skysight-inc/HackerNews huggingface dataset:
I'm skeptical of their breach notification for the following reasons...

If they were certain this was PURELY a phishing campaign against their users, then they had no need to disclose to the government.

Their wording in their disclosure is very very carefully crafted to not deny a breach of their data - pending "conclusive" evidence.

They made a choice to disclose so that the gov't could never claim that they failed to disclose should Coinbase data appear on a darknet website.

And While they make an allusion to social media data collection - I was a target in June, and I absolutely had ZERO social media talking about using coinbase. There is NO WAY hackers could have deduced on social media that I was Coinbase user, nor gotten my cell phone number.

I am 90% confident that Coinbase WAS breached directly, allowing hackers to gain access to email and phone number for my account.

This disclosure is 100% CYA.
It's a well-known business strategy to let smaller players in the market shoulder the risk for new ideas/innovation, since they have less to lose. Patents exist to protect the rewards for the success of these smaller players.
Less known macOS apps you will legitimately want to use every day
What? that's absolutely not the reason for 2FA... if he can key-log your passwords, he can keylog your 2FA code...

deployment of a keylogger means your host is compromised, from there you can do so much you really don't need someone's password...

2FA is for plain phishing attacks. building phishing attacks against 2FA is significantly harder and usually easier to detect\protect from.
Telcos have no responsibility to stop SIM fraud. Telcos have communicated the last 30 years SMS is not secure (travels as plain text) and should not be used for 2FA. If companies have ignored this advise then it is on them.
> But does society suffer when businesses are so wed to capital efficiency? Does society benefit from corporate investment, period? Are earnest investments beneficial to society even if they don't work out?

I'm not sure if this is exactly what you're getting at, but I think there's an argument to be made that companies are a bit too comfortable with simply giving cash back to shareholders rather than using it to improve their position, I think effectively the interests of the company and the interests of the shareholders aren't aligned in this situation. When you give it to shareholders in the form of buybacks, there's no guarantee you'll ever be getting it back, and like we saw in 2020 the times you most want to have a lot of cash are the same times investors aren't really interested in buying your stock.

> Basically, how does the money distributed from buybacks impact society, and could that be improved?

This one is somewhat easier to answer, because the majority of stocks are owned by the wealthy (a quick google suggests the top 1% own 40% of stocks, and bottom 80% only own ~7% of stocks). How they then use that money is a different matter, which would depend on a lot of other stuff and the economy at the time.
Secure/not-secure is not a binary distinction. And SMS-based 2fa is still more secure than password alone.

One thing I've become painfully aware of recently is how all MFA is rendered pretty insecure by various "fallback" processes. I recently switch jobs and realized I had a few accounts using my old work phone as SMS 2fa number. In every case it was ridiculously easy to call a CSR and get 2fa disabled from their end.
The existence of a treatment doesn't negate the importance of vaccination.

I never would have thought that statement was controversial in any way. I'd say the same thing for measles too.

But here we are. Humans are weird.
Slightly off-topic but I'm in awe of Fukamachi's repos. That one person has built so much incredible stuff is amazing to me. Not sure it's enough to get me using CL all the time, but it's very impressive.
Splunk | Data Visualization / Frontend Engineering Roles | San Francisco, CA | ONSITE / REMOTE | Full-time | Benefits + Equity [0]

My team at Splunk is currently looking for data visualization and UI engineers to help build tools & user interfaces to analyze and extract insights from data utilizing state of the art frontend technologies.

Read more: https://bit.ly/splunk-frontend-oct-2021

Feel free to ping me at pwied at company name .com (add HN to the subject) if you have any questions

[0] https://bit.ly/benefits-and-perks-at-splunk
Location: United States

Remote: Required

Willing to relocate: Not for work

Technologies:

Thoroughly ingrained in my muscle memory and cursed to remember til the end of my days: Modern C++, Vim (listed for cultural reasons)

Good enough for government work: Python3 (with type-hints/mypy, PLEASE), SQL

I can be more or less productive in: TypeScript/React/HTML/CSS, C#

Middle-school Latin level: Common Lisp

Forgotten: every piece of syntax I've ever learned of Haskell

Interested in mastering on the job: Common Lisp, Haskell, Forth, Smalltalk, Rust

Résumé/CV: https://www.dropbox.com/s/uta8dp1r9tvg19j/Iris%20Chase%20Res...

Email: "iris" aat "enesda.com"

I've been a bedroom coder for years trying to start a company on my own. Never had a mentor/teacher, one of my greatest skills is my ability to solve problems independently. I treated it like a job, and never made excuses to avoid a challenging problem. The flip-side is a lack of collaborative experience, which I'm not proud of. I didn't specifically avoid it, it just never happened and I'm here looking to change that.

I'm more interested in working with friendly people than "changing the world". I'm no Luddite, but I will passionately defend the old way if I think it makes more sense. I'm very "anti-trendy" but at the same time will jump on the bandwagon if, again, it makes sense. I'm a pragmatist first and foremost (well I might be a purist first but in spite of that I try to be a pragmatist foremost).

As far as tech, I... Don't really care. I know right??? But I mean, everything has it's pros and cons, the right tool for the job is just so much more important than the tool itself. The only thing I'd flip my lid over is the ability to work in Common Lisp (throwing in Clojure for my Ctrl-f gang, hi!) because it really is just so different. I definitely have preferences for what I'd like to do, but it's more of an "I'll know it when I see it" thing than any particular tech stack. I just like programming, high-level or low-level, it's all just fun to me.

So yeah, I'm just a generalist, looking for a challenge! :)
They have an IP space you could track visitors from. This blog post outlines it a bit: https://nknetobserver.github.io/
> community bonding, money laundering and genuine experimentation

To be fair, the real-life art auction world is basically all money laundering, too.
A car or a house being used as collateral are kept by the borrower at their disposal. This means the borrower can benefit from the collateral asset, e.g. by using it or living in it, while the debt still hasn't been paid off. In these cases a fully colletarelised loan can make sense. But this is not the kind of collateral that we're talking about here. We're talking about collateral that is held by the lender in a margin account, or "locked" (in defi parlance), until the debt is paid off, which is the only kind of collateral that can be used in "decentralised finance", because the other type requires a contract (not a smart contract, an actual, legal contract) and the ability to litigate.
Not the same phone encoding challenge, but an interesting feature of the bsd globbing built into bash. The map is the typical map of letters on a touch-tone phone..where "2" can be a, b, or c.

All letter combos for the number "6397":

#!/usr/bin/bash
m[0]=0;m[1]=1;m[2]="{a,b,c}";m[3]="{d,e,f}";m[4]="{g,h,i}";m[5]="{j,k,l}";
m[6]="{m,n,o}";m[7]="{p,q,r,s}";m[8]="{t,u,v}";m[9]="{w,x,y,z}"
var=$(echo ${m[6]}${m[3]}${m[9]}${m[7]})
eval echo $var
Is there a demo I can interact with?
Retype v1.10 now supports Math formula rendering
Ah, the FSK frequencies were moved further apart.

Bell 103A: 1,270 Hz and 1,070 Hz. 600 baud with that narrow a shift would be iffy, especially before phase-locked loops.

Bell 202: 1200 Hz and 2200 Hz. With a full 1KHz shift, 1200 baud could work.
There are also incredibly massive wildfires burning for months all over Alaska, more mosquitoes than anyone has ever seen, salmon runs depleting, and many other consequences that destroy any tourism hopes if we can't get climate change under control.
people invest their money into appreciating assets like stocks
Yahoo did not have a working business model. Google has a working business model. That is the difference.
I think it will matter whether or not the car was operating in FSD or not. People can chalk up AP failures to idiot drivers misusing a feature, and then blame that person. When it's Tesla claiming to be fully in control, that's a different story. Though I guess they're probably not making that claim yet for 'FSD'.
the hell are you talking about? why make out wrong "facts"?

2FA is very useful against phishing:

https://security.googleblog.com/2019/05/new-research-how-eff...
I went to your personal website and would recommend updating the about page.
FWIW I am browsing with Firefox with "Strict" privacy settings and didn't get any popup.
> keeping the car

> Selling a car

You're answering a different question. If I keep the car and the title, what stops me from selling my NFT? Or, even, transferring my NFT to a wallet and then giving the wallet away in the physical world (like selling a MMORPG account)? Or sharing my wallet containing the NFT with several people who can all use it to gain access to the exclusive benefits? "Hey bro, send me your private key so I can get into this club."

There's no legal reason any of those things can't be done.
I really thought it was some attempt to worsen the apparent effects of climate change and got confused when it started talking about house piles sinking on their own in thawing permafrost, not being somehow deliberately sabotaged or whatever the scramble was doing.
This particular saildrone seems to be a larger model: 72' long.
These sorts of comments are discouraged on HN as per the guidelines. Link at the bottom of the page.
Where is it asserted/confirmed that Longhorn == CIA? I don't see it mentioned in the article nor the linked articles (not that I searched exhaustively).
Agree. HN is so much less readable today :(
The protocols waymo and others are and will be offering will prevent passengers from trying to drive off. They will stop vehicle, unlock it and roll down the windows for the cops etc. They will also record outside and in some cases inside of vehicle.

Again, I think you could write a similar protocol. Pull over, roll down windows to allow cops easy access and visibility to your person, and unlock all the doors so they can open them. Maybe do a dash cam plus interior cam to get cops the footage they need that way?

Waymo also will automatically connect to a ride support operator who can do things like give permission for a vehicle search if needed. Not sure how you could copy that, maybe vehicle owners could put a sticker on their cars so regardless of what passenger wants the vehicle can be searched at any time?
BetterUp | San Francisco, Phoenix, Minneapolis, Washington D.C., or Remote | Onsite or Remote | https://www.betterup.co

BetterUp is a personal and professional development platform focused on helping people realize their full potential through personalized coaching, learning resources, and progress tracking. We are a remote first engineering team full of highly talented, mission driven craftspeople who believe in using our skills to have a positive impact in the world.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/betterup

Our open positions:

* See All Open Jobs: https://boards.greenhouse.io/betterup?gh_src=afb02f421

* Agile Coach: https://boards.greenhouse.io/betterup/jobs/3059231?t=afb02f4...

* Android Engineer: https://boards.greenhouse.io/betterup/jobs/2474761?t=afb02f4...

* Data Engineer: https://boards.greenhouse.io/betterup/jobs/1992447?t=afb02f4...

* Engineering Manager: https://boards.greenhouse.io/betterup/jobs/2445233?t=afb02f4...

* Head of Engineering: https://boards.greenhouse.io/betterup/jobs/3255429?t=afb02f4...

* Machine Learning Engineer: https://boards.greenhouse.io/betterup/jobs/2664780?t=afb02f4...

* Senior Full Stack Engineer: https://boards.greenhouse.io/betterup/jobs/3217447?t=afb02f4...

* Site Reliability Engineer (Federal): https://boards.greenhouse.io/betterup/jobs/3395108?t=afb02f4...

Tech Stack: Ruby on Rails, Ember.js, iOS app (Swift), Android app (Kotlin/Java)
Sure, but you're suggesting that they are doing that without any evidence.

This is classic conspiracy theorist rhetoric, whether that's your intention or not.
How could Merck stall those studies? Ivermectin is widely available, you don't need to get Merck's permission to use it in a study.
Prions are a minor risk when you eat them. So, maybe don't grow tomatoes on the grave of your loved ones. Though, I suspect that would actually be perfectly safe since plants don't tend to pass other pathogens despite what we feed them (i.e. manure).

Otherwise, composting is the most natural thing there is. Absolutely everything in nature dies, and mostly does not get embalmed, cremated, etc. Which is another way of saying it composts and gets recycled back into living stuff; some of which ends up in our food chain. Things like proteins are broken down in the process. And that would include prions.

So, absolutely nothing wrong with composting the remains of people. It's a nice ecological alternative to carbon intensive cremation processes or having a lot of nasty embalming fluids dumped into the local environment (which is where it ends up after the body eventually decomposes anyway). Not judging here; but I appreciate people making different choices and being somewhat conscious about not burdening the environment with their corpses any more than is strictly necessary.
> our graph

It's the user's graph. The rest of this I have no problems with.
> Thanks to Terra 360's rapid charging, the time spent is almost the same that you would spend filling gas in your car.

This seems a bit exaggerated. See below.

> The 360 in the Terra stands for 360kW of output which is way above the 250 kW offered by Tesla's Superchargers.

Tesla claims to charge at a rate of 800 miles/hour. If the only thing making Terra faster is more power, they should be around 1200 miles/hour.

Gasoline pumps in the US are 10 gallons/minute (slower if not reasonably maintained). The average car in the US gets around 25 miles/gallon (that includes light trucks and SUVs). That works out to an average filling speed of 15000 miles/hour.

Even knocking 2/3 off that to allow for slower pumps, it will be over 4x as fast as Terra. (And Terra is Swiss, so probably it would be better to compare to European gas pumps which I believe are allowed to go faster than US pumps, and European cars which I believe average better fuel efficiency that US cars).

So yeah, they are exaggerating a bit. For long trips where your fueling break is also often a bathroom and food break and rest break as well they probably are effectively as fast as filling your gas car.

But for just using an EV for your daily travel around town for someone who does not have a charger at home or work and who has nothing to do but wait while refueling, it is still going to be noticeably slower than a gas car.
Really fascinating idea I hadn’t heard of before. Felt “icky” at first pass, but it’s no different to having a separate TOTP gen app, in fact given it stops you from having to copy/paste the code around, possibly less exposure there.

The only downsides I can think of is that if the app local data is exposed, you possibly lose your cached creds and the TOTP seed.. but most apps are toast if there’s a full local data exposure. I guess the other challenge is if you have to do a (full) app reinstall, you’ve got to re do the MFA config. But app reinstalls seem extremely rare these days (basically only when you get a new phone)

Very fascinating idea
Predictive Index | Sr. Database Administrator (DBA) | Boston | ONSITE / REMOTE | Full Time

Our mission is "Better work, Better world," and we take great pride in PI’s power to supercharge workplace relationships and culture to achieve the unthinkable. We’re our own best case study! You’ll be working toward a mission that inspires you, and you’ll be surrounded by fun, smart, driven people day in and day out.

Current technologies include Azure SQL, CosmosDB, Azure Cognitive Search & Redis.

Feel free to apply online (https://boards.greenhouse.io/predictiveindex/jobs/5532261002) or contact me directly jcampbell[at]predictiveindex.com
Not arguing that regulation is corrupt and broken in a lot of ways, but it's also not hard to see that the usual "move fast and break things" development and shipping process in tech should not be used in areas where people's livelihoods (or lives) are on the line.
When I was thirteen, I had the brilliant idea to make my own gunpowder and use it to build a bomb to set off in the field across from my house. I looked up the recipe in my Encyclopedia Brittanica (this was the early 80's) and began collecting the ingredients. I will never forget the ratios: 75% Potassium Nitrate, 15% Charcoal, 10% Sulpher. After pulverizing the ingredients and combining, I funneled the mixture into a spent CO2 cartridge from a pellet gun. I inserted a sparkler as a fuse, and lay it up against a large tree. I lit the sparkler and ran around to the other side to wait for the explosion. After a painfully long wait, I heard a loud hissing sound and saw some something fly and land right at my feet, a jet of flames shooting out the tiny hole. I took off running but it never exploded. I was old enough to realize I had won a dice roll and never played with gunpowder again.
Wow! That is a great visualization of how strong the forces are. It's incredibly strong, I had no idea
I had the exact same reaction. Do we have a tl;dr equivalent for these things?

pu;dr ?
There's no need for yubikeys. we have the ultimate key, our phones.

Most modern phones have SE(Secure Element) or virtualized secure zone(ARM Trustzone) which can act as de-facto key.

Google already uses it to great success(most people are clueless to that though)
I created AirTable spreadsheet to collect all the companies that have sane interview practices

https://airtable.com/invite/l?inviteId=invtzMOjpyMmmowAK&inv...
They already do for the most part though right? That is, they lose a huge amount of money to "identity theft" and have ample incentives to stop/prevent it.
Missouri man selling catalytic converter online forgets to hide meth
RedwoodJS v0.37.0
What I'm getting from this is that Coinbase was/is using SMS-based 2FA? Using anything short of mandatory U2F means the responsibility of this breach firmly falls on Coinbase's shoulders. It's like if you found out your bank uses single-bolt doors for its vault.
Changing the law would of course change the system but paying people with options has significant economic and political implications. The current solution is for companies to agree to buy back enough shares to cover the tax burden when people exercise their options.
Revvable | Founding Engineer | San Francisco, CA | Onsite | Full-time | https://www.revvable.com/

We’re hiring multiple founding engineer roles to work on our Go, gRPC and Typescript stack. We offer engineers:

* Every other Friday off (~26 additional days off per year) + 3 weeks PTO

* A Competitive Salary

* A 401k with a 3% company match

* Health/Dental/Vision Insurance

* Equity in Revvable

* We'll pay for you to learn how to ride a motorcycle and get your M1 license in California (totally optional)

As an engineer during the early stages of Revvable, you'll:

* ship lots of software

* work with great teammates

* make fundamental architectural/cultural/technical decisions

* have ownership over functional pieces of the system

* have lots of opportunity to grow and define your role in the organization

Revvable builds software for powersports dealerships (eg. dealerships that sell motorcycles, ATVs, electric bikes, et al.) The technology that dealerships use to run their businesses has not been significantly updated in the past 15 years, despite powersports being a $30B market. We're building a better cloud-based solution from the ground up to reshape the industry.

Check out our job description (https://bit.ly/34GQjhG) to learn more.

If you’re interested, email your LinkedIn or resume to jobs at revvable.com. If it's a fit, we’ll get back to you within 48 hours.
Best dijon I have found is called "Maille L'Originale." Got it first in the French Antilles but then found it widely distributed in the US. Highly recommend.
Most of the people I know that make any serious money on crypto definitely do report it, which made the founder's IRS thread confusing to me as well. If anything, I'd be more likely to keep it after hearing him say that (go ahead, report me to the IRS, I was already planning on paying taxes on it).

In fact, that threat almost makes returning it the riskier move. Are they going to report all of these transfers to the IRS? Will the IRS consider it income, and then a gift back to compound if I return it?
In 2019, 84% of the S&P 500, 69% of the S&P MidCap 400 and 53% of the S&P SmallCap 600 paid dividends. I would not characterize dividends as "relatively rare", and I'm curious why you think they are.

https://www.streetinsider.com/Dividends/S%26P+500+Companies+...
Re-read my comment. I'm asking if anybody downvoting me can provide scientific evidence that those statements are true. Nobody has, because they're not.

Natural immunity is durable and robust, and vaccinated people can get infected and spread the virus. In fact, according to the Israeli data, vaccinated people are magnitudes of order more likely to get a Delta breakthrough infection than a person with natural immunity is to get reinfected with Delta.
I think GP's point is that the OS usually has a file system cache in RAM.
> I feel like I'm just restating my parent comment

Because you are not listening that it is only about the 3.5mm jack. If they can do a USB-C port, they can do a 3.5mm jack. A USB-C is quite a bit more difficult to deal with than a 3.5mm jack.

> but Fairphone has the rating while being user-repairable. Not being glued shut is what makes it more challenging to get that rating, as I understand it.

What does that have to do with dropping the 3.5mm jack? There are other holes which present the same problem as the 3.5mm jack.

> (In the live stream they also mentioned that a headphone jack would make the phone bigger still.

Making the phone bigger would give them space to add seals to keep stuff out. See, nothing to do with the IP rating.

> I don't know why you would attribute this to malice rather than a balancing of constraints.)

Attributing it to "reasons other than IP rating" is not attributing it to malice. It was pretty clear it was more about making it thinner like every other phone and not IP rating.
NOAA has always had it together. I think working for them might be a lot of fun (unless you have to interface with politics, which I think only a few people there have to).
I'm not crossing a street with you if you're carrying $500K in your backpack everywhere you go.

Physical possession of wealth is a bad long term strategy. Eventually people WILL find out, and you WILL become a target.

One of the main functions of government is private wealth protection. Banks are a feature, not a bug.
"It lets you do a complete end run around the app stores, and lowers friction for users and content creators alike. However, it's technically demanding to get full browser compatibility across mobile and desktop, and not every "browser-based" solution is created equal."

The problem is that you are _completely_ beholden to the same companies that are making money off their app stores, to continue to develop and maintain their browsers' ability to act as competitors to their own app store.