skysight-inc/HackerNews huggingface dataset:
I grew up in a town with chronically terrible water; we used to joke about the many colors of the water in the school water fountains.

So, I grew up drinking anything but water, and that's a habit that's stuck with me for my entire life.
Depends on what huge resources counts as, and where you're located.

Last I checked (which was a while ago), APNIC has enough IPs to give new applicants two /24s with justification which will get you started without spending a lot of time/money in the IP resale market. If you're in ARIN or the RIPE regions I think you need to go to the market (but also need to justify, so you're looking for a single /24 to start). I don't know of it's accurate, but blog posts and auction sites seem to show about $15,000 for a /24, which is kind of a lot, but doable. You'll also need to arrange some hosting somewhere that you can credibly BGP with at least two networks to justify having an AS... There are some providers that will tunnel you to an internet exchange point and services like Vultr that might help you get started without a lot of investment.

And you'll need to learn BGP on the job. But I think you can do a lot with a simple unix box, you may not need a giant cisco router these days.
This is sort of in the middle. NSO Group's exploits are surely expensive, but they are also not pinpointed. The states buying these exploits aren't spending the unlimited resources at their disposal to do the exploitation, it just costs them cash. This is one of the thing that likely promotes proliferation of this stuff, since it is so easy to pick another target.

So I do think there is a level between these two where you can be defended against nation states that will use COTS-equivalent exploits against you even if you won't resist an active attempt by a full team targeting you very specifically.

But doing this is hard as hell in the modern world, because so so so much of our device surfaces is riddled with memory errors.
This doesn't sound like an incredible burden. They are making twenty million accounts a day apparently, if they need to slow down they can.
I'm really surprised that they were only given 6 months to 3 years once they were caught. But maybe the Nazis were trying to appear as reasonable rulers of their "model protectorate".
I had the same question.

Does it refer to eliminating or deprioritizing requirements that are not core to the product? Removing "gold-plating" requirements? Or does it mean converting solutions/implementations disguised as requirements into actual requirements? Something I see a lot of in my role.

I see value in both exercises.
The maintainers aren't really the problems - it's their, long and silly build process + schedule. Updates are _always_ at least three days behind, because their build schedule is set in stone and they refuse to change it.
This is a really good point. Intuit profits off the complex tax laws, but the real beneficiaries are the wealthy. Any proposal to significantly simplify the tax laws are gonna be met with huge resistance from the rich and powerful, primarily because their taxes will certainly increase. Bezos isn't gonna allow his taxes to increase just so the rest of us can have a simplified tax code.
Are there coins that learned from the bungled launch of zcash and did things right according to what was valued by the community? Like private by default, avoiding perceived trust issues by being more above board, making ASIC resistance a priority, adopting a public irreverence of compliance, not being associated with people who worked with untrusted organizations and so on?
> Especially since SARS-CoV-2 mutates faster than the flu virus.

The SARS-cov-2 proofreading mechanism would like to have a word with your horribly inaccurate point
Succinct Dynamic Data Structures (2001) [pdf]
the real MVP. Thanks!
Here's the abstract.

We develop succinct data structures to represent (i) a sequence of values to support partial sum and select queries and update (changing values) and (ii) a dynamic array consisting of a sequence of elements which supports insertion, deletion and access of an element at any given index.

For the partial sums problem on n non-negative integers of k bits each, we support update operations in O(b) time and sum in O(logb n) time, for any parameter b, lgn/ lg lg n ≤ b ≤ nƐ for any fixed positive Ɛ < 1. The space used is kn+o(kn) bits and the time bounds are optimal. When b = lgn/ lg lg n or k = 1 (i.e., when we are dealing with a bit-vector), we can also support the select operation in the same time as the sum operation, but the update time becomes amortised.

For the dynamic array problem, we give two structures both using o(n) bits of extra space where n is the number of elements in the array: one supports lookup in constant worst case time and updates in O(nƐ) worst case time, and the other supports all operations in O(lg n/lg lg n) amortized time. The time bound of both these structures are optimal.
Post restriction there is no such thing as allowing network requests (same origin or cross origin) without opening a side channel which can work around said restriction (e.g. timing). However pre restricted mode there is no reason to restrict anything be it same origin or cross origin.
Because the things that are good for us that are easy to do, we don't have any problem doing, so we don't think of them as "good for you". Instead, we think of them as "stuff I like to do".
One piece of evidence for the above claim: https://www.icij.org/inside-icij/2021/03/u-s-sanctions-ukrai...
This happens often. A shitty opinion is usually down voted but at some point, if nobody's replied yet, then nobody can point out in words how shitty that opinion is, or prompt them for some further explanation.
You have to be pretty obviously flouting tax law to have it become a criminal case.

Apart from that, IRS workers are just like workers at any other job where throughput is a primary metric: They just want to close cases quickly with a resolution. That may mean penalties and interest rate if you screwed up or were actually trying to avoid what you owe. They're not taking you to court and prosecuting for $100k if you're working with them to fix things though. In the end, they don't much care if the settlement takes 10 years to pay off $200/month at a time as long as they can close the case as resolved.

Source: 1) I have a friend who was an IRS lawyer and then a tax attorney. 2) I know someone who went bankrupt and came to long term multi-year agreement to pay $50/month.
I seem to remember building long strings of walls into the enemy bases - they didn't seem to attack them - and then walling off their refineries. The harvesters would just stop.
Honestly I think they just mean "state". Yes, some states have more resources than others, but the ones without a lot of resources generally aren't engaging in cyber attacks, and "state" as a general category is good enough summary.

I think people say "nation state" in part just because it flows better rhythmically, and in part because of that whole "westphalian" thing; and because the word "state" has other confusing meanings (including in CS, state as in 'state machine'; and the 50 USA states).

But really on HN when talking about "threat actors", they mostly just mean "state-level". (See I had to add -level to make it rhythmically like 'nation state' again, the one syllable 'state' is just too short it just plops into your sentence ruining it)

[Hey, why is it called the United Nations instead of the United States anyway? Oops, cause there already is a United States. But the UN is clearly an organization of States not Nations. But the things are conflated and confused generally in European nationalist ideologies of the 18th-20th centuries, that have affected our vocabulary and concepts for these things, it's not just HN. "Nation" is often used as a synonym for "State", so "nation state" ends up just kind of doubling down]

I say "state-level actor".

Almost any contemporary liberal democracy (and not only those) at least formally defines itself as a state of it's citizens, not belonging to any particular "nation" (ie ethnicity basically) in particular. I don't see the point in distinguishing between states that are "nation" states or not in the 21st century, or think that it has a clear distinction.
How's that someone get chosen though? Quality of their work? Level of effort they put in? How much money they have? Outright bribes? Threats of violence?

Where car dealerships are passed down from father to son, for generations, and is locally one of the most powerful organizations, to the point that competition is outright prohibited, it's not a free market, which is one of the cornerstones of capitalism.
There's lots of things that an order of magnitude more folks do that harm the environment than DeFi/cryptocurrency/shitcoin gambling. I'd love to revisit the environmental impacts of cryptocurrency after we've moved to electric cars, decreased car usage, decreased HVAC waste, made our toilets/sinks/showers more efficient, made our factories run on hydrogen instead of coal, and clean up shipping emissions. Once we're even halfway down that list, then I think we're ready to tackle the environmental question of cryptocurrency.
Not just human—like themselves. Not all humans are quite as much like one another as they tend to assume either!
Range of powers, including directions to remove or block content, proposed
Honestly -- I work in a regulated environment. We'd fail audits without 2 :eyes: on every PR
> The article draws up comparison to defining "wealthy" as "People get rich because they take in more money than they spend." But that's actually a perfectly fine definition of wealthy which explains what it is.

In that analogy, I believe, the article's point is that a definition has been masquerading as an explanation.
What's your problem with Colly? [0]

[0] http://go-colly.org/
Don't let the article put you off, the paper, no paywall, is much better and much more concrete:

https://academic.oup.com/ajcn/advance-article/doi/10.1093/aj...
https://y.cash/what-is-ycash
You know what else is similarly opaque, hard to trace, anonymous and still legal tender? Cash.
The problem with random people taking it is that's not "more data". They're not in a study, and they're likely to not try other treatment.
What books won't teach you about customers
Not just the modern world. Any connected civilization which needs to contend with factions, differing interests, foes, allies, and "intersectionality". If you lived in an isolated island a half dozen centuries ago or more, then it would be simpler till a voyager tribe, society or civilization landed.
> so I can't see how its exploitation.

Erlich Bachman?
That might work if you can figure out a way to fund private schools proportionally to the quality of the education they provide, but I'm skeptical there's any straightforward way to do that. Also, the portion of money that goes to shareholders is money that isn't spent on education.

Governments can be inefficient, but part of the reason for the inefficiency is that they have to provide the same service to everyone and that's hard. They can't cherry-pick their customers.

There may be new educational funding models we should be looking at. Maybe a lot of educational YouTube videos should be directly funded by government grants, and ad-free video hosting provided by government infrastructure if they want it.
A Startup with a Wild Mission: Bring Back the Woolly Mammoth
I'm overjoyed by this. There are a boatload of Teslas in New Mexico (including mine) and all of us had to buy them in Phoenix, Denver, or El Paso and that's where we have to go for service. Or had to until now.

This is an ingenious solution to bypass a stupid law. The car dealers in NM who want to keep Tesla out can pound sand.
Basically, you’re either dealing with Mossad or not-Mossad. If your adversary is not-Mossad, then you’ll probably be fine if you pick a good password and don’t respond to emails from ChEaPestPAiNPi11s@ virus-basket.biz.ru. If your adversary is the Mossad, YOU’RE GONNA DIE AND THERE’S NOTHING THAT YOU CAN DO ABOUT IT. The Mossad is not intimidated by the fact that you employ https://. If the Mossad wants your data, they’re going to use a drone to replace your cellphone with a piece of uranium that’s shaped like a cellphone, and when you die of tumors filled with tumors, they’re going to hold a press conference and say “It wasn’t us” as they wear t-shirts that say “IT WAS DEFINITELY US,” and then they’re going to buy all of your stuff
at your estate sale so that they can directly look at the photos of your vacation instead of reading your insipid emails about them. In summary, https:// and two dollars will get you a bus ticket to nowhere. Also, SANTA CLAUS ISN’T REAL. When it rains, it pours.

[PDF] https://www.usenix.org/system/files/1401_08-12_mickens.pdf
Why do people keep writing file format parsers in unsafe languages?
Facebook denies having '2 systems of justice' for users after WSJ report
Right, but if the goal is to make alcohol expensive and unavailable the ideal lever to pull would be a vice tax. Instead of that money going to random unaccountable middleman, it goes to the people - who are already shouldering much of the social cost of alcohol (healthcare, policing, etc). I'm not sure i support vice-taxes, but they're clearly better than just giving it to whichever random rich person or industry insider that manages to insert themselves.
Actually, I don’t think there are any drugs developed to fight COVID. Yeah, there are monoclonal antibodies developed from the initial cohort of symptomatic patients, and various anti inflammatories that have been effective in reducing the intensity of a cytokine storm. There are small molecule efforts, but these things take time. There is a delta specific vaccine in initial clinical trials but it’s bloody hard to get a placebo group together anymore.

The vaccines (of which there are both traditional and novel delivery mechanisms and payloads) represent the best way of reducing the impact of the infection. There is only a short window in most people in which there is an active COVID infection. The problem starts with the aftermath - those with a strong, active immune system zap their lungs or other organ systems. Hence the anti inflammatories.

Viruses aren’t fully alive and they lack many/most of the biological features typical drugs affect. Thus, unless there’s a fortunate side effect, the risk to the human > risk to the virus.
We do this at my company - I think maybe we do better …
Im on both. Mastodon has a busy busy community making the future of RSS and podcast feeds that I'm a big fan of, super welcoming people. Golang matrix has saved my bacon too many times to count, also great folks there.

The best part about these, is that though we step off topic sometimes, generally everyone is really helpful and focused on the general subject matter. It's not endless gossip, in jokes and memes, these people actively find new faces, and then find places for them to fit in the community and things to take ownership of.

These smaller networks are a rare type of community, and I love it.
Firefox users avoiding those tracking sites would result in an always low user share, it would not really explain the user share dropping. Maybe an increase in privacy minded users could explain a percent or two, but not most of the drop.
Show HN: Convert your full stack apps to cross-platform desktop binaries
You weather guys on here might also want to talk to the oikolab dude who posted on HN 9 months ago - I was thinking of incorporating weather data into my trading models so he graciously granted an API key but haven't had time much to use it viably as you kind of have to know what you're doing/how you intend to map trading outcomes and causal first-order effects on the climate grid to actual events that can be traded on. Didn't put it to much use amidst a bunch of competing priorities but the API seems extremely high resolution.

site: oikolab.com

HN user: a_square_peg
The slimemold authors argued effectively against carbs being _the_ answer for the obesity epidemic. Scroll down to 2.2.2: https://slimemoldtimemold.com/2021/07/11/a-chemical-hunger-p...
Russia is 81% ethnic Russian, per Wikipedia. I think that's close enough to qualify for "nation and state are congruent".

Sure, it might make more sense to define this as "state-level agency", but that would confuse things for Americans. My internet security threat model ignores the state agencies of Montana just as much as yours ignores those of San Marino.
There are some Zcash forks with iffy dev support and no market traction. The problem is the kind of cryptography you need to do something like Zcash is very very very hard to get right. Zcash actually got the tech right and handled the issues they hit well. They just didn't do a good job with reputation outside of tech.

No one else as done the same tech yet themselves. A few things have launched and allegedly plan to add a privacy layer (Mina, Celo). But actually building that kind of tech is a lot harder than reputation management or standard blockchains.

It's still an open playing field.
The individual sub-teams have been using RFCs as the way to push through major changes for years and years and years. Pretty much since the sub-teams were born, around when Rust 1.0 was released in 2015. Nothing has changed there. I know because I was there in the beginning and I'm still here.

What has changed since the beginning is that there are more working groups these days. For example, there are working groups specializing in SIMD and error handling, among many others (they just happen to be the ones I follow in particular). The working groups generally work toward writing an RFC for the broader community to give feedback on. But working groups themselves are open to anyone, and they aren't difficult to join. (And you don't even need to "join" to participate. You just have to show up and start giving feedback.) The key point here is that the RFC process is still used, same as it always has been.

To be clear, working groups and the Rust teams choose their own membership. Neither Amazon nor the Rust Foundation have any say.
A shame there's apparently no update coming out for Mojave.
Physical cash requires some level of risk for the kidnapper to get it though, because they physically have to get it in their possession
Too bad they closed a bit too late.
The proposed tax plan now has QSBS benefits limited to 50% of gain (vs 75% or all) if AGI is > $400k.
Those founders will be happy, but not as happy as would have been a day or two ago.

https://www.brownadvisory.com/us/theadvisory/qsbs-tax-exempt...

https://news.bloombergtax.com/daily-tax-report/bidens-propos...
It's not off-target. Copyright terms have nothing to do with the author. If we wanted to maximize author benefit, we'd just make it infinite.

Copyright term duration is about society. The truth is copyright is bullshit. Artificial scarcity is exactly that: artificial. It's a lie. Society is doing creators a huge favor: we're all pretending the creator's works are scarce. We're pretending we don't know how to make copies. We do this so that they can make money from their work. And we're doing it with the understanding that after a while the work will belong to us all. It will no longer be the creator's, it will become part of our culture by joining the public domain. Public property.

The longer you make those terms, the more unfair it is to the society that enabled the creator's business in the first place. The more unfair it is, the less reason there is to uphold the original social contract.

This arrangement must be tolerable for society. This eternal rent-seeking monopoly bullshit will not be tolerated. One day society is going to stop pretending and these monopolists will understand that everything is public domain.

It's already happening. See Sci-Hub.
I'm pretty sure he's joking
True, but the key difference is that cash must be physically transported.
I haven't even gone that far. You can't play the full game with the info that I provide. What my app does is automate the process of rolling to hit and damage but you still need to know what is doing the firing and that information isn't in the app.
The worst part is it is all just too complicated to work out why. My desktop seems to freeze and full crash once every few days and I have no idea why or even how to work out. Since it is custom built, I can't just take it to the apple store and say I want a new one.
Take an overweight person, put them on island where they can only eat survival rations and water, and they will lose weight.

I accept that some people may gain weight differently / faster than others. But if you count calories and exercise you are guaranteed to lose weight. It’s chemistry. Maybe with better nutrition you could eat more volume. But pretending like it isn’t the calories that cause weight gain is being exceptionally nuanced when the basic combo of portion control and exercise does the trick.
HTTP servers can still see the clients' user agent strings.
That's why you can't come out of lockdowns after just 14 days. At this point you can really start mopping up with contact tracing and so forth.

A further 14 days and any regions with no cases are safe to exit lockdown, as long as you have good border controls.

But I imagine that if your hospitals are flooded with patients and Covid is rocking your area, you need those initial 14 days just to reduce the caseload to the point where you can test and contact trace again. That's all it takes to get back from "impossible to eliminate" to "we just need to stamp this out now"
Because they aren't paid to enforce unreasonable copyright laws, yet they still have to do so. It's not just the users that are penalized by the status quo, it's the service itself.
Alanis says wouldn't that be ironic.
Either uBlock Origin or Matrix comes with user agent spoofing, it's not like the practice is that rare.
If they won’t take a rapidly developed vaccine, why would they take a rapidly developed treatment? By the time things are “safely tested”, they’ll either be dead from COVID or recovered from it. Long COVID would suck, though.
Your point highlights that calling it "remote work" is inadequate.

Communications separated by time and space is a familiar problem. We adapted, more or less.

With the apocalypse came the forever meetings (zoom calls), which are same time and same virtual space.
I'm not against blockchain technology. I'm against creating a systematically anonymous blockchain. Identity and reputation in value exchanges matter in society, both legally and philosophically.

Monero seems much better suited as a weapon against real totalitarian regimes. If it is illegal in both a free and unfree society, then it will only have a practical purpose in the unfree society, whereas the free society will have plentiful alternatives.
Oh, I don't mean to excuse it, and you kind of are asking for it if you say who you voted for, but just espousing a conservative viewpoint, provided it's not a viewpoint that has been given home amongst the conservative party despite being repugnant, isn't going to get you flack. "I wish taxes were lower" isn't going to lose you a job
I see it like i see the Salvation Army. They do a lot of good but every time you donate a portion of the donation goes to hateful causes and so the entire thing is tainted and I refuse to donate to them.
This is the same Firefox that said “deplatforming is not enough”
Sorry Firefox, you’re not an arbiter of truth in my book.
Are the three headline features important to you? They are:

- Picture in Picture

- Expanded Dark Mode

- DNS over HTTPs

I really like Firefox, but features like this are not going to cause people to switch browsers. I'm pretty sure most end users would never even notice them. DNS over HTTPs is actually a bit of a pain if you want to host your own DNS.