maybe you didn’t read it? If so, then I suggest you do).
I don't get it, You are immune but you can still spread the virus. What is the difference between allowing someone who is vaccinated and someone who has covid without symptoms.
Ask HN: How have you turned a rejection into an offer?
I've recently been rejected after a number of interviews for the nth time, and I plan on attempting to persuade them otherwise, because why not? Have any of you successfully negotiated your way out of a rejection?
Yeah this was confusing to me as well. I assumed that it was related to the devices that were seized[0] from the darkside group. Maybe this means the keys/wallet was is what the FBI gained access to.

[0] From the article:
> On May 13, DarkSide told affiliates that its servers and other infrastructure had been seized, but didn’t specify where or how.
It's not an obvious truth. That's the point.

Not all women have vaginas. Not all people with vaginas are women. And even if you don't want to accept that trans women are women, you can't do so in a class about trans issues without being confrontational. That was the entire point of the class.

Insisting that it has to be an obvious truth, in the context of that class, means that you're not listening. And they may have decided that "not listening" isn't sufficient reason for disciplinary action. But it's poor performance in class.
This is an important topic since HN appears to be a news site that uses social up/down voting, but really is a highly moderated platform, where moderators have full power to censor and shadow ban for any reason without any transparency.

I was shadow banned for my submission about Amazon’s power over my small Amazon business, an important topic in which I received national media attention from NBC, former editors of Vice News, etc.

However, an HN moderator did not like the article, so he shadow banned me.

I understand there are cases for shadow banning, such as trolls, spam accounts etc, but my submission was a highly significant news worthy article that received national media attention, that did not deserve this treatment due to one HN moderators opinion.

HN lacks moderator transparency. Readers believe they are being shown a curated list of relevant news from their peers, but really are just seeing the topics and views that closely align with HN moderators opinions.
> I have a special hatred of floating point numbers. I wish and advocate for a better standard.

Like what? Packing the real number line in 32 (or 64) bits is an incredible trick. The roughly scale-invariant distribution of represented values means you can do math without regard to choice of units, which would be impossible with any fixed point scheme.
> Tax competition is a good thing. When raising taxes is hard, government has to work to justify its spend. If it doesn't, the business and talent goes elsewhere.

Is it?

I mean, if you believe that taxes are wasted money, it probably is, but if you equate taxes with hospitals, schools, roads, trains, police, research, ... then you probably feel that the underbidding tax war is really a bad thing that hurts communities.
A bus stop is a valid address for some things.
The image is from 2012 and describes a topology, but not a technology.

Today you'd rather use Arista 7060, 7050cx orJuniper 5200 as ToR. You'd not build 1:1, but plan for it in terms of ports and cable space, then add capacity as needed.

Almost nobody in an Enterprise environment actually needs 1:1, unlike hosters or hyperscalers renting nodes to others. Even then you'd probably being able to get away with a certain amount of oversubscription.
They are, only talking about skin colour is way more reductionist that taking the entire phenotype, and history, into account.
The reason does not matter. It really is truly, absolutely irrelevant.

If Windows has issues with paths longer than 260 chars (only PARTIALLY fixed since Windows 10, v1607), I do not care that NTFS actually has no problem and supports 32,767 Unicode characters and the actual problem is the Windows API (and since v1607, apps that have not been updated to support the new behaviour). It is an example of a bug/limitation/lack-of-polish of Windows. The internal details are irrelevant.

Gnome has a lot more of these issues(thumbnails being one of the most visible and annoying ones) than Windows. Gnome (any ver) is not more polished than Windows.
The reality is that it's tough to verify somebody's identity in remote work. The office used to be a walled garden, and now people seem to treat chat as a walled garden. We'll probably see more security incidents like this in the future.
The challenge is that a group of people are going to profit massively from this drug being approved. Some patients are going to pay $56K+ on this treatment, in other cases, we taxpayers are going to pay that (Medicare/Medicaid).

Should this be approved if it's ineffective?
Sounds fair
The Ransomware Song (Blame Math)
64/75 = ~85% so the non-darkside individual(s) transferred their bitcoins to an address FBI of North District of CA has (Page 7, #34) [1].

How they got it I've yet to see an article on.

[1]: https://www.justice.gov/opa/press-release/file/1402056/downl...

Edit: My assumption is that the blacked out portion names an informant who made the transfer.