skysight-inc/HackerNews huggingface dataset:
> Legally stealing you still committed theft. Just because you have the technical ability to pick a lock doesn't give you the right to enter a room and take someone else's stuff. And there is a lot of legal precedent that hacking weak passwords is still hacking (also an illegal act even if you don't steal anything) and the theft of digital goods is still theft.

No, it's not so clear cut. Using a hacked password is illegal because it's unauthorized access to a computer[1]. The hacked passwords themselves are not illegal, otherwise sites like haveibeenpwned couldn't operate. In the BTC/crypto scenario, there's no unauthorized access occurring.

More than that, there's no link between a BTC address and a real identity. If I log into your bank account with a hacked password and get caught, law enforcement can quickly determine that I was trying to access something I didn't own because the bank has many details on the identity of the account owner. If I use a guessed private key to transfer BTC out of your wallet, how would you dispute my claim that I was the original owner of the wallet? Where's the proof that your private key wasn't the guessed copy?

> Practically speaking, if you actually managed to get hundreds of thousands of bitcoin, you're going to have someone very interested in getting it back. The legal argument might not even concern you if the previous holder of those bitcoins thinks that most likely way to recover their money by hiring thugs to hurt you.

lol This is just pure fantasy. People haven't even gotten their coins back from Mark Karpelès[2], and he's a very visible and public figure. If an anonymous person randomly generated a private key and moved coins, nobody's going to be sending thugs after them.

[1] https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act

[2] https://en.wikipedia.org/wiki/Mark_Karpel%C3%A8s
Especially when programming, but also at most other times, I want a 1 to 1, unambiguous correspondence between the symbol I entered and the display on the screen.

Making my ":)" into an emoji is wrong. "Do what I meant" input magic bullshit is always going to be wrong about "what you meant" sometimes, and occludes the possibility of "I didn't know what I meant until I saw it" with its helpful corrections.

Have had this argument with fans of "autocomplete" systems, too. An analogy I like is a powered exoskeleton: if you had one you could run faster and jump higher and all these good things: but then when it breaks or you're not wearing it you've less native ability and no familiarity with the unassisted world, which makes you dependent on the tools.
Maybe that works if you have the infrastructure set up for that workflow.

The way that it worked for us, was we saved up a year's worth of bottles and cans in the basement in 55 gallon barrels, then we took them to the local redemption place attached to the general store, where one of the high school kids that attended the full-service pumps would go sort them, which took an hour or so. If it was a good year, it paid for a few rides and some french fries at the county fair.
I'm specifically compensating for my own mental decline.

Additionally, I do take notes, and I keep a summary work journal to track what I did and key insights. My daily log is typically about 6-7 bullet points for my own use, but may reference JIRA tickets or other links with more information that is intended for others to consume as well.

As for my meetings, I take notes for actions and key ideas, but each meeting is typically less than 5-6 bullet points, unless it results in a lot of sub tasks to a larger one.

I don't want to review ever meeting, in fact, I don't want to review any meetings. The goal of the recording is to have the record that I can refer back to if needed. Which, incidentally is about 5% of my meetings. So 95% will never be looked at again. And that 5%, I'm not going to replay the entire meeting, Im going to use something like Otter.ai to process the audio into text with time stamps, that way I can skip to the relevant bits.

So creating more work? Not at all.
1. yes, generally and ideally the private key is generated pseudo randomly. But at the beginning or for testing, people might have manually picked a private key.

2. the birthday problem basically halves the exponent security wise. The rule of thumb: If you have N possible outcomes, then after around sqrt(N) guesses the probability of a collision approaches 0.5. So, for birthdays, it's 365 outcomes, so with 19 or 20 people your risk of collision already approaches a half. For BTC private keys, there are 2^256 possible, so with 2^128 guesses you'd approach a likely collision. Fortunately, that's still 1e38, so if you check 1e10 per second, you'd still need 1e20 years to get there.
Most calls I get have my local area code, sometimes even the same first 6 digits. You can't just block phone numbers because phone numbers are self-reported. Spammers will just keep switching.
I recall China fought a war against the British specifically because the latter wanted to sell a drug which was terrible for society to the former.
Is there a reason you can't run pre-commit in CI/CD? That seems to get around your version mismatch issues.
>Exactly, these devices are meant for personal use. Why would you want to fiddle with the results?

My experience has been that you can at least get a day off depending on your organisation's policy or until you receive a negative result on a PCR confirmation test. Think perhaps about that business trip that you really don't want to make. I remember reading reports on schoolchildren coming up with chemical solutions (IIRC cola) to fake positive covid testing results in order to skip school. A slightly "techier" covid testing product like the one from the article might placate a more suspicious employer.
I was a heavy IRC user, and that does sound familiar, so that's very likely, but I don't really remember. It might as well have been from sourceforge or the (then) newly released Bittorrent.
> the 5 tests is clearly a better outcome for society.

I don't think that's obviously true. Misread pregnancy tests are fantastically common, and someone mistakenly believing they don't have covid is going to be a significant negative for society.

Instructions simply don't work, a large number of people don't read instructions. Heck, I might not read the instructions for this if it looked understandable at first glance. Decades of pointless barely-understandable instructions on cheap devices have trained me not to bother.
I live in suburban Minneapolis. We go weeks with ice covered neighborhood streets, and they are lit only at intersections. Teens learn to drive safely in this environment.
Why would aliens capable of getting ships to Earth and engineering intelligent life want our technology? In this scenario they'd have to have been far beyond our current capabilities hundreds of thousands of years ago. What could the technology of a bunch of hairless apes on some intergalactic backwater have to offer these hypothetical aliens?
According to [1] applying "a few drops of cola or orange juice" will produce a positive result on a lateral flow test.

The journalist writing the article successfully tested it themselves.

[1] https://www.bbc.com/future/article/20210705-how-children-are...
"A Dark Room", "Universal Paperclips", and "Clicker Heroes" are all clicker/idle games.

But you'd be hard pressed to find any shared mechanic if you've actually tried all three. I guess you move your mouse to click on a button sometimes, but all three games obsolete actual physical clicking pretty quickly.

-------

The biggest thing about idle games is that the "state" of the game changes while you're not playing. But so does Animal Crossing and MMORPGs.

And "Universal Paperclips" is actually only going while you're sitting at the computer, no "away" element in that game at all. So even that rule isn't perfect.
YCombinator has a platform for co-founder matching https://www.startupschool.org/cofounder-matching
Life Circa 2050 Will Be Bad.
For cyclists, too?
> So now I have two different black calls: in the pre-commit hook and in the CI/CD. And they must be of the same version.

> Can the framework run off the venv dir?

It can, but it means not using the hooks from the tool's repo and writing your own. This blog post [0] shows the pipenv version of some common hooks; mine look the same but s/pipenv/poetry.

If there's a way to use the upstream hooks with your local venv, so I can trust the tool maintainers for proper configuration, I'd love to know about it.

[0] https://sourcery.ai/blog/python-best-practices/
> it seems that collectively, we are striving for something somewhat cohesively

I don't think so. Humanity isn't some uniformly distributed / synergistic / perfectly aligned entity. It's a mess of individuals, small groups and large groups with different incentives each one of them pulling and pushing in a different direction.
They actually started certifying venues for air exchange rate early on in the pandemic, there's hand sanitizer pretty much at every shop, everyone wears a mask, plexi panels and other barriers are common, people get told to check their body temperature and not attend events if >37.5, many places actually have thermal cameras or other measurement devices at the entrance, etc.

Add the vaccination rate to all that and it's not hard to see how the R number dropped to <1 (and stayed there). Though we may be rebounding slightly in the last few days, so we'll see whether it's the start of a new wave or not. Whether we get a significant year end wave like we did last year will tell the story.
I get what you mean. Half way through the piece I couldn't take it anymore. So much eloquent words saying essentially nothing. A name for this? I'm in! Why? Because this kind of article is extra harmful due to it's covert nature. One needs to read it before one realizes there's hardly an argument.

That is, if you want to read a piece with a clear argument. On the other hand, pieces that just take an (opposite) stand and make me think (like this article did) definitely are valuable to me.
Simplified Array Programming
Tbh this would be much more to brag about if so many games hadn't been removed from Steam.
Is there any kind of remote development support (ssh, docker) in Sublime? That’s the killer feature that keeps me on VS Code.
you can do that now, and without a website, obviously. You probably need to do it more than trillions of years, but go ahead. You might be lucky (though it's more likely that you crash in a plane, or, for that matter, that a plane crashes on your house, in the meantime).
> Unfortunately, only the basic detection works when you're on prepaid. The calls will come in, but you'll at least be warned. No, I'm not going postpaid, especially given their history of data breaches.

T-Mobile prepaid is odd. It is almost like it is an MVNE using T-Mobile's network rather than a part of T-Mobile. When I switched from postpaid to prepaid, for example, the T-Mobile mobile app stopped working. It says "Sorry we're not ready for you yet. We're working on improving your app experience" and suggests using the website instead.

Checking on their forums, I see it has been doing this for years. They used to say they were working on it, but they stopped saying that.

Still, I find it worth it because of the savings. I just need voice, text, and a small amount of data. The cheapest postpaid I see at T-Mobile that would be open to most readers here is $60/month for 1 line [1]. Verizon and AT&T seem to be a little above that.

My prepaid T-Mobile plan is $15/month (around $17.something with taxes and fees, which are included in the $60 for the postpaid plan).

[1] They have a plan for people 55+ which has about the same features for $40/month (plus taxes and fees, which are included in the $60/month plan). This puts them way ahead of Verizon and AT&T, whose "senior" plans are only available to Florida residents. WTF is up with that?
First, let me lay my credentials bare, so you would see where I'm coming from.

As I like so say: "I am merely 30 cloudy days away from white, and just one good tan away from 'person of color'." Therefore, I have the least stake in the racial discussion. Doesn't affect me one way or the other.

However, I am not least bit of shy to hiss at either side when they cross a certain line. At one side, if you take a person's race into account while deciding anyting, you're off the game for me. At the other side, if you try to control my language, you are off the game as well.

Your capability of being offended does not, and should not grant you rights or leverage against other people.

As a tech person, one should already know why censorship, blacklists and backdoors are bad ideas. Because no matter how pure your intentions were when you were first putting them in place, once in place, they inevitably will creep forward and get bigger and worse.

Let's skip the can of worms about if the political correct speech is effective. It will be an endless discussion.
However, we can discuss the practicality of policial correct speech. Because those are the two requirements of any solution to any problem: 1) effectiveness 2) practicality
If you fail one, your solution is, well, not a solution.

Simple argument:

1) "offensive" is a subjective, and elastic word

2) therefore set of possible offensive words for a large population is infinite

3) infinite amount of taboo words = no communication

4) THEREFORE: we must assert that political correct speech is not "practical", and can't be a solution to anything.

I advise you to put your energy into more practial solutions. That is, if you don't care more about being right, over being effective.
Hah. That is fair. It admittedly was a poorly thought out comparison.
Here is UK specific answer, and as they point out, if you sell to some one knowing they are going to commit a crime with it, you can be considered an accomplice in many jurisdictions.

https://law.stackexchange.com/questions/11552/is-it-illegal-...
It makes me feel old to realize that I grew up in a time when, if the phone rang, you could pick it without hesitation because the other person on the line was a genuine caller. Things don't always improve with time.
Counterpoint: I like ligatures in programming fonts.
That seems a little bit extreme unless you mean lossless reversibility, which for a process like this will never be available, as per information theory. Obviously the best thing you get by this process is a smudge of colors which will never pass the "I know it when I see it" test.
Following a link in that article lead me to https://en.wikipedia.org/wiki/Welwitschia, where I found what will be probably be the best sentence that I've read today:

Plants in Angola are better protected than those in Namibia, because of the relatively high concentration of land mines in Angola, which keep collectors away.
Not necessarily. You can encrypt something twice with different keys. e.g. off the shelf zip archivers dont support 1024 bit keys, but who can stop you from writing a bash script that generates 10 keys using sha1 and a 'seed passphrase' and runs the zip archiver 10 times?
The "Your editor has DRM" section alone [0] is enough for me to continue to advocate for a better user-friendly FOSS IDE, in addition to the wonderful giants of emacs & vim, and to avoid the VS Code "kool aid".

[0] https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-cod...
everyone's mentioning the speed (as they should), but I also prefer sublimeText for the GUI (or lack thereof). After a decade of using it, the keyboard shortcuts are also hardwired into my soul.

I also started using sublime Merge recently and I think I may feel the same way about it
From anecdotal evidence (n=1) the call blocking feature on T-Mobile is about 70% effective. Unfortunately I don’t know of an api to pull my full phone and spam shield records but I estimate I received about 2,000 calls over the past three months. About 90% of those were spam/scam calls. Of those, T-Mobile identified and blocked about 70% of them.

It is reassuring to see the stir/shaken “checkmark” on my iPhone call log indicating that the call has been authenticated. Unfortunately as you say it’s not very effective yet.

I’ve noticed that there are carriers/voip gateway providers who are proactive on shutting down spam emanating from their networks and others who are not. Not affiliated but the list here seems to be accurate: https://scammerblaster.com/the-ultimate-method-of-scammer-pa...
how so?

also it doesn't impact Bitcoin, you can self-custody most of your wealth. Put what's needed to transact on lightning (checking account)
Hey, author here!

Writing and maintaining tests can easily become a chore, which can lead you to avoid testing altogether.

One way to avoid this is to establish patterns that can be reused across tests, reducing the "how do I test this?" problem to a known quantity.

Not only does this make writing the tests faster, often a copy-paste-and-change, but your colleagues will be familiar with the patterns you've used. It means they can jump into your code and retain some level of familiarity, which translates to productivity, hugely useful in a team trying to move fast.

This posts shares one of the patterns we use in Go codebases to mock client libraries.

Hope you find it interesting!
There's one call I get once a month or so that's a pretty convincing robot. It's a guy asking for donations for some sort of police association. It seems to try to use the robot to gauge interest, then sends you to a real person if you say the right things. They don't change the pitch script at all, though, so I recognize it in the first few words now.
> Any chance you've added a rule in HTTP Toolkit that's redirecting traffic back to itself.

No, I literally downloaded it after seeing the post on HN and started a terminal with it for testing. Default settings. I'm using Fedora 35 if it helps.

Then I started using that terminal for something else and thats when I realized go get was failing.
I can live with this. He is indeed a good boye.
Encryption is necessary for the entire modern economy, but also worthless when keystrokes can be remote-sensed, faces and other biometrics generated by the same AI that scan for them, and displays can be Van Eck phreaked.

Our near-term future has both unbreakable encryption and omniscient surveillance in the hands of low-budget and non-technical people, and in a fight between the two, surveillance wins.

I don’t know where the world goes from here, but I’m confident the status quo won’t be for much longer.
It's no-JS but gives me a Google Captcha?
The reason the US has a Senate with two senators per state, along with a clause that makes it the only section of the constitution that cannot be modified by amendment, is because of the institution of chattel slavery. The slave states had a much smaller voting population than non-slave states and feared that majority rule would eventually remove their ability to keep slaves.
That's a fair point. The nature of encryption complicates this slightly though.

If the purpose of encryption is to make data unreadable, but a back-door exists that allows anyone with access to it to bypass the encryption, can the data ever really be considered unreadable?
How do you prevent yourselves from serving a version of the web app that sends the user’s seed phrase to yourself?

(A malicious employee could do such a thing, or you could be legally obligated to do so in order to continue operating in certain jurisdictions.)
History is a circle: we’re now going back to “just tough it out/you’re imagining things”.
For web and embedded I would still need to dynamically control transforms of object groups. Otherwise the graphics is baked and I can just as well use PNG.

Just like bitmaps, vector graphics looks best when it is displayed at size it was designed for. Too small and details will just blur together; too large and the design looks overly simple with unnaturally sharp edges.
To the Church of the Flying Spaghetti Monster obviously.
Have there been any changes to improve it recently? I checked act years back with the old Actions system and a few months back with the new one, but both times ran into issues with supporting most of the actions I was using.
sublime has had ssh development for many years
The problem is if you use the recommended hooks, pulling from the tool's GitHub repo, that runs off a different venv than the rest of your project. If you leave e.g. black out of your dependencies, and only ever run it with pre-commit, there's not really an issue. I prefer to have everything managed in one place, with black as a dev dependency (I use poetry) so I never use the upstream-maintained hooks, I have to write my own.
A lot of this is second hand accounts, i.e. people talking about other peoples' feverish quests for leaving a legacy, not always in positive terms.
It seems ridiculous to me that I regularly receive calls that are clear indicators of illegal activity but that nobody is being held accountable.

Why is there no way to find the people who are making these calls and why are the phone companies not liable for allowing these calls to be made without accountability?
I played with kodi for a week or two then went back to vlc and shell scripts.

I run apache and dump videos for the family in a web root and everyone knows that media.local gets them to the files - everything can play mp4 as is at this point (vlc if you want to be fancy or just a regular browser), even the boys firestick/silk has zero issue playing back FullHD 1080 mp4 in browser.

Total maintenance time averaged over a year, 2 minutes.

Wireless controller support isn't an issue I have a wireless keyboard with a touchpad built in and that is the "TV remote".
I preemptively mourn that at some point people will be able to text, stream shows, and have video calls from even the deepest wilderness areas.

It is great that there are official wilderness areas that are off limits to technology such are drones and even bicycles. I kind of wish there was a way to digitally fence those areas off to some degree as well though as a fellow inReach user I know how useful some tech can be.
Yeah, I've signed up to that myself, but there are likely folks on HN who haven't signed up to it who would still be interested in getting involved with a startup.
STIR/SHAKEN has barely started to be rolled out, and most major carriers don't fully support both protocols. Realistically the reason you've not seen a difference is that... well there's not been a change. The TRACED act stipulated that large carriers have to have it implemented by June 2021 (and several have... mostly) and that smaller carriers have a 2 year extension until 2023. The problem is that "smaller carriers" has a much looser definition than you think, which includes the phone systems used by most corporate businesses and most cheap/easy SIP providers (like NICE inContact, OnSIP, RingCentral, etc). That said, it'll be a couple years before you see the silver bullet you're looking for, and even then it'll be a couple more before all the kinks are worked out. (There's still some unanswered questions about attestation in smaller regional/local carriers. Also international partners aren't complying with the standard, so that increases the complexity.)
My guess would be that key length scales the quantum algorithm time much less than it scales the possibilities. Like, as key length squares, execution time doubles.

I don't know. It's seems crazy that an algorithm wouldn't be affected at all by significant numerical increases.
Phreaking is older than SS7. The story itself is as old as civilization. It was an era of naivety and exploitation of that naivety, not good faith. Unauthenticated protocols with no user-controlled access is always a bad idea. TCP/IP has firewalls.
Why do you think love triangle or fight or lying is silly drama?
Vim with my plugins in the terminal is noticeably faster than vanilla sublime for me. Sublime feels like Vim does over a good SSH connection. Its definitely good, but whatever magic terminal emulators use is definitely faster.