skysight-inc/HackerNews huggingface dataset:
Think about that situation from the attacker's POV. They have invested extensive resources, but they still haven't got anything.

What if they're not the only one who compromised the insecure wallets? If they could do it, then probably someone else also could, and that other hacker could empty all the wallets first.

Meanwhile, users like you will be occasionally moving their Bitcoins around, sometimes to wallets that the attacker cannot access.

If an attacker just wants to make money, they're unlikely to wait for years to exploit an old vulnerability.

In the real world, most security vulnerabilities get exploited quickly, because they are very likely to lose value as time passes. You can find numerous real examples of this attitude, such as weak brain wallet keys which are exploited in seconds, instead of waiting and hoping that more money will accumulate in the address before someone else steals it

And, like I suggested already, a practical best case solution for the paranoid is diversifying your assets and security methods, so you can identify vulnerability sources early and be unlikely to lose everything

Edit : Bottom line though is that you cannot use Bitcoin in totally trustless way, I think. Nothing in security or in real life is totally trustless. So do your best to employ reasonable precautions and mitigations and then get on with your life
Decent breakdown. Good job.

8. You can usually export it more conveniently.
10-13 is overkill. Most wallets have some reasonable way to move txes between hardware wallet and online system (like SD card). They don't really compromise the practical security and are a much better UX.

3. checking if hardware really have no internet connectivity is indeed a thing. You could use Faraday Cage to be certain. Some wallets like ColdCard are translucent so you can inspect the components.

6. It is maximally secure to generate seed phrase manually using dices and paper lookup table. If you enter it into two wallets from two different vendors, you can see if they generate same addresses.

There's one attack you're missing: Hardware wallets could possibly slowly leak your private key by biasing bits in the signatures by grinding nonce. It would take whole lot of txes, but it is theoretically possible.

There's also possibility of someone just analyzing the electromagnetic waves during hw wallet signing txes to extra a key. Very very sophisticated and unlikely, but since we already have the tin foil hat on... just invest in Faraday Cage. :D

For maximum tin foil hat security, use multisig between two or more different devices (and/or parties), signing in different locations.

Edit: Oh. And since you're so into it it's worth mentioning that using seed passphrase is always a good idea!
A Freewrite is unnecessary. GNU ed is clearly all you need.
Comparing it to default text editor I think is not correct, try to compare it to another code editor like VSCode, Nova, etc... it's very fast and simply, I love it.
Yep, it really isn't hard to understand. But people don't want to understand, they want to have critical infrastructure code for free, and also with guarantees even though every open source license in existence includes zero guarantees.

If you want guarantees, you need to put them in place yourself, or pay the maintainer to give it to you. There really isn't anything else to this debate. Stuff like `cargo vet` is just trying to circumvent the issue by making it easier for users of the free labour of others to associate and vet updates, still avoiding paying anyone else but themselves - which may work in some cases, even when it seems to de-value the actual authors of such work as being in need of the veto of somebody else, but we'll see.
I know people who are very hand-wavy about technical development or engineering. They think everything just appears from thin air, like a cartoon genie. When I debunk that with details of even the simplest code, they respond "soon AI will be doing all that".
I term it the Deus Ex Machina syndrome.
What if curvecp had won? Perhaps it still has a chance.
>Sadly, the same polls say that, like most generations were before them, they're still young and stupid, and are planning to stay home from the polls. Some things never change.

Yeah, like politicians and, to a point, people that say what you said.
I've never voted and never will.
Not, i believe, through youth or stupidity, but because I've yet to have someone convince me why i should vote.

I'm a Carlinist ..here to watch the shitshow, not to take part in it.
And yes, i do accept all that comes with whoever got voted in. Quite frankly, i havent for the life of me seen a damn bit of difference between the lot of them...anx tgeir moaning, complaining, self-righteous supporters.
I would advise against it. Two reasons:
- if the person interviewing you know the specific tech you picked, you give them an opening to control the interview. They can go anywhere they want and you would likely fall short unless you know the stack in&out

- when you pick specific technology, you also have to defend why this one specifically. For ex, why redis and not memcache or why only postgres and not redshift..

If you keep it at sql and no-sql, you can easily defend the answer and control the interview
Thanks. I guess there's different ways to go about it though, I can respect a cold email which asks for my consent before starting the sales pitch in a 2nd email for example
pray tell what is about the quotes? do you claim that the very well documented exactions by russian troops are fabricated by the west? Lavrov also did, but then he refused the setup of any independent inquiry therefore in my humnle opinion admitting responsibility for these crimes.
Me too.

But we're not going to, because we lack discipline.

Amirite? Who's with me? [waits for high five]
Interesting, i didn't know that. Thanks.
Equating non-drinkers with 'risk-averse bland people' is an attitude I mostly find among my friends with drinking problems.
Somewhat similar to climate crisis. If we shut off AC's globally for two days, we'd figure out the solution.
Can you hear the shape of a graph?
Yes but leetcode test beyond the performance implications of data structures. They require you to practice those kind of problems.

Counter point:
Performance is mostly irrelevant for like 90% of companies in this day and age. Even iterating through a million items is quite fast.
You could setup NextDNS (nextdns.io) on it and enable various DNS level filter lists (and manual lists) on your NextDNS account. Each account can have multiple profiles too, which allows you to use different profiles on different devices. This will help block ads and trackers across all apps on your device, not just on the browser.

To augment it further, you could use Firefox Focus (which comes with a built-in content blocker).
It will work for a lot of people, and further the divide we have going on now :D.
Full-grain: leather as it came, cut; want good quality? - need good quality rawhide.

Top-grain: cut the leather, "homogenize it", seal it; much more reliable and uniform quality without that much dependence on the quality of rawhide.

It does make sense and in a way full-grain is a completely separate category (because of very little processing - "what rawhide you put in is what full-grain you get").
yup. we need to find a way to manage multiple owned borrows safely
It was literally radio! Record the audio on a tape recorder load into computer like a game.
1. How can you know for sure that the dice are not rigged?
I know you didn’t ask for this but Me and couple of my friends at big tech who have given and taken 500+ interviews, do mock interviews for each other and references.

For reference we do paid 45 mins mock interviews. In case you are interested, dm me and I can share more details.
Indonesian government will block all unregistered internet services soon
> One comment was on the general trend, and the other on the specific, one day prediction.

To the extent that the general trend exists, it's not just one day. To the extent that it is just one day, it can't be called a general trend. And switching from one to the other the moment someone criticises you reeks of moving goalposts.

> The old news article was quoting the Met Office. It was the Met that predicted 48C in the 90s.

Newspapers are creative fiction sometimes inspired by reality. Normally at this point I would link to the Gell-Mann amnesia effect, but in this case I'll quote from the same book you linked to ("Climates of the British Isles: Present, Past and Future", which included a copy of the front page of the Daily Mirror on page 264), but specifically the paragraph that references the exact image you linked to:

"""Newspaper accounts of interesting weather events
should always be taken with a large degree of caution
(see Figure 13.1) - even those penned by well-known
meteorological writers in the serious papers. This is
not their fault; it is because newspaper articles are
subject to the whim of a sub-editor. The newspaper
sub-editor is a strange breed with two goals. The
first is to force contributions to fit the space avail-
able, which may necessitate removing text, no matter
its importance, or creating new text without refer-
ence to the original author. The second is to make
these same contributions fit the style of the news
paper, which may involve extensive re-writing, again
without reference to the author. Furthermore, eye-
witness reports of unusual weather are notoriously
unreliable."""

In this case it's potentially even worse, as it was written by Alastair Campbell, who later worked for New Labour, criticising the leader of the Conservative Party.

But it's even worse than that. I couldn't read that text properly because it was too blurry so I looked for the original source, and the Met Office doesn't seem to be listed on that page. The headline "120 f is on the cards" actually says that Mrs Thatcher was at the National Centre for Atmospheric Research in Boulder Colorado, where climate change experts showed her a model that says if the world carries on increasing its rate of carbon dioxide production then "in extreme cases" it would reach 120… "The predictions were for the middle of the next century".
> Reducing the state just makes society more vulnerable to those who abuse the power that money has granted them.

I don't understand... how other people don't understand this point.

When the powerful gather enough power to change the rules in their favour the system breaks.
I thought the core Fuchsia leadership were Plan9 people, not Android refugees. Maybe things shuffled around?
$50 vs free

This is something I always noticed with the Mac app ecosystem. Even sometimes the most basic apps are paid. Windows and Linux has a much better free/FOSS and freeware app selection BY FAR.
I know somebody who used to think that whenever anybody searches something on Google, a human at the other end manually finds the information and sends it back.

And that Google is hiring all their employees to do this manual work.
There are plenty of studies in the West that aren't too positive about eating meat in general (in the quantities that are common).

I also don't recall hearing much about sex being bad from 'Western science'...
Yup, the post makes it very clear that running modern crypto with reasonable speed requires quite a beefy machine by early-1990s standards. 40 MHz clock speed is mentioned as a reasonable minimum.
> I mean, in my opinion the whole language Java sucks. Why anyone keep using it is beyond me.

That's a hip opinion to hold, I know, but difficult to back up with facts.

If you don't need|want C|Rust and want to write code that is extremely high performance in a language that has excellent tooling (debuggers, profilers, code analysis, etc) and top-shelf libraries and is broadly known and understood (so you can actually hire people), what are your options? Basically just one: Java.
Is it same/similar to Java Apple/Water Apple
Just how Stevie Wonder likes it.
You’re not “helping a neighbor” - this analogy is flawed. It’d be more correct to say “a third party with incentives that are entirely unrelated to the matter showed up at my home, placed a gun to my head and demanded I transfer a third of my checking account to him. He then took this money and used it to curry favor from another party by distributing it to his friends to do some repairs and improvements on the home of yet another person in the hopes that said person would support the same thing happening to the next guy.”
Thanks!

Definitely considering adding a server-mode with Postgres wire protocol compatibility.

It's tricky for the more dynamic/dataflow'y parts, as OctoSQL is able to give you a live updating output table (which Postgres wire protocol doesn't support), but I can go with a similar approach as Materialize[0] does for those use cases - creating a live-updating materialized view that you can query from.

That said, for now I'm still concentrating on the overall local usage experience and ergonomics, there's still much to improve there.

[0]: https://materialize.com
Deep learning was discovered decades before that (depending on when you graduated). It just wasn’t feasible with the hardware at time.
In addition to the tips mentioned, I find removing further extraneous elements from websites to be quite helpful.

Readability Mode (or a reader-mode tool such as Pocket, Instapaper, Wallabag, etc.) provides a simplified, standardised formatting of websites. This is almost always more readable than the standard mode.

The element remover feature of uBlock Origin, itself an ad-block extension, can be used to remove additional elements from Web pages. I use this to remove social media "link litter" icons, various registrations and sign-ins (newsletters, subscriptions, etc.), chumboxes in the rare instances uBlock doesn't already take care of those, "related items" blocks (especially those in-line with text), etc. I can literally feel the psychological weight lifting from my head as those elements disappear.

Stylus, a CSS style manager, can be used to target items that uBlock Origin has trouble with, or even entire classes or groups of annoyances (matched via patterns).

An interesting approach I've used is to desaturate colour on overly-bright websites. (The Register's pure-red logo bar is a case in point.) B&W really is far less distracting than colour, but even simply bleeding out much but not all of the colour helps tremendously.

A downside to all of this might be missing out on what everyone else is being bombarded with. I'll take that cost.
8: Using an SD card seems to completely throw the trustlessness regarding the hardware wallet out of the window? How do you know it does not write your seed phrase to the SD?

The "leak via grinding nonce" seems scary. That means signing a transaction is not a deterministic process? The same transaction can be signed in multiple ways?
The Masculine Physique (2017)
Do game stores even support providing downloads that fast?
Rust just doesn't let you write bugs so... ...
Just another analogy that perhaps may be helpful, for the spectrum:

Full-grain leather - Lumber

Top-grain leather - Lumber is cut, sanded and lacquer sealed

Genuine leather - MDF/HDF

Bonded leather - Lowest-quality fiberboard (i.e. mostly glue)
RAM disks were surprisingly common on the Amiga (and apparently the high end Ataris as well).
It's been hyped a lot then killed.

Another g project in the grave.
> I thought there are air gapped hardware wallets?

I had to Google that and they do indeed exist. It seems they use QR codes to send and receive data. It's probably a step up from USB since you can visually inspect how much data is transferred. But then again, the device could theoretically transmit your seed to your computer camera and you might not even notice[0]. Probably a step up from USB in terms of security but at the cost of some convenience.

> Without a keyboard, how do you enter your seed phrase?

They have a very rudimentary virtual keyboard which takes forever to type.

[0] As part of the QR code itself, as a separate QR code that flashes too quickly to be noticed to the naked eye, encoded as slight pixel brightness variations within the QR code itself, etc. It could even exfiltrate the seed one bit at a time which would make it pretty much impossible to detect (but would take ~256 transactions to complete).
Who's Who: The Dictionary of '-In My Backyard'
Originally, I was making an analogy to ordinary people, who become mundane professionals. People don't normally start learning to read, write, or program in undergraduate classes.

"the jump from “500hp sports car” to F1 is quite a lot bigger..." is what I was trying to say; someone imagining a career pipeline might point out that the power level is numerically closer, but in fact, that doesn't capture the proximity.
To me it's clear Google isn't interested in actual improvements in their OS and ecosystem unless it's a mediocre frontend to one of their online services or their A/B testing told them that a tweak would make users stay online for longer (even if the reason was a confusing UI). They hold the majority of the market so they have no incentive to change anything.

As far as I know there's still no default QR code scanner, leading to an overwhelming flood of almost identical ad-filled apps on the appstore while Microsoft, Blackberry and Apple integrated it into the system.
Text input and menu bars on Android are still terrible compared to what Windows Phone 8 & Blackberry OS delivered a decade ago. Instead of moving menus to the bottom of the screen for easier accessibility on ever-growing phones their major Material UI overhaul didn't do much other than add a floating button in a corner that, in my experience, still isn't perceived as button by many elderly users that come ask me how to start a new chat on WhatsApp.
> There are no breakaway republics?.

There are Russian backed terrorists that are temporarily occupying Ukrainian territory, these terrorists shot down a civilian airliner and killed hundreds.

> The majority of people in Crimea did not wish to rejoin Russia?

Theres no been no real referendums so we will never, but the partisan posters that keep appearing in Crimea would suggest that no the majority dont want to join Russia.

> All people on what is (formerly now) Ukraine territory were happy with the post coup Ukrainian government? Is that what you are saying?

All the people on occupied Ukrainian territory may not be happy with the government they may also not be happy be conscripted by the FSB backed terrorist occupiers either to fight against their brothers. But it doesn't matter because not everyone needs to support a government for it to be legitimate.

> These are all facts my friend. Not propaganda.

None of these are facts.

> I wish you would take a more rational and less emotional view of the situation but I can't say I'd do differently in your circumstance. I am concerned where the irrationality leads however. It has so far caused nothing but trouble for Ukraine. And the trouble is spreading.

The most rational view of this situation is to send the heaviest weapons possible to Ukraine, because the only rational way this ends is with a lot of dead Russian soldiers, and that needs to happen as soon as possible.
Regulator Looking into Allegations Cruise’s Robotaxis Weren’t Ready for Launch
I think we’re both on the same page. I’m all for breastfeeding and it’s what we’re currently doing and plan on continuing for atleast two years (along with other food of course).
The dub seems way better in that comparison. Generally I far prefer the dub tho for most anime. I’m not Japanese and so the sub always feels lifeless and serious. The dub is way more entertaining
But under this point of view there's no force at all. Gravity doesn't exert a force on you, the movement under gravity is purely inertial. I know this is bonkers.

Here's the video that made me finally understand it https://www.youtube.com/watch?v=wrwgIjBUYVc (https://www.youtube.com/watch?v=twPaOtfpneo is another good video from the same author)
> There's a lot of comments on this thread pointing out typical bandwidth usage of popular streaming services, games etc and claiming that there's no need for higher bandwidth connections.

You said it, not me. You said there's shills on this thread. That's the only possible motivation to argue there's no need for more bandwidth, there's another reason I came up with but I don't want it to be plagiarized, so I won't say it, they're stuck rehashing the "really sincere" focus group maneuver. It's also because actual bandwidth meaning through a wire has more rights and is better protected from tapping than wireless or radio or what is it now 5G? So the whole game is to funnel people to depending on this little walkie talkie that never turns off and which has no buttons, and is so sophisticated you can't fix it yourself, and has a baseband (that's a whole nother conspiracy theory but it's boring), and it gets GPS readings like every time you don't consent for it to, and that's why they're attacking the pipe, the wire, the cable, the fiber, they want everybody getting a cellular antenna for everything. The wire means having rights, photons it's like, everything goes. Surveillance in fact, they want us all to literally broadcast our eg 911 calls instead of calling them on a landline. They don't like landlines because they're well-litigated, have rights, martyrs died over getting their line tapped or being unable to call 911 just by pressing 911 (there's a case over that, they were meant to dial 9 first, 9911, and victims couldn't get through to emergency service and one died), 5G turns back the martyr clock forty years.

Yeah totally want to get all my needs met by a nagging machine.

Like these guys run their own ISP you think they can't log into a site and tell them both sides of the story? They've been doing it since the 1910's. Or shill robots by this point. I wonder if it counts as public speaking if you're only speaking to robots. Just trying to pass the Cussen Test here. https://news.ycombinator.com/item?id=31111806

You said it, not me.
In 2019 my employer posted the necessary H1B notices, and the new grad jobs were 115-130k. This was cash salary, and I believe the stock grants were minimal/nonexistent at that level. This was not a faang-level public company, nor a high-prestige/unicorn startup, in Seattle. 150k seems to me to be a pretty reasonable ballpark number for a software developer working in one of the cities with a high cost of living with a well-established ecosystem of companies competing for developers.
Courts routinely assess damages things for things like what profits the harmed party would have been made but for the wrongdoing which require projections of counterfactuals. By comparison, “$44 billion less however much the sum of all Twitter stock was worth at some designated time” is...not particularly difficult.
Wow that explains the öööööööö I remember seeing back in the day when I first ever downloaded a hex editor and opened a drive I had raw.
Why? What are you trying to achieve with that? Why does it have to be SQL?
I'm Muslim with a goatee and an interviewer actually told me that "Would you mind shaving? Korean companies prefer clean shaven." One Dutch company also gave me a rant on how they were more progressive and tolerant in the Netherlands.

I don't know if it's related, but at least they brought it up. I suspect most don't and only realize it after the technical interview. It's also why I appreciate the pointless "culture screen" that happens before the 1 hour codility/leetcode, which happens before the actual technical interview. Let them have these multiple layers so at least I get feedback on what layer I'm stumbling on.
Have you tried UltraEdit? I used it 10 years ago, so I don't know how well it has aged, but I preferred it over Notepad++ at the time.

The reason why I don't use it now is because IntelliJ and vscode covers most of my need, and it's hard to justify the extra expense at my work place. I sometimes miss how well UltraEdit worked in multi-column mode and hex edit mode