skysight-inc/HackerNews huggingface dataset:
With only the pdf to go on, I address the "flaw" in more detail in these comment threads [0] [1]. In short, I believe the "flaw" is likely to be "we used SMS for identity verification, without additional necessary scrutiny."

The technical barrier to entry for accruing and using breach databases is near-zero [2], same with the barrier to SMS fraud. Both are routine and easy methods for criminal groups with no special technical abilities, and therefore they are likely. Since the onus is on Coinbase to do identity verification in account recovery, a large number of successful takeovers would be a "flaw" in their process, even if it's not a technical flaw (which I would expect to be expressed in language like "vulnerability").

Accepting untrusted, unauthenticated user input as a SMS verification number would be a serious login-related flaw, and certainly Coinbase pentests their login pages. Any competent pentester would discover such a flaw. So between "Coinbase shipped a critical and obvious login flaw to prod" and "a routine and common criminal tactic was employed successfully against them," I find the latter more likely.

[0]: https://news.ycombinator.com/item?id=28720101

[1]: https://news.ycombinator.com/item?id=28720520

[2]: https://xkcd.com/2176/
It looked like for a general purpose animation library for Android, rather than using the native capabilities
That's the rub, right.

If reasonable behaviour and common sense was obvious, there would be no need for CoC or even laws.

Ultimately it devolves into what a majority of the group understands the norms of the group to be. The implicit assumption is that all members of the group have an implicit duty to understand the shared norms of the group (sort of like in the legal sphere where ignorance of the law is not a defense, but unintentionally breaking the law is, provided that the lack of intentionality isn't soley based on ignorance of what the laws are).

E.g. in the case you mentioned earlier, sexualizing co-workers is the wrong thing. Not knowing that sexualizing coworkers is not a defense. If you say something with a double meaning, which you ernestly didn't realize had a double meaning, that might be a defense. You didn't intend to break a rule, and your unintentional rule breakage had nothing to do with not knowing what the rules are. It doesn't mean you don't have to apologize, but it should be enough [on this view] to prevent punitive action (generally, as always context matters).

You could say that feels unsatisfactory, and you're right it does - its squishy and subjective. I don't hold this view because i think its perfect, but just because i think its the least bad of the alternatives.
I think the confusion may be the result of a chain of vague associations (or, perhaps, of the "broken telephone effect"): "adopt a particular configuration" -> regular spatial arrangement -> crystal lattice -> crystal-like -> crystal -> solid.
Seamless Capital | Quantitative Researcher/ Quantitative Developer | Cambridge, UK - Onsite/Remote | VISA | Full-time

Apply here: https://www.seamlessml.com/jobs

Seamless is a Cambridge based prop-trading firm using cutting edge machine learning techniques. We are driven, dynamic and constantly striving for excellence. Seamless trades its own funds in alternative asset classes with a strong track record of success through even the most challenging market conditions.

Our people are exceptional, ambitious and driven to succeed. We thrive in our open and meritocratic culture, where ideas and talent matter more than tenure or title.

We are also hiring full-stack engineers for SeamlessX, see the jobs page for more info.
An open source cybersecurity protocol for syncing decentralized graph data
You don’t need a justification for giving people more choices that they’re free to ignore if they don’t like the terms or circumstances.

More options are better. Nothing about DeFi or cryptocurrencies invalidates or prevents people from continuing to bank as usual. The whole alternative system is opt-in.
Table.ai | Full-time | ONSITE | San Francisco, US

Table.ai is developing a unique platform leveraging the latest advances in causality inference technology to help corporations extract value from their underleveraged data.

Software Engineer - https://angel.co/company/table-ai-1/jobs/1221433-software-en...

Website: https://www.table.ai/
I’m definitely in the pro-vaccine, pro-mandate column, but both 1 and 3 from your list strike me as dubious given the information to this point. Certainly there’s been conflicting information on both.
FlightAware | multiple roles | REMOTE (US timezones) | Houston / US | https://flightaware.com/about/careers/

Hey everyone, FlightAware is hiring for a number of positions, including a UX Lead, Quality Engineering Manager, project managers, full stack web developers, iOS, and SRE. Our team is headquartered in Houston, Texas, but we work as a distributed team and accept remote applicants for work within the United States. FlightAware has built the world’s leading aviation software platform, processing over 180 million incoming messages an hour from over 30,000 feeds—over 150 gigabytes a day and growing—to provide the best, most complete, and most accurate real-time flight tracking services in the industry. We use Python, Rust, C++, Tcl, and JavaScript. We are proud to have built a wide variety of successful products on this foundation that have become central to the aviation industry at large.
When I was at Netscape, marketing had every page of Yahoo up on a wall (printed out!), and there were teams assigned to recreating each and every one of them, verbatim. So, this isn't new.

But, like Steve Jobs said [1], good artists copy, great artists steal. It's one thing to take the essence, it's another to completely reproduce it with your own twist.

[1] https://quoteinvestigator.com/2013/03/06/artists-steal/
Levels.fyi | Remote (USA, CAN), Full-time | https://www.levels.fyi/

Levels.fyi's mission is to help every professional build a better career through the most accurate insights and services. Over 1 million professionals use Levels.fyi each month to find and evaluate their next job. It's a painful process - for people and companies alike. We're building the future of hiring by centering ourselves around professionals.

Roles:

- Senior Software Engineer ($140-185k Salary, 0.2-0.5% Equity)
- Product Manager ($120-165k Salary, 0.2-0.4% Equity)
- Community Manager (Contract / Part-time, $20-30 / hr)

More info / apply at: https://levelsfyi.notion.site/Levels-fyi-Careers-969edc750f1...
Yup agreed all around. How nice :)
Five Aphorisms on Infinity
>A concerning lack of safety data in the majority of studies.

This is the part of Merck's statement that really rubs me the wrong way, and suggests to me that this communication was released with an agenda. The implication is that one of our safest, 60+ year old medications is suddenly potentially dangerous, and this press release is all too convenient when you consider that Merck was working on newer and more profitable alternatives.
> It's also dynamically typed which disqualifies it for large collaborative projects.

I've been around the block for long enough to see how far the pendulum swings on this one. I'm guessing that it starts going the other way soon.
You got any more detail on this?

Most developed contries have digitized their deed system, so I am not sure how you can con someone out of their deed.

Also, back when we did use physical deeds, there generally was owner’s copy and land office’s copy, and on the back of the deed would be the transfer history.

So to con someone out of their deed, you would not only need to get the owner’s deed, but you would also have to get your name added to the land office’s copy.
Did I say, “All Americans”? Or was I making a comment about a common occurrence within the country?
To be fair though this is a journalist's blog, which is more like backstory context or addendum to the actual article in WaPo which to me doesn't feel biased or to push a 'narrative.'

Is there something in the actual article that you feel pushes an unfair narrative?

To me it reports facts, which are scary. I don't think the article uses much hyperbole, but even if one concedes your point there IS impending doom to the people he interviewed. Their houses are sinking and rotten and becoming not livable because of climate change.

I really liked the Newsroom show; there's a great quote about narratives and bias. Sometimes giving equal weight to arguments just for the sake of 'fairness' is inherently unfair on settled topics like basic fundamental climate change facts.

As others have pointed out this type of journalism has some inherent bias simply from the choice of the journalist to do research & write on the topic.

Quackenbush writes in this blog how the hot moldy house piqued an urgency in himself, which he (rightly) feels is important to report on.

It's fundamentally a human interest piece, just like interviewing people who's houses were destroyed after a hurricane.

IMHO this is the most important & pressing issue today and should be #1 news and Quackenbush is right in trying to report more stories that give real human emotional consequences to the reality of destruction.
US rules against monopolies generally hold that the monopolist cannot clone competitors offerings.

Facebook is not yet a convicted monopolist
P13-14:

> During the meeting, Dr. Painter and Mr. Clerici presented a drug, EIDD-2801, as a “cure all” for influenza, Ebola, and nearly every other virus.

> They requested that BARDA urgently invest millions of dollars into their “miracle cure.” Emory’s presentation included limited data, and no data at all from human trials. Dr. Bright asked targeted questions to understand the science behind the drug and its potential to safely treat patients. Dr.
Bright knew that similar experimental drugs in this class had been shown to cause reproductive toxicity in animals, and offspring from treated animals had been born without teeth and without parts of their skulls. Dr. Bright accordingly asked Dr. Painter and Mr. Clerici about clinical trials, including whether Emory had conducted a reproductive study for toxicity, which they had not.
Location: The Netherlands

Remote: Yes

Willing to relocate: Yes

Technologies: JavaScript, Rust, Ruby/Rails, Node, React, TypeScript, Python, C++, PostgreSQL, MongoDB, Vim, Linux

Résumé/CV: https://www.linkedin.com/in/nickyvanurk/

Github: https://github.com/nickyvanurk

Email: info@nickyvanurk.com

WANTED: Software Engineer Graduation Internship [20 weeks] (Open to employment/freelance afterwards).

Can rapidly learn new technologies. Game & web development experience (I like architecture, netcode, game AI, optimization). Build my own 8-bit computer: https://streamable.com/qe3nx5 Optimizing things gets me all excited. Check out this Three.js demo I made: https://nickyvanurk.com/void/ I also run a blog: https://codingwizardry.com/
Yes, a little over $30 a month via Patreon pledges to individual developers.
Most cryptos will fail, but Bitcoin could be here for good
Alaska isn't one entity that can be "upset" or "not upset" about climate change.

The decisions made about Alaskan oil and other extractive resources aren't always made by Alaskans. When you see Alaskan politicians, and people speaking for Alaska, it's a good idea to look into their background and see how long they've been here. It's a good idea to ask whether their involvement is primarily for the benefit of the people here, or for the benefit of people outside the state.

There's a lot more to climate change than just the idea that cold places will become warmer. Much of the issue is destabilization. Here in southeast Alaska, we've had an increase in issues related to landslides, which has all kinds of impacts on local people.

Sure, it's been nicer for recreating some summers that were warmer and drier than the usual 50-degree and rainy summers that are typical for this area. But it's also unsettling, wondering about long-term impacts on forest and ocean ecology.
No, that is not what I said.

If you are allowed to charge rates appropriate to employee compensation, inclusive, then none of it is a problem.

The rate structure, prior to the Bush Administration reforms, would have been more than up to the task, and by the way, would have reduced margins for private entities looking to profit more than they should reasonably by depending on the Post Office...
Wow, well that was a thing I didn't know about. Cool, yet another disturbing way nature wants to make things terrible for me, haha :(

Two "fun" excerpts from the Wikipedia page about Prions[0]:

> Experimental evidence shows that unbound prions degrade over time, while soil-bound prions remain at stable or increasing levels, suggesting that prions likely accumulate in the environment

> It is thus possible that there is a progressively accumulating number of prions in the environment.

[0] https://en.wikipedia.org/wiki/Prion
I was also a "true believer" in CRDTs for a long time, implementing my first ones in Erlang about 9 years ago[1], but my opinion of where they fit has changed significantly.

The one issue with CRDT that I find is rarely mentioned and often ignored is the case where you've deployed these data structures that include merge logic to a set of participating nodes that you can't necessarily update at will. Think phones that people don't update, or IOT/sensor devices like electric meters or other devices "in the wild".

When you include merge logic – really any code or rules that dictate what happens when the the data of 2 or more CRDTs are merged – and you have bugs in this code running on devices you can never update, this can be a huge mess. Sure you can implement simple counters easily (like the ones I linked to), and you can even use model checking to validate them. But what about complex tree logic like for edits made to a document? Conflict resolution logic? Distributed file system operations? These are already very complex and hard to get right without multiple versions involved and unfixable bugs causing mayhem.

Having to deal with these bugs in the context of a fleet of participants on a wide range of versions of the code, the combinatorial explosion of the number of possible interactions and effects of these differing versions and bugs taken together can really become impossible to manage.

I'd be interested to hear from folks who have experience with these kinds of issues and how they have dealt with them, especially if they are still convinced that CRDTs were the right choice.

[1] https://github.com/nicolasff/distributed-counters
Of course most people don't pay taxes on crypto lol, they're libertarian ancaps who don't believe in the role of the state. It's a cesspool of crime.

[edit] there's even a cottage industry supporting folks who refuse to pay taxes in getting second passports and abandoning their US citizenship. [1]

[1] https://www.cnbc.com/2021/07/11/plan-b-passport-tax-break-bi...
NFTYLabs | Python Full-Stack Engineer |Remote (Must reside in the United States) | Position: Full-Time Contract | https://NFTYLabs.org

NFTY Labs (https://nftylabs.org) is seeking an experienced Django/Python full-stack engineer interested in helping our small team build out real world practical use cases for crypto NFTs that include using NFTs as authentication to join communities on Discord, Telegram, Twitch and more. We work with large mainstream brands and celebrities. We are building out technologies for communities with hundreds of thousands of members leveraging AWS and using Django/Python, Postgres, DynamoDB and AWS Lambda.

Your responsibilities will include planning & building new features, fixing existing bugs, and working on scaling performance. We are looking for an engineer excited to tackle hard problems and who can take ownership of complex workflows.

Please submit applications to infra(@)nftylabs.io with the subject line: Python Full-Stack Engineer. Include not more than a paragraph as to why you think you are a good fit for this role and a link to your resume or linked in when reaching out. Feel free to include GitHub links/projects where you have made meaningful contributions that you want to highlight.

While we have team members in all times zones we will prioritize candidates who can work on pacific or mountain time for this role specifically.

It is very beneficial for you to have a more than superficial understanding of how blockchains including Bitcoin and Ethereum operate. You don't need to have experience in blockchain programming specifically. Experience with Telegram, Discord and Twitch APIs is also very helpful but not required.
Fragileness is not a requirement for rarity, you can just as easily print fewer baseball cards / NFTs to begin with to reach the desired circulating supply.

Beyond that though, keys get lost so NFTs do have a mechanism of leaving circulation.
> We will work the kinks out of this protocol, as well.

It's not a protocol problem, it's a purposefulness problem.

You can have the most perfectly oiled and flawless Rube Goldberg machine, but that doesn't mean it manages to become useful because all the kinks are ironed out. At the end of the day, it's still a convoluted way to do stuff no one cares about.
Fast charging shortens battery life.
While this connection is tenuous at best, according to Hofstede's Cultural Dimensions Theory [1], the US is a pretty heavily "Indulgent" culture. In a comparison I did on the website between the US, Germany, Japan, and Egypt [2] the US (closely mirrored by the UK in fact) scores much higher on "Indulgence" than the other listed cultures. There's nuance here because the results for South Africa, for example, are pretty different than Egypt, but it does go to show that the US is a pretty indulgent culture which I can credibly see correlating with a consumerist mindset. That said, there aren't enough studies on this out there, and I think it would be interesting to conduct this kind of research. (And if there is research here I'd love to be offered papers to read!)

[1]: https://en.wikipedia.org/wiki/Hofstede's_cultural_dimensions...

[2]: https://www.hofstede-insights.com/country-comparison/egypt,g...
Wouldn’t bad OCR on a check change the account to be debited, not the account into which it is deposited?
There are several alternatives posted here already, but after comparing several ones maybe a year ago I found Kowl very nice: Nice UI, backend written in Go (quick startup, low memory usage), viewing and filtering of messages, support for schema registry, comes with a Docker image, usable locally and Helm chart for Kubernetes.

https://github.com/cloudhut/kowl
A lot of Alaskans support selling Alaskan oil. That doesn't mean climate change is going to go well for them.
The vaccine has been approved fully by the FDA and hundreds of millions of people have received it.

Not unlike Red Bull and Cap'n Crunch.
Do they just not have awareness of these sorts of mails finding their way out?

I would have expected them to be more careful with what they say
Beware of overly optimistic university press releases. It's hopeful, but certainly not a panacea. In fact, it's not clear if it will work at all.

From your link: "The new study (...) was conducted on prions in solution in the laboratory". "The next step (...) is to mix the mineral with contaminated soil to see if it has the same effect". "I expect that its efficacy would be somewhat diminished in soil".
Silicon valley bubbles are a fun place
You’ve had to pay an extra 2% on everything you buy (as well as everyone else) to pay for the overhead of dealing with all of the fraudulent charges.

Ultimately the entire market cap of Visa/MC/AmEx illustrate how much more we’re all paying over and above the just paying for the fraud directly.
I love my YubiKey but it doesn't work with my phone. Have newer models solved this problem?
Russian Hacker Q&A: An Interview with REvil-Affiliated Ransomware Contractor
The one reason Halifax has such a large amount of expertise on eye surgery was people not resisting that urge.
So am I, and the big harm done here was the Bush Admin rate table reforms. Basically, the Post carries a ton of big publishing and other package traffic at a near loss, or flat out loss, with increases in letter rates and small scale package traffic intended to make up the difference.

It didn't.
Internet archive link for people who can't access the site: https://web.archive.org/web/20211001190851/https://techcrunc...
I think a worse problem is the advertisement-based revenue stream and the analytics enabled by modern technology. They have to keep the audience’s attention, or their revenue dries up. So they try to maximize engagement, which often steers them in a direction that’s more about the feelings of the reader; what’s left is very little room for any serious thought.

There’s also the Twitter mob. If you don’t toe the line to some people’s preferred narratives you start losing advertisers and getting death threats.
Tell me about it. facepalm
Just read through it, it's good! Do you have any other high signal to noise sources for info - I fall somewhere between a crypto skeptic and pragmatist so it's _hard_ to find information that doesn't strike me as breathless PR or people trying to pump whatever they're currently bagholding.
Squid Game Season 2: Everything You Need to Know
> Both are shitty situations, but do you see how much more surprising it is to hear that a court will uphold the criminality of something that everyone seems to do all the time with no consquences

The court didn't "uphold the criminality" of anything because Patel was never charged with anything, and the cop had no idea he was a foreigner when he partially paralyzed the man by throwing him into the ground.

And the court definitely didn't uphold the criminality of the police officer's behavior, where apparently "strong though disputed evidence that he jerked his arm" is sufficient license for the cop to then do whatever he wants.

> there's apparently no political will to fix what amounts to, on the happy path, a trivial inconvenience for a small class of politically unpopular noncitizens?

I'm assuming the assault by a police officer and the complete lack of recourse aren't the trivial inconveniences you're referring to?
I'm not following, could you elaborate?
Common Lisp? Yuu mean the language that got horsefucked like 30 years ago and barely anyone uses? I'll pass lol
Yes, I like the programming interface that Qt provides a lot more than the one of standard C++ and the STL. It's just more ergonomic, more comfortable to write and read, and works great.

> And to be able to develop with Electron people must first learn a not so excellent language, JavaScript.

Statistically speaking, "most" people already know JavaScript. I don't have numbers or stats in my hand, but my feeling is that the number of devs who are working with JS in their day to day is enormous compared to those who already have a good grasp of C++ to the point of being able to consider Qt as a tool, and jumping right into developing with it.

You can kind of see this, judging by the number of new C++ apps vs. Electron apps that get announced in here.
Copying has been in an other nation's playbook for a long time.

TikTok (Douyin really) is really just a copy of Vines for instance.

Facebook would be foolish not to look outward at the competition.
> Why is this news? Is anyone even remotely surprised by this?

> The rules exist to be skirted by those who have the power to shape them.

I know places I've worked before have seen features in competitor products and scurried to implement new features to reflect them. I work on some open source that takes its lead from closed source alternatives. Is this considered skirting the rules? Genuine question, I don't actually know anything about anything.
> The fact that digital copies can be perfect

But you've hit on exact problem the blockchain solved from day 1, you can copy the image (just like you can download hi resolution scans of baseball cards) but the underlying "cardboard" cannot be copied, or copies can be detected with 100% accuracy (depending on how you look at it).