skysight-inc/HackerNews huggingface dataset:
> The hashes of previously unused passwords were brute forced, or passwords were reused across sites from a previous plain text dump and exploited?

I believe there are documented instances where previously not leaked passwords were cracked. Of course not 128 bit random strings, but still passwords more "complex" than what you previously posted. If you have 100 million hashes to try, you will crack some. People are generally have bad passwords, especially in 2012, even if the plaintext weren't available anywhere...

> So practically infeasible to exploit?
It depends on how strong the password is and how much money you have to spend. For 32 USD I get an hour with p4d.24xlarge that has 8 graphics card, that in total can do about 175 * 10^9 hashes per second. 20 hours (and 640 USD) machine time (not wall clock time) on that machine can do what 30 days on my old PC does.

> If it's "just a simple brute force problem" […]
If you can give me a bound on the number of combinations, and an AWS account to bill, I and many others would gladly attempt to crack your hash :-). But if your second hash is >9 alphanumerical characters we will probably just burn electricity to no avail.

I don't even know what you are arguing?

EDIT: Now that you have some numbers of hashing rates and cost, you can figure out how expensive different passwords are to crack with different approaches. Two common dictionary words with two numbers appended? 6 random alphanumeric characters? Then think about how expensive the cheapest non-leaked password is in a database of 100 million users are...

Is it bad to store plaintext passwords? Yes, obviously. Is some hashing better than none. Yes, obviously. Is salting your hashes much better than not. Yes, because with a salt, your first password wouldn't have turned up on Google / in rainbow tables. Is it even better to use a proper PBKDF. Yes, with a pretty aggressive PBKDF, brute forcing even low-complexity passwords become expensive very quickly, and we get the benefits of salting "built in".

Can SHA1 / MD5 hashes be cracked even if not the _exact_ password-hash pair have been leaked previously? Yes, very much so.
Precisely. If oil prices get high enough, the Canadian oil sands will begin to be a profitable operation again, and will scale back up to take advantage. At this point, while we're still weaning off of oil - for probably the next 50 years - we need the lowest carbon, least cannibalistic sources of it possible.
Can you elaborate on your second paragraph or link to the full story?
The claim is not that the individuals buying cars are signalling, it is the public policy (incentivizing individual EV ownership while exporting carbon emissions) which is hypocritical.
Twitter sells MoPub mobile ad network to AppLovin for $1.05B
Whites not born in rich anglo countries are still perceived as privileged despite a lot of them growing up in much harder conditions than your average black person in tech.
Why did non engineers have access to repos?
>Can the tribes call up the police to have them enforce treaty rights that the oil companies are infringing?

Police aren't supposed to be judge, jury, and executioner. A protester trespassing on pipeline company's property is a fairly cut and dry case that the police can act on it. Some treaty dispute between the tribe and the pipeline company is vague enough that they'll need a court ruling before they can act. If the tribes can get a court ruling, they can definitely call up the police to enforce those treaty rights.

>> Yes, that's how police works.

>Yes, that's the problem.

I'm baffled by this. You think that being able to call up a police to report a disturbance/crime, is a problem?
Most EVs sold are produced by legacy companies
No, you won't be able to sue if you claim that, based on the leaked source code, your IP was infringed because leaked (e.g. stolen) source code won't be admissible in court as evidence
I know a little about cars and I'm still confused - I think I just have a very different view of the relative "it factors" between each pair of languages. De gustibus...
Similarly in Texas: https://www.kxan.com/pipeline-exposure/ . The KXAN reporter (Jody Barr) who worked on this expose was followed by sheriffs in multiple counties and stopped for no reason on public roads.
I'm not sure why people downvoted this comment until it was killed, perhaps because it is making a pretty significant claim without any citations.

Since other people have cited sources to back this claim up, I've gone ahead and vouched and upvoted it.
Apple doesn't block third-party NFC / Apple Wallet use. They have opened it for certain use cases, including transit passes in many cities: https://support.apple.com/en-us/HT207958

It's incredible convenient. No need to use the fare machines -- just top up using the Apple Wallet app. Sounds like it's coming to Paris soon: https://www.macrumors.com/2021/01/06/apple-to-support-paris-...
Why would I spend a lot of effort on getting myself addicted?
Isn't that intended? That extra revenue should also come with extra pressure to deliver cost-efficient products as new parties may want a share of that sweet subsidy.
Initially it may look like the subsidy is just throwing out money, but if the subsidy is kept around for a while it becomes a bounty for future competitors.
The whole point of devops is to automate everything according to best practices, so fuckups are a thing of the past! The only fuckups, of course, will be Terraform state issues.
While I was in grad school, I had to teach some math-heavy engineering courses. This lesson came through very clearly there, and learning it early made my teaching much more effective.

You can't tell students anything, you have to show them, and you have to know where to start when you show them. Sometimes this meant starting back in the prerequisites to the course (a brief refresher on ODEs) and sometimes it meant arguing by anology before returning to the topic at hand.
Former Data Scientist... This person is just attention seeking.

The only people at FB who design algorithms are ML Engineers under the SWE ladder. You can immediately disregard this piece.
”In 2013, in a comprehensive review covering 96% of the literature on Mother Teresa, a group of Université de Montréal academics reinforced the foregoing criticism, detailing, among other issues, the missionary's practice of "caring for the sick by glorifying their suffering instead of relieving it, ... her questionable political contacts, her suspicious management of the enormous sums of money she received, and her overly dogmatic views regarding, in particular, abortion, contraception, and divorce". Questioning the Vatican's motivations for ignoring the mass of criticism, the study concluded that Mother Teresa's "hallowed image – which does not stand up to analysis of the facts – was constructed, and that her beatification was orchestrated by an effective media relations campaign" engineered by the Catholic convert and anti-abortion BBC journalist Malcolm Muggeridge.”
In event sourced systems, where the state of an application is stored as a sequence of immutable events, one way of solving the "delete" problem (e.g: GDPR) is to have all the events encrypted to begin with.
The deletion (without performing a rewriting of the events) can be considered executed by simply "deleting" the key used to decrypt the events.

The information is not deleted per se, but it is not usable anymore. Now, if you have access to new means that allow you to break the encryption, then yeah it could be a problem.
The high-Tc superconductors are nice, but they are not a panacea. They move fusion from "absurdly" to just "desperately" uncompetitive.
Also don't forget AARP is open to everyone. I'm 33 and a member.
> if opportunity was truly equal, the data should not show a big gap in the choices of work made between races

I can understand that would be the case wrt race but what about different cultures?
I think most major brick and mortar banks allow you to open account fully online.

Try going to random bank websites and click on "open account".
> Are they taking about the same Facebook? I find it utterly boring and only use it for messenger anymore

You are not 'most people' then
This is a major plot point in the excellent fictional series Occupied, which is worth a watch on Netflix.
Wait... you could see who looks at your page?
Rule 35, quoted either as "if there is no porn of it, it will be made" or "if there is no porn of it, you are required to make it".
Couldn't the runtime just allocate a specific Python object representing the case where the iterator is complete? Make that object implementation-specific, hide it as best as you can, write documentation stating that users should not use this value directly, and if they do - they voided the warranty, and should expect evil to befall them. (ultimately, you can't prevent the user from doing really dumb things e.g. editing the Python binary directly)
The code that runs at reset on the Arm CPU complex for the RPi: https://github.com/raspberrypi/tools/blob/master/armstubs/ar...
Scandinavians curb Moderna shots for under 30
They sure do, but having worked at such a place, the companies are using way more free labor in open source software than they are giving back.

In a way, everyone is doing that as well. I certainly use more free software than I contribute free software / dev time to free software
It's really nice, thank you for sharing it!
Replacing joycons and SSD is more maintenance than repair.
Couldn’t you have a signed token for ever capability that they’ve purchased? The app could easily check the signature without exposing the private key.
Any papers you can link to on this? Sounds interesting.
The problem w/ PD-DBS is...the practice of implanting and programming the gizmos is much less standardized that it should be. Yes, there is some patient to patient variability...but you can kind of predict what will happen and how the patient will respond simply by mapping the anatomical location of the electrodes using Lead DBS or FSL or ANTS. The folks with well placed electrodes - the pro-movement/anti-tremor effect is remarkably consistent. The folks who either are implanted a few millimeters outside of the targeted nucleus, or roll in the door with some bizarre setting...not so much...

That being said, I have heard for less measurable symptoms, i.e. OCD or depression...DBS implantation and programming is much more inexact, as you describe.
Another happy customer of SaaS Pegasus! Got me up and running quick and features are constantly being added.
If you think of it as a family that keeps obstinately driving both cars the same amount despite massive cost differences its weird but you could think of it as a mixed fleet of delivery or work trucks that are all needed regardless, the question is how you manage or prioritize upgrading them.
This naturally evolved on my mind to, "Whose (or what) life are you thinking of when you think of your own?"
Another good reason to never hire anyone overtly political, especially those who have proclivity towards histrionics.
"wellness" settings can limit the amount of time per day she spends doing it if she wants to alter her behavior.
The better question is, why did random engineers have access to the financials of the streamers on the platform, without having to go through a break-glass, audited, emergency access escalation.
Except it's not really from scratch. While we are starting to see A64-only cores, A64 was obviously designed to run on the same cores that also run A32/T32 code.

There are A32 features that A64 carries over which no one else in the 35 years of RISC ISA design since 1985 has seen fit to copy -- the optional shift/rotate of one ALU operand being the obvious one. Would they really have done that if it was a clean sheet design? If it's so great, why hasn't anyone else done it?

Also no other clean sheet ISA designed for high performance since 1990 (it's a short list: DEC Alpha, Intel Itanium, RISC-V) has included condition codes. Even POWER acknowledges that a single condition code register is a bad idea and has eight of them instead (the others just use integer registers to hold long-lived conditions).
The luxury car tax doesn't really apply to new cars. If the seller is registered with the govt as a seller of luxury goods then it does not apply.

https://www.canada.ca/en/department-finance/programs/consult...
Your boy at darkpatterns.org would love that gem. I don't know if you can give it a more succinct name other than, you know, lying.
> It creates a Hunger Games mentality within teams and makes doing anything that actually matters virtually impossible, generating an infinite sequence of half assed 6 months projects that get systematically abandoned as soon as the people responsible manage to get promoted or switch teams.

That's a bit of an over dramatization, PSC is just peer feedback, and is very similar to Perf reviews at Google as well as other large SV tech companies. Having done both I didn't experience this "Hunger Games mentality" you described.
Recognizing that the odds of this thread turning into a ****show are high, a piece of general advice:

Note whatever you feel compelled to say within the first 5 minutes of your deciding to leave a comment here. Discard it. Write an entirely new comment. Post that instead.
Sometimes people differentiate by, for example, saying "research mathematician" but I think the meaningful distinction is: do you spend (an appreciable fraction of) your time creating new mathematics...
Most sales reps are not especially well-compensated... it is a brutal job. The sales superstars and sales execs earn a lot but IMO absolutely deserve it. Any of those guys work WAY harder than any software dev. And have no idea how much money they're going to make until last day of the quarter. Rough stuff.

Lawyers I can see the case against, but remember that they are paying off a ton of debt, and missed a couple years of earnings in law school.
If the problem is just getting something that will hold in metal studs, I'd go with some nice beefy (say 3/8" diameter? that will seem like overkill to some people) self-tapping metal screws. Set the drag on your drill or impact so it stops before bottoming out, then go the rest of the way carefully so you don't strip out the hole.
If the group wants to incurr the costs what does it matter?
i don't think that's a good comparison. think how many flights a single F1 race "causes". Not just the team members, theirs cars and equipment, but the millions of fans traveling to races around the world.
It probably could be fine for public user data that you want to spread out and be somewhat resistant to censor from governments.

> but that's not relevant to the point I'm trying to make.

why do you talk about it if it isn't relevant?
IRAs and Wealth Creation
It would probably depend a lot on what you're building

Though I think the "fun work" point is really interesting and worth a broader discussion
Please do not use leading commas. It doesn’t make any sense. Where else do you ever use them? Do you use them with an IN clause? What about in JSON?
> But in Minnesota, a financial agreement with a foreign company has given public police forces an incentive to arrest demonstrators.

I must have missed it. What’s the incentive. Are the police paid by the number of arrests or something else?

> Police have arrested more than 900 demonstrators opposing Line 3 and its impact on climate and Indigenous rights

Identifying where problems are is, it think, important. So, where these people doing illegal things or arrested for doing legal things? Police enforce laws but legislatures create them. Is there an issue of bad laws a legislature needs to look at around protesting?
More formally, this is the origin story for Simpson's paradox: when you combine subgroups, trends can disappear or even reverse. The more dimensions you analyze, the close to 'truth' you can get.

This is why you have such varying claims about stuff like women earning equal pay with men. People who want social change (activists, politicans) group together the entire population, and come to the conclusion that women make 83 cents on the dollar. But when you break out along other dimensions (age/YOE, occupation, hours worked), the gap is reduced. But never eliminated!

What I'd really like to do some day is be smart enough to replicate https://www.metafilter.com/126704/with-numbers-like-these-wh... and see how more recent census data compares.
The variance of personality between individuals is around 40-60% genetic in origin (i.e. genes have a huge impact on personality). Given this, if you believe personality has any impact on career selection at all, a differing distribution of career selection between sexes and races would be an expected outcome, no discrimination or bias necessary.
You are badly mistaken if you think the right wing is only, or even primarily, "the friends and family of the ownership class".
I'm pretty sure that was sarcasm. I disagree with said sarcasm, because CDK takes you one layer away from the actual thing that gets run but gives you a much nicer thing to work with so it can still be a good trade off; writing rust (or whatever) "obfuscates" the underlying CPU instructions but it still turns out to be a good idea.
The Cornell Law dictionary that you cited is a good summary of what lawyers and judges are likely to think: Evidence that implies a person committed a crime, (for example, the person was seen running away from the crime scene). There must be a lot of circumstantial evidence accumulated to have real weight. Compare to direct evidence.
More context here: https://www.reddit.com/r/IAmA/comments/q1fsvz/comment/hfeyph...
Unfortunately youtube is just as bad or worse than Facebook for leading people down extremism rabbit holes.
Key management is how many comply with GDPR today. They encrypt the PII and associate it with the user. Then, when someone requests their info to be "deleted", they zero out the encryption key.
No it isn't. It's worked for decades and the new forms of it are even more effective. Other countries are doing it with great success.
Yeah, used EVs depreciate quickly. I'm comparing new Tesla Plaids to the C8 Corvette and due to depreciation its looking like the C8 will be much cheaper, and much more fun to drive. The C8 will drop 30k in 5 years according to C6/C7 data, whereas a Plaid will likely drop 70k. If I spend less than $800 a month on fuel the C8 is cheaper.

Currently C8s are appreciating their first year, which is really weird.

The Model S is really chonky at almost 5000 lbs, which is the same as a 4Runner.
We're definitely posting on a site where being estranged from somebody karma-loaded and powerful is something you very much do not want to be.
Dude, the git master branch is divisive, somehow. There will never be an end to it, it's an entertainment/outrage complex with billions in funding.

Ignoring class divisions and real-world material conditions while we get rich and kibbitz about trivialities is the whole point, you can't run out of trivialities.
It isn't u-boot, it's something totally barebones.
Read your own article.

NPR is reporting that prosecutors describe him as an incel. Prosecutors say that he identifies himself as an incel and posts on incel websites.

From your own source:

> "According to the indictment reviewed by NPR, Genco maintained a profile on a popular incel website from at least July 2019 through mid-March 2020. He posted frequently on this site, it alleges."

Other outlets repeat that he self-identifies[1] as an incel and even committed a crime that pays tribute to an incel "hero" that that specific community worships for murdering people.

1. https://www.fox19.com/2021/07/21/man-scouted-ohio-college-ma...
Why not George Clooney is a member of SAG (actors union) as is Daniel Craig.
Am I missing something here? Is the pipeline company calling the police in bad faith? ie. they're reporting protesters even though they're not on pipeline company land? Is the legal situation regarding land rights in that area so conflicted that it's impossible to know who owns what? Even if there are appeals going on, there should be some sort of current decision about who can access/use the land.
If you use PayPal to pay for NYT, you can cancel via PayPal and never speak to anyone.
To be fair though, I don't believe Sabine is involved in any nuclear fusion research, so changing her mind on this doesn't necessarily put her own funding at risk. Changing your mind is easy when your next meal doesn't depend on continuing to believe something.

In fact, she might even stand to gain if funding gets diverted from fusion research towards other projects.
Apple Pay cards are stored in a special piece of hardware. That the limit went from 8 to 12 in later devices implies it has fairly limited storage space.

Loyalty cards are unlimited. I have dozens of those.
Yeah, echo'ing on here to be extra clear. What is open-sourced holds a write-lock while rebalancing. So that it rebalances sure, but it's only marginally better than a dump/restore. You can still read yes, but I'm not sure of many applications that can be okay with no writes flowing to a table for hours while rebalancing is happening.
“As close to a perfect meritocracy as [he] had ever seen”
Meanwhile in Australia: electric cars are getting taxed more to support the aging oil infrastructure
Malaria Vaccine Endorsed for Wide Distribution by WHO
Full text: https://legiscan.com/OH/text/HB376/2021
Because it would just replace one set of inequalities with a different set?
They're usually business websites, I find.
That's so cute!!!!! I think I'll add it to my personal site, ty :D
This has probably also lost us virtuosos in other more positive fields.
I think MoPub was profitable as well, and Twitter made more money than just 3x their investment.
Aliases rarely add clarity in my experience. An alias is just an extra lookup when I need context. It’s a waste of mental swap space.

Inlined subqueries are creating entirely new projections so they need descriptive names. If you are doing this you should consider a WITH anyway.
You give CloudFormation a list of instructions. It accepts it and gives you an ID to watch for updates, then it goes off and executes them.

Terraform executes a list of instructions. It executes them in front of you while you wait.

Both are fine until you run into something like this:

I'm pushing a Elastic Container Service Task Definition change via CDK. A CloudFormation change is submitted, and I wait for it to finish. In the background, it's trying to do the update but the update fails due to some misconfiguration with the new container.

CloudFormation doesn't fail or return an error. It times out after an hour and reverts the change. I have to know to dig into the AWS console to find my failed tasks to view the error.

If I did this update via Terraform, I would get the error back in my console quickly as Terraform is directly telling ECS to make the change. With CDK, the CloudFormation changeset is generated, it is submitted to CloudFormation, then the tool polls the AWS API for progress updates. Sometimes you get specific messages back, sometimes it fails and you need to go in and see what it failed on.
Why your personal data matter
Something about this data doesn't quite make sense. According to the website:

> This leaderboard shows you how much money the top Twitch streamers have earned from August 2019 until October 2021.

However, ex-top Twitch streamer DrDisrespect's channel was removed June 26, 2020 - well within the range reported above by the site - but he's nowhere to be found on the list.