skysight-inc/HackerNews huggingface dataset:
Easily, maybe for the person who did it. A result of lots of experience and knowing exactly what to do.
The point of the zero trust model is that while you as a normal person may trust someone, everyone has the means to verify without having to trust it.

If the devs have written formal models for the system and verified that with a proof solver, you have a reasonable assurance the code matches the spec and that the spec is at least consistent with itself.

If the devs have Property Based Testing suites and fuzzing tools to automatically search for vulnerabilities in the code/spec or introduced via changes, you have reasonable assurances that the development process is thorough and likely won't haphazardly introduce a vulnerability in a change (and actively squash potential vulns that are discovered).

If open source security auditors (who's reputation is core to their business) regularly and publicly auditing the platform, you have reasonable assurances that on top of the code being reasonably secure, the spec itself doesn't have any glaring flaws in it.

If bug bounties have red teams regularly trying to discover exploits, you have additional assurance that if a bug exists, it'll likely be discovered, ethically reported, and resolved before being exploited.

Point being, zero trust isn't about not having trust, it's about not having blind trust. These should be the expectation for all high value software. We should be able to trust in the engineering of software systems like we trust in the engineering behind buildings and bridges.

---

Now with regard to this specific hack, CreamFi failed to do 2 out of the 4 of those things mentioned above and their security auditor only provided a very cursory/high level audit. Their report was not confidence inspiring and should have been a red flag to users to not use the service.

Now compare this with the org they forked their code off of. Compound Finance maintains a formal spec, uses formal methods, has a bug bounty, and receives regular, in depth security audits. CreamFi chose to make changes to a codebase after abandoning the security tooling (formal spec was no longer maintained) and protections that were in place with Compound Finance's code.

Any moderately competent technical user should have been able to tell that CreamFi was (like many other knock-off DeFi platforms) a ticking time bomb. We as a software engineering community however still have a long way to go in making these qualities/flags accessible to normal users.
The parent comment is not griping about intrinsic/extrinsic valuation.

They're griping about the "lag" (30-60 days) in price discovery of market comparables as a non-realtor/banker.
Electric distribution reclosers can be cyber compromised to cause wildfires
I wasn't familiar with your site. Looks really cool, and you support some platforms we don't. Best of luck to your project!

Seems Firebase is the way a lot of folks are achieving Push Notifications on iOS.
wow that looks like a lot of fun! nice work on the project and securing funding, congrats!
Wow, so much negativity! I'm surprised to find that I am one of the few who was super inspired and excited by the keynote. Granted, I'm a VR/crypto fanboy, but it all just seemed like a move in the right direction.
The innovation I've been waiting for is FedCoin (digital dollar).

The details are a little hazy, but I'm expecting real instant transfers (not just between people but also between your own accounts at different institutions) and free access for everybody in the US.

Like crypto, but with real money.
I'm confused, what are Google blocking? iOS famously lacks push notification browser support, but Android's browser and third party browsers on the platform all support it on Android (and have since forever).
The 'Kremlin letter' by Red Army sergeant that started nuclear fusion research
Comparing Nginx performance in bare metal and virtual environments
The author "invented the metaverse" because they ported a text based game to one with terrible visuals that was never really sold or used? It's a strange kind of inventor that never implements his invention or describes it so well that it might be implemented.

If I have an idea for a humanoid servant created from forcefields and holograms and create a mockup with a mannequin and a bucket - I shouldn't be able to call myself the inventor of the holographic-assistant. Further, if that technology ever became slightly plausible I don't think I'd have any special insight because I spent a bit of time doing something that obviously didn't work decades ago.

The hard part about the metaverse isn't thinking up the concepts. That's been done already, multiple ways by many people. The hard part is turning a fictional idea into a reality.
> This is not a cyberattack hack. It is just someone cleverly exploiting loopholes.

Well, while the attacker did not exploit a bug inside the lending protocol code per se that person surely relied on a design flaw. Basically, what successful flash loan attacks do is to manipulate the price of an asset inside a „liquidity pool“ of a single „distributed exchange“ (DEX) temporarily to a much lower value and then buy off this asset cheaply and sell it on another DEX for profit.

To protect itself from a flash loan attack, a DEX protocol should use an external „oracle“ to determine the price of an asset instead of relying on the „in-house price“ (in lieu of a better word). C.R.E.A.M. does not seem to do this. This is clearly a flaw in its pricing model.
Couple of things to consider:

Many of the processes might require the product is pushed and/or pulled through the machinery. If there is no material behind to push it could cause problems within the machines.

Once the continuous process is broken it needs to be restarted somehow. Depending on the type of production this could be days or weeks of work just to rethread all the material through the machines and getting it going.
As for a Linux user that's probably not of big use for me. But it would be great to have more professional graphics tools with Linux support for sure.
Here in Russian, the word for gender literally means "kind" or "genus", it's not related to gender/sex.
Reading this segment feels like it was terminated prematurely?

> Free checking wasn’t free. Instead of most depositors paying a predictable (and relatively small) fee for their checking account, a tiny portion of the depositor base was assessed many, many $25-$35 fees stochastically based on how frequently their incomings and outgoings were temporarily mismatched.

Specifically the "depositor base was assessed many, many" part. Feels like the many before the comma is missing something. Maybe it should be times? "a tiny portion of the depositor base was assessed many times, many $25-$35 fees stochastically"

Not certain though.
Metamaterials are real virtuality while the metaverse is virtual reality.
I`m almost sure that the modern Calabrian sauce Sardella is a descendant of Garum.

Keyword: sardella
Amazing how two lines can be so effective.
no credit for "atomic habits?" -- this looks like notes on that book
From the MIT Technology Review article...

>Some researchers sensed that the young entrepreneurs were in over their heads. The science of in vitro gametogenesis is dominated by a small cadre of university research groups who’ve been working on the problem for years. “When I talked to them, they had no clue, absolutely no clue, how to start a project,” says Albertini. “They were asking me what kind of equipment to buy. It was ‘How would you know if you made an egg? What would it look like?’”

To be honest, this was my first thought. I don't work directly in the field, but in a tangentially related field at an R1 research university, and I read through their research team and definitely got the sense that they were... certainly ambitious.

Obviously, I'm always in favor of more research in transformative technologies, in mostly whatever form that takes; but I do wonder about venture capital as the model for this type of research specifically.
"The felony murder rule is an exception to the normal rules of homicide."

https://www.justia.com/criminal/offenses/homicide/felony-mur...
You realize that banking is a highly regulated industry and that their customers are insured for these events?
Why the healthcare industry should experiment with VR in the Covid era
Doesn't 'it' refer to both inanimate objects and animate objects (animals)? Or is 'inanimate' a kind of term of art here refering to humans and human-like beings (instead of the more common meaning of 'non-living')?
Mastodon's licence: https://github.com/mastodon/mastodon/blob/main/LICENSE

GNU AFFERO GENERAL PUBLIC LICENSE Version 3, 19 November 2007
Tooth decay and the disease that comes with it is a multi-factorial disease - its not enough to simply eliminate "sugar" from the diet.

So, although I agree 100% that we need put systemic interventions to make those that promote a sugary diet accountable for the externalities they create, like hospitalizations, lower quality and length of life, lower incomes and educational attainment etc., We still need to focus on preventing cavities. Cavities are caused by all carbohydrates, including crackers, bread, etc. that have time on teeth allowing the bacteria that cause cavities to digest them and excrete acid on the tooth.

Eliminate enough risk factors and you will prevent the disease - in fact cavities are 100% preventable - with proper hygiene, enough fluoride, healthy diet and early prevention of the bacteria that spreads the disease from childcare provider to baby.
I think an analogy would be we created some of the lego blocks in this experiment but a single cell would be akin to all the lego creations in the world.
I don't think I've gotten an actual misinformation / hate speech / etc. recommendation from Youtube, Facebook, or Tiktok.

On Facebook, I see potentially divisive posts from friends with very different political views. The difference with TikTok is that those friends don't post content.

I think if you explicitly seek out problematic content you can end in a rabbit hole on any large algorithmic app.
For non-hams it may be difficult to understand why hams do this, but collecting "countries" (or rather DXCC entities [1]) is a big deal for many radio amateurs. There are currently 340 countries of which ~250 are "easy", which means that there's a local population of at lease some radio amateurs that make it possible to make a contact with them on a regular basis, but after that it gets "tough".

So there are many radio amateurs (or rather groups of amateurs) who love to travel and hand out new countries to the deserving. For some countries the difficulty is purely in getting a permission to operate a radio amateur station from there (e.g. North Korea), others are almost impossible to access for reasons of natural protection (e.g. Crozet Island) and yet others are very difficult to get to.

Bouvet is the latter, and you need a professional team and a huge budget to achieve this.

There are other places that require some "creativity" to activate - like Scarborough Reef [2], and

There have been previous attempts, the last two ones (both in the last few years) failed due to problems with the ships.

Whoever makes the race to Bouvet (there's currently the Norwegian group linked here, and a Polish group trying to go there) will make many radio amateurs around the world happy, and probably make something in the order of 100k to 150k radio contacts.

I can only wish them good luck!

[1] http://www.arrl.org/dxcc-rules https://en.wikipedia.org/wiki/Amateur_radio_operating_award

[2] https://www.n4gn.com/sr95/sr09.html
Downloading and running ad code costs more money than just paying and installing an ad blocker, especially since they're incredibly cheap if not free.
a) The CSAM scanning on your phone only happens if you specify that you want your photos to be uploaded to iCloud Photo Library. And if doesn't happen client-side then it simply happens server-side with less privacy and security.

b) iPhone parts showing errors issues was a bug that was already fixed and applied to TouchID security validation. If it's something new then it's almost guarenteed that this is a good thing i.e. you're trying to tamper/remove the biometrics components.

c) Apple's customers don't want 3rd party App Stores. It's not a computer to them but an appliance like a microwave. They want security, privacy, moderation, convenience and alternate stores trade those away for features e.g. flexibility, price that no one really wants.
A deep dive into Autocode's new look
> They pay $500m to Accenture to scrub the digital graffiti and hate speech off their walls.

They have like 40k people acting as moderators. They have teams of people to triage issues related to election interference. They have teams dedicated to tracking bot rings and foreign astro turfing.

There is still more to do, but they hardly just pay a consultancy to "scrub the digital graffiti and hate speech off their walls."
So in 20012, when Skype was huge, why didn't this take over? It's not like it didn't happen, people have been poaching rockstars across the globe forever.

But are you really saying that it's only in 2020 that people put effort into outsourcing to cheaper foreign talent?

Or that the technology of remote work is now what makes it possible? I dispute that as well, good remote collaboration has been happening in open source for forever. People who can make it work make it work. It's not the issue and never has been.
Even so, they should at least phrase it as "I agree with the author that..." rather than making it look like it's some brand new theory they're introducing to the discussion rather than the entire premise of the blog post.
Please don't break the site guidelines like this, or like https://news.ycombinator.com/item?id=29038609. We're trying for something quite different here.

https://news.ycombinator.com/newsguidelines.html
In my opinion computationalism is the only non-mysterious explanation of how the mind/brain works in principle. By "computationalism" I mean either any process that can be expressed by reducing formulas in the untyped lambda calculus, or, alternatively, all processes that can be expressed in some parallel approach to computation like the pi calculus. (I've never seen a conclusive argument why the "software" running on the mind/brain must be parallel, though. But there could be such an argument.)

What alternatives are there? Other versions of functionalism seem to boil down to computationalism in the end - although the final verdict on this matter is open. Penrose's quantum approach is falsifiable, which is great, but there is not much evidence for it. Dualism is not compatible with modern physics, suffers from a variety of homunculus problems, and even if it was true, computationalism of the mind would still be the best explanation. (Computationalism does not imply physicalism, although most computationalists are physicalists.) Hypercomputation presumes ordinary computation, most hypercomputers are physically impossible, and there is no evidence that the mind/brain is a hypercomputer anyway.

In any case the article does not define computationalism, so it's pointless.
Interestingly, NC's requirement for student housing is actually done internally by the UNC System rather than by any code authority. The last unsprinklered dorms at UNC were torn down a few years ago.

Interestingly enough, I believe at least some of that was in direct response to the UNC Phi Gamma Delta fire back in 1996.

https://www.wunc.org/news/2021-05-12/unc-chapel-hill-phi-gam...

and do not evacuate with any urgency, if at all.

Yeah, there's an unfortunate "thing" about automatic fire alarms - the "boy who cried wolf" effect. Many automatic alarms go off a LOT and more often than not the reason is either a straight up fault in the system, or at best, a "real, but non fire" reason like smoke from cooking. I listen in on Chapel Hill FD dispatch a lot and I can tell you, CHFD goes to the various dorms around campus all the freaking time for alarm activations, and rarely is the cause any kind of actual active fire. So people get conditioned to treat those alarms as "nothing-burger". It's unfortunate.
As technologically advanced as many aspects of life in the US seem to look like for an outsider, I am baffled that the finance overlord of the world somehow came 10-15 years late to next-gen banking.

I went to an African un-recognized state in 2009 and people already were using SMS-based mobile phone money transfers to conduct daily business or send money to their contacts. I also live in the Nordics.

If a country with an advanced national ID system and a developing country with barely a government could both leap into the next generation of personal finance, what took the US so long?
Warehousing is not housing.
>Australians should all have guns to resist covid lockdown

You just _know_ where this comment is coming from, its so funny.

That belief that guns fix everything is something only two places can produce and one of them doesn't use the internet for the most part, let alone HN.
I think bad faith misrepresentations like this are the primary source of the supposed “impossible discourse” on the “subject.” What “subject” by the way? Who are the specific people who use this supposedly confusing, brand-new meaning of the word “gender,” who are so impossible to talk to?
This is literally a Simpsons bit:

"Well, suppose you got a large starving family. Is it wrong to steal a truckload of bread to feed them?"

https://simpsons.fandom.com/wiki/Bart_the_Murderer/Quotes
we made substantial progress in biology before we understood molecules. this is because it's not necessary to be entirely reductive to understand larger systems.
> stepping it back significantly with aliases and multi-account management tools

PdM: "Oh, users don't want one account? OK, let them make aliases they think are different, and log in that way. They won't realize it's all still one account, even when we show them their picture and list all these ~~aliases~~, er, "different accounts" they can log in as ..."

Users: "Yay, different accounts!"

Analytics: "Yay, one account!"

Advertisers: "Hey, thanks for tying even more of their identities together for me."
The piezoelectric effect is used to do this[0]. This other wiki page[1] has some neat pictures of what the sound field looks like.

[0] https://en.wikipedia.org/wiki/Ultrasonic_transducer

[1] https://en.wikipedia.org/wiki/Ultrasonic_transducer#Transduc...
Still different goals there. You add Capacitor's JS runtime to your PWA then use plugins and other Capacitor-based capabilities.

PWABuilder's goal is more limited in scope: take your existing PWA, no changes, and publish to app stores.

For some folks, Capacitor will be the right answer. But we think there's value in making PWAs as-is run well on iOS.
Building a website is easy. Squarespace, Wix, Wordpress, all can be used with zero technical knowledge.

Driving targeted local traffic to that website is a different matter. SEO is hard, takes time and money and technical know-how, and is not guaranteed to work. Search ads are expensive. Facebook and Instagram pages work perfectly for these small establishments.
People in Canada and Europe have been back to the office at least partially for a long time now.
Many people in NY have returned to the office.
> That's not how the legal system works (or he'd be already in jail) and it is already a broken system. You'd need proof to convict him.

I don't understand your comment. I'm not suggesting that the DEA agent should be able to put him in jail. I'm saying they should not be allowed to just seize the cash. I'm asking if people think it would be ok for them to apply for a warrant to check his email/phone records based on the info they have (man carrying $30,000 cash with an unlikely explanation), and if it would be ok for a judge to approve that warrant. A search warrant doesn't mean he gets arrested.
>I apologize if my strong language offended anyone, that was not my intent

I hate when someone has to write that, the mail is clear, fair and describes a personal opinion, there is no point to apologize, f**ing pc culture.
It may be untold to you, but here in Norway, it lighted up the sky pretty good :D
I don't claim to know what exactly the metaverse will look like, but I remember the first time I put on an Oculus Quest.

The first experience you have is being dropped into your "home" and mine defaulted to a big mountain side house, warm wood, fireplace, massive window looking out into a beautiful valley.

It was virtual but convincing enough and I still sometimes enjoy just taking in the virtual view before or after playing a VR game.

I remember thinking it a bit odd, the actual world around me could be awful, but in here it was just good enough to trick my brain. Throw $10B at that experience and I'm curious to see what happens. Maybe a scarcity-free utopia where everyone can "live" in whatever beautiful environment they want to, maybe a dystopia where you get home and enter your unadorned concrete cube and plug in to your real home, needing just enough physical space to use the VR.

If they can ever get it fully jacked into your brain, I could see people just plugging in and never coming out.
And the absolute worst product to experience in reality.

It wasn't so much that it was bad. Bad can maybe be understood as "product in development". It was non-functional. Nothing on it ever worked in the smallest part.
if you can believe Apple behaves ethically you can convince yourself Meta is ethical too if you try
That's explicitly mentioned at least two times in the article as a primary motive of the founder.
My current level of cynicisms says that if you make someone a gatekeeper, they will use that power.

At minimum, to justify their salary.
Yes, sort of, but a lot more than counting. I think Thai has counting words too, but I think they are not as central to the grammar or as flexible as Karen classifiers.

Sort of like you can say "a sheet of paper" or "5 sheets of paper" in English to count papers, but imagine you could also say "typing on a sheet", or "your sheet is full of typos", or "could you hand me a sheet", where "sheet" is a broad category and that you mean a sheet of paper comes from the context in which the sentence is spoken.

Edit: Another interesting use for them is disambiguation. Super useful if, like me, you're just learning and don't always nail the tones or pronunciation. For example, I might throw in the animal classifier in "ga cha ta doo" just to make sure no-one misunderstands my poor pronunciation of "elephant" as "mountain". That's a crude example, but native speakers benefit from the disambiguation too in colloquial speech.
> The fact that Facebook is uniquely held responsible for the societal problems engendered by the Internet does, I suspect, stem from the fact that Zuckerberg is an obvious target

Interestingly, the most vocal opponents of Facebook are... traditional medias. The same medias that are competing (and losing!) against Facebook for add revenue.

Keep in mind that before Facebook, for a story to get any traction it had to be approved by the "editorial board" of a legacy news outlet. What do you think happened if the owner of the TV station or newspaper didn't want a story to hit the front page?
Wow thanks for the detailed response! I really appreciate it.
NYPD preparing for slew of retirements amid vaccine mandate
The "us" is the working class. I think the implication is they don't really care about their fellow workers, but for the power of union.