skysight-inc/HackerNews huggingface dataset:
> The source of the problem was not just the NFT and the airdrop. However, by releasing an NFT to a victim, they will see it. Then, there comes a follow-up message that demands a signature for connecting to a wallet.
> Furthermore, a prompting request for a secondary signature will come up. If the user accepts it, the hackers will access the unsuspecting user’s wallet and funds.

This is light on details, but as I said, the only way another address can spend a users tokens is if the victim address approves it (or if the token is not ERC20 conforming). This approval might be what the article refers to here as signatures.

Alternately, this attack could somehow get a user to reveal their private key, in which case, of course an attacker has access to their funds.
It’s interesting that to criticize rust without being downvoted to death, one must first say how wonderful and superior to c++ it is.
You're welcome and thanks for the thanks! I had just read theguardian article when I came upon your post - usually I just lurk here :)
How not to short-circuit the clean energy transition
> The "rationalist community" is morbidly fascinating in their tendency to be so self-important while also having a deficit of self-awareness

I’m about to start calling them what they are: Sophists.
As far as I know Scott was the first person to suggest the "worm theory" (parasites) and no study has shown that to be the case. Unless some new body of Ivermectin research has come out that I'm unaware of, then you're misrepresenting current medical opinion by a long shot.
This is why the law requires people to follow at a safe distance. If you're only leaving room for "instant response times" then you had better have instant response times because you're liable.
People should consider the possibility that this is parody.
Phantom braking is not exclusive to FSD, so the vast majority of people who experience phantom braking do not have a report button.
Pre-Mittelstand investing is also driven by power-law 100x+ returns.

Let's say the deal is $100K for 10-20% of pre-revenue/pre-product pre-Mittelstands.

You will get 100+ out of 200 businesses that are >1X+, 20+ that are 10X+, and 2+ that are 100x+.

So I'd do diligence like YC - wide open applications, largely focused on the team, one or two interviews max, global focus.
Tokio is awesome and very easy to use imho
Your last point is just completely wrong and has no basis in reality.
"Is the flexibility and type checking worth the API complexity, and documentation dead-ends?"

What do you mean?
Per the comment from mutedpossibly below, their own ethics board has already shot this down (pun intended), but before that, I wonder how they though any of this would fly under Part 107 [1] (pun also intended).

[1] https://www.ecfr.gov/current/title-14/chapter-I/subchapter-F...
It is effective if you have worms. It's also effective if you have worms and covid, because the worms make the covid worse.
> Why not focus on improving how we generate electricity before we tear out all the gas?

It's incredibly simple. We can, at will, change how the "single" source of energy is generated. There is no time that is too early to have all energy consolidated to one source.

Not only because the plants that generate the electricity are more efficient and cleaner than everyone burning their own fuel (even when they are gas or coal), but because if we are prepared already, as SOON as we make the change to renewables or nuclear, suddenly everything is more clean.

I don't want to be rude here, but I HAVE to assume fully functioning adults are arguing from bad faith here, rather than "not understanding" this concept.

Don't be coy, tell us why you really don't understand this.
Show HN: Test your app color ideas for free
I think it's more of a statement on the general lack of accountability in political systems than a statement of any particular Eton-yob's moral dexterity!
A meta-analysis of flawed data is still a flawed analysis.
Thanks! We wrote a custom Parcel runtime [1] inspired by Parcel's HMR runtime (which was too bloated and buggy for us) that injects a web socket listener into the development build of the extension.

Whenever a bundle change happens, Parcel sends it the refresh message and it either does `chrome.runtime.reload()` or `location.reload()` depending on the context.

[1]: https://github.com/PlasmoHQ/plasmo/blob/main/packages/parcel...
May I ask you why you bought your M3 Performance in the first place, then? The "appliance" feeling can be seen already in photos, you don't even need a test drive.
About software of our car makers being superior, I'd like to have some harder evidence. Reading a bit here and there Tesla seems the less bad option wrt software quality in a car.

Edit: beside just your personal experience
why? what am I missing?
CASH as in Cash App?
I believe they're still using radar in cars where the hardware exists (unless you have FSD, in which case it's using vision only).
Everything is hard. Names and naming things. Currency. Time. Passwords. Authentication. Error handling. Concurrency.

Every. Thing.
> Tesla would just be to have a debug button where you can report and elevate the past 10 seconds of driving

They do. Push the microphone button and say "Bug Report."
My favorite baffling RNG bias was in the game Maplestory. It always seemed like RNG was extremely "clumpy". For example, critical hits would frequently come in bursts - you might get around 5 seconds of non-stop crits.

The crafting system was heavily chance based. You'd get say 7 attempts to augment a piece of gear, using 'scrolls' that had a certain percentage chance of succeeding. The lower the chance, the bigger the improvement to your gear. So a pair of gloves that had 7 successfully applied +attack 10% scrolls would be incredibly valuable. The superstitious method to crafting (which, anecdotally, worked incredibly well) was to get a ton of gloves and a ton of scrolls, and apply one scroll to one pair of gloves and throw them away if it failed. Once you had a single success, you would apply the scrolls as quickly as possible to try and ride the RNG wave. In my experience, this would very frequently result in getting 3+ successes in a row.
Scrutiny: Hard Drive S.m.a.r.t Monitoring, Historical Trends/Real World Failure
Sure, if you're working at Google in 2000, you're fine. However, cash flow isn't enough, and a lot of tech is very cyclical. If a business has already hired to sustain growth which doesn't appear, they will lay people off. Advertising is leveraged on the state of the economy, and in a contraction will shrink more than goods sales, so a company relying on it will lay people off or have some very ugly financials. If software is licensed by head or usage and all your customers are shrinking, your revenue will be directly impacted. It's very hard to forecast these effects, but so much of tech revenue is fueled by advertising, consumer discretionary spending, and venture capital [1] that assuming a business cycle contraction is irrelevant strikes me as incredibly foolish.

A fantastic and profitable business over the long term can be affected by macroeconomic effects.

1. Bridgewater estimates 10% of AMZN/GOOG/FB revenue, 44 billion/year, comes from startups. Startup revenue from other startups will likely be much higher on average.
There's a really big difference between "don't performance test on our hardware that you're sharing with other tenants" and "don't performance test on our software no matter whose hardware it's running on".
> I wouldn't say it's a "failure". It's an incremental design.

I'd say all this is why you don't usually try and bolt on async (and anything doing multithreading, async, parallel, or distribution) after the fact. It has to be in the language from the very beginning.
Not only indigenous. [0] [1]

[0] https://en.wikipedia.org/wiki/Louis_Riel

[1] https://en.wikipedia.org/wiki/Expulsion_of_the_Acadians
It really did trip me up, in the first sentence mostly. Because that’s a commonplace counter argument on HN in general. Any thread with even mild controversy I expect to see multiple comments leading the way GP did.

Green accounts nowadays make me wary as well. At one point I put show dead on to help vouch for green accounts that started in shadowban mode, but now it feels like a 50% a new account was created very recently and used to fling shit on flamebait threads.

Around the middle though I picked up, at that point it was a little closer to caricature.
> It sounds like you and the parent both have much more demanding needs than we do

Okay but devil's advocate, bringing it back to the original topic, wouldn't restaurants also have more demanding needs than the average person?
I agree on San Soo Gab San as my fave (both the Chicago and Morton Grove locations are good). There was an awesome one in Lincoln Park that I'm pretty sure closed down that had all you can eat KBBQ _and_ all you can eat sushi.
DIY low-power 6 SSD NAS based on the Quartz64 ARM board
WorldWideWeb.app
this? https://www.serverless.com/blog/s3-one-time-signed-url/
> Requiring SPF/DMARC/DKIM/PTR shouldn't really be a problem

Oh I wish that were the case. One recent "lovely" example I stubled upon is Deutche Telekom (t-online.de) not willing to use SPF because it's not perfect enough for them.

It's only the tip of the iceberg unfortunately.
> But it's cool technology. A death or two is worth it /s

You're clearly trolling here, but maybe we can reframe this into something worth discussing: does autopilot result in more or fewer deaths per 1M miles driven than the median human driver? That seems like a reasonable threshold/criteria for legalizing the technology.
SpaceX has not sued ULA ever unless I am missing something.

SpaceX did sue the Airforce at one point because the Airforce basically tried to award something like 10 years of contracts to a single supplier.

That is quite a different thing.
> You can also say that about 1-in-5 deaths occur at what are supposed to be the safest places for pedestrians to cross roadways. I'd expect it to be far more remote if in fact intersections were designed for people instead of cars.

Considering way more people use crosswalks than walk across the middle of the street, only 1-in-5 pedestrian deaths occurring in a crosswalk seems like a very strong signal. Ignoring such an obvious consideration screams 'motivated reasoning'.

Following the traditional road safety advice keeps kids very safe: Use the crosswalk, look both ways, be home before dark and don't get drunk. Even accounting for all the failures to follow that advice, there are still only a few hundred child pedestrian deaths a year in a country with hundreds of millions of people. Calling it an "absolute bloodbath" is just sensationalism. I think you're just trying to scare people because you have an axe to grind against car culture for other reasons.
Maybe, but having random "accurate" behavior in a program is generally worse than being incorrect all of the time.
I can't be arsed to do it, not because it won't make a difference, but because I have no ability to know that an alleged lower-carbon product is actually lower-carbon, and not just marketing bullshit and accounting trickery.

Encoding it in cost is the only metric that the manufacturer won't be able to game.
It's the only honest, guaranteed signal for any product. Making purchasing decisions based on it is the whole point of market economies.

Tax carbon at the same cost as it takes to pull it out of the air[1], and consumers will start buying low-carbon alternatives.

[1] You should also probably take that money, and actually pull it out of the air, though.
> What sort of flourishes/fidgets do you find yourself gravitating to most?

There are a huge variety and it's mostly down to personal preference. Popular flourishes include coin rolls and coin stars. Popular slights include dozens of different palms with single and then multiple coins.

> What does great sleight of hand coin magic look like?

Done right it can be absolutely mind-blowing. For an example take a look at some of Danny Goldsmith's videos (https://www.dannygoldsmithmagic.com/). Danny is very, very good but like a lot of specialized skills, those who aren't deeply into it won't be able to notice a meaningful difference between the top 20% of coin workers.

> Who do you admire most?

That's really down to personal taste and style. One unusual thing about magic is that the "best magicians" in the eyes of other experienced magicians are generally people you've never heard of. Fame doesn't really correlate with the pinnacle of skill. While most famous magicians like a David Copperfield are skilled, they would be the first to tell you they can't hold a candle to the most skilled coin workers or card mechanics.

> Where should someone get started if they want to explore this?

For serious coin work, Danny's teaching videos would be a good start. Look for ones he flags as being appropriate for novices. For learning the art of magic in general, I'd suggest not wasting money buying individual "tricks" unless you just want a few easy party tricks to amaze (or annoy) friends with. Most people who get deep into magic discover that the most valuable and broadly applicable knowledge comes from books, videos and live learning (called "sessioning" by close-up workers). I don't buy much magic in recent years because I'm at the point of just perfecting skills, so it's hard to recommend an online store but a safe bet for beginners would be Vanishing Inc. https://www.vanishingincmagic.com/. The guys that run VI are deeply experienced and they seem to avoid selling a lot of the 'crap magic' that looks amazing to novices but isn't actually all that useful. I was at a lecture by the co-founder a few weeks ago and the guy not only has deep knowledge and mad skills, he clearly loves magic and is good at teaching.

If you just want to watch some higher-quality magical performances, I'd suggest Penn & Teller's "Fool Us" show (lots of clips on YouTube). The technical coordinator on that show, Michael Weber, is a long-time magical inventor and author who is well-regarded by other magicians. He and Teller work together to curate the acts that get on the show and you're basically getting to see some top notch talent hand selected by guys who know the difference.
Can transhumanism save our species?
Talking =/= answering questions.

The advice of "not answering questions" applies mostly for situations where cops are looking for the guilty party, and you don't want to accidentally self incriminate (or if you are guilty, you have a higher chance of getting off)

FBI having records of you specifically in relation to a shady website is already past the point of looking for a guilty party - the people they send are specialized in cyber crime, are there to investigate the entirety of the situation with enough information about you already collected from all the sources like ISP logs, background check, and so on, all indicating that you are probably not guilty, as people who actually run sites like that statistically lead very different lives

You can refuse to answer questions and let them in, however that has a higher rate of a search warrant, seizure and possibly arrest. Or you could just show them your domain registrars, tell them that you have no idea where it came from, and then look up history that shows the transfer, and that could be the end of your trouble, without any self incriminating statements.
Modernized Safety Standard: A Crucial Milestone for Clean Cooling
I used to read a lot of sci-fi books in the past. Nowadays hardly one in ten books I read is sf. I just find most of what’s written these days boring. So I’d rather stick with non-fiction where I can learn shit. For fiction I prefer movies where I find the general quality better.
Your argument boils down to "under a different set of rules, someone else would have won". So what? That's not fraud; that's rules you lost fair and square under.
Not sure it’d be a lawsuit per se; more of a inspector general review and or & government accountability protest review:

https://www.gao.gov/legal/bid-protests/faqs
Education funding, child healthcare, the effects of abortion bans on existing kids, gun regulation, climate change and the spiraling national debt are the things I'd worry about if I had kids.

Loot boxes, not so much.
or, as warren buffet likes to say 'you don't know who is swimming naked until the tide goes out'.
It would be interesting if it provided a direction.

3.8 as "cat" is to "pig"
>It doesn't make sense to argue that the responsibility for a violent or aggressive interaction stops with the Tesla/etc driver rather than the maniac who responded aggressively.

I never said that the responsibility stops with the Tesla driver. I simply said that it's wise to not put yourself in a situation where you may accidentally piss the wrong person off - this is a general sentiment that applies everywhere in life, really. You don't know if the person you're dealing with is the nicest, most understanding person in the world, or an absolute maniac who's been dealing with some heavy stuff and is one step away from losing their absolute shit. Yes, you're not responsible for someone else's emotions, but you are responsible for how you interact with them.

>Further still, since we're being pedantic about litigating responsibility, the person trailing the Tesla/etc should be leaving plenty of room such that he can comfortably react to abrupt braking (the leading driver might have a good reason for braking quickly!).

Of course. Surely you'd agree that nuance plays a large role here, though? There are often times where you'll find yourself closer to the back of a car than you'd like, despite your best efforts to maintain plenty of room (eg, someone cuts you off or moves into your lane with less distance than you'd like).
> My suggestion to Tesla would just be to have a debug button where you can report and elevate the past 10 seconds of driving.

AFAIK they automatically collect data on disengagement.
I have never lived anywhere, in my entire life, that vented stove air outside — it just "filters" it through a filter nobody ever replaces and blows it back at you, if you're lucky.
Relevnt is a group messaging app with live, interactive podcasts
No, since rust async is stackless.
There is a stackful coroutine implementation for Rust: https://github.com/Xudong-Huang/may
Shoutout to Vijay and Ray[0] - keep it up lads!

[0] https://soundcloud.com/defn-771544745
Jean Sammet, co-creator of COBOL, has died (2017)
DKIM in no way helps to get past the cartels' "reputation" filters. I send maybe one email every few months to microsoft accounts & it's always received as spam. My server setup & ip have been solid for a decade. It's only ever the globalist providers that block me. Google is 50/50 I get through. Everyone else (eg Protonmail) is no problem.
Automatic mail forwarding without altering the From address will cause DMARC alignment for SPF to break. This is a common enough legitimate setup that most providers seem to effectively downgrade the DMARC policy applied when they see this (usually reject becomes quarantine, quarantine becomes ignore).
They claim to do a lot of (spooky) automatic data collection, including camera footage.
> Yes, and sender reputation is part of it :D that's why they can handle it.

They aren't doing a very good job of using sender reputation. If you have a domain with a several year record of no spamming whatsoever, and with every outgoing message using DKIM, they will still start blocking you if other senders who just happen to have an IP address close to yours start spamming.

IP block reputation should only be used to set the default when dealing with new senders. If they have seen enough DKIM signed messages from a sender to know that the sender has a good reputation, IP block reputation should have weight 0 when receiving mail from that sender.

Google could do this without any increase whatsoever in the amount of spam that shows up in their customers' inboxes. All that would change is that their false positive rate would go down.
>Note also the people on the Democrat side who claimed that the election of 2016 was invalid.

Including Hillary Clinton herself, who withdrew her acceptance of the 2016 election results <https://news.yahoo.com/hillary-clinton-maintains-2016-electi...>.
You're replying to an article (and comment) that discusses disallowing new gas hookups. The article and a lot of the discussion does focus on cooking though.

The amount of greenhouse gas emissions due to heating is not insignificant.

While in general, heat is heat, and hot water is hot water, disallowing gas hookups means no more gas stoves, which a lot of people and chefs have strong attachments to. Hence the focus.
> As far as I know Scott was the first person to suggest the "worm theory" (parasites) and no study has shown that to be the case.

I don't know if he is the first person to suggest it, but you are incorrect that there is no published research supporting it.

https://jamanetwork.com/journals/jamanetworkopen/fullarticle....
Corn lobby wins big as EPA finalizes record ethanol blending requirement
I wonder what was the previous medallion system like in Switzerland.

Uber came from a very American context where there was an extremely exploitative and shady business model around taxis. Pre-Uber, either the driver rented the car to a middleman who rented the medallion from a rich owner, or said owner was selling and financing (most banks won't touch these medallions!) a medallion at a ridiculous interest rate to a driver that planned to use it as his retirement savings (an extremely volatile asset and not very liquid).

The more I spoke to cab drivers the more it seemed their industry was a pyramid scheme aimed at helping established rent-seeker take advantage of often poor new immigrants. Uber brought a breeze of fresh air: Someone could simply buy a car, calculate the depreciation and it's value on the market (since unlike medallions cars are relatively liquid assets!) do rideshare and calculate their profits or loss. They can get out of the game at anytime, and they know exactly how much they are going to get for the car they have should they sell it.

And I'm not even touching the usual pain points and often discriminatory practices of medallion drivers (refusing card payments, refusing rides to non-white passengers and to non-white neighborhoods...).
I guess that location they opened in space back in 2001 really bankrupted them
In just another few years, if Rust does not fizzle, you will feel the same way about code in Rust as it evolves and improves.

But how C++ was coded to older Standards was not wrong at the time. That code was chosen judiciously according to features of the language as it existed then, and our understanding of it and our world.

Changes in languages are not random. Every last change in each new C++ Standard was in response to recognition that code would be better using the proposed change. Failing to use the new features as intended, after, would amount to choosing not to write code better.

Rust started at a snapshot of how problems of coding were understood at one time. Our understanding today and the world we program for have changed markedly from that time. Both will continue changing. What is good Rust will also change as the world, our understanding of it, and the language all change.

Failure to adapt is just failure.
Seems a bit like gatekeeping. Some people rely on audiobooks.
If Oracle ever wants to be the good guys just once, I have an idea for them that's right in their wheelhouse. Step 1: buy grsecurity's kernel hardening patches. Step 2: put said patches in the publicly released UEK source. Step 3: wait for grsecurity to refuse to give them future patches. Step 4: sue grsecurity for imposing further restrictions on the exercise of rights granted by the GPL.
Lol, sending someone the link kind of defeats the purpose, no?