skysight-inc/HackerNews huggingface dataset:
On the contrary, nothing has really changed here. If you're moving your crypto to an exchange in order to sell it and withdraw euros or dollars or whatever, guess what—you're already in the system. These rules already applied due to the interaction with the traditional financial system when you withdraw your balance. Now the exchange will be required to do the same reporting on the crypto side, but they already had that data. The same goes for moving traditional currency into an exchange to buy crypto. The only areas really affected by the new rules would be exchanges which only involve crypto (e.g. BTC for ETH), direct transfers between customers on an exchange or between exchanges—which aren't actually crypto transactions to begin with even if they are denominated in crypto units—and withdrawals to addresses controlled by parties other than the account holder, which many exchanges didn't permit anyway. (Withdraw to your own unhosted wallet first.)

It's still a huge invasion of privacy etc., completely unjustified and unethical etc., but let's not get too worked up over what seems to me like a fairly predictable shift in which businesses are subjected to KYC/AML regulations. The more reputable exchanges have basically been assuming that these rules applied to them all along. Unhosted wallets and direct transfers between them are unaffected since they don't involve a Crypto-Asset Service Provider. Centralized exchanges were always an awkward stop-gap measure in any case, not a fundamental part of the crypto ecosystem. If this encourages people to trade directly through the decentralized network and avoid CASPs wherever possible, so much the better.
> I never suggested removing a language used by millions of people. Let me be more specific: Pruning support for old formats and protocols is a feature, not a bug.

You're contradicting yourself here; Hebrew is a language used by millions of people (about ten million, so 99.9% of the world's population does not use it) and also an old format (about 3000 years old). "Pruning" support for old formats makes history inaccessible; "pruning" support for old protocols requires constant effort to keep your servers compatible with whatever is fashionable with today's cascade of attention-deficit teenagers [CADT].

And if we follow your originally stated reasoning, "Continuing to support $x means continuing to defend attack surface that's implemented as $y year-old code, to deliver a feature that in $z the majority of people do not use," we ineluctably arrive at the conclusion that we should remove support for languages used by millions of people.

Taken literally, we should remove support for all languages, since no language is used by more than 50% of the world population, but in keeping with the principle of charity, I interpreted your "majority" as "vast majority". I'm not sure where exactly the vast-majority cutoff lies: a feature that 90% of people do not use? That would include all natural languages except English and Chinese. 95%? All languages except those, Hindi, and Spanish. (In particular, it leaves out all those RTL languages that cause so much complication in text rendering, like Arabic.) 99%? That leaves 20 languages, but not, for example, Persian, Swahili, Italian, or Thai. Even a cutoff of 99.9% might leave out Hebrew, Uighur, and Greek.

What percentage of users do you think use View Source? The web inspector? Printing?

That's not a strawman argument; it's a slippery-slope argument. And, I think, it's a valid slippery-slope argument. If we are going to avoid removing support for these things, we need a better basis on which to make the decision than, "Continuing to support $x means continuing to defend attack surface that's implemented as $y year-old code, to deliver a feature that in $z the [vast] majority of people do not use."

I do agree that there needs to be some kind of cutoff. Gopher is probably below it; WAIS and XBM certainly are. But FTP?

XBM was never very widely used in web pages because it didn't support color, grayscale, or compression, although for a little while it was the only image format supported by browsers that supported transparency. I did put it on a few of my web pages, but as soon as Netscape added support for transparent pixels in GIFs, I switched over and never looked back. This would have been about 01994.

By contrast, there are about 1.1 million anonymous FTP servers today, one out of every 4000 public IP addresses, and about one for every 30 HTTP(S) servers: https://zakird.com/papers/dsn-ftp.pdf
That's more than the number of HTTP servers that existed for the first seven years of the Web, up to 01997: https://news.netcraft.com/archives/2021/05/31/may-2021-web-s...

You can be sure that there's millions of people using them. Probably more people than speak Hebrew, in fact.
> "The solution to an observed shortage of labor is “employers pay more and quit whining”." - Keep in mind that going along with higher prices (wages), there will be a lower quantity (jobs).

No, that would only be true if there was not an observed shortage; that is, if the current market price was clearing the market with no unmet demand at the market clearing price.

An observed shortage that is not a real shortage means that the market price can rise to the point of market equilibrium without reducing quantity traded. In fact with a normal supply curve shape, the minimum price increase to achieve equilibrium will increase the quantity traded compared to the status quo, as quantity supplied will increase with price. Quantity demanded will be lower than in the status quo, but since the “observed shortage” is quantity demanded being above quantity supplied and, therefore, traded at the current price, that reduction is literally just reducing the “observed shortage” to zero, not reducing quantity traded.
No, I'm sorry, I'm not going to pull out heaps of regurgitated quantum information to back this up but that's straight-up wrong.

The red ball and the blue ball exist as physical objects, it is us, the observers, who are unaware of whether they are red or blue at either position. There's no superposition here. They are red, or blue, assigned randomly. Not both, not none. These are facts - properties - about the balls that are real, that exist, but we simply don't have that information at that point. It is meaningless that there is no observer that can 'see through' our hands to know which is correct.
There is a difference between a random eastern european camgirl and an OnlyFans account.

You can also close your OF account the second you don't want to do it. Try doing that with the military :)
>> They are in the midwest (low taxes)

Not in Minnesota, obviously.
Oh, you mean like resistor codes?

Maybe one stripe on the cable for each connector?

Then you have colored and dashed or dotted lines for each stripe, depending on what that connector can do or be used for?

Are we ready to go plaid yet?
This just doesn't always work, if you lose more than 20% of your customer base when you raise your prices 20% you aren't doing yourself a favor.

Anecdotally I've stopped eating at restaurants/food carts that I absolutely loved when they've raised prices about that much

---

You aren't gonna get all restaurants onboard with this at once unless you outlaw tipping, and I don't see that happening.
The extra "worlds" follow directly and exclusively from the existence of the various basis states in a wave function, and the laws of entanglement. No other postulates are needed.

The many worlds are in the entangled state but then the collapse postulate reduces them to one world. If you remove the collapse postulate you put them back in. And sure, the collapse postulate is an awful solution breaking unitary evolution and you have every right to reject it, but that does not change the fact that many world introduces - or at least not removes - additional worlds that are not there in Copenhagen.
Just to be clear, I like Julia, and think it has advantages over Python. I'm writing all this as someone who is cheering for Julia to break out of its HPC niche. Thanks.
Thanks so much for the pointers, super helpful!

May I know what is the implication of not going UK payroll, i.e. earning foreign income? I might go for submitting an annual self assessment on my foreign income if there is no huge downside. Also definitely looking into "permanent establishment". The EOR suggestions are very helpful!
edit-too-late-to-edit: I remembered something that makes me think it's actually more complicated.

If I write 0 and 1 on two different pieces of paper, then flip a coin to decide which paper to give you, we have "entangled" unknowns. When I reveal my paper, we instantly know what's on yours. The joint distribution can't be described per-particle, but we don't consider it spooky. So I think there's something more to it.
I think it's been single-digit months since the last UTF-8 parsing vulnerability.
Persona based, not tied to your meatspace identity.
You experience your surroundings spatially through your senses every day. In the ordinary state of consciousness, this is sometimes called sense-experience. Now imagine experiencing your consciousness — cognition, feelings, memories — as the state of a boundless ocean, ”you” in this case being the ocean experiencing itself in this way.
This is great news. The more people in power have been hit, the more repercussions we can hope for.

One possible way to force a bit of scrutiny upon NSO group would be to crowdfund an Pegasus subscription and use it against Netanyahu.

Any serious suggestions what we can do to ensure that in the long run there will be less and not more "Hacking for hire" companies lending their tools for use against journalists and the opposition?

Shit will really hit the fan when the "ransomware as a service" discovers the "targeted surveillance as a service" business model.. Interesting times to be alive.
This looks like a shocking news, but there are probably hundreds of countries that are trying to tap on the French and other presidents.

This is just the moroccan gov that is too incompetent to do it by themselves but have to use a third party consulting firm for the job.

And so, there will be no consequence, because all the other governments know very well that they are dirty too, so there will just be a few soft offense word and then trying to have the population forget as fast as possible...
What if someone steals my idea?
On this thread, we're talking about state-level attackers targeting iMessage.
Huh? My landlord wasn't eating the HOA costs out of the goodness of his heart, that's a lost cause whether you rent or own.
Images from another user displayed in message
Software engineering research is immature and, as such, has few (no?) strongly-supported claims that the entire field relies on. I agree this is a frustrating state of the field, but the way this is written makes the author appear to be unfamiliar with the state of things.

For example:

>Did I mention that all three of those papers use different definitions of “defect”?

This kind of thing is really common in academia. I do not know software engineering research in detail, but there are older and more basic definitional fights in the social sciences. Defining a defect, as I'm sure the author of the blog would agree, is not a trivial decision.

In general, this piece contains (perhaps hyperbolic?) dismissals of people trying to do work. It doesn't seem to respect what I imagine is earnest effort. Taken all together, it seems like the author either thinks the entire field is charlatans (which I doubt as they use the fields' conclusions at the end) or is making light of people working on problems they themselves do not have answers to in order to have a more lively writing style. It was fun to read and left a bad taste in my mouth.
I have at least 8 Physicist that I email/zoom regularly (at least twice per month). I also have half a degree in Physics, with at least 2 courses of Quantum Mechanics (all the advanced courses also use QM, but there are 2 courses only about QM). [I also have a degree and a PhD in Math, but it's not too relevant here.]

Anyway, I'll read the article thoughtfully and write a long comment tomorrow. Can you take a look tomorrow?
You can not use QM for faster-than-light communication: https://en.wikipedia.org/wiki/No-communication_theorem
The undiscovered country: Can suicide be predicted?
Nobody seriously thinks it's "Rust" that's the silver bullet either; they just believe memory-safe languages are. There are a bunch of them to choose from. We hear about Rust because it works in a bunch of high-profile cases that other languages have problems with, but there's no reason the entire iMessage stack couldn't have been written in Swift.
Too cynical?

Distrust any one who claims they do understand. Because they don't.

Our study group chewed thru REST in Practice. It's very reasonable, approachable. Good advice for a lot of design choices that you'll likely run into.

Sadly, REST is like Agile. It's not possible for any two people to reach consensus on any aspect, big or small.

And just like Agile, REST doesn't matter. What ever you do will be wrong.

So just smile and play along.
Linux Mint is great for all these things, even for family members not used to Linux. I would say LM is closer to Windows 7 that it is 10, and that's a good thing.
I think its about the naive "rep_array[hashcode(obj) % bucket_size] = object" which is all too common.

If your rep_array is doing linear probing and/or robin-hood hasing, then incremental hashcodes (such as 1, 2, 3, 4, 5...) is a bad thing. Especially if you're doing both inserts and removals: this sort of incremental pattern would lead to many "runs" where linear probing would perform poorly.

Of course, it isn't very hard to do rep_array[(hashcode(obj) * large_constant_odd_number) % bucket_size] instead and get a good distribution. But the question is whether or not people know about those kinds of steps.
> nobody asked them for this

I'm in favour of regulating and tracing cryptocurrency. I don't think people should be able to sell kiddie porn, bribe officials, scam innocent people or launder money with impunity. I think lots of people would agree with me.
as a security engineer at a semi large American company, we factor in state actors. we do tool for, and routinely hunt for nation state actors.

most people I know, even those in mid size businesses tool for and hunt for nation state TAs as well. it's just something you have to do. the line between ecrime and nation state is sooooo thin, you might as well. especially when your talking about NK, were you have nation state level ecrime.
>Nobody has any credible story for how regulations would prevent stuff like this from happening.

We do have some of those already.

https://www.faa.gov/space/streamlined_licensing_process/medi...
No. Rust cannot magically avoid memory-unsafe operations when you have to deal with, well, memory. If I throw a byte stream at you and tell you it is formatted like so and so, you have to work with memory and you will create memory bugs.

It can however make it extremely difficult to exploit and it can make such use cases very esoteric (and easier to implement correctly).
Agreed that you shouldn't conflate them, but there are many types of meditation that you can practice and:

- not all are rooted in spirituality

- some are directly related to mindfulness

I find that if I meditate regularly, I'm more likely to catch myself practicing mindfulness by accident in my daily life. In those moments I usually discover something about my surroundings that I didn't know before. Really practical stuff, like an unexplored trail that's a better way to take on my commute home from work.

Intentionally practicing mindfulness is fine, but for me it's the cases of being mindful without explicitly setting the intention that make it worthwhile. They're really pleasant, nothing spiritual about it.

And meditation is linked to those moments because, if I'm lucky, it causes them.
Strongly agree. It seems quite common in the west to go into the deep end without the necessary foundations. Certain ethical behaviours, strong compassion for others, a desire to do this for the good of the world not just for yourself etc. These are all essential parts of any spiritual path and just trying to reach straight for insight is potentially dangerous imho. I'm not a Buddhist as such but for me every aspect of the eightfold path is utterly essential and mutually supporting.
Social Media Is a Public Health Crisis
If you happen to know: Is it the performing the test itself that's illegal, or is it "merely" that to perform a test for someone you'd have to take possession of the substance, however briefly? (Bad for both harm reduction and liberty either way, I'm just curious which it is.)
I got layed off and was told if and only if I do another 20 hours of work to finish documentation would I receive 2 weeks of severance pay. I tried to explain severance shouldn't require extra labor but I did the work anyway and received ZERO severance. I knew that outcome was a possibility.
LeechBlock. But router level blocker would be better
There is no "real threat". Definitely phishing is one of the top threats to an organization, left unmitigated. Thankfully, we now have unphishable 2FA, so you can mitigate it. When you choose to prioritize a threat is going to be a call you have to make as the owner of your company's security posture - maybe phishing is above memory safety for you, I can't say.

What I can say is that parsing untrusted data in C is very risky. I can't say it is more risky than phishing for you, or more risky than anything else. I lack the context to do so.

That said, a really easy solution might be to just not do that. Just like... don't parse untrusted input in C. If that's hard for you, so be it, again I lack context. But that's my general advice - don't do it.
I'm stuck in a vim like combat with a spider.
> If it needs to "return an error" how?

Because this is all just library features from a library that isn't being used. They could use core::alloc and have panic on allocation failure, or they could implement their own library and that library presumably wouldn't have the explicit panics that core::alloc has.

Kernel rust isn't a matter of a variation of the language, it's just about not using the standard libraries
>> Restaurants have a lot of legal exceptions because you need people to work on sunday, vacations, weird schedules, etc.

Actually a lot of industries have this problem.

I was a smartphone tech. I repaired phones. You know when a majority of our business was done? On weekends and holidays. Whenever my GF had a national holiday, I had to work because it meant the people who put off fixing their phones will take that day and come it for a repair because it was way more convenient than during or after their working hours.

I also had to work until 7pm every night for the same reason. My owner was banking on people coming home from work and stopping, so we stayed open an extra two hours. Some days I had five people in my office. Other days? Maybe one or two. But those two hours generated a lot more revenue than you probably think over the course of a month.
Some of us already do this without any help.

We don’t need a plug-in to make things funnier for us.

Spoonerisms are a real speech impediment, and tend to be inherited.

Yes, I am so afflicted. As was my mom.

Being told that I had to put on socks as a kid because her “freet were feezing” was funny for me, for a while. I don’t think it was ever funny to my mom.
Agreed. I was simply mostly addressing this person's obvious beef with Rust.
It's not wrong though. Every social "science" is suspect, some much more so than others, despite their usefulness.
Cool to see how this has evolved from a goofy website into something real. Good example of sometimes things take a long time to build.
While it would be nice to have these things, think about it: this isn't a product someone is selling us, they were doing their own thing making something that worked for them and stopped and thought "dang I bet the other nerds out there would use this" and then did what they could to open source it. That in itself this is generous, and nowhere does it imply any other types of agreement. Does that make some of us sad? sure! Is that this dev's problem? absolutely not.
Totally. I said Rust because I write Rust. Like, that's (part of) my job. Rust is no more memory safe (to my knowledge) than Swift, Java, C#, etc.

I also said "way, way less" not "not at all". I still think about memory safety in our Rust programs, I just don't allocate time to address it (today) specifically.
For anyone who's fresh to cyber security, the fundamental axiom of it is that anything can be cracked, only a matter of computations (time*resource). Just as the dose makes the poison (sola dosis facit venenum).

Suppose you have a secret, that is RSA-encrypted, we might be looking at three hundred trillion years according to Wikipedia with the kind of computer we have now. Obviously that secrecy would have lost its value then, and the resource it requires to crack the secret would worth more than the secret itself. Even with quantum computing, we are still looking at 20+ years, which is still enough for most of the secrets, you got plenty time to change it, or after it lost its value. So we say that's secure enough.
The last time this came up, it was an unhandled exception that basically killed the combat thread. Probably something similar this time. In any case, thanks! Hoping to get it back into a playable state shortly, haha.
https://news.ycombinator.com/item?id=27880905
How is it utter garbage, it has a good library, works reasonably quickly and does analysis.
it's a UI for a service which best known "face" is a blank site with nothing but a search bar.

I guess most people can use their imagination to what it will look like :)
Plus if more of the tip is baked into the price, that's a standard-NYC-fare $15 hamburger with a 20% tip.
Is this inflation creeping up in all the expected places? The value of goods is the same but the value of the USD is lower and thus we must increase costs. I don’t see it impacting brand perception if all prices go up.
> doesn't quite make sense. You can't take that 25% and apply t against the in-patient and out-patient costs, because it's not at all clear that it fits into that bucket.

Well, if it's not accounted for in that figure then where is it? There's another amount somewhere around $3k just not accounted for, then? I don't see anywhere anything like that much could be hiding in the rest of the data.

I mean, these are from the link:

> inpatient and outpatient care, which includes payments to hospitals, clinics, and physicians for services and fees such as primary care or specialist visits, surgical care, and facility and professional fees (see Methods for more details)

and

> Administrative costs include spending on running governmental health programs and overhead from insurers but exclude administrative expenditures from healthcare providers.

So... where is it if not in the "inpatient and outpatient care" bucket? Sure, maybe minus whatever portion of that represents profit, OK, but that can't be so much as to render it anywhere near being negligible.

Or is the 25% figure from the other link off by, oh, 5x or more?