skysight-inc/HackerNews huggingface dataset:
I wear lots of hats right now; I was employee #1 so I did whatever engineering needed doing to get our platform created and functioning. Frontend, ops, backend, selecting vendors, eventually hiring, working on compliance, helping define strategy, project management... basically anything that needs technical expertise I'm leading.

...and I'm loving every minute of it. I committed to seeing this through at least until they don't need me anymore, and I fully intend on meeting that obligation, and possibly well beyond that if the work continues to be fun.
One company doing a bad job does not mean it's impossible or even uncommon to do a good job. Also, if you wanted to hedge against Okta... feel free. You can U2F 2FA your services behind Okta or in front of it. We use GSuite SSO, but everywhere we can set 2FA outside of it we do so.
I stopped reading One Hundred Years of Solitude because I had enough of people across generations having the same damn name.
Even John Carmack got in trouble with the police at one time. Luckily he got off with a warning.
> "Look at our demo of a hyper-realistic human character!"

Interesting to see that hair apparently is still a real problem. It looks and moves very unnatural.
The are really going in on all peripherals. Ads, Analytics, Assets, Multiplayer, even Source Control, Build Machines etc etc.

It's all terrible right now but they will get there.
I guess the natural response would be that the companies running these myriad chains simply wouldn't care about abstract cybersecurity concerns like 51% attacks, but instead selling services to users. Just consider all of the companies today which have horrible security. The main factor that they care about is whether their business will get attacked in practice, which is infrequent enough that it always makes the news.
Yeah well, let's not open that pandora's box
Suppose a hacker group get their hands on a valuable exploit. They are like LAPSUS$ and are going to make the exploit public access, but also want to make some $. I wonder if the following scheme is theoretically possible:

1. Put the encrypted exploit file into some kind of Blockchain
2. Create a crypto wallet and announce a fundraising
3. As soon as the sum on the wallet reaches, say, $5M, the exploit is automatically and consensually decrypted by the Blockchain system and released to the public.
But it was cheap!
How to Eliminate Organizational Debt
It also could be age, not just the fact that you burned out twice. I definitely have less cognitive stamina than I did ten years ago. Who knows if that is age, pandemic-isolation-related, or what.
I just tried it out on iOS in Safari's reader mode, and it looks quite good. What don't you like about the output?
It's interesting how you need to read what they don't write to actually figure out what they're saying:

They are unable to create or delete users. They cannot download customer databases. They cannot access our source code repositories.

So they can likely arbitrarily access/impersonate or at least password reset existing users, and probably reconfigure the accounts in creative ways.

For transparency, these customers will receive a report that shows the actions performed on their Okta tenant by Sitel during that period of time. We think this is the best way to let customers assess the situation for themselves.

So they have no idea which of the actions were or weren't legitimate and make it their customers' problem.
Interesting point from the same source:

> For example, OpenSea serves most of the NFTs they mint over HTTP. If the OpenSea ever collapses, ~8% of NFTs vanish.
If you ride those at anything like bicycle speed, how do you perform an emergency break without hurting yourself?
Most forms of governance have horror stories as well as success stories (you've already mentioned Hong Kong; Irvine was also a corporate-planned city and by all accounts that has made it a very nice place to live). Unless you have a controlled analysis showing that locally administered cities are less effective on the whole than national administration, I don't think historical anecdotes (as terrible as they are) add up to much.

> If it were built for the good of the locals it would just be built by the host government without an outside power, through partnerships and investment.

There are plenty of reasons a host government might want or need to credibly commit to noninterference. Areas with endemic corruption have had success appointing judges or administrators from far away who don't have local family/clan ties. Countries with weak credit that want to attract foreign investments will often issue debt in foreign currency and/or under foreign law. Countries with major divisions may invite foreign peacekeepers. Etc.

> If it genuinely is well-intentioned for the "good of the locals" then of course, well-off foreigners coming in and telling the locals what's what has a very long, and very poor track record. See: uh, basically anywhere.

Local government in these places also has a long and poor track record.

I'm sure there are good and bad charter cities, but I don't see any reason to think the concept is inherently terrible.
>The bad news is, as a Windows user, very few apps support scaling (aka DPI awareness).

Completely false. I've forgotten the last time I encountered an app that wasn't super ancient and didn't support fractional scaling on Windows 10/11. Sometime in 2017 I think.
The difference is that 'centralized' parts are a commodity. Infura itself is centralized, but if it creates problems, it can be replaced with any other rpc, including your own node.
Therefore, those services have zero power over the user.
What if they could go for the companies building these standardized GDPR cookie consent dialogs instead...
I liked this post till the bullshit paragraph on mining which is wrong on many sides.
Bitcoin makes 0.1% rich richer? That’s it?
What the heck man, Bitcoin is a gift to humanity and it’s truly decentralised compared to others.
Bitcoin mining isn’t centralised, there’s a decent percentage of solo mining which it’s increasing over time. But I get your point.
Also what’s wrong this kind of centralisations on mining pools? They’re just coordinators and there are many.
Unfortunately I see biased information on that part.
I physically live in that house and nobody can trivially and completely legally take it down for good.
I made a mistake last week and am trying to not get fired. I need help
G13 (in the 8-core/1024 ALU config as in M1) delivers 2.6TFLOPS with sustained power consumption of 10W. That's almost an order of magnitude better than 1030. Sure, node definitely matters, but going from 14nm to 5nm cannot explain the massive power efficiency difference alone.

What are the things that 1030 can do that G13 will struggle with?
In principle if two people disagree politically, they are both ignorant. If they were enlightened, they'd agree on a common policy.
wow this was exactly my experience few years ago. I was pissed off because there was lot of tribal information about products in older mails which was not documented anywhere and people working on products moved on to different teams/left the company and we used to rely heavily on these older mails to get product/customer insights.
Because you can't talk about organized cybersecurity breaches of American corporations without someone blaming it on Russia because they drank the Kool Aid that only state-sponsored organizations have the skills to beat corporate cybersecurity drones.
> Can they download a private SAML certificate?

Oh, that's a good one. Definitely something that the software should not allow, because I can't see a legitimate reason for this (allowing to download the certificate is fine, but not the key).
Sorry for getting back to you so late; I'd rather not link my github here as I'd rather remain as anonymous as possible on public forums
You can physically live in a house that you don't legally own. Those are two different concepts.
And what purpose does the blockchain serve in your example?
Not being listed on grubhub\uber eats etc I’d think they’ll lose more money
Digital licenses and tickets are useless if the central authority doesn't honor them. There's absolutely no benefit to making NFTs out of them.

For example, if I buy an NFT ticket to a concert and the venue doesn't let me in, what was the point of the decentralization?
Reminds me of what deletescape and their associates did. They just broke into stuff and leaked it. There's lots of tweets and telegram messages explaining their motives. Now most of the tweets and telegram messages are deleted but there's still some to see in article's and even in the FBI indictment.

Tillie had TERRIBLE opsec from day one tho. Everyone knew her real name and face. I once mentioned this in the group chat and she promptly tweeted a selfie saying "don't have opsec like me".

Considering this, it lastes pretty long actually.

Disclaimer: I was in no way involved and publicly stated my disapproval in the deletescape Chats. It was however a thrill to see these things go down. Although it is equally as sad how this young lady threw away a lot of future potential for her ideals, without making any significant changes imo
Nice feature: You can adjust brightness of multiple monitors simultaneously.

Every night I set brightness of both monitors to 15, and every morning I raise it back to 30.

I've been hoping for a tool like this for years.
Everything you wrote is incorrect.

>You realize that hacker sends funds to his own wallet -> ETH Foundation decides to roll back and contacts their miner bros, who had ZERO problems performing a 51% attack -> ETH Foundation can send the same funds again is essentially a double spend?

This is how a rollback happened in bitcoin two times: during the value overflow bug and during the database incompatibility bug (2013). The bitcoin blockchain was rolled back via a coordinated 51% attack. In the second case at least one double spend happened. Ethereum never had a rollback, the change was a hard fork that changed ownership of eth previously owned by the dao hacker.
Not a computer security engineer here but reading the article feels like in most organisations there are no safeguards in place for modifying global highly privileged accounts (the article cites introducing a global Office 365 admin and then removing existing global admins, etc).

Are there not procedures like double/triple validation of sensitive changes (like "creating new global admin account") by accredited humans?

I mean, in my line of work (finance), this is something that is enforced in multiple sensitive contexts such as money transfers - at certain thresholds, even the highest privileged person in the organisation cannot single-handedly authorise the operation.
Is there another system that allows you to implement an anonymous assurance contract without a trusted third party?
The full event streams have been published this time around, including the failed sessions. I recommend reading the article and watching the videos of the system operating - they have a video of the input calibration/training, and another video of the longest session. The sessions are few and many days apart, and not all of them demonstrate successful control, but on the days where the patient can successfully drive the system there is no doubt of the communication method's authenticity, and the researchers have no input or interpretation capability.

The previous controversy around the researchers is not about them scamming patients, it's about them publishing only the positive results of their work and not disclosing negative results, making the average success rate appear better. This is one reason they publish full event streams and list days with no attempts and failed attempts extensively in this paper. The code has also been published, and the raw potential recordings are available on request. I had a careful read and I can't find anything methodologically problematic in this publication. When you watch the video, be aware this is the longest and most successful session, and the researchers made this very clear.
Wow thank you for sharing the playlist. I was ready to go make my own after reading your comment.
I just resigned from an early stage startup where I was the CTO. I burned out. Last summer I started asking our CEO if we should raise money to help us (basically me) deliver but he said it's too early as we didn't have many paying customers back then and the valuation and terms wouldn't be optimal. I hanged there 6 more months but in the end was so exhausted I took one month of sick leave and during that I decided it's not worth it to keep on fighting. Now he's raising money with a new CTO-candidate. Lean is good but I wish it wasn't my mental health we paid the leanness.
Perhaps eBay? For a decade or so they had their own home-grown stack and ran auctions with transactional semantics worldwide on their own farms, long before netflix or AWS even existed.
How could that possibly be a nightmare? Download the fonts and host them yourself.
Thank you for your feedback.
My point is simply that the 10% of all people with reading difficulties can benefit... That's why I had written.

But thanks for the hint to use Show HN. And sorry for that.

Yes, you can train and expand your focus. That would be speed reading though. And you have to learn that.
Bionic Reading works intuitively.
Spend some time looking at optimised compiler output on godbolt on both architectures. ARM has some really nice tricks up its sleeves.

I’ve been using ARM since about 1992 though so I may be biased.
Interesting but I think that logic is reversible, e.g. the left being more happy to regulate corporations that enable, amplify or cause trauma.
> This is colonialism, and the world has broadly agreed its a bad idea - even if a handful of colonies worked out fine, and we slap it with a fun new brand. If you disagree that colonialism is a bad idea, we can talk about that, but we should first call it what it is.

There are clearly major differences between this and colonialism. Most or all of the agreed downsides of colonialism are not about the existence of exclaves containing foreign people, they're about e.g. people being governed from afar without any local representation.
> Wherefore art these zealots?

Are. "Art" goes with second person singular ("thou"), not plurals.

Also, it looks like you're using "wherefore" as a synonym for "where". It isn't; it means "why". (Compare Ger wofür, Sw varför, etc.)
Permanently altering the physical state of your device doesn't mean causing destruction from a legal perspective. I wonder if an owner can sue companies that do this.
People try to solve everything with blockchains. It's not always necessary. Cryptography yes. Blockchain only if you need distributed consensus for something.

Most of what people actually don't want to do is reliability engineering. You can host it off your phone, but then it goes down if you're out of range or the battery dies. You can host it in your basement, but now you need to buy hardware and it goes down if you lose power or internet. And you have to keep up to date with patches etc. So just pay someone <$100/year to do it for you.

But the design should make that thing the most commodified thing in the world. You should be able to switch to self-hosting and back or to another provider by just changing the host's address in your configuration. Everything should still point to you on the new host. Your own device should keep a copy of everything needed to switch even if the existing provider is unexpectedly incinerated by a meteor. They should not have the ability to prevent it and should be untrusted to the fullest extent possible.

You can get that with ordinary cryptography. The thing you can't get from ordinary cryptography is disintermediated payment processing. Which you do actually want, but that's something else.
Javascript is much closer to java than to python in terms of performance. And due to the variability of the JIT compilers, it can sometimes be faster than java, but generally the latter wins out.

But the parent poster is right that the two teams did choose a different workload to optimize for, V8 being fast faster while java taking more time to JIT compile a region, but that is mostly due to the difference between their most-common uses, running websites’ code as soon as they load vs mostly running on huge—ass servers with sometimes terabytes of RAM.
I completed 32 pomodoros last week, which is above my average of ~25 for the past year and change, and a lot of my job isn't focused work, and none of that pomodoro time included any of the project management, meetings, or conversations I had with the team to figure out what we're up to, what the problems are, and what we're doing next.

But that's not the point. The point is the 9-5ers have held the higher moral ground for years now, and I'm tired of having to apologize or justify my preference for longer work hours because it makes them feel bad. There's nothing wrong with what their work/life balance is, but there's also nothing wrong with what my work/life balance is.

Honestly it's not that bad if you work weekends. You still have plenty of time to do other things, you just can't get as into your hobbies as you might like. I had to quit my WoW raiding team to devote more time to this job, for example. I don't think anyone would argue my decision there was a huge loss, and honestly the ~15 hours a week I was dedicating to WoW is much better spent on work and work related things.

I'm definitely procrastinating right now by typing all this out, so this time doesn't "count", but it's usually during my 5 min breaks between 25 min sessions, so I don't consider it lost time.
> In addition to catching mistakes, this is useful to check that code is actually comprehensible to people other than the author and a good time to request more/better comments if necessary.

The most convoluted code I ever worked with were in teams that treated code review as secret cow. It happened twice. The best was in teams without code review, but with strong ownership.

The issue is, I think, that code review is myoptic. It ensures surface level readability and does very little for actual structure. And I think it gave people false confidence and made them less willing to refactor.
Yes, but the book has a legal authority backing it up saying that its entries are property rights to the listed address.

Buying an NFT just to have an NFT is like paying for an entry in a book with no further meaning. You just get to say that’s your entry.

Oh and the entry is an http url, so there’s a good chance it’ll 404 eventually (if you even get a status code back)
FWIW, Alton Brown has updated his recommendation to steaming: https://altonbrown.com/recipes/hard-not-boiled-eggs/

For me, they don’t crack right out of the fridge!
There are many ways to improve the speed and accuracy, but it's really important in settings like these to not make changes until the input method is fully reliable, because there's the risk of complete loss of communication.
It guarantees that the group will receive the money and the exploit will be released if the fundraising is successful.
How do I know that the encrypted payload actually contains the exploit and not the picture of a cat?
They absolutely will not. They will pay you the minimum amount they can to keep you around which, if you love your work so much you’d do it for fun, isn’t a lot.
This may be the most terrifying article I’ve read in the past year, and that’s saying something. Could it be we have all been eating PFAS-infested food for a long time now?
one of the great studies, great teaching aid which illustrates the modern purpose of anthropology
I'm curious how you handled addresses that couldn't be validated. From my perspective, that's a big blind spot of real-world implementations of this sort of stuff, and thus the condition under which most of it happens. Not quite "make up a unit number" (freight forwarder red flag, anyway) but pretty close.
Bike Friday (20in wheels) and Airnimal (24in) are both superb and feel close to a normal bike to ride. There’s also the Tern and Dahon ranges.
Politicians, whatever gender or creed are there to represent their constituents. If they spend 50% of their day babysitting it’s a bad deal for their constituents and the public at large. Trying to make this into a sexist argument is ridiculous.
What guarantees me that I’m getting an exploit and not an empty text file?
There is not a single page on the whole internet that states Gflops and Watt on the same page, I did 2 googlings: "apple g13 gflops" and "apple g13 watt"... the results where completely disturbing seen this info should be clearly available. Like when you google 1030 gflops and watt you get all links on google linking to pages stating both figures and they are the same...

M1 comes is MANY flavours with different watt and gflops.

And for CPU Glops I had to get friends to measure it themself: 2.5Glops/W compared to Raspberry 4 2Gflops/W and this time it's 5nm vs 28nm.

Please give me official Gflops and Watt sources and we can discuss.

The page you link is NOT clearly stating watts in a clear way.

> What are the things that 1030 can do that G13 will struggle with?

I real life when you develop games for real hardware you notice their real limitations like fill rates and how they scale different behaviours because they have enough registers to do things in one blow or they have to remember things. It's complicated, but eventually you realize you can just benchmark things for your own needs and for me 1030 is for all purposes as good as 1050 so far: 2000 non-instanced animated characters on 1030 at 30W vs like 2500 for 80W 1050!

Without knowing, I'm pretty sure the M1 cannot do more than 1000 at whatever watt it uses... not that I would ever compile anything for a machine where I need to sign the executable.
1. Transfers of what? The recipient has to convert to fiat to do anything useful.

Cheaper and faster don't seem to be happening either, at the moment.

2. You can never digitally own a physical object. Your ownership is centralized in the real-world legal system.

You say "secure" as though people are going around stealing houses from each other by snatching their deeds. Ownership of all of those things is already secure enough.

3. In the US at least, none of this is true. Users still have to go through KYC and there is almost always a middleman involved. Crypto has escaped neither institutionalization nor regulations in developed countries.
Why do people continue using k8s if it's so badly designed?
The book is just a register, the power is in the legal system that defends that register and will settle disputes. Plus legally owning a house grants far more rights than merely having an entry in the register saying you do.
Which is essential for the longevity of a platform. You can’t further develop the JVM if you are bogged down by code depending on the internals. Encapsulation by modules is hugely important, and if we are honest, anything that depended on internals were prone to bugs anyways. Sure it sucks, but they will update sooner or later
Many people like Nintendo's games.
Re: sous vide, why not? We've been using this for quite a while, it was one of those "experiments" during the shutdowns.

Yeah, it takes some equipment, and like everything else there's a bit of a learning curve. For a lot of foods we like it works exceedingly well.

One thing though is that an item (poultry, fish, steak, etc.) cooked sous vide is essentially poached, probably not how you'd like to serve it. One way to deal with this is searing cooked meats rapidly in a cast-iron skillet. An alternative (that I prefer) is using my trustworthy Bernzomatic propane torch for the job. A quick "painting" with the flame gives a nice appearance and taste. Fun to do especially when we have dinner guests, a little dramatic flair never hurts.

And of course when not "incinerating" the evening meal, the torch is great for welding aluminum parts, a true multi-use tool.
Indeed. Or one that doesn’t show progress at all, it just cycles through tips / puns