skysight-inc/HackerNews huggingface dataset:
SMS- or TOTP-based 2FA doesn't save you here. The phishing site is designed to look like the real login form. The victim enters their username and password, and the phishing site forwards the username and password to the real site's login form, which triggers the "real" 2FA process. Victim enters a TOTP code (or SMS code) into the fake site, and boom, the attackers now have a valid username, password, and 2FA code, as long as they use it quickly enough. Assuming they do, then they have a valid session cookie that they can use wherever they like, which can often be refreshed before expiration without re-authing.

The only 2FA that protects against this is a hardware token, like a Yubikey, if used in U2F/FIDO2 mode. Twilio does use Yubikeys for some roles and access types, but not all, and presumably there was enough sensitive data that was only gated by TOTP 2FA.

I think in this day and age, if I were running a company infosec department, I would mandate U2F/FIDO2 for access to every system, and try to structure things so employees don't need to access company systems on their mobile device. (Yes, I know it's possible to do hardware 2FA on mobile, but I feel like it'd create a large IT support burden since it's not always so straightforward.) And if there are company services that aren't suitable for hardware 2FA, they need to be rare exceptions that are granted, and need to be firewalled off from the rest of the company.
> Add some, say, Chargepoint stations, set the price and off you go.

Ugh. Please don't.

You pay more for the charger and the ongoing maintenance fees than you'd pay for electricity in an awful lot of cases with a "free, dumb charger."

Chargepoint makes really nice stuff. Their hardware side is great, and the units are very well tested for long term operation.

It's just their entire business model that I hate. Their model is, "We should be able to intermediate in, and get a cut of, all EV charging, everywhere except home. And ideally home if it's an apartment complex." And this is simply not needed in the bulk of cases.

Apartments should either just wire a 240V EVSE circuit to apartments for charging ("Parking spot 101 goes to apartment 101, parking spot 102 goes to apartment 102, etc"), or just have some "EV charging" spots that are $20/mo or $40/mo or something. It's cheaper to do this than to try and monitor every kWh that goes into the EVs, and if the net is close enough, call it good.

I say this having tried the cost recovery thing on a charger, and discovering that, with infrequent use, the $5/mo management fees to then recover costs were more expensive than literally just paying for the power.

If a 240V/16A EVSE runs flat out for 30 days, at our local $0.10/kWh costs, that's $275/mo in power... but nobody will actually do that.
I have a nice Husqvarna brush cutter where the motor has a failed bearing and they stopped making that model. One of my backburner projects is to electrify it. Current candidate is a small router motor: probably has enough power and it can meet the duty cycle requirements. Like I said in my other post, the biggest issue is the mechanical coupling from motor to device: they're all non-standard.
It has little or nothing to do with age, "selling out" begins as soon as culture is packaged as consumable goods. You write a book, it sells well, you're now wealthy and invested in maintaining the system you railed against a minute ago. Meanwhile, others will want to be like you, so will start packaging and selling their output; and consumers will continue to pay for the feeling of belonging to your cultural sphere. Same for music and songs, video and film, and so on.

Very few people really ever opt out of these mechanisms. At a macro level, consumer society will automatically fagocitate any cultural output - because to experience culture is to consume it, and guess what the system is specialised in? Producing, selling, and refining at infinitum, anything that can be consumed.

Everything else is just the natural outcome of this phenomenon.
Any serious vulnerability in NGINX will be big news since it is so widespread. CVE database shows some entries by searching for "nginx" but I looked at all 2022 entries and the only ones affecting NGINX itself are in NJX plugin so actually not affecting NGINX core functionality.

https://nginx.org/en/security_advisories.html shows one "medium severity" vulnerability in the last 4 years.
Pyblosxom itself is no longer in active development. Most recent tweet in 2018.
https://twitter.com/PyBlosxom
Debian Day 2022 – call for celebration
> For it to actually reduce emissions (the goal), the tax would probably need to be much, much higher to the point where you just don't go to grandma's funeral.

Nah, you just need enough pressure to move people onto electric cars.

A plane might be one of the last holdouts on fossil fuels, but even then renewable fuel shouldn't be that expensive in bulk.
>> People keep trying to make simplified programming environments for significantly less-trained people and they keep failing. Is mixing in an AI actually going to make it easier to get a result that has no crippling bugs?

Yeah. I've even worked in one of those environments for a year (not my choice).

I'm of the opinion those kind of environments won't ever work. They'll either be:

1. Extremely cookie-cutter (e.g. make a clone of our "standard app" with a insignificant little tweaks).

2. Require software engineers to get anything useful out of them, and those engineers will feel like they're working with one hand tied behind their backs (or banging their heads against a wall).

IMHO, one of the main skills of a software engineer is translating user requirements into technical requirements that work and understanding when they work. I don't think skill is automatable without a fairy-tale AGI.

> No, but when have crippling bugs ever stopped software businesses from shipping it anyway?

A lot? Depends on your definition of "crippling." A software engineer will gripe and say, "I don't want to use this;" something that's awkward but the people who use it can still get their work done; or the system literally incapable of performing its function?
If you want a general purpose electric motor, just head on over to your local farm supply store. Lots of them there.
I think you missed the point.

The intro is what in TV and other forms of media is called a "framing device". Here it's used as a story to provide motivation as to why someone could potentially need to build their own software stack. It's not meant to be taken literally.
What you mention are all policy/regulatory differences, which can be made to apply to debit cards if there's will to do so. My point is that the credit card concept now survives because there's no will to kill it off since it's a convenient way to siphon money from the pool/less-financially-savvy to the well off.
Funny, the game I replayed the most was 'Hack', a Rogue-like.

I can't quite put my finger on why it was so addictive, but I think it was the randomness - discovering which potions were which, which scrolls were which, and of course hoping for a merchant with a massive shop full of goods to pillage kept me playing.

The difficulty was quite high too, forcing quite a few replays before getting that Amulet of Yendor
Right, and also note that plenty of "nefarious" software can be used for legitimate things.

Just think of malware analysis or feeding malware to the machine-learning monster.

In the end, it's just information and can be interpreted in a myriad of ways and for all kinds of purposes, including the good ol' simple satisfaction of intellectual curiosity. But many people in this thread seem to have a zero bit mind. By that I mean that they have a single bit dichotomy good(allow)/bad(ban) world that invariably has the value "bad(ban)".
I absolutely love BMD for putting these features/capabilities into their cameras just knowing that people will do things precisely like this. They are the company that I feel like positively disrupted their industry without breaking laws and what not like others have done.
In 2022, I'm unaware of an actual situation where a bank account must be shared with anyone else. If someone wants the content of your bank account they need to go through the courts.
> Apple has never said they are anti-ad, they are anti-tracking and selling user's info which almost all these ad networks do (directly or indirectly).

Seems pretty evident in the wording on their dialog box: your data won’t go to any third parties. The ones yelling don’t (can’t) say that.
Wouldn't millions of unemployed developers start creating software that would compete/overthrow existing software companies?
Why Does the Whitney Biennial Suck So Much?
S3 is dirt cheap. Intermediate level difficulty to set up. But a valuable skill.
I was excited to learn PO box numbers are unique in my city and have their own ZIP code so theoretically mail could reach me with an address of only "37939-0002" (ZIP only) or "PO Box 2, Knoxville" (no ZIP) if someone wants to test it out. I'll send something fun in reply.
I'd be really interested to see some research into integrating spaced repetition into our actual education system. Almost everything I see about it is adults learning, I wonder how much we could speed up primary school education considering so much of the "base" stuff needed to advance is rote memorization anyway

seems like countries should be investing money in this, potentially trillions in unlocked economic potential by improving and speeding up education. I think I read something like 20-30% of medical school students use SRS, yet only a fraction of the general population uses it. Insane to me that we have a tool like this and almost nothing is being done to improve adoption.
988 is the suicide hotline..
I think it's a good tool for quick access to many useful tools in a toolkit. Yes, you need to know how to apply the tools, but quickly being able to manipulate a problem into several other forms makes lots of problems much easier.
i don't think that's quite fair. for example take stallman's comment, linked from your wikipedia reference above,

the obvious meaning for the expression “open source software” is “You can look at the source code.” This is a much weaker criterion than free software; it includes free software, but also some proprietary programs, including Xv, and Qt under its original license (before the QPL).

That obvious meaning for “open source” is not the meaning that its advocates intend. The result is that most people misunderstand what those advocates are advocating. Here is how writer Neal Stephenson defined “open source”:

Linux is “open source” software meaning, simply, that anyone can get copies of its source code files."

i wouldn't call Stephenson's confusion here a rare occurrence; "Source available" hasn't really caught on, but instead open source remains ambiguous
I disagree. As someone with a history of blowing past my debit card allotted overdraft amount (though more recently am much better), I think my history with a debit card would show that I was young and foolish, but I have learned better and I wouldn't be a problem now. But I'm only spit balling, you may have more insight to shoot this down.
Because if you get scammed its easier dealing with a credit card company than your bank
See my other reply

https://news.ycombinator.com/item?id=32391433
The benefit is mostly the technologies developed. This is a demonstration of a fine control over thrust direction - in time and position, ability to work with crude control with thrust size, flexibility of the rocket, variability of motor thrust - at least. Given these achievements, one can put more ambitious goals ahead, like controlled multistage flight, and transfer all these results into bigger - likely liquid engine based - rockets.

Kudos to Joe, hard goal, impressive results, hopes for getting closer to the stars.
Flutter's documentation is fantastic. A lot of effort went into it, and it shows.
>And yeah, you probably can't build them fast enough, or the grid capacity will not be sufficient, but won't people then just move to places where they can? Or switch to alternative modes of transportation?

This sounds fine to you? Not having enough grid capacity means much higher prices and more frequent blackouts. Not having enough charging infrastructure means many people may be unable to fuel their vehicles. "Sorry, but this city is shit now, I guess you're going to have to move to Texas for their great electric grid" doesn't seem like a position we should be aiming to put many people in.
What are you talking about my dude, every transaction you do with cash is inherently "private". Nobody is tracking your identity to that transaction.

This is just a digital form of that.
IMO, the best solution for apartment complexes is to run bog standard 120V/15A to every stall. That's a lot easier to manage than trying to share a limited number of 240V L2 chargers.

And 120V is enough for everybody who averages less than 100 miles per day. Everybody does more than 100 miles on some days, but only when you have multiple consecutive multi-hundred mile days would you need more than 120V overnight. For the rare occasions that happens, you can use a commercial fast charger.

120V at every stall would be much nicer than a limited number of 240V L2 chargers. You just plug in when you park and forget about it. With a shared charger you have to wait until the charger is free, and you have to move off the charger after you're charged to be polite.
>You can believe money laundering should be legal, or that there are legitimate uses for the software, but the fact is that the software appears to be against US law, so nobody should be surprised that the authors got sanctioned.

I'm not sure if you understood my comment. I don't care about the authors and whether or not they were sanctioned. My point was about the code itself. If we started to force GH and the like to remove any code that has been used in an illegal activity, there's going to be very little code left on GH.
> And can someone explain why credit scores aren't just visible in every bank's (web) app?

my 90-years-old credit union shows FICO score in both the web and mobile app (mobile app even plots this over time). actual scores too, from one of the big three: not some second-order estimate.

not namedropping because discussion of this article in particular seems at risk of devolving into promo/self-interested discussion. but if this is a thing you care about when choosing a bank it absolutely is possible to find with a bit of searching.

as for regulations, and why aren’t banks required to display FICO scores prominently: as the article discusses, the link between FICO score and borrowing rates/eligibility isn’t always direct (an 850 FICO doesn’t magically open the door for a $1M home, business, or personal loan: you still need proof of income, etc). i don’t know that FICO is actually encoded into law anywhere: more relevant would be requiring lenders to justify why they do/don’t approve loans, and at what rates, IMO. many do this already to some degree, but i’m not sure to what extent that’s regulated.
> I can think of several ways the language could've been designed to make it easier to write typed query builders.

Would you like to share them? Have you tried submitting your suggestions to the GraphQL core team?
I'd be interested in others take. However, I have to believe there are really only a few things that matter in deals like this.

1. Existing user base

2. Subscription price

3. Churn rate

4. Growth rate

Maybe the content ranks somewhere in there, but I doubt it. Primarily, because objectively you should be able to judge the content based on the metrics above.
Excellent article. It's interesting seeing that it draws somewhat different conclusions from the video on the subject of secrecy - the video states that the bombsight continued to be treated as top secret, even years after the Allies knew it had been leaked to the Nazis.
> It's pretty tricky to do that in an untyped language.

If you mean dynamically typed, then Elixir has it:

https://elixir-lang.org/getting-started/case-cond-and-if.htm...
I heard security people sometimes use it as host, can someone in the industry confirm?
Granted such people exist but twitter i.e. the board acting in shareholders interest, in fact wants the deal to go through, not to get the $1B thing.
My point is at the end of the post. also why do you keep deleting your comments? i had such a good response to your periodic table nonsense lol.
Everything communicated by a brand or their ceo is marketing.
I’m not so sure about this article. I’ve crafted my daily computing into various buckets not only to stay organized, but to compartment different activities from each other. For example I have a browser profile for NSFW activity that I don’t want anywhere near my professional work related activity. Likewise I have a whole browser profile dedicated to casual surfing of the web with browsing history turned off and all the browsing artifacts get erased upon closing the browser. This isolates sessions so that cookies etc can’t build massive profiles of me. Likewise I have a browser profile where I need to be logged into various services (Amazon, Netflix, Spotify etc) which keeps cookies, and no other browsing is done apart from using those specific sites.

If I need to be productive, again, I context switch into a dedicated workstation that has all my devtools ready, alongside specially configured browsers that I use to test the sites I’m building. These browsers again are separated and highly context specific.

Welcome to modern computing! Context switching is on the menu :)
Therefore, developing and customizing a proper framework for security and privacy starts by accurately assessing statutory, regulatory, and contractual obligations, and the organization's appetite for risks in balance with the organization's mission and vision, before developing the policies and and specific practices that organizational members should be doing.

To use a Go (the game, not the language) metaphor, skilled players always assess the whole board rather than automatically make a local move in response to a local threat. What's right for one organization is not going to be right for another. Asking the caller to turn sideways to protect against deepfakes should be considered within the organization's own framework, along with the various risks involved with deepfakes, and many other risks aside from deep fake video calls.
Somewhat true except for the fact that education isn't fixed. It's a variable that changes.

You might start with little wealth and accumulate education on your journey. Therefore in the early years when you lose wealth it's difficult to accumulate more, but over time it can become easier as you are more educated and experienced.

Having little wealth when young also allows you to live on very little - when combined with an education you can use this very nicely to say bootstrap a product.
> "This may seem far off..."

After experimenting with GitHub Co-Pilot I can see that day being 50% - perhaps even just 25% - as far as it used to feel.
> and you permanently damage your battery by charging the battery this quickly.

This issue is improving with every new EV generation. And it's not even always true. On my Leaf, with a passively cooled battery, I need to be careful with temperatures. High temps will cause damage. I wouldn't quick charge every day. An occasional road trip is fine.

Newest EVs? Even a 250KW charger won't make a lick of a difference for a battery that can accept 4x that amount of power.

By the time EVs are widespread I don't expect to see many ID.4 in the streets.
Money laundering is the act of hiding the source of funds from *illegal activity*, all my funds that I want to privately transact with are legitimately earned.
How to Design a Referral Program
Like most 10 year or 20 year old features that one would think are commonsense, you won't find them in all banks.
What is the effect of such a repudiation? Does the person still end up with the seat but outside of the party?
> But they'll quickly become expected and necessary and we'll have the usual race to the bottom. Everyone will have some image because it boosts engagement by 8%... wait now 6%... oops it's too common, we're awash in crappy irrelevant images just added for the boost, which is down to 2%... oh crap, now the absence of an image is a good signal for content quality, we're at -1%!

Too late. It already started happening a while ago. Tons of blogs with annoying animated gifs and now browsers have the ability to block them.
So a 6502(C)?
> Do you think that Vitalik openly launders money?

Who can tell? Isn't that the point of Tornado Cash?
Hadn't heard of Varnish, but yeah, it looks like a good solution the OP could probably layer over their current setup without too much trouble
If that tool doesn't exist, how will you respond when the government tells you to prove the source of funds you got from Tornado Cash?
It's got issues. Like the use of the word "develop" for the clear and short sentence strategies on this page:

https://developers.google.com/tech-writing/one

Utilize and employ are about the same level of obscurity as 'develop' and much closer to the intended meaning.

A later inspirational message is very impressed with itself:

https://developers.google.com/tech-writing/one/paragraphs

The work of technical writing is to organize and clearly present information.

I wouldn't pat myself on the back if I published a writing guide that was easy to nit pick.
You can understand something first, and practice for the speed later. Understanding does not prevent practice.

I know the result of 8×8 immediately, and I don't think I would ever forget it. But, hypothetically speaking, if I ever made a mistake here, I have the option to slow down and verify the result. If I wouldn't have the option, there is a risk that I would make a mistake and then keep making the same mistake forever, because once the lessons are over, there would be nothing to correct me.
Nothing you stated here supports the claim in your first paragraph. Weekly church attendance is not a requirement of religious affiliation.
>For me, this is only because I will be locked out of access to certain essential financial products as the result of having no credit history.

You mean like, crappy consumer credit products?

Solution: Don't use credit. The double plus extra gold platinum card with cashback isn't really improving your life that much anyway.

A credit card isn't gonna make that big of an impact on the kinds of purchases you truly need credit for (land/housing/business/capital). You're not locked out of accessing those products. They just cost a little more. God forbid that you be forced to be more selective about the kinds of things you buy on credit as a result of this.

Edit:

Unlike most people who spew internet advice my money is where my mouth is. My only credit is my mortgage and my rate was refinanced to the low 2s a couple years ago. The initial loan was low 3s ~6yr ago and I did 20% down by pulling money out of investment funds I had contributed to over the years. "Costing tens of thousands of dollars over the life of the loan" my ass.
I was just in IT, HU and DE and used Apple Pay for 99% of all transactions, and it was normal.
USSR had one army though, but after that it was controlled by Commonwealth of Independent States https://en.wikipedia.org/wiki/Ukraine_and_weapons_of_mass_de...

If Ukrainians wanted they could have prevented this at the time of Soviet Union dissolution, but they didn't so there's not much to discuss.
Cryptocurrency is a niche hobbyist area within fintech, nothing more. If it all turned off tomorrow, virtually nobody would notice. Compare that with Visa or SWIFT, which are actual cornerstones.
Beer info is out of date as well. Beer up to 5% can be sold at grocery stores with no day/time restrictions - which covers quite a lot of beer. High gravity beer (>5%) can be purchased at liquor stores or at the brewery (no time/day restrictions on brewery sales).

It's onerous sometimes, and often weird, but it's no more difficult to purchase liquor in Utah than in a state like Virginia.