skysight-inc/HackerNews huggingface dataset:
This is quite worrying. Again its not clear who is behind this disinformation campaign and who stands to benefit from it.

I don't want to say it's Ukranian intelligence because it seems illogical to me but would confirm my suspicion that it is sabotaging its own: that they could use disinformation to shore up international support at the risk of inevitably being debunked and losing credibility.

Again, cui bono, who benefits here from this disinformation? It is still not clear because why would you raise the morale of your enemies troops on purpose in the opening hours of the war?

This is an endless hall of mirrors, whatever it is they are doing, its working, its raising the cost of discovering truths while lowering social cost of emotional outbursts (seen that already here from someone accusing me of being a Russian bot) to further distort reality.

Everybody needs to remain calm, and question what they are seeing is real or fake, before choosing to disseminate it.
Apart from the reductions in energy bills & carbon emissions, there would also be a general improvement in health. Central heating has been implicated in the diabetes epidemic that plagues Western socieities: https://www.diabetes.co.uk/news/2017/apr/cooler-temperatures...
You can test this hypothesis pretty easily since coffee oil is a surfactant. Get freshly roasted beans (ideally less than 2 weeks) and make your French press. Once the brew is ready, skim off the foam on the top and you will have removed a significant amount of the oils from the coffee. Be sure to taste blind, ideally using the triangle method.

Edit: see also the studies about cafestol being strongly correlated with lower risk of renal cancer. This is a very complicated subject and the analysis of it should be done in concert with real medical professionals.

https://pubmed.ncbi.nlm.nih.gov/34677742/
or earlier. 2014 would have been better.
You wear IFF coloured bands. From photos I've seen the Ukrainians are using yellow arm bands, and Russians white leg bands.
Instantaneous payments exist, I use them several times a day, with traditional banking. I never quite understood what problem bitcoin was supposed to solve beyond anonymity.
No, bodies are sent to home. Period.
if you havent seen these before, no its not a twisted piece of steel:

https://en.wikipedia.org/wiki/PFM-1
What would be the fastest way to get these to Kyiv? Fly them to Warsaw or further east and then on road from there I imagine. Might still take a couple of days, hope that's not too late.

[Edit: Typo Kiev.]
No team is capable of writing complex software without eventually introducing security bugs, and we (Zulip) are no exception. I'm disappointed that we introduced this bug, and would like to apologize to our users.

As a bit of commentary, my experience is that most SaaS vendors fix security bugs quietly. Others will do an brief internal investigation and only consider doing a public disclosure if they believe data privacy regulations require them to do so, because they discovered that the vulnerability had been in fact exploited. Usually public disclosure decisions are made by business executives with PR considerations in mind, so that shouldn't be surprising. See, for example, https://www.zdnet.com/article/slack-resets-passwords-for-1-o....

Zulip's core values include transparency, and our policy is to publicly disclose all security bugs that we discover with a formal CVE number, and this blog post is part of that practice. As noted in the blog post, we did an extensive audit and emailed every customer who our audit logs could not prove was not affected with enough detail to let them audit the situation. We did that despite our audit finding no evidence that this vulnerability was ever intentionally exploited, because we think it's the right thing to do.

Some technical detail I can add for those interested is that our postmortem plans following this incident include further investment in the internal audit log system used for the investigation (`RealmAuditLog`, if any readers feel like grepping our codebase). Improvements we made in mid-2020 were very helpful in investigating whether this bug had in fact been exploited, and we take this as a sign that we should increase investment in that system.
> Putin is not crazy

From what I've seen, he may be the most delusional human being alive.
S-300 warhead is 130-180 kg (different modifications)
I don't really know, so take my answer with a grain of salt, but my lay understanding of chemistry and physics tells me:

* Typically vaporized solids a fine powder they cools down in air, or otherwise deposit on cool surfaces

* Fine rock powder could be hazard to lungs, but it shouldn't be too hard filter it out of the air that leaves the hole

* Some rock materials contain sulfates or phosphates; letting those escape into the atmosphere in large quantities would be bad; but you could always let it recombine with the rest of the evaporated rock, rendering it inert. Such a process wouldn't be 100%, so this is something worth looking out for.

Most wealthy countries require an environmental impact assessment before any such operation, so there's hope such things would be caught before they become a big problem.
Most companies are being turned off when mentioning my country.
Some pretty dire stuff on Facebook right now, like people making a meme out of the 13 Ukrainian soldiers who were killed after they pointlessly refused to surrender to a Russian warship they had no chance of putting the slightest dent in.
> Crypto may well be the biggest solution looking for a problem I've ever seen.

It seems like it precisely solved the problem it originally claimed to solve to me. Permissionless p2p transactions. Full stop, no political baggage to argue about.

I think it's others look for "bigger" problems for it to fill that are the problem, not the tech itself.

Blockchain's killer app is Bitcoin. Someday folks will finally realize this.

Many will think it's useless until they unfortunately find a need for it.
String-Based Templates vs. DSLs: The Pros and Cons of Each [audio]
>Is this a supply and logistics issue, or tactical?

It's a political one. German politicians have been cozying up to Russia since Schroeder.

And a business one, they don't want to endanger a big trading partner. All those German businesses who depend on Russian imports/exports will suffer.
He is already doing it, just ran out of ammo. Russian ammo stockpiles are wast, but very old, and decrepit. Some literally date to WW2.

In first 2 days, they used pretty much everything against city outskirts.

You think Putin is afraid losing sleep? He already tried to bomb the Kiyv dam multiple times, he wants to destroy the city plainly, and simple.

https://uacrisis.org/en/the-russian-occupiers-tried-to-blow-...

If Kiyv dam is breached, it will flood the Zaporizhna nuclear plant.
You are one bed sheet away from chroma keying in OBS. Since you can easily configure the color to be keyed, you will have luck with anything besides the color of your skin or your eyes. I tested it with a green sheet fitted on the bookshelf behind me and since bed sheets wrap around roughly the size of it, I did not even need any tape or clamps to fit it.
If Putin fails this, it is over for him. There is no turning back from this and continuing to lead the country. The whole idea of invading can be classified as crazy and was not expected to actually happen by many. I just wouldn't underestimate him if he is backed into a corner.
As a side note, I'm surprised that this specific security disclosure ended up on the Hacker News homepage, while our security release about an RCE issue affecting self-hosted Zulip servers last month did not (https://blog.zulip.com/2022/01/25/zulip-server-4-9-security-...).

The core bug there an insecure secret generation algorithm in upstream Erlang/RabbitMQ, which seems more broadly notable to me!

Despite our spending many hours composing detailed reports and lobbying security teams to get this problem fixed for everyone, not just Zulip, `apt install rabbitmq-server` continues to make a Debian/Ubuntu system vulnerable to RCE, and this fact has apparently been public for years.

We did manage to get `rabbitmq-server` fixed in Debian testing, and it is scheduled to be included in the next Debian stable release, I would really have thought an RCE issue like this would result in an immediate security advisory.

As a final remark, if you self-host Zulip, please subscribe to our announcements mailing list (https://groups.google.com/g/zulip-announce) and make sure your installation is up to date, so that you benefit from the hard work our security team does to keep Zulip users safe.
So free to be used as a chess piece against Russia by Western masters
This is interesting. There was a time when I became aware of Eric Weinstein via Joe Rogan and Eric seemed to be pointing to things I'd recognized and couldn't name, and other things I hadn't recognized but could see when he pointed them out to me.

It felt enlightening: here's a concealed underlying pattern that I have now unconcealed for you.

Then after that, and after starting his own podcast, and after coming out with his own Theory of Everything ("Geometric Unity"), things shifted: Eric refused to publish a paper or proofs that could be scrutinized, what he did publish was labeled by professionals as "not even wrong" (i.e. not cogent enough to dispute), he insisted he taught himself guitar during lockdown (when he had been playing for years before), etc.

It felt like two different versions of someone: one you could trust was forthright (whether right or wrong about something), and another who would say things he knows aren't true out of ego/vanity or... out of something? But something to benefit Eric, not something to benefit the audience.

This felt like a shift to me.
> I get a runny nose if I get cold.

I was curious, so I looked it up, and according to [1] and [2], that's a natural reaction to help the nose turn cold, dry air into warm, moist air.

"When cold air enters the nose, it stimulates the sensory nerves within the nasal cavity to activate a process via a cholinergic reflex or pathway. It causes the vessels in the nasal cavity to expand and become engorged, leading to congestion and mucus secretion which produces a runny nose. It’s a compensatory mechanism that’s trying to maintain ideal conditions inside the nose by adding humidity and warmth while filtering the air."

1: https://medicine.uq.edu.au/article/2017/10/why-does-your-nos...

2: https://wexnermedical.osu.edu/blog/is-the-cold-weather-causi...
Eric Weinstein has been crazy since day 0. He was better at hiding it years ago (when he started The Portal)
Raphael Lemkin (who coined the word genocide) recognized the Ukrainian Holodomor and applied the term 'genocide' in his 1953 article "Soviet Genocide in Ukraine".
In the same era steam stored your password on disk if you used "remember my password".
Psychology of Wordle: Why are people addicted to this viral word game?
Well, there is this:
https://www.hawaii.edu/news/2022/02/10/hawaii-phones-tonga-b...

Good idea.
This is not only a type of cluster munition, but more Importantly a landmine, which is banned by Ottawa Treaty. Guess who didn't sign that one either?
Operation like this takes years to plan and prepare, and if anything it comes surprisingly late, given that civil war continued for 8 years in Ukraine. You would think they would act sooner then risking losing Donabas to Ukrainians. My guess it was delayed by Covid.
This stuff can be expensive. From what I can tell each stinger missile costs around $38k. So 500 of them is about $20 million worth of missiles. 50k would be $1.9 billion worth.
I don’t see how a civilian force will significantly improve their chances.

Edit: this isn’t a video game. Civilians taking up arms makes them targets. The Russian aim is regime change, and at this time it appears that Russia will prevail. It is existential for Russia. All a civilian resistance will do is maybe slightly delay the inevitable at horrific cost. I think people should be discouraged from throwing their lives away on a lost cause. Even the Ukrainian propaganda of heroic deaths contains an understanding that there is no hope.
When I first heard of Anonymous they were going after scientologist. It has definitely been used by a number of groups over time, probably with some overlap.
They initially said that their fate is unknown. However, Russia made a video with "border officers" from Snake island, and now they believe that they might be alive. But... Russia reused the same actors for another propaganda video... Their fate is still unknown.

Source

https://t.me/truexanewsua/24396
https://news.ycombinator.com/item?id=24396780
I would like to see a source on that, but the human body is orders of magnitude more complex than to reason about things like “it has to expend more energy” and “fever is good”. You could pretty much derive every effect from every input with these low level “conclusions”.

We have evidence-based medicine exactly because even when it would seem logical, biology puts a curve on that and the opposite of the intended effect happens.
I don’t see very many cons with more information.

The world is safer with this info in the public domain, will there be new exploits based on additional info? Sure, but that will get mitigated.

Software, like law or medicine is a practice, meaning we aren’t experts... we’re just learning better ways to do things.

This just opens the world to formal verification... for goodness sakes we’re just getting to fully reproducible deterministic software builds.
> If the many essential products BNSF carries were
instead hauled by truck, America’s carbon emissions would soar.

I wonder if Railroads will ever be replaceable, maybe if an EV truck is widely available?
BBC segment with Russian politician Vitaly Milonov...

https://www.bbc.co.uk/sounds/play/w172xv5m51jmvxk

Starts at 30:40...

Yes, they call the Ukrainian government Nazis. They are avoiding civilians because it's already a very borderline world way. If Russia throws one nuke, or engaged in blatant war crimes, the west would be more willing to be involved
Paraphrased from the film Casablanca.

For those unfamiliar with the scene:
https://www.youtube.com/watch?v=qmywwiZth5E
Similar contribution from the Netherlands¹: 50 Panzerfaust 3 anti-tank weapons with 400 grenades for them.

1: https://www.defensie.nl/actueel/nieuws/2022/02/26/ook-antita...
> no NATO nation has been attacked militarily in the 73 years since the treaty was signed [..]

Without a definition of "attacked militarily" I'm not sure that claim is useful. Perhaps mostly due to the concept of countries "declaring war" on each other having rather gone out of fashion?

Back in 1943, Roosevelt asked (!) the Congress declare a state of war. These days it seems it's more like "shoot first and ask [strike]questions[/strike] Congress later"
Best part of the interview was when Mark asked Lex what he'd do if he were in Facebook's position of dealing with misinformation and free speech.

_________________________________________

Mark: I mean, well, how would you handle this if you were in my position?

Lex: It's very, very, very, very difficult. I would more speak about how difficult the choices are and be transparent about what the hell do you do with this?
Ask the exact question you just asked me, but to the broader public. Like okay, yeah, you guys tell me what to do. So crowdsource it.

And then the other aspect is when you spoke really eloquently about the fact that there's this going back and forth, and now there's a feeling like you're censoring a little bit too much. I would try to be ahead of that feeling. I would now lean towards freedom of speech and say "we are not the ones that are going to define misinformation." Let it be a public debate.

Let the ideas stand. And I actually place the responsibility on the poor communication skills of scientists. They should be in the battlefield of ideas, and everybody who is spreading information against the vaccine - they should not be censored. They should be talked with, and you should show the data. You should have open discussion, as opposed to rolling your eyes and saying "I'm the expert. I know what I'm talking about." No, you need to convince people. It's a battle of ideas. So that's the whole point of freedom of speech. It's the way to defeat ideas - is with good ideas, with speech.

So the responsibility here falls on the poor communication skills of scientists. Thanks to social media (scientists are not communicators), they have the power to communicate. Some of the best stuff I've seen about COVID from doctors is on social media. It's a way to learn, to respond really quickly, to go faster than the peer review process. And so they just need to get way better at that communication. And also by better, I don't mean just convincing. I also mean speak with humility. Don't talk down to people. All those kinds of things.

And as a platform, I would step back a little bit, not all the way of course, because there's a lot of stuff that can cause real harm as we talked about, but you lean more towards freedom speech, because then people - from a brand perspective - wouldn't be blaming you for the other ills of society, which there are many. The institutions have flaws. The political divide, obviously - politicians have flaws, that's news. The media has flaws that they're all trying to work with. And because of the central place of Facebook in the world, all of those flaws somehow kind of propagate to Facebook, and you're sitting there, as Plato the philosopher, have to answer to some of the most difficult questions being asked of human civilization.

So I don't know, maybe this is an American answer though, to lean towards freedom of speech.
I actually liked your change from Russia to Putin so apologies for me not explaining and causing confusion and another edit. My point was that you were more accurate to say that Putin is feeling threatened, than Russia is. And this change has further implications on the validity of his stated reasons.
The Russian Army is about 1,000,000 men.
~150,000 or 15% are deployed to the Ukraine theater, and about 50,000 were sent in.

5-15% of their Army is locked up, and by all accounts, they did not deploy their newer and more expensive tanks, airforce, and equipment.
War being what it is, it's kind of pointless to expect the belligerent to respect any kind of treaty they've signed that can restrict their tactical options on the battlefield.

Saudi Arabia did the same kind of things[1] in Yemen a few years ago, with US support.

Two years ago Bret Devereaux did a blog post on the topic of chemical weapons, and why we (mostly) don't use it anymore (and that it's not because of treaties, merely because they don't work that well against modern armies): https://acoup.blog/2020/03/20/collections-why-dont-we-use-ch...

[1]: https://www.washingtonpost.com/news/checkpoint/wp/2016/09/19...
Kiev is the cradle of Russia. It would be like the US flattening London.
Germany has a strong streak of pacifism as a core Identity ever since WW2. That includes a prohibition against exporting arms into conflicts that needed to be waived here.

Yes, they will tend to err on the side of caution, even drastically so. They make up for it with lots of money and taking in a large number of refugees.
Why can't I? Are you implying the Afghani wanted their torn up country invaded by yet another superpower? They haven't seen anything resembling normal life in generations. Or that Iraqis deserved to get their well developed country almost completely destroyed?

What are you saying?
Nazism (in understanding of the Russian propaganda) is not equal to antisemitism. To see the used pattern replace Jews with ethnic Russians and Holocaust with 8 years of Donbas shelling. They literally tried to paint the Donbas war as an act of genocide from the Ukrainian army, though it's hard to call them successful in this regard.
I doubt any concession from the Ukraine would satisfy Putin. See https://fablesofaesop.com/the-wolf-and-the-lamb.html
Why? To take pictures? Were they in airplane mode?

And it's one thing to not expect the Taliban to DF your phones. The Ukrainian military, especially with prior control of the cell infrastructure, is another story.
It’s Kyiv not Kiev. A propaganda war on all fronts by multiple actors including non aligned actors.
I don't think that's an honest characterization of what Lex actually said about Putin. I don't want to put words in his mouth, but my impression is that Lex has a fascination for the capacity of humans to do both good and evil, and I think it's obvious from this point alone why he would have a strong desire to speak to Putin face to face.

I think there would be a lot of value in the world seeing him interview Putin. Not because of admiration, but because of what that interview could teach us about human nature.
YES I DID NOT?
Same pre impact flash is seen in this one as well (6:00).
I live in the south of France (in an apartment) and use no heating or air conditioning all year long (as well as no hot water, no fridge/freezer), no need for me, it saves money, and pretty good for the planet
I think you’re missing the larger point here. It’s not about what treaty is signed but what is being done. Imagine taking a walk at night seeking shelter and stepping on one. Do you think this mine has intelligence and can differentiate about civilian or not?

Last I checked it doesn’t matter what weapon you use if you target civilians.

From the Geneva convention info page in UN.

“(…) many of the rules contained in these treaties have been considered as part of customary law and, as such, are binding on all States (and other parties to the conflict), whether or not States have ratified the treaties themselves. In addition, many rules of customary international law apply in both international and non-international armed conflict (…)”

So your munition treaty is really superseded by Geneva convention on treatment of civilians.
> and look at it more like hydro electricity

I hope you are aware that hydro also has a reputation for destroying natural environments at a pretty huge scale
You can probably already create a repo and use Github as an oracle for security vulns. This seems like it'd be very beneficial to people for which security is a second priority (so most developers).

EDIT: Although your concerns might apply to unconfirmed public PRs
Kiev → Kyiv.

Pedantic, but it matters in this case¹.

1: https://www.theguardian.com/world/2022/feb/25/how-to-pronoun...
S-300 warhead should auto-destroy itself if lost the target. Source: military department of Moscow State University.
How does this scale? I assume with all the unreviewed advisories today and with the oncoming PRs, it will require a full team operating on all cylinders.

Will the team add more members to triage these things or bring upon better automations to ensure no exploitation happens through the process such as incentivizing trusted members of various ecosystems to help?

I love the idea of a public ledger using GitHub & PRs, but could more be done here to instill trust outside a single GitHub account? Perhaps even GitHub organizations could help out further of these known ecosystems.

With security advisories, it seems a bit worrying to see unreviewed advisories to yet be categorized or PRs be open for more than a few days with updated details.
> Just curious ..why not send more?

Probably not available so quickly. The military can't just give all their own weapons away and be defenseless.
I'm sure you're a hoot at parties but I'll spell it out for you if I have to: It's a tongue-in-cheek suggestion on a lazy saturday.
Putin is crazy. This was established as early as 1999, multiple public declarations in 2014.
You can do the whole trip in a truck in two days (to Kyiv, one day to the border). The roads are empty in that direction.
Is this going to accomplish anything? I fear sending in more weapons will just lead to more deaths, I do not think there is any way for Ukraine to win this.
Why not make it microwave lasers? :-)