skysight-inc/HackerNews huggingface dataset:
> If you are not contacted by Twilio, then it means we have no evidence that your account was impacted by this attack.

aka... There were a bunch of ways employees could access the customer data unaudited, so we don't have evidence of that. Rather than say "we don't believe you were impacted in this attack", we're using weasel words to set your mind at rest, when we really have no idea.
I have only ever used the Authy app as a generic place to centralize my TOTP secrets from various services.

When you say tokens can be reset using SMS, which tokens are you referring to? Is this reset something specific to Twilio?

I can't imagine a scenario where SMS would enable the resetting of other 3rd party TOTP secrets, but I may not be understanding your comment.
I predicted it 3 months back https://news.ycombinator.com/item?id=31288544#31291943

Mixers are really great at doing stuff they claim to do, and they do work as intended.

Tornado.cash was next no matter what, it was just 'when'.
I turned down my offers from Google at Amazon because I value WLB and being able to continue with my freelance work and content creation. I figured working at a bank would be congruent with this sentiment.

You do cool work, btw. Just be careful, Shopify seems to be real layoff happy. I've even had some of your staff engineers hmu on Linkedin for a position and I've been having to say thanks but no thanks.
Like Germany?
Whataboutism aside - what is the point you are trying to make ?

> Author needs a course and more information on USA foreign policy in the last 20+ years.

Author is referring to the unprovoked Russian invasion of Ukraine. How is USA foreign policy related to this ?
Ugly code is often ugly because the ugly part is visible, like the piping in your basement.

Pretty code is often pretty because the ugly part is hidden, like the piping in your bathroom.

I know where I'd much rather have a bug (leak), personally.
I feel that way about the % key on calculators that also have a / key. If you need a % key, you have no business using one :-/
... and like most rights, it's not an unbounded one.
The quota includes not just the git repo, but also other services that gitlab offers. In particular the container and package registries are easy to setup in a way that accumulates a lot of data (e.g. by building and tagging a docker image in every commit and not cleaning up old images).
In most cases this will be a misconfiguration and all the quota enforcement is doing is to force people to configure their projects a bit more considerate.

As far as I know, the quota itself isn't new, it just wasn't enforced in the past.
No, there should be no right to launder money. Just as there is no right to hate speech despite there being a right to speech.

Laundering cash is illegal too!
It is law enforcement working as intended. Freedom is complicated, I guess.

Judging from your tone I suspect you'll love this fun fact: amongst other things, this sort of sanctions regime stems from the PATRIOT Act. Beacon of liberty that thing.
I think I'm misunderstanding something in this article. It seems to keep implying that protons are smaller than electrons, which isn't true?
> Also, the vast majority of Tesla's customers are attracted to the idea that their car will continuously update itself and get better over time.

For how long though? I have since long realized that for me autoupdates is a anti-feuture that just makes it possible for the cooperations to mess with me.

We have the story of the Tesla owner that got his battery software limited due to a workshop messup two owners earlier.
The Making of Silent Bruce
The US has effectively no customs on leaving the country. I doubt those wanting to leave with cash have it that bad.
Before Tesla came out with autopilot, Google had done extensive user research on "autopilot" cars and found that no matter how many times you tell users that they must be fully attentive, people WILL go on their phones or stop paying attention. It's the entire reason Google didn't go to market with their technology before Tesla

Then Musk came along and completely ignored the research (which he must've been really aware about considering Google was in negotiations to buy Tesla) and even took the advertising a step further. He KNEW people wouldn't pay attention but sold the cars with that marketing anyways. IMO the blood of the 15 people who have died due to autopilot is directly on his hands as well as the thousands of other injuries due to autopilot accidents

Tesla's still have problems. They made up 273 accidents involving driver-assistance systems in 2021. 70% of all such accidents.
What kind of projects are using 500GB much less TB's of data?
Speaking of aviation this is a great pilot training on automation dependence

https://www.youtube.com/watch?v=5ESJH1NLMLs
Unless security training takes the click rate to zero it is ineffective in protecting your organization from phishing attacks.
I didn't even know there was no storage limit - that seems like an immediate way to get your platform used to store non-code data in very large quantities.
> No, but seeking out one of these plant-burgers over real meat probably does.

Where I am, they're roughly the same price as real meat, easier to keep frozen, and I don't appreciably notice the difference (they're definitely not meat, but they're much better than the previous generation of meat alternatives).

Separately, a lot of my friends are vegetarian or vegan, which makes them convenient when I'm having company. But I'm perfectly content with them myself, as someone who loves animal products otherwise.
And unless treated extremely extremely carefully, BTC does not offer privacy. (pseudonymity at best, but in practice not enough)
Word has context and get interpreted by the person reading or hearing it. Advertisement is only misleading if people get mislead, which is subjective and involve judgement calls both on the reader but also by the legal system that think that people get mislead.

Pilot use technical terms that they learn in both training but also in the culture around pilots. Words used by pilots in that context can have a different meaning than the literal interpretation of those word outside that context by non-pilots. The jargon is different, and thus advertisement towards pilots using that jargon will be interpreted in that context. The word "autopilot" directed towards pilots will be interpreted in that context, meaning they will expect the technology to work as training and culture has made them to expect.

Driver training is very different from pilot training, and the jargon and lingo is different from pilots. An car with autopilot that is limited to work with the restrictions of a airplane autopilot, ie only work at airport or while high in the air, would likely not be what the driver expected. The same word but different context.
You're not sanctioning a mechanism; you're sanctioning an entity.
As far as I understand coins don't have a unique ID rather wallets have balances. There is not a list of serial numbers to compare against. So if you want to ensure money is not coming from a mixer you have to look at the flow graph of transactions. But this line is kind of unclear. One one extreme you could ban any wallet that has used a mixer, on the other extreme you could ban every wallet that is anywhere in the graph involved with a mixer for example someone that used a mixer sends you money for coffee, you send someone else money, and now all three of you are banned, which probably trends towards a substantial portion of the network.
Which doesn't really work as a concept when there are things so terrible that no amount of money can compensate. What price would you put on human extinction?
That’s the double edged sword of cash. Whilst it guarantees privacy, it also enables criminal transactions.
If the software supports multiple cryptographic primitives how do you stop a down grade attack when one of those primitives becomes obsolete?

To do so securely would require cryptographic primitives that can not become weak and obsolete at which point why not just use that for everything? Its a chicken and egg problem.
That does seem ridiculously small. It's probably fine for 95% of projects though.
I agree this effect exists, but much less than a comparative site like Reddit. One thing HN does well is that a new comment appears at the top of its sub-thread and stays there if it gets enough upvotes.

This has happened a couple of times with my comments. Once there were at least 200 comments on a hot button issue but my comment rose to the top anyway.
If your job is to sit at home for 95% of your working hours doing whatever you want, getting paid "regular or OT" developer salary, please let me know who your employer is. I'd like to bid on replacing you. I'll do that for 2/3 the price and I won't act entitled to it.
Does tornado even have employees? I guess they can seize the front end domain, but the actual defi protocol is decentralized, how do you freeze that?
I don't think it's fair to say it's exclusively used for money laundering, it surely can be used to obscure the origin of funds but I think 'money laundering' label requires that the motive be financial profit. If you just want to preserve privacy while interacting with ethereum network without financial gain, tornado is a great tool to accomplish that.
GitHub Availability Report for July 2022
Ask HN: Move Search Bar to Top
Confusing on iphone with Safari address & search bar.
It used to work well on twitter (chronological order), but after either the update to 103, or the recent add on update, translation works well at first, but then breaks and stops working (whether in “auto translate” or not)

Anyone else noticed this? Found a solution?
> Purpose: a reason to wake up in the morning

That's a big one.

From what I hear, people with active and stressful yet compelling lives/jobs tend to fall apart if they go straight to trying to relax in retirement with nothing to do.
I would prefer to have the phone taking over the navigation/entertainment system the way Android Auto and Apple's CarPlay do. In this car, unfortunately, the entertainment system screen is tiny and most likely unsuitable for this.

If you build a car with a non-standard slot for an entertainment system, the least you can do is to make it smarter.
Not sure about MFA with a USB key but for the sake of the argument, if they are using App-based MFA as their own Authy, I would think a headless browser in the backend of the fake site accessing the proper site on behalf of the real user would do the trick. It asks the code for the user on the real site and the user replies on the fake site and the fake site supplied the real code to the real site. The only thing needed is that the user gets and supply the code that was asked on their behalf to the fake site.
Allowing the US state to violate it might be a case of the cure being worse than the disease.
If your company is hit by something like this, how sure are you that you'll find out?

I suspect most companies would never know that someone was sharing an employees login and downloading data...

Well if you want slightly more confidence, use my tool to catch thieves...[1] Turns out most thieves are rather tempted by some cryptocurrency that appears discarded and up for grabs.

[1]: https://serverthiefbait.com/
Yes, but they're not being trained on a specific car model like pilots are.
Google has a couple of small canopies over parking in their campus (near B42 [0]). I vaguely recall someone saying that it was so expensive to get permits and stuff, that they just dropped the idea altogether.

[0]: 37.42155847329576,-122.08624401157378
Monzo does have Buy Now Pay Later now, for whatever that's worth.
Your legal system defines "criminal" activity. What's legal in the US might not be permitted in Russia.
You might find that Brave New World is not quite the same cautionary tale against genetic enhancement that popular discourse would have you believe (it's more about totalitarianism):

https://news.ycombinator.com/item?id=22128854
>Do you somehow imagine there’s a way to start working that doesn’t involve starting working?

Obviously not.

If this article helped you, great! I did not find re-stating "just start" to be an effective motivator for me.
I wonder if this will finally create a market for freshly minted coins.
It’s still censorship resistant even after the sanction was put in place. Can you point to what transactions are being censored? People can still use Tornado cash without the US govt being able to stop them.
Pretty much everyone agrees exceptions aren't worth it, but there are plenty of opinions about what the best alternative is (returning bools, error codes, aborting the program, etc.)

Classes are unambiguously good, but polymorphism (specifically vtables) are controversial. Templating is great, but folk love to complain about code size in abstract to sound smart.

Dynamic memory allocations in general are forbidden, but in practice it's occasionally easier to just support it in some very limited way, and then lock the API down very tightly.
Tesla's Data Mining Operation
One case I've seen on our local Gitlab server is someone in data science/HPC (accidentally?) adding the output of a solver to their repo. Easily hundreds or thousands of gigabytes of data.
There can't be a return to pleasantry from this. This is beyond indefensible.
Cool Bear Cinematic Universe
I think there's a couple of things there.

One is yea there's a certain level of cultural idiocy and laziness. I live in front of a bus stop and see it. But I also see lots of parents walking to pick up their kids, so I'm not sure what the breakdown is (this is in the suburbs in Ohio with the bad weather and all of that).

The other is that we don't really have a lot (any at all?) of examples where you have a true walkable neighborhood with desirable schools. Most walkable neighborhoods that I've seen were built before automobile traffic became prevalent, which puts them close to cities which tend to have the worst schools. So I'm not actually sure what parents would do if they had the combo of schools and neighborhood that we'd be talking about here, but I bet they'd walk because in those neighborhoods it just wouldn't be possible for all or most parents to drive their kid to school at the same time.

It's really hard to break out of thinking about things in terms of the suburbs and convenience because most use that as their starting frame of reference. How will I go to Costco if XYZ, well you wouldn't. How will my kids get to school? They'd walk or ride their bikes. "But it's dangerous" ok then make it safe. Participate in your community and your government. That's half the reason we have the problems we have now. For better or worse though economic physics is going to win. We'll either all perish in war over resources or these activities will just become too expensive. EVs won't save us either, and this is particularly true given the underinvestment in nuclear energy that has occurred world wide.
> the problem under discussion is large email servers blocking all other email servers, not "online shopping"

No, that is not what I was talking about, nor the comment I was replying to.

I was replying to this:

> Credit card companies calling me because they think I'm committing fraud, retail sites cancelling my orders because they think I'm scamming them
Not the technical meaning of inflation, just temporary price increases that will be shrugged off in short order. Not before the media and politicians ride it for all it's worth though.

Everything goes hyper-bole so quick these days and becomes "true." "Inflation" is a buzz word that is meant to encapsulate outrage at the price increases.
Cash doesn't tend to bypass international capital regulations quite as easily. It also doesn't waste a ton of useless energy when used.
multiple pan angle 360 arc shot challenge
This was the answer, pre-Ukraine already. That war doesn't move the needle that much, as NATO/Russia escalation is far from the only nuclear war threat -- there's also mistakes by any party, India/Pakistan, North Korea, China, etc.
> a lot easier for someone to create a new mixer

No, it’s really not. Mixers need liquidity, which means they need popularity and volume. That’s not overnight.
I built this: https://insideropinion.com/

Works more like a searchable knowledge graph, with the ability to identify users as nodes. Ie you can search for answers in the messages, links that probably have answers and people who would likely know the answers (we then link to said people).
It's a simple pattern which I'll describe in this paragraph with some padding before and after, so you may give up on reading, even though it is in my opinion among the mildest patterns that would trigger trypophobia. It's a fossil of a hexagonal grid of tubes imprinted on a rock. There are examples of the pattern on a sunny rock, on a sandy rock, an isolated slab of rock with the pattern, and finally what looks like a microscope or underwater picture of similar stringy coral patterns. Now I need some final padding, so someone glancing will not glance at the end of the paragraph and see some of the description. But I'm not sure on what to say here, as there isn't much to it, it's just a fossil. There are no gruesome images.
> Welcome to the real world consequences of interacting with systems that are counter to wider societies aims.

I don't think there's good evidence that this is counter to broader society's aims, just that it's counter to the power of the US state (which always wants its power to grow).
Nobody is saying that general purpose humanoid robots wouldn’t be immensely useful.

But you talk about them like it’s coming in a couple years when the reality is that it’s still very far away.

Tesla has a terrible track record with keeping their promises on their claimed timeline for advanced technology like FSD. I would be extremely skeptical of anything they demo because they have not been realistic in the past.

I say this as a Tesla shareholder and satisfied model 3 owner. I bought a Tesla for their strengths with respect to powertrain and battery and it absolutely delivers on those. But I do not regret not paying for FSD at all.
Why do you need more than 5gb for a git repo? IMHO, any repo above 100mb should have an exceptional reason for being so big, and if it's just code a normal repo is more like 1 to 10 mb in size, max.

You don't even need to pay gitlab, free tier can do for most stuff and there's a generous sponsorship for Open Source.

I don't get all the hate Gitlab is receiving these days.
I was involved in writing that post and, in particular, that sentence about feedback. I don't work for PR. I work for our search quality team, as a liaison between the team and the public to ... bring feedback we hear in a variety of places to help consider improvements. Hacker News was one of the places earlier this year where there was a lot of feedback about wanting to see how to make quote search work better. In responding to (see my profile) and exploring that feedback, it wasn't that quote searching was broken but that people couldn't readily understand we really did bring back documents with the quoted terms. So that's the feedback that went back to our team, and we looked at how to improve things which lead to the change we announced.
Of course the ultimate content of any advice for this problem will be "start working". The question is what mental frame to provide so that it actually happens.
I guess the core use case for HN is consuming fresh news. Search seems to be only nice to have, and I'd guess most HN users barely ever use it. So it kinda makes sense to have it far less prominent than on other sites.
For any consumer electronics/software product, if you can make $X just selling the standalone product, you can generally make $X + $Y selling the same product and collecting data or presenting some advertising. I don't see how this math changes without legislation. People don't have the expertise or time to evaluate the risk of each vendor's privacy policies and the negative consequences of this kind of data collection are rarely immediate enough to cause a negative consumer reaction.
I'm not sure if they ever did this during onboarding, but my former employer would regularly run fake spearphishing campaigns to raise awareness about spearphishing.

The number of people who regularly fell for it was worrisome. Falling for it meant auto-enrollment in a mandatory security awareness training. Failing to take the training would result in deactivation of the individual's network credentials.

I don't know if these campaigns are actually effective at changing people's behavior, but they certainly revealed how effective spearphishing is.
> it's a lot easier for someone to create a new mixer

A secondary effect of sanctions is indicating what the regulators do and do not consider illegal. Up until now, it was at least marginally possible to state "But I didn't know it was illegal. TornadoCash was doing the exact same thing for years and never got into trouble". After this ruling, that excuse no longer applies and that might dissuade a lot of people who might otherwise be tempted to run a mixer of their own.

Also, reputation counts for a lot when it comes to mixers. A mixer that has existed for years is probably legit, a mixer that started up yesterday is a lot more likely to be a rugpull. Even if it will come down to whack-a-mole with the Treasury sanctioning new mixers as they pop up, it might be very difficult for any individual mixer to build up enough reputation to attract significant business.
Jokes on you, I’m not even rich.

I’m talking about broad population-level averages. Maybe you define “luck” as an actual quantifiable trait that measures whether or not you’re blessed by God, but I define luck as a completely random variable that produces noise in the individual case but does not affect population-wide averages.
The Reluctant Prophet of Effective Altruism
But it’s an entity that is decentralized, and theoretically has no owner. It’s just an address that takes coins as input and spits them out somewhere else. I don’t think etherium itself will agree to let the government ban people from sending their coins to a certain address, so I’m struggling to see who exactly the government will be going after.
Archived: https://archive.ph/ReUYI
It's an excellent idea which has been proposed more than once, including by me. ;)
> Using tax code to affect behavior is one of the most unethical things

I am not sure I understand. Those producing externalities should pay for them, and taxation is a basic way for that. Gasoline (etc.) pollutes, hence it should be taxed, on one side to collect the funds for attempted compensation, but also to limit the phenomenon and put it in the framework of "you will invest your resources where you deem them best invested".

You should probably be more specific.
When learning trigonometry in high school (in South Africa, ‘98), we were taught how to use the correct operation for a particular situation and then use a calculator to get the correct answer.

I asked the teacher where the numbers which were spat out by the calculator came from and was only told “in my day we didn’t have calculators and had to lookup the answers from a table on a book!”.

Which was such a thoroughly disappointing response and I hated trigonometry since it was mostly about memorisation rather than applying logic from understanding.

About 10 years later I did a math course through the UK’s Open University and the text book taught trigonometry through explaining the unit circle.

It made me so happy to finally understand and see the actual logic as opposed to punching numbers into a calculator, but I was also sad and a bit upset the unit circle was not taught in high school.
If you build an image for testing on every commit and don't have a retention policy set up, you could be using a massive amount of space without realizing it. I can see why they did this.
This will happen sooner or later so this attempt looks totally unenforceable.