skysight-inc/HackerNews huggingface dataset:
There can be several threat models:

* Industrial espionage and state actors - somebody setting up a camera to record the monitor and reusing the token

* Phishing site - the token can be reused, and then redirected to original site. There wouldn't even be an error

* Keylogger

* Somebody logging in while sharing the screen during a Zoom call

* Somebody standing over the shoulder, etc.

Considering this could be prevented with a single if statement, and how important 2FA is in protecting accounts, that's certainly my impression.

The password can be found out through other means, e.g. (password reuse, phishing, keylogger, etc.)

For comparison, the exact same vulnerability was rated as medium severity (5.3/10) - high impact, but difficult to exploit

https://nvd.nist.gov/vuln/detail/CVE-2015-7225
Yeah, but malware in that position can also just steal your session cookie.
A Ukrainian military is heroically fighting a much larger and better equipped invasion force, Ukrainian civilians are hiding in subways, fleeing across the border, Ukrainian people are dying, Ukrainian government is asking for help from the neighboring countries of the liberal West.

Let’s not escalate the situation or a war might break out.
Hehe, just tried it with today's word and it made me laugh out loud. I guess that at the time the OP posted this, the word was more kind to his solution. :)
> There needs to be liability established for publishing private and personal information;

Europe has the General Data Protection Regulation.
Every time this proposition comes up, I'm going to repost this comment (I apologize in advance for the repeat):

This is valuable reading, from a military historian frequently posted on HN:
https://acoup.blog/2022/02/25/miscellanea-understanding-the-...

Here's one of the many good bits:

----

Instead, the clearest understanding of Putin’s complaints about NATO is that they are reflections of his real fears, but that as diplomatic negotiating tools, they were red herrings, designed to create exactly the sort of smokescreen that some media personalities worked to create and exploit domestically. The ‘tell’ here in many ways were the initial demands, which amounted to rolling back NATO positions to pre-1997 status; such demands would be utterly unacceptable to NATO countries (like Latvia, Lithuania, Estonia and Poland) who would thus be left outside NATO’s line of protection. Putin – and the Russian Foreign Ministry – knew those demands were obvious non-starters, that’s why they made them – presumably to generate that smokescreen and to try to divide NATO internally. But the demands themselves were never serious, as Putin’s actions this week prove.

----

The "promise Ukraine won't join NATO" demand was not made in good faith and conceding it would not have mattered.
Also explains why he had to go big this invasion. There is no march 33 to look forward to.
It isn't as widespread as it probably would be with crypto (start selling shit game, buy game with crypto, get fiat), but Steam already has problems with people doing this, it is usually just more creative as it is hard to buy stuff with stolen credit cards, but we know from a ton of news that it is very common on grey market selling sites.
A good number of their engine components these days are made of cheap plastic that just disintegrates after slight use.
I totally get why Ukraine wants in NATO, but don't see why NATO wanted to have them.
Buy TF2 keys and trade them to another account? Or CSGO skins? It's incredibly liquid and there are third party marketplaces for cashing out
>Crypto may well be the biggest solution looking for a problem I've ever seen.

People don't understand crypto yet... play around with it a bit.

Things not possible in the current financial system:

- Participate in a crowdlown on polkadot.

- Play around in some DeFi. Earn yield on two assets.

- Store some files hyperlocally and encrypted on peoples laptop with filecoin. And learn how persistant indexing will help the internet be more resiliant.

- Sell some data using ZKsnarks.

- Query the blockchains persistance with the graph.

And if you don't do any of the above and you still hate crypto, just do this for your future self.

- Write a smart contract that sends some coins back to your wallet in 10 years.

If you're correct in your opinion, you get to make fun of all your friends who spent a percentage of their portfolio in the crypto space. And joke about how they should have cashed out in 2020.

But if you're wrong, you have missed the technological innovation of your generation and the potential to shake up the class system.
I recommend stopping the one killing people. Seems like a safe bet.
You can just not look at them, no one is forcing you to click links to telegram channels.
Could you not also Google the answer to fizzbuzz in 15-30 minutes?
Thanks for that Twitter link, that's a really good thread from Dec. 21st. I learned a lot from it even now. Although even Alperovitch said "He is unlikely to invade Western Ukraine": https://twitter.com/DAlperovitch/status/1473366370666614784.
Yes, Blockstream has a token that represents Bitcoin miner shares.

The most important thing is to wait until the token is registered by SEC, so far all scam tokens skipped that step.
If you want a short summary of the Russia-Ukraine conflict, I suggest this presentation/speech by John Mearsheimer - https://www.youtube.com/watch?v=JrMiSQAGOS4 - he explains it really well.
Pricing isn’t hidden: https://github.com/pricing

$21 per user per month.
The only real use case that people keep mentioning is transferring large-ish amounts of money (>1000 USD) internationally.
Afaik, those calls happened multinationally multiple times, being blocked by USA every single time.
Show HN: Esolang Park, a visual debugger for esolangs
Hey HN! Esolang Park is an online visual debugger interface for esoteric programming languages, that I've been working on for the past few months. For every supported language, Esolang Park provides the powerful Monaco code editor, syntax checking, debugging functionality and a visualisation of the runtime state. The core is language-agnostic - a "language provider" only needs to implement the esolang's parser, interpreter and visualisation UI (and some other little stuff).

Apart from trying to boost DX for esolangs, the idea is for this to grow into a platform where people can discover and play around with a variety of esolangs without leaving the browser. That's quite far away though - the project is quite early in development and currently only has 5 languages (Befunge-93, Brainf*ck, Chef, Deadfish and Shakespeare). Some features like non-debugging execution mode (0ms interval) are missing too.

Currently the entire source code[0] (core + language providers) is written in TypeScript and React. Esolang code execution happens in a web worker. I'm planning to add support for WASM-based language providers for better performance, particularly for non-debugging execution. There's also a wiki[1] containing a description of the core design and a guide for implementing and contributing new language providers.

Looking to hear some feedback on the idea and current implementation - bug reports are welcome too!

[0] https://github.com/nilaymaj/esolang-park

[1] https://github.com/nilaymaj/esolang-park/wiki
It happened in the Soviet Union in 1991.
they aren't even reporting the news. The narrative is that Russia is doing a "special operation" in his Dumbass Republic. And lots of documentaries about how the west is bad and failed on their promises 30 years ago. It feels like we ve traveled back in time somewhere around 1980
Again, what's the point of making Russia look bad? Do you think that having a down gov't website makes them look any more "bad" than attacking another country with their military?

All this is doing is causing some Russian IT group of people to do extra work. These IT people may not even be supporting Putin's decision.
Isn't that just Cold War 101? Both sides are supposed to know where the other side's red line is. And both sides are supposed to avoid creating ambiguous situations, where the other side may no longer know the red line. If the enemy does not know your red line, it's your fault. And if you don't know it yourself, your existence may be enough to start a nuclear war.
I doubt it's related. DZ left GitLab a while back, and even then his involvement had been limited for quite some time. Knowing GitLab and its history of security vulnerabilities, the timing is probably just a coincidence.

There has also never been any evidence of e.g. state actors sneaking in backdoors and what not. The code review process is quite extensive (probably a bit too much even), so it would be difficult to sneak in vulnerabilities deliberately. It's much more likely these issues are caused by growing complexity and the amount of functionality that GitLab supports.
Yes, that was also a bit surprised to me when I visited Crimea and discovered that practically all people Russians. Speaking only Russian, knowing only some words in Ukrainian, but only watching Russian TV, reading Russian papers, having most writings everywhere in Russian (or both languages) and feeling Russian. But none of them had any negative feelings toward Ukrainians (at that time), they were getting along in a normal way.

Then I went to Kiyv and and asked someone for directions in broken Russian. He said, "Why are you speaking Russian? We're in Ukraine, you can speak English for example". At this point I realized in the West of Ukraine there were already some tensions regarding the coexistence of these two groups.

I experienced a lot of good things both from Russians and Ukrainians and it breaks my heart to see how Putin is sending these poor guys from conscription and sends them as fodder meat. I hope there is at least one sane person around Putin and they do what others had been trying to do in such a situation[0] - but this time successfully.

[0] https://en.wikipedia.org/wiki/List_of_assassination_attempts...
Sending the wrong type of coins btc vs bch will result in you losing those coins. That's not fraud..
You might want to also check those two pages:

- the book "Foundations of Geopolitics
": https://en.wikipedia.org/wiki/Foundations_of_Geopolitics

- its author and "philosopher" Aleksandr Dugin: https://en.wikipedia.org/wiki/Aleksandr_Dugin
You are lucky. My build needs 20m on the Windows machine. With Antivirus and overly small HD.

On Linux it's 20-40s.
How many people would even want to host a public Gitlab instance? Gitlab.com is free, works well, and even gives you some free CI minutes.

I’ve been running a private instance for about a year and am absolutely in love with it. Gitlab CI is the killer feature IMO, and self hosting it means I never have to worry about usage limits.

But if all you need is basic git hosting with an issue tracker, I don’t see a reason to use Gitlab over something like Gitea.
Ukraine itself is proof of how undisruptive is lowering natural gas use as it reduced it's own imports back in 2014.

Natural gas has a lot of substitutes in electricity generation and other uses, and demand will fall as prices rise (good for global warming anyway). Energy poor households can get help, so no one will freeze to death, without subisizing the natural gas. Spring and Summer are holding which makes this the best time to act.

Advanced market economies like the ones in the EU are very resilient to supply shocks like this and Eastern European countries can be helped.

Over the long term dependence on insane dictators is also bad for the economy and diversification and decarbonization are good!
Which will make it harder for Germany and Italy to enforce effective sanctions towards Russia.

Hopefully they will do the right thing and support Ukraine anyway they can.

A good indication is going to be if Germany will support the exclusion of Russia from SWIFT:

https://financialpost.com/pmn/business-pmn/germany-open-to-c...
Western powers have realised Russia is largely immune to sanctions
glibc only supports a few _l functions. It doesn't support snprintf_l, for example. The solution here is uselocale.
Ukraine: France seizes Russian ship over sanctions
"National Security" as a term is broad enough to include anything. Case on point I see "national security" given as a reason why economic espionage is okay or why the government won't release things that are embarrassing to politicians because it can effect how foreign leaders view them and that's "national security".
Really? A single if statement is all it would take? More hyperbole from you...

(How do you log used codes, check if a code was previously used, and clean up old used codes in a single if statement?)
Sadly a lot of token sales were pump and dumps through VCs, so even this is not true. SEC registering looks like a better filter for now.
yes they can, and im pretty sure current anonymous have absolutely nothing to do with the old ones
This sounds eerily similar to various debates regarding adult content, that some companies (clearly not all becuause OnlyFans) have decided that customer segment is not worth pursuing. Not because there is no money in it, but just because it is not worth the trouble...

I am specifically thinking of the drama between payment processors and porn sites. I don't really think that Visa's position is "porn = bad" or that they would deliberately sever a profitable relationship with customers unless they were experiencing or anticipating something bad for business.

Valve seems to be thinking in the same vein here, where it is just not even worth trying to play the crypto game (pun intended...).
There is a political reason for this. US leaders exempted taxpayer funded defined benefit pension plans from any rules or regulations, but subjected non taxpayer DB pension plans to strict rules and regulations (ERISA 1974 and PPA 2006).

This means GE’s pension plans have to use conservative assumptions and conservative investments, which is all well and good. As an example, GE is required to use the yield curves of high grade corporate bonds to calculate pension liabilities (~4% and lower in recent history).

But for decades, taxpayer funded pensions have been playing fast and loose, assuming enormous return on investments (~8%), underfunding the pensions (to keep taxes low), and of course, investing in riskier and riskier assets to try to make up for the previous years’ of underfunding and corruption.

Of course, politicians want to keep kicking the can down the road, and the best way to do so is to keep deflating the dollar and inflating asset prices. It is not politically feasible to cut defined benefit pension amounts, but it is politically feasible to satisfy the nominal benefits promised while providing a much lower real benefit (i.e. one with reduced purchasing power).
Yes - this is exactly what the silk road did. A buyer would place enough coins into escrow with the silk road to prove he had the funds available to make the purchase, the seller would ship the goods, after receiving the goods, the buyer would unlock the coins from escrow and they would be given to the seller.

The problem here, is that this effectively makes the silk road (drumroll...) a traditional bank. With the monetary controls and downsides that the folks trying to speculate on bitcoin claim they don't want. (The can freeze funds, reverse transactions, run away with your coins, etc)

Further, since traditional mining is out of reach for most folks - there's no real way to avoid having to buy through an intermediary. So when you hear folks saying "Not your wallet, not your coins" ask them how they managed to get their coins in the first place, and how they avoided ever trusting an intermediary with their coins during that process (unless they literally mined them themselves, not as a pool, they're bullshitting you - they trusted an intermediary, and fraud was absolutely a possibility)

I think my real point here (admittedly long winded) is that a large reason the modern banking system functions the way it does is that they've essentially been asked to handle fraud and dispute reconciliation in a world where you're not allowed to resort to rote physical violence yourself. Unfortunately, to do that they require all sorts of monetary controls (The same controls coin enthusiasts claim to hate). But those same enthusiasts don't actually have a functional solution for handling reconciliation in instances where a dispute actually occurs, outside of falling back on the legal system of a government.

Some of them seem to have a mental fantasy of hiring assassins or threatening folks with either hacking or some other "dire" threat, but it's mostly bullshit - when fraud happens they run squealing to the government or they eat the loss. These folks are like a strange variation of the "prepper" crowd - they wish the world worked like it did thousands of years ago where blunt force solved problems.
> The NATO red line is fraudulent, a lie.

I don’t understand why you think so.

> Russia goes into Sweden and Finland and it's not a red line? Yeah right.

This was a confusing comment but I don’t think the US would fight WWIII for Finland if they weren’t a NATO member (and they’re not). Do you?

> The case is actually that people are deciding Ukraine isn't as valuable - that the lives are not as valuable - as Finland and Sweden and they're too great of cowards to say it outright.

I guess that’s possible, but you’re entirely confused about its import. The NATO countries denying membership to Ukraine because they do not want to defend Ukrainians is an indication that NATO member countries take the “red line” associated with NATO membership seriously.
> Are you saying neurotransmitter modulation and glial cells cannot be represented by electrical signals?

Certainly neither of them are action potentials, which are usually the (exclusive and therefore imo incomplete) basis for the mental model of people who claim things like "the brain is just electrical signals." No. It's not. It's a vastly more complicated system of organ(s) than that even if you're willing to draw a line in the sand between brain and environment -- and that's no easy feat itself!
> I still have never seen that footage again to this day

I took the "again" to mean they've seen it atleast once.
Keystone XL is an oil pipeline. And our net export of gas has continued to increase in the past couple of years.
Putin is killing civilians en masse in Ukraine right now. I'm pretty sure the whole world over knows who the target is, at least the ones in business with democracy and justice systems.
This is why I see PureScript as a better starting point. It was modeled after Haskell, but since it was created in 2013, many of the design choices were to avoid these sorts of things.
Lets put a pin in this conversation which we can pick up when Baltics are invaded and I fully expect to hear explanations how while it’s a very regretful turn of events, they are materially different from, let’s say if it was Germany or France that was attacked.
Doing something just to not feel like you are not doing anything is not an appropriate approach. Especially when it comes to things like that, one's own actions should be considered carefully before joining the fray.

For the record, I am not advocating one way or another, but I just want to point that 'just doing something' may be counter-productive.
Anatomy of a terminal emulator (2021)
The obfuscation in step 2 seems very superficial. Like, is the IRS not going to ask where you got your stacks of Steam codes from?
Ukraine conflict: Protests held around UK in support of Ukraine
They’re red herrings which have been discussed ad nauseam. 9/11 is the most analyzed event in modern history; we know what happened.
> Assume you are traveling down the 405 at 80mph during rush hour.

Okay, bad driving choice there. You are 1.5x more likely to die in a collision driving 80mph than if you were driving the speed limit (65mph), since collision energy is proportional to velocity squared. ;)

Worst case for ABS failure vs emergency braking failure? Seems like both can easily result in death, and I don’t see reasons yet to believe one is more likely than the other. We probably have a lot more data on the number of deaths lack of ABS has caused over the years than computer braking systems, and the good news is that we can fix computer braking systems right now and forever.

The big difference here is control, not outcome. Having brakes seize suddenly is surprising, whereas going from static to dynamic friction when slamming on the brakes isn’t very surprising. Of course we strive to minimize surprise, and of course it’s preferable if cars don’t slam on the brakes without cause.
I had my clock radio set to MPR as well and woke up to them talking about the first plane. Usually the news every morning didn’t register but that day it did.

I turned on the TV to see what was going on, which I usually don’t do. After a couple minutes of “oh my that’s a tragic accident” the second plane hit an I immediately knew it was no accident.

I worked downtown Mpls at the time and no way I was going to work that day. Thankfully my boss told everyone to stay home.

Seeing all of it live is a memory burned into my brain the same as watching the Challenger blow up live in middle school.
Not too familiar with that process, but as far as I understand, these routes (i.e. correspondent banks per currency/country and their reachability over settlement networks) are called "Standing Settlement Instructions". SWIFT does seem to offer these as a service [1].

But just like the messaging layer, this can be done via other means. For example, here [2] is Citibank Poland declaring their reachability for various currency transfers.

As for the messaging service itself, I believe that cutting off SWIFT SSI access would help in disrupting payment flows in the short term, but in the long term, sanction lists are the real enforcement mechanism.

As others in this thread have already said, these are a very powerful indirect stick when implemented as "you must adhere to our embargo lists, or we will prohibit all of the banks in our jurisdiction to do any kind of business with you, whether for embargoed clients or others".

[1] https://www.swift.com/our-solutions/compliance-and-shared-se...
[2] https://www.citibank.pl/poland/corporate/polish/files/list_o...
Why would an individual identity themselves as being part of a group called Anonymous? That's not the point.
The enthusiasts are excited and altering the network towards what it should be, even if that’s simply use and being an addition to the collective conscious

Many saw something that wasn’t done and go contribute

Others saw something as static

Others saw something as stagnant and went to contribute to another network that experiences the same path towards its ideals
There is substantial exchange rate risk.

If Valve didn't want to see any forex risk on the sale, they end up incurring it on refund. If people are using it as an easy way to store money in USD and then convert back to BTC when the rate goes up, that can get expensive in a hurry.

It could also be that they used Coinbase or some other provider to act as a processor, and Coinbase charged the merchant if there were chargebacks on Coinbase's accounts.
EU should not be pushed like that. Into shooting itself in a foot.
Good point, maybe so.
This is called the appeasement option, and it notably historically hasn't worked on unhinged psychopaths with a proclivity for imperial conquest. Putin is conducting an invasion of a country on the basis (according to him) that they are Nazis and drug dealers who are effecting a genocide. Even if he doesn't actually believe this, the gaslighting evidences his psychopathy.
In a perfect world we do that and develop a plan that allows the country to develop and hence stop the circular rot like that.
https://www.astron.nl/flurry-of-new-discoveries-as-incredibl...
how is it less efficient? Obviously btc can't replace the financial system but crypto can.

Investors in the next 10 years are going to realise that an omnipool was all that was needed in the first place and the NYSE is a dinosaur in comparison.