skysight-inc/HackerNews huggingface dataset:
1. Make it illegal for a US company to pay a cypto ransom.
2. Make US crypto exchanges report possible crypto ransom payments as Suspicious Activities to FinCEN.
3. Make it illegal for a US company to perform a wallet-to-wallet crypto transaction instead of using a US crypto exchange.
4. Make it illegal for a US company to directly use a foreign crypto exchange.

These commonsense know-your-customer and anti-money laundering measures should have been put in place years ago.
> And nobody will send that expensive an airframe at the ranges and a10 operates at.

Then why is there a Gatling gun on the F35A?
> The WireGuard team seems to make [performance] a top priority.

Well, if people adopt WireGuard because it's really fast, they'll also end up with a relatively secure VPN. Together, it's really compelling.
Ooh. Maybe a sedan delivery wagon (two door, front seat only). I think there may have been some Chevelles like that.
Do it, and do it often. They are lonely.
> I doubt they let you turn off the tracking

I'm not sure how they would even do that in the first place, since the AirTag doesn't track anything.
The trick for tooling is usually to find the blog post where the newest major version of the tooling was announced. Such a blog post will almost always contain a demonstration of what idiomatic use of the tooling looks like now. (Because, if it didn’t, how would anyone get started using it?)

This is also the domain of the more extensive language tutorials and/or “Learn X” books. Elixir’s website’s getting-started docs have a very good section on using Mix, for example, including `mix release`.

(People tend to forget to re-check an ecosystem’s official getting-started docs as new tools are introduced into the ecosystem. I’d encourage everyone to give your favourite language’s docs a quick skim every year or two; something new might jump out at you!)
> In a way it signifies a failure of democracy.

I'd say "demonstrates the", but... yes? Obviously?

Democracy worked well early on because institutions hadn't yet figured out how to exploit it, not because it had any inherent resistance to exploitation; now it's like Merkel-Damgaard hash functions[0]: it was always broken, but now we (and the attackers) know it's broken and are seeing the consequences.

0: eg, MD5, SHA-1
In North America at least, your ISP will happily comply with copyright notices and threats of lawsuits and pass them along.
You can already by hidden camera sun glasses on amazon
I used both pfsense, opnsense and none had good facilities to keep track where your packets are going.
Imo, interface types are the only thing standing between Wasm and a Cambrian Explosion of Wasm plugin architectures. Up until now it's been go through JS or roll it yourself. Exciting stuff!
The "Math Goblins" comic does not explain it.
I agree with this in principle, that good code should be endian neutral, but if the goal of the project is to produce something that's broadly useful as a "real laptop" then this is a serious concern, as a lot of software is either bugged or straight up broken on big endian.

Fixing all the broken software and making all of GNU/Linux bug-free is a noble cause, and one FOSS contributors all want I'm sure, but people who are interested should know just how much software is broken on BE. It's not a tiny handful of packages. It's not a ton either, FWIW, but the broken packages tend to be the larger, more complex application software that IMO your average end user will want, especially if you're marketing this laptop for general users and not specifically to programmers or others willing to compromise on software.

It's not an insurmountable challenge, especially 64-bit PPC which works okay in BE, as there are enough diehard PPC64 users keeping the patches flowing to keep it working. But some things will never work without incredible porting efforts, and some of the things that work have issues.
We were using a UV curing epoxy from Amazon, but we stopped because it had biocompatibility issue. Now we just use whatever is cheapest at the hardware store. It isn't hard at all to make the connections because the tubes go straight into the device and then we just epoxy on the outside and that is good enough.

My main contribution was testing the biocompatibility of the resins actually. The original resin was developed by the engineering team and while it worked well, some of the ingredients were extremely cytotoxic (to the point where if someone got it on their skin it would leave a nasty chemical burn). The resin used in the paper was a newer formulation that is completely biocompatible. The last bit of the paper is a quick dose-response assay with live cells.
LED Strip Clock Build
Security is the top priority. But being useful is also important; if nobody can use it, nobody benefits from that security. Acceptable performance is very important for being useful, especially when tunneling layer 3 packets, where latency has rippling effects. The prior non-kernel WireGuard for Windows simply was not sufficiently useful for real world workloads people wanted to run, because of the lower performance, both on servers and on laptop wifi alike.

A big part of the WireGuard project since the beginning has been trying to figure out how to do high security tunneling that also performs acceptably. It's easy to do one without the other, but doing them both together has meant thinking about a lot of fundamentals, from the protocol state machines on up. It's hard to do tunneling in the kernel at high speed while still maintaining a strong security posture. That's a principal challenge the project endeavors to solve.

More generally, it's worth noting that cryptographers also care about performance quite a bit in things like symmetric crypto. We know well how to make a good cipher now, but making one that also performs at increasingly high speeds remains an open area of research, with whole conferences, such as FSE, devoted to it.
Maybe safety isn’t binary? We are usually more sophisticated about evaluating risks than that.

If all you think about is whether things are safe versus unsafe, everything is “fake security” and you’ll never come up with defense in depth.
>or anything that uses TCP (like SYN flooding)

Plenty of SYN floods spoof IP as well. If you don't need to get the response, and you're behind an ISP that doesn't bother blocking IP spoofing, why would you use your actual IP? It'll make it much harder to actually trace an attack to the actual device doing it. It won't work on devices behind NAT but neither will reflected UDP attacks.
Unpopular opinion and will get downvoted:

This is why the appstores do reviews etc. these kind of things dont happen because of that
Although, if you find one, it's trivial to remove the battery or smash it with a hammer.
Why the American shoe disappeared and is hard to bring back (2019)
The world is hungry for solar panels. Why did Australia stop making them?
The original problem formulation lacked it. Also this comic lacked it. Most people who describe the problem doesn't include the titbit. It is a very misunderstood point, you can even see it everywhere in this thread.
The 3d printer was custom built by our lab. They have since commercialized the design and are sold by the company Acrea 3D.
https://en.wikipedia.org/wiki/Berlin_Tempelhof_Airport
I can't tell if this is a joke or we've actually done a full circle
Amazing strategy. The only thing to watch out for seems to me, is if programs use different TLS libraries or even statically include their own TLS implementation. So in contrast to kprobes, you cannot be sure to catch all traffic with this technique.

(However, of course kprobes and uprobes could be combined to at least become aware of all traffic that did not trigger any uprobe)
iirc, the "prototype" that was unveiled to Kofi Annan was just a polyester model:
https://www.youtube.com/watch?v=hii3ih_XtTw
Installation instructions only for osx and when I go to the try on Android I'm redirected to a GitHub readme that tells me to build something with node.

Seems the docs need a little bit of attention
How is it wrong in this case? your picked door had a 33% chance to have a price, since its one of three doors, now that a goblin is revealed the other door has a 66% chance of hiding the price. exactly like the monty hall problem
Constraint-Based Geometry Sketcher for Blender
Weird, never heard of it.

Does it overlap with Discreet or Softimage stuff?
My approach is to try to use my phone as little as possible, no particular setup. Before you root your phone, mind the fact that some banks will not let you use Mobile Banking which for me is very inconvenient. This made me unroot my iPhone since there were no Cydia Tweaks for my bank app, but I regularly save my SHSH2 blobs just in case something decent appears and I get passionate about rooted phones.

You can consider the idea of not using a phone at all, which may be the most aligned with what seem to be your values regarding tech. If you don't, then look into phones on which you can install LineageOS or even PINEPHONEs.

Mental Outlaw[1] has some helpful videos on YouTube on some of these topics.

[1] https://www.youtube.com/watch?v=ThsXFPC-_60
You can remove the battery pretty easily thankfully, if it’s annoying you. https://found.apple.com/airtag/disable#
I enjoyed this article. I think he's basically correct, but I think I can summarize it simply as the software/internet industry labor force is changing in ways that are similar to the way labor changed in the steel/industrial over a century ago.

The cycle will repeat when some new technology comes along that young hustlers understand in ways the mature money people do not
They are mainly offering VDSL2 connections over phone lines.
They also offer Fiber over a monopolist's (called Proximus) GPON infrastructure, but the rollout of that GPON network is still in early stages. However, that monopolist has pledged to accelerate that rollout in light of the increasing work-from-home statistics following the pandemic.

https://www.proximus.com/news/2020/20201208-proximus-brings-...
Idaho Under Universal DNR Order
Possibly the stupidest thing I've read
i thought pia got bought recently by a much less trust worthy vpn?
Learning Disentangled Representations with Invertible Interpretation Networks
You are being repeatedly downvoted because you are repeatedly saying that the description is not of the classical Monty Hall problem. Here's the description in the comic:

* Suppose you can pick door A, door B, or door C.

* Two doors hide a goat. One hides a prize.

* You pick one, then the host reveals that one of the other doors hides a goat.

* Should you switch?

Let me say that I think that in this description it is fairly clearly implied that:

a) The host reveals the presence of a goat by opening one of the other doors;

b) The host will open a door, regardless of whether you picked the prize or not;

c) The host knows where the prize is, and specifically opens a door to reveal a goat.

I believe (a) because we know by counting that one of the other doors hides a goat. If saying "the host reveals that one of the other doors hides a goat" is not content free, then it must imply that the host actually does some revealing.

I believe (b) because we are told that the host does reveal a goat in (a). With no conditioning mentioned I believe it is fair to assume that the host will always open a door.

I believe (c) because if the host does not know where the prize is, then they must open a door at random, and would not be guaranteed to reveal a goat. I believe the statement as it stands precludes that.

So, can you tell us exactly why you think this is an incorrect description? Can you tell us exactly why the probability of winning the prize upon switching are not improved to 2/3?
It's unusual to see the word "silently" used as a selling point these days. In headlines, it's almost always used in the context of some bad behavior and as such has taken on negative connotations for me. https://hn.algolia.com/?q=silently

I plugged the title of this post into a few online sentiment analysis tools and they both rated it as having negative sentiment. If the author sees this, you might want to swap it out for another word like "automatically" in the readme.
The idea seems neat. If you don't want to rely on react native but still write react this might be a good option to have
I do the same thing, although ammunition only moved to a separate safe when we had kids.

For one thing, burglars are typically not going to hit your house like a Navy SEAL team--they are slow, and there is plenty of time to respond.

Second, the ~90 seconds it takes me to get into both safes and load the firearm is enough time to take a few deep breaths and understand what's happening before drawing a weapon.

Third, it's there in the event of natural disasters, etc where police may not be able to respond. Same reason I keep emergency water and food. I've lived through enough hurricanes to know things can escalate quickly, especially when you're running a loud generator.
But we are the same on that, that's what "same" means.

We are not the same person, because we are different in some other characteristics and in our circumstances.

What's the reason you and your copy are not the same?
Dodging Attack Using Carefully Crafted Natural Makeup
So, about 8% decrease in fat mass and 3% increase in lean mass. Worth taking to a larger trial.

Just need to combine this with something that creates the urge to go for long walks. :-)
Sit in a hammock in the woods, listening to the wind and the birds, watching the treetops swaying.
A "generic type alias" in TypeScript is something like:

type FooOf<T> = Array<T> | { prop: T }

These are much more powerful than generics in languages like Java because they let you build an arbitrarily-tall tower of type abstractions. What I've found in practice is that at least when it comes to application code, these are rarely needed and cause more obfuscation than benefit.

On the other hand, generic functions in TypeScript allow you to bind together the types of arguments and/or returned values:

function last<T>(arr: Array<T>): T {
return arr[arr.length - 1]
}

which I see as pretty essential. So my thinking is to allow the latter (as well as generic classes), but not the former (non-generic type aliases will still be available). There will also be some built-in generic types like promises (or some equivalent) and iterators.

|> has special language-level status and works sort of like generics, but doesn't need to be implemented in terms of them (though it may end up that way just to simplify the compiler)
Why are you assuming that my wife tells me what to do?
I think the small web and gemini protocol might be up your alley too, if you feel this way about the Internet.
Unfortunately the SoC they've chosen, while technically supporting little endian, doesn't include the VMX extensions to the ISA IIRC, which all (?) distros require as they generally assume ppc64le = POWER8 or higher, which include VMX. There may be other caveats, but at the very least, you'd need a custom distro to get LE working on it, with special build flags used to restrict it to Altivec instructions.
A timeout of 4 or 8 hours works well for me. Enough that it's useful, and part of my routine when I start my workday and return from lunch.
> Airtags are just one implementation of a Bluetooth transmitter and a long life battery but anyone could probably build a similar device dedicated to tracking with off the shelf parts.

There is nothing Dropbox does that can’t be done with rsync.
thanks, yes that's my channel for Scheme for Max/Pd stuff!
Yeah, many men in the middle is better than just one! /s
That is like saying more fruit stores on the street will drive the fruit prices up.
Doesn't it also mean addresses serving as the source of an attack become more disposable?
Is someone going to tell them that AI/ML is just a set of regression algos, potentially on top of other regression algos, and that it is used in nearly every aspect of any online service they use to bring their service to them faster? I think this clearly shows just how far the hype terms of AI and ML have caused detriment when actually describing the technology underlying it, because it is much dumber than many people think. What is truly the problem is who is using the tech, for what reason, and how are they acquiring data to build such models. But, as we have seen with GDPR, having one jurisdiction or body say they will have new rules for data collections doesn't really lead to less tracking overall. So my question is, how do we do this? How do we once and for all stop continued, pointed tracking of all internet traffic? And is it even possible if groups like the NSA and Chinese gov already have backdoors to many sites and hardware platforms?
Government intervention is not the answer to everything. It is slow and inefficient.
The Monty hall problem is a very nice example of why reasoning with conditional probabilities is hard. If you have studied conditional probabilities and encounter the Monty Hall problem it is easy to think you are in the situation to apply your knowledge and reason like that:

I know that the prize is not behind door A (because the host showed me the goat there).
Given that the prize is not behind door A calculate the probability that it is behind door B.
Well that's obviously 1/2. Why? Just use conditional probabilities that's what they are for.
(The calculation is trivial: Event X="prize behind B", event Y="prize not behind A",
P(X)=1/3, P(Y)=2/3. P(X and Y)=1/3.
P(X|Y)=P(X and Y)/P(Y) = 1/2.)

Exactly why this argument is wrong is the subtle part. Of course the argument doesn't put to use part of the information given - which door I chose originally and what contract I had with the host, so this is normally enough to make one uncomfortable, but still we know that, e.g.

"In probability theory, conditional probability is a measure of the probability of an event occurring, given that another event (...) has already occurred."
(source: wikipedia)

Having thought about it I find that adding some more precision to the intuitive motivation of conditional probabilities might be helpful. I certainly think twice now before using conditional probabilities to model the real world, but realizing that I should has cost me quite a bit of head scratching.
Nothing escapes Sturgeon's Law.
Yes, typing the standard libraries is going to be a significant task, but the author of Elm did it so I figure it should be feasible. Like Elm, I plan on exposing an opinionated subset of the native APIs, and for example I may exclude the mutating DOM APIs in favor of declarative ones. This is territory that's still up in the air though; I've got a ways to go before I really have to pin this down.
I kind of saw this as just a collection of neat programming puzzles and an accompanying paper about automatic solvers. Doesn't seem like they are trying to affect the language itself in this case.
I don't, actually. Wasm is immature in the browser, too, for the same reasons. Writing a client-side web app entirely in Wasm generally doesn't work well today because you'll force the client to download much more code before the page can run. Lots of work is being done to improve this, like adding built-in garbage collection to the Wasm runtime so that apps written in GC'd languages don't need to ship their own. Dynamic linking will help too, assuming that language runtimes are allowed to be cached across different sites.

In both environments there are certainly use cases where Wasm provides huge advantages. But those use cases are still narrow. Over time it'll grow but there's still tons of work to do.
Please do not perpetuate flamewars on HN. You've broken the site guidelines egregiously in this thread, and we ban such accounts.

I don't want to ban you, so if you'd please review the site guidelines at https://news.ycombinator.com/newsguidelines.html and stick to them in the future, we'd appreciate it.
> Let's be clear: what some people who advocate for this want is "we want to work less, but be paid the same or greater".

1. It is clear.

2. All people, not some people.

3. It's nothing like asking your child whether we should buy a bigger house.
https://www.sungazette.com/news/top-news/2020/02/montoursvil...

Ultimately they did 100 hours of community service. I’d do community service for $1000 an hour!

Clearly there is some plea deal going on and they agreed to this to be done with it.
Flow. You can't overthink grappling, or you'll sabotage yourself. You have to let your mind flow like a river.
Please do not perpetuate flamewars on HN. You've broken the site guidelines egregiously in this thread, and we ban such accounts.

I don't want to ban you, so if you'd please review the site guidelines at https://news.ycombinator.com/newsguidelines.html and stick to them in the future, we'd appreciate it.

Edit: please see https://news.ycombinator.com/item?id=28579169 also. That's already a pattern—please reverse it!
Can you give more detail on what you mean by the "recent Mikrotik CVE?" As far as I understood, the recent botnet was utilizing devices still unpatched since the original issue (2018?), as well as credentials gathered then even for patched devices that were affected but passwords weren't rotated.
can you teach me what you know? I want to learn but there's only so much I could find. Most of my googling always gives me a full list of "AWS" and other service provider articles.
This is how I would be interested in using Flutter. Honestly the thing that has been stopping me from doing it is Dart. It's not that it's a terrible language, it's just a very mediocre one. At this point in my career, I detest that and will not learn anything that simply exists for the sake of being difference instead of offering any actual merit.
According to its sourceforge page, Cinepaint is still being maintained. The last update was in May.
The link to the Chinese government website in the footer is a little weird. What is that? Is this project affiliated with beian.gov.cn?

Honestly just curious.
That's some food for thought. My issue with programming courses is they ask you to memorize the commands then use them; most programming is about creating the logic then QA'ing with some data. Excel is data-first and becomes more like a game, trying different approaches with a clear picture of the end in mind. It's easier to persevere.
>"With the introduction of Rust to the base system, it may be desirable to oxidize certain components which have high security value in the system."

This is such a great way to phrase this activity; I really hope it catches on with other projects.
Following on just a little here.. much of the latter part of this Twitter thread is about trying to take sure that education is the primary objective, that tech does not lead.

I continue to think that there's little sign educators have any chance to develop & support more healthy "creator" centric tech in the current environments (which is the sole positive/pro- tech thing this Twitter thread encourages). We're not going to get good at using computers to teach math or langauge or science, so long as computers themselves are a prescriptivist tool, so long as we don't empower people to be competent & capable & comprehending of technology.

XOPC tried valiantly to set a powerful new relationship up between the student & their computer. It tried to make tech not just a tool for teaching, but to make tech open terrain a pupil could wander through, understand, learn about, on their way to their other tasks. This to me is so very much more interesting & ennabling than what I think of as the purpose-minded "how can we make test scores go up" learning that I see as the focus of this twitter thread.

This author is probably right about what current tech startups need to do. But he's wrong about what the future really needs.