skysight-inc/HackerNews huggingface dataset:
Don't do it if you don't understand what you're doing.
You misspelled Immunefi btw, I went looking for it, but googling "Immenufi" only lead back to your comment.

Immunefi turns out to be the correct spelling (weird that Google didn't figure that one out).
What? So startups should not be allowed? 90% of them fail after all. The odds of a startup being successful is literally gambling.
Discord uses default elasticsearch settings for search, so almost every word belongs to an equivalence class of synonyms and conjugations that are often not equivalent or mutually relevant in technical usage (for gaming-related use or for work-related use!), multi-word phrase search is impossible, searches including words in the stopword list are impossible, searches including programming language syntax are impossible, etc. "ide" is a fish or an Integrated Development Environment but belongs to the same equivalence class as "i'd" (contraction of "I had" or "I would", mysteriously NOT on the stopword list!) or "id" (part of the mind in Freudian psychoanalytic theory). If you go to a server concerned with programming, psychoanalysis, or fishing, and you search for "ide" or "id" you probably weren't looking for every single time anyone ever said "i'd."
> There's actually a permission for apps to run a native service in a Microdroid VM (system-managed crosvm + Binder vsock), though I haven't gotten it working on DP1. Direct KVM access requires root though.

https://twitter.com/kdrag0n/status/1492790737192177668
Rampant unmedicated ADHD.

Sounds like a joke response, but it isn't. My focus will settle on something because I want to do a specific thing in that area, and it just doesn't let go, even when I need it to. As a perfect handy example, my brain is currently full of a) chess, and b) compliant mechanisms, when it should be full of Rails/React interview prep.

I guess the transferrable principle here is to have something concrete you want to do with the knowledge you're gaining so that your brain has a tonne of hooks to hang the theory off.
> no one anywhere is trying to track that price discrepancy

Let me just ask everyone what they got after laundering their dirty ETH. I am sure they will answer truthfully.
Congratulations!

Also, thank you for Cydia, I used it in middle school and high school. It definitely made an impression, thank you.

Orchid looks cool too!
This is my point with the theory that the account has been taken over as i could not log in. But I could see that that the user was suspended.
What protocol are you referring to? Tails makes a lot of great efforts to prevent undesired network access but at the end of the day it doesn't do any isolation by virtualisation and the bundled video player was able to ping a server directly. I don't believe this approach would be possible against Qubes OS.
https://immunefi.com/
That's a generalisation and it's invalid like all generalisations.

That said, it's more likely that someone whose life ended in poverty is not as smart as someone who can live comfortably. IQ generally correlates with income (you can google a few studies).

There are surely tons of reasons that can push smart people into poverty (bad health, poor environment leading to poor choices) but that shouldn't obscure the general trend.

That said, I think over a certain IQ, other traits of your personality or the environment will have the predominant effect in determining whether you'll end up poor or not.

Similarly, over a certain amount of money, I'm sure there will be more variance. Making 5k more than your peers doesn't mean you're smarter than them - and the fact that you're all able to earn a living and save some money means you're all smart.
Depending on how much cash you have sitting around, I have heard of people on /r/churning pulling that amount in from credit card and bank bonus churning.
Lemmy is not necessarily designed to be free of censorship, there's been quite a bit of controversy about them including an active-by-default "profanity filter". Not that there's anything wrong necessarily with censoring bad words, but it's nice to be accurate about this stuff.
WebSockets are also quite unreliable but Socket IO hides all this from you.
It’s hilarious and embarrassing, the extent that people are willing to go, just to deny that every single problem with crypto stems directly from the underlying economic system.
You typoed the URL.
I have a controversial opinion. You don't need offramps.
Let me clarify - In that specific instance, the guy was on cocaine and his heart exploded, then he lost control of the car while speeding and hit the telephone pole. So “drugs”.

And the drinking part, to clarify - preferably my daughter doesn’t drink until she’s in college and legal (“don’t do drugs”). But if she is at a place and has even one drink, she should call me to get home, rather than try to drive because she is no longer comfortable staying at the party.

I was at parties at age 13 and 14 that had drinking. I was never pressured into drinking and didn’t until I was older, but others could be peer pressured. A 16 year old at a party with alcohol or weed is not unrealistic, and if she makes a mistake and accepts a drink or a hit, I don’t want her to compound the mistake and end up with a DUI or putting her or someone else’s life in danger.
> when he showed hesitation, they got too impatient.

This seems to be the common factor among scams, cons, and social engineering strategies. Rushing people will have them bypass protocol, training, and security practices. It's a universal "hack" for our brains; we do things we otherwise wouldn't when rushed. Security practices are like a rituals, standards of behavior that we just don't have time for right now.

"The funds are only available for the next hour"; "You will be prosecuted if you don't do X"; "Per the CFO, we need to spend these funds before end of day."
Hey, sorry for replying off topic.

We had a discussion on Firefly earlier, and I've just written the first small peice of Firefly documentation, introducing the new capability-based async/await inference:
https://www.ahnfelt.net/async-await-inference-in-firefly/

You said to reach out by email, but it's not showing up for me on your profile. If you're interested, there's also a draft on part 2 here:
https://www.ahnfelt.net/p/ce19cc5c-d18c-452f-86c3-85a920e748...

Thank you :)
You got it. :)
But we also have to keep the lid on fraid, mafia, tax evasion, organised crime, blood money, etc.

To me the point of blockchain is to democratise access to financial technology. To other's, it's to create a currency that cannot be manipulated by central bank politics. Only to some people it's about privacy - i woupd be quite happy with a totally open and public financial system if it applies to all people equally.
“Web3”
OT, but I sure wish papers like this included a publish date. This paper references a 2015 paper by Taylor Campbell, and mentions at least NetBSD 8, from which a date can be derived, but it’s annoying to not know the time of development this is addressing. Otherwise, it’s compelling - Joerg often tackles interesting problems in NetBSD.
yes, US has been doing regulatory capture to extract profits from crypto since 2016, it's horrible but the silver lining is that crypto was forced to innovate and produced the wonderful jungle of DeFi that currently exists and is used by many
It can lead to false positives. Only the government is allowed to sell tainted coins. Very convenient rule for law enforcement agencies.
Maybe intermittent fasting autophagy can be the key to elongating life through that continual repair.
I think this link is way more useful:

https://www.bogleheads.org/wiki/Managing_a_windfall
Of course. That’s just not PG and isn’t a Business PlanTM.
I'm not entirely convinced this isn't just the same as 'don't do it'.
> But that's orthogonal to how quickly the maintainers of these tokens can make changes in response to threats.

Never mind that the entire threat class doesn’t exist in traditional finance?
> It’s literally as simple as not putting a cigarette in your mouth and smoking it.

Literally the approach I used when I quit smoking.

> Crazy thought but what if we had a sample size bigger than you.

Well, that sounds like something everyone can agree on. Or do you just mean your opinion is bigger than anyone who disagrees?
Use of controversial phone-cracking tool is spreading across federal government
Fascinating!

I'm working on a book as well, but for the Frontend. I'm very curious to know more about how you marketed this?

I know it's a different niche, but is there any globally applicable advice you'd give?
After all that's been said in these comments to explain and nuance this idea, you seem awfully confident in an interpretation that ignores all of it. Instead you assert an extreme, black-and-white, overgeneralized interpretation that has already been repudiated multiple times.

I agree that zealotry is best avoided.
> Why do I have to pay more fees to swap tokens on decentralised exchanges making them unusable

So I still have to wait at least 2023 (2025 or 2026 for a realistic possibility of merchant adoption) for ETH 2.0 to be used?

I don't think merchants would want to wait for something that is not complete and unregulated.

You do realise that ETH 2.0 has nothing to do with lowering fees? So all the DeFi apps using it will still be unusable anyway.

> If you have an internet connection, no one can stop you from using these protocols (and many other protocols)...(just tens of thousands of Ethereum nodes which are responsible for settling transactions).

Aren't most of these Ethereum nodes and DeFi exchanges on AWS like dydx? It went down a few months ago no? [0]

That doesn't sound decentralised to me.

> Use protocols that have been around for a long time...That decreases chances of you losing funds. But it is a problem

So I can't get my money back then? I see DeFi hacks everyday and not getting my money back doesn't help either.

Makes robbing a bank less attractive for criminals and instead target DeFi projects.

[0] https://twitter.com/dydxprotocol/status/1468293558360805381
I agree the government would be way worse at dealing with this flaw - but they probably would have just reversed whatever exploited transactions they needed.
Or even just printed some more money to make everyone pay at the latest.
> Reddit's censorship has gotten so bad I think it's a real societal risk considering how prevalent it is.

How is reddit anyhow relevant to society. And how would a corporation cleaning/sterilizing an online forum be a societal risk. Is society that fragile?

And how can it be censorship? At least in my jurisdiction protection against censorship and free speech laws regulate the state's behavior, not private people or corporations. Not sure how this is in the US, though.

I just don't understand why people calling the behavior of private entities censorship.

But as said, I very likely are missing something fundamental.
Very nice and congratulations :D

Would you mind writing a bit about how you got it in the market, do you run ads for it, etc?
The bounty amount was denominated in USD and is being paid in USDC (a stable coin, which is means it is intended to map effectively 1:1 with--in this case--USD).
If you find a problem that you are obsessed with, you will learn lots, whether you want to or not.
I just googled and found new rowhouses, and soon to be built ones in Philly. The style seems to be more modern, but the basic idea is the same.
Bitcoin's blockchain is not scalable, but there is Lightning, which can give Bitcoin more "currency" traits.
Thanks, I found it, but wanted you to correct it for others. I forgot about the 2h edit limit though.
Yeah these subthreads always remind me of the Money Laundering subplot in Office Space.
Most people who invite me
over for a sandwich would be insulted if I entered their house, took the sandwich they made me and left. In fact, I probably would never get invited over again.
It can take years for contract law to get in front of a judge and be enforced, often the damage that can be done in that interval is significant. So I think they timeliness is indeed relevant.

As for your murder comment, I'm not saying that violence is strictly unnecessary, just that the coincidence of "we have the guns" with "we issue the ponzi tokens" is probably not the only way to enforce the law.
Thanks. Yeah I’m thinking this would be a one day thing before the driver’s test or before riding with others in high school, so she understands the responsibility of having a driver’s license, and that it can have life-altering consequences. And if she doesn’t feel comfortable riding with someone she can bail out and I’ll find a way to get her home.
Yep - same thing here. It's really, really odd because much of the spam that's arriving in my inbox is the sort of stuff that even a 'hello-world' level spam classifier would catch.

Meanwhile, legitimate and non-spammy-looking emails are getting put in spam or literally not even arriving at all.
Inflation Was Hottest in Atlanta, Mildest in San Francisco in 2021
You're absolutely right, but the URL should be a hint: AsiaBSDCon 2016 ;)
For Humanity’s Sake, Keep Red Crosses on Medevac Helicopters
It's interesting that he invented Rust but hasn't worked on it in 9 years. I'm not sure I'd be able to walk away like that.
I still fail to understand how the smart contract metaphor of "here is some obfuscated code from a third party, please give it access to all your money, kthx" has managed to survive at all. I mean, really, no one saw this coming?

It's just the Trust Problem all over again. Decentralized reliance on automatic software still requires trust that the authors of the software won't scam you. It all comes down to trust. And I trust banks, mostly. Who in their right mind trusts contracts someone sends you on Discord? And yet...
That has literally nothing to do with what I'm saying. Nobody except for weird techno-idealists actually value crypto in any terms other than it's equivalency to actual money.
Concernting this particular article, there is not actually much to learn. Ignore everyone bickering about CORS, that's beside the point (as is the title, which was very badly chosen).

The point is that in a client-server architecture, you can never trust the client to play by your rules, and anything you put into the client becomes public knowledge.

The big mistake in a previous article which this one criticizes is this: it put an API key hardcoded into the client, which let everyone who looks at the client code do whatever the REST API lets you do. At that point, rules like "you need an account, you have to log in, you can only change your own stuff" can simply be ignored by accessing the REST API directly instead of running the client code.

The correct way to do it is to require an authentication token sent along with requests and which the server checks. The difference between the insecure API key and the authentication token is that the client gets the token only after the user logs in, it is unique to that user, possibly valid for a limited time, and the server will only only allow viewing or modifying things which the user for which that token was generated is allowed to view or modify.
Taking over the world just seems like a cartoonish plan with no basis in reality. Maybe the old USSR had that aspiration in the form of spreading their ideology, but I don’t see it in 2020s Russia. Much more likely is that they are trying to establish/maintain a buffer of weak/client states between themselves and NATO - and possibly to redraw borders around majority-ethnic-Russian regions of their neighbours in pursuit of some kind of nationalist goal.

And since my comment also included China, I see their assertiveness in their region (e.g. blue water navy and island building) not as a prelude to world domination, merely regional preeminence, driven by defensive security concerns.

I’m not condoning it, I’m just saying I think they are playing the same bully game that every large power has done historically.
Transistor Implemented Heat Source
Ok, but who really cares about “risk-free”? He’s not retired. He can get double that return on average with a more reasonable allocation.
This was a multi-week long social engineering scam targeted at Thomas. Thomas has a Discord for a drone transportation startup, and the scammers proceeded to embed themselves in the community and provide valuable labor such as web design and graphics design in order to earn his trust.

Thomas's wallet is public and advertised on Twitter via his ENS domain. He had $100M+ in aETH, a derivative token provided by Aave when you lend out your assets for interest. The aETH is redeemable for the underlying asset.

The scammers created a fake NFT project associated with space and drones, and proceeded to give Thomas a free one, but asked that he stake it (or deposit it into a smart contract), to earn yield in the form of Armstrong ETH, a token they made up that had the same acronym as Aave's (aETH).

The catch was that when he went to stake his NFT, they asked for an approval for spending aETH from his wallet. Approvals such as this are normal when interacting with smart contracts, since the contract has to be "delegated" responsibility over the tokens in order to move them. However, what wasn't normal is that the approval was actually for Aave ETH.

If he had only looked at the front end of the scam site, it wasn't obvious what was going on. However, a quick glance at Etherscan revealed that he had signed off on an unlimited spend approval for Aave ETH.

Luckily, he had done so on a fresh wallet and not his main wallet that has $100M in aETH. When the scammers tried to get him to stake a second NFT from his main account, he got suspicious and discovered the truth.

This scam was specifically targeted at Thomas, and orchestrated over multiple weeks, for the specific assets in his primary wallet.

Couple takeaways:

- divide your assets across multiple wallets. New wallets are free. Don't put all your eggs in one basket.

- use a hardware wallet or an audited battle tested smart contract such as Gnosis Safe for storing significant sums of money.

- always verify your transactions

- avoid associating your public identity with your main wallet / vault address

- be careful, scammers are getting more creative and advanced in technique including standing up professional front end websites to give the appearance of legitimacy
This seems fallacious to me, the scenario you describe has zero opportunity cost for being alive till 200, it's free. Assuming no afterlife, you gain nothing by artificially limiting your lifespan to less than half its amount.

But in reality, there's opportunity cost to trying to extend your lifespan, it's all the money and attention and other resources that could have gone to improving other much more certain-rewards problems.

In other words, your thought experiment is a fully general purpose argument for any investment. It's conclusion is that you should _always_ go for the investment no matter what the opportunity costs.

Example (1)
- We should expand the data center from 80 servers to 200 servers

= Why? our loads are not high, we should instead focus on improving the product

- Well imagine if we already had 200 servers in the data center, would you scale it down to 80

Example (2)
- We should invest in renewable energy

= Why? nuclear power is much more certain and mature

- Well imagine if we already had renewables, would you phase it out in favor of nuclear?

In both cases, you're completely missing the point of your opponent by the "Imagine if we already had" maneuver, we don't, that's why your opponent is against it, it's a risky investment with uncertain rewards and plenty of same-utility alternatives (in the opponent's view).
It's from 2016, but still an interesting read. Is anyone still using NIS in 2022 though? I haven't considered using it in over a decade.
Nice work! I like the look of your demo on the front page, no images or ad fluff. Sign up was simple, I’ll evaluate for a few days.
Taking over the autopilot system doesn't lock you out of it for the remainder of the drive.
This is the problem with crypto. People want all of the positives of removing centralization AND they want the positives of centralizing those same things.

They want "Distributed Code is Law" AND "Openseas validates NFTs"
> Whittaker wasn't a typical lottery winner either. His net worth at the time of his winnings was in excess of $15 million, owing to his ownership of a successful contracting firm in West Virginia.

That Reddit comment is not about 'poor people', though it's true the scale is a bit different.
By looking at an outline of one and saying, “I don’t know any of that, why waste my time?”

Then becoming a billionaire.
I didn't say it was easy. But a black market is still a market, and has prices. People talk with some level of precision about market prices for kalashnikovs and heroin, why not for "mixed BTC"? My surprise is that no one is talking about this.
Can you please elaborate? SW running against a strong memory model is actually simpler and less buggy than SW written against a weak memory model. In a weak memory model, each atomic operation has 5 modes whereas in strong they’re all equivalent. Most programmers can barely write simple atomic code and the weak memory model is trickier to wrap one’s head around (at least I still struggle to properly understand it vs using high level shortcut heuristics).

A strong memory model is also trivial to implement on a weak memory system whereas the reverse is impossible. I can believe that Java on ARM can have bugs (fewer customers, relatively newer than x86, etc). It can also have bugs due to someone writing weak operations that were only tested on a strong memory model machine (ie latent bugs that wouldn’t be discovered on a weak memory model machine). Or heck. It can have bugs precisely because someone wants to somehow leverage weak operations for performance butt it did so incorrectly.

Side note: The M1 is an interesting CPU because it implements both strong and weak memory models directly in HW.

I don’t know why you got downvotes but what you provided was more of an opinion than fact (my post too is opinion).
JavaScript also should not be used in the browser.
"extremely thorough social engineering"

Not really, it seems like the usual being extra flattering to earn favours (or worse). The first two messages would have raised several red flags with me.

> He's currently working at Ubisoft and offers to help with 3D design and animation

Like if I worked for Ubisoft I'd have time to do 3D design for free for some other company.
We give way too much credit to well-sounding contrarian arguments, specifically because it makes us feel like we know secrets and strokes our ego.
Good read - thanks for sharing
Then it is missing 2016 in the title.
Should have used XSD. ARM, STM, TI, Autosar already use XML-based formats.
I guess that’s another clue but I’m my address bar that’s buried away, and if I printed this out, could be permanently lost. Thanks for for hint though - now it’s a less frustrating read :)
It should be clear what is happening here. Intel sees Arm as a competitive threat in its high margin desktop and server cpu business. Supporting RISC-V as an Arm competitor at the low end weakens Arm and lessens that competitive threat.
The clients are free to make another "connection" and get a new session id every time they want. It's similar to http connection reuse: the src ip-port + dst-port also acts as a "session identifier", as long as multiple requests flow throug the same TCP connection.
For the same reason we don't change things so any doctor can be a brain surgeon?
Sure: https://victorgamer0720yt.gitbook.io/hackintosh-imessage-fix...

It's a bit of a hassle, but I got mine to work in less than an hour. Apparently there's now mitigation that could require you to call Apple support, but I never ran into that when I was on Mojave.
I’m in my 50’s and I’m a much better golfer than I was in my 20’s. Partly club technology has enabled me to hit the ball more consistently and partly I now don’t try and hit the cover off the ball each shot :)