skysight-inc/HackerNews huggingface dataset:
I don't think they're bad, it feels more like they hit the 80/20 point and move on to something else. In the case of spam detection, whatever worked ten years ago set and forget without anyone quality assuring it as things evolve.
President Biden Appoints AMD CEO Dr. Lisa Su to Council of Advisors
How to Defeat Ed25519 and EdDSA Using Faults [2017]
Eliminating obvious hacking would be an improvement in a lot of games. You can get good enough to outplay a waller with a subtle aimbot, especially considering the cheaters are typically not very good at the game. The “rage hacks” offer no level of counter play at all.
Clicking Hacker News is seeking news the same way as clicking CNN.

Signing up for emails (presumably) isn’t organically hearing about it via billboards or voluntary conversation; it’s willfully agreeing to have news appear in your inbox.

How does this differ from the person who visits Fox News or CNN and follows a group on Facebook to see their posts appear in their news feed?
Clevis/Tang are really cool technologies that enable a new way of doing FDE. I'm surprised they aren't talked about more.

With Clevis you can use Shamir Secret Sharing to divide the FDE key into multiple parts. The parts can them be put in multiple places: the devices TPM, a server that will only reply to devices on the local network (Tang), a hardware token, etc.

If you put one part of the key on the TPM and the other on the Tang server, you now have a device that can be automatically rebooted in a data center without needing to enter an unlock password at boot. But if the device is removed from the data center its contents will be encrypted.

Pretty neat!
Except satellite maps are not meant to be not-"realstics", not-"believable", not-"fake". They are meant to help with navigation, property purchase etc. If fake images help with that better than real images, that's fine with me.
Memestocks and Reddit Redesigns
I played Fall Guys on release on Linux, it worked quite well. Came back a couple of months later to it just blackscreening on launch and I realized they had added EAC sadly. This is great news
Note that the S%P doesn't have the power to delist stocks. They can drop them from their index (which certainly would cause some reputational harm and probably lower the stock price a bit, at least temporarily), but FB will continue to trade on Nasdaq.
To say nothing of working on R2-D2, BB8, and Robot Wars.
The curtain drew back when the established Wall Street players, powers, and entities undeniably colluded in plain view to shut down trade during the Gamestop debacle, revealing just how unhealthy, manipulated, and unfair the NYSE really is for the small-time investor.

Our situation clearly is very far from ideal, but that only makes the ideal more important to define and restore in my estimation.
As far as I can tell, healthy stock exchanges have three purposes:

1. Facilitate mutually beneficial exchange between entrepreneurs with creativity and investors with capital.

2. Determine the value of competing businesses and assets through active, decentralized trading and aggregate speculation, effectively churning the standings and keeping score.

3. Induce transparency by opening corporations' dealings to the public, inseparably tying corporations' actions and plans to their valuation.

When the market is healthy nobody is in command, the market is distributed, the game is competitive, fair regulators arbitrate minimally, traders' churning keeps score, failure-capable corporations are responsive to public pressure, and new competition with fresh ideas can enter the market competitively.
Brilliantly, it's an ecosystem powered by greed and insured by selfishness, the basest and most reliable of human emotions - the animal root. Yet the ecosystem is delicate, reliant on all those elements being in place and functioning.

Save the traders' churning like a system clock, everything else in the US market is broken or corrupted in one way or another.
Corrupt government meddling picks winners, the market centralized, there is collusion, the regulators are captive and incestuous, corporations which control public opinion are too big to fail, and new competition is consumed by the established corporate giants or crushed underfoot.

Now to get back around to your question, stock is special because it's the only part of the market still functioning properly and it isn't exactly money, but value equivalent to a percentage of the company. Stock shares abstractly tokenize the ownership of a company and their nature is volatility in varying degrees. Aggregate speculation driven by share trading is the most efficient and accurate model we've developed to evaluate "all the things" and it serves the same function as a heartbeat or a system clock cycle. Taxing that trade in the market's current fucked-sideways status would be disastrous.
Think: making a 46yo cheeseburger enthusiast run wind-sprints in pads on a Texas summer day or overclocking a minitower with a GT 430 that hasn't been cleaned once in the 10 years it's spent on a chain-smoking Brooklyn Taxi Cab accountants' office floor - levels of disaster.
When you have an existing stack, the choice is often between adding Cloud or staying on managed/on premise, and not between Azure and AWS/GCP.

As in the article, if you already run Windows servers at scale, going to AWS is possible but won't be your first choice. Microsoft sales people being condescending will basically reflect that situation.

In most other situation I can think of you'll go to Azure only if you can't use the alternatives, so again you're basically at their mercy.

To digress, if you run linux servers with an open source stack, going to Azure will bring you virtually nothing, and will probably be an expensive PITA at every step. In a previous ruby shop we had more empathic dev evangelists walk us through Azure, but we felt like wasting their time as it clearly wasn't a priority to them. Then looking at the price we'd need to drop them as soon the discount prices expire, so it was just a losing proposition for everyone involved. I totally understand how more sales focused employees would weed out shops like us and go look for those who have to stick with them anyway.
Disclosure of three 0-day iOS vulnerabilities
The guy was a class A moron.

Bitcoin would have solved his problem, sure, but so would a simple bank account.

Literally all he had to do was put the money in a bank account and then pull it out once he landed.

Traveling with that amount of cash is insanely stupid. So many things can go wrong... Someone steals the bag or it gets lost, etc.
Self-defeating, since part of the point is that your reputation is based on multiple games, so by only playing one game your account already looks suspicious.
Asparagus grows reasonably well here once it gets established, and there’s a sense to which I could imagine a big planting if I had more land, but the yield is low for the area requirement. I dug the crowns and moved them to the backyard. They suffer when moved but we saw them coming up this year and they still taste yummy.

I’m not we’ll versed in Ayurveda, but we’re learning about herbs and traditional medicine. Ginger, St John’s Wort, echinacea and things like that are very interesting and healing.
s/shouldn't/can't/ but you've pretty much got it.
Edited my post above. I meant NOT tied
> For example, what kind of resources are required to break the disk encryption of a computer protected with tpm 2.0 + secureboot + luks w/tresor* ?

a: 1 copy of all the computer hardware present in the target system.

b: 1 secure radio link of sufficient bandwidth.

c: 1 apartment or van near the target system.

d: Sufficient equipment to interface with the target system (now in said apartment/van[c]) well enough to replicate its login UI (via radio link[b]) on the fake copy of it[a] you left in its place when you stole it.
> But even now, ARM still has yet to make a strong case for existing on the server

This is several years out of date: AWS Graviton instances are usually a fairly substantial savings over similar Intel, with AMD in between, and Cloudflare has been reporting rather good numbers as well:

https://blog.cloudflare.com/designing-edge-servers-with-arm-...

The main reason I suspect Azure doesn't have it is both Windows' legacy x86 hyper-focus (the days where NT ran on half a dozen platforms never really panned out) and a smaller number of managed services. AWS has very popular services like RDS, ElastiCache, ElasticSearch/OpenSearch, etc. where you can simply check a box and wait a couple minutes to see savings, not to mention things like Lambda being only slightly more work for many users, and that's a great way to get volume usage even if the average enterprise IT department is scared to go near it for VMs.
Well said, but I don’t know why you’d offer up paying even more taxes.

If anything, taxing billionaires should help lower the burden on labor aristocrats. The real issue is government having a monopoly on tax revenue and not pushing a penny far enough.
You should have asked the other patrons.
"Photon will likely be technical alpha for all of 2022 or longer". Wake me up in a couple of years then.
I definitely agree with you that most of what looks like deliberate planning in complex systems is emergent behavior. Deliberate planning (in complex systems I mean) can usually be recognized because of how poorly it works.
Not sure what you mean. When Ivermectin was first being discussed, way before it became a national topic, I regularly heard people saying "oh, you mean my dog's heartworm medication? How could that help?"

It has been a well known drug for a long time.
Well IrfanView is open source, so if the original author dies I would expect someone else to pick it up.

Your description might help with one specific area (compression algorithms) but there are numerous other areas where you can't just use a plugin.
Hey, if they want their app to suck, I have alternatives.
Yes, this week I received the same kind of emails which bypassed the filter as well.
I am curious. If customer privacy is such a problem for Amazon and other companies, why don't they have a field in the account, where you could post a public key of some kind (e.g. PGP or S/MIME), so that all email they send you would be encrypted?
I'm baffled as to why a lot of vets in the industry moved away from it to more expensive things, but I guess a lot of it depends on the pet's environment.
"When traveling through chokepoints (like airports and border crossings) where there’s a greater chance of IMSI catchers, turn off your smartphone or use an RF-shielding device, such as a Faraday bag. Neither option completely reduces RF emissions but can minimize them greatly."

What does 'Neither option completely reduces RF emissions but can minimize them greatly.' mean? With all the smartphones I've owned, when I turn the power completely off and or remove its battery then it's simply doesn't function.
Plus support.

After dropping coffee on it for the N-th time, I left it outside to dry. I didn't notice that the location I placed it had direct sunlight - plus, it was during the summer.

One of the spacebar keycaps warped to the point of being unusable. I tried several options (including attempting to 3d print a replacement). Was almost giving up, emailed support.

They sent a replacement keycap, for free. For the Freestyle Edge - the one with the blue backlight, that's discontinued.

I'd say the major drawback that it has is the "gaming" name, which makes it awkward to get your company to expense :)

I'll add another drawback: the switches are not removable either. So if you wanted to replace your switches with different ones (for instance, WASD), you really can't (practically).
Introducing Food XRAY: The simplest and most powerful nutrition tracker ever
Couldn't edit my original but I finally had some time to google this:

> The U.S. Department of Defense (DoD) is the single-largest consumer of fuel in the world and Jet fuel accounts for 71% of the entire military’s petroleum consumption. Therefore, DoD needs to maintain a strong logistical support to provide jet fuel for its equipment across the world.

https://patentyogi.com/aircraft/us-navy-plans-produce-jet-fu...
Why don't companies like Amazon who care about customer privacy have a field in the account settings, where you could post a public key of some kind (e.g. PGP or S/MIME), so that all email they send you would be encrypted?
Or you could manually message each of your contacts to let them know when you are available. Or you could physically show up at people's houses to let them know that you are available to talk.

There is always a less convenient and more manual way. Pointing that out helps no one.
Pretty sure the only doses that will cure you of covid are the ones that also kill you
> Thanks for the info! Shoulda held out at the start.

As much of a joke as this is, you forgot this part:

"Okay we're don't with him." holds up 9mm to the guys head and shoots
Yeah, people say that, but Tractatus clearly contains those ideas, though he talks about them mostly in the high-level, abstract, general form.

"2.12: The picture is a model of reality", "3: The logical picture of the facts is the thought.", "4: The thought is the significant proposition.", "4.001: The totality of propositions is the language.", "4.002: Language disguises the thought", "4.003: Most propositions and questions, that have been written about philosophical matters, are not false, but senseless. We cannot, therefore, answer questions of this kind at all, but only state their senselessness. Most questions and propositions of the philosophers result from the fact that we do not understand the logic of our language."

The problem he had with Tractatus was the absurdity of trying logically construct an argument against logic - Tractatus was strongly influenced by Russell. But he wasn't trying to define a universal logic system like Russell or poking at the limits of one like Godel. He makes that clear at the end:

"6.54: My propositions are elucidatory in this way: he who understands
me finally recognizes them as senseless, when he has climbed out
through them, on them, over them. (He must so to speak throw
away the ladder, after he has climbed up on it.)
He must surmount these propositions; then he sees the world
rightly.", "7: Whereof one cannot speak, thereof one must be silent."

The difference between "early Wittgenstein" and "late Wittgenstein" is mostly (though not entirely) about form, he's just much clearer about and does deeper dives into his ideas in Philosophical Investigations and other later writing. He started hating the whole idea of writing a "general, abstract form", but doesn't shift the fundamental thrust of his worldview.

Of course, the Tractatus is pretty dense and there's a lot of disagreement about interpretation, this is just my opinion on it. It's a really wonderful book if you spend time with it, the structure is very fascinating, it feels like a puzzle. I assume anyone on HN trends nerdy, and though it might be more difficult that Investigations, I think Tractatus appeals more to my nerdy side.
Server-Side Ad Serving: The Future of Monetization
wtf is wrong with you. Do you know anyone with literal cancer? Use different words.
I agree. I don't really play multiplayer online games at all anymore, but when I do they are explicitly not competitive. As the world switched from community servers to matchmaking I felt that it only made everything even more toxic than it already was, and I was not liking the person it was turning me into.

I will only play competitive now if it is couch, or lan party, or otherwise with people I know.
Is there a way to use checklists in Confluence in a way that's not terrible? My team has a checklist we go through regularly and have to use Confluence for this sort of thing. While you can make checklists in there, we can't find a way to make the check marks ephemeral. Every single time someone checks an item it updates and saves the page. We also can't find a "clear all" button. So every time we go through the checklist someone has to manually uncheck every single item, or forget and just leave some checked for the next time.

The best option I've found is to hack in a little bookmarklet to uncheck all of the items with a click. It works for now, but I've done this to fix other Atlassian annoyances in the past and they usually churn the html enough that the scripts regularly need to be updated.
sure maybe the browser is limiting the number of http/1.1 connections, but it's not true that it doesn't limit the number of http/2 connections in a similar manner. it only creates one http/2 connection but due to multiplexing that is all it needs.
Market cap != cash in the bank. Market cap is just a fantasy number that reflects how much people are willing to pay for your stock. I'm sure FB's market cap barely budged after this $5B payout.
Pilots did, too, at first. It took two generations before they loved them.

But pilot checklists are written by pilots. Who knows who writes EHRs' checklists?
This varies immensely by the product team. If you file a bug on the AAD protocol docs I have a self-enforced SLA of a business day (or less). And a CVP enforced SLA to solve it in 30 days. And I generally love the folks who do file bugs - they're engineers, and usually fairly savvy.

Other teams do get burnt out on docs though, especially when customers use them for abuse or free architecture help. My favorite was someone asking me how to use an Oracle product. I know our branding is confusing but it's not that bad... Is it?
I can infer several arguments that you could hope to be implying. But I'm not going to guess at the specific one you're trying to make just to argue with myself.

In general: Correlation is not causation. As I said, the quality of information was orthogonal to who could access it. And furthermore, even in modern times advertising does not pay for Internet access nor computing devices.
Ask HN: Have you made a straightforward request for promotion and received it?
Promotion processes in big companies seem so convoluted, perhaps intending to discourage the employee from trying. Has anyone just made a straightforward request for promotion (no hoops) and gotten it? How?
Something doesn't add up. Vaccine makers say it also prevents against asymptomatic infection, e.g. biontech[1] delta variant asymtpomatic infection lists "79% (75–82%)" (presumably it's the 95% confidence interval or something similar in parentheses -- in any case, it's substantial). I remember the happy news when the studies came out, saying we were also preventing transmission to unvaccinated people (initially for Alpha with 92% (90–93%), that's the number that stuck in my head to be honest).

How can this part of the article be true then?

> the covid vaccines are extremely leaky and may well accelerate contracting and carrying covid.

(Where 'leaky' is a link to another article on substack where it is explained as meaning 'not preventing being contagious'. Continuing the quote:)

> they allow for very high viral loads to go unnoticed and generate a new and severe asymptomatic spread vector to where none existed before. [...]

> vaccine campaigns cause superspread events because vaccination leads to a 2 week window of 40-100% more covid risk

It might transmit via a vaccinated person in some of the cases, but way fewer than if you're unvaccinated, so vaccinations should still be helpful? Or does the math on 79% (assuming that's the true value) + Delta-levels of contagiousness + number of cases still around + % of people unvaccinated work out to a worse scenario than <10% vaccinated + people that get sick take notice and stay home?

[1] https://en.wikipedia.org/wiki/Pfizer%E2%80%93BioNTech_COVID-...
I live in Salt Lake City. It's got some problems. It sits in a valley, where all the pollution accumulates. It doesn't get enough rain. It can't grow enough food for the people who live here.

The last one is perhaps the worst. In a societal breakdown, this place will be in serious trouble on food. So one criterion for me is that it gets enough rain that it can grow enough food to feed everyone in the area.

Am I expecting societal breakdown in my lifetime? No. But if I'm going to move, I want to move to a place that's better able to deal with it if it comes.
Mine showed up nothing even though I buy things every now and then. Google offered to "search for other purchases in Gmail" but I declined. I would be interested to know what Google does do with information in my email account other than the email service.
$4.9B over what the fine would otherwise have been is pretty hefty. I don't think any human alive is worth $4.9B to their employer.
Google Docs has introduced checklists alongside unordered and ordered lists.

The keyboard shortcut to start a checklist is CTRL + SHIFT + 9.

Blew my mind when a friend told me about this.

Edit: Also, for software teams, GitHub supports checklists on their issues/PRs. My team has written a bot which blocks PRs until all checks are checked off. It's been pretty fantastic.
I had same problem in last few months, advertising t-shirt/pill emails.

Another kind of spam mail like this is they use google docs or sharepoint to add a huge CC list.

However, defending them is hard and I think I can share my knowledge on topic of spam filtering(given I run an email forwarding service (https://mailwip.com) and have to deal with spam a lot)

When an email come from gmail/hotmail(any popular free email service) itself, it's harder to detect spam, especially if the email is in a non English language.

It has a few way to flag spams:

- Look at the IP address:
- Look at the structure of emails: follow best practice, such as html/text plain part, has right mime encoding etc
- Look at header of emails: no weird header, no "bad" ip in received chains
- Look at attachment file type, virus scan those attachment
- Finally, tokenize content of the email to find similar email that are flagged as spam

When the email come from their own IP, send out by gmail themselves, email format looks good, DKIM/SPF all pass and this is the first kind of email then the only way to flag spam is by analyze content. And if the email is in non English language, it's harder to analyze. Especially if not enough people flagged it as spam to train the naieve bayes tokenizer then we're out of luck here. The long CC list looks like a legitimate indicator for spam, but librarian/scool has a tradition of sending out a huge CC of entire class/department, sometime even BCC which make the email looks very suspicious (undisclose recipient) yet they are legitimate email so the CC alone cannot easily be used for spam indicator.

Yet, at the same time, legitimate emails form your own server get flagged because low reputation or a history of previous owner send spam...
I collect coins. Many dealers are cash-only, especially for items where they're trading near bullion value. The 3% or so transaction fee is pretty much your entire margin if you're dealing with a commodity 1oz gold coin.

I've been hoping to go to one of the big national-attraction bourses after the Covid crisis ends (all the budget not spent on vacations in 2020 and 2021 would pay for a nice $3 gold piece) but I've been thinking about this exact scenario.

I've noticed my bank, despite being a large national bank, has a habit of not having branches in the places I want to visit. So there's a fair chance I can't just do an in-person withdrawl on arrival. The ATM is limited to like $500 per day and might incur distasteful fees. So the obvious idea is to pull $5000 before I leave and carry it on my person. Except now I've got to worry about the TSA grabbing it. Since we have no large notes anymore, trying to pack fifty Franklins in my wallet is going to be pretty obvious when you put it in the little X-ray bowl.
Ah so it does, but that URL has a bearer token that only lasts for one minute. Try it again after a minute.

Edit: I don't work on this stuff, but have seen it challenge me when trying to do this exact thing.
The first one is just Autofill. I already have that, why should I be scared of it?