skysight-inc/HackerNews huggingface dataset:
Was an actuary for 8 years, got my Associateship (roughly halfway through the progression to Fellow). Failed a few of the exams a couple of times, passed a few on the first try. At the time, each exam had a roughly 40-60% pass rate, so by the time you get to the 4th or 5th exam, you are dealing with a pretty smart, invested group...AND it is still difficult to pass.

My job mainly consisted of statistics and data applied specifically to insurance, which I found very boring. I was in life insurance, which is quite simple (people only die once!). Health insurance would have been more interesting, but I am in favor of single payor, so this would have been difficult for me. Property & Casualty (vehicles, property, events, umbrella, custom, etc) would have been the most interesting.

Once I decided to leave, I got an MBA (core courses were trivial due to actuarial knowledge of stats, finance, econ, accounting, etc), and ended up in Analytics/DataScience at tech companies, where my skills transferred quite well.
Jesus has been at the bar all day. He’s practically falling over. Jesus says “Let me get a seven and seven.” Bartender says “Good lord, you’re hammered. I’m cutting you off.” Jesus says, “Fine, I’ll just take a water.”
Yeah that’s former council…
Whoever is buying these things as a collector is basically donating their wealth to others

No, donating would be 'here, have a bunch of games resources, enjoy.' People who buy virtual goods are purchasing status - maybe purely social status Veblen goods (eg hats and other rare-but-fundamentally useless items) or maybe strategic status (eg weapons/armor that give you a combat buff in their own right, plus might also indicate that you're tremendously experienced if you earned rather than purchased it, which is often unknown to the other players).

some years ago I got into a Roman Gladiator game that ran on this model, that was both fun and easy (for me, ie I happened to be good at it). So I ground my way to being quite a high level player and winning a number of fancy items, and accepting challenges from other players. In a well balanced game every item buff has some sort of weakness, eg it's vulnerable to particular spam attacks or regular hits from some other specific weapon. I had figured out most of these by grinding my way up, and after a while I noticed that people who had a lot of fancy items got super abusive if they lost a combat to grinding techniques rather than better gear, to the point where multiple players started harassing my platform account rather than just my in-game character. There was a big inverse snobbery against working too hard at it; I was even accused of 'violating the spirit of the game' ¯\(°_o)/¯
I fail to see why malware on a system would be able to steal passwords from the browser but not from a dedicated password manager.
while a lot of attention is focused on Bond, i think it is notable that basically the same themes/style/etc. can be found in the [pretty good] children movie based on the Fleming's book and directed by Broccoli

https://en.wikipedia.org/wiki/Chitty_Chitty_Bang_Bang
Congressmen's children are overrepresented in the military. As of 2007 12 senators and representatives out of 535 (2%) had kids in the armed forces. By comparison, there are 1.5 million active duty and 1.5 million reserve/guard soldiers in the US, or 3 million out of 310 million (1%).

In the 2008 US presidential election, three of four presidential and vice-presidential candidates (Biden, McCain, Palin) had children serving in Afghanistan or Iraq.
Appreciate your perspective. It was in the news that people are leaving their car windows and trunk open to prevent theft. Smash and grabs are rampant throughout the city. Is this not your experience or has someone already stolen your car so it's not an issue anymore?
so where do I find the /run where all the PIDs are kept?

systemd compliant?
>Hot take: if it's something that's universally a good thing that should be required of every driver, it should be provided by the state and paid for with taxes / annual registration fees.

>Otherwise, it's just an income-generating scheme for private parties.

Food and shelter are essentially "required" for everyone. Should those be provided by the state, to avoid it being "an income-generating scheme for private parties"?
But in general case, such clones are not suitable for query optimization tasks.

And as I already mentioned in my other comments here, thin cloning is a great way to solve the speed (and money) problem for larger DBs.
A government entity could perform this, no free market required. See residential flood insurance for a government based risk rating example.
I clicked on this wondering if the next few days will be ruined like when the original CVE came out. Glad I read your comment.
Axie has banned the assets of players who have violated the TOS, so apparently they aren't decentralized enough to prevent Vitalik's origin story from reoccurring. Or is your point that those assets could be used in another game? Why would anybody do that?
Because people care about the entire experience.
The problem with that idea is moral hazard. It's better for people to be incented financially to drive safely.
Why don't try to actually read the HTML within the <head> tags instead, and parse the title from there? Should be clean data and survive for much longer.

As for why someone would embed JavaScript directly on page instead of via a script, usually you want that piece of code to run as soon as possible when the user opens the code. Including scripts that gets loaded over network can get loaded much later compared to when you inline it.
Your password can be as strong as it can possibly be, but a lot of services nowadays require MFA.
Not throwing shade on this, but this cool demo is also a very illustrative example of how infinite scroll can be a bad experience.

More people should stop and think before adding infinite scroll. Questions like "could I just show all the items on one page?" and "will having only 5 items at a time with an infinite scroll be disruptive and frustrating?".

There are several sites that seem to have implemented infinite scroll as an aesthetic choice rather than a functional one. Showing 50 rows and a next button looks old fashioned, I guess, while a blocking request every time you scroll below the fold is modern and forward-thinking.
Just a quip here there really aren’t a lot of black people in San Francisco. It’s pretty noticeable coming from Columbus.
> but imagine buying a house in an area that's years overdue for an earthquake that will level your city.

Is there credibility to the notion of knowing that a place is going to have an earthquake within the precision of one human’s lifetime, or even a few generations of human’s lifetimes?
Sidney Poitier, "Guess Who's Coming to Dinner?"

One of the best parental tell-offs ever recorded on film:

You listen to me. You say you don't want to tell me how to live my life. So what do you think you've been doing? You tell me what rights I've got or haven't got, and what I owe to you for what you've done for me. Let me tell you something. I owe you nothing! If you carried that bag a million miles, you did what you're supposed to do! Because you brought me into this world. And from that day you owed me everything you could ever do for me like I will owe my son if I ever have another. But you don't own me! You can't tell me when or where I'm out of line, or try to get me to live my life according to your rules. You don't even know what I am, Dad, you don't know who I am. You don't know how I feel, what I think. And if I tried to explain it the rest of your life you will never understand. You are 30 years older than I am. You and your whole lousy generation believes the way it was for you is the way it's got to be. And not until your whole generation has lain down and died will the dead weight of you be off our backs! You understand, you've got to get off my back! Dad... Dad, you're my father. I'm your son. I love you. I always have and I always will. But you think of yourself as a colored man. I think of myself as a man. Now, I've got a decision to make, hm? And I've got to make it alone, and I gotta make it in a hurry. So would you go out there and see after my mother?
Im thinking on txt files shared with leaked user and password. On those cases my credentials would not appear.

If somebody focus on hacking _me_, they already have my email, so this measure is not very effective.
More like I'm observing logical flaws in the concept by interacting with a single individual.
We need to amplify this hellscape messaging as much as possible. The sooner these victims leave, the sooner we can get back to normal.
> ...I got zero ($0.00, zlich, nada) from the other driver's liability insurance.

Well, yeah, you didn't legally establish any liability, or even, apparently, make even the suggestion of the intent to do so.

Insurance companies, being for-profit entities, aren't in the business of giving out gifts.

> Now, if I had comprehensive coverage, they'd be facing my insurance company

Yes, dealing with other driver's insurance companies (along with uninsured drivers) is among the more significant reasons to carry more than liability coverage.

> The whole thing is a scam.

I don't see a scam anywhere.
You can configure ASP.NET to load HTTP Handlers and Modules for use in the request/response pipeline via the web.config file (from the file system, not over HTTP).

But if your attacker has gotten so far as to be able to tamper with these config files then it's probably game-over already.
Yes - hence the "1.5" factor.

My Bitwarden account is protected by 2FA (via Authy - only backup method is SMS - which has become handy at one point when my phone was pick-pocketed abroad in Amsterdam as I'm able to get a replacement SIM card from my operator) but then if you get past that (and the master password) then you've 'pwned' me.

It's a trade-off of convenience and security really - I think I'm doing a lot more than the average Joe and feel relatively secure. For the majority of my accounts (FB/Twitter/Instagram etc. etc.) if you get the password you're getting nowhere. Even then using a password manager I have a different password for every service so unless you breach my password manager you've at most made it into one account - if that doesn't have 2FA via Bitwarden.

You might struggle a bit moving away from Authy though if you ever want to as it does a lot of 'proprietary' stuff. I had to use a bit of JavaScript to extract my TOTP codes from the Chrome Web App (e.g. for Twitch) otherwise you're unable to get them out of Authy.
Hey, I live near you. Agree on multiple points. I doubt most people from the coasts would believe how good the food and drink scene in Winona and La Crosse is.
old IT directors never die, they simply fade away, much like the sanity of everyone left
By ignoring it until the government catches up, like every other startup does with regulations which should preclude their "disruptive" business model.
You should give KeepassXC a try. Way better QOL than the standard client, IMO.
Log4j v2 (which was the first version to support plugins and lookups) was released in 2014.
Just wanted to say thanks, both for writing it and for not being ashamed of it. And also for being honest that reverse engineering is often really fun. (Unlike being an actual pentester, which mostly consists of writing TPS reports.)

P.S. To lighten the mood a little, I have a different question for you. Why "from"? It's a great name; I'm just super curious if there's any meaning. Also surprised that a Python reserved word was available on HN in 2019 -- most of those were snatched up in 2008.
Polish senator says prosecutors dragging feet over phone hacking
Global Cyberattacks from Nation-State Actors Posing Greater Threats
> School Board: Your kids go to private school. Next.

Maybe policies like these aren't really helping [0]. Who would blame the parents for that?

[0] https://equitablemath.org/wp-content/uploads/sites/2/2020/11...
> It took a staggering number of real hours to achieve this [woodcutting] level, we're talking several hundred hours minimum.

[laughs in agility]

Anyway I agree with Runescape teaching some real world skills. Runescape (and some other multiplayer games) also taught me about scams and I think trained me to be skeptical whenever something seems too good to be true. For a really basic example, that opportunity to double your BTC that Elon Musk is always offering his followers is literally the gp doubling scam, the most common Runescape scam from 2 decades ago.
Yes, Ada is pretty flexible in this regard, but I'm not sure how useful this actually is.
I agree that's a possibility i.e. false positive emails.

Counterpoints:

- LastPass officially responded to this story by saying that all of our passwords were compromised elsewhere and then someone attempted to login with those i.e credentials stuffing.

If it was a false positive email, it would have been easier to say that and a lesser reputation hit on them. Right now, they're saying "oh yeah those passwords were valid -- it's just that the attacker got them somewhere else, we weren't breached."

- The (now 3!) twitter reports mentioned in https://news.ycombinator.com/item?id=29719033 point out that someone attempted to login again after they changed their password. They received the "Someone just used your master password" email a 2nd time.

If those emails are not false positives (per LastPass), how could that have happened?
It’s not just the tool, but also the web framework that has to support HTTP/1.1.
> Don’t know if it’s common in the Node landscape but probably?

Webpack is (arguably) one of the most common tools in the nodejs/browser ecosystem, and it has a regular JS file as it's config file (usually named `webpack.config.js`).
Is there a ‘small claims’ court process in the US?

Here in New Zealand there is a court process that is cheap and fairly efficient for low value claims. This sort of thing would probably sneak into that category.
OG refers to precedence due to age. It also tends to correlate with short names, but that's just because people like short names - and so short names are registered earlier and thus are older.
Toothless Termite walks into a saloon, knocks on the counter top, hollers: "Bartender here?"
Not sure what your other requirements are but you could do this with a script via SSH.

Another option is to use Caddy with the Exec module with a Webhook (https://caddyserver.com/docs/modules/exec), but you’d need to use an auth plugin as well.
Interesting it’s like meta money laundering. It allows regular folks to make money off the illegal economy.

In some ways this was the extra profits banks made off illegal activities but that was largely held within the bank, not available to normies.
Deduplicating and/or removing repackaged labels might clean that up a bit. How did you get interested in doing this?
There is a similar app, created by jcs, at pushover.net for mobile and desktop.

It does require signup, though.
I've got a question, maybe a stupid one to those in the know, but why not just trap carbon in biomass?
>Covering remaining damage to myself seems to turn into a health insurance event (I.e. how to cover medical costs) akin to suffering from cancer or another high cost illness.

>For both of those it’s expected that I’ll have to tap the piggy bank…

But is that just? Why should you have to pay the costs (both medical costs and costs from suffering/loss of income) because of a wrong that someone else inflicted? Even if you bought good insurance and are relatively well protected against such events, what about people who aren't well insured?
Quit watching your favorite show for three months? I doubt many people are willing to do this.
>Absolutely. I learned devops managing really inefficient gold farms that got free servers from the Azure promotions when Microsoft cloud launched.

I mined cpuminer cryptocoins on azure free servers about this time. I got banned fast but still made a few 100s of dollars (which is basically a million to a 16 or 17 year old like me).
There are literally six breweries in walking distance of my office (University & 280).
The media industry cares about piracy in as much as they care about making money from their customers. Preventing some dude in the middle of Asia buying a Disney DVD from the street market in a country where Disney+ isn't even offered is not affecting their bottom line.

The rest of the world exists but that doesn't mean they were going to be paying customers anyway.
It is no secret in the open-source world that I am a libertarian, a friend of the free market, and implacably hostile to all forms of Marxism and socialism (which I regard as coequal in evil with Naziism).

Shine on, Raymond.
I wonder if anyone here has had luck pointing out the bigger picture in these situations.

Essentially they risked never talking to you again, losing a living link with their deceased step father, over what? An end table? A book case? Is this really how you want to play this out?
This is an issue with hustle culture and not Midwesterners, IMO. I see just as much of this sort of thing, if not more, at my current West Coast employer that mainly hires out of top-20 CS programs
> It feels like the article is trying to say you shouldn't use javascript frameworks in a lot of cases, but then it advocates for using htmx, which is a javascript framework, in those cases?

Htmx isn't a JavaScript framework, it's a hypermedia framework, and they're encouraging taking hypermedia as far as possible before dropping to scripting.
First of all, I love your username. Are you affiliated with the rsync tool or just an rsync lover like me? If you are, I bow my head to you and thank you. :-D

If you are happy with SMS and twilio, then use it. Having many options is generally always awesome.

The main reason I made ntfy was because I mumbo jumbo (that's a technically term) on all sorts of servers for work and for fun, and I often do things in a tmux or screen that take forever, like rsync something (ha!) or reseed a MySQL replica. On many of those servers, I cannot or should not install anything, and I certainly don't want to leave an auth token in the bash history.

For those use cases, having a short command to ping me when something is done is FREAKING AWESOME. This has become muscle memory to me by now:

rsync -av bla root@myserver:/bla; curl -d "rsync done" ntfy.sh/philalerts

No auth token. No looong string of things. Just a simple curl.

But again. If you're happy with SMS+twilio, then there's no reason to switch. Though I would love it if you could give it a shot.
>The free market is required to accurately price the risk for each driver.

That same market means some will decide that not having insurance is a better deal. Tying insurance to something like drivers licences increases the cost of not having insurance.

>I do not see how a state-provided solution would come up with "accurate" pricing for individuals.

Can the state not hire actuaries?
It would be more of apples to apples comparison to run it on the same setup you ran ab on. You can grab wrk here: https://github.com/wg/wrk
Enjoy!
> The 'scam' seems to be insofar as wealthy and powerful entities can exploit the functional inability of those less wealthy and powerful to meet them on even terms in the legal system.

Even without insurance or greater wealth, a party from whom you believe a liability should exist who has no interest in paying could have done the same thing here. If you aren't willing to sue over a disputed liability, it might as well not exist.

> but police reports should probably carry some weight without requiring a suit.

Any proposal to do that in effect makes the police investigation a court of first instance, which either means creating additional procedural rights that apply before it can be completed (driving up costs) or a very real denial of due process.
The third CVE arbitrarily had a score of ~7.5 despite requiring a non-standard configuration and only enabling a denial of service attack. The preceding CVE with the same outcome only warranted a 3.5, until it was shown to also potentially allow an RCE. CVSS is honestly pretty open to interpretation, since it's not a particularly objective set of measures.
Spotify added my country this year. Within a few months, a lot of labels removed my country from their authorized list for no obvious reasons. We don't have any sanctions or existing outlets here. Just geo-blocking for the sake of geo-blocking.
People getting around games ToS' will always be a thing - since Runescape is the example being used, it is expressly banned to both purchase and sell gold coins. This is not a problem exclusive to MMOs, it's a problem with any game with a leveling system, currency, or items that are tradable between players.

Examples: FIFA packs, Runescape/MMO gold, League of Legends accounts/boosts (names as well) , Valorant accounts/boosts, CS:GO items (names, accounts and boosts as well), Neopets items and gift boxes, Diablo 3 boosts/accounts, and on and on...
I've been estranged from my dad for decades - I even changed my name when I reached adulthood, to further separate myself from him. By outward appearances it was the perfect nuclear family - father a successful and connected politician with charming perfect children and a doting wife. Inside though, he was a drunkard, a narcissist, horribly abusive on every level to my mother, and otherwise absent in my childhood when he wasn't busy talking about himself and his successes.

All that said, now as a parent myself, I feel sorry for him. I consider his childhood and realize he didn't have a chance - he was screwed up from the very beginning. Parenting is darn hard and even if you spent your early years baby-sitting or as a camp counselor or something, it still doesn't prepare you for when they are your own and you have responsibility for them 24x7 from now into eternity. Throw in an unhappy marriage or a failed career and is it any wonder so many parents end up estranged from their children?

So, yeah, the brief article matches my own experiences and those of other people I've spoken with who are estranged from their parents. I think about it regularly, as if I mistreated my children in the same way I can't say I would really blame them for not wanting to associate with me in adulthood when they are able to make that decision for themselves. As my kids have gotten older, I've even made a point to explain to them that every parent is just a human who is mostly winging it trying the best they can -- and that's the thing kids tend to realize, IE: my parent might not have known what to do, but if they showed love and concern, that tends to trump any mistakes.
I'm willing to go along with this, but there's lots of evidence to suggest the contrary. There's also evidence suggesting more severe forms of mental health problems are more common in larger more population dense areas, and that migration from less dense to more dense areas in particular is associated with increased risks of problems later.

For what it's worth, the datasets being used seem a little odd to me, in that there are many many datasets that could have also been used and were not. It seems odd to say this, but it has a cherry-picked feel to it given the number of other datasets that could have been used.

It's interesting though; despite the problems I think there's lots of unknowns in this area. I would have liked to see it extended to longitudinal data in a wider variety of datasets that are available, and other forms of psychopathology.
> What do you call someone who victimizes people he know have a disadvantage in suing him?

A for-profit business.

Sure, unequal, wealth-gated practical access to the courts is a real problem, and it impacts basically every area of American society.

But it doesn't make mandatory auto liability insurance a scam, any more than it makes literally every commercial industry a scam.