skysight-inc/HackerNews huggingface dataset:
I agree. I contacted the support agent I talked to again with a link to this thread and all of the similar IP addresses that tried to login, presumably with the knowledge of our master passwords.

I also sent off a random email to the Verge, and tried tagging LastPass on Twitter.

Does anyone have tech media connections who could try to squeeze a word out of LastPass?
Unfortunately they are the only eSIM supporting carrier in the country. Maybe this will help, but looking at the other comments here mine is not the only carrier that does so.
SIM is the second factor when it comes to proving that this device with this physical SIM is indeed accessing the network.

Fraudulent SIM swaps are attacking a different layer of the system, they are social-engineering underpaid idiots to associate a new SIM with a given account & number.

You could in theory social-engineer a bank to reissue someone's payment card and somehow intercept it in the post or steal it from their mailbox. That doesn't mean chip & PIN is insecure.
HN is a place where sarcasm is sometimes intentionally taken at face value because it leads to more interesting discussions.

People who use sarcasm tend to be very proud of it, but the aggressive-defensive undertone hinders productive conversations.
I don't understand this sentiment, instead of pleading with a phone manufacturer to implement certain features why not put your money where your mouth is and, you know, buy any of the pleothra of phones out there that do have a headphone jack.
> pretty great for road trip connectivity

Until people start getting seizures while driving from all the flashing lights
It is a bummer and it hurts getting rejected but I think I use my rejections as motivator to get a better job. In my college placements, I was rejected from many companies despite getting quite close at a dream company. Got an internship at a great startup, but didn't get a full time offer there due to some genuine bad luck, hunted for jobs during the pandemic, got rejected some more times and got some offers, accepted one of them and joined it where I have been for 1.2 years.

That being said, had I been at the previous startup I had joined as an intern, I might have earned been earning more and it still feels bad from time to time. But having a stable job and stuff to focus on helps keep me distracted.
> The article says that there doesn't exist any "low level" languages that programmers can use, this isn't a very helpful definition.

This is not the definition used in the article. There is literally a paragraph called "what is a low level language" at the beginning:

> Think of programming languages as belonging on a continuum, with assembly at one end and the interface to the Starship Enterprise's computer at the other. Low-level languages are "close to the metal," whereas high-level languages are closer to how humans think. For a language to be "close to the metal," it must provide an abstract machine that maps easily to the abstractions exposed by the target platform. It's easy to argue that C was a low-level language for the PDP-11.

--

> C maps very well to machine code.

The article's core point is literally a contradiction to this. I'm not sure what to say. Perhaps you ought to read again or provide more arguments as to why you think this it is true.

> A modern Intel processor has up to 180 instructions in flight at a time (in stark contrast to a sequential C abstract machine [..])

> [..] the C abstract machine's memory model: flat memory. This hasn't been true for more than two decades.

> Unfortunately, simple translation providing fast code is not true for C.

--

> "Low level" is relative.

> For a hardware engineer who works on CPU architecture it is of course different, but we are talking from a programmers perspective here.

Point is being made in the articles that programmers do care about cache and pipeline behavior (to get decent performance in intensive parts) or about threading, both of which are transparent to C. And also that languages otherwise seen as "high-level" (usually because of memory management) sometimes have aspects that map better to these features (hence are lower level than C in some other aspects).
I wonder if some of this could be mitigated with a sort of double blind take home test.

You take the test, but you do not know what it is screening for, or what the results mean. It tests for N things which can be economically packaged.

The results can then be used to produce a recommendation for additional consultation with a doctor.
Hours and days?! I've certainly never seen that, that's a bug. The most problematic rooms (like Matrix HQ) took no more than 20 minutes for me, and that's only for the first join -- subsequent users get to join "for free".

Performance is going to be a major focus in 2022, with [fast federation room joins](https://matrix.org/blog/2021/12/22/the-mega-matrix-holiday-s...) and a new version of [the sync part of protocol](https://matrix.org/blog/2021/12/22/the-mega-matrix-holiday-s...).
The reminders are a combination of the Pomodoro Technique and vibration alerts on my watch or phone. Just enough to remind me to step back at periodic intervals. As far as success stories I can say that it has cut stress down considerably because I keep perspective and avoid tunnel vision.
The exercises I talk about are usually mental imagery techniques, "the view from above" and recollections of the "dichotomy of control".
My journal is hand written since it is not for anyone else. I try to write at least a half page or more per day. To other people it is probably completely illegible.
Resource wise I can suggest this book https://www.amazon.com/s?k=9781549877735&crid=TQ4VA5BUEQI9&s... for general exercises. It was written by a r/stoic redditor and is very plain language and contains lots of easy to understand mental exercises. For a good introduction to Stoicism look more to Sellars Stoicism Book. It is a little academic but a good read.
My 1997 surmise that phone companies were capable of using digital tech to analyze phone conversations was wholly conspiracy theory until it was proven true.

If the capability is there, then so is the gravity to use it.
just grep through your history file and delete lines containing `rm` easy fix
Try airalo, they’re available in almost all countries.
> Arguably we've become slaves to ecosystems of either Apple or Google at this point

I’m far more worried about the SIM cards than Apple or Google.

Did you know that SIM cards run Java? Or that they can send text messages from your phone directly to the baseband without going through the phone itself? Your SIM is probably sending data to your carrier without you knowing. ( https://scribe.rip/telecom-expert/what-is-at-t-doing-at-1111... )

Get rid of SIM cards and let’s move everything to purely digital number porting. That doesn’t mean you can’t add or change your provider when you travel, it just means you do it through the user interface instead of removing a little card that runs Java and has access to your baseband.
In the U.K. if you do as Amazon suggested nothing would happen - if the plug is in enough to be in contact with the socket’s terminals, the exposed metal is insulated

Defence in depth. Sure Amazon shouldn’t be telling 3 year olds to stick their fingers in sockets, but sockets shouldn’t kill 3 year olds if they do.
Germany gave itself a pat on the back the whole pandemic, and demonized Sweden, but looking the numbers, we have a totally different story. One of the main factors, said here is that Germany has a higher population density than Sweden, and the population trust more their government decisions[1]

Reference:
[1] https://www.businessinsider.de/politik/deutschland/keine-vie...
I think a similar philosophy has worked well team work. I pushed to principle in our team that you should always listen to alternative views. However if there is clear disagreement which cannot easily be resolved then whomever writes the code, has the last word.

That is of course just a guiding philosophy and not a hard rule. But it helps avoid endless debates about minor points. It also encourages developers to share ideas they are working on without being afraid that they must spend lots of time defending their choice against relentless attacks.

One has to ultimately respect that others might make slightly different technical choices than yourself.
Keeping a multi-watt transmitter of ionizing radiation in your pocket is a very bad idea.
> Some servers have configured themselves to be more locked down because of spam.

every server I've clicked on has required logging into discord (and an account means also providing an email+DoB), is there really a majority of servers that only require entering a nick?
> by the time there is enough gap for your fingers to slip onto the metal, all the pins will be fully disconnected from the socket

I think this should read "by the time the metal parts of the line and neutral pins are exposed, they have been disconnected from the mains".

(I.e. nothing to do with the width of the gap/fingers.)
I think the piece overlooks the fact that most FOSS software these days is written by corporate America for corporate America. This became apparent back when Redhat was being sued by SCO for Unix copyright infringement. Turns out IBM had "donated" a bunch of code to Linux, including their journaling file system code that had once been part of AIX. It is a moot point to ask FOSS developers to use FOSS tools when most FOSS code these days is donated by corporate America.
Did you do anything to fight the first exaggeration? Or you're just showing up now that it is about Africa?
Owning a device that can connect to the internet doesn't mean it can at that moment.

We need to stop assuming humans can connect to an endpoint over a network 24/7 365. There are times when you may not be able to, for all sorts of reasons, make a HTTP request at a given moment.

Networks fall over, riots happen, dictators just shut it off. Dangerous precedent to set.
Re:coordination, you've hit on the issue that's likely going to sink us. Specifically, China, the current largest polluter, refuses to commit to any reduction before 2030 (in fact, they plan to increase emissions before they decrease them), and refuses to commit to carbon neutrality before 2060. Both of these timelines are way too late.

Where's your evidence that future generations are going to be richer than ours, though? We're leaving them with a massive problem to deal with that's going to suck up an increasing amount of wealth over time if we don't do anything about it (which nobody's committed to doing).
SIM cards are famously the weak link in the 2FA. They have all kind of security issues as they are computers themselves.

The way forward is to get rid of the SIM and access those carrier networks through credentials, ideally I would love to see it as a cryptographic receipt that you get from your payment provider and pass it to the the carrier as a proof of right for account and usage of their networks.
agreed. It is a strawman argument.
> Schools don’t teach you a method of thinking.

Colleges do. At least, liberal arts colleges do.

There is definitely a financial problem with the cost of college, I don't want to diminish that fact. Our higher educational system needs a refactor for a plethora of valid reasons...

But how to think - how to deconstruct, compare, contrast, and reconstruct into something new - this is exactly the basis for traditional liberal arts education. It is why they have you study a broad set of topics -- to apply that thinking both into your own areas of expertise, and across broad subject matters. To build you up with T-shaped knowledge and the ability to expand it further.

I feel the understated problem in our educational system is that people are being encouraged to think of it as a place to get job skills to get your first job, and thereby people don't even realize the underlying lessons that it really teaches.

Maybe the ideal answer would be to get some of that pushed down to earlier levels of school.
I agree with you in principle. Yet that's what modern search engine do with the sidebar box, they extract information without context and present a supposedly accurate and synthetic representation of the truth... which is often disconnected from the truth (eg. wrong photo taken from facebook results when you look up the name of a serial killer who doesn't have a wikipedia photo).

So yes a search engine should be a list of results and nothing more. But this trend to embed machine learning models (and their failures) in pretty much everything unfortunately goes beyond Alexa. And yes, that should definitely be illegal and we tech people who understand that AI is just stupid/fast math should be leading the fight to severely restrict AI and/or educate our closest ones never to trust or use (if they can avoid it) something powered by AI.
What do you want exactly, for people to have the right to repair the products that they own? Ridiculous! It can't be done!
Would you be willing to pay to offset your carbon usage sans the market pricing it into the price of goods and services you already consumed? Right now, there's no reason to suspect the market creators of the world WILL nor CAN force carbon offsets into market prices.

I'm not even sure what you're asking for here.
As far as I understand the license you're allowed to self host this for free, so long as you're monitoring your own stuff rather than reselling monitoring as a service.

I can see this being very attractive for side projects / early stage bootstrap stuff where you may not be able to afford something like datadog.

On the flip side, there is something to be said about someone else hosting your monitoring systems, as hopefully if you have a massive outage the third party system will still be up.

I'd imagine that you could achieve this here by starting off self hosted and then migrating to their cloud offering once your systems were critical enough to justify it.

You're right that this is a pretty crowded space though - look forward to seeing how they do
This is going to be very difficult. But we should be able to do it if all of us thought real hard about it.

Think of how to remove CO2 most efficiently from the air. Then scale to global while keeping it cheap.

Then get all the world citizens involved. We can have movies, concerts, video games, political campaigns, social media campaigns, support from big tech like Apple, Alphabet, Amazon.

Then when all the world citizens will come together and they will push together, this will be achievable and we will win the race against time and humanity will survive and thrive.

It is not impossible. Because impossible means i m possible.
LuaTeX is another way to create LaTeX macros, but using Lua as the language to manipulate text. I think it helps create macros that would be too complicated in TeX, but on the other hand it is another language for LaTeX users to learn. I haven't see much advantage of their approach other than in specialized niches such as creating complex figures.
Regular forests work just fine, and we have been doing logging for a while so sequestration is not a problem. We just need to do it more, and selectively, not cutting down everything at once.
The sensor could be mounted behind your windshield which we already have windshield wash built into every car and be cleaned effortlessly. I don’t see that being an issue.
At least another reported incident in this thread is from someone who registered their account in November of this year...!

https://news.ycombinator.com/item?id=29710262

(I ask them to confirm whether they mean November 2021 and further down in the thread, they confirm that)

And yes, if it's a recent attack -- that's very troubling. (and would be more probable than an attacker sitting on passwords for 4 years)
>Do you have any evidence rich people care about the descendents of poor people?

No, but people care about their descendants, rich or poor.
The letter "c" can also be used to "phish" people who want a domain name that should include the letter "o" and yet we don't say the letter "c" is disallowed :/. The premise of domain names being your source of security is what is broken: we should be helping end users by scoring domains based on some combination of page rank and a web of trust implicitly built out of their existing address books, so when they are sent to bankcfamerica.com it shows up as "likely a wrong URL" without them having to squint at the domain name to notice the "c" (at which point we can probably also replace domain names with a post-scarcity collision-tolerant naming system, which would be absolutely glorious).
3gl 4gl 5gl were common terms 30 years ago or so. More industry and advertising terms than academic. And 5gl was more like a Japanese government grant program than any particular set of language features IIRC.
If you meet one person who's an asshole, they're probably an asshole.

If every person you meet is an asshole... Consider some self-reflection.
I don’t use any Alexa devices so this might just be an unknown to me, but this seems oddly staged. Is it common for children to “ask Alexa for a challenge” like that? What other “challenges” could Alexa offer? Obviously the suggestion to play with an electrical outlet is concerning if this is real, but the context seems very unlikely to me.
Claude Shannon had some interesting thoughts about this. I summarized them below:

1. Reduce the problem to its most essential parts

2. Find related problems that have already been solved

3. Restate the problem in as many different ways as possible

4. Generalize a solution to as
many problems as possible. See where it can apply again.

5. Break large gaps between a
problem and solution by solving a bunch of smaller problems (sometimes even in a
roundabout way) and gradually
piece yourself bit by bit towards the solution.

6. Invert the problem and solution

http://www1.ece.neu.edu/~naderi/Claude%20Shannon.html
It's aesthetics/psychological. Weight is also important to me because I travel and the thinness affects my perception of the weight. It's a bit strange that the new Pro feels thicker than my old laptop, the 2015 Macbook Pro, despite actually being thinner. It's because it doesn't have the taper that the old laptop has. Take a look:

Old: https://support.apple.com/library/APPLE/APPLECARE_ALLGEOS/SP...

New: https://awsimages.detik.net.id/community/media/visual/2021/1...
Amazon could actually challenge google with Alexa. I find myself often asking Alexa for things rather than going to type them into google.

Only problem is that Amazon doesn't have a clue how to do search results apparently. Simply punting to Google any time something gets remotely hard.
It's just tongue-in-cheek banter, don't take it too literally. Besides, Apple devices make a sizeable portion of the market and have 'ecosystem' buy-in features that many other phones (w or w/o h jacks) don't have.
Seems like the controls are the same as the original!

Use the Shift key to pick up the sword. And I think Space to attack and the Up cursor key to block when you get to the swordsman.
Not a pen geek but I did buy some Jetstream Uni 0.5 pens (one of the pens in the lead photo on the article) on Amazon for me and my other half to use in our home office and they are very nice. Price wise it was less than £10 for 3 shipped from Japan - can't argue with that really.
The flashing happens so fast it is invisible to human eye. LED lights already do with with pulse width modulation to make them as efficient as they are and it is not an issue.
Matrix is currently behind Discord (from my pov as proj lead for Matrix) because:

* We didn’t prioritise UX polish sooner.

* We burnt huge amounts of time on E2EE (which turns out to be really hard in a decentralised world).

* Building out decentralised comms in general requires about 10x more effort than centralised comms.

* Managing an open spec process and governance model burns huge amounts of time too.

* We built the flagship Element apps in triplicate on web/iOS/Android with no code reuse, in order to dogfood and provide native SDKs, burning >3x more time.

* We’ve also invested a lot of time in beyond-chat work, to try to inspire folks to use Matrix as a generic comms fabric.

Frankly, if we had been aiming purely to be a like-for-like FOSS Discord replacement, we would have done a lot of things very differently.

Hopefully we can shift that balance as the UX of apps matures on top of Matrix, and we focus exclusively on usability. The current situation is pretty depressing. You can see more about how we’re trying to fix it in https://matrix.org/blog/2021/12/22/the-mega-matrix-holiday-s...
Do you think you have also gained something from that loneliness? Better abilities for introspection, for example, or some particular thinking patterns that other people seem to lack?
We tend to be extremely overconfident in our knowledge and it usually takes a few disasters for new technologies to stabilise such that we don't regularly hurt or kill people. It's one reason why we should be extremely cautious in adopting new medical techniques. It should be at an almost glacial pace. That's all I'll say for now for reasons you can probably figure out.
I've been saying since forever that vaccinated people are behaving like morons due to poor communication about the effectiveness of the vaccine and this needs to be considered when looking at data, but people like to disregard this consideration as absurd or insignificant. Confirmation bias doing its job.
You have to be well clear of the spikes to run, I recall quite the number of starting again back in the day due to this, as I was impatient.
The suspect science used to push aspiring Olympians to starve themselves
At first I thought the article would be about the vans and charging methods undermining the potential sustainability, but it doesn't even mention that and more so points out that the majority of users were previously doing things that used less emissions.

For that segment of the population, it's more analogous to going from horse and buggy to gasoline cars. The autonomy increased and more trips were made.

> I'm still very very doubtful this micromobility really is worse than a full sized vehicle

its only worse if the users were never going to use a full sized vehicle. which the article is saying the majority of users never were. thats why its "worse", for emissions, because the trips weren't going to be made using something else with more emissions, or weren't going to be made at all. the article isn't drawing any conclusion about the benefits of mobility, just giving data where there was an abscence of data.
> but it doesn't make sense to allow multiple devices per number anyway

Why not? This is a useful behavior that is currently emulated by forwarding calls to laptops and tablets with the same account when the devices are on the same Wi-Fi. You could get rid of the Wi-Fi requirement if those devices all simply had an eSIM with the same number.
In some places the e-sim plans are inflated and poorer value compared to the deals on physical sim cards sold. For example the unlimited data plans might be only available by sim rather than purchasing data packs
SMS-based 2FA's weakness is not due to SIM cards. It's due to carriers being shit.

SMS-based 2FA is not exploited by breaking any cryptography or exploiting some software vulnerability. It's by "asking nicely" the carrier's customer support idiots to associate a new SIM to the target account & number.

Replacing the SIM with username/password wouldn't do anything - instead of the attackers having to associate a new physical SIM they'll just associate a new set of credentials.
Couple of years ago I went to Africa, bought two local SIM cards from children on the road while sitting in a car, they had to take a picture of my passport with their mobile phone and activate the cards, but it worked. Having esim being sold like that would probably not be possible.