skysight-inc/HackerNews huggingface dataset:
Something being a wave does not require a finite velocity and in fact there is nothing in physics inconsistent with an instantaneous velocity of light. We know that the two-way speed of light is finite, but all currently known laws of physics are consistent with an instantaneous one-way speed of light [1]:

https://en.wikipedia.org/wiki/One-way_speed_of_light

I am not suggesting that light is instantaneous, only that there is nothing inconsistent with it being so, and that consequently trying to reason about these matters on the basis of what appeals to our intuitions is not sufficient to come to any solid understanding of this phenomenon.
> The media is state ran just like Russia.

The whataboutism is out in full force here.
Also US based here, and can't remember the last time I had to swipe.

There are even places with no swipe, where we can only use chip.
Er, how often do you visit? We've had widespread chip-reading terminals in the US for almost a decade.
So has Adobe's too apparently
You may be right. I was drawing the conclusion from the stat about 55% prefunded startups, but that still leaves 45% w YC as first investor (45% of 414 is a sizeable 186). If you add 29% as only idea based, still leaves 66 at least which had product and YC as the first cheque. A couple of years ago that was close to the batch size. Probably in the absolute numbers, they are still funding those moonshots.

Thanks for the list. Many seems very promising. So are some of the others like Andy which had a post yesterday.
Does 'Don't roll your own crypto' hold at the level of nation states the size of Ukraine?
This is a comparison dumb enough to basically be in bad faith.

Ignoring that and focusing on the substance:

> "The "improved self-custody" crypto offers is one side of the ledger. The other side is: you lose regulatory protection, and can be swindled with virtually zero repercussions."

Yeah I don't disagree with this - the risks are real. Some of this can improve with better tools, but some is just higher risk that exists with self-custody. You don't need to move 100% of your wealth into crypto (and I'd argue you shouldn't in nearly all cases).

Crypto provides a new capability to take control in a way that other options don't or don't support as well. There is value in this capability even though it has associated risks.

> "Crypto's entire reason for existing is to circumvent government control—it's pretty "new world order" all the way to the core."

Not all governments are good and even good governments can implement bad policy. Self-custody is a lever against the kind of top down CCP like control of entire economies and a totally controlled cashless future. It's also a hedge against stupid actions from your government (like what we're seeing in Russia currently).

New world order suggests replacing the entirety of the existing thing. I'm not suggesting that, I'm focusing on the fact that it offers a new/improved capability that gives individuals more power. I think this is a good thing, but good/bad subjectivity aside it's just a true feature of crypto.

https://www.lesswrong.com/posts/PeSzc9JTBxhaYRp9b/policy-deb...
installing the app locally isn't as sustainable. The data and configuration for test environments gets scattered across the system and is less reproducible for new comers. As changes are made to the test environment, developers have to then install/update/reconfigure manually. It becomes an nmo effort with less consistency and more error over the single line docker-compose up
one of these days, we are going to look back on the absurdity of this current system. Just like we looked back on slavery.

Very basic housing should be free. Single payer healthcare should be the standard. Basic income should be provided. As we move towards a more automated society, there are going to be a ton of angry unemployed people with nothing to do but focus their anger on something else.
I agree with your view in general, but there is a reason why the agricultural business is heavily, heavily subsidized. Largely for national food security reasons.

If that wasn't the case, I am not sure the US would be a competitive position to grow staples compared with much of the rest of the world, which in itself is a whole topic of discussion.

Given that it already is being subsidized, I think thought needs to be done for handling the topic of broad agricultural good distribution and subsidies. Frankly I think corn, bioethanol, meat etc... should lose their subsidies but that in itself would be quite a vote loser.

E.G. How about canals, barges, railways instead of roadways
Launch Timing Update for the Legend of Zelda: Breath of the Wild Sequel
Without independent media, how can we trust the approval rating is accurate?
> I hate this dystopia you people envision

When you refer to people that don’t make the same choices as you as an “other”, do you find it surprising when you and them want the same things, but in different ways? And that you can _both_ actually help each other?
Is your salary also determined by a clear function of years of experience? Do you know what your manager makes?

Has anyone explained exactly how the number of days of vacation you get was determined? What's the process if you're unhappy with that?

I get that it's very convenient to have fair and clear rules and formulae for everything. What I'm saying is that in practise, that's not actually what happens. What looks like clear rules, once you dig a level deeper, rarely is.

In practise, the rules are almost always limited in their extent, arbitrary, and opaquely decided by the people in power in ways that disadvantage people not in power. Unfair rules are rarely changed or removed but generally just appended with more complex, opaque additional rules.
Cool. Really look forward to your update.
Why not make federal service for this? Give access to all relevant authorities to file such request there and then make it possible to cross-reference it? Leaks of access can be tracked more easily.
This type of escalating validation is also ripe for social engineering. You said this person called 10 times. They don't need to do everything in one call. Instead the goal for earlier calls can be to gather information. You gave the example of the person trying to take over the account without knowing the login name. What information would someone need to supply to get the account name? Does that require escalation? If not, what is the value of requiring that as part of the identity validation process?

If the company is going to provide some level of support to people they haven't verified, that support will be abused as a means of passing the verification.
So now that I know about these records, I better think twice before asserting my rights as a tenant. If my landlord decides to steal my deposit, ignore the leaky roof, and refuse to fix the furnace, I'll just roll over and take it. Can't have a "Yes" on my permanent record; won't be able to rent in the future!
How does this solve the issue? If a local police department laptop gets pwnd, or a local police officer's credentials get compromised through a reuse attack/stuffing (as seems to have happened here), what oversight mechanisms would prevent their email from getting PGP signed? In this case, these emails were probably DKIM and SPF verified already, which (as I understand your proposed system) seems entirely equivalent.

There's no "magic bullet" in security, you can't just "authenticate" individual emails "with no extra work" and hope that that solves things without addressing the gaping security holes that allowed those emails to be sent from official servers in the first place.
That's certainly a good point.

Languages usually change slowly, though, so once a good baseline grammar is in place, maintenance is unlikely to be a huge load.

Furthermore, with tools like tree-sitter and the language server protocol, multiple communities benefit from their continued existence, so there's a bigger pool of contributors to the parser.
It does instrumented fuzzing. The older https://github.com/dvyukov/go-fuzz would rewrite your sources to inject the instrumentation and pass the rewritten sources to the compiler, but it didn't really work with Go modules. This is something that probably makes sense to integrate with the compiler toolchain, same as `go test`'s coverage testing.
Not zero benefits. In your system run by people your money can be frozen or taken away without your consent. Recent example: peaceful protesters in Canada. There are also tons of examples, when scammers would reverse a good transaction after receiving the goods.

Another benefit of some blockchains: incredibly low transaction fees.

Another benefit: smart contracts.

I don't understand why you need to straight up lie.
Big money will probably at least break even. It's your average person throwing their money at the shitcoin of the week who will be left holding the bag. There is no hope for those people unfortunately
“Working with Claire” is an interesting comparison. I’ve been trying to think through why I reacted better to it than the main article.

Ultimately, “Working with Claire” seems more aimed at me, the reader / notional employee. E.g. it starts concrete, talking about meetings we’d have together. And it has helpful info about how she tends to work and the kinds of things she might do. In theory, it means I wouldn’t have to work out things like “How much info does my new manager expect?”

Self-reflection is a big part of these personal READMEs. But it’s also important to work out which bits of self-reflection are useful to the reader. For me, that’s where the main article didn’t quite hit the mark.
Non-SPA feels slow. It doesn't matter that much if it's slower or not, because the perception is slow. If I'm on a page, click on something, and in the background it loads some new content and updates part of (or even the entire) page, at least while I'm waiting, there's usually something else to read or potentially interact with in some way. Maybe there's a spinner for requests over ~200ms. It feels like the app is doing some work but it otherwise present. If every click results in a new page render, my browser immediately clears the page and I'm left looking at a blank page waiting for content to render. Even if that somehow takes half the time, it feels like an eternity, and there's nothing for me to look at while I wait. And that full-page redraw is visually distracting.
Thanks, I am on iOS so this is helpful. All I really care about is notifications, step tracking, and music control. It would also be nice to look at my calendar and check the weather, but those are not critical.
Unfortunately at a bigger cost to the merchant, which hurts in case of small businesses
On the face of it it seems weird that votes for one thing can be influenced by the existence of unrelated issues on the same ballot.

It makes more sense if you're making a selection among many people for one position, but if you have, say, 5 different issues on a ballot, you can influence the impact of those 5 by adding useless issues to the ballot. (e.g., if you are a pink legislator you can feign partisanship and add a bunch of low-importance purple issues to the ballot so that purple voters cannot easily oppose your pink issue).
That's got absolutely nothing to do with the bank. It's between you and the 'merchant'.
> Is there a specific claim you have in mind that you consider invalid? Can you give me an example of an explanation of group differences that you would consider scientifically valid?

Yes. The Bell Curve by Richard J. Herrnstein, Charles Murray (1994). I’m currently having a debate about it in another thread. It uses these assumptions about IQ and the demonstrates group difference with flawed studies, which it then goes on to justify conservative policies.

An example of valid—albeit trivial—group difference on the is height difference across genders. A more interesting group difference is how a mock jury is less likely to convict a minority group if a member of that minority is present in the jury. Then of course the field of medicine has many examples of interesting group difference based on genetics. However as a species we humans are remarkably homogeneous so if you find a group difference in behavior based on genetics it will most likely have an extremely small effect size, and as such be of limited interest. At best this is where IQ research falls in.

> There's tons of research quantifying the degree of mutability and heritability (e.g. twin studies, admixture studies).

These are still up for debate and not without bias. The original twin studies by C. Burt were likely falsified (https://en.wikipedia.org/wiki/Cyril_Burt#%22The_Burt_Affair%...) later efforts of reproducing the results are not without controversies either. And even if you look beyond these controversies there is an inherent bias as adopted twins are way more likely to be adopted within the same socio-economic group, adjusting for that is really tough. I’m not aware of any admixture study which explains a significant group difference in behavior, so I can’t comment on this. But I’ll leave this quote from Wikipedia instead (https://en.wikipedia.org/wiki/Race_and_intelligence#Racial_a...):

> Reviewing the evidence from admixture studies Hunt (2010) considers it to be inconclusive because of too many uncontrolled variables. Mackintosh (2011, p. 338) quotes a statement by Nisbett (2009) to the effect that admixture studies have not provided a shred of evidence in favor of a genetic basis for the IQ gap.
DHS already has a portal LEOs use to collaborate - would be pretty easy to set up something at the federal level - if there was the will.
It hasn't been true since the job (and education) market adjusted to the GI Bill.
Fun fact: very few developers (especially newbies) enjoy working on legacy projects.

New features push the business forward, lets you learn faster, you aren't constrained by the garbage someone else wrote years ago but don't have the budget to change, and it looks better on a resume in an industry where the average term of employment is 2 years because new hires get bigger pay bumps than annual raises give.
If the hackers are sophisticated, I would think they would start wiring in much smaller amounts and thru accounts so tracing is harder. Much like what they are going to have to do with the funds in that wallet.

If they setup some plausible 3rd party company the game studio could use and started transfers of $10k a pop it might be some time before anyone catches it.
Why should it be understood as the archaic usage?
Yep, the rules were, for chip and pin fraud, the liablility was no longer on the retailer, but still was for swipe fraud. So there was a HUGE push from retail customers to get chip-and-pin in place to cut down on the amount of chargebacks, etc.

https://pointofsale.com/chip-card-vs-magnetic-stripe-card/
English-native source: https://www.independent.co.uk/news/world/europe/telegram-rus...
Penalizing every innocent potential renter who’s more likely to default on a lease is worse than only penalizing renters who actually do.
I'd love to convince my parents NOT to get this, but I doubt I will succeed. My dad had his first heart attack within 2.5 weeks of his last booster. It's just not worth the risk, especially if the "protection" only lasts 4~ months, and there's _zero_ long-term side effect data. This is a complete medical experiment, and I don't see how doctors could so quickly sign off on this, unless they're holding Pfizer stock...
The card is still issued by a bank, the bank is called American Express National Bank. Someone has to extend the actual credit.
I have to admit I find this whole situation (and also Krebs article bizarre). The problem seems to be that tech companies approve EDRs without much checking. Then the argument somehow becomes it is essentially impossible for them to check because there could be any of the thousands of police departments in the world requesting the EDR? Why should MS in the US somehow respond to a request from police department in Cuxhafen in Germany?

I think the argument being made here is one of those "we can't make a perfect solution so no solution works", which is nonsense. Simply don't answer requests from police departmenents you can't verify. I bet you if a police department would request some business sensitive information they would not hand it over without going over the subpoena with a fine toothed comb. The issue is just that they don't value their customers privacy high enough to do a proper check.
Generating Composite Video on ESP32 with LVGL GUI
When they say "resilient to quantum attacks" they just mean there is no known algorithm that could solve them efficiently. But since they aren't popular and we don't have quantum computers, not many people are even trying.
Yeah, this is my take of things too at least as I understand it.

There is increased risk moving stuff off chain to third parties.
> isn't the way you keep them united is by promising the smaller ones that they won't be trampled on by the big ones?

Yes, but in the US, at least, it's gotten to the absurd opposite where the minority is more or less assured a majority of votes. In order to avoid tyranny of the majority, we've more or less codified tyranny of the minority.
Why do you believe that everything the government does is nefarious? If you really believe your government is after you and everyone else you can try to change it or leave the country. The one option that doesn’t change anything is posting unrelated comments on the web. How is the government informing people bad? Are schools bad? Universities?
I came here to say this. The voting scheme described isn't Pareto efficient; it's possible for pairs of participants to make positive-sum private deals.

In the base scenario, Alice votes for A with 4 credits and Bob votes for B with 4 credits. A, B each gets 2 votes.

In the private deal scenario, Alice/Bob agree to each vote for A, B with 2 credits each. Then A, B each gets 2.818 votes.
Author of the book here, thank you for your feedback!

Though not an Ada expert, I have used the SPARK subset. And I’ve worked on security assessment of military systems with components written in Ada. Although we looked at binaries and not source code, because our assurance model did not consider the Ada compiler to be part of the chain of trust (so we test the artifact the CPU will execute). I really like Ada and hope to use more of it in the future!

The HN community may be interested in this 1 hour presentation [1] on Nvidia's adoption of Ada, including why they chose it over Rust in 2019 (regulatory certification was one factor). There’s also a great academic paper [2] on the recent advances SPARK has made in heap memory verification, inspired in part by Rust’s type system.

There are currently efforts underway to certify Rust for usage in safety critical systems via an alternate, certified toolchain (among other pieces of the puzzle). Two related initiatives are linked through in FAQ question #7 (which someone already shared). I’ll be sure to add the Ferrous Systems and AdaCore collaboration when I have a chance to batch together some updates.

I, like many others, believe Rust is a technology that can deliver value in safety and mission critical verticals due to reduction in undefined behavior via principled static analysis (a type system for which there has been early success in formal verification of safety claims[3]). Looking forward to digging into Rust research tools for deductive verification in a later chapter(similar to SPARK - hand-written Hoare logic specifications, proven via SMT solving at compile-time).

We make comparisons to C and C++ in the book because they are the closest relatable analog for many developers. But I’m happy to add mention of Ada to not alienate potential readers like yourself, though my Ada knowledge is not currently deep enough to provide in-depth comparison.

This book is a best effort and an early-stage passion project. It strives to be technically accurate and data driven while remaining approachable to a range of readers. Like others have mentioned on this thread, this book does not claim to provide guidance for adherence with any particular standard or certification process. Although Chapter 3 does map concepts from MISRA C 2012 to Rust, in order to remain grounded in realistic, industry-adopted best practices.

The goal is to help readers build more secure and reliable software in general, to the furthest extent possible using entirely open-source tools. I look forward to iterating the content to meet high standards of quality, while keeping the entirety of the book freely available online.

Always open to critique and suggestions, thanks again!

[1] https://www.youtube.com/watch?v=2YoPoNx3L5E

[2] https://www.adacore.com/uploads/techPapers/Safe-Dynamic-Memo...

[3] https://www.eurekalert.org/news-releases/610682
Interesting to see this page branding itself like a SaaS startup with the long form descriptions on each page and the features section of the home page: “Fully Secure”, “Easy to Use”, “Stunning UI”, etc - is there some sort of SEO ad or incentive I’m missing?

For example:

> Specifications

> Generate morse code for letters and numbers

> To secure the data like password, OTPs, security codes, Date of birth, name, score, etc, you can use this morse code generator. It will generate strong morse code for you that creates a strong encryption channel to prevent the information from leaking. You can generate morse code for numbers easily with this tool.

Morse code as encryption? I’m not sure I understand.
Kinda off-topic, but as someone with social anxiety and (strongly suspected, but not confirmed yet) ADHD I'm a bit jealous of people for whom raising a hand to ask a question during a lecture or using professor's office hours is just a simple decision away (provided they care enough to actually do that). For me it's mostly like these options didn't exist at all even if I actually wanted to use them, for several reasons. I wonder what could be done there to better accommodate neurodiversive students.
That is my worry as well. For now, there are still dumb monitors on the market, but I fear the story with smart TVs will repeat itself.
Others have talked about how you can use DeFi swappers, which absolutely will allow the hacker to convert a couple million per year into clean crypto if done meticulously, but the big problem is that they can't explain where the crypto came from. I don't think that's a death sentence, as you can still pay taxes and what not even if you can't explain where the coins came from, but if law enforcement catches onto you you'll have a problem. This is where NFTs come in. Since they're non fungible it's easy enough to buy a bunch for $1,000 and sell them to yourself for $100,000. This has the added bonus of pumping the artist you've invested in, so you'll be making money off the NFTs you legitimately sell on the market too.
Over time, we expect that in most cases you wouldn’t use it directly. Instead, a router might use it for route changes, for example, automatically marking them as transitions. This would make it possible for the user to click a link in the middle of rendering, and immediately handle it instead of being blocked until the render completes.
I've never missed a payment, have over 6 years of on time payments, never even carried a balance on a card, and never been denied an application, yet my score has dipped as low as 640 just because of a "high" amount of credit checks, because I like to take advantage of "spend $1000 on our card and get $200" promotions that come in the mail. 630 doesn't necessarily mean anything bad at all.
I'm actually not wishing for a powerful referee - I'm _happy_ this hack happened. It means that cryptocurrency as an experiment succeeded in completely removing centralized control, and we're now closer to my libertarian utopia enabled through technology
The world needs more of these. Have you considered looking into the goodnewsnetwork.org?
Because no product manager has been able to push it through various layers of beauracracy (yet).
Plus more customizations means, their ML based personalized SERP page has failed in understanding your intent/needs.