skysight-inc/HackerNews huggingface dataset:
Excerpt explaining the exploit:

"Preliminary analysis from CertiK shows that the attacker exploited a vulnerability on the solana side of the Wormhole bridge to create 120,000 so-called “wrapped” ethereum tokens for themselves. (Wrapped etherum tokens are pegged to the value of the original coin but are interoperable with other blockchains.) It appears that they then used these tokens to claim ethereum that was held on the ethereum side of the bridge.

Prior to the exploit, the bridge held a 1:1 ratio of ethereum to wrapped ethereum on the solana blockchain, “acting essentially as an escrow service,” according to CertiK.

“This exploit breaks the 1:1 peg, as there is now at least 93,750 less ETH held as collateral,” continued the report."
Given the efficacy of Facebook's targeted advertising this may be inevitable.

Some random website containing a restaurant's information simply isn't worth maintaining if all your customers use Facebook anyway.
It's not even clear that "exploit" applies, since exploitable behavior usually exists somewhere in the undefined weird machine[1] of triggerable but not intended program state. But Code is Law in cryptocurrency land, and it's not clear what "intent" means when philosophically the code and not a human has the final say.

[1]: https://en.wikipedia.org/wiki/Weird_machine
> It's a bit tricky, so we can't say when....

I'm curious about this part, and I can absolutely understand if you don't want to answer but I do have the following question:

Why is it tricky to ensure an application can run on a cloud deployed system or a local Kubernetes/Docker Swarm/newfangle containerization mechanism of choice/etc. system?

Specifically I'm wondering what barriers you're running into that are pushing the focus to go cloud only.
You’ll like stacks.co
He's not just a random guy. Back in the day, he used to run LiveJournal, for instance.
Do you really think that? I suggest you try to write down a simple distribution of matter in the far region of the Kerr metric, and the simplest tractable Lagrangian expressed with respect to the angular variables as the generalized coordinates, and see where it takes you as an exercise just for yourself -- a sort of self-diagnostic comparing your intuitions about weak-field systems and what you get as you walk through this sort of exercise (cf. MTW chs 21 & 26, especially exercise 26.1, which seems obviously relevant).

(Near region and strong-field work has already been done for you, numerically but recently, in recent work on GW200129_065458 e.g. https://arxiv.org/search/?query=GW200129&searchtype=all&abst... and this excellent visualizer https://vijayvarma392.github.io/binaryBHexp/ . For extra self-credit you will already be wondering about the final parsec problem, and junction conditions for the previous problem as you adapt the Kerr metric for multiple black holes.)
The type of that derivative is still (R->R)->(R->R).

I also have a PhD in maths, thanks.
The entire ecosystem is one big bug bounty.
He’s worth $80 billion for now.
How did you implement gitignore filtering?
Mississippi is 37th state to legalize medical marijuana
Literally every safety feature listed on that site is on my 2017 Hyundai Santa Fe, which brand new was thousands of dollars less than a Model 3.
And Emacs is written in C by the way :)
Yes. It is such an overused name.

Stripe Atlas. MongoDB Atlas. HashiCorp had an Atlas. Just last week was Atlas CLI "terraform for db migrations" ....
Only a handful of vignettes from 3-5 but the excitement of riding in the front seat was enough to cement that one.
In the current polarized era, all discussion online is inherently political. The only way to escape it is in small groups with other people you have mutually agreed not to talk about it with.

This is the result of Citizens United; when elections are decided by who has the most money, it’s a zero-sum game until politics have consumed the totality of our lives.
Thank you!

This looks nice. The one I've been using so far seems to glitch sometimes:

http://www.yasiv.com/github/
Giant investors, who have put a huge amount of money into the Solana blockchain, or into the company behind the Wormhole bridge. It's also likely that these same companies/individuals were the same ones that took most of the loss anyway, so they may mostly be paying back themselves, while at the same time keeping up the value of their investments the projects.
Maybe because it is written in C? Hehehehe :)
I'm all in if they get behind the power glove.
The font variation of Sapir-Whorf.
I get hypnotized by tiktok even by seeing it over other people's shoulders. HN and reddit already makes me feel guilty. I am not even starting with that one.
Groups used to be broken off into a separate iOS app. That time period was blissful. Then they removed that app because it allowed users to escape the newsfeed.
lol. ok. but do tell (or better show!) what lisp you implemented
And thus begins their gamble. They’re going to have to bet the entire biz on virtual. Most public companies can’t do this, but FB has a unique control structure that gives Zuck the ability to bet the farm.
Mostly, network connections aren't so public, so it's interesting in general. Also, upgrading their IX capacity may be a sign that their product is maturing or has significant use. As an upstart ISP, Starlink needs to seek out the connections to CDNs that their customers demand, and an IX connection is a good place to get them at substantially less cost than transit.
WTF is the Metaverse?!
Sometimes somebody else said it best:

http://stonetoss.com/comic/build-big/
This reminds me of the story about a statistician who drowned in a river that was an average of 3 feet deep.
Design tip: don't load a 4000px image into a 800px container, it's very wasteful for everyone involved. Or maybe provide some settings so I can adjust it? :)
Keep doing it that way, I'd say. The other replies are ways to do it without chaining grep, but they don't seem any less verbose and definitely are less obvious.
I'm aware, and compressed gas storage containers are equally low if not lower. They also fail in a way that is safer than batteries fail. The tanks are engineered to split and the limited, usually zero, shrapnel is redirected downward.

What really limits compressed air as a vehicle energy store is the inability to reasonably run climate control off of it.
Until you start multiplying infinities on your auto scaling AWS cluster
I was really impressed with a lot of the GPT3 stuff I had seen people showing so I gave it a spin myself. I was surprised by how repetitive it seemed to be, it would write new sentences but it would repeat the same concepts among similar prompts. I wish I saved the examples, it was like when a chat bot gets in a loop but GPT3 varied the sentence structure. I think that if you look closely at transformer models outputs you can expect the same sort of thing. Its like in high school when people would copy homework but use different wording.

I also think generally in ML and DL the overarching progress gets hyped but in the background there are murmurs about the limitations in the research community. Thats how we end up with people in 2012 saying FSD is a couple years away but in 2022 we know we aren't even close yet. We tend to oversell how capable these systems are.
From the looks of it, they've closed up shop and left. Their website is just a massive banner pointing to their twitter [1].

If this is temporary, than this is extremely shady behaviour for an organization handling "millions" of crypto tokens.

[1] https://portalbridge.com/
If you think about how metrics works, they probably had friendly fraud pumping their numbers -- think about them counting bots as new users when in fact it was just bots. Zuck sells Nov'2021 because he knows this info (insider trading works this way), earnings come out and news is released from the prior quarter.
> I hate that pro gun propaganda is seeping in to our country and gun access is getting more relaxed allowing psychos to get armed.

What "pro gun propaganda" is this exactly? Gun access is not getting more relaxed - talk about propaganda. The Federal form you are required to fill out at any gun shop in the country asks you to declare whether you have ever been adjudicated as mentally defective or have ever been confined in a mental institution. Answering Yes will result in your firearm purchase being denied.

We can't know ahead of time that someone is going to go off the deep end and go on a shooting spree. You can't legislate this risk away short of banning guns completely and confiscating all of them, which is unrealistic/impossible. Let's ban alcohol as well because it kills twice as many people as guns do (half of which are suicides) annually.

I'm an independent that shares plenty of the Democrat party's positions, but gun control isn't one of them. Guns are tools than can be used and misused like any other tool.
The novelty hasn't worn off for me because I don't treat it as a game console. I treat it as a new form factor computer.

I use it daily for HIIT workouts, and I use it to spend time with family and friends who are either far away or busy with life i.e. kids. It's way better than FaceTime or Zoom.
What if you fashioned what you just said into an interview question? Perhaps phrase to be careful that you aren't asking for free consulting. Maybe candidate reaction could indicate who might be a good person to help with that problem.
The actual exploit (simplified for brevity):

if (validSignature == signatureFromGuardian)
approve()

If you send an invalid signature from a non-guardian, the condition also resolves to true..
The actual exploit (simplified for brevity):

if (validSignature == signatureFromGuardian)
approve()

If you send an invalid signature from a non-guardian, the condition also resolves to true.
Hacker News and other relatively smaller forums are different. They are free social media networks that aren't optimized to maximize engagement, promote outrage, or instill a fear of missing out.
When is Clubhouse running out of money?
I'd say this whole ecosystem is the strongest proof we have so far that the secp256k1 curve is not backdoored. At least there's that.
yes they do! i read this website for months before posting and then all my posts would always get deleted or deleted secretly. so i realized ive just been reading propaganda this whole time. i was gutted. feels like ive been lied to the entire time. you just naturally assume youre reading what people actually think. i wish there was a way to go back to the old internet where there wasnt massive amounts of money involved in policing peoples conversations
I'm not sure that's justification for continuing the policy. Most people are surprised to discover mods can "remove your comment and it still shows up on your side as if it wasn't removed". [1]

Reddit gave mods the ability to shadow ban about 5 years ago via automod [2]. Now even crowd control can remove comments [3]. These features would be fine, in my opinion, if users could discover when their comments were removed.

[1] https://www.reddit.com/r/technology/comments/jp4j76/google_a...

[2] https://www.reddit.com/r/modnews/comments/6bj5de/state_of_sp...

[3] https://www.reddit.com/r/modnews/comments/qhpr6i/crowd_contr...
I hate how pro abortion is seeping in to our country and psychos being able to abort babies. So what can I do. You win some and then you lose some.
Interesting. Your comment appears to show you were never speaking in good faith to me. Which is sad.

I can sort of see how people who have a bias against Palestinian and are in related bubbles and surroundings like mine as a white collar Westerner to be taken a back by a valid question like that. It's unfortunate and sad, but I get it.

I don't get how it could ever be perceived as trolling from some one who is calm and trying to look for good faith.

I am sure if I email the person in Gaza and the 2-3 in Israel I communicate with to ask the same Q, they'll respond with something like "you mean the common average Palestinian trying to live their life? Not much".

--

Another factor that now may show you were never/not in good faith is not responding to my inquiry of "many more were just killed". I even switched my IP to an Israeli to get better Israeli sources. I could not find any stating what you wrote. Not close. I'd think you'd want to show that that what you wrote did in fact happen. Since you won't, I'll say from my checking of sources, close to 900K were pushed out of the Arab world. Counting up different loose numbers of the ones killed, almost entirely looking at pro-Israeli, pro-Jewish sources, gave a number less than 5% of 900K being killed.
They haven’t moved into advertising within iOS - that seems to be a popular falsehood these days.

And they have steadily introduced new revenue streams such as Watch, Music, TV+. Services is where it is at.
NASA plans watery end for space station in 2031
>Coffee 1946: 46.4 gallons per person

>Coffee 2005: 24.2 gallons per person

24.2 gallons per person.. so that is 24.2 gallon / 365 days * 128 oz/gallon / 8oz/cup = 1.06 cup / day.

1 cup per day? That seems crazy low. I guess that must include kids/young adults..
The budget for Grand Theft Auto V was $265M. It was the largest budget for a video game at the time. This guy is blowing $10B a year on something far worse? What the zucc.
Evidence is a horribly abused term. Do you really believe any of this would admissible in a court of law?
I'm aware, but where are you getting your knowledge specifically of the American plains? They were called the great plains since the founding of the country, because the settlers encountered plains, because they've been plains for approximately 25 million years: https://en.wikipedia.org/wiki/Great_Plains.
What I was trying to convey is that I'm not sure at all that you'll need a programmer (i.e. someone who has the mindset and the skills of a person we call today as such) to talk to the AI. Because the AI may just be able to understand a sloppy description that the average user (or the average product owner) is able to communicate. And when/if not then it will be able to either ask clarification questions (like "what do you mean by account?") or just generate something and then let the user figure out if it's doing the right thing for them. If not, they can ask for changes or explain what they think was misunderstood.

And my (weak) conjecture is that we may not need an AGI/human level AI for this. In which case we might still want to have some software to be written. But you're right, I'm also not sure that there will be a point where we still want software but have very intelligent machines. And while saying that programmer will be the last technical job doesn't sound like a strong claim, I'd say say it would probably be teachers :)

> The job will evolve, but there will always be someone who tells the computer what to do.

Which may very well be the users, if the machine is able to follow a conversation. Now the thing that may be the showstopper for now might exactly be this: that the machine should be able to hold a context for long enough (over multiple iterations of back and forth communication). As far as my limited knowledge goes, this is something that they have not yet figured out.

The "our kind will always be needed" is exactly the fallacy I was talking about and the one that the practitioners of every intellectual professions seem to have. They think they will be needed to interface between the machine (whether it's a legal or a medical system) and the client. Because they assume that the machine will not be able to communicate only to process the existing knowledge base.

But again, the whole field evolves through surprising leaps. Yep, Copilot is not insanely useful, but already amusing/frightening enough. It seems to pick up context from all over the code base. Sometimes it goes totally wrong, and generates gibberish (I mean generate non existent identifiers that make sense as English expressions but ones that don't exist anywhere in the code). But quite a few times it picks up the intent (the pattern/thought pattern) even if it is spread out over a file (or several ones).
This was on the Solana side of a Solana to Ethereum bridge. The vulnerable code was written in rust, and living on the Solana side. Not an EVM issue or EVM code.
I disagree with everyone about Instagram on HN. Instagram is amazing to me. But, I also love Pinterest which most people here hate (may be because of search results spamming). Where else can you curate a feed of vintage airline tickets? Or vaporwave aesthetics?

Also, ads that I see on IG are always promoting small businesses and never scammy. Actually it is a source of discovery for me.

All friends that I have love IG, been using it since 2013 daily. Visual culture is far more interesting than crap on FB or ephemeral social toxicity on TikTok/Snapchat. My IG contacts/feed never discuesses politics or activism.
Calm down, he took down a few websites. He didn't take down their entire internet, as the article notes a few times:

> As rare as it may be for a single pseudonymous hacker to cause an internet blackout on that scale, it's far from clear what real effects the attacks have had on the North Korean government. Only a tiny fraction of North Koreans have access to internet-connected systems to begin with, says Martyn Williams, a researcher for the Stimson Center think tank's North Korea-focused 38 North Project. The vast majority of residents are confined to the country's disconnected intranet. Williams says the dozens of sites P4x has repeatedly taken down are largely used for propaganda and other functions aimed at an international audience.

> While knocking out those sites no doubt presents a nuisance to some regime officials, Williams points out that the hackers who targeted P4x last year—like almost all the country's hackers—are almost certainly based in other countries, such as China. “I would say, if he's going after those people, he's probably directing his attentions to the wrong place,” says Williams. “But if he just wants to annoy North Korea, then he is probably being annoying.”

> For his part, P4x says he would count annoying the regime as a success, and that the vast majority of the country's population that lacks internet access was never his target. “I definitely wanted to affect the people as little as possible and the government as much as possible,” P4x says.
Or perhaps your daughter will start using it in here early 20's when life gets busier and people dont have the same interaction expectations?

I dont know the answer but as a non-FB user I do see limitations when people organise events or group chats on messenger. If my wife wasn't connected to most of my friends I'd probably miss out on a bunch of relevant things. So for youth not on FB, I guess time will bring them back into the fold.
They can’t buy TikTok, and it’s too late to copy it.
Banks are required to maintain capital reserves (distinct from the federal reserve rate) sufficient to weather most financial upsets. And the fact that the federal reserve moves to compensate customers in the (extremely rare) case of bank insolvency is an incredibly good thing, probably among the single greatest stabilizing factor in consumer banking in the US.
Retail consumers do not receive dedicated bandwidth. ISPs will oversubscribe the promised amount 25x-100x because not everyone is using it at peak capacity 24x7.
Yes, that's true, when we refer to ads we have to consider both internal properties and external.
52, and I’m getting tired of a lot of things. May be the testosterone. From a VR standpoint, Battle Royal zombie shooters with bow and arrow mechanics in a game with crafting and skill trees holds NOTHING for me anymore
The term for this trope is “power spiral” and Gurren Lagaan is a fantastic satire of it. The main character’s power is literally “spiral power” (a drill) and the plot revolves around the fundamental danger of exponential growth. Spoilers: the series ends with the main character piloting a mech that’s piloting a mech that’s piloting a mech that’s piloting a mech that’s throwing galaxies at the bad guy.
reddit is great if you curate your feed. If you go to "popular" or "trending" it's a dumpster fire. I still love reddit though with my 10 or so subreddits that I follow.
Try ClickHouse. You can set it up on a laptop, in a VM, or get a trial on one of the cloud services. You didn't say which RDS database you are using but ClickHouse can read data directly from MySQL and PostgreSQL. Pull it into tables on ClickHouse and try out your analytic queries to see if it seems reasonable.

100s of millions of rows is relatively small for ClickHouse, so you don't need to worry about advanced optimizations like compression codecs or materialized views. Standard datatypes and the default LZ4 compression should be just fine. Y

Here's quickstart video that will teach you most of what you need to get started: https://www.youtube.com/watch?v=phTu24qCIw0

I work on ClickHouse at Altinity and created the education video. I'm kind of biased. ClickHouse is not the only OSS data warehouse. There is also Druid and Pinot. I think, however, for this particular case where you are pulling from RDS that ClickHouse will turn out to be a good solution.

Good luck whatever approach you choose!
Maybe I'm having a dumb day here but I'm not following... is the code block there the intended behavior or the exploit? In the case you mention, both conditions are false...
A ridiculous number of tech companies have lost tremendous amounts across their entire life and yet have nice public stock prices. How long before Amazon decided to turn a profit instead of inverst? I’m not surprised Meta is spending to build anything.
So what have you implemented in your magical 10x language? I told you some of what I have done not using Lisp. Here is your chance to brag about all the cool production stuff you have written in Lisp. Let me get my popcorn. I am waiting :)
Zuck and other executives sell on a schedule right? I agree this is plausible but your second sentence sort of implies he in short time frame defrauding investors by selling before releasing numbers. Not sure that is the case, its the same as Elon Musk asking Twitter if he should sell but already had scheduled sales disclosed prior.
huh? amazon is down 10% on the year. All that's done is demoralize the new hires further.
> If you send an invalid signature from a non-guardian, the condition also resolves to true.

Huh? That resolves to false && false, which equals false.
What's your spend? We're way into five digits and we're not getting thar in ROI. We're heavy on metrics, which come at a huge cost.
Everyone uses Instagram, teens most of all.
It’s more than this no? I think the attacker substituted their own ECDSA verify function contract because the load call didn’t check it was the system verifier?
Two of those are on the normal vlan, and two are on the jumbo frames vlan. Both vlans are available on the same physical ports.

Confusingly they list each of those as 200G capacity, not sure if that's a typo or it really is 2x 2x100G.

https://peeringdb.com/net/18747
Hasn't the IRS been facing a ton of budget cuts lately?
That's so funny. I had a call with Charles 7 months ago and immediately thought of him when I saw this. Come back a day later and he's here!
Palestinians did that under desperation 15+ years ago. No elections since then. Would you call it democratic still if we didnt hold Senate, House, or Presidential elections in the US for the next 15 years?
Crypto projects tend to be the best in the entire world about paying out bug bounties. The connection to dollars is really obvious. In the last three months there have million dollar plus bounties paid out.

Here's an article from today about a million dollar bounty paid out:

https://medium.com/immunefi/notional-double-counting-free-co...

Here's another whitehat save in the last two weeks of 480 million dollars:

https://media.dedaub.com/phantom-functions-and-the-billion-d...