skysight-inc/HackerNews huggingface dataset:
"Its pretty frustrating that there's a well known technical solution that prevents this type of attack from being feasible and companies like twilio simply have not prioritized it yet."

I understand your frustration but you are missing the point.

2FA with a valid (non-VOIP) SIM card is not for your security. They tell you it is, and they dress up the process as if it is, but they are lying to you.

Twilio, et. al, have a brutal, unrelenting scam/spam problem and they have no solution for it. They have nothing. If they had a solution they would have deployed it long ago.

Instead, they do what they can: throw sand in the gears and slow down the bad actors with ridiculous, obviously absurd (put in any phone number we have never seen before to prove that it's you) mechanisms and hope the real customer base doesn't balk.
Valid points, the request limit in particular. On the other hand, there is some smart resource management in the user agent for EventSource, IIRC, which I'm not sure exists for websockets. I feel HTTP/2 as a requirement is acceptable but that obviously depends on the use case.

That said, I still feel SSE is both underutilized and sadly unknown.
I'm reading that as a "stop-the-bleeding" number; presumably there is someone out there with a 44TB repository and they want to impose initial quotas that don't actually impact anyone immediately.

I guess someone has been backing up their movie collections to Gitlab or something.
I was just wondering same, why not now run them through the major defi products? See the market reaction for fun.
Cash has to be physically sent somewhere else. There are already restrictions on large amounts of cash (> $10000) where large transactions must be reported to the government, and it must be declared entering or exiting the country. This is why smuggling cash out of the USA from drug proceeds is a very challenging issue for cartels.

But crypto cannot be physically inspected at international borders. So for the government, just like wire transfers, they want to know the source and recipient of such funds. If there were a service where you could bring a large amount of cash, obfuscate the origin, then wire it to a bunch of bank accounts under criminal control, that would be the definition of money laundering and also cracked down on.

In this case if Coinbase took some BTC that went through Tornado it would be equivalent to taking a wire transfer from a bank known to be laundering money.
What is the model being referenced where someone in prison is automatically incompetent to vote? Especially given the human legacy of the war on drugs in there for example, this seems like a really good example of letting one policy color our views of an unrelated one.

You think we're going to formalize our class system with genetics and biology but then somehow ignore that in all the realms where it's not relevant? Who decides when it is relevant.
It's yesterday in my comment history, you shouldn't have any trouble finding it. I prefer people interpret it for themselves as I said my piece in it.
>they can't prove they weren't the ones who stole it.

Proving your innocence is not how the criminal justice system works in the US. If you have stolen goods, it's on the government to prove that

A) they are stolen

B) (and to criminally convict you) that you knew they were stolen
WazirX didn’t pass ownership, heated debates have been on for 2 years: Binance
It’s all fun and games until you can’t transit the airspace or soil of the US or one of their allies. Sanctions need not have immediate effect, only eventual consistency.

https://xkcd.com/538/
> can't those addresses be cycled out of commission and a new set be put in place?

That gets harder when the employees start getting arrested, the bank accounts Tornado uses to pay them start getting frozen, domains seized, et cetera, at Tornado and at every identified wallet that transacts with it.
It has become illegal to make and sell cars with the electronics feature set of 1980.

E.g. every new car now will have to have reversing camera, event data recorder, drowsiness and distraction detection, lane-keeping assist and advanced emergency braking.

I'm not sure if it's practical to do that with "no onboard computers other than simple microcontrollers" - of course there are some microcontrollers that rival the computers I grew up with, but the complexity of the involved software is inherent in the required functionality.

And since you have to pack the car with all these sensors, cameras and compute power anyway for safety reasons, all the privacy-invasive features don't require much if any extra hardware cost.
How about we stop pushing one's own way of working and way of thinking as the absolute truth? If stand-ups were truly the panacea you claim they are, it would be beyond trivial to find evidence in the decades they have been used. Yet that hasn't been the case, and debates devolve into clashing rationalities at best, fanatics ignoring or fighting each other at worst.

>You should be demanding a daily standup

The only things I demand from people in a professional setting are progress and results. How they reach is none of my concern until it is evident intervention is required. A daily standup does not guarantee an improvement in either of the two.
By taking a driving test one time in their life?

Also if you fly like a maniac you’ll get your license taken away, which is very much not the case for driving.
Does the storage measurement work now? The container registry and build artifacts used to not be measured
Kudos to them for showing the kind of messages that caught their own employees out - though to me they seem jarring and unsophisticated. So what other texts must Twilio send their own staff that make these ones feel legit? And what systems do they have online allowing for stolen employee credentials to be tested and used?
How much did data hoarders use Gitlab for their backups?
Most people understand that movies aren't real.
Coinbase just hands the coins over to the Treasury and problem solved.
Seems like there was a lot of valid criticism on this site. Not suprising in the least they wanted it buried. Especially the whole thing about the debian leader promoting his girlfriend with no technical skills to Developer status in 2018. Having read the archive of the page was enough to make me quit using debian.
It means that if you're in US and publicly share your crypto address for vanity like NFT or something anyone can easily make you criminal just by sending you some "bad" coins. Good luck proving to U.S. Treasury it wasn't you.

In real world it's most likely gonna be used mostly against big transactions and to go after crypto exchanges.
Whatever your stance on crypto, privacy should be a fundamental right.

Remember, the most privacy-preserving way of trade is dealing with cash, yet no one sees it as "criminal."
IIUC, Tornado Cash is open source.

You don't need a lot of resources to run your own.
The difference being that the value Microsoft gets from GitHub isn't its revenue, it's its influence. Whereas Gitlab is just another corporate software suite.
While it's implied, another added benefit would be that cars in warm climates would no longer have to blast their A/C after a day of work after the sun has incinerated its interior to 120°.
The McPlant sold in the UK is fantastic:

https://www.mcdonalds.com/gb/en-gb/product/vegan-mcplant.htm...

It uses a Beyond Meat patty, and a bespoke non-dairy cheese slice.

Unlike the trial in the US, this product is available in every UK store and is 100% Vegan.

The UK has long had a significant Vegetarian market, and the Vegan market has grown significantly. This isn't even the first Vegan product McDonald's UK has introduced.
This is covered in the new The Sandman series which was just released (and I assume in the graphic novel). It starts off seeming pretty good, but there are a few ups and downs...
Looks like a joke to me.
I once inherited a Verilog-A interpreter made by some guys at Motorola. My boss said the code was awful, I found it really nice, structured and well commented.

I ripped it off and replaced with a compiler with waay better performance. It was appreciated but I think my code, while more effective wasn't as nice to look at.
How so?

We already know that the US has technology to track mixed transactions.
I think the most common usage in personal home buying is to get from closing of your new home to the closing of your existing home.

Usually you want to close on your purchase of a new home a bit earlier then you close on the sale your existing home so that you (1) Have a place to live (2) can do a single move instead of a double move.

The down side is that you can't transfer the equity of your current home to your new home. Bridge loans get you over this gap with small risk so the price isn't to much. You basically get a separate loan for your current house's equity that is paid off at closing.

The issue would be if the sale of you current home fell through for some reason, hence the issues in 2008 when there were so many unsold homes on the market.
Clarification - a user can run Tabnine on their laptop only OR as a part of Tabnine Enterprise we can run the large cloud models in your VPC (on GPU's) for your entire team of developers. Your code is your code and you can run it anywhere.
A few manufacturers have tried using the DMCA in an attempt to quash non OEM parts for repairs and modifications, with John Deere being something of a poster child. I believe it's been at least partially quashed for the consumer market, but we'll see how long that lasts.
> I'm not sure how your aquarium lights are configured ... but honestly 5-7 years is already quite impressive.

I go through about 1 power brick a year. I got a wire wet in the original one, and I can't seem to find ones that last long. They always run hot.

I just changed a relay yesterday. My smart switch doesn't output clean voltage or do clean off; so I have it drive a 120VAC relay. Could have been my wiring, though. It's an industrial relay, so I don't see why it'd fail after ~1500 cycles.
Words in quotes aren't suggestions. They tell us (I work for Google Search) to find only what's in the quotes. That's how they've worked for years. We haven't been "only obeying them" if we agree. I'm not even sure what that's supposed to mean. We obey them as outlined in that post. The problem is that people sometimes can't find the quoted material on the page -- that we definitely did see and definitely did restrict to -- so we made it clearer in snippets to help them understand what we saw, where we saw it and hopefully guide them to the right locations in the doc.
How is it fraudulent - they dont claim to be selling L5 FSD?
I just finished a 10 year stint at Google in December.

I would characterize the amount of Rust being done at Google as ... insignifant.

That could change, but apart from Fuchsia and maybe some kernel driver work I struggle to picture where it would fit in the language pantheon there.
I just don’t see how the government can go about proving you received the money because you sent to it a mixer vs receiving it from a seemingly legal transaction with someone else who mixed it. Especially with defi exchanges that I doubt will check if coins have been mixed.
This applies to almost any programming language - things done "the standard way" will survive decently well (or have obvious migration paths) - things done "your own way" will be more fragile.

Of course, languages vary on how much they have a "standard way" of doing things.
There's a reason that you can't walk into Goldman Sachs and open a trading account with a box full of cash. They can't tell where it came from. In certain respects, cash is sanctioned.
To me this feels similar to how most paper cash has traces of cocaine.[1] LEO will seize the cash, but if they re-enter it into circulation the cash becomes legitimate again. You're not liable if you spend the same contaminated dollar bill that a drug dealer once used, but you would be liable if you did business with that drug dealer.

[1]: https://en.wikipedia.org/wiki/Contaminated_currency
> As a result of today’s action, all property and interests in property of the entity above, Tornado Cash, that is in the United States or in the possession or control of U.S. persons is blocked and must be reported to OFAC.

> In addition, any entities that are owned, directly or indirectly, 50 percent or more by one or more blocked persons are also blocked.

> All transactions by U.S. persons or within (or transiting) the United States that involve any property or interests in property of designated or otherwise blocked persons are prohibited unless authorized by a general or specific license issued by OFAC, or exempt.

> These prohibitions include the making of any contribution or provision of funds, goods, or services by, to, or for the benefit of any blocked person and the receipt of any contribution or provision of funds, goods, or services from any such person.

(Formatting added because I’m not a moron)

Seems like you can continue using it if you’re not in the US, not transacting with someone that is and not with anyone on their sanctions list?

Assuming the operators aren’t in USA and aren’t running transactions there. If this is a decentralized app, how is a miner supposed to avoid crunching these processing cycles?

Not a lawyer
I think it stems from laziness. It's odd though because the things these people put themselves through (Amazon package delivery, Door dash, Uber) is far from easy and makes them look and feel really productive. The good jobs are going to require mental ambition to get training or even find a job that isn't pushed in their face with VC money.

Bogged down all day and can't make ends meet? New plan, you have nothing to lose.
While I consider this a very elegant solution, I find it hard to justify paying $8/month for a cellphone plan because others don't do their homework.
> don't need a lot of resources to run your own

This is true of all money laundering. Any business that takes cash has everything it needs to cook the books to show phantom income.
It sounds crazy but it's been relayed by Ukrinform and the official Energoatom channels.

https://www.ukrinform.net/rubric-ato/3546050-russian-forces-...

https://t.me/energoatom_ua/8729?fbclid=IwAR3lXcfwiQHqGLpOUmC...
"First they ignore you, then they laugh at you, then they fight you, then you win."
-- misattributed to Ghandi
Generally when this happens, I assume services allowed/permitted by the fed are backdoored to the fed's advantage. Monero could be an excellent example.

It's the tech they they haven't backdoored that poses a threat to their surveillance/control model. Tech like Tornado.
> a more utopian future

Based on what, on the realistic intervention of which actors?

And are you sure all the ideals in your set can be considered objective, naturally sharable, as opposed to ideological and partial?
Yes-- working right now on a tool that uses Rust compiler internals. A previous contributor made a module with a clean interface to almost all of the compiler analyses I needed and without much compiler cruft. Coming across it was a borderline religious experience.
It's never been sanctioned but it is tracked. Every single time cash (the physical printed bills) flows through a federal reserve branch or even some mainline banks the serial is noted and reported to a database. They do this in case money known to be tainted (stolen, counterfeit etc.) shows up. So if a bill with a flagged serial number comes up that info is forwarded to the FBI/Secret service. That doesn't mean they'll come knocking on your door if you deposit a single tainted note, it just tells them that the note somehow made it to your locality. But if you deposited a ton of them all at once? Yes you'd probably get a visit and some very pointed questions on where you got them and how. This has happened a few times when people found cash from robberies (the D.B cooper case being one). https://en.wikipedia.org/wiki/D._B._Cooper#Recovered_ransom_...

Most people have probably deposited a counterfeit bill and never known it too. Again singular bills are not a problem. They just tell the secret service to keep an eye on that locality and potentially contact businesses that saw the counterfeits come in assuming those businesses didn't flag it themselves.
Is the domain herokuapp.com commonly use for botnets/phishing etc? None of my work networks allow it.
Ah yes the OG method of verification
> The way you juxtaposed this is weird. You're implying that if there isn't some pain-free way for consumers to quit fossil fuels then they're not responsible and it's all on governments/corporations

That's my point. Alternatives exists already but the governments are not enticing people to switch to EV or alternative fuel sources such as in my comment used frying oil.

Instead they tax the alternative as if it was regular oil coming from the ground.

You can't say that people need to switch/change habits if the alternative is no different than what you currently have.

> That makes sense considering that the fuel taxes are for funding roads, not as some sort of carbon sin tax.

That is not factually correct. The budget for road maintenance is not derived from these taxes. These taxes are simply used to plug the various gaps in the governments coffers.

Do some of these taxes end up being used for road maintenance? Certainly so but their primary purpose is simply to generate revenue for the governments.

See the articles seen on HN regarding the UK grappling with the fact that each year the fuel tax brings in around 30 Billion pounds that will need to be replaced once the transition to EV has been completed.

its the same in France FYI.
This is all true. If this was the only factor though, there wouldn’t be any social mobility at all, certainly not in any downwards direction but also not upwards. The richest 50 people in the world would have the top 100-200 children in the world in terms of opportunities and the billionaires list wouldn’t have a single surname that wasn’t represented in the 19th century elite. This is clearly not the case, though.

The net result is that the process of getting rich is often a multigenerational effort where each generation does everything they can to give their own children more opportunities than they ever had. And if you talk to the people who do that, they’re often motivated by the experience of being poor and hungry and deprived and being willing to do whatever it takes to give their own kids a better chance. Conversely, if you’re born rich, sometimes you’re complacent and entitled and probably spoiled and lazy. There’s a proverb about how many generations it takes to go from rags to riches and back to rags.
But GitHub's TOS can only protect them from GitHub repos.

If it has impact on CoPilot or not, is not clear.
You would routinely see IEC sockets in use in Europe in commercial kitchens, factories, anything outdoors like a music festival etc. Partly it's for higher power appliances (including 3 phase power), but also the waterproofing.

They're also the socket found in datacentres (in Europe) to connect a UPS or PDU.

Home users see them at campsites, marinas, and for charging electric cars without a special car charger.

https://en.wikipedia.org/wiki/IEC_60309
> if you’re not in the US, not transacting with someone that is and not with anyone on their sanctions list?

And not in a country that extradites to the U.S., or every planning on going through one. Or using U.S. dollars. Or the currencies of its allies.

This is OFAC. Violating its sanctions is akin to doing business with North Korea or Iran. People do it. But you're going to have a different lifestyle.
5 gigs? what is this, repo hosting for ants?
They can require a phone number for signup while still supporting WebAuthn.
If even a small fraction of the people saying they want this actually put their money where your mouth was there would be a decent conversion industry by now (there is, but it's so small it's basically nonexistent and it's all one off builds).

Also, rose colored glasses are a thing. When was the last time you (the average dolt reading this, not you personally) rode in a vehicle from the 80s let alone slogged out a commute in one? The venn diagram of "people for whom it is fashionable to want an 80s Toyota pickup" and "people who would commute in any 80s vehicle" is two circles. Sure you can "fix" the driving experience by upgrading stuff but unless you produce them at scale the cost of doing each of these upgrades will be much greater per unit and the total price will quickly eclipse that of just buying new vehicles.
That's how it works. That's how it has worked for years, except you don't need the + symbol -- that tells us nothing.

["dog"] or anything in quotes means exact match, and that's what we do.

[dog] or anything without an operator means we'll generally try to exact match but also might do stemming or synonym or other matching, if it seems helpful.
I wonder how often SMS 2FA serves as the entry point for more business. Like, devs choosing Twilio to try it out for low volume work before expanding into large campaigns.
I might be wrong about that but I'm pretty sure that I saw that limit (100 MB) when I was reading about GitLab plans in the past. They just didn't enforce it for some reason.

IMO GitLab does the wrong thing. They should have enforced those limits from the beginning. And if they didn't, they should've eaten those expenses or at least grandfathered old repos.
Coinbase could do it, but if someone sent these "bad" coins to your personal address? Let's say if you're major NFT owner or if you're collecting money for your non-profit via crypto.

What I saying is that just for $10,000-100,000 you can literally taint 90% of crypto ecosystem.
The Treasury should setup several mixer honeypot services to find out who’s tumbling dirty money. This would be far more effective and would turn people off using mixers (at least for a while) and would uncover a vast criminal network.
I've been vegan for a couple of decades now and during that period I've had that time to observe meat eating people get all upset about veganism at various dinner parties during even though I don't advertise it or even talk about it.

What I've concluded is there's just NO WAY the world is going to do the right thing until the entire Amazon rainforest (and forests in general) have been converted to food production for food animals, dusty fattening lots for slaughter stretch to the horizon and all fresh water sources are drained.

So sensitive is the subject of what one consumes!

Maybe once climate disasters become more common and the price of meat becomes far too expensive for value menus will we start to change course. But I doubt it, we'll probably build meat factories in space before that.

In the meantime, those precious ag jobs are probably more threatened by automation than impossible burgers.
... a good balance of soluble and insoluble fiber and not too much of either at any one time
Yes, I work on an 11 year old Ruby on Rails codebase, and except for a few sections that are a little overengineered and crufty (Asset compilation..... enough said), the bulk of the codebase and the entirety of the "business logic" is really easy to understand and navigate. About the only time new engineers ever have problems finding something is when it's defined in a "has_" macro with dynamic interpolation, but those cases are pretty rare, and you generally learn to recognize them over time. And certainly it makes using and sharing the code much easier when those larger pieces of repetition are extracted (for example, we have an "acts_as_markdown :column_name" macro that defines e.g. column_name_as_html and column_name_as_plain_text methods). And the validation/callback structure makes it really easy to add new features without having to worry about breaking old ones, and the testing experience with rspec is second-to-none.
MbedOS (https://github.com/ARMmbed/mbed-os), the RTOS from ARM, has a very large C++ API (leveraging C/C++ SDKs from hardware vendors).