skysight-inc/HackerNews huggingface dataset:
Have you tried lightning network its extremely fast and cheap and pretty reliable these days. Many great mobile wallets support it now, Blue wallet, Muun, Phoenix. Hell even Cash App supports outgoing lightning payments now. Scan a QR code few seconds later done, final, irreversible.
I’m not taking anything personally, just calling him out on his strawman.
I think this refers to the same incident (from a pro-Russia twitter account):

https://twitter.com/ASBMilitary/status/1497518912287789059

Russia MOD: “In attempts of repelling a rocket attack on the military infrastructure of the Ukrainian Armed Forces, failure occurred in the missile guidance system of a Ukrainian AF Buk-M1 medium-range air defense system and the missile hit the corner of a residential building."
This service update only applies to people who self-host. Servers managed by gitlab are patched by gitlab staff. If you're going to self-host I think you should at least --consider-- self-hosting something with a tiny attack surface instead of a complicated product with many dependencies and "casual" security practices.
> Anonymous has ongoing operations to keep .ru government websites offline, and to push information to the Russian people so they can be free of Putin's state censorship machine.

How does taking sites offline free people of censorship?
So we had the report for the Indian government:
https://news.ycombinator.com/item?id=30357755

Now we will have actual lessons from Ukraine.

“There are decades where nothing happens; and there are weeks where decades happen.” ― Vladimir Ilyich Lenin

We have had a lot of those weeks in the last 2 years.
Poker
Very complex, social, and the buy in makes it so players care.
Allowing reuse a TOTP sounds exactly like 2FA bypass to me.
The US doesn't have the greatest history of taking the grunt of the burden when it comes to sanctions.

Also as a European, is still remember as certain "fuck the Europeans" uttered by the neocons of your government when the Europeans warned that regime changing the Ukraine would maybe make the Russians feel threatened.

Europe has to find its own stance and mechanisms to counter Putin. It's pretty clear that neither the European way (economic integration) nor the US way (forever treating like an enemy) worked.
So what? That’s completely unfounded speculation by those commenters supported neither by the article nor the actual facts.
That's the thing, he could mean that. It's equally likely he means something else. Until he defines what "fair" means, we can't know.
Who is going to enforce the war crime penalties?
Yeah, you can use a Russian web-based proxy and see it:

http://vkrosse2.ru/proxy/browse.php?u=https%3A%2F%2Fmil.ru%2...
I remember some UK navy ships that used to run Windows 2000 (still do?):

https://ukdefencejournal.org.uk/no-our-new-aircraft-carriers...

but I believe it is completely isolated/air gapped.
Ukraine changed the "official" way to transliterate Ukrainian words from Cyrillic to English some time ago, to closer match the way it's actually pronounced. Plus some changes from Russian to Ukrainian when the country started promoting the Ukrainian language (they're very close, but not quite the same).

Kiev -> Kyiv. Kharkov -> Kharkiv. Zelensky should be spelt Zelenskiy (as per his official social media). Vladimir -> Volodymyr, Mikhail -> Mykhailo, etc...
I guess I have to agree with you here, because I can't come up with a proper example.

But remark that economic sanctions do have its use by not pumping more money into aggressive nations.
I used to work for a company that does this sort of fraud detection. Using a credit card from a rich country in a developing country for an online transaction screams stolen credit card number. Fraudsters often use services like Steam where you can buy something fairly cheap to test the card number, then they go to the effort of trying a bigger transaction.
You might not need Express.js
US oil dependence was largely ended through unexpected/unplanned technological innovation -- fracking and horizontal drilling opened up many reserves, and improved deep water drilling tech added more offshore capacity. It also happened pretty rapidly, from about 2005 to 2015.
January 19, 2017.
The parent suggestion of just running git over SSH has a small attack surface, its not like HTTP accepting anyone through the front door. Set `PasswordAuthentication no` in `/etc/ssh/sshd_config` and I don't think you even need fail2ban. But you could put a rate limit on new connections to port 22, or leave the fail2ban setup as an additional guard, and of course you want to block all the other ports you don't need.
So far that’s been true. Would you count on people never learning?
Another thing that should be considered: how do you keep the hole open while drilling? At extreme P and T, the hole will close in on the drillstring. Also, fluids turn very nasty in those conditions. You'll need some unobtanium and some of Superman's suit material.
https://www.wired.com/1998/07/sunk-by-windows-nt/
> The trifecta .. mathematical origins

Ends up reading Leibniz and converting to Catholicism.
I like it simple. Trackmania Nations Forever, Anno 1404, Starcraft 1.
No, it's a PR company from Signal. I'm in Kharkiv right now. I know no one who uses Signal here. Everyone still uses telegram for all the communication and news.

There is a lot of news about Signal, but it's simply not here. And yes, if I have to replace it, I'll go with something that does not require a phone number. Mobile networks might go down.
Literally nobody offers a service to check if specific coins were bought with a stolen credit card.

I know what a chargeback is, and those are utterly irrelevant here.
I don’t believe that removal from SWIFT means an end to payments. Much more likely it makes the process considerably more manual, still worthwhile for larger trades. Really it’s the hit to the volume of trades that does the damage. However, they might have to rely on the two parties (or their banks) having a bank in common. That gets harder as the banks themselves get sanctioned.

Edit: see correspondent bank https://en.m.wikipedia.org/wiki/Correspondent_account

(13 years out of investment banking on the technology side. Never touched SWIFT directly but was involved in more than one in multi-bank project)
What's the attack surface of a git linux account that doesn't have a shell and can only log on through ssh with a key from whitelisted IPs in a firewall? Compare that attack surface with that of a complicated web app like gitlab.
Yeah, open internet is probably the only way they can get truthful information.
And of course lots of chess on Lichess
> Kumbhani is charged with conspiracy to commit wire fraud, wire fraud, conspiracy to commit commodity price manipulation, operation of an unlicensed money transmitting business, and conspiracy to commit international money laundering. If convicted of all counts, he faces a maximum total penalty of 70 years in prison.

Liberty Reserve operator Arthur Budovsky is serving his 20 year prison sentence, Kumbhani will likely serve 40+ years.

Liberty Reserve wasn't even incorporated in US or did a lot of business after getting booted but that didn't stop it from being used as money laundering.

Tether isn't very much different, LR/E-gold both tried various forms of insulation (LR not providing fiat on-ramp/off-ramp but through "verified" 3rd party).

In the end, the trail of money and cui bono ultimately indicted Arthur for facilitating money laundering and subverting US banking system. It's very likely that DOJ and other three letter agencies are utilizing Tether/Bitcoin/Monero as a honeypot to gather intelligence on the parties.

Imagine the wealth of information they are sitting on after capturing the hard drives of darknet marketplaces like Alphabay which were allegedly used to trace a former YC alumni's stolen Bitcoins.

Tether is a well known cable for moving money out of China and into real estate markets in the West, it's ironic that so many do not see the complete geopolitical ramifications: housing affordability has been hijacked to facilitate money exfiltration in authoritarian countries by the elites in the West, to make cheap goods.

In the West, lower and middle class unwittingly traded affordable housing for affordable consumer goods produced by authoritarian labor control and the beneficiaries of this were able to move their wealth out of reach from the same authoritarian government. Now that the musical chairs is ending, the same demographic in the West are being encouraged to become unwitting exit liquidity for the upper class. I predict this would have destabilizing effect on societies all over the world, especially countries that are over-leveraged and buying crypto on margin.
Sometimes letting someone know about a piece of information too early can cause problems.

I have some very anxious team members who will get on edge when the development team starts to use key words like "refactor" and "iterate". Our organization has a historical track record of certain technical efforts being a complete dumpster fire and the PTSD of that has stuck around with many of us.

In order to make everyone's lives easier, I will sometimes work in secret on prototypes of more "controversial" ideas to bring before the team. I find starting the conversation with "Here's a new thing you can actually see and play with" eliminates 99% of the annoying bullshit you get out of non-technical folks.

It takes some discipline to do this correctly (i.e. don't ferret away on a secret prototype for more than ~1 week). That said, I can't imagine how you would scale an organization if everyone had to know everything always.

Also, none of this stuff is actually secret. It's more of a need-to-know basis. If someone explicitly asked me about one of these efforts, I would tell them everything they wanted to know and then some.
> I don't understand why hackernews is cheering for one side

Excuse me, what? How is that not blindingly clear who the aggressor is here?
Nah, it is pretty clear that Russia goal is control of Ukraine. The only role membership in NATO play is that if that theoretically happened, it would be harder to attack Ukraine later on.

And there was no immenent threat of Ukraine entering nato anyway. This is just Russia using it as excuse.
Yeah, before switching to taxact I did my taxes by hand, even itemized deductions, the computer doesn't save time and there isn't actually much money to save for most people anymore. I only do it by computer now because I once forgot to copy line 13b form 2345 to line 47d of some other form. The resulting mess was annoying to take care of, not hard, but annoying.
Top notch ASCII art there, thanks. Yeah, I'm no combustion engineer or anything, but I just can't see what would motivate a system like that. I suppose the rider has the ability to snap the throttle shut instantly, but you could achieve the same with a limit plate on the same set of butterflies that are servo-controlled. So when you open it up, you're both electonically telling the ECU what you want, and mechanically allowing the range of motion. When you snap the throttle shut, you're forcing the intakes closed. Computer gets to limit the rate of opening and coordinate the fuel, rider still gets to close it as fast as they please.
Let's hope so. He will reap what he sows.
It takes just 30 minutes to clean your office. You can go to Home Depot and buy all the supplies for cheaper than what it costs for a janitor in a month.

Accept your time is limited and valuable. You might drive a higher roi focusing your time on the core business than doing ancillary tasks
The purchases are fraudulent. A single party buys the game from themselves many times, desiring to look like a diverse crowd making legitimate purchases.
> Forgive my ignorance, but does, for example, ransomware payments in, for example, bitcoin make the bitcoin "dirty"?

Yep, also links to darknet markets and any other “bad actors” whose addresses are known.
It is suppressing services. Many Russians need to open eyes. Ukraine is always open to communicate
Query Parquet Files on MinIO/S3
If you want to make a different argument agains the comment, feel free to do so, but I'm not sure how that's relevant to my comment or the comment I replied to?
Crystal: Bdw-GC Coroutines Support
1. Make a bunch of illegitimate money

2. Release some shitty game on steam that no one will play

3. Buy millions of copies of said shitty game with your illegitimate money using Bitcoin

4. Your illegitimate money is now revenue from your shitty game and can be taxed (Profit)
We don't need to research and then design new reactors, that will take decades.

We need to mass produce and build designs we already have
This person?
https://en.wikipedia.org/wiki/Simone_Gold
representing these people?
https://en.wikipedia.org/wiki/America%27s_Frontline_Doctors

I have a hard time making any argument for them and I generally don't like to restrict free speech.
Ukraine government BTC and ETH donation addresses
It’s really not, the idea of laundering cryptocurrency through Steam is ludicrous.

It works the other way around, people launder funds from steam into cryptocurrency. Either by buying items with stolen credit cards or by stealing steam accounts.
> I love the story about TTI's chairman.

Which is also a masterful advertisement for private business owners in a similar situation to sell to Berkshire Hathaway, for less money than they might otherwise get.

This is not a criticism: if I wanted to sell a private business and didn't trust any of the obvious trade buyers (nor private equity), I can imagine myself happily selling to Berkshire for less.
That just underlines the problem of being so reliant on our death-prone cars in the first place.
> Unfortunately no details were given about what makes 50% of all bitcoin transactions “fraudulent” ?

And? They don't report to you. So they don't have to explain anything to you. They don't have to defend their decisions to you.
You'd have to purchase an electric one
Which iirc was the basis for "cleanly mined" btc with little to no transaction history on-chain and tumbler/mixer services that attempted to obfuscate it.
From my equally uneducated perspective, I understand that this started with the 2014 revolution that the Russian government calls a coup.

A conventional war several thousand kilometres away shouldn't affect me regardless of the outcome but media has been trying to project this as world war 3, more and more countries are seemingly getting involved (and GitHub issues are being created to block Russian users). Makes it scary.
Of course they want to control Ukraine. They did for 100 years. Only recently they start losing market to western companies. That is the reason why there is a war now. Russia is losing ground. NATO is gaining ground. It is that simple.
The ignorance to think that the west doesn't want Ukraine being member of NATO is beyond strange. Of course they want. It brings enormous market to NATO land. all large businesses would vote yes to get Ukraine inside their sphere. Same for Russia. For them it is exactly the same.
We could win the war in Ukraine by agreeing to permanently keep Ukraine out of NATO which is a fait accompli anyway since the member nations have already said they’re not going to war with Russia over Ukraine.
It's been filmed from several angles, these videos were circulating in Telegram previously. No plane or helicopter was seen or heard around. Unguided air-to-ground missiles fired from helicopters don't usually have that kind of thick white smoke, and also fired in salvos. (I don't think a pilot even has an option to fire just one)

Ground to ground is either MLRS (doesn't look like it at all) or ballistic (absolutely not)
On a related note, I would like to be able to tell the nav systems to shut up about directions until I get close to the destination. I don’t need to know how to get out of my driveway, I only need to know which exit to take on the freeway and what building it is on that street.

Maybe if there were just a voice command: “Hey, Widget, mute nav for 15 minutes.”
Brit here. I'm with you. There's going to be pain either some now, or more later if this disease is allowed to grow. I'll take it now, and it won't be as much as the poor buggers in Ukraine are currently suffering, not by a long way.
>There’s no collecting if you bet on the apocalypse.

That's just not true. Misery and suffering is it's own reward, to some. This is arguably the main point of Orwell's 1984, when O'Brien explains to Winston Smith why they bother torturing people before killing them. O'Brien says that to knowingly cause suffering in someone is the ultimate expression of power, and it is axiomatic to him that power is good in-and-of-itself.
The presented "solution" isn't one at all, see Iran.
I had it in my Nissan Leaf - the cruise control was great, but the lane following felt like I was a bowling ball in a game with bumpers. It wanted to just bounce back and forth off the sides of the lanes.
It definitely takes time to learn, but a few months of regular use and I believe I could get just as good with my steam controller/Steam Deck as with a mouse.

However, I am certainly not a great fps player so the needed skill to catch up isn't as much as it might be for you.

But I do believe that if you properly learn flick stick then you could probably get quite far, with less effort.
Conceivably, the public ledger aspect of the technology.
The video may be fake. Jeremijenko, the "artist", withholds it to avoid detailed examination.
> The West could win the war in Ukraine

> without NATO firing a single bullet

"Not technically NATO" but "organized by NATO-member countries" is an exceptionally dangerous line to tread.
Who’d have thought that drip coffee that’s been sitting around for hours and hours is not as good as fresh.
How much does it cost to run a node?

Strictu sensu, it is "decentralized". In practice, it has all the disadvantages of blockchains and none of the advantages of the traditional banking networks.
> This idea that cryptocurrency is good because it enables “good” crimes (avoiding unjust oppressive governments) is at odds with the hard facts that cryptocurrency is used for “bad” crimes far more often.

The Fifth Amendment is invoked far more often by actual criminals to hide their crimes than people avoiding government oppression. Doesn’t mean the Fifth should be abolished.
How dare a security software company add a feature to store arbitrary secrets!!! Especially when their users request it!
Don’t they know that companies can only add features if 100% of their non-users approve?!

Honestly, this kind of anti-cryptocurrency sentiment is hysterical, ignorant and counterproductive to security objectives. Even if you DONT like internet money, arguing that nobody else should be able to store it securely is completely asinine.

Every point made in this article applies to cryptography, or any security technology in general. Yes, cryptography is a technology that empowers good and evil. Yes cryptocurrency is a technology that empowers good and evil. I do not want a world where good cannot utilize a capability for the foolish crusade of preventing evil that same capability. Evil cares not for your rules, “outlaw cryptography and only outlaws will have cryptography”.

As the author of this article is the author of the twisted library, I should expect they know that their software is used for evil every day. Malware, C2 software, attack tools, exploit code — sometimes used twisted library. Of course there is Also good too! But we must ignore that because the bad guys must not have this capability!!!
Thanks for sharing :) GitLab team member here.

Phabricator has many great features which inspired GitLab. I've shared some of them in this blog post: https://about.gitlab.com/blog/2021/08/13/five-great-phabrica...
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2170...

> Zulip Server version 2.0.0 and above are vulnerable to insufficient access control with multi-use invitations. A Zulip Server deployment which hosts multiple organizations is vulnerable to an attack where an invitation created in one organization (potentially as a role with elevated permissions) can be used to join any other organization. This bypasses any restrictions on required domains on users' email addresses, may be used to gain access to organizations which are only accessible by invitation, and may be used to gain access with elevated privileges. This issue has been patched in release 4.10.

Why does it feel like the completely misleading title was intentional to try and drive traffic to / SEO this crappy copycat CVE site?
NATO "firing bullets" is not and has never been on the table since NATO is a defensive alliance and Ukraine is not a member.

The idea of bribing Russian soldiers radically underestimates the brutal control exerted by the Kremlin over the Russian people. It also sells the Russian people short, implying individual corruption when many are patriots who oppose war against their Ukrainian cousins but are not able to speak out.

The idea that bringing in freelance freedom fighters is going to end the war "in a week" is facile and ludicrous.

This post is unserious and offtopic.
Miserliness is not the same as greed. Miserliness is about refusing to spend money, not about making money. It may overlap with greed when it comes to paying low wages, but miserliness doesn't, in general, mean exploiting people.
Privacy over secrecy is an alright goal, but the rest of it sounds like consultant double-talk.

In theory, "eliminating secrets" means the manager listening to the report's reservations and addressing them effectively. In practice, it means rooting out dissent and silencing opposition. The manager has created an environment where their reports don't feel safe talking to them. Instead of asking hard questions like "how the hell did I, the manager, screw up so badly", the article suggests easy answers like Project Retros or 1:1s.

The article is further undermined by author's inexperience in product management. Brand building as an "expert" with only a few years in industry is a red flag.
I wonder if the professionals who work at these labs can face punishments from their professional organizations.
Fraudulent also includes tricking people into purchasing without understanding what they are buying or how much it would cost.

In the case of crypto, there is no actual bank or payment provider through which to make a claim or facilitate a reimbursement.

In the case of the EU, the law imposes guaranteed minimal protection for online purchases. For example, any online purchase is fully reversible (including network fees) within the first 14 days following the transaction.

I don't think there are reasonable ways to meet this level of consumer service with crypto.
Rockets get fired in salvos. Air to ground missiles are regularly fired individually. Think the US maveric or hellfire lines. "Missile" generally means a guided rocket. "Rockets" are generally unguided, although there are laser-guided FFARs that are still called rockets.
I address electronic transfers in the next paragraph. Even if initially transferred only within the bank, it is likely to eventually be transferred to another bank, which requires the bank to transfer corresponding reserves to that other bank.

Only the Federal Reserve can create truly unlimited amounts of money without the risk that customers might request transfers that exhaust their reserves.

Complying with reserve requirements imposed by the Federal Reserve on banks help to mitigate this risk, but they are not the true restriction. Even if the reserve requirement was zero, banks would need to keep some reserves or they would be completely unable to fulfil requests to transfer funds to other banks. And even if a bank exceeded the reserve requirement, for example by keeping 50% reserves rather than 10%, they would be insolvent if customers requested 51% of balances transferred out and were unable to cover it with loans from other banks.
It's (guerrilla) force projection.

You never know whether Anonymous is one angry teenager or an entire nation-state, so it behooves you to not piss "them" off.