skysight-inc/HackerNews huggingface dataset:
Read your Retail Installment Contract - it will call out all the fees and things. Most dealers pay the origination fees, but often make up the difference in something call 'participation', where they charge you a higher APR and share the extra interest charges with the lender
Dealers will usually reduce the purchase price if you finance through them since they are getting kickbacks on originating loans. As long as there aren't any fees associated with financing, you can get a better deal than if you were paying cash and can just pay it off right away.
I like to think its a step wise progression with the ideal being leaders can change without requiring a revolution or war to happen.
Thanks for the pointer to your interesting paper.

My understanding is that TLS spec did not enforce non-repeating nonce, only suggested it and left it to implementers to decide which led to the vulnerabilities you explored.

This Samsung one here is in a way similar - the TEE API had a way for users of the API to set IV which it should not, TA should make sure the IV is not repeated.

Since you have done prior research in this area, is using a counter for IV still recommended even when IV is 12 byte? I assume chances of HW random number generator (which I assume exists on most phones today) colliding for 12 byte random number generation would be pretty low.
I oddly had to wait a few months to pay off my loan to avoid a penalty. So they made a very small amount of interest. Can't imagine it was worth it.
Yes. If I had 1M in the bank and went to buy a 500k house, and was offered like a 3% APR loan, would I take it? Yes. Reasons being:

1) I can make 5-6% return with my money. So I can pay the interest and still come out ahead.

2) That mortgage interest is tax deductible, so it costs a little bit less than 3%, maybe only 2.5% to me

3) Real estate market crashes and house is worth 200k? Especially in a no-recourse state, you can leave the keys and walk. The bank takes on the downside risk of your house, not you.
I switched to posteo a while ago. I don't need much so it is 1€/month for me.

https://posteo.de/en
The truths and fallacies of “10k hours” for developers
> Its not that hard when you granddad

maybe spelling is important to literature, too?
Covid-19 immunity holds up over time
Backdoors are covert by definition. You're talking about an avowed feature you don't like. There's a difference (and finding some random blog post that makes the same mistake is not a proof of anything).
Even without software patents, I doubt it's legal in most of the world to implement something using somebody else's stolen source code. A clean room process would still be necessary.
paywall, even 12ft.io isn't working :P
>One particularly large coin dropped off an outrigger on the way back from being mined and instead of taking it out of circulation, a few of the consensus makers went out and dove on it to confirm it was indeed sitting on the bottom of the ocean floor.

What does this mean? A cursory Googling isn't shedding light on this metaphor for me.
Ok Grigoriy! I heard Putin lives below the poverty line?
> Writing it in german does not change that those concept are fundamental for alot of border disputes.

I can't think of another country of any kind, much less a major power, overtly invoking the whole set since Hitler, but if it's so common, please list the examples you are thinking of.
> On the investment side, seeing early founders pay themselves similarly to their employees or slightly less was usually a good sign that the founder was truly in it for the long term.

I don’t know. Just seems like accounting to me. They take a small salary but own 80% of the company you’re helping build for the same salary but 0.03% ownership.
If the US started bombing Ukraine, would you really complain about Ukrainians cutting off American access to their services?
The current state of authentication consumes massive amounts of time, money and effort on any given development platform. The author's advice is great, but Oauth2 is absolutely not the end state for distributed identity, and the new thing can't come soon enough.
Covid Arithmetic for Anxious Parents
They may be grifters and scammers but at least they are not burning down the planet. But I am curious about this: Etherium is not the first crypto to go PoS. Are there any significant technical advantages compared to other PoS implementations?
I mean, wouldn't be surprised if the CEO has an alt. Have you seen how much shit he got for that one joke that was quoting another joke that was slightly anti-white?
> Call your bank and ask them what the interest would be for a line of credit equivalent to the loan amount for that car, over the same period

an unsecured line of credit is going to have a higher interest rate than loan backed by the collateral of the car.

also, people tend not to default on their primary vehicle (they need it to get around) so its a less risky loan, hence the lower interest rate
There used to be a time, when the food we ate, came from the fields around us. I think that was be more efficient.

But I also enjoy tropical fruit at times and boats are indeed quite efficient, but trains will be probably more efficient, if you have electrified ones and a railroadconnection.
What about for "improved navigability" then?
Thank you very much for your valid points and taking the time to read through the article.

One thing I'd like to mention; I wrote about country A & B as background info, not trying to say that country A is somehow better than country B. (I think it's quite cool that this well known digital product comes from Europe/Poland, and is not some VC Silicon Valley thing.)

But I do understand that this might come off as some kind of diss, because of the other things that I am writing about the product.

I agree that the article and the way that it is written is childish (and disrespectful). Thank you for pointing that out. I was inspired by the chapter "Pick a Fight" from Basecamp's Getting Real book (https://basecamp.com/gettingreal/02.5-have-an-enemy), but I should have picked a more mature tone of voice. My product does not really need this "cocky" comparison article, and I see now that it hurts my own offering more than it helps it.

Based on your feedback and the other comments that I have received in this thread, I have decided to take the article offline. I will modify it and re-upload it as a fair no-nonsense comparison table.

(I was/am not planning to take any action against them.)

One more time, thank you for your feedback. It really helps.
Laravel Artisan Cheatsheet
Um, no. P&F saw nothing but their own experimental artifacts. Replication of their claims failed. Their setup was also different from this NASA one, with no gamma radiation shining on the palladium (and also palladium, not titanium or erbium as used by NASA.)
This was just an example that trade between countries like Russia and China often happen in dollars (or sometimes Euros). Not yen or rubles.

You think they would use bitcoin/eth instead?

I don't fully understand banking systems, but if China buys something from Russia in dollars. They are not paying with truck loads of cash. They might pay with IOY in a Chinese bank. But Chinese banks might not want that liability (buying dollars could be expensive in the future; and certainly Russians won't trust a Chinese bank.

They are probably moving dollars between a US account belonging to a Russian bank, and US account belonging to Chinese bank.

Moving large amounts of dollars (or euros) by other means is very hard.

Gold, bitcoin, eth, etc. are all more volatile than dollars (or euros), and harder to move.
There was also a time when famines were a common occurrence.
I only use uBlock Origin and the built in tracking protection. However I do not use Firefox defaults: I block all third party cookies and don't save cache/history on exit.. I guess it could well be the latter that Google finds "unusual" and frankly, this is what is pushing me away... I don't care what the metric is, I want to be in control, i'm not an idiot who tries to log in from ancient browsers or not understand the risk of logging in from a computer I don't own... But Google is optimising for the 99% at the risk of locking out 1%, that seems careless to me.
> There's a crowd right now trying to remove any reference to neo-nazism in the Azov Battalion wikipedia page: https://en.wikipedia.org/w/index.php?title=Azov_Battalion&ac...

There are always going to be people trying to push certain agendas anywhere.

There's a major difference between an organization whose overarching goal is to produce accurate information, and an organization whose overarching goal is to push for some kind of political gain.

I checked the article you linked to and there's a reference to neo-nazism in the opening paragraph. So your example seems to indicate that Wikipedia is able to withstand ideological attacks (which agrees with my general impression).

> I can easily understand what are the interests in play and what is each side's reasoning.

While I can see that it would be hard to get a feel for what different actors' motivations are from raw facts, I believe that you would still need them as a baseline to understand the propaganda. And it sounds like a lot of (error-prone) work!

Although I speak from ignorance as I am not on any social media and am pretty extreme about filtering my information sources. But I have to say, having had conversations with two people who take this approach, that I am skeptical: both have ended up with very strange/distorted world views and have trouble trusting any institutions (Which makes sense! A core goal of someone trying to destroy a system is to undermine its credibility!)
Seems mostly focused on using open source, rather than contributing to open source, but the general concept can be applied to contributions as well: If you need to convince your supervisor to contribute code to open source, it's best to find out how this is good for the business.

For example, suppose your company uses some open source component Widget and did some internal work to enhance it. Now you want to contribute that work back to the community. What does the business gain from this? If someone changes Widget and your extension is internal, then it might break. But if your extension is part of the open source repo - along with integration tests - now anyone working on Widget will make sure that it still works with the extension. It's a bit cynical, but the end result is more open source contributions.
I switched from Protonmail to Fastmail (with by own domain) and couldn't be happier. Protonmail locks you in their own clients (on Android at least) and they're shitty (e.g no thread view).
Unfortunately we use Telerik components (Kendo for Blazor specifically) and we have no option but to leave unsafe-inline enabled.
This, very much this. The centrists here in this situation are really making idiots of themselves. Russia is under no threat from NATO or anyone else on the planet with respect to its integrity or even its foreign interests.
> If you're implying that Ukraine has recently escalated

The subject of the sentence that I posted the correction to was “Putin”, not “Ukraine”, and the correction was to the verb phrase, from “started a war”, to “escalated a war...”, not to the subject.

So, no, I’m directly stating that Putin escalated war he’s been waging since 2014, not “implying” that Ukraine escalated anything.
> I hope this will enable open-source hardware-accelerated image upscaling

That's already a thing (especially with AMDs FSR already being open source), but regardless keep in mind that DLSS 2.0+ requires engine support because it also uses things like motion vectors. Retrofitting this into old games is possible, but likely non-trivial, and would require the game to be adjusted it's not something the driver can just do.

> However, recent NVIDIA GPUs contain dedicated silicon to perform this type of upscaling, which I'm really hoping will make things even faster!

There's no dedicated silicon for DLSS. It's "just" the tensor cores, which are programmable and is something PyTorch already has access to. CUDA support for those have been around for a while after all: https://developer.nvidia.com/blog/programming-tensor-cores-c...
It's not just about government corruption. Time zones, labor laws, less entrepreneurial mindsets are examples of reasons why there's brain drain from Sweden, Germany, UK to US.
Sips tea and happily keeps writing class components with Redux
I am really not an Apple fan, but this website is borderline plagiarism.

I would really love if the immense investments of Huawei would bring something genuine to light.
The dealers are using 3rd-party partners to finance the loans. The only risk the dealers take is if you're rejected and can't buy the car. Besides that, the loan is the same as cash for them, except they also get kickbacks for the financing lead.
Russia’s War in Ukraine Could Spur Another Global Chip Shortage
I think one should not confuse support for the Rule of Law with
exasperation at the parochial "lawmakers" who are poorly educated,
motivated by power and money, and thus essentially traitors to the
principle. That would be cynicism.
> The risk of NATO intervention is high, right? Russia understood this before invading, right? So it seems Russia is accepting a high risk of loss.

I don't think they saw the risk as high. Crimea was their 'soft-launch' to test the waters and find out what would happen. Answer - not very much. Effectively they invaded and took over a country and everyone tut-tutted and did nothing about it. Given that, I'm assuming that they didn't think the international reaction would be as strong as it is.

Obviously they miscalculated, but if the whole thing had been over in 48 hours with little resistance would it have been as strong as it is now or would there have been an effective shoulder shrug like there was about Crimea? I don't think it would be the same, but I believe the conflict being dragged out has made the reaction worse (well done Ukraine).
Great recommendations, Rob.

We have pretty much every Sandra Boynton book. They are fantastic. Plus a good number of them are songs and she has collaborated with tons of musicians to make them very special. Perfect Piggies [1] is a total ear worm and here is a song done by the Bacon Brothers [2].

While we do ready The Going to Bed Book every.single.night, I think my favorite is Snuggle Puppy - A Little Love Song [3]. I read it a little different than how that video is, but its really sweet and pure.

[1] https://www.youtube.com/watch?v=6x0aUhUJDBE
[2] https://www.youtube.com/watch?v=0Pm9_M-94XY
[3] https://www.youtube.com/watch?v=4G6cJTmrYZ8
The author specifically mentions being an oauth provider. What you're apparently ranting against is "why not be an oauth consumer?" Nobody has an issue with that. (And the article explicitly states "oauth consumer? This is irrelevant to you")
I’m not one for continuing to believe that we have to coddle rogue states by buffer zones. 80 years since ww ii ended and I would have hoped the states changed. Obviously not. If Ukraine wants to be European, let it. We thought Russia did, finally accomplishing what Peter the great started. Guess not.

England spent centuries working on the balance of power and supporting small states vs. Large. It works.

If Russia is into “Ukraine used to be Russia” then they support “Kaliningrad used to be German”, right? Or is it more “Poland and Finland used to be Russian”? And it’s really bad form to break signed treaties for the hell of it.
The Problem with the Problem (Screencast)
Hosting a React App with OpenFaaS
What is “redesign for redesign’s sake” even supposed to mean then? It’s pretty obvious that they think visitors will like the new design.
The hardest part of buying used is that it's so hard to find people who have taken care of their cars. If someone has gone 20-30% over the recommended oil change interval, you'll end up paying for that a lot on the tail end. This isn't to mention the many, many people I know who barely put any miles on their car, but change the oil based on mileage (instead of time), putting a ton of hard miles of short trips on the car. If they sell them, it looks like a great low-mileage car!

Some people have all the documentation of correct interval service for the car, but it's becoming rarer these days as cars just tend to work until they fail catastrophically, instead of years ago when they would sputter and fault in a gradual way before dying by the side of the road.
That’s a bit incorrect from the POV of the dealer, the loan company pays them the cash for the car (and commissions) and takes the cash flow.

A 0% loan doesn’t necessarily mean you’re paying more, there are often factory incentives and other issues. Basically modern manufacturing is highly capital intensive with low cost of reproduction. By selling more vehicles they amortize the cost the factory across more vehicles. Also many of the cars have already been produced and the factory and dealer are looking at selling that car new vs selling a year old car with no mileage.
And most dealers, especially nicer manufacturers, are completely open and willing to negotiate all these percentages. Especially now with loan rates well below inflation, you can really save a lot of money by negotiating things other than purchase price, even if you end up with a higher purchase price at the end.
GNU Taler is already operational at Bern University of Applied Sciences

https://taler.net/en/news/2020-09.html

Last thing I've learnt they were in touch with some Spanish bank institution to work on an implementation.

I guess a lot goes on behind closed doors.
When would you ever want this? There’s no feedback provided to the user that their submission was in progress or completed successfully.
This will probably be buried because I'm too late to the party...

This website is probably just selling you the results of following a guide from a guy who goes by Michael Bazzel. He has a podcast (Privacy, Security, and OSINT show) and releases a privacy book every other year, alternating with an OSINT book. He also has good guides on his website and they sell all sorts of training.

Anyway, if you want it done right, do it yourself and know what you're getting. My understanding is that his guides are aimed at an audience significantly less technically capable than HN.
> I presume something is wrong with your Firefox profile.

It occurs randomly and across multiple fresh OS installs... it's Google, doesn't mean everyone will experience it, but it's annoying.
The Western sanctions are said to be targeting Putin’s inner circle. Should they be targeting the Russian propaganda mouth pieces on RT/Sputnik? I’m not suggesting the west sanction the average Russian citizens who are simply parroting the government narrative.

People like this are the authors for Russian government Think Tank position papers advocating the Russian invasion of Ukraine.

https://youtu.be/8wt2JlTV3bo

This individual is literally writing the papers that advocate for the war, and pushing propaganda on RT, and yet you can pay to take his course on Coursera.

He’s coldly calculating that Russia should invade, and he’s making these recommendation knowing that he will remain employed at the HSE and his life will remain largely unimpacted by sanctions.

It’s people like these who should be sanctioned the most.

From one of his recent papers:
https://valdaiclub.com/a/highlights/great-power-politics-and...

“It is not surprising that the most common reaction on the part of sincere, although not always sufficiently enlightened ordinary people to current events and statements by the parties is an expectation of a catastrophe, which, in fact, can never be ruled out when it comes to interaction among sovereign states.
“

Im a sincere, although not always sufficiently enlightened ordinary person would like to see this person sanctioned.
Potato farmers conquer a devastating worm with paper made from bananas
Note this is for Raspberry Pis.
Use a client that implements this authentication protocol - or pick a different mail provider. I know GMail is convenient, but as you're obviously aware, its cost is not just surrendering your data.
Kick them out of the UN Security Council
Then you sign a border trade agreement. Not fucking invade a sovereign country!
>Strong disagree. The Russian people are victims of their government too, held at gunpoint from expressing their opinions freely. A sufficiently large crowd might be able to storm the institutions of government, but a lot of people would have to be at the front of that crowd, literally in the firing line.

If they are victims, they will stand up against Putin. If they are not victims, they will not.

The world just has to sit back and watch as the Russian people collapse.

This war is probably costing around $25 billion a day before sanctions. With sanctions? Russia is no longer on the world stage.

You know who owns significant amounts of Chinese land? Russia. China hates Russia. Is China about to declare war on Russia to take their land back?

If China moved into Ukraine to fight the Russians at the same time as taking Manchuria back. Absolutely nobody will hear about vladivostock falling as the world applauds China. However, Russia was smart, they announced their 'no limit' alliance with china immediately before this invasion.

Was china aware russia was using them to invade ukraine? Or were they only told about the 2 republics? Why did china rush to tell russia to get to peace talks? Why did Russia slap them in the face and say no?
Full disclosure - I'm the author of the open-source OpenFaaS project, and wrote this blog post.

The aim is to show existing openfaas users how to use React, and to show how users deploying React to a CDN can use functions for dynamic data through a CORS policy.

OpenFaaS has a predictable, low cost since it's self-hosted. Feel free to see the post for more on that.
Cloudflare also recently published a bunch of posts about their transition to post-quantum cryptography. Is it that NIST is close to standardization and organizations are starting to experiment, or is it something else?
I had a couple of ideas. I don't think I'm going to actually build them, so anyone's welcome to the ideas.

- A horror game where a crank-operated flashlight is your only source of light. The crank on the PlayDate is how you recharge the flashlight.

- A stealth game where you play as a safe cracker and use the crank as a mock safe dial.

- A "the floor is lava" style platformer where you swing across monkey bars, using the crank to adjust your momentum. I.e. spin it up to start doing 360's on the bar you're currently on and launch yourself farther, or spin it backwards to slow down for shorter jumps.
> One told German public broadcaster NDR that he was sent to Mosul with a letter on behalf of Ericsson seeking permission from the terror group for them to continue working there.

Some people have zero self preservation. I wouldn't go deliver something to a terrorist group for any amount of money.
Me too. When I think Web 3 as being distributed this is the kind of thing I imagine. Not crypto. :(
Thanks for your feedback Paul, that helps.

I will get rid of the meme image. I had fun creating it, but I should have left it on my hard drive.