skysight-inc/HackerNews huggingface dataset:
I've seen people bring this up before and to play devils advocate here I've wondered before if this is more because white people/couples are seen as the default.

For example have you ever noticed how when a white guy achieves something it's reported like, "Physicist John Smith wins nobel prize", but were it a black guy it would be reported as, "Black Physicist John Smith wins nobel prize"? And beyond the title the content of the second article will often be how white guys are over represented and that this is a sign of progress.

So perhaps this is what we should expect to see given any article which discusses white women as a group is probably in relation to some racial issue faced by black women.
I can’t believe this “CoC” meme actually propagated.

Project maintainers should assess whether these CoC pushers are actually bringing any value to the project.

These CoC’s feel like a way to remove someone you don’t like from a project without any real productive basis. A weapon used by folks who like to feel self righteous when they “cancel” people who don’t align with their ideologies.

Adults don’t need a “Code of Conduct” to know they should be civil and respectful. If there’s to be a CoC it should only state “get rid of anything that gets in the way of good code” and they should start by booting these CoC nazis who are making their childish fragility’s other peoples problems.

Don’t like something someone said? Talk to them personally before wasting people’s time and resources.
Controlling the pitch of the blades is how most helicopters work.
> See also Wire who had serious crypto and promises to open source everything, but to my knowledge the server side was never released

The wire server code is open source AFAIK [0]

> This repository contains the source code for the Wire server. It contains all libraries and services necessary to run Wire.

[0] https://github.com/wireapp/wire-server
Write Videos in React with Remotion
Correct me if I'm wrong but isn't it totally different from a large organization seeding a torrent, because everyone downloading data from them is also likely seeding the torrent too while downloading it, while anyone using the gateway is not also storing any info on their machines?

Won't this gateway make it less likely to have some sort of p2p app take off, because why help out peers at your expense when you can get what you want from Cloudflare at no expense? Or maybe I'm looking at IPFS wrong - I interpret it as something meant to become popular (meaning much more non-programmers would use it than programmers), but I suppose if it remains a small community like torrenting, then it could remain effectively decentralized despite Cloudflare's gateway, because of how many users are being peers instead of solely leaching
You're probably unlikely to have anyone knowledgeable lay out the exact means by which crypto can be used to evade income taxes, but it's a pretty well known that it's used that way.
Minecraft and Roblox are two fundamentally different propositions. So no, it doesn't.
If trad banks did that, people would riot.
Anyone care to speculate what the flaw in their SMS recovery flow actually was? It's hard for me to think there's even a safe way to implement SMS based account recovery. They would be smarter to just turn it off.
That's a good tip. I just speculatively typed "!r cats adjust" into the search thingy in firefox and got lots of nice reddit threads.

Someone somewhere (probably duckduckgo) thinks 'search on reddit' is useful enough that there's a shortcut for it.
`navigator.storage.persist()` will prompt the user to allow persistent storage for your site, so data won't be evicted under storage pressure (for IndexedDB, service worker registrations, localStorage, sessionStorage, etc.)

https://developer.mozilla.org/en-US/docs/Web/API/StorageMana...
Biden Administration Seeks to Regulate Stablecoin Issuers as Banks
And even within the US this is true for the IRS but may or may not be true for the state in which the person lives.
Phishing or malware would be obvious avenues for someone to gain this information not from Coinbase itself.

If people reused passwords, they also could potentially have cobbled together 6000 valid username/password/phone combinations from previous hacks of other services.
Agreed. If you’re not working the literal one objectively worst job in the whole world you should never complain about anything
SEEKING FREELANCER | GLOBAL | REMOTE | React.js Developer

Design your lifestyle as a top freelance developer, with the freedom to work however, wherever, on your terms. Freelance work is defining the careers of today’s developers in exciting new ways. If you’re passionate about working flexibly with leading Fortune 500 brands and innovative Silicon Valley startups, Toptal could be a great fit for your next career shift.
Toptal is an elite talent network for the world’s top 3% of developers, connecting the best and brightest freelancers with top organizations. Unlike a 9-to-5 job, you’ll choose your own schedule and work from anywhere. Jobs come to you, so you won’t bid for projects against other developers in a race to the bottom. Plus, Toptal takes care of all the overhead, empowering you to focus on successful engagements while getting paid on time, at the rate you decide, every time.

As a freelance developer, you could join an ever-expanding community of experts in over 120 countries, working remotely on the projects that meet your career ambitions.

That’s why the world’s top 3% of developers choose Toptal. React Developers in our elite network share:

- 3+ years of professional experience

- Professional experience with React is required

- Experience with system architecture or leading a software team is a strong advantage

- Full-time availability is a strong advantage

- Project management skills

- A keen attention to detail

If you’re interested in becoming part of the Toptal network, take the next step by clicking apply and filling out the short form: https://topt.al/4Vc7QP
Case in point. Here's the line of code that introduced a bug in a contract that was ultimately worth $32M:

https://github.com/openethereum/parity-ethereum/blame/4c3217...

https://blog.openzeppelin.com/on-the-parity-wallet-multisig-...

If you look at the associated pull request, it added over 2K lines of code, and removed almost 1K, spread across 20 different files. 5 files have changed so much, GitHub doesn't even show their diff by default.

It was reviewed by one person in a single day.
I mean, if it wasn't a bug that it was expecting German, then it didn't do anything wrong. The most I could see feasible would be, if you press the wrong decimal separator, the system asks if you want to change or correct the locale setting for math
There is no notion of “same time” in a distributed system — what if a client locks a line and disconnects?

Also, it leads to a poor user experience.
Deref | Software Engineer | Remote USA | Full-Time

Looking for engineers with Cloud experience and a passion for UX/DexEx.

You'd be working on this thing: https://exo.deref.io/

We're a pre-seed funded startup on a mission to help developers build better services.

Two open engineering roles:

UI Specialist: https://circular-raclette-f11.notion.site/Lead-Frontend-Engi...

Generalist: https://circular-raclette-f11.notion.site/Dev-Tools-Engineer...

Primary tech stack is Go + TypeScript/Svelte.

Contact jobs@deref.io
Location: Chicago
Remote: OK
Willing to relocate: No
Technologies: SaaS, eCommerce, react, node, many others.
Résumé/CV: https://jameswilson.name
Email: james@jameswilson.name

I have over 20 years of experience on many different levels of the tech stack, including extensive management experience.

I've led teams for Citibank, Wall Street Journal, Hawaiian Airlines.

I've worked with many emerging technologies such as VR, AI, self-driving cars, 3d talking avatars, AI-powered, easy-to-use breast cancer detection software, I have even created a project for the President of The United States.

I am looking for Technical Product Manager, Technical Project Manager, VP/Director of Technology, Scrum Master, Solution Architect, etc. roles.

https://jameswilson.name

james@jameswilson.name
My First Industry Job: Lies, Deceptions, and Layoffs
Sure, I guess. I would tend to argue that with hardware access they can do a number of things, though:

- They can install a wifi-enabled* keylogger that exfiltrates your OTP. Yes, they have to use the OTP before you do, but that seems solvable to me--just program the keylogger to transpose one of the six characters that comes after your (now known) password.

- They exploit any number of likely plug-and-play vulnerabilities in common OSes (e.g. https://www.thetechherald.com/tech-news/disable-plug-n-play-...).

- They steal your computer. Are you using FDE? If not, your cookies are sitting there on disk waiting for them.

- They...steal your phone next time you forget it at your desk. ;)

Are there scenarios where TOTP can protect against a non-phishing attack? Yeah, I can construct one if I really have to. (I think you're thinking too locally; my top argument for TOTP would be that I can rarely be sure the identity provider has implemented reasonable quotas against password brute-forcing--and who knows how well they secure things like server logs against rogue insiders?)

But if you tell me you use TOTP because you're afraid of a local attacker plugging in a keylogger--and not because of phishing--I think your priorities are out of whack. :)

* Or they use a covert channel, but I'm not serious about this part: https://dl.acm.org/doi/10.5555/1267336.1267341
> By the time we had scientist-priests people didn't know why they were Christians, to begin with.

What do you mean?
People make fire exits.. because they can. All jobs suck if you prize freedom. I’d probably do more gardening in fire but I could never fire on a similar load of work in a gardening job.
Wonder how many people follow this reasoning to the next logical conclusion and realize that there is literally nothing to differentiate the coins at all from regular banking except for the lure of speculation.
That didn't answer my question. How does Signal supporting Mobilecoin or Session supporting--whatever this is--impact your usage of Signal/Session?
I'm not sure about that either TBH! If you copy the to address (0x22f542cd394fba213df8d1f6c46f454b74e05503) and paste it into testnets.opensea.io then you can see the collection here: https://testnets.opensea.io/0x22f542cd394fba213df8d1f6c46f45...

The contract has no mention of opensea, so they must be reading it from the blockchain somehow - but I guess etherscan doesn't display these tokens in a similar way for some reason. It's all pretty new to me and I definitely don't have a super joined up understanding of it all!
This collection of links to the actual decks is quite helpful. Thank you.
Not really. Most _good_ companies are really flexible for employees they value a lot in terms of remote work, so this is not an issue. And they will likely have contingency plans to go mostly or fully remote in case they realize they are losing too many people.
Mid-senior is more like $300-400k.
>> Coinbase made everyone whole

No, I don't think they have. The document says they will, not that they have. I personally know someone who was had 2FA and tends to be security knowledgeable and was struck by this on 6/7, which is well past their claimed date, so either they are lying or the hacking continues undetected. He has had no ability to get anyone on the phone who will help with the issue. He lost less than $2,000, but it is ridiculous how crypto currency combines the worst of the wild west with the worst of banking with the worst of crappy customer service.
So in the name of being inclusive they're bullying someone who is not a native English speaker for not knowing the nuances of political correctness in a foreign culture? Cool cool.
Those are small technical things and while blockchain has technology, it is more of a social change, which is harder and different.

Blockchain is getting the heat social networks should have up front. There are sufficient bad actors that blockchain will be dangerous for most people's financial well being, like social networks are for most peoples mental well being.
Indeed the primary usage was text and string manipulation; it had a huge following in the 70s and 80s in the humanities. However, like with most languages, all the bases are covered for complex functions, mathematics, etc; it just never got as much traction in those spaces. Far as I know it was the first language to use associative-arrays, it also supports backtracking (like prolog), and meta-programming (code generation during runtime), map functions, lambda like functions, etc. It really had it all!
Ask HN: Do you think web3 is a hype or a real thing about to happen?
These days I keep reading about web3 and how it means the next iteration (revolution ??) of the web and how it will protect free speech (?) and some other advantages.

I liked a lot the period of mid to late 1990 until mid 2000s where I was mostly communicated with strangers over internet and focused on learning things. I installed my first linux version those days, setup a mail server and then later a http server, played with Netscape and Mozaic. Remember using Pine to read emails and I remember how many nights I spent downloading resources from mailing lists as the internet was cheap during the night.

What a wonderful time going from linux to window 3.1 to windows 95 back to Fedora and Redhat and waiting hours with enthusiasm to install a new OS and playing with what it had to offer, discovering almost every default installed program, tweaking and sharing and learning.

Do you think that web3 will really work? My scepticism is related to users hosting content for other users. I don't see yet how this will truly work at a massive scale. But of course I did not read everything about this subject so I am sure there are things that I miss, maybe trends that I am not aware of.
A blockchain doesn't necessarily have to be currency in the sense of something you use to buy and sell things. It's also a decentralized to store data that shouldn't change unless authorized by an owner (owner here = possessor of a private key). Namecoin is an example - a domain owner can update a name record whenever desired and as long as everyone is using the blockchain a centralized authority cannot prevent the owner from making changes, and a centralized authority cannot make changes the owner doesn't want without the owner's private key.
Why Do We Think That Inflation Expectations Matter for Inflation? [pdf]
I think a genuine "trust in science" (i.e. in the method alone) manifests itself primarily as a desire to learn about the world first-hand. "Why does this happen?" "Let's make an experiment and see if we can find out!"

I'm not just talking about kids. All of us would do well to keep an objective mindset, experiment, and hold opinions lightly enough to change them when the data tells us otherwise.

Ironically, this kind of trust also causes us to question the opinions and conclusions of scientists, wanting to replicate their experiments or look at studies with similar subject areas—because it's the method we trust, not the (imperfect) people who are practicing it.

On the other hand, people bemoaning a "lack of trust in science" are (perhaps unwittingly) encouraging people to look to scientists like they might have to priests in bygone eras.
Maybe partially "strawman argument": when someone refutes an argument by proposing a counter point that refutes a related, but different, argument. It can even be stuff like: "Senator: I will vote to increase the public transportation budget. Public: Why don't you care about education?"

So here maybe more "survivorship bias": the bias of looking only at the top performers / the most visible ones, or here "those who made it". Ex: "Interviewer: How did you get to your position? Politician: I worked hard! I spend countless hours doing XXX etc...". Many other persons might have worked just as hard or even harder, but lacked the connection or simply the luck to make it.
I bet that control of email address + SMS 2FA was sufficient, alone, to recover the Coinbase account password. Lots of systems permit this kind of recovery, and while I may tell a technical crowd "if you use SMS for 2FA, that's on you" less technical users may not have the requisite background to understand the security tradeoff they make in doing so.

The "flaw," in my reading of it, was to support SMS-based account recovery at all. But I'm not necessarily right here, and open to alternatives.
Is "urban elites" already taken? because this sounds like the exact same thing.
Shopify reportedly surpasses Amazon in online traffic
They setup a company in an offshore country like vanuatu and use an offshore bank to change the crypto into dollars avoiding capital gains tax etc, but its the offshore company and bank that facilitates the tax evasion.

Just because every one thinks they know how it works doesn't mean they know how it works, thats why I am questioning it. The truth is its pretty well known how tax evasion works but it doesn't use crypto.
I think it's bad from a moral hazard point of view. These institutions increase their exposure to risk. The interventions exacerbate inequality and other issues. These centralized intuitions are resistant to reform. Reform that does happen increase government reliance.

I don't think serious people are advocating for zero interventions. We want a more resilient and fair system by design. Our centralized financial system has made interventions more common and larger in scale. Centralized vs decentralized is a cost/benefit and risk trade off. I personally think we've gone too far in centralizing our financial system.
Location: Malaysia

Remote: Yes

Willing to relocate: No

Technologies: React / React Native

Résumé/CV: harithzahid.com

Email: mharith.dev@gmail.com
I like this. They are basically making a call to self insure against these types of incidents and paying out of their own coffers. It makes sense since recovering the stolen crypto is near impossible (as designed).

It's funny how everything old is new again. We are just reinventing FDIC insurance for crypto.
How do we know this is not an FBI honeypot?
Re: Bitcoin scaling it's worth looking at the Lightning Network. Much faster and significant throughput: https://lightning.network/

This is what Twitter is in the process of implementing through Strike.
I do not have specific answer for Coinbase. Typically, the flaw would be in modifying one of the form inputs to get the code delivered to a different phone number. That usually works out to either modifying the "destination number" client-side form value, or swapping in an edited/reused session token from a different login session's MFA challenge, to exploit missing ownership checks on the various underlying pkey object IDs.
It's sad Tox never succeeded in getting widely used, as it solved a lot of problems (almost, multi-device was in a beta branch last time I used it).

Fully distributed (while current solutions are centralized or, at best, federated), no single entity to be attacked, no dependency on phone numbers, being blessed by a server, or strange coins.
As a matter of fact I'm an "enthusiast" already, but since I was using the HE tunnelbroker I was banned from several services, I'll have to get a VPS with a /56 or smth and wireguard over it. I'm a bit uncertain still about MTU so I'm thinking about just fragmenting stuff on 1500 and take the penalty hit (still can't get v6 in most of residential Sweden)
I'm in no way arguing that they shouldn't notify people/replace money/..., I just wonder where the confidence for the claim that it was just SIM swapping comes from.
Fires evolve according to fuel availability, wind, water and so on. They aren't active, intelligent agents commanding vast resources in a constant search for newer and better ways to socialize the losses and privatize the gains.

Have you ever known a fire to intentionally cultivate moral hazard?
That's a great argument - it works for any upcoming technology!
I'm a CRDT newbie, but I'll take a stab, hopefully someone can correct me if I'm getting it wrong.

After a quick reading the "CRDTs go brr" and the wikipedia page, I think CRDT gives us a mathematical strategy for resolving conflicts. It doesn't mean that the end result will make sense.

The Wikipedia article gives an example of merging an event flag represented by a boolean variable. So the var in this case means that "someone observed this event happening". So the rule for merging this var from different sources is simple, if any source of data reports the var as true, the merged result should be true as well.

The implication is it matters what the data represents, not just whether it is a boolean or a string, etc.

I'm guessing that a colloborative notes field, or a "did someone call this customer" boolean might benefit from a CRDT more so than keeping track of bank account values.
You honestly believe that we will return to a medieval era if the gulf stream is disrupted?
To make mayonnaise you start with egg yolks and mustard (and maybe other seasonings): the mustard helps the mixture to emulsify. You can put more mustard in it, to make a mustard mayonnaise, or add more mustard later.
> but it is ridiculous how crypto currency combines the worst of the wild west with the worst of banking with the worst of crappy customer service.

Crypto's value is because it is the wild west. Otherwise, it'd be gold: custodians holding the commodity for owners, most of it locked in cold storage, fully regulated, and governments pursuing theft whenever reported.

Eventually, the end state desired will be reached (regulation, customer service, insurance, pursuit of value theft, etc), it's just taking time for governments and Big Finance to catch up.

EDIT: https://www.cnbc.com/2021/10/01/defi-protocol-compound-mista... (DeFi bug accidentally gives $90 million to users, founder begs them to return it)

https://en.wikipedia.org/wiki/Cryptocurrency_and_crime
Convex | San Francisco (3/2 hybrid ONSITE) | Full-Time | https://convex.dev

We're a rapidly-growing team building a next-generation development platform for dynamic serverless applications. We have a ton of interesting challenges in the distributed databases space as well as in modern web development frameworks and SDKs. The founding team includes infrastructure/storage/database leads from Dropbox and engineering lead from Google Photos ( https://www.linkedin.com/company/convexinc/people/ ).

We have very strong funding from top investors, great feedback on early prototypes, and now it's time to build out our early team!

Looking for:

1. Web frontend/fullstack engineers who are well versed in the modern web development ecosystem. This includes familiarity with and strong opinions about TypeScript, React, npm/yarn, etc.

2. Backend engineers who love solving tricky systems problems, ideally with Rust experience.

Come join us! Email us at: join@convex.dev