skysight-inc/HackerNews huggingface dataset:
Thanks for doing the research, I wish the author of the original article had done the same.
Spite has been a great motivator for me lately. Be like Michael Jordan and take it personal:

https://www.youtube.com/watch?v=Ss5Ndz0tn9o

Then do the bare minimum as quickly as possible so you have time to plan and do what's necessary to change your situation.
Because everyone else doing it still doesn't make it right.
No, not really.

This further proves my point. People never bother to even attempt to do the math. People "know" the truth and "believe" in climate change and "solutions", yet nobody seems to have any interest in actually confirming what they are being told.

It's as bad as anti-vaxxers believing the government is installing tiny remote control radios in vaccines to control our minds. It really is that crazy, if not more.
You can have as many cards as you like.

There are hardware limits on how many you can put in an iPhone, just like there are limits to how many you can stuff into a wallet. Most wallets won't fit 20 cards, either.
I also worked for Twitch and can confirm what you're saying is true. These repo's any staff member had access to - including non-engineering staff.

Revenue for the longest time was as simple as navigating to a streamers dashboard as staff, but they did finally gate that away from staff who don't need to see that info, however I am sure there are other ways to obtain revenue reporting info.

I am assuming all data - including personal - has been compromised but so far, the data leaked is data that most staff would have access to in some way or another. Some may find that shocking, but this was not a "high level hack"
Sorry, wasn't clear enough, tenant ID = customer ID = workspace ID. There is often a benefit though to materializing that ID onto all child tables. If you take a salesforce.com example, every customer has an "orgID", from there have accounts and accounts have opportunities. It's not common for people to put the "orgID" on the opportunity from a data modeling perspective, but when it comes to sharding it gives you a big win.

If you have that tenant discriminator on all tables then it's easy to route it to the appropriate physical and logical shard right away vs. having to do some DB join first in your request to figure out where it goes.
Those sound like pretty young kids. Teens are more actively seeking socialization, but they also gravitate to places adults aren't. Unfortunately it doesn't sound like the new generation of sites like Tiktok is any less insidious.
> Is the requirement to push that deletion to all other SSB instances?

Well if you follow the GDPR: yes. Article 17.2

> Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
Newspapers are a poor analog to social media for this exact reason. A newspaper is the same newspaper for everyone.

The better analogue to social media, at least from the user’s perspective, is direct mail. If someone mails out libelous political fundraising letters, the liability is on whoever wrote the letter, not the postal service. The only difference with social media is that social media has ranking algorithms, but that’s because the volume of social media far outstrips the volume of direct mail. Even Gmail uses algorithms to filter your various inboxes.

If social media worked the same way as direct mail, you’d basically be forced to dig through every social media post within your subscriptions at random to make sure you didn’t miss anything you wanted to see. Which means the primary effect of the algorithm is subtractive. The algorithm sometimes adds content you weren’t otherwise subscribed to, but most of the time, it works by hiding content you are subscribed to. The primary complaint seems to be that Facebook isn’t hiding enough content.

Finally, I think you’re understating the problem with mainstream media. Settling defamation lawsuits out of court, on the rare case that false and harmful news media actually crosses that line, does not even come close to undoing the initial damage. Especially since under US law, public figures—who are the primary targets of media coverage—have a much higher burden of proof to sue for defamation. (Whenever politicians propose reforming these defamation laws, these mainstream media outlets respond with passive-aggressive antics like printing “Democracy Dies In Darkness” on their mastheads. I bet Zuckerberg wishes he could get away with that kind of thing.)
Yet somehow the majority of streamers on the platform make absolutely nothing...

Wealth inequality is underlying in "creator fund" money making as well. The algorithms are skewed towards people that are already rich, popular, and/or well connected. The few people that make it up the ladder from humble beginnings might well be people who were let in to cover the real underpinnings of non-transparent creator economies.

Those few "came up from nothing" success stories may literally well be false encouragement or fabrication just to keep platform engagement and related consumerism up.

Kind of like your friend who invites you over to play video games but they really just want you to watch them while they play because they only have one controller they'll never let you touch.

What you choose to support and invest in matters too.
No, but doing least privilege, separation of privileges, and RBAC correctly is tedious and difficult and slows development velocity, so companies rarely do it well if they even bother trying unless some outside force compels them.

I highly doubt it would be possible to do something like this at AWS, just because hosting multitenant infrastructure and working with the government forces you to implement security since you're being audited and awarded contracts on that basis. Twitch users don't give a crap about the security of the platform. They just want to monetize as quickly as they can, too.

So I'm not hugely surprised that practices and culture would be different even if they have the same parent company, especially since Twitch was an acquisition. Even if not, though, I'd expect security at Prime to be better than Twitch but worse than Marketplace, Marketplace to be worse than AWS, etc. All speculation since I've never worked at any Amazon product, but that's what I would expect.
Ask HN: Do you think games are as effective as passive mediums for storytelling?
Hi, David.
I see the issue now. We have been so inundated with bad actors gaining traction through moderate means to push their extremist agendas that it is inevitable that some people are thought wrongly categorized.

I'm not sure there is a systematic solution to this, each individual must simply do this, appeal the decision to a higher public opinion authority.
> Even the 183 missing Woods files look a little less dire in full context. For one thing, a Woods file is missing in only .03 percent of the 7,000 cases involved in the inventory conducted.

.03% of 7000 cases is 2 cases. But after reading this article (that does all it can to absolve the FBI of its systematic, repeated errors) I don't think it is claiming that all the missing Woods files are related to just 2 cases. I think the authors can't do simple math.
This is a standard SAP system. I just checked the numbers before I put them down here. SAP has been around since the late 80ies and is open source and very little of the code has been officially retired, so the amount of code and number of tables are monotonically growing for 4 decades. Lot's of redundant programs as well. So the code base is huge and the database is of course not completely normalized.

SAPs program environment comes with a built in editor and a relational database, and that the metadata of every table is stored in the database and the program is not stored on the file system but in the database as well. (Which makes tools like github superflous. When you edit code it gets a lock on the database).

So conveniently in SAP there is a database tables which holds all database tables and another table for all fields. Likewise there is a table for all programs and SAP stores all program lines in another database table. So you just need count the number of entries in these tables.

I am not aware of any generated tables, but maybe are some. Maybe 5%. I'd estimate that maybe half of the programs are actually generated code. Whereas "program" probably is not accurate, some of the programs are modules or function pools which are invoked by other programs.
It worked nicely for me, very cool.
Maybe a tombstone record in your immutable system? It is technically marking the account as deleted and the data is unrecoverable if the only encryption keys have been safely purged...
Apple shouldn’t be interfering with other businesses and their users like this. It’s sad to see people here celebrating their inability to run unapproved software.
I'm not in any Facebook groups but as a general principle it's a lot easier to verify a true claim than it is to come up with a true claim from nothing.
Wholeheartedly agree with this. The problem isn't aliasing, it's lazy aliasing which is more I think what GP was referring to (e.g. emp.id instead of employee.id).
Everything about this from being talked to like an idiot (“interwebs!”) to the fugly corporate art tells me this is about no different than any other corporation that’s hungry for your data. It also tells me who they think is foolish enough to use their product with all the left wing revolutionary imagery. I think “useful idiot” is the term? Services these days that throw around words like “privacy” and “control” seem like a way to profit off of people sick of being taken advantage of by taking advantage of them in a way that makes them feel good.
There's probably a TV show in that
Layperson here. It’s my understanding that energy can neither created not destroyed. So if a reaction needs more energy otherwise, then how do catalysts provide that extra energy needed for the reaction yet not fail energy conservancy law?
#1 This is a pretty big claim. Extraordinary claims require extraordinary evidence. And yet there is no evidence.

-or-

#2 It also sounds like they're saying if you remove various letters of the alphabet from a cipher, you can get a readable message. This is not notable.
The Zodiac didn't inspire the song, the Hound of the Baskerville's inspired the song.

"So the Zodiac actually emerged some months after the song was finished"

Story behind the song "Dire Wolf"
http://deadessays.blogspot.com/2012/10/dire-wolf-1969.html
On a related note, how far can a single Postgres instance get you?

If you had some behemoth with 32TB ram and 1PB storage could all of motion fit?

I’m obviously ignoring the obvious single point of failure here, but sometimes the simplicity could be worth it if you’re willing to handle that.

I’d be curious to hear about a site that’s in the Alexa 1000 architected how I describe.
Let's say payroll is half their total costs. Payroll taxes plus income taxes works out to somewhere around 40-60% of the remaining amount. Health insurance is probably in the 10% range per year, leaving them with a $50k salary. Costs are not, of course, quite that high.

As a point of comparison, a talented voice actor can gross around $125k per year, working from home as a freelancer. I don't feel that the Critical Roll actors are being overcompensated at all.
It's a complicated question.

On the one hand, barring natural disaster/fire/water leaks/etc., your library book will last a good long time--at least until the library gets rid of it because they need the space and no one's checked it out recently. On the other hand, even with inter-library loan, it's not super-accessible especially if it's in, say, a private university library. And if something does happen to it, it's gone.

On the other hand, a single digital copy won't last as long. But subject to a lot of factors and caveats, copies of that digital artifact can last indefinitely.
Hacker News Search and Dark Theme
IIRC twitch was always very resistant to Amazon processes like COEs, so I wouldn't be surprised if they pushed back on stricter access controls too.
>"that people respond with a fight-or-flight response to ideas that challenge their core beliefs?"

I believe a large part of this is due to people's personalities. Namely, Openness and Agreeableness. (https://en.wikipedia.org/wiki/Big_Five_personality_traits) It stands to reason that someone who is low on openness and not agreeable would react poorly to their core beliefs being challenged, and vice versa.
NASA will shoot rocket at asteroid to test ‘planetary defense’ strategy
Nice bit of high school math after a google search. Good job. Pointless though.

You are pointing at solar energy coming into the planet as if it were some magical juju bean that can solve all of our problems. Well, it isn't. Had you actually read the report from which you got some of this information you would know just how wrong you are in trying to reduce the entirety of reality into a single variable: Solar energy. The whole idea is preposterous.

In your attempt to look smart and convert power to energy using a google search you fail to understand the key difference between power and energy in real life.

Using a simple example: The solar array I built in the back of my house can produce a theoretical maximum of 14,000 W any given instant (power). Assuming that is true (not even close), this means I could collect a theoretical 104 kW hours of energy over eight hours (also not true). Talking about energy is pointless because we do not use energy, we use power, we use the instantaneous version of, in this case, using electrons to do some work.

If you add-up the energy production capacity of all the power plants in the US (multiply their power output by 24 hours and add them all up) you can easily believe we have enough to charge 300 million electric cars. And that would be wrong. We do not have enough POWER generating capacity to support such a fleet. The energy calculation isn't correct because you can't use it to deliver power beyond the instantaneous power delivery capacity we have. The only way this would be true is if our future electric cars sat there for 24 hours to charge.

And then there's the reality that converting solar energy to anything useful is a horribly inefficient process. My 13 kW array covers about 80 square meters. That is a theoretical 80 kW (round numbers) of solar energy. At best, with all conditions being perfect, I have generated 11 kW. My average peak over several years in operation is about 8 kW. So 10% of the energy that hits it, at the PEAK moment in the day, much worse on either side of that curve. Counting energy, when what you need is power is a fantasy.

Oher solar energy conversion processes are even worse, as an example, geothermal is about 2% efficient, at best.

Do not reduce reality to a single variable. It isn't. It is a complex multivariate problem.

> About your first link from 2014: renewable energy is already cheaper.

You probably didn't even read it. Did you? The paper has NOTHING to do with cost. It has everything to do with "can we achieve zero emissions with renewables". And that means all renewables, not just solar. The answer is a solid "no".

> About your second link: no one has claimed that we all damage already done is reversible.

No idea what you are saying. You probably didn't read that either.
I'm guessing you were pretty far out from the center. That price doesn't align with the experiences of people I'm close to who live there, and who I have visited. But they do live in a more central area.

Also, the HDB-style housing is often less expensive, as some are pretty run down and not likely popular with expats, but they are cheaper.
Firefox Wikipedia Page Contains Recursive Screenshot of Itself
Hi David. Your website is a blank black page.
Extraterm: The swiss army chainsaw of terminal emulators
But then that's Apple issue. Simply refer the Apple fans back to Apple, or advise them to switch to Android.
Fluid Truck (cargo van sharing)
1) The marginal cost to produce something is a fraction of the cost of bringing something to market. Here's an analogy from the car business: Merck buys the blueprints for an experimental vehicle that seems promising but may or may not be useful, Merck spends $ to test is rigorously, develop the factories to bring the vehicle to production, acquire necessary signoff from regulatory bodies, distribute the vehicle through its logistics/retail network, support the vehicle, etc. All of these things have costs.

2) Almost no one pays anywhere near list price. In the US: Not the ~20% of people on Medicaid, not the ~20% on Medicare, not the ~50%+ on private insurance, and frankly not the <10% that are uninsured. You pretty much have to be well off, uninsured, and also not use a discount program to be charged list price. Also definitely not the rest of the world.

3) Merck partnered with Ridgeback, who had already licensed it from a non-profit group drug discovery group at Emory University. The terms of that agreement are unknown, but presumably the $ will go towards funding future drug discovery.

Finally, assuming Merck does do all this profitably, the return to the US gov't will be massive. Merck has paid an avg of 18.4% income tax over the past 4 years. They also employee 70k+ employees who are paying taxes, etc, etc. If Merck can get the product to market faster (which they'd be highly motivated to do), the benefit to the US people and economy would be far greater than the cost of treatment.
I have many Pis lying around as well. I have DNS servers, torrent servers and I also run a k3s cluster on RPi3s. It's okay-ish for these kind of projects.

However as a desktop it is not. The Pi400 I am testing as a desktop generally doesn't run smoothly. I've tried various distros and now I'm toying around with NetBSD. The browser (firefox/chrome) are slow and the system constantly gets "stuck". It's not smooth for daily use, e.g. writing a blog post? Even that will not be a smooth experience most of the time.

My SD cards are EVO Pro 60 MB/s read 90 MB/s write cards. What are you using?
Little clue: there is no "next nevel" when you're working to realize some other asshole's dream. The "next level" is more of the same, with a small pay raise and a more prestigious title if you're lucky.

If you want to do something meaningful with your life, stop making rich assholes even richer and get the fuckers to invest in you so you can realize your own dream.

Be a fuckin' entrepreneur instead of some entrepreneur's flunky.
That's sad. How does that work with the GPL license of the kernel?
I think it is pretty common to store the salts alongside the password hashes. They are used by the same pieces of code so it is generally unrealistic to think that your salts will be secure if your hashes are obtained.

Salting isn't really supposed to make a hashing algorithm secure by being secret but by being unique. Unique salts make hashing more secure because an attacker can't re-use a single rainbow table for multiple hashed passwords. That, combined with a sufficiently computationally difficult hashing algorithm, it makes it prohibitively expensive to reverse the hashes of all your users.

This may not be enough to protect high value users or those who use fairly common or easily guessable passwords. This is part of why it is so important that you don't reuse passwords. It's also why your application should reject all known passwords using something like https://haveibeenpwned.com/Passwords or any of the "common password" list you can find online.

Edit: If you do include a secret that is stored seperatly that is added to the password and salt when hashing, this is called "peppering" and these peppers are generally not unique per user.
If I may stretch the truth a little to rant, at this point the only systems that have any hope of being merit-based are opaque.
Might have been better if you said that upfront.
I did the same a few years ago and it was relatively painless, however there are many people that do not like confrontation and "stonewalling" is not an easy task. NY Times understands this and preys on a specific segment of the population.
> Twitter has by far become a more egregious platform for society

I'm always surprised that Reddit gets a free pass in these discussions. Reddit has been home to some of the most egregious bad communities and misinformation hives.

Their invisible-hand moderation system allows a small number of moderators to completely control the conversation in a subreddit. Banning dissenters and removing comments that don't agree with what the moderators want people to see is an easy way to make it look like everyone is in natural agreement on a topic.

The weirdest part is that most tech people readily admit that Reddit is full of terrible content, even on the front page. The common retort is that it's not so bad if you create an account and manually remove all of those bad subreddits from your list, but by the same argument Facebook isn't a problem because you can simply not subscribe to the bad content.
All you need is a reference to the book that describes the grammar of that language.
Let's say you sell a data product that generates around 1TB per day, which is downloaded by every customer once. On AWS/GCP, that's roughly $80/day/customer in egress costs, which would make the minimum pricing of the data product $30K/year to break even SOLELY egress, assuming each customer only does the download once.

It's basically not possible to offer something like this on AWS or GCP, you have to run your own server somewhere with flat bandwidth pricing. If I were still in the data business, I'd absolutely be moving everything to R2.
Norway to hit 100% electric vehicle sales by early next year
Usually when a particular interpretation of a word renders it utterly meaningless then that interpretation is not the correct one.

In particular circumstantial can mean 'pertaining to circumstance' or it can be one of several other meanings derived from the same root. One of which is its noun form "Something incidental to the main subject, but of less importance", which sounds like a more reasonable interpretation. Or it may even be one of those words that only has a particular meaning in a legal context.
I'm wondering what kind of check would be good enough. Who decides which governments are corrupt? Even if you limit the customer base to democratically elected governments, who is the final authority on which elections are genuine?

If there's an election in [country] and [politician] decisively wins, and [opposition group] says the election was fraudulent and has some weak evidence and a bunch of protests, who decides if they're legitimate? This describes the 2020 Belarus election, but it also describes the 2020 US election.

Munitions suppliers operate in pretty much every country in the world, producing everything from rifles to nuclear bombs for use by that country's government. If all of that is okay, why are hacking tools going too far?
Howdy all, author here! Sharding our Postgres monolith was a huge undertaking for a small team. We got a huge boost from folks that joined within weeks before the switch-over date. If you’re interested in thinking about problems like this, I’d love to chat. Plus we’re also hiring across all roles—check my profile for details.

I’m happy to answer questions about the project here, feel free to reply below.
I'm actually very happy to hear they finally added a flag for payout access. It's been years since I was there and my eyes bugged out when I saw what I had access to without needing it.
It's definitely carefully (not prominently) disclosed, you just gotta go to this privacy page:
https://www.apple.com/legal/privacy/en-ww/