skysight-inc/HackerNews huggingface dataset:
Stranger on the street asks for directions:

I’m sorry, I can’t provide directions. I make $80/hour. Spending a minute giving you directions costs me more than $1 per minute, so please give me a $1.33 and then I’ll tell you where to go.
> "Citation" of a hypothetical

Yes, the claim that one hypothetical option would be more efficient than another demands support, in the form of evidence, or reasoning from supported theory.

Typical citing the support and stating any necessary connecting reasoning to reach the conclusion from it is the way to provide that.

Just because you are comparing hypotheticals doesn't free the conclusion you claim from that comparison from the need for justification.
Hey, I'm the OP from yesterday's story.

A few people and I are trying to chase down which software in common could have resulted in our passwords being stolen.

The most egregious and hard-to-understand related cases (now 3!): https://twitter.com/Valcristerra/status/1475734357805572098

"Someone tried my @LastPass master password earlier yesterday [Dec 27] and then someone just tried it again a few hours ago after I changed it. What the hell is going on?"

https://twitter.com/shift_plusone/status/1475959354742525956

"Exactly the same thing happened to me last night. They tried again literally minutes after I changed the password to something not used on any other form."

https://twitter.com/Pablohere/status/1475966760130125828

"I had this same thing happen to me. Saw attempts yesterday, changed password last night to random generated pass from pass utility and had attempts today again from different countries."

---

I saw a few mentions of uBlock origin in yesterday's thread. I definitely might have used it in 2017 (the last time when my compromised LastPass password was used).

Could people that received the "Someone just used your master password to try to log in to your account from a device or location we didn't recognize" email please reply and confirm whether or not they have the uBlock origin extension installed?

The other alternative is for the LastPass extension itself to have been compromised (and to still be..?). There are other alternatives as well (some clipboard sniffing malware for example).

Let's try to rule out uBlock if possible. Thanks!
I'm a bit of a fan of the whole cryptocurrency thing, the early scope of the concept anyway, replace money, programmatic agreement enforcement, creating financial assets that can't be controlled, incentivizing things that need incentivizing and all that. It's interesting stuff.

But this whole metaverse and play to earn is obvious nonsense.

But then, if you show me a slot machine and explain it to me in plain English, that it pays out less than you put in, that it is designed to addict you, that you sit there sticking quarters in and pulling a handle all day, I'd laugh at you before I stuck a dollar in the thing. But people do. All the time. So I'm not so sure this nonsense is going to crash and burn, but I'm certain it isn't worthwhile in the least.
Drunken solution to the chaotic three-body problem
I think you meant

https://patricklee.nyc/blog/20211228_my_walking_desk_setup
So? Swap "narcissists" with "people who exhibit some specific shared traits between one another that are also often described as part of the diagnostic criteria of a narcissist" and you get the same effect.

It's a shortcut, not a diagnosis. Layperson English tends to be that way, and getting caught up on the different definitions between medicine and "common" speak is likely a waste of time.
The SIM card is even less secure than a username and password because someone just calls the carrier, reads out some sob story and gets your sim credentials transferred over to them.

The sim is nothing more than an auth token which can easily be duplicated.
People deleting their accounts, or trying to sell their usernames and messing up the transfer.
Thanks for this excellent comment. It reminds me of a letter I wrote my dad last year for his birthday. It was called: "The summit isn't necessary", where I thanked him for his words on enjoying life for yourself by simply enjoying it and not comparing to others or overreaching to _win_.
Assuming that China itself is trying to capture it, and not a rogue state that still wants to use the username for political means.
When using my password manager, I often provide only the password, not the user. In case of data breach they can not be exploited.
Same here, I helped do recruiting for a previous employer, a healthcare tech company in Columbus, OH. AFAIK the other local tech companies are fairly egalitarian regarding higher education.
SSH is in fact not "similarly dated" to PGP! SSH roughly tracks the maturity of TLS (I'd say SSH is generally a step behind TLS, but not several steps); neither is completely mired in the 1990s. The same isn't true of PGP, which is. That's to be expected: GPG is a global ecosystem of direct, interoperating peers, where both TLS and SSH can upgrade incrementally in islands of new implementations, which gradually expand and agglomerate until the worst of the O.G. designs can be disabled.

By way of example: if you build a new fleet of machines, it's very likely that your SSH sessions will use 25519 curves and a Chapoly AEAD.

OpenPGP is, for this reason, pretty much irrelevant. You can ratify any bit of modern cryptography you like in OpenPGP standards, but because everyone in the PGP ecosystem expects to be able to communicate with everybody else, you'll only be able to use the lowest common denominator of whatever widely-installed old versions of GnuPG support.

You could, of course, refuse to interoperate with people speaking CAST5-CFB or whatever, and form a clique of Sequioa PGP users using EAX and, I don't know, P-curve ECDSA? But at that point, you're only going to be able to communicate with a tiny subset of PGP (itself a tiny subset of all secure messaging users). Why bother with PGP at all at that point?
Side story about how satisfied people can be with the mandated insurance.

I was on coast-to-coast road trip when I got into an accident in TX. Someone was trying to pass me on the left in a turning lane, veered into the incoming lane, and then hit my vehicle's front wheels from the back.

The police ticketed the other driver, and told me that insurance will surely take care of that on my side. "Wow, it's worse than we thought", they said, looking at the footage from the security camera. There were eyewitnesses too.

Now, this was a $6K car (used Fiat 500) that I got specifically for the road trip, intending to resell it in the future. I didn't get comprehensive coverage for it, figuring that if I damage it, welp, it's on me; and if someone else does — that's why we have mandated liability insurance, right?

...I got zero ($0.00, zlich, nada) from the other driver's liability insurance. They informed me that their expertise concluded that the accident was my fault, and, by law, they don't have to abide by the police report.

That's to say, the only way to get any money from them is to sue them, in TX. Figuring that the car is registered in California, and the damage was about $3K, they decided to not pay me anything at all.

Because they can.

Now, if I had comprehensive coverage, they'd be facing my insurance company — because one of those has to pay up. But they're facing me, so I'm welcome to sue or get shafted (with a nice side of gaslighting from the insurance agent, who was very convincing about how I should trust their assessment).

The whole thing is a scam.
You can already start living your dream with a remote 30-50% load job.
I was having trouble remembering tones when practicing with Duolingo because there are minimal checks that you actually know the right tones for each word or character. ToneBoard requires you to type the tone as well (e.g. “hao3” to input “好”), which I think really helps with remembering the tones. (I am also learning Vietnamese and really appreciate needing to type tones with Vietnamese keyboards.) You can use it with any app in iOS, so it also lets you practice recalling tones while texting, writing a Facebook post, or whatever.
Yeah, if your database is under 1TB, it's relatively easy and usable to just clone the full thing. But above that, it starts becoming a hassle and you might need to strip away some stuff you don't care about (and won't affect the query plans), otherwise it can take a long time to backup/restore into new instance.
Thx .. pretty decent idea. You are right that that there isn't a low-effort, modern way to get reliable datastructures. My team studied hazelcast a few years back as part of evaluating the distributed system we built ourselves. It definitely has some nice features. Here is the issue we faced though .. we had a system with great performance but not partition tolerance. We joked that we should call it almost-right consensus (we used CRDTs in some nifty ways). This was a sad joke as there is no way we can publish this.
Do they ever have a third party audit their code?
I’m only saying it because that’s how the parent referenced it.
I understand, hence my caveat that the grandparents were not on those forums. What I worry about is when the undeniable existence of abusive grandparents is assumed by CPS or social workers as a universal and cause valid warnings to be overlooked.
Consumption of fossil fuels is unsustainable even if it could be consumed as a net zero emitter. Because once used it cannot be reused.

Feels a bit like treating a symptom instead of the root cause.
Not news to Mateusz, but Microsoft also provide some "streetside" imagery, and there are other imagery providers, like ESRI (lower resolution, but typically more up-to-date and better aligned where I've used it).
A bit rich of them to be complaining about this.

https://www.nytimes.com/2021/11/10/science/china-debris-spac...

> On Wednesday, about six hours before NASA’s Crew-3 mission launched to orbit, the International Space Station was forced to maneuver itself to avoid a piece of debris spawned by a Chinese antisatellite weapon test in 2007.
Yes, but cash bonuses are “only” around 15-25% of base pay depending on seniority. For senior engineers, rsu grants are >= base pay.
> 40 applicants... about 15 meet basic qualifications we're looking for... 2/2 load... major coastal city

Wow. Things are even worse than I thought. Your institution sounds like the rare type of place that shouldn't have a problem hiring. Good luck with your search.

> have a PhD, in the right field, have any kind of publication record, have ever taught a class

Most places with a teaching load higher than 3/2 dropped all three of those requirements from their job ads years ago.
Class two devices don’t need to be “grounded” (we say “earthed” as they are doubly insulated (a fault won’t cause the case to become live)

The main problem with British plugs is their size
A survey I saw said actuaries have high job satisfaction. I had actuary and math colleagues in the risk dept (i was in diff group) and they loved running risk sims, programming, data visualization. In addition to high salary per hour, low stress, no bro-grammer environment or ageism, or shiny new web framework.
> Imagine if your access to Reddit, Twitter, HN was tied to your computer, because that's essentially what you're advocating for.

You have missed the point. OP is talking about how ridiculous having a physical bit of plastic to log in to the cell towers is. The physical sim provides next to no value.

And it comes at a heavy cost in space inside the phone as well as annoyance waiting for a new sim to ship in the mail. While esim providers email you a QR code and you are good to go immediately.
Hey, could you please confirm whether you have uBlock origin installed in the following thread? https://news.ycombinator.com/item?id=29719033

It's not the most scientifically accurate method, but a few people and I are trying to rule out / determine which software in common all of us might have. Thanks!
Eh, that sounds like it's not a vulnerability at all. Most app server configuration files allow you to load and run arbitrary code.
Deliberate, nuance. To get my point across articulated with my sentiment and attitude about what I'm saying. A similar approach to the cultural context included in colloquial dialects. A far cry away from "there" instead of "their" and "of" instead of "off."
Yes, destroying oil and gas is a good idea for several reasons.

1) these capture demos usually don’t capture ALL the CO2 emitted.

2) gas still has leaks and oil still has spills

3) there’s potentially a finite amount of easy to access carbon capture storage repositories. Using it for more fossil fuel burning is maybe a bad idea.

4) there are still geopolitical problems associated with oil and gas

5) there is still a FINITE AMOUNT of oil and gas.

6) If we keep oil and gas infrastructure in place, what’s to stop a Trumpian populist in the future from just stopping the carbon capture program to save money and reduce costs? Then we’d be back to square one. This has happened in the past when the Bush admin suspended environmental rules because of “oil shortage.” But if we get rid of oil and gas infrastructure, that’ll basically be impossible except with massive reinvestment.

7) There’s reason to believe these programs are just headfakes by oil and gas, cover to keep emitting as much as possible while alsways promising to start carbon capture “next year” or whatever.
Specific to this situation you may be right, but generically the idea of making coal-fired power plants emit less CO2 is not a bad idea, mostly because there's not a feasible way to turn off all such power plants tomorrow, so given that they need to continue to operate for some time, therefore it is helpful to figure out how to minimize their negative impact.
Is your C code available? I could not find it in the linked twitter thread.
> if you're straight and white and "normal".

Yup. That sums my experiences up nicely, although I would add "if you're straight and white and 'normal' and don't care about how people treat anyone else".
I look forward to that. I wouldn't try it without unified push but if you add that, it could be easily be better than gotify which really only provides the bare minimum.
I didn't mean to insult you. I think it's great if you're experimenting and I fully support that. It's just that the headline set high expectations and the article reads like this is being used in production, which I would strongly advise against.
Not being interested in a technology is one thing, but the amount that people have an interest in being against Bitcoin is fascinating.
Money doesn't have to come from anywhere. Sometimes new value is created and the money is brand new. This is how GDP grows.

In the case of BTC, it's pretty clear that a huge portion of the market cap didn't come from anywhere. It's new capital. That doesn't mean it can't go to 0 and vanish overnight. But it does mean that play to earn games don't always need money coming in to pay out.
Play-to-Earn with real world earnings will never be sustainable given the state of the art in reinforcement learning.

The RL game playing agent essentially becomes a form of NFT mining that no human could ever complete against.
Is Signal Skill Good?
The thing is "clean coal" is not totally crazy, there's no scientific reason you couldn't separate hydrocarbons from coal and create a fuel that emits only CO2 -- it's just as an engineering, technical and economic task it turns out it really doesn't make sense, for the particular coal deposits that exist on the earth and/ot are economical to mine.

At some level you could argue it wasn't unreasonable to give it 'the old college try'.
Easy thing to suggest. However, in my experience, as soon as I decide to use a program after researching it, take the time to switch over to it, that company will then switch to a cloud based whatever. Here we are again at the same spot different name.

Sometimes the devil you know, you know?
Bitwarden also has an easy to use hosted service
Claims Polish government used spyware is ‘crisis for democracy’, says opposition
And again noone forces you to use multiple files too :-). You can literally have just single default.do file for the whole project. apenwarr/redo somewhere explicitly noted that. Separate .do files are only for convenience and ability to automatically depend on target's build rules independently from others, that Make just do not do at all.
Dune was cool, but it really sent me into a deep cycle of researching Jodorowsky's Dune and how much more visionary it was by comparison. 2021's Dune is beautifully shot and tells the story in a different, more personal tone (which I'm happy to accept for a story about familial conflict), but it never quite flaunts it's scope like the book does. The Dune experience should be expansive and mind-blowing, too big to fit on my paltry TV set, and Jodorowsky's psychedelic visuals really stuck with me. It seemed like the kind of movie that would have had a shot at really changing things up.
It is a marketing gimmick. Like the article says, the addition of NFTs is just a bunch of techno mumbo jumbo to build a facade of credibility and blind people to the fact that these games are digital Ponzi schemes.
The human body absorbs 70-90% of Vitamin C taken daily at levels up to 1000mg, at which point absorption falls to 50%, the safe upper limit being 2000mg per day.

As your own source explains, “High intakes of the vitamin are generally well tolerated; a tolerable upper level was recently set at 2g based on gastrointestinal upset that sometimes accompanies excessive intakes.”

The OP’s reference to 100mg daily was evidently a typo; he probably meant 1000mg rather than 100.

FYI: I’m currently taking 1000mg daily on the advice of my primary care physician.
That’s also just what “lying” means. If you make a claim with the intention of deceiving someone that claim is a lie. It’s not like English is a formal language where you can say “ah but my statement technically passed the ‘Truth compiler’ so it’s not technically a lie.”
> HMs in small companies, maybe, in big companies , they dont care, they are paid to bring talent in, they don't get penalized if an employee quits after a year.

Recruiters might be paid to bring people in, but HMs are the ones whose teams these hires typically work for, so being able to do productive things with them is more important than just bringing people in. The cost of retraining, losing institutional knowledge etc, and just the time it takes to bring in a new person are all costs that take away from the actual work of building the product.
That doesn't seem too hyperbolic to me, though to be fair to Rio Tinto they don't just poison rivers and blow up cultural heritage, they actually produce needed materials in the process. I'd say working for adtech is closer to a job with a defense contractor making landmines, maybe not quite so gruesome, sure, but so negative that the positives are awfully hard to see...
Raymond Hettinger has a good section on this, tracing it back Knuth's discourse on structured programming in the face of 'goto'. He suggests calling the keyword 'nobreak', rather than 'else'.

Inside any loop are a conditional and a jump. In pseudocode:

if not <loop end condition> then
<do loop things>
<jump to top of loop>
else //loop is done
<do things in the case that the loop has terminated naturally>

If we 'break' in the body of the loop for some reason, we will never hit the 'else' in this chunk of code. As Mr. Hettinger explains, this is obvious to anyone reading Knuth or coming from a 'goto' style of control flow. This is not an insult, but an observation. (Un)Fortunately, structured programming is the absolute norm now, and we learn looping constructs directly, rather than learning 'goto' and then building to looping constructs. Especially in a language with rich iteration protocols, such as Python, it is very much unapparent that the looping constructs are fancy wrappers around 'goto'.

Link to the talk: https://youtu.be/OSGv2VnC0go?t=948
I've reread your comments and while I generally agree, my hypothesis is that simply having good healthcare improves the economy which then in turn leads to improved life expectancy. Of course it's next to impossible to measure this, because of the endogeneity problem.

That said, I'm not sure I understand what you wrote about psych meds ("not a part of healthcare for [...] sane reasons [...]"). To me it makes the most sense to have psych meds socially paid, to ... you know keep people sane, keep them in the workforce instead of waiting for their problem to grow so big that now they need to be put into the psych ward (or court mandated rehab).
As expected, since the confidence level is determined by the number of times the protocol is executed, not which edges are chosen. Each time you select an edge you are opening a brand new commitment to the (claimed) coloring of the graph, so even if you choose the same edge every time you are actually checking different commitments.
Do you understand what a hypothetical is?
Wouldn't your username generally (or at least, quite often) be your email, which would be recoverable? Might slow an attacker down a little I suppose, or prevent automated attacks.
Smartphones, tablets and other current displays can deliver only 2.5D planar image. AR/VR display can deliver immersive 3D environments which is superset of former. You can be "in the Doom world" instead of "looking at Doom game". Since we, as computer-bearing monkeys, have pretty good sense of space, it plays well with our brain. By including spatial information, it is by definition more "information dense".

Of course, replacing real monitors with virtual ones is the lazy approach of bringing productivity to VR, but it is important first step. It is familiar and you won't get something less than you already have. This is the part where Apple plays an important part – they know how to co-design hardware and software. Hardware form factor of "Your Next Mac" is basically known, but the software is going to be a surprise. And there might/should be the improved convenience.
use of 'cheugier' aside (not that well known but definitely not unknown, was lots of articles about it in the Times and stuff like 6 months ago when it was a thing. was a thing.), lame article stretching a story out of nothing. Alphabet put .xyz on everyone's radar ages ago and now there's just a large influx of ppl looking for new domains for their projects and to differentiate, xyz is where they're ending up. Generic and cheap.
They've gone the other way. In France where tipping isn't mandatory and is only done for exceptional service or as an optional payment for a service ( e.g. a person walking you to your place in the theatre or a performance in a public place), Uber Eats heavily push you to tip the driver while ordering. When you still don't know what you'll get, which i find ridiculous. But at the same time a few months ago i found it absolutely impossible to tip a driver after a trip because they went above and beyond and managed to shave some minutes off running late - there was just no such option anywhere.
Oh boy. Thoughts from someone who's worked extensively east coast, west coast, and now midwest: Insanely cargo-culty with regard to technology and development practices, but 5 years behind. Tall nail gets hammered down. On the west coast, if you're really good, you're a god. On the east coast, people will try to level up to you. In the midwest, you'll get bullied/ostracized. Seriously. With limited decent opportunities, you're seen as an existential threat. Most opportunities pay poorly, and most of the ones that pay decently are awful. Layoffs and corporate instability rampant. Many places think offshoring is a silver bullet (!)
One of redo's implementations (on Go) has complete documentation on the whole redo build system (applicable to most (all?) redo-s) usage: http://www.goredo.cypherpunks.ru/Usage-rules.html
'Spider-Man: No Way Home' Pirates Hit by Crypto Malware
I see stories regularly of engineers who know very little, yet get hired and paid huge sums to fuck around for years and coast while staying under the radar. It happens at every level. It's turtles all the way down.