skysight-inc/HackerNews huggingface dataset:
Display your NFTs on your Twitter profile & view all recent NFT buys, bids, mints, listings, and sales from the people you follow on Twitter
Yeah, I have had tons get past the Fastmail filters too. And a huge uptick in sms/autodialler spam to my phone.

If all the bigger providers are having trouble too, perhaps there’s a new kind of spam? Or higher monetary incentives now?
This shouldn't be true any more, I just tried it out by grabbing the lh[0-9]* url for the image bytes and that won't open in an incognito browser without a Google Login. Can you share with me how to reproduce this "url copy"? If you want to send it privately just tack gmail.com onto my username.

Or you can file feedback from the photo web page and just tag me in it.
If the narrative doesn't make sense, maybe it's not true. Or wildly exaggerated.
If you get financing on purchasing a car you have to give financial institutions your personal information, I don't see this as being any worse. Even companies that I'd prefer not to do business with have all my personal details, because there isn't really any alternative. My identity was stolen as part of the Equifax breach. Certain organizations are more reputable than others, and I want this gaming reputation service to be well respected and trustworthy, since that's the only way something like this can work. It's hard to get right, but it can be done.

The alternative is having to run third party closed source anti-cheat software on my computer that is written by god knows who, that has the potential to do an enormous amount of damage if a bad actor were to sneak in a backdoor.
As someone who often has multiple meat-space projects in flight, I'm convinced there's a very thin line separating busy creative types having lots of physical projects taking up space and any other kind of hoarder.

Whenever I'm getting ready to push through another phase of a big project, or just getting started, the necessary accumulation of materials and tools makes it especially apparent. It's just a small loss of motivation, distraction, or injury away from becoming another burst of hoarded expensive junk.

Consider yourself lucky your project messes can hide away in a NAS...
> Grant Masaru Imahara was an American electrical engineer, roboticist, television host, and actor. He was best known for his work on the television series MythBusters, on which he designed and built numerous robots and specialized in operating computers and electronics to test myths.
FB investors seem pretty happy with Zuck's leadership of the company, and it's pretty easy to see the argument that the additional cost was well worth it to keep him at the helm.
> I could imagine an extension that's modal and allows its own plugins to be written in JS and then loaded. This doesn't seem at all to be a fundamental limitation, just "Vimium et al aren't designed this way."

Currently yes. When Chrome eventually mandates Manifest V3 extensions, they will no longer be able to run code not contained in the signed extension package.

https://developer.chrome.com/docs/extensions/mv3/intro/mv3-m...
If he had only written the book, I likely wouldn't complain. But the fact that he accomplished the goal - convincing me that checklists were awesome - in a much shorter article, tells me that the rest of the book was unnecessary.
Semiconductor firms can’t find enough workers, worsening chip shortage
Fun with Redirection
EncFS over GDrive/Dropbox is great!
RSUs, Vesting agreements, Stock/Token options, also with tax withholding for US employees:

We've been doing vesting of assets for 4 years. You can also use an oracle (cron job with conditional metadata) to determine which portions to withhold for taxes under various tax regimes.

You can autoliquidate those tax withheld assets into a liquidity pool if your company needs the liquidity for taxes.

Many projects and services have locked assets but we found it incredibly difficult to conform that concept to the US tax system until we built our own way. What’s onchain is similar to any token lock agreement. Just autoredirecting portions of payouts and autoliquidating for this purpose is still not common.

Although we don't find programmatic vesting to be novel, anymore, and just the tax withholding part to be better: outside of the smart contract space we see a ridiculous amount of overhead, confusion, opaqueness, time and red tape just to accomplish a vesting agreement. So, we aren't evangelizing smart contracts and “blockchain” anymore but we will tell people about the more relatable things that we are doing.
كلمات اغنية الحلزونة محمد عساف
The "i" only exists in one of the addresses.
So, fight it when that is actually proposed. Anyone can argue against a hypothetical future abuse.

I personally don't want to be in an aluminum can 40K feet in the air with someone who has already in the past assaulted someone in a different aluminum can. I would definitely favor airlines that attempts to keep these atrocious people off by sharing these lists. Bars and restaurants ban people all the time for being jerks, and I'd support sharing those lists around, too. Companies have a right to refuse service to people as long as the reason for refusal is not one of a few specifically enumerated reasons, such as race, gender, etc.
How to start a deep learning project?
How nice to have the maker gods remember Grant in his happy place, nerding over his stuff, surrounded by his accomplishments: he would have been thrilled.
Why would anyone believe they will let people go when you do what they say? Because “bad man made promise”? LMAO

I mean at that point, you are better off acting insane.
If you run workloads in Azure, and you let their default agent run on your images, I'd highly consider you take 30 minutes to skim around this repo: `Azure/walinuxagent`.

Go read through some issues, look at some closed ones, try and skim through the source code. Realize there's two enormous python scripts in the repo, one with "2.0" tacked on the end.

If Azure is somehow not just rebooting/killing VMs that lack the magic handshake, I'd highly recommend dropping the agent.

After all of this news, and what is on display in walinuxagent, do you really want some network-connected agent listening, who's often-most-touted feature is being a persistent backdoor?

"It's tough being an Azure fan." Eh, it's a nice cyclic problem. They have no depth of caring about engineering (hence why Azure is littered with services that are impossible to fully utilize because their own engineers don't understand the how/why of what they're building half the time). Which in turn, along with crap career advancement and constant un-appreciated, unmitigated live-service burnout, is why they can't retain actual Linux talent to save their fucking lives.
Yes. I mark everyone of them as spam and block. Yet I continually get these emails with html files attached to them. It's extremely frustrating
I'm out in the country and often see quails and jackrabbits running across the road (both appear extremely suicidal in darting in front of cars). I can't imagine any auto-pilot being able to deal with that. Now I know the areas where they tend to dart, so precautionary slow driving helps, but would an auto-pilot know that as well?
So let’s say we pick the meanings for consciousness. Will that settle the debate over the nature of consciousness? Would David Chalmers and Daniel Dennett agree on qualia? Evidence is that they would not. Both are quite capable of understanding and using each other’s terms. But yet they fundamentally disagree, as do many others.

This suggests, as Chalmers has pointed out, that the disagreement is not semantic. It’s rather a substantial philosophical issue. No linguistic analysis will resolve the debate. Science might someday, if the matter can be settled empirically.
I've never understood why Gmail and Hotmail/Live/Outlook don't take a user's own indications as gospel. If I whitelist an email address I want those messages, I don't care if [you think, perhaps erroneously] they are spam.

Possibly the worst is not allowing replys. I mean if a customer sends me a message, and you block the reply as spam how is that serving that customer? Sure mark it, remove viruses, obfuscate links, but let me reply to someone!
I would like it to have a better scroll like the fancy mx mouse with inertial scroll.
+1 to battery and usb c
Deleting a database is probably a bad example, but my point still stands: even if you are not trasferring code back and forth, runtime state is enough to be a problem.

What if your runtime state includes an `is_authorized` flag or similar? How do you guarantee that this state remains server-side when the entire language conflates server/client side code?

For this to work, there needs to be language-level support for distinguishing untrusted inputs from trusted ones, or else it's a recipe for disaster.
> It's like some people don't bother unsubscribing from lists, they just start reporting it as spam hoping it will go away.

I do that all the time. I consider every list I didn't explicitly and intentionally subscribe to as spam and treat them accordingly. I wish I wouldn't have to do that but I find subscribing someone to a list when they thought they were just buying or creating an account for a product so unnerving and disrespectful that I don't feel bad about it.
> In the incident described in the local news story, an officer of the law demanded the money extra-legally, and only resorted to civil asset forfeiture after the victim refused to play along.

No, it doesn't say that.

It says that the funds were seized with the explicitly stated intent to pursue forfeiture, and also a drug and money laundering investigation was threatened, with surrendering the funds (presumably, meaning not fighting CAF) given as an alternative to the investigation being pursued.

This isn't “CAF is an extra-legal process” this is the very-legal criminal process being used as a stick to threaten with to undermine the integrity of the equally-legal civil asset forfeiture process, because federal rules allow local law enforcement agencies to keep a share of federal-law seizures the local agency participated in (while most state forfeiture laws dedicate funds to the State general fund and not to the seizing agency), exacerbated by the use of cross-sworn local officers in airports, the chokepoint nature of airports on travel, etc.
> This is bizarre. I get throwing in a little extra to shield executives, but $5 billion?

I think it's bizarre that is what you find bizarre. You've already accepted paying more to shield the executives, so after that it's just negotiation.

What I find bizarre is that essentially "donating" money to a government regulator can induce the regulator to cover up and turn a blind eye to a person's alleged or suspected breaches in the course of investigations and prosecutions.

In the world of plebs, this is either bribery or blackmail, depending on who blinks first, and conspiracy.

I understand corporations "agreeing" to punishment with regulators like it's some cordial negotiation. It seems perverse but if the alternative is horrendously long expensive court cases that the regulator can't afford and doesn't have a good chance of winning, then sure. It does tell me the legislation and regulatory environment is broken (probably by design), but at least I understand regulators operating as they do in the environment they find themselves in.

But this? "Slip us some cash under the table and Mark's little problem goes away" veers into the fundamentally unethical and unjust to me. I'm sure it's just that my tiny pleb brain is not sophisticated or rich enough to understand.
For ML/AI related feed: https://www.sciencewiki.com/
I'm also a Dvorak user with a randomly generated password, but I memorized it by coming up with an approximate pronunciation so it's still firmly lodged in my brain.
Need something like this for Android.

Somewhere in my unassorted notes, there's a sketch of a checklist app too, made right around the time I read "The Checklist Manifesto". My experience is the same: everyone does task lists. Nobody seems to be doing checklists - sequences[0] of tasks that repeat ad infinitum, evolve over time, and need to be surfaced based on situational context.

--

[0] - Actually not sequences, and not trees, but directed acyclic graphs. But this isn't the right time and place to go on a yet another rant about how none of the "hot" players in task management have figured this out.
as moronic as that sounds, i know people just like this as well.
Hmm, they used to have drop sensors, at least! Or did those go out of fashion with spinning disks?

ISTR the motion sensing web APIs worked on Mac laptops when they were originally added (then later stopped working, either intentionally or through neglect).
"umagpeism" is my term for the affliction of touch-typing in Dvorak on a QWERTY keyboard layout.
The hosts are so cheap they wont do a raycast from a player to an object to see if its in line of sight, they are not going to try and scan your input looking for randomness.
I doubt it. Where I live there are swaths of commercial real estate left vacant before the pandemic. Apparently the same few property brokers are buying up all property, raising commercial rents a ton, and just sitting on it. They don't even care if they have tenets because speculation is raising the values so much they still come out ahead.
Thanks for this comment. I had a similar problem with email verification assuming particular email formats. I really appreciate your pointing this out, I would not have found it on my own.

I removed the "house number" section in favour of on the "recipient address" section, and your comment makes me think it might be better to simply have text fields for Name / address / city / province / postal code rather than fields that are more complicated, because unless they are executed very well they might end up being barriers.
I have the Boox Note 3 and it's fantastic. No subscription required
You really don't understand what corruption is. Countries with widespread corruption are a lot more dysfunctional than this one.
I don't know if you're being sincere or just trying to gotcha it, but Ubuntu has had support for this for ages as part of DKMS [0]. It generates a key and registers it with the firmware during setup if secure boot is on, and it signs any modules you build with that key as part of the regular DKMS build.

[0] https://wiki.ubuntu.com/UEFI/SecureBoot#MOK_generation_and_s...
As a user, it doesn't matter to me why software updates have degraded like this. All that matters is that they have.

As a developer, I don't really understand. I've been working on large, complex software that targets multiple operating systems for years, and we don't have any such issues.

It sounds to me like a lot of companies are using development methodologies that are a bit broken...

I've long thought that the reason for this is rather different -- the industry really wants to go to continuous-release models (which I don't think is a good thing, but that's a separate issue), which make security-only releases a bit nonsensical.
Gitlab: Prevent self-merge on protected branches?
As a network engineer writing code to automate aws and azure infrastructure I'm amazed at the number of pitfalls we've had with azure, they just keep popping up. Then the whole basic/standard options for every service. Feels like an order of magnitude higher in complexity for no reason, part of it is the abysmal documentation.
With all my heart, I'm rooting for the authors of this approach. Anti-cheat and DRM hide behind the defense of practicality and cost efficiency, but these products are absolutely evil. As personal computers are becoming more and more an extension of our bodies and minds, it is essential that they act in our interests and nobody else's. Imagine a prosthetic leg that phoned the insurance company if it detected illegal drugs in your blood. That's how I feel about these rootkit anti-cheats.

So please, let the cheaters turn to human-interface cheating methods. Force companies to deal with these problems in the proper way, like any other security problem: Don't trust the client at all. Infecting the client with your own agents is not an option. Can't make it work? Then use a different business model. Have your users put time and money into the game, and require more time and money the higher up the ranked ladder they climb. If they're buying as many in-game cosmetics as the average user, and playing for as much time as the average user must to reach a given level, then they never notice. If not, don't let them climb the ladder until they do. If they get reported by other players as cheaters, and manual validation confirms it, then they lose their investment. With that approach, you could have the most obviously hacked account in the world and it wouldn't be able to impact anybody for long without covering the costs of its own detection and banning.
Take a moment to consider how expensive and exclusive access to the internet was "back in the good ol' days" and maybe you'll be able to connect the dots. If you still can't there's nothing I can do for you sorry.
Try again: https://news.ycombinator.com/item?id=28636510

If you need a label, I am "preaching" localism.
Different teams for the inbox and spam folder in a single app? Sounds like the sort of thing one person would manage.
Bonus story: https://www.theregister.com/2021/06/18/bofh_2021_episode_8/

Occasional murder, but it's been that way since the 1990s
Some pranksters enjoy setting the keyboards to Dvorak in PC retailers to baffle the normals trying out the machines, as I discovered while laptop shopping a bit ago.
>It's the latter.

It is not media companies creating clickbait headlines to induce outrage and get clicks. In this case, it is the President using taxpayer resources to mislead the public. While the former is problematic, the latter is far worse as it reduces trust in the whole system of governance.
Yes! I bet more people can relate to this.
I've been using mailinabox for almost a year, I had an email caught in spam once, I contacted the spam filter and said my IP was probably being used by someone else before I took it, and they whitelisted me.

So you can have an occasional annoyance but it's not that common.

When I get a new IP (e.g. because I'm upgrading to a newer machine) first I check my IP against a list of antispam filters (I don't want to advertise any of those services, but a quick internet search will show you where you can check, most services have a free tier), if it turns out that the IP has got a bad reputation, I just get a new one instead of trying to whitelist it.

The only time that my email got bounced, that IP was not "clean", it had been blocked by one of the filters but I thought "oh I will just whitelist it on that one filter". I should have generated a new one instead.

One more thing that some people might not know: with all spam filters, if your email is caught by the filter, you will get a message, it's not like you don't know if the email has been delivered or not.

You will see something like "Your message could not be delivered - The mail system [host, ip] refused to talk to me: [reason, e.g. spam]"
It's more like $115k vs $115k + no fly list.
> break the disk encryption of a computer protected with tpm 2.0 + secureboot + luks w/tresor*

On Windows (even modern versions IIRC) you can sniff the traffic (or maybe forge requests? I think it was simply sniffing though) to the TPM and get the keys to decrypt the HD, if there is no additional protection (like a PIN or password). Don't know if this is also applicable to Linux stacks. Kind of weird the interface has not been designed and/or programmed to resist to such attack, although of course password-less full disk decryption is often going to be less secure than with one, at least Macs are not subject to the same attack, I think?
What does the FTC do with that $5b?
There is no nuance and there is no distinction. It's all advertising.

All that's happened here is that they've been advertised at and they have swallowed the advertising hook, line, and sinker.

And because they'd prefer to think of themselves as sophisticated rather than gullible, they then make these dishonest semantic arguments in order to find some desperate difference between marketing and advertising that their ego can live with.
It's no different than mourning the old 90's internet or music from a certain era. A thing gp loves about the world will diminish drastically because it's no longer viable, and they're going to miss it when it's gone. Makes sense to me.
The Web is fundamentally a Lisp machine
Okay, this might not be a revelation to the Lispers, but as I am neither a Web developer nor a Lisp developer it was an epiphany for me! I am a systems software engineer(work mostly in C and C++) so this was "hmm...?" moment for me.

I understand(by reading various comments across the web) that web essentially can be treated as functional i.e a request can have no state and side effect(though that could make an app useless). And also that everything in Lisp is a list. Please correct me if I am wrong in my understanding.

Now, for sometime I have been toying with web app ideas and trying to develop various apps using C++(yep, web development in C++! :D). I come up with architecture for a web app, develop for a few days; feel unsatisfied with the design and throw it away. This has been going on for sometime now. But today, I was thinking of a backend design for one of the web apps, and it has most of the common features you see in regular everyday apps. While jotting down the high-level design I unconsiously started treating everything as list! So [web] apps can be developed in a functional way, and everything can be treated as list. Hmmm...where did I hear that before? :)
Id like to see what this would look like in a 3D model visualization similar to what 3blue1brown produce. These graphics communicate math so much better and are the perfect fit for AR/VR.
Its more useful to see the movement to support indigenous people as a counterforce to attempt balance out the power dynamic between the colonizers and colonized. Without recognizing indigenous people as a group, they can not be provided the support that they need and they would get stamped out by the colonizers. In many cases its matter of trying to figure out how we can get the indigenous culture to survive at all.

Of course it is another discussion completely if every culture is something we want to try to rescue. Right now the general atmosphere is that yes, we do want to try to have as many cultures survive as possible instead of the great assimilation thinking of previous centuries.
Because they can use that unrealized value to get huge loans from banks at favorable rates then claim interest paid on taxes. This and other hoop jumping allows them to pay surprisingly little compared to their worth.
maybe if you only have a single core CPU. otherwise, pegging your CPU at 400% or 800% might feel sluggish
I asked a bartender for the WiFi password, he said you have to buy a drink first. I asked if they had Diet Coke, he said they only have Pepsi, so I asked for a Diet Pepsi. He turned and poured one, gave it to me. He said that's $3, so I gave him a $5. He walked to the till got $2 out, came back and gave me my change, I kept one bill and slid the other back to him. After a few seconds of silence, I asked again what the WiFi password was, and he said "You have to buy a drink first".
I would just let them kill me.
I wish Ray Monk would write a biography of Alan Turing. He is an excellent biographer.