skysight-inc/HackerNews huggingface dataset:
Assuming for a moment that what they claim is true (never attribute to malice that what can be explained by incompetence), that it is indeed a bug / password reuse, what information would you have liked them to give? It seems to me that they’re communicating they’re not hacked, looked into the issue and found nothing special.

I do agree that they’re patting themselves on the back a bit too much and also should have been a bit more humble when dismissing things as password reuse.
In reality, a basic query might be something like "Show me how many units of product code 010201 were sold each month this year", which actually isn't that easy to write in SQL (but very easy to express in plain English).
Are you suggesting we accept human misery and injustice as necessary evils? Or are you advocating for change as these problems are endemic to modern manufacturing?
Thanks, I didn't see that. I looked around the newpaper's website and couldn't find a clear indication of their location.
Ongoing related thread: Unusual login activity was due to bug - https://news.ycombinator.com/item?id=29737973

Recent and related:

LastPass Login Attempted Activity Blocked – More Information - https://news.ycombinator.com/item?id=29731317 - Dec 2021 (12 comments)

LastPass says no passwords were compromised following breach scare - https://news.ycombinator.com/item?id=29723319 - Dec 2021 (68 comments)

LastPass users warned their master passwords are compromised - https://news.ycombinator.com/item?id=29716715 - Dec 2021 (313 comments)

Ask HN: How did my LastPass master password get leaked? - https://news.ycombinator.com/item?id=29705957 - Dec 2021 (508 comments)
Why would you not have a parseFloat/float.parse/whatever?

Parsing floating point values correctly is not a trivial amount of work - to the extent that there have any been security vulnerabilities in implementations.
Whatever you're using, it's not in German sense and since Germany is the topic here: the old coalition was more right than the current and the current is not "whatever"-right.
You significantly underestimate the sexual depravity of your average deep learning enthusiast. Vagina may full well be visible.
Ongoing related thread: How did LastPass master passwords get compromised? - https://news.ycombinator.com/item?id=29735132

Recent and related:

LastPass Login Attempted Activity Blocked – More Information - https://news.ycombinator.com/item?id=29731317 - Dec 2021 (12 comments)

LastPass says no passwords were compromised following breach scare - https://news.ycombinator.com/item?id=29723319 - Dec 2021 (68 comments)

LastPass users warned their master passwords are compromised - https://news.ycombinator.com/item?id=29716715 - Dec 2021 (313 comments)

Ask HN: How did my LastPass master password get leaked? - https://news.ycombinator.com/item?id=29705957 - Dec 2021 (508 comments)
> Is that not describing hyper-intelligence? Leaders so smart and wise that they achieve their goals without anyone noticing them?

Do you have a definition for hyper-intelligence?

> I disagree, I think that knowledge (by definition) is that information that makes us capable of changing our behavior at will. Intelligence is operational. Smart people that become addicts and can't stop are obviously less intelligent than those who avoid it in the first place or who find ways to stop, surely?

No, because intelligence and impulse control are separable things.
Okay, but you have to try to make hard to read Python .

I still can't get basic Rust examples to work and I've been programming for about 8 years.

I understand why rust is harder than python, as a systems language needs to accommodate for different needs.

I will admit using Python in a bigger application can be hell on earth since the type system is so loose.
You can see it spreading into Ohio (and elsewhere) in these maps from 2001 to 2019: https://www.cdc.gov/lyme/stats/maps.html
Ask HN: How to make the jump from intermediate to advanced?
Hi HN,

I've had a solidly okay go at being an engineer thus far. I took a year off in school to work in the bay area and fortunately decided to return to school and get my degree.

I've worked on some cool things at a few startups, but I'd describe myself as a slightly above average engineer. I got to work on some awesome greenfield elixir stuff at my last gig, however the org sort of fell apart after failing to transition to full-remote. I was able to secure a 30% raise at a new growth stage org, (still being paid less than I think is standard in NYC for 3YOE but that's okay).

Basically, I've hit my current cognitive bound for my "intermediate" experience. I can do cool things, stuff well above what's available in documentation etc etc, but I still yearn to have the technical prowess to architect bigger and more complex things. Getting to work with event-sourcing code has been interesting, but my new gig although it pays well isn't really challenging me.
It seems like I've been passed for interviews because of this too?
I can't tell if this is because I'm a bad employee and the org doesn't trust me or if I just picked wrong and ended up stagnating my growth that way?

My catch 22 dilemma here is that I sort of suck at leetcode interviews, but in order to learn from a more advanced org with bigger challenges / opportunity I first have to be able to actually land an interview and pass. If I can't do that I feel like I should do product stuff, but obviously you have to get a product gig before you can really apply for those roles.

Thankfully, I'm located in NYC so there's plenty of opportunity here. I'm feeling a bit lost, because if I can't realize too much of it what's the point of living here after all? Admittedly, part of this is wanting to maximize my value and grow at the same time - I'm sort of worried that I might never reach the ability required to say even get a lowly gig at Bloomberg or something bigger than a series C startup?

Apologies if this sounds like a stream of consciousness - really looking for some guidance from people smarter than me / with more experience.

Let's hope 2022 is a better year ahead!
A better example is that you wrote a snail-mail letter to the government asking for some info (HTTP Request) and the written mail response (HTTP Response) included a sticky note stuck to it with secret info. Confused, you write another 2 letters and get another 2 sticky note (now you confirm its a problem). Realizing something is wrong, you tell the gov and they move the pile of sticky-noted confidential info away from the letter processing desk.
might be there's a high degree of venn diagram overlap between assholes and people who have the disposable income to buy a $200,000+ rapidly depreciating, expensive to maintain toy.
My husband is Japanese so all my information is second-hand, but if you want to learn about Japan in a non-anime-manga-etc based way, I can recommend the TV channel "NHK World", which is in English, and also English-language Japanese news sources like the Japan Times.
Well, what they did to Nvidia Tegra devices is either downgrade them to L3, or revoke them and issue a new L1 key for them. OTA updates patched something, but a hardware flaw can't be patched fully with a software update.

However, most people nowadays are simply exploiting phones and tablets with old vulnerable MSM chips, there are a lot more of those to choose from. Usually what Google does now is when someone publicly leaks a compromised device key, they revoke the unique key of that specific device but not the whole model. However, sometimes streaming services (especially Amazon, Netflix and Disney+) may still choose to blacklist an entire vulnerable model and limit it to SD playback.
Is there something to be angry about here?
I wonder how long ago did they stop using punch cards?
Please refrain from posting niche health and politics content here. There are plenty of other forums on the web that support that
https://www.cdc.gov/lyme/stats/tables.html

Indeed, it is not just "east northern states."
Queries like this won’t break but will silently fail upstream by missing data if column names change or are deleted. The explicit nature of SQL ensures that it will break positively which is a better type of failure in my opinion.
While you make very valid points about plea deals in general, I don’t think they apply in this specific case. Swartz was very rich, and well represented. He also actually did the thing in question, and demonstrated consciousness of guilt.

It’s okay for guilty people to be offered plea deals. It’s actually probably in their best interest sometimes.
Looking at the linked document, the hospitalization rate for fully vaccinated 12-34 year olds is 2.5 per 100,000. For unvaccinated it's 30.4 per 100,000.

For 35-64 it's 8.2 vs 148.8 per 100,000.

For 65+ it's 29.2 vs 382.9 per 100,000.
I own the first 6 Star Wars films on Apple TV. They’re still there.
Some states allow for small amounts of ketamine to be a misdemeanor, but for many (most?) it’s a felony. In Texas and Florida, the second and third most populous states, possession of any amount of Ketamine is a felony.
It's not just a question of male/female, but of inclusiveness. As a minority, I see the same thing. The problem with tech is the white/asian male dominated frat house culture that pervades it from the point of college all the way to large companies. And anything that perpetuates that is unwelcome in a professional environment in my opinion.
You don't need to break security to spray the side of a store. You do need to break security to deface a website.

Analogies are analogies, they're unnecessary in this case (nowadays). Because we got law to punish people who deface a website, and the law stands on its own.

Its akin to people who call 'copyright infringement' 'theft'. Its not the same, its a different mechanic, damages are different, and... different laws apply. That doesn't mean one's right or wrong or anything like it; like I said: the laws stand on their own, respectively.
I would love to understand some of the rationale behind MIT not reversing it's stance. Is there any public/anon writing from someone inside MIT at the time?

Was there some pressure being employed by scientific publishers to make an example out of Swartz?

It just seems so strange, but then again as we've seen institutions can be easily hijacked and corrupted when populated with the wrong actors.
I know what you mean, and it is a real phenomenon.

What you are describing I call kineetetic connection, and that is what many dancers, even dance teachers think is the only connection that exists. It is practically the only kind is taught in formal dance schools.

I have trained kinestetic connection a lot as well, and really I am talking about very different kind of connection.

Apparently this something else is something that kinestetically gifted people sometimes might have trouble experiencing, because of their strenghts.

You could think that it is as challeging for kinestetic people to dance from the heart as it is for head-people to dance kinestetically. As a head-person I have had to learn everything the hard way.
Possibly. But not in the average case surely
Late answer but still... Companies providing products for other tech companies, popular examples are places like Redhat, Canonical or many Telcos. Recently I've also seen a number of companies in the recycling/upcycling space. Also there are tons of small companies that are not startups, it's possible to find them on websites of local technology hubs.
What is extremely valuable about data on an account which is dormant for years?
OnlyFans for X is a really bad tagline.
Yes, people willingly got on the train and the platform stewards helped.
LibRaw
> But Yuga Labs owns the copyright on its ape images, and PAYC and PHAYC have were booted from OpenSea apparently for violating its rules against copyright infringement. (PAYC was also removed from competing markets Rarible and Mintable, although PHAYC is still listed on Rarible.)

So, not a digital proof of ownership. Since the illegal one still exists on the Blockchain.

And the platform is fixing that mistake, even when they mistake isn't fixed for other platforms.

What a mess. There's literally not a single difference in practice.

The only thing that has changed is that because of crypto fomo, some people think digital art as NFT's has much more value than before.

I think the whales had to spend their money on something to make that impression ;)
So if you left open the front door of a police station and I enter to see how an unrelated part of the building is built, and accidentally grab a gun I see on somebody's desk.. then I would most certainly expect to be prosecuted.

I understand you want to punish whoever forgot to close the door, and obviously the guy who abandoned his gun, I agree... but I have no business of being there whatsoever!
Is there an option without a pay wall?
the "internally developed" part was only referring to the SSA pass, yeah. sorry, that was ambiguous.

re consumable: in-struct is fine for the vast majority of cases I can think of, but my initial plans on anything like this are always "read, understand, then decide". so I'm plenty happy it's open source, it might give me ideas how to build things like this :) I'd have to dig in a lot deeper to see if it's immediately-applicable or not, but at a glance it sounds "good enough" + helps plug a very real, very dangerous gap. you may get some use if it's spread wider :)

though at this point I might just wait for generics. building an ad-hoc guarded-value will be FAR easier then. I suspect the source will help me figure out how to build a couple more specialized tools though, I haven't dug into the SSA pass much yet.
When they said gas tanker instead of oil tanker, I assumed that this was a local fuel delivery boat, not an international shipping tanker. I guess the article doesn't make that clear, though. Maybe it's something that the audience in the Bahamas would be more familiar with so they didn't feel the need to explain further.
C++ Reflection For High Performance Problem Solving Environments (2007) [PDF]
You can't really "rotate" L1 keys without breaking HD playback on millions of old vulnerable devices and pissing off a ton of legitimate customers in the process. A hardware vulnerability can't be fixed with a software update. Instead, nowadays when a key is leaked usually Google just revokes the key of the unique device it was extracted from and not the entire model. But major streaming services often blacklist or limit playback quality on known compromised models.

As for L1 on desktop, Google did announce exactly that [1], but TPM would be likely too weak for that, so maybe something like Intel ME would be used. But so far there's no evidence of them actually rolling anything like that out. So for now if you want hardware DRM on desktop you have to use Edge or native Windows 10 apps with PlayReady DRM.

And about the APIs, streaming services do sometimes change up APIs, make old app versions stop working, etc., but often things work with no or minimal changes even years later. They do have to be careful not to break compatibility with all of their own apps across multiple platforms as well.

[1] https://web.archive.org/web/20210819093936/https://widevine....
Why would anyone who is worth following show their trades to their followers. If they're successful enough to be an investing influencer, then they don't need the money from subscribers.

On the other hand, this could be used a lot for market manipulation. People can show fake trades and whatnot.
So what actual number are we talking here? 20 years? 5 years? Or more like 6 month?
They take drinking really seriously, it's way easier to get a DUI on a boat than a car.

Most of my experience has been in the Boston Harbor, which depending on who you talk to is more dangerous than the hudson, but in my experience most of what they dislike on the hudson is erratic lateral movement. Basically, you're not supposed to meander or transit laterally unless you're a sailboat or a ferry. Police boats / coast guard will approach vessels quickly if it looks like they aren't aware of these rules.

That said, maritime rules are pretty vague. Basically, boats going one direction stay to the right, the opposing direction stays to the left. Situational awareness is important to avoid other slower / faster / larger vessels. "Share the road y'all" is the most succinct way to explain boating in a nutshell haha.
UK Inches Closer to Eliminating Private Car Ownership
There was also the fact that he would be branded a felon, which as the article mentioned would have prevented him from working in the White House or other institutions from where he could continue his work
Shit stories like this is why you need a downvote button on the home page
I agree with everything you said, and have been going down the same road, but this bit:

> It's hard to say where Apple's responsibility ends and Foxconn's begins

I don't think it's hard at all. Apple, as with any other business, bears full responsibility together with its suppliers.

Really appalled by the people in this thread saying that "the others do worse!". Crazy stuff.
Reverse-engineering a Roku to control background lights
India's manufacturing sector is about 13% of GDP and the US's manufacturing sector is about 11%. There are a lot of people living in rural India but they don't interfere with or detract from the Indians living in urban India.

https://data.worldbank.org/indicator/NV.IND.MANF.ZS?location...
Intentional learning in practice: A 3x3x3 approach
I agree the disease is scary. The antibiotic regiment has real side-effects, I've known it to cause sunburns from casual sunlight exposure.

https://www.cdc.gov/lyme/stats/tables.html
Veterinary vaccination for lyme disease is common. According to Wikipedia, the human vaccine was withdrawn due to poor market performance.

Claims of autoimmune-type side effects led to several lawsuits, and though CDC and FDA found no connection to the vaccine, the public largely rejected it.

https://en.wikipedia.org/wiki/Lyme_disease#Vaccination
Sure, but I do not see the purpose of creating a special tax scheme just for copyrighted works. If you want to hit everyone with a wealth tax, then do it the same way for all assets.
Especially when idiotic protesters wade out into the hudson to try to "block shipping lanes" or "protest police" in February. Basically a death wish.
After living abroad for several years we found out that a lot of Dutch food we take for granted in the Netherlands but we just get from the supermarket can be made quite easily yourself. Like vla! We also made tjap tjoy and babi pangang just like you get from a Dutch Chinese Indonesian restaurant (you can actually find recipes for them online). A broodje shoarma should be easy; pita bread and shoarma meat can be found in most countries, I think making a good garlic sauce yourself will do the trick. Hagelslag is a bit harder though, we do import that.
In mid-late 90s, when floppy disks were not dead yet, I used to help my father to extract lots of files from their devices to floppy disks. They were using floppy disks only because an application that they were using to extract and convert data from their devices was designed to only copy files in chunks to floppy disks.

One day, out of curiosity, I opened every single file of the application that they were using to convert and extract data to see if I could make sense of anything. I accidentally found out that there was a config file that had a destination path for copying converted files. It was hard coded to drive A (floppy drive).

I changed the path, tested the application, and it worked. I shared the trick with my father and he shared it with his organization. He became the employee of the year for that discovery.

Floppy disks were expensive on the scale that they were using them, and they often had to deal with a lot of data loss accidents. Their IT team even had a data recovery team specialized to recover data from broken floppy disks because usually it meant they had to send a team back to redo the work.
The storage on the devices they were using was very limited, so often during their week-long operations, they had to extract data before they could continue their work, only to realize later that some chunks were missing from the first part, and then they had to redo that part of operation again.
I used to own an EOS 650. I found it pretty amazing that it was compatible with literally every Canon EF lens ever produced (although it didn't completely support some features, such as image stabilisation).

Unfortunately, my EOS 650 was stolen, but I replaced it with an EOS 55, which is even better (it also supports E-TTL speedlites). It's incredible how good the autofocus is for a camera built in the 90s. In my opinion, it wasn't until ~5 years ago that mirrorless cameras reached parity for autofocus performance.

The Canon EOS film cameras really blew Nikon out of the water. The loss of compatibility with the old FD mount lenses was more than compensated for by the massive gain in functionality they achieved by building a new lens mount designed specifically for autofocus.
What makes you say this thread is astroturfed? This is a controversial subject that usually leads to more emotional debate, but there's absolutely nothing to indicate astroturfing. The word does not mean "opinions I don't agree with" and isn't even synonymous with brigading (which I don't see any proof of either)
The Gender Balance in Computing Research Project
Past related threads:

You’re probably using the wrong dictionary (2014) - https://news.ycombinator.com/item?id=19763435 - April 2019 (87 comments)

Using the wrong dictionary - https://news.ycombinator.com/item?id=7772557 - May 2014 (138 comments)
Are you using the Apple TV app? It tries to “take over”.
Nobody knows about it. Sim swappers will attack your number. The one they know.
According to what we know, if you have recovered from delta variant you have much stronger and longer-lasting immunity then if you get vaccinated against original Wuhan strain. Yet, EU Covid pass is valid for 12 months post vaccination and only 6 months post recovery.
"didn’t manage to compete" https://en.wikipedia.org/wiki/Messerschmitt_Me_262? the V-2? https://en.wikipedia.org/wiki/Horten_Ho_229 ? The A-bomb seems to be the only technology they failed to build. But it played no role on the European theatre in WWII anyway. Don't forget that American reliance on foreigners led directly to leaking the atomic secrets to the Soviets.
Do you understand that, from the perspective of the person suffering an attack, there is absolutely zero difference between a good guy that breaks in without a contract, permission, or other sort approval and an actual bad guy? The act of committing a crime actively destroys trust.

Come to me with a list of potential vulnerabilities that I can detect and investigate with an open source scanner, and we can talk. Come to me after you've already broken in, and you will never be grated the trust required to work on security systems.

I think this whole scenario effectively is perjury. Once someone has been proven to lie, everything associated with that lie needs to be vetted (or simply thrown out), because you have demonstrated that this person cannot be trusted to tell the truth. Does anyone here think that perjury is moral or ethical? Is the scenario presented here really that different?
And I'd imagine everyone on board was becoming rude and unhelpful.
Interesting. At first I figured the title was misleading — surely they meant an anti-Lyme disease vaccination — but it turns out that, no, they mean exactly that: anti-tick. They're training the immune system to recognize the tick saliva. This means that the immune system would recognize the bite much quicker, attack anything associated with it, and in general activate the body's innate immune system faster, leading to a faster response by the adaptive immune system.

In their trials on hamsters, none of the hamsters with the vaccine got Lyme disease, even though it wasn't a vaccine directly targeting Lyme.