skysight-inc/HackerNews huggingface dataset:
From Flashpoint's analysis [0], in 2019 a SSN is $5.

[0]: https://go.flashpoint-intel.com/docs/pricing-analysis-of-goo...
It's actually not hard.

Rationality is a form of communication. Its purpose to persuade other people and coordinate group activity, e.g. hunters deciding where they should hunt and making arguments about where the prey might be. In that setting, rationality works perfectly well because humans are quite good at detecting bad reasoning when they see it in others.

Because of the assumptions of psychological individualism, rationality is misunderstood as a type of cognition that guides an individual's actions. To a certain extent, this is a valid approach because incentives within organizations encourage people to act this way. We reward individual accomplishments more than collaboration.

But many cognitive biases disappear when you aren't working under the assumptions of psychological individualism. For example, in the artificial limitations of a lab, you can show that people are unduly influenced by irrelevant factors when making purchase decisions. But in reality, when a salesperson is influencing someone to spend too much on a car, people say things like "Let me talk it over with my wife."

We instinctively seek out an environment of social communication and collaboration where rationality can operate. Much of the advice about how to be individually rational comes down to simulating those conditions within your own mind, like scrutinizing your own thinking as if it was an argument being made by another person. That can work, but the vast majority of people adopt a more straightforward approach, which is to simply use rationality as it was designed to be used.

Rationality is hard, but only for a small number of "smart people" who live in an individualistic culture prevents them from using it in the optimal way.
From a legitimate reverse engineering/security auditing standpoint, cert pinning is generally very trivial to bypass.

see: Frida, xposed framework (not sure if still relevant)
They don't lock you in. The point of an entry-access system is to gate entry, not exit.

To get in, you need to register a credit card. The store observes what you take, and charges that credit card for those items when you leave. If you're inside, you've necessarily given them everything they need to charge you asynchronously for everything you take while you're there. You can leave at any time.

The point of entry-access is to prevent people who don't have a registered active credit card from coming into the store, and so walking away with things that the store cannot then charge to anyone's account.
I just can't make time for games that don't look good anymore. They don't have to be cutting edge, but they can't be plain, without lighting or an interesting color palette.
Thats not what they bloody sell it as, though. Thats the key.
It's right next to China and Iran. So it represented a geopolitical pincer attack on Iran to get to their oil. Which, you know, mattered about twenty years ago.

Afghanistan has a ton of natural resources that the West wanted to exploit.

And of course, China was right next door, so yet another geopolitical game of ta thorn in their side.
C itself is not particularly complex, especially compared to other languages, like C++. It does have a ton of footguns and nasty UB things though.

But writing good, safe code in C can be very complex. That doesn't make the language itself is complex.
Show me? (Genuinly curious; I'm not claiming to be an expert in this field.)
If you stop paying, they want to make a report to the credit agencies.
I am writing a book covering a lot of this ground (shout out to Roald Coase) - but I have a different (ish) conclusion.

It's not going to be a few "software-friendly" companies like FAANG that eventually lead the charge and we see productivity - it's waaay longer term than that.

My take is software is a form of literacy - and it will only be when managers code daily that we will see enough of the control layers (model, monitor mentor) being actually software that software will show up in productivity stats

If you like an analogy - steam engines used to power factories but there was one central engine and you spread out the power to other areas via bands / chains. Electricity came along but mostly replaced the central engine - it was not till people experimented with having power sent to many engines did the modern (Fordist) factory layout become feasible

In short - everyone needs to learn to code

or - if an SRE is what you get when you ask a coder to design a software development process, a programmable company is what you get when you ask a coder to design a company
Rally (YC S20) Is Hiring a Product Designer Who Can Code
Hackers use message mirroring apps to see your SMS texts – bypass 2FA security
Folks haven’t learned that this data is a liability and not an asset.
Have any companies had significant fines levied? Certainly nothing large enough to change behavior.

The OPM leak remains the most significant overall of which I'm aware. The Experian leak tops my commercial data leak list, although they get bonus points for then selling people their own data protection service(s).
That makes sense! It also takes several minutes just to get someone's attention at the makeup counter or to find a sales person to sell me a bath towel.
Thousands of Google workers agree to pay cuts so they can work remotely
Yeah he is one good example. I also saw a few not that rich but still rich examples back when my friends worked as a tax accountant.
I'm a travel photographer and I've had the pleasure of visiting South Georgia.

It is one of my favorite places on Earth.

https://travelphotos.everything-everywhere.com/Atlantic/Sout...
I once talked to a guy who bragged about having Autopilot drive him home when he's drunk
To be fair, Lenovo is now pushing out firmware updates via fwupd, employs at least one engineer to work on Linux support for ThinkPads (Mark Pearson, does he have a team?) and apparently also asks their component suppliers for Linux compatibility now. They might not do all or even most of the work, but even the requirement to certify your devices with Ubuntu and Red Hat stickers is a positive change compared to the early days or vendors like ASUS who just ignore Linux entirely.
Thinking Outside the Man Box
> Do they get paid for taking care of bees on their land?

In the U.K. at least, they do. The government pays you to leave some part of your field unused and untouched. It’s called ‘wilding’ and it’s well paid enough that the subsidy sometimes is worth more than any reasonable crop that would grow on that patch of land.

Jeremy Clarkson’s Farm (of Top Gear fame) had a segment on this. My take is that farming is a very subsidy-heavy business.
Parsers involve a lot of string processing, which is really inconvenient and easy to get wrong in C.
These articles that frame a story as “while you were watching tv as a kid, this genius 9 year-old was starting a hedge fund” are the worst. Sometimes, yes, they really are remarkable young people but often it’s just a case of wealthy parents trying to make headlines for their kids. Let’s not upvote this please.
Connect Any MySQL Client to PlanetScale Using Connection Strings
Why do they need to keep them?
"Okay so TikTok is grabbing the contents of my clipboard every 1-3 keystrokes. iOS 14 is snitching on it with the new paste notification pic.twitter.com/OSXP43t5SZ "

— Jeremy Burge (@jeremyburge) June 24, 2020

TikTok wasn’t checking it for link opening …
I misunderstood the point of this comment before, thinking you were arguing that MIDI fails because it is not, itself, a clear human-legible format like text-notation languages being discussed are.

I understand now that you likely meant that MIDI does not capture the score itself, so it does not work as a notation file format, whereas these text-notation languages do describe the score.
What is wrong with scenegraphs? And what is the graphics programming using instead?
History of Anti-Vaccination (2018)
The claim that Hussein had any relation to 9/11 is inauthentic, even Bush himself eventually admitted such. He still used Hussein's nonexistent connection to put Iraq in the "Axis of Evil" though.
I think they may be referring to the iOS app and web app which are closed source.
I attended a large state school in the early 2010’s and I witnessed a lot of the things described in the article. Many affluent out-of-state students had dorm rooms lushly decorated with disposable tchotchkes. Most of this is completely between the students and parent, however, there definitely was some sort of commercialization involving university administrators.

At the beginning of every school year, the university distributed marketing material literature for services such as:

- On campus “pop-up shops” for dorm decorations

- Overpriced minifridge rentals

- Overpriced and low quality linens/sheets/towels

- Organized shopping trips to department stores (students were bussed from campus to the store and the store was closed to the public)

The advertisements were often construed as official university services, but were actually just lead generators for 3rd party businesses.

Obviously, the university was getting some sort of kickback for all of this.
> PGP is not meant to be run on the server, and therefore cannot make decisions about accepting or rejecting email.

Why not? To check a signature you're using a public key of the other party, so nothing prevents you from adding a milter that would check incoming mail against a list of public keys you trust, without compromising/sharing any secret key material with the server. (As long as you trust your server.)

Anyway, point of PGP is that you can do the checks end to end between MUAs, not just between MTAs. Relying on DNS to distribute key material is not that great anyway, so PGP with keys shared via a better channel, is more secure. (Less convenient too, perhaps, depending on your MUA.)
> If you zeroed out all of the investors this type of mass compromise would immediately cease.

It absolutely would not. Yes we would see greater investment in cyber security and it would pay dividends, but the idea that we can totally eliminate data breaches if we just try really super hard is unrealistic.
I've been using google voice for 7+ years and I get a TON of those vehicle warranty calls. At least one almost every day.
How to Embrace Uncomfortable Behaviors to Boost Your Value
You have customers that use consumer data and they don't have to pay for it? Where can I get this free data?
I don't think being frugal is a bad thing in of itself. One could almost approach it as a game, but one with tangible rewards.

The issue is the opportunity cost. Because there's a limit to how many pennies you can pinch per month, you will start hitting diminishing returns on time invested trying to reduce spend.

There is however no upper bound to how much you can earn, so time spent figuring out ways to increase earnings typically don't hit diminishing returns. In fact, it usually give exponential gains.
Incidentally, the OpenBSD website, while visually little‐changed since the 1990s, is 100% valid HTML5. Decent quality HTML too, with proper use of tags and good separation of presentation into external CSS.
A lot of people have a weird emotional fixation with "owning" a home when it really shouldn't matter at all.

You're in finance, so you should understand opportunity cost and you should very easily be able to model out the full financial burden and projected ROI of home ownership. Once you get honest about the work, hidden costs, loss of flexibility, and opportunity cost involved in being a homeowner, it'll start to seem like a not great and potentially even stupid idea, particularly in this environment with rapidly inflating housing prices.
A friend of a friend served in the Soviet Army in Afghanistan. It left him deeply traumatized, and he would not talk about his experiences. Likewise a former boss who was with the airborne in Vietnam. He too would not talk about his experiences. But that lucky duck Dick Cheney, he had "other priorities".
What a nice surprise. I haven't heard about HVSC in ages. I can't remember when I first heard about it. Perhaps circa 1998-2000 while in college. There was a radio station (KDVS) where one of the DJs would spend his weekly slot playing SID music.

Anyway, nice to see its still around.
Since it's a header-only library, with a lot of templates, only the used code will be compiled.

So yes, this is tiny. Tinier than Unity, CryEngine, Unreal Engine, or other huge frameworks of that kind.
Reminded me of this piece, which is important:

http://coding2learn.org/blog/2013/07/29/kids-cant-use-comput...

Sorry, took me a few days to find the right keywords to unearth it.
We are going though iterations of societies/empires/cultures. Each round has the same issues but we get to learn from- and bring solutions from the previous one. The collective is much stronger than influential individuals but there has to be a collective will to change the game. It seems to me that we are more humanitarian than many previous cycles but I'm afraid we wont show much of an interest in [epic] game design until things get truly terrible. (Cheran pops to mind: That Mexican town of 16k that got rid of police, politicians and mobsters)

This time we did get game design down to an art with fine mechanics and cheap execution. Perhaps someone with a sharp pen can draw the parallels for us. Surely (if the will is there) it is easy to design something better than the stupid formula where we pretend Personal gain = Collective gain.
Have you tried applying this for 4 years yet? Are you now 177 times better than when you started?
Could this be a cognitive advantage of getting older?
"How's this?"

Unoptimised, it's already roughly 3x faster than the spitbol script.

Moving the "int" specifier out of the for loop allows this to compile under -std=C89. How does one suppress the warning about the non-int return value for main().
Oh my, thanks, that makes sense. But damn, that almost sounds like a problem solvable with a regular expression :/ Well, at least before you released the game and nobody will protest about save game compatibility yet.
And the Capital One flow was utter crap the last time I had to program against it. A past company I was in used a Plaid competitor that suddenly had to implement Capital One flow, which was utter shit, including their (Capital One) Sandbox environments that basically didn't work.

Banks are so held in last century technology...
Google Fi and Google Voice are not the same thing - Fi has no such built-in protection.
Got it in France too all the time. Never in Switzerland or the Netherlands though.
Hate to sound like a broken record here, but can opus modus handle its own sound synthesis or is it purely compositional?

Not that theres anything wrong with that, but if $400 is the price for ending my suffering, I'll pay out in a heartbeat ;)
I get numbers from EU as well -- and I get some at ~3AM PST as well...
I've re-downloaded the Curb app and started hailing yellow cabs again.

I think it's a combo of the heat and the tourists coming back; I took a Lyft at 8AM a few days ago from uptown to downtown for $18 + tip, and an hour later the same route back up was priced at $45. I hailed a cab and got back for $22.

They still play music if you ask when you're getting in :) "hey what were you listening to"
That all definitely fit the headline of the article but also seems to be much better reporting than the article itself presents. :|

In the early 2000s the only ones of those we got at my state school were: kiosks for posters in common space on campus + minifridge rentals + rug sale kiosks. Definitely a LOT more spartan.
I have a car that does those things as well, and I use it a lot... but it's not Tesla, and its manufacturer doesn't refer to it "autopilot" or "self driving", but rather "advanced cruise control".
Found a transcript here for those who prefer to read

https://review.firstround.com/podcast/episode-32
Can't stand 'actionable'. Grew up with it meaning "grounds for a legal action or lawsuit" (I guess I knew to many lawyers) and its still jarring to end meetings with actionable next steps.
What about Subaru eyesight? I thought it did..
Multiple hits? Maybe in a dynamically typed language, but in a statically typed language a good IDE will know exactly what definition to go to 99% of the time. I mostly only have to pause and look at options when using the feature on an interface with more than one implementation.
This doesn't make any sense. Capital punishment has existed since forever - yet the fact that they are still carried out means that they are not stopping all of the crimes punishable by death.
Is it possible that one day the market for SSNs and other private data will become so saturated that exfiltrating such data becomes unprofitable?

The revenue isn't 6 BTC. It's 6 BTC * however many people are willing to buy at that price. More suppliers would surely drive the price down, but at this point there are probably tens of thousands of people who'd buy if the data was cheaper, so it'll remain profitable for a long time.
I think they meant the other parts of the Anki ecosystem that are not FOSS, AnkiWeb and the iOS app.
Hmmmm could have saved yourself a cool $58 million if what you're saying is true.
Ask HN: Any HN users with ties to Afghanistan or adjacent regions?
I've just seen videos of wave after wave of people fleeing Kabul in any way they can. It prompted me to start this thread. Does anyone want to share their stories? How is your life being affected right now?
You "literally have evidence" that what doesn't happen in humans, ADE in general? Seems pretty easy to disprove; there's a lot of research based on the phenomenon, eg:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7211844/

If you're talking about ADE with COVID specifically, I agree there's no evidence, but there's the obvious principle that absence of evidence doesn't equate to "evidence this doesn't happen", which, if you have it, please link?

Side-note: definitely helps your argument to throw around the term "anti-vaxxers", though. You could probably just remove all the other words in your comment and keep just that, to the same dog-whistling effect?
Great free tools for improving your writing
Afghan abandonment a lesson for Taiwan’s DPP
I would really love to have someone summarize how we "oversaw" Japan and Germany as opposed to Afghanistan. I wonder if we built more or less schools (or any at all) and invested in different ways in the past or now.

I always lament the trillions spent on war machines and (bad assumption?) very little spent on improving society through education.

People in the US lament the high cost of education here, but I really wonder what would have happened if we had just taken all that money and handed it to the Afghan government with an expectation it needed to be spent on infrastructure or education instead of our military bases. Am I totally wrong to think that's how it went down?
Dark Web Tool That Checked for Dirty Bitcoin Shuts Down
One of my favorites: "We'll burn that bridge when we get to it."

Used when someone is trying to over-anticipate potential problems down the road.
That seems very, very similar, but slightly different in my mind (and is also a great one to add to my vocabulary)

In the Queen's Duck, the extra work gets done in a way that's easy to undo, so management can add their value by telling you to remove it. The artist gets more control of the queen animation instead of tweaking the color, shape, etc. because management wants something to do.

In Helicopter, the additional work is just a proof of concept, to ease negotiations. It's not about having control and making work easier down the line, it's about picking a moonshot, and maybe having fun with it, but at least getting the contract under the terms you want because they're probably going to cut the helicopter, which leaves you with the contract you would have agreed to in the first place.
It's a real shame that spending your youth fixated on money and a nebulous future retirement doesn't have a price tag attached to it.

You can calculate the opportunity cost of a dollar spent vs a dollar invested, but you cannot so easily calculate the cost of squandering a chance to have a memorable experience while you're still young and unencumbered.

Balance.
No, you can't see the signatures, so they don't help you locate fraudulent transactions. What they do is provide a defense for the merchant against you. If you try to say you didn't authorize the charge, then the merchant can produce the signature as proof that you did. The signature is never evidence that you weren't there. Even if it is someone else's name, that doesn't prove anything, so it never benefits you.
> We should all know that given a belief about the world, and evidence, Bayes' Theorem describes how to update our beliefs.

Should we? What of the problem of induction?
That was just because they didn't read it.
Use your knowledge of ML/statistics and your quant finance skills to play the market with high risk options. If you do well enough you can make enough to quit your job. Of course once you have enough money don't bet it all on options.

Obviously this is like gambling but with your background and many financial advisors may recommend against it but with your background it might be worth a shot.
China aims to use space-based solar energy station to harvest sun’s rays
Trackers are a very different beast, however for my sake I've found them a good intermediary whilst your looking for the live coding language that suits you.

I use Renoise (not free, but very cheap imo and very powerful), and have a sample pack called AWKW (I think, its something like that) which is just a load of single cycle waveforms, and I use that to build rudimentary subtractive synths.
I'm a bit surprised to see the site has a Let's Encrypt certificate, but it redirects from HTTPS to HTTP;

https://www.slackware.com/ redirects to http://www.slackware.com/
the point isn't to ignore it but to make sure everyone using it is 100% aware they need to be paying attention as this is a edge case that is common that the system cant handle so drivers are still responsible to take over
For global companies, can we specify the countries affected? I don't see any details on this anywhere.
Maybe carriers will finally start taking identity verification seriously. When everyone's name, address and SSN (or equivalent) is leaked, somebody might finally get the idea that they're rubbish secrets.

My name and address is actually public as a self-employed Czech. My date of birth shouldn't be hard to find and plenty of people even publish it (why shouldn't they?), my mother's maiden name might be somewhere too, and I don't even have her as a friend on any social media platform.

I really think it's time to start accepting no less than a unique password, hardware identification key or a physical visit to a location with a forgery-resistant ID card.
Everything Everywhere Daily did a podcast on the subject.

https://podfollow.com/everythingeverywhere/episode/415af5271...
If any compromise wipes out a company automatically, you suddenly increase the incentive to hack a company by a huge amount. That doesn't seem like a good way to increase security.
If there's a large enough market, why doesn't someone buy it and then undercut the original seller by selling it for 3 BTC? Or 1? (Or maybe they do?)
I would guess that the main point has to be hardware accelerated features, such as ray-tracing. I agree though that it seems pointless to buy a budget GPU when it’s basically a scaled up iGPU. Perhaps it makes sense if you want a mid-range CPU without a iGPU and you can’t operate it headlessly, or if you have an old PC that needs a mild refresh.
NIH scientists develop faster Covid test