skysight-inc/HackerNews huggingface dataset:
"email from FBI", and the Nigerian FBI office at that ... Reminded - a professor of a Moscow University couple months ago received a call from Russian Central Bank advising him that his account in some bank is being actively targeted by scammers/hackers, and that he needs to temporarily transfer the money to the special holding account the Central Bank rep provided, so the professor did. Some time later the scammers started to target the professor's condo - the police agent called him informing about it and asking for help to catch the scammers - when the scammers come with the prepared documents for the condo sale, professor would need to play the part as if he doesn't know what it is a scam and to sign the documents, receive the money and after that to give the money as evidence to the special agents in the car near the condo building. And professor did as he was told. So far - no money, no condo, no bank account with the significant sum of money...

Or as our corporate anti-phishing/etc. training - which was forced again upon us last month - instructs "Got a call from John from company A ? Hang up and call the public phone number of the company A and ask for the John."
The pack I built has a balancer, that's what all the red wires on the photograph are for. It uses a charge pump to move some charge around so that the high cells get clipped and the low ones brought up. It keeps the pack within 2 mV. The unit it monitors is the cell group, all 10 of them have a wire to the balancer and a ground for reference. It is very accurate and it wills substantially contribute to the life-span of the pack.
I think anyone who founds a new field of scientific research may fairly be called a visionary. As for extinction, I did not see any place where he denied that it could be caused naturally. More relevant is whether it is anthropogenic and/or detrimental.
No, actually. All domains use an alias but this was sent directly to my primary, but not sent to any of our historic or present domain WHOIS contacts.
Apparently "Signing a file is straightforward" heh no, this can not be said to improve upon GPG's interface(*). But it will be cool to see where it can go.

(*) Hiding signing behind a command that's called keygen is not the interface we deserve.
Germany here as well. I have never heard of event-based overdraft fees, only interest-based. Which makes this transaction reordering pointless
Actually was unrealistic in some parts of the world during 2020 due to the extreme lockdowns.
A human wouldn’t survive the acceleration before it, so I don’t think surviving the punch through matters.

This thing causes 10000 G for a sustained time on the projectile. To put this into perspective above 14 G even fit and trained individuals tend to black out. Blood centrifuges use 1500-3000G for 5 to 10 minutes to separate your blood plasma from the red blood cells. After hours of 10000 G acceleration a human body will be a red goo stratified into density layers at the wall of the vessel.

Punching through a membrane won’t faze the goo much comparatively.
Classic Mods and Old GTA Games Didn’t Need to Die for These Unfinished Remakes
Democracy.
Oh no. Somebody was mildly mean to me on the internet, whatever will I do? I can't just BLOCK or BAN them, that's impossible!
But still... the FBI don't speak to you like this and wouldn't overprovide information like this.

The only time I've seen the FBI talk like this is when they already have a trusted relationship with you and an open channel and they're off the record.

Just because a server is coerced into sending an email that is signed, it does not mean it is from the FBI.
By the title of the post, I was expecting to see an example of where to use Pin<> and was surprised to not even see it mentioned...
Hoo... Ho. That's a bit much.

"half PR" & "politically inconvenient" are an unnecessary assumption of bad faith. Patio11's not doing PR or propoganda.

Disagree and/or add to the discussion as you see fit, but let's try to be a little more generous... especially to a member with such a history of contribution to the community.
It is moving faster than light, but c, the "speed of light" constant, is only called that because it's the speed of light in a vacuum and water isn't a vacuum. The constant c is actually a fundamental constant of our universe relating spatial and temporal dimensions, which is why going faster isn't possible (that's time travel) but the velocity of photons in one medium or another is just an observable fact like the viscosity of a particular brand of jam.
Ah didnt realize swift has no runtime. Thanks!
Yes, LiFEPO4 would have been preferred but the Bosch BMS doesn't know how to deal with that chemistry. There are some interesting developments, have you looked at these?

https://www.youtube.com/watch?v=kYx097cVR48

If I had free pick of chemistry I probably would have gone with those. 250 Wh/kg sounds about right, I'm running the cells in a very conservative regime though, topping them up to about 80 SOC and discharging to about 20, so my effective range is smaller but the battery life-span will be very long, many thousands of cycles. The balancer also helps with that.
a = a['k'] = {}; # An Infinitely Nested Dictionary
> GitHub acts as a trusted third party here, and you have to trust them not to lie about people's public keys, so it may not be appropriate for all use cases. But relying on a trusted third party with a professional security team like GitHub seems like a way better default than PGP's Web of Trust, which was nigh impossible to use.

Hopefully that's a false dichotomy and the entire Free Software community doesn't end up reliant on Microsoft to host all our keys for us. The article goes on to mention key transparency, though, which does seem like the right solution.

I note that rekor (the transparency log implementation used by sigstore) already supports signing with SSH keys[0], so this TechRepublic article about it[1] from March (which lists only "GPG, x509 and Minisign") is already out of date.

[0] https://github.com/sigstore/rekor/blob/main/types.md#ssh

[1] https://www.techrepublic.com/article/a-new-linux-foundation-...
I mean, it's the same over here in Portugal as well. SEPA standard transfers are free, but SEPA instant transfers have a flat fee in every bank (Unless you have a sort of premium account)

Perhaps your country's the outlier.
The email address seems to point to EIMS (Enterprise Identification and Management Service according to https://bja.ojp.gov/sites/g/files/xyckuh186/files/media/docu...). The email address is also listed at some guide at https://www.justice.gov/tribal/page/file/1260671/download.

My guess would be that there is some integration point somewhere to EIMS that allows requesting/granting some access & takes the email template from submitted form.
> When async is visible in the type system it means you need to write things like iterating containers twice

It should be noted that this is only if the type-system in your language is unable to properly abstract over containers and their capabilities.

If it is powerful enough however, then you can write the code once, under the (important!) assumption of short-circuiting in the case of errors.
We know how to do interiperable DSLs for IO, see eg IO monads in Haskell, or ebpf in Linux. And Erlang could adapted for embedding, it's already designed to isolate its processes in a vm out of the box, so wouldn't leak back to the host language...
"Modern" frontend JS is increasingly async. Yes, it's not true async, but it still has all the problems, but the benefit of not locking up the UI is worth the pain.

Even old frontend JS was async in that events could be triggered by the user at any time, and in any order, and xhr and image loads requests were async as well.
Is it a solved problem in relation to hydrogen vehicle refueling?

In theory, yes, we can pressurise things very very fast. It does cost money and space (larger tanks), which makes it impractical for everyday solutions.

I still don't get how hydrogen can be cheaper than electricity, since creating green hydrogen via electrolysis takes around 4-5 times more electricity than it can actually produce. Blue/grey hydrogen is just natural gas, which doesn't make it any more environmentally friendly than just running a straght-up CNG car.

In my country the electricity price could quadruple and it's still cheaper than gasoline or diesel. The closest H2 refueling point is in a neighbouring country. And no one is rushing to put up a comprehensive network of $2 million a pop H2 stations.

An example from Sweden: https://www.h2euro.org/whats-h2appening/sweden-more-than-tri...

News from 2017 about how Sweden will TRIPLE their number of H2 stations from 4 to 12 by 2020!

It's now 2021, almost 2022 and the number of stations is... still four.

(Meanwhile a single supermarket chain in Finland has opened 222 new charging points during Q2-Q4/2021)

This is a huge chicken and egg problem. Someone needs to front up truckloads of cash and bureaucracy fighting time to put up a comprehensive network before regular people will shell up cash for H2 vehicles.
Finally, a constructive comment instead of a bunch of legal stuff and fantasy performance figures. Thank you very much, I'll look into this.

edit: Hm, the power supply looks to be a LiPo pack, the other two options are no longer available. But very nicely executed kit, now to find a way to power it from a wall socket.
It's easier to control your grow lights than to write the equivalent for someone else. All the unspoken assumptions about how the system ought to work are yours. Therefore you don't have to fill in the gaps of someone else's attempt at describing what they want.
> As someone who used to really love Rust, this makes me quite sad.

The current async story is still an MVP and I too dislike it. In the months before async, the ecosystem seemed on halt, waiting for async to land on stable Rust. Since then nothing has changed. The ecosystem "degraded" noticeable and has not recovered since.
Maybe in future async will be great, but right now I try to avoid it.

... I still love Rust
Driven by teenagers, executed by adults.
Show HN: The new nano currency symbol: Ӿ
Top Countries with the Highest Number of Internet Users from 1990 to 2021
They could get that question 100 times per week, but I doubt it.

They have more than 6k issues on GitHub and not a single one mentions blockchain.

It seems more probable that they just wanted to piggy back on the Discord news.
A much more succinct summary than I gave that hits at the heart of the CC issue - the banks want you to spend more than you have.
Is this what Google Jacquard turned into?
Did the "one of our close partners [who] recently buckled under a ransomware attack" have contact details for "[you] and other sysadmins", to target the emails?
@AtlasLion you are right real world performance matters. We test extensively with actual workloads, and the speed up holds there too. For example: lots of real world BI queries are repeated over smallish data sets of 10 to 50 GB. We test that size factor and pattern all the time.
Yeah I know, but I think the gp is thinking of nasty debugging sessions that come from parallelism, not concurrency. Concurrency issues one can step through with a debugger on a single thread.
> But improving geometric mean would require improving all queries.

No. Improving the geometric mean only requires reducing the product of their execution times. So if you can make the two 1 ms queries execute in 0.5 ms at the expense of the two 1000 ms queries taking 1800 ms each then that’s an improvement in terms of geometric mean.

So… kind of QED. The geometric mean is not easy to reason about.
Web3 Critiques, Analyzed
Banking fees? Never paid any as far as I can tell, not for the ordinary things. My bank here in Norway won't pay a bill if there isn't enough money in the account. It sends me a text and an email to say what happened and doesn't charge me anything.

The only fees I pay are a small percentage for management of mutual funds.
Why is Facebook transformed to Meta and Google not to Alphabet? Shouldn't it be MAAAN
They’re talking about interchange fees you pay on every transaction. Which is where the money to fund rewards comes from.

In the US you’ll be paying something like 1% on interchanges fees for every transaction, in the EU it’s something like 0.05%. Orders of magnitude less, thus orders of magnitude less rewards, and also fraud, because banks can’t use the interchange to write off fraud and thus implement proper controls.
The danger zone for humans is smaller though.
Because Rust feels even nicer than Python and C# (I don't have any experience with kotlin but from what I've seen it's as decent as Python at least) and even with Rc<> Rust is quite light-weight and fast.

One of its selling points is zero-cost abstractions and pretty powerful abstractions at that.
I have my gpg key stored in my yubi keys and use those for SSH so does that make me a super nerd?
That's pretty interesting. To some extent, it was possible even before - Support for converting SSH RSA Keys to OpenSSL formats is old old, and you can use those to encrypt/decrypt or sign/verify arbitrary data via the openssl command. In fact, AWS uses this in their Windows instances, to encrypt the Administrator password[1]

Definitely will mean some interesting things for Git workflows, though. I've long been in favor of requiring every commit to be signed, and making that easy to enforce either in merges or push hooks. On the other hand, Linus is publicly against it[2], with good reasoning, though I don't think compelling enough reason[3].

Signing every commit would completely break the common pattern of handling merges centrally. Most companies, unlike kernel development, have a centralized server with a "trunk" and code review is done as part of that. Signing every commit with your SSH key would break that model, badly, but it could instead be an opportunity to improve the git tooling.

One of my favorite features of the now-defunct Phabricator was that you typically merged your commits with `arc land`, which a) squashed and annotated your merge with the Phabricator code review metadata and b) Deleted your branch. The latter was especially handy, but the former made code review great. Github and Gitlab can do the same as part of their UI, but it would be far better if it were nicely integrated with your existing git workflow, and this would be the opportunity to add prepush hooks to nicely integrate with hosting sites and code review tools.

[1]https://docs.aws.amazon.com/cli/latest/reference/ec2/get-pas...
[2]https://web.archive.org/web/20201111174438/http://git.661346... - There has to be a better archive of this mailing list than the wayback machine. Searching for this, though, led me to my previous comment[3]
[3] https://news.ycombinator.com/item?id=12291462
I get that they're "public" keys, but I was surprised to learn (and from somebody other than github themselves) that ssh public keys are just available at that github.com/username.keys URL (without there being an option to disable it, it seems?). Did most people already know that? Probably fine but just surprised. Just tried searching their authentication docs [0] and I don't get any results for "public key url" either

https://docs.github.com/en/authentication?query=public+key+u...
The ssh-agent protocol has always had the ability to sign data. It sounds like the new part is being able to verify signatures without needing the private key.

If you give ssh-agent some data and a public key then — if it has the corresponding private key — it will return a signature for your data using that private key.

The protocol command is SSH_AGENTC_SIGN_REQUEST and it’s the bread and butter of how the agent does its job.

Historically, it’s not tractable for public sign/verify but you can use it as a way to do symmetric encrypt/decrypt with ssh-agent.
That sounds like an amazing thing you are doing there, do you have a write-up somewhere?
Wait, could we use ssh keys as the a federated id? (OIDC?)
There are still those alive, who can be consulted about the "old ways".

That said, the US still has a massive manufacturing industry, Mexico even larger, and of course there are places like India, and the entire rest of the world...

So China has zero stranglehold on "how to make things". Just current infrastructure to do so.

Note, the real issue is the economics. No China, and if no alternative cheap source of labour, mean massive, massive inflation.
There are different ways to do that. Apple put efforts into decoders allowing to increase single-threaded performance. Intel realistically cannot do that due to limitations of x86 instruction format. So they worked-around that via hyper threading that allowed to decode more in parallel.
Trying to imagine two such vehicles colliding head on...
The point here isn't whether this is real or fake. The news is that someone is able to impersonate an email as coming from the FBI with all of the correct email headers with dkim signing. I'm speculating here, but this probably means they might have control of one of the FBI subdomains
Ask HN: Twitter accounts with the best signal/noise ratio?
Twitter is full of gems but often they are hidden in a sea of fluff. Which accounts do you consider to have a great signal/noise ratio? Any subject is ok.
Free APIs Browser
It’s interesting that HN readers seem to have such a blind spot about user research.

When you make your first design hire, just make sure to get someone who understands ux and user research.

They’ll understand this stuff in a much deeper way than this article. Most importantly they’ll know how to analyse and action the data they collect.
This is interesting .. https://www.abc.net.au/news/2019-06-17/inside-super-kamiokan...
Rust has advantages over C#, even for high level programming:

* Rust traits are more flexible than C# interfaces, especially when combined with generics (implementing traits for foreign types, associated types, each method can have its own constraints, conditional trait implementation, #derive)

* Rust has much stronger thread safety guarantees (absence of data races, preventing access to a mutex's data without locking)

* Options are cleaner than null (though at least C# supports non-nullable reference types nowadays)

* Cleaner error handling through `Result`s. In C# you either have to use exceptions (discouraged for errors that are expected to happen), or use ad-hoc approaches which don't benefit from syntax sugar like the `?` operator.

* Support for discriminated unions ("enums")

* I like cargo better than msbuild+nuget ("it just works", feature-flags + conditional dependencies, distribution as source instead of binaries)

On the other hand C# has better IDEs and you don't have to deal with the rigors of ownership and the borrow checker. In particular I struggle with LINQ style functional programming in Rust, since the lifetimes of closures and the fields they close over are difficult to reason about.

I haven't used Kotlin, but expect it to be similar to C# in its strengths and weaknesses. Python is not an option for me, since I like static typing.
It's a very convenient way of distributing your public key.
This blog is an absolute gem. I especially liked the series of entries about forests, mountains and map borders a lot.

If you occasionally check it and worry that there are no new entries, then be reassured that this happens from time to time. The author considers this his "Forever Project". For that reason, he's not forcing things so that he does not lose interest in it.

https://heredragonsabound.blogspot.com/2020/02/the-forever-p...
Yes, this is legal here, not the square signed 'fietspad' paths but the iconic ones that are also used by scooters. The speed limit in town is 30 on those, outside it's 45.
https://symfony.com/doc/current/introduction/from_flat_php_t...
They do seem to strip the name of the keys which I am thankful for.
What if you do:

my_fn(|| {
db.store(42);
});
db.drop();

(Assuming you can just drop the database object, the semantics don’t really matter but the idea is the same.) The OP wants an easy way to do this but this is just not an easy thing to do. How can the closure guarantee that the database object will exist if my_fn decides to sleep for a couple seconds? Most languages do not have this problem because either: they use a garbage collector (Java and it’s cousins, Python, Go) or they are not safe (C, C++). Rust is in a particularly difficult (and ambitious and exciting!) intersection where this problem is tricky.
It's one of those tricks that's not super well known but a decent few know it - The Ubuntu server installer will ask if you want to import your ssh keys from Github, for example, and there was a Show HN[1] with a cool trick[2] that took advantage of this information.

[1]https://news.ycombinator.com/item?id=10004678
[2]https://github.com/FiloSottile/whoami.filippo.io
Unity Acquires Peter Jackson’s Weta Digital
From a (time, geographical, emotional) distance these often seem very transparently "rich" vs "poor" yet many poor people fought on the side of the "rich".

Is there any common thread that connects poor white non-slave owning southern American's dying to sustain plantation slavery for aristocrats to poor Finns dying to install a German Monarch to lead landowners to Q fans battling against Medicare for all?

Or is all just random historical happenstance?
I think this whole thread is about woes of asynchronous programming (concurrency) not parallelism which is another can of worms.
A parent complained, and gave her the list.

Definitely not indefinitely. She said to evaluate them. I would just threaten a lawsuit for censorship.

But the list is good. Good reading recommendations for teens, thanks. Though the best are missing. The ones which were threatened by censorship when they came out.
Do you want to dox me because I have the "audacity" to demand workers' rights? Not wanting to get contacted after-hours is a "bold view"? Are you fucking serious?
The email domain where the messages originate is from some sort of federated identity management system that was created in 2010 (here is a proposal deck [0] with technical details). Found this program simply by searching Google for the sending domain.

Based on the guide for using this system [1] (see step 15) looks like this specific email address is the one that sends automated confirmation emails upon registration. Perhaps someone was able to inject a message instead of the regular canned text through some sort of reflection attack? This explains why replies to the message result in a canned response. The system also now appears to be temporarily down. So it’s getting some sort of attention (internally taken down (most likely) or maybe denial of service from the abuse).

The Reddit thread suggests the recipients’ emails are likely ARIN IP range contacts. Those are very available from tools like this [2] so nothing interesting with that, but the real question is WHY someone would do this at all? This was clearly given some thought (on who to send this to who would actually take the time to verify the headers) but given the sloppiness of everything else, is this just a script kiddie flex? Whoever it is pissed off the FBI and gained absolutely nothing.

[0] https://bja.ojp.gov/sites/g/files/xyckuh186/files/media/docu...

[1] https://www.justice.gov/tribal/page/file/1260671/download

[2] http://itools.com/tool/arin-whois-domain-search
I agree. I think it’s less about how popular someone is in their own time, although that’s clearly important, but how much they endure with future generations.

T-shirt merchandising is probably more to do with who owns the rights though and if they want to sell products in places like Target or Tescos.

For a long time you couldn’t download Beatles albums on iTunes. That was purely down to the dispute over the name “Apple” rather than popularity of the music.