skysight-inc/HackerNews huggingface dataset:
Where "this" is using soft language like "by default" to hide shortcomings. I expect Protonmail to do more to educate users to be aware of how surveillance happens, whether a rogue employee enables the function on their end, warrant, etc.
Cryptographers and developers need to step up their game...

There needs to be a messaging service where as well as the messages being encrypted, the graph of who is talking to who and when must be encrypted.

I'm imagining a system where your device forwards hundreds of messages for other people, hiding your own message flow.

I perhaps send a few hundred messages per day, and even multiplying that by 1000, and the typical message length of a few words, it's still a tiny amount of data transfer.
I figured it would be Vasily Archipov. Very worth reading about.
Postgres has LISTEN and NOTIFY. People build DIY pub-sub with this.
With a good charger (not the ones included in sets of batteries) you can also refresh them through programmed charge discharge cycles if you have batteries that aren't in great shape anymore.
The canary is dead, and the fact is widely publicised, if not necessarily well known.
From Chris Sacca's reply

https://twitter.com/sacca/status/1433947735640715271

Third, Google was often a place that ascribed little value to people who didn’t have the right degrees and right coding pedigree. For years, the company ignored
@ev
and the Blogger team. Hell, they still checked all of our SAT scores back then.
AFAIK the first automaton capable of writing was built sometime around 1770. It still works.

https://www.youtube.com/watch?v=laJX0txJc6M
It has not really changed meaning. Asshole companies blatantly lying and using dark patterns only means one thing: that the company is a piece of trash and does not respect their customers.
ON DELETE CASCADE has been in SQL since approximately forever.
Those canary things seem so 2018.

In 2021 the most powerful canary statement should be "Don't trust us. Seriously, treat us as an adversary. We still want you to be our customer of course, but here's how we really recommend you use our service, Tor, semi-anonymous payments, etc. In God we trust, for everyone else use math."
They don't happen to community projects like Node.js, Rust, Vue, or Debian.

Perhaps this is apples and oranges, but I'm most interested in open source projects that are governed by a foundation.
I suspect this is a rhetorical questions. The answer is that yes, there are a significant number of resources available for single mothers[1].

However, the latest changes don't add any additional help, and TX is not particularly known for generosity from the government.

[1](http://singlemothersgrants.org/single-mothers-assistance-in-...)
I don't see anything wrong with that.

The beauty of open source is you can run your project however you want: bazzar, cathedral, or something else. If people think its a bad choice, they can fork.
I will save everybody the time to read it!
See result below:

Days to negative in the three trial arms:
Ivermictine: avg= 6.0 95% CI= (4.61–7.38)
Control: avg= 9.15 95% CI= (5.68–12.62)

there was only 20 patient in the control group this would give a margin of error of 21.91% for that 95% confidence interval.

Most statisticians agree that the minimum sample size to get any kind of meaningful result in this case would be ~385
Only... it isn't like this at all.

Bob messed up his math some time ago and now can't get a bank account: Alternatively, most banks in his area charge fees to poor people - enough that it pays to have a prepaid card because the fees are lower than a bank. Heck, it might even be through the employer because more and more employers have stopped offering paper checks.

Bob probably pays someplace like H&R block for his taxes. It is really, really difficult to miss that it is tax return time if you are poor, so most folks will file if they think they are getting some back. People finally get their cars fixed and are able to go to the doctor or finally buy some shoes.

Or Bob might not. If Bob and Alice do not have children, they won't get much back in taxes, assuming they make minimum wage and work 35-ish hours a week. They might even owe if they are married - assuming that two full time jobs will still put the couple in a higher tax bracket. (Unless, of course, they have fixed this in the last decade, but I doubt it). If Bob avoids filing, it is probably because either he owes or doesn't think he'll get enough back to pay the folks to do it.

Alice might make similar choices due to fees and things. Or she might find herself in a similar situation simply because she got sick and lost pay or lost a job - especially if she wasn't taught how to deal with being poor. It doesn't always matter if something is better long-term if you are struggling month to month, and you don't always get a say in how vicious your cycle is.
How did their policies change before and after said settlement?

From https://my.plaid.com/help/360043065354-does-plaid-have-acces... :

> Does Plaid have access to my credentials?

> The type of connection Plaid has to your financial institution determines whether or not we have access to the login credentials for your financial account: your username and password.

> In many cases, when you link a financial institution to an app via Plaid, you provide your login credentials to us and we securely store them. We use those credentials to access and obtain information from your financial institution in order to provide that information, at your direction, to the apps and services you want to use. For more information on how we use your data, please refer to our End User Privacy Policy.

> In other cases, after you request that we link your financial institution to an app or service you want to use, you will be prompted to provide your login credentials directly to your financial institution––not to Plaid––and, upon successful authentication, your financial institution will then return your data to Plaid. In these cases, Plaid does not access or store your account credentials. Instead, your financial institution provides Plaid with a type of security identifier, which permits Plaid to securely reconnect to your financial institution at regularly scheduled intervals to keep your apps and services up-to-date.

> Regardless of which type of connection is made, we do not share your credentials with the apps or services you’ve linked to your financial institution via Plaid. You can read more about how Plaid handles data here.

What do you think this should say instead?

Do you think they use the same key to securely store all accounts, like ACH? Or no key, like the bank ledger that you're downloading a window of as CSV through hopefully a read-only SQL account, hopefully with data encrypted at rest and in motion.

When you download a CSV or a OFX to a local file, is the data then still encrypted at rest?

Again, US Banks can eliminate the need for {Plaid, Mint, } as the account data access middlemen by providing a read-only OAuth API. Because banks do not have a way to allow users to grant read-only access to their account ledgers, the only solution is to securely store the u/p/sqa. If you write a script to fetch your data and call it from cron, how can you decrypt the account credentials after an unattended reboot? When must a human enter key material to decrypt the stored u/p/sqa?

Here, we realize that banks should really have people that do infosec - that comprehend symmetric and assymetric cryptography - audits to point out these sorts of vulnerabilities and risks. And if they had kept current with the times, we would have a very different banking and finance information system architecture with fewer single points of failure.
I assume they meant a portfolio of planets?
I'm missing something as easy to deploy as SQLite, but without its performance problems (like the stop-the-world write lock). Basically, I'd love an embeddable Postgres with a single-file storage.
I suspect that you can order to collect it going forward.
Note that the opposite calculation applies if you have (enough) money.

One day, some years ago, I wrote a Facebook post something like. "That's interesting. The sound of water which woke me was in fact water pouring from the flat above into the bathroom. Those of you who've always said I should have insurance now get the last laugh".

It turns out that the damage was relatively minor except to walls, ceilings and carpets which were - at the time - insured by the building owner, so, I think I spent less than a grand on some re-decorating and it would have been even less if the upstairs neighbour (who needed emergency plumbing etc.) had actually done her paperwork since that's one incident and one insurance claim excess.

But the reason I was so calm about it was that I've done the arithmetic years earlier, if my stuff is destroyed I have to buy new stuff, using money, which I have, whereas if I carry insurance I have to pay the premiums every year, also using money, which includes a healthy profit for the insurer.

Now, many people have no choice because in reality a bank owns their home, they pay a mortgage and the bank wants no chance of you walking away from that so it insists you also buy insurance. But I don't have a mortgage, I paid cash, and so I don't need to carry insurance.

This a really edge case example of the widely true but counter-intuitive observation that being poor is expensive. It isn't at all surprising that the FT would rather blame the poor for their circumstances than help them. Very on brand.
When an Agency with the purpose of ensuring the Security of the Nation does the exact opposite... makes you wonder why they even exist.
Pretty sure if your case of Covid is severe enough to warrant treatment, you will not be calling around looking for a second opinion just because your doc prescribed an Rx that might be “internet controversial”.

Frankly I trust my doctor more than I trust FB, YouTube, and the government.
Paper: https://arxiv.org/abs/2108.08252
> and instead of doing the responsible thing - legislating against these deliberate anti-consumer practices

Sure. We'll write a 3.504 pages terms and conditions, so that the consumer never bother to read it even if he is able to understand what it means.
I find vegan protein powders to taste better than whey which is kind of gross to me. (I’m not a vegan). They usually have a blend of 5 or so protein sources to balance out the amino acids.

If you need more calories then fat is by far the easiest.
In Folsom there is a guy named mark who has a full custom bike shop - mostly artisan style super roadsters (think LA Chopper style low rider bikes) -- the guy who makes them is a guy named Mark.

He charges typically around $16,000 for his creations. They are AMAZING looking bikes - but not my style at all.

The one I mentioned that was at Mikes Bikes in Folsom, was $15K - I cant recall the brand of that one, but it was a massive full suspension plus electric.

The Specialized there that was ~$12K was also full suspension electric..

The other high end store which is in downtown RoseVille...

Both places with lots of money... rich weekend warriors.
The entire foxnews channel is bitching about lazy people.
"Design by committee" - https://en.wikipedia.org/wiki/Design_by_committee

I disagree it's a pejorative term as Wikipedia puts it though. Design by committee is in many cases necessary or even wanted (standard bodies).
Cockroachdb: automatic multiple primaries + sharding.
I'm not completely sold on the hype of financial literacy.

Main reason being this: Most schools teach basic nutrition, i.e that eating less/more food than you need, can/will result in losing/gaining weight. In this day and age, it is common knowledge that eating junk and being sedentary will cause obesity. And even if there are groups of people that don't know this, obesity has hit all socioeconomic classes - not only poor people.

Likewise, I don't think that if we suddenly teach everyone financial literacy, we're suddenly going to poverty plummeting. I don't think poor people are poor because they don't know how to pay their bills on time, invest in index funds, or that having a maxed out 35% credit card will make your debt outgrow a 8% savings fund.

I think poor people are poor because they're trapped in low-wage jobs, and are often forced to use more expensive services, as well as being victims to centralization and ever-growing rents.

edit: With that said, I think basic financial knowledge should be school curriculum - but I don't think it's going to be the magic bullet.
I don't know what came of it, but they've been told by the German constitutional court that their approach ("we're using NAT, we don't know the IP on the actual server") doesn't fly and does not protect them from complying with a court order.
"adopted Google's [...] CDN"

Google's CDN was largely written for YouTube.
Do we still like Runbox? Based in Norway. They claim to be the most secure email provider due to Norwegian laws:

https://runbox.com/why-runbox/privacy-protection/email-priva...
> I am lowering pay to a lineworker by no longer being a customer

As an individual customer, not likely since line workers' pay does not directly depend on the number of customers served (at least until it's so low that the business goes under and they have to move to unemployment benefits instead). Tips depend on each customer though, so if you chose Starbucks over Cafe Nero, and Starbucks barristas don't get tips, but Cafe Nero's ones customarily do, then yes, your choice had influence on the income of Cafe Nero's barrista. Probably a small one, but it's there. If neither barrista gets tips (I've never seen anybody to tip a Starbucks barrista but in smaller shops it happens sometimes, though much less frequent than with waiters) then there's not much difference from a single individual action.
Tor helps, but is not especially robust against state-level actors / APTs. An actor running a sufficient number of entry/exit nodes could perform at least some traffic analysis.

Tor is an improvement. It's still a limited tool.
We also have never seen evidence for elementary particles outside of humongous particle accelerators, so the former must clearly be a mere artifact of the latter. Physicists are no strangers to the "clutches of mysticism" when it comes to issues of foundational ontology!
I don't know. Lock-based concurrency control has problem scaling up concurrent access among readers and writers for read consistency. Of course Oracle with MVCC still beats everybody performance wise.
This seems like the antithesis of worldbuilding.
> if you flew an airplane through that 30 sq km area what happens, or various wildlife like birds fly through that area?

30 square kilometers is 3e7 m^2. 2000 MW is 2e9 W. So you're looking at less than 70 W/m^2.

For comparison, the solar constant [1] is more than 1300 W/m^2.

So, no cooking.

Also, the receivers would be microwave antennas on poles, i.e. they wouldn't monopolize the land they stand on. There is concept art from the 70s showing cows grazing between/under them.

[1] https://en.wikipedia.org/wiki/Solar_constant
The article fails to note reasons why neither apparent existential risk was possible.

We already had moon rocks on Earth, blasted off of the moon by bolide strikes. Likewise Mars rocks, and bits of asteroids and of other planets' moons. Maybe even Venus rocks.

Relatedly, the energy released in certain bolide strikes on Earth far exceeds anything achieved even in Tsar Bomba, itself thousands of times more powerful than Fat Man.

I have not seen any analysis of whether a bolide strike might incidentally produce substantial fusion activity. At the pressure and temperature produced, it is hard to imagine it not occurring.

It seems like there ought to be long-lived products of such fusion detectable in the K-T layer, alongside whatever the bolide carried. Some might be weakly radioactive and thus detectable at very tiny concentration.
Financial literacy means, among other things, understanding that an investment decision can never be justified after the fact based on the observed outcome of that particular investment.
No need to do any of this when you control V8. Chrome DevTools can decide to run code iff there are no side effects (by executing it and bailing on any writes/native functions like alert marked as having side effects). Presumably it costs some overhead to do that and that is why logging elements to the console does not enable the "no side effects" flag.
the FBI can, and has, seized bitcoin. the FBI cannot, and has never been able to, seize cash they cannot find or otherwise touch with their hands.
That so many hidden/secret chips are being placed on mobos that we are suffering a global chip shortage because of it?

Do you really need it explained why that's far fetched? I'm going to let you think on that a bit longer. It should have kicked in by now.
Certain organizations can compel you to start gathering data.
> My simple rule ... it never hurts you to help another human. Sometimes it also benefits you but at a minimum your reputation in your sphere of influence is positive.

This is definitely not true, whether the general form you led with, or in the specific minimum you mention.

Contradictions to this rule are so widespread that we have an aphorism for it. ("No good deed goes unpunished.")
There is no fighting.

When you have 21 bases in your land.
I myself think if any theory beyond that of the Fermi Paradox holds water it’s likely the Aurora Hypothesis which simply states that colonizing space is incredibly dangerous and therefore hard to do at scale beyond your immediate solar system, hence why we haven’t seen anything in ours

I don’t quite buy it but it feels the most plausible of all the alternative explanation for Fermi

Because of phenomenons like Simultaneous Discovery[0] I feel that we are the first of the many civilizations in the Type I to Type II transition

I personally believe we are on the precipice of finally colonizing another planet or planets long term), and therefore given the distinct possibility that life all basically started around the same time (simultaneous discovery) we are just among the first of civilizations ever, I don’t believe currently that other galactic civilizations existed or currently exist that are not at the same pace as us, as I (and I admit I have little evidence here) that simultaneous discovery applies beyond just ideas, but there may be some kind of this phenomenon in natural evolution, and making (albeit big) assumption that is true and evolution follows certain paths like our own, we just happen to be among the first civilizations to be at our level, and in fact other alien life is likely to be similarly or less advanced than us

I’m either very right or very very very wrong, I figure

[0]: https://www.newyorker.com/magazine/2008/05/12/in-the-air#ixz...
Snow lasts longer on the north face, making mountains look much lighter on the northern sides. The eye can be trained to accurately reconstruct terrain regardless of the lighting direction. Shading from the north is more natural, especially when shadows are not cast.
TBH in 2021 people engaging in potentially dangerous activities should be literate enough to understand, that no business will guarantee them full security and decline all requests from authorities to disclose their identity. The wording you suggest is equivalent of „do not dry your cat in microwave“ instruction - a legal protection from dumb customers, that does not contribute meaningfully to safety.

For the non-Swiss customers working with a Swiss provider can be a good enough protection to avoid inconvenience of Tor. After all, even in the mentioned case it required review and approval of 3 agencies before request came to Proton - from French police, from Europol, and then from Swiss authorities. If this is not enough barriers to protect from politically motivated prosecutions and corruption, then we have much bigger problem in Europe.
Get rid of NULLs and ternary logic.
another trend i've noticed around here at least is that many of these legacy restaurants are owned by boomers who are well past retirement age but basically just kept going because it gives them something to do. when the economics shift too rapidly and hurt their ability to break even, they're far more likely to simply close up shop than try to take on risk and hope things work out.
There's a term Vaporware that emerged in the early days of personal computing; a weak memory believes that Esther Dyson coined that term.
Really solid explanation of what you’re paying for as a proton customer - and despite this unfortunate situation for the French advocate is why myself and others will continue their paid ProtonMail plans
Ask HN: Ransomware preparedness how difficult is it?
Right off my knowledge of current enterprise sysadmin stuff it quite out of date.
Looking forward to learning :)

What is RW?
--
My understanding it is a form of malware that encrypts your data
and the only way to unlock it is to pay a ransom.

The newer version attempts to extracts sensitive files prior to encryption,
so there will be a double threat.

Not only is your data encrypted and unavailable, it is also in the hands of
nefarious criminals who could publish the files or do something else
evil with the files.

Mitigation
--

I dont know much about the extraction of files, I will leave that alone.

Firewalls, endpoint protection, active analysis of data streams for unusual activities.
I presume this is done and done correctly.

Would backup save you?
..

I am not sure of current practice, so this may be too old.

A company should have a solid, maintained, well funded and staffed backup
strategy that is tested often to ensure it works.

Then they have a backup system of the backup system off site entirely locked down.

All files on fileservers are backup incrementally every 10 mins (or whatever)
as a continuous cycle.

Fileservers databases, mailservers, another data silos are backup up in the same way.

No end users PCs and extremely few in total have any access to the backup system.

All PCs, servers, etc run premade images (is Ghost still a thing?).

When shit hits the fan
---
a)
Destroy all data from the past 30 mins / 1 hour, restore.

b)
Destroy all data from the past 30 mins / 1 hour.
Reformat all computers, via standard images,
restore backup.

c)
Destroy all data from the past 30 mins / 1 hour.
Keep a set of pristine unused brand new computers in easy to reach storage.
Format using images, restore data from before the files got encrypted,

Unplug and junk existing PCs.

-

It seems to me that if a company has a well working backup strategy and executions then downtime for a ransomware attack can be timeboxed.
If it needs done faster, then invest more into the system to make it happen.

Maybe the reserve computers are already imaged as needed, and those images are
updated at the same time as the production PCs (end user for instance).

Perhaps there are many datastores these days that are hard to backup?

If that is the case, it might be a good reason not to use them?

I am sure I am missing a lot and I look forward to learning more

If the company has a solid, maintained, backup of files and data they can shut everything down, reformat the computers and servers, restore
>or more typically until they hit the first layer of sand, which is stable.

I think this is the first time I have ever seen someone claim that a layer of sand is stable. But hey, NOLA is one of the craziest places, so sure, sand is stable there.