skysight-inc/HackerNews huggingface dataset:
> "Difficulty" isn't a thing in PoS

Yes it is. The more people with coins actively minting in the system, the higher the difficulty of getting chosen. Please do more research.

If you really want to keep discussing this with me, read through the WHOLE of https://github.com/fresheneesz/validatedProofOfStake and show me a full attack on it.

> FWIW, I'm not a PoS detractor.

You could have fooled me. But it sounds like you're saying you believe in Vitalik, and anyone else on the internet (ie me) must be idiots who can't understand solutions to these problems. Yet, you're not putting in the effort to understand the solutions out there. PoS protocols are more complex than PoW - there are more edge cases to shore up. So telling me you can "trivially" get around any particular solution ignores the fact that solutions work together. They aren't isolated. So slow down and actually try to understand a protocol holistically before attacking it. If you're not a detractor, than how about just trying to learn instead of insulting the intelligence of people who have actually worked on solutions to these problems?
It's a neat idea that, thanks to the applications-not-protocols approach taken by many platforms today, probably isn't viable any longer.

When the article was written, my workplace communicated over e-mail (IMAP-enabled), our calendars supported CalDAV, and we did have an instant messaging system that ran over extensions to SIP, which _was_ compatible with libpurple. We also all had voice phones on our desks for very-impromptu calls. The ironic part of all this: it was Microsoft Exchange and Microsoft Lync. I at the time was using Linux with Pidgin and Evolution, there being no Microsoft clients for any of the stack.

Nowadays, our stack is GApps with Slack, and a heathy dose of Zoom. To get Slack out of the way: good luck; the XMPP and IRC gateways were retired ages ago, and interactive API clients even today appear to be second-class citizens. GApps is interesting in that they do support standards like IMAP and CalDAV, but only if your organization allows for "insecure authentication" options, which mine does not. Otherwise, you're glued to a browser app that sometimes breaks in browsers that aren't Chrome. And let's not even start with Zoom.

My point in saying this is: in 2014, this would have been seen as a cool project, and I'd bet some coworkers would've even encouraged me to try and get it working. In 2021, this is how I'd get fired.
Unless you ran DESQview, of course.
I think the author is an urban professional dreaming about people doing what he never has in a place he's never lived.

There's nothing wrong with doing that, although if you really wanted to design a realistically successful small town, you'd start by asking "where will we put the chemical plant/oil refinery/paper mill?"
> Suppose you need to add new features or fix a bug, to do so you will need all of the original specifications and code generation tools.

Yes, that is the point of code generation. You had a positive sentiment towards Rust - Rust has a compiler. In order to work with Rust, you have to have "all of the original specifications and code generation tools." Source code is just the specification of the program, and the compiler is the code generation tool.

Why do you trust compilers any more than this?
That was the official name at his time of graduation, and the school is still the Russian security service primary institution.

> I'm not sure what you try to proof with your picture and kaspersky.

Oh, only that his link to Russian secret services is not ephemeral. He is still a bloody state security reserve officer.

Now of course there is no way of proving if this vulnerability was planted or merely a poor implementation. However to think that Kaspersky Labs has no substantial embedding of FSB is incredibly naive, it's simply not how things work in Russia (even if the CEO isn't an FSB reservist).
A headless component is one that does not return anything for a render by default. It either accepts a prop function the does the render or passes values to its children and lets them render the results. This splits the functionality from the render so the developer render as appropriate in the application's context is (ie. web page, react native, etc). The headless component may come with multiple styles of renderer available.
I can't have any music playing when programming, because my brain focuses on the music and I get nothing done. My wife is ADHD, and she must have music (and possibly something else) playing, or else she can't get any work done. I've always wondered if people who need music to work are ADHD, based on my limited sample size (no pun intended).
Not everybody is driven solely by money.
> As one of the developers of this patchset, can you comment on how these contributions will be licensed?

Yes, I can comment on this. The licensing is the same as any other submission to the Linux kernel. See https://www.kernel.org/doc/html/latest/process/license-rules... for Linux kernel licensing in general and also https://www.kernel.org/doc/html/latest/process/submitting-pa... for the meaning of the Signed-off-by lines.

> Can you also comment on how a third party can verify or audit the output of a compiler without a specification?

I imagine it's pretty similar to how you verify or audit the output of a compiler with a specification. If you can show me an example of the sort of verification or audit you envision, I can perhaps give you a more helpful comment.

We do not make any claims about verified or audited compiler outputs or compliance with specifications, and to the best of my knowledge, the Linux kernel does not currently verify or audit any compiler outputs, so I'm not sure I follow why I would be particularly qualified to comment on it, but I could maybe point you at some interesting research.

> Can you comment on what empirical evidence you based this statement on?

Yes, I did comment on this, in the paragraph you quoted. If you'd like me to expand on something can you clarify?
Yes, I'm saying that it is completely possible that the risk assessment could say that the damages of an attack like this are ultimately less expensive than the cost of mitigating them when probabilities are accounted for. I don't know that that's true, but I don't know that it is untrue either, because nobody is talking about the risk assessment math, most especially people calling for massive infosec increases.
It's a good question. I'm basing this mostly on my impression of recent PR releases, post-intrusion, that make the argument "We spent money on it! It's not our fault it didn't work!" I've noticed that PR releases tend to echo the eventual legal argument. There's at least some evidence it's not a McDonalds hot coffee lawsuit thing (although I really hope I'm wrong).
The submitted URL was https://dailycaller.com/2021/06/22/iran-press-tv-websites-bl...

The domain doesn't appear to be censored https://news.ycombinator.com/from?site=dailycaller.com so is it that it mentions that certain country?
In essence, this seems to be Amazon's AWS Lumberyard engine going from source-available (but proprietary) to Apache 2.0
Sure so they learn classic ASP in a day, now they have to code their own custom routines for XSS protection, SQLi Protection, SSRF protection etc etc etc

or.... they could move the application to a supported platform with a wider developer base and in-built protections against common web application security attacks.

There is a reason why most web app developers do not hand code their entire stacks. For example why ruby web developers use rails. Web app. sec. is a a relatively complex field to get right, full of edge cases. Having each and every web app development team take the time to understand all those cases and edges probably isn't the best use of scarce developer resources.
> Oh, and even Debian also requires a network interface and contains a phone-home package. Getting security fixes without a normal network interface is a Challenge, and security fixes aren't really optional these day.

I’d say security fixes are rather optional these days if you have no network interface.
Acko is back (not that they went anywhere, just excited to see it on HN)! This is one of my favorite personal tech blogs of all time, so many cool easter eggs and animation gems hidden in there. I especially love the Winamp visualizer projects and inspirations you can find sprinkled throughout.
Postmodernist suppositions regarding power and ideology include an implicit assumption that absolute truth doesn't exist.

That used to be called relativism.

It's ad hominem at scale -- an attack on the institutions that produced centuries of good work rather than an honest confrontation of the work itself.
I'm not familiar with the specifics of gain-of-function research, but on its face this comment sounds a lot like "we haven't developed a vaccine for COVID yet, so we should ban trying to develop a vaccine" would've sounded a few months before the vaccines came out.

In scientific research particularly, not having seen results yet doesn't mean we should abandon the research. If gain-of-function research is supposed to help us gain a better understanding of viruses and we're likely to see more pandemic-worthy viruses like SARS and SARS-CoV-2 arise naturally, I think any ban should be considered very carefully.
Love the sentiment but 'hosting' at that scale is an incredibly complicated thing, way, way beyond most entities ability.

It'd be like the government designing their own ASICs or making their own OS.

But the part about avoiding vendor lock-in would seem like an appropriate measure.
Side question: what are cryptographically secure random bytes? I assume that with random bytes all we care about is that they are random. And since it's impossible to tell if any finite sized output is random or not, I suppose we simply show randomness with statistical significance tests. But how, precisely?
I doubt this is a case of censoring subject matter. I think it is more likely to have been flagged because it duplicates other submissions, and possibly because of the nature of the publication you link to, which describes itself as politically motivated.
A lot of the complexity comes from the lack of expressivity in languages to relate variables (or data structure fields) semantically to each other. If there was a way to tell the compiler "these variables are always accessed in tandem", the compiler could be smart about ordering and memory fences.

The idea to extend programming languages and type systems in that direction is not new: folk who've been using distributed computing for computations have to think about this already, and could teach a few things to folk who use shared memory multi-processors.

Here's an idea for ISA primitives that could help a language group variables together: bind/propagate operators on (combinations of) address ranges. https://pure.uva.nl/ws/files/1813114/109501_19.pdf
According to NIST, quarterly password resets are useless.

If your SSO isn't, use a good password manager.

Admin access for devs should be audited, and devs should understand that now they need some opsec. Like, separate work and personal machines; if not physically, at least use a different account, better yet, a VM.

To say nothing about adding suspicious email / IM attachments.

Remember, devs: you are a potential attack vector, a very efficient one.
How does one discern between productive and unproductive forms of self-help?
Recover Lost Funds with Claimpayback.com
Don’t partake in such financial investments. I would advice you run at the hearing of the name HQbroker.
I clearly got a second chance to learn from my mistake and make things right. On a good day like this,
some months ago I clicked on an “Ad” while surfing the web about Binary Options deal which offered great returns.
Decided to check it out by registering a demo account under an assigned account manager to learn how to carry out the trades.
I had so much bonuses/profits with my demo account and that gave me the courage to get started.
I was told by my account manager at HQbroker to get Started with $250, I listened and did as instructed and my returns were great.
I decided to upgrade as the options at the higher levels were more lucrative. I invested more and more till it got to a total sum of $100,000.
With these I was able to trade a few more times, I made much more bonuses than before then decided to Immediately I requested for a withdrawal
I got excuses upon excuses asking me to invest more. They told me that I had to make a one off payment to cover charges and taxes etc,
so I sent $60,150cent for that, also they deposited 150,000 into my metatrade account and asked to match it,
then I was told that someone has issued a fraudulent Cheque putting their account over $ 800k in the red.
The assured me that the situation would be resolved which took forever
The solution was a bank which they started working with, and the money would be deposited there which I could withdraw at a small fee.
I checked the “bank” out and it was a complete joke. The domain had only recently been registered, and funnily enough,
to the same people who registered the “HQBroker” site. I conducted my own investigation and called the Domain registration company twice,
and the responsible person never ever got back to me. I assume that someone internal is working with the scammers.
I wrote it off as one of “life’s” expediencies but hoped I would come across a solution somewhere on how i can get all my funds back and then came across;
support@claimpayback.com–, I got in touch with their recovery section after i opened a case on claimpayback.com and I’m more than happy to share my experience with everyone
on how they got my money back swiftly just as it was said in other online reviews i got to hear about them…I worked for over 20 years for that money they took and it was gone in a matter of months.
My fault I know, but parasites like these people don’t deserve a place on this earth.Clearly, Got a second chance to learn from this.
> And these anti-White activists have extraordinary power in academia, politics, the press, etc.

They do have a lot of power, so aren't they capable of being racist against white people, even when racism is defined as power+prejudice?
I'm not a Gruber fan but I think his actions in this case are totally defensible. Every month on HN there's a post about some OSS project mod stepping down due to abuse and insane expectations from the community.

Gruber wrote a tool that solved his own personal problem, shared it with the world because why not, and then made damn sure he wasn't going to have to deal with any fallout put on him for his sharing.
Show HN: Fastest QR Code Generator?
QROSSCODES - No login, simple, free QR code generator. There will be login eventually, this is the Phase 1 MVP
>It's like either you have a great deck and thousand emails or nothing.

Pretty much. If you can't make the deck yourself, hire a third party to mock one up for you after you've put the content together; let them do the spacing, font, background, design work. Then the emails are on you; set a timer for follow-ups, make a spreadsheet regarding appointments.

You're still a builder, but you're gonna be building human connections for a bit. If you reframe things in that way, it's less jarring.
Once upon a time, telecommunication networks were built point-to-point or otherwise non-publicly switched. I believe the telephone network, for example, is still this way, which includes more than just telephones but also ISDN lines and likely other technologies/use cases as well. There's no reason you couldn't have military facilities on their own network connected to servers in their own cloud, as this AWS instance has shown.
I suspect that the original poster did capitalize it but HN 'helpfully' edits such full word capitalization in titles to simple capitalization. However, what many may not be aware of is that you can go back and fix the title and resubmit it and it will be saved as edited. You have, I believe a 2 hour window in which to do such an edit.
Very low but a more common and likely possibility is that it could disturb the oort cloud and cause comets to fall in system. Guess that could classify as what you are referring to depending on your definition of solar system.

A passing star is more likely to do this though and we believe that they indeed have caused disturbances in our oort cloud in the past. They might be potentially less numerous than rogue planets as our universe ages but they have a far larger potential hill sphere than even a very large planet so interactions with neighboring stars' hill spheres are more likely and frequent.
much more effective just doing yoga by hindu sages
I can’t speak to the parent comment’s intent, but it’s becoming harder and harder to look like an innocent crypto whale. While some can prove that they originated their balance, what if the wallets used in certain transactions are (or must be) confiscatable, say at exploited tumblers?
Can we just stop writing nonsense like this?

> Shares of Microsoft were down about 0.4% following the news

So the MSFT share price changed well within the norms of daily volatility. It doesn't mean anything.
That's an interesting choice.

Personally, I think I'd go with the release of the iPhone (June 2007).
The climate benefit of remote work
The pandemic has created an opportunity to cement remote work as a climate solution. And it's not just about cutting out driving.
> you’d have known the shaming sermon with a lot of “you” thrown in

Hmm, I am not trying to shame you into anything. I was using "you" in the generic sense. Like this here https://en.wikipedia.org/wiki/Generic_you I can understand, though, how you might have misunderstood me here. Even though I am just a stranger . That was not the clearest of way to speak, even though I have spoken it for a long time, English is not my first language. Then again, it is usually best to try and assume good intent.

I do have a feeling (possibly incorrectly) that your (vsw02´s) usage of "you" is directed at me (yosamino) directly, though. And since you have clearly deduced that I do not even know what I am doing, and I am clearly too stupid to understand the point that you are making, while you already know all of mine, I would like to agree: it's best this ends here.
>I could have used this 32(!) years ago when I was struggling in college.

I was struggling with this material more like 15 years ago, but same. I wish someone had explained the LaPlacian like this when I was in Multivariable calculus:

>Find me a function f where every value everywhere is the average of the values around it.

It's so simple and easy to grasp, yet provides so much insight into what's going on when you're doing the actual calculation behind the operation, but is so easy to lose sight of when you're overwhelmed with figuring out the 'mechanics' of it and everything else that was covered in the day's lesson plan.
Surely not all ransomwear hackers are Russian? At least not for long given how effective and visible they have been lately. Seems like a easy field to hop into and make millions
Which is kind of ridiculous because .zshrc isn't a workspace. My understanding of this feature was to calm fears of untrusted code running due to some configuration in .vscode configurations or with plugins.

Basically the files and folders are usually innocuous, it's the particular configuration of the workspace or plugins that may run code on them that need to be "trusted" or designed to request permission before executing code
I don't think you work in infosec?
Not every co moves at startup speeds. I have seen plenty of large companies move just as slow or slower.

Problems of red tape are not limited to only government ,it is function of most large organizations

Plenty of security engineers are constantly frustrated at the lack of security focus in corporate sector, investments are only made when it affects revenue . Even after all the ransomware companies some times do the bare minimum and buying insurance

Government on the other hand cares about security for different reasons, they take it lot more seriously. They don't sacrifice security in the interest of sales.

I would anyday prefer to work for some org where security actually matters not where it is inconvenience
Not sure how this works since I post like 3 articles a year, but I posted the title as "5 Min Breathing Exercise Lowers Blood Pressure" initially and something or someone changed it.
I've seen claims that HN doesn't use shadow banning but it doesn't actually seems to be the truth, I had much better opinion about this site before today.
Most jobs aren't particularly lovable. That's why they pay you to do the work, right? Your expectations around work may be a little unrealistic. Ultimately, you work to earn money.

The thing is, because of supply and demand, you get paid more for work that is either undesirable or requires rare skills (or both).

Note that rare skills may be acquired through training or schooling, so if you have a rare skill you're interested in acquiring, you should go for it.

The trade you were apprenticing in sounds like it would have led to a career. It sounds like you quit, though?
It could perhaps be reasonable for IT departments to ship Windows desktops without all these surveillance and control mechanisms, if normal web browsing and email activities such as clicking links and opening attachments were not so likely to get the enterprise owned.
The problem with cleaving contractor deliverables from suitability results is that you remove all incentive for quality work.

Or in another words, you're trying to find the one honest person, in the stack of AccgemloitteBMizantPMGataBCS proposals. And everyone else is bidding with the profit expectation of tossing entry-level, over-hyped developers on it, and then crossing their fingers nothing goes wrong.
Yeah I actually built this after having a bit of frustration trying out freelancing platforms. What surprised me is as a freelancer, on some of them, I have to pay to apply to gigs. I mean I get it, but it still doesn't seem right.
Most of us work in a profession where we hire teams of people to maintain systems with a fraction of the complexity of the human body (not to mention our understanding of how computers work is orders of magnitude higher than our understanding of the body). Contrast that with a doctor seeing a patient for the first time.
I understand why he comes across that way, but as a Catholic myself, he's correct in his assertion that the church still holds the doctrine 'extra Ecclesiam nulla salus' (Outside the church there is no salvation) and that most Catholics of Aquinas's time would have believed an even strong version. This is not flame-baiting. It's a statement of Catholic doctrine that's been written on extensively for many years. IMO, he's just providing a factual background for Aquinas' worldview that anyone -- Catholic or otherwise -- can use to interpret his philosophy however they want.

I don't think this is flamebaiting personally, but maybe I have thick skin.

The only thing he's 'wrong' about is that not every non-Catholic is considered a pagan. Some are schismatics or heretics. Again, that's not my opinion or his/her opinion. That's just a statement of what the church publicly proclaims to believe about non-catholics.
>In the United States the poor get Medicaid

If they're lucky, Medicaid is in no way universal. Why shouldn't everyone have access to this technology via universal health care?
But there is no mention that it has been flagged, or you mean it was submitted previously and flagged before so it's censored now? It is still censorship.
Sure, Amazon has jobs in it's warehouses :p