skysight-inc/HackerNews huggingface dataset:
> 0.2% success rate

This is the "proportion of criminal funds recovered" [1]. So of the $1.6 trillion laundered out of $2.1 trillion of estimated criminal proceeds, only a few billion were confiscated or seized.

The author then argues for reducing fines on banks and financial institutions, increasing criminal asset forfeiture regimes and moving away from suspicious transaction reporting. (I agree with Nos. 2 and 3; for No. 1, I'm skeptical given the author is a consultant [2].)

Tornado's sanctions were imposed by OFAC. From what we can tell, it wasn't AML reporting but criminal investigations that yielded the tip. Your source thus refutes your argument. Following the author's prescription, we'd now work to investigate everyone around Tornado and seize their assets if they're doing anything illegal.

[1] https://www.tandfonline.com/doi/pdf/10.1080/25741292.2020.17... page 82

[2] https://www.amlassurance.com/better-outcomes.html
The point of that specific complaint is that the market has evolved significantly since RCS was first created. Things we now take for granted were not built into the standard because they didn’t exist.
Technically, it’s true. AT&T supposedly blocks port 80 although I don’t think that’s the case for fiber but I would imagine if you’re doing more than just a personal blog site and using way more than a residential customer would use, you’ll attract some attention.
Eisenhower!! Your mimeograph machine upsets my stomach!!
I think the problem is a bit simpler.

When I'm hiring, I often want to hire someone I *know* to be qualified. The most rational process is:

- If I know you, and you're qualified, I'll hire you (over potentially more qualified candidates, where I don't have the same quality of information)

- If I don't know, but a friend whom I trust does, again, I'll hire you (over potentially more qualified candidates, where I don't have the same quality of information)

- If no one in my network is qualified, I go with resume+interview. This process gives very poor-quality information.

What friends (and references) avoids are genuinely bad hires. In most cases, I'll take a candidate I *know* to be good over one who is *probably* better, but where there's a chance of a bad hire.

This re-entrenches social and power structures, but it is also rational and not corrupt.
I actually think the yield is concerning. For fun, you can plug in your own assumptions to this calculator [0], but with assumptions below, the yield on bonds due 2028 implies a 20% chance of default.

Market price is 0.7/face value of 1/coupon of 3.375 (from the article), payments per year = 1 with 7 payments remaining (you could also do 6, depends on whether they've made a payment this year which I didn't bother looking up), recovery rate of 60% (assumption, the model is really sensitive to this input), and the 5 year treasury rate is around 2.97 percent which I used as the risk free rate.

[0] https://quantwolf.com/calculators/bonddefaultcalc.html
Legally its still unclear if the image can be copyrighted. If you use it commercially, others may be able to use the same images if they’re generated by DALL-E.
> Apple relies on SMS and MMS

This is the whole point. Apple chooses to fall back to an outdated system instead of one that supports higher quality media files.

And that's just one of the ways they provide a worse quality experience for everyone involved in a cross platform group chat.

There is really no reason for them to do that, except to force people onto Apple if they want to be part of group conversations with most Americans.
I am not at liberty to disclose the app, itself, but it uses many of my open-source contributions.

The backend is a modified version of my BAOBAB server[0], which was actually a "learning" project, for me, but it works quite nicely.

This is the Security document[1] for the generic BAOBAB server. The customization was to add support for a specific workflow that is designed for the app, itself, and the customization is proprietary, as is the source for the iOS app.

This is the dependency manifest of the iOS app:

// MARK: -
// MARK: - DO NOT TRANSLATE BELOW THIS LINE -
// MARK: -
"SLUG-VERSION-BMLT" = "BMLTiOSLib: 1.5.3";
"SLUG-VERSION-KEYCHAINSWIFT" = "KeychainSwift: 20.0.0";
"SLUG-VERSION-LGVCLEANTIME" = "LGV_Cleantime: 1.3.5";
"SLUG-VERSION-UICLEANTIME" = "LGV_UICleantime: 1.1.1";
"SLUG-VERSION-AUTOFILL" = "RVS_AutofillTextField: 1.3.0";
"SLUG-VERSION-GCD" = "RVS_BasicGCDTimer: 1.5.0";
"SLUG-VERSION-CHECKBOX" = "RVS_Checkbox: 1.2.1";
"SLUG-VERSION-OBSERVER" = "RVS_GeneralObserver 1.1.0";
"SLUG-VERSION-GST" = "RVS_Generic_Swift_Toolbox: 1.10.1";
"SLUG-VERSION-MB" = "RVS_MaskButton: 1.2.0";
"SLUG-VERSION-PP" = "RVS_Persistent_Prefs: 1.3.2";
"SLUG-VERSION-UKT" = "RVS_UIKit_Toolbox: 1.3.2";
"SLUG-VERSION-WHITEDRAGON" = "White Dragon SDK: 3.2.2";

It's from my Settings bundle localization file, so the syntax is strange. These are all open-source. I did not write KeychainSwift, but I wrote everything else (I have control issues. I don't like using code that other people wrote, unless it's really good, absolutely necessary, and is something I completely trust). They should be easy to find on GitHub. They are all SPM modules.

The app, itself, is fairly large, at over 30 screens (it was a lot more, but I'm doing the "Thoreau" treatment -Simplify, simplify, simplify- to it). I have been working on it for over a year and a half.

[0] https://riftvalleysoftware.com/work/open-source-projects/#ba...

[1] https://riftvalleysoftware.com/BAOBAB/PDFs/Security.pdf (Downloads a PDF).
South East Asia has tons of SMS spam, WhatsApp spam, Telegram spam and basically <insert any messaging app here> spam.

SMS not in used a lot in Europe doesn't mean the world is not using it.
That's weird -- my phone number is definitely in some spammer lists (I get so many calls) but I have never once received an SMS or iMessage spam. What kind of things do they send?
As someone who worked around Windows Phone and had to deal with Google's unwillingness to support other eco systems; Pound sand android.
They’re only private until Amazon has a leak or decides to sell it to the highest bidder.
Why so dramatic? This is only good for Godot. No serious game studios use Godot because of lack of “enterprise support” and console support, both of which this company is founded to provide. More companies using Godot means more contributors, more features and a better engine. The ecosystem has struggled for a while to find footing, but now it’ll finally be able to flourish.

Case in point, XNA has multiple successors (FNA, MonoGame) supported by companies that make money by porting games to consoles.
Jammed it into Discord, the Discord backend directly accesses the site in order to embed a summary, which places the IP the Title block. I'm now vaguely aware of the fact that, at least part of Discord's backend is running on GCP. They haven't used it to torrent anything, however.
Buffer has API access to FB, Twitter and Linkedin so no scraping is involved.

I believe they dont have API access to Instagram and just send you a reminder to post something when you schedule it. Kinda lame
Their stock options are not worth anything now.
It's no longer a great place to work.
Because they do not show you the money.
RCS rollout has been a mess with a poor UX , unclear consent etc. Apple definitely doesn't want to inconvenience users with that garbage.

There are tons of great cross-device messaging apps e.g. Whatsapp , Signal, Telegram. The market has provided solutions.
> I'd rather live in a world with spam […]

That is a personal choice, and I choose to not have spam on my phone. Several months ago I was subjected to a floodgate of good ol' fashioned SMS spam that lasted several weeks. There was no way to stop the spam because the phone was receiving it through the legacy SMS channel coming specifically from Android devices infected with Flubot; the bulk of spam now comes from unpatched Android devices because hardware vendors stop releasing security updates after a short cycle, or due to loose default app permissions set on the device. I ended up creating a support ticket with my mobile telco and soon I received the following reply from a human being:

What you have encountered is, as you may have guessed, not a legitimate SMS notification.
This particular message is designed to entice you to click on a link, and doing so would potentially expose your device to malicious software.
This malicious software is trying to target Android devices, so, if you are an Android user, you should take particular care with such messages.
Note that you may receive this message even if you do not use Android devices - the website link is simply being sent to a number of random telephone numbers in the hopes that an Android user will receive it, and manually bypass the built-in security protections and install the malicious software presented by the website.
In other words, if you use an iPhone, you can still receive these SMS messages (often claiming to be relating to a voicemail or parcel delivery), but there is no direct risk to your iPhone by simply receiving the SMS. Nor is there currently any risk to your iPhone if you happen to click on the link that is in these SMS messages.
If you use Android, you should avoid permitting your device to install any software that did not come from the official Google Play store.

> … where corporations get to decide what I run on my devices …

Corporations, such as Google, make decisions for users without getting their consent nor without informing the users. If you sign into a Google account in a web browser on your phone, for instance, the sign-in will also silently and non-consentually sign you into your Google account across all Google apps installed on the device without informing you.

The corporations, good or bad or anything in between, must be bound by the code of conduct they ought not to be allowed to get out from: must request the explicit user consent first.
SecureDrop 2.4.2 – Released → (August 9, 2022)
Terms and Conditions only apply to small players. Larger players like Hootsuite, Sprout Social, and Hubspot have dedicated teams/people working on partnerships with Meta, Twitter, and LinkedIn. Your standard API limitations don't apply to them.
> Setting aside that thinking of pregnancy as a "parasitic relationship" is a somewhat deranged perspective that very few people

I doubt this is true, especially given the fact that many people refer to kids as parasites.
Messages you receive are always black text on a grey bubble. What part of this was confusing?

As other have mentioned, you can tell if it's iMessage or not in a few different ways, the send button color, the "Text Message" or "iMessage" label interspersed in the conversation, etc, but if you want to talk about the color of the bubbles, that only applies to outgoing messages.
In the last 6 months SMS spam has increased a lot for me. A lot of it are random messages like "I'm sorry but please don't message me again!" or "Hey, I really had a great time last night, let's make plans for next weekend!" that basically is reply-bait.
SecureDrop 2.4.2 – Change Log (Text) : https://raw.githubusercontent.com/freedomofpress/securedrop/...

SecureDrop - Freedom of the Press Foundation @ GitHub : https://github.com/freedomofpress/securedrop/

Freedom of the Press Foundation : https://freedom.press/
Do you not see the complete farce of pretending to host something "at home" while being reliant on CloudFlare?
> all it needs is a weak simple catalyst,

Catalysis lowers the activation barrier, sure, but you still have to contend with the thermodynamic equilibrium in the absence of the catalyst, in addition to subsequent degradation by light, etc.

> ocean full or random stuff that we can't actually imagine today

We probably can't ever really know what was in the Earth's ocean before life, but quite a bit of research has been put into figuring out some plausible conditions and then testing the hypothesised pathways put forward by the leading theories under said conditions.

All this is to say, yes, clearly abiogenesis occurred, but there are major gaps in the leading theories that are interesting and testable. I don't think it's very useful to gloss over the details, even if in the end the best we can hope for is a plausible pathway given a specific set of assumed conditions.
Not fully encrypted yet though, not even if everyone opts into encryption.

And if we want to be technical XMPP was before that and it was federated by some large networks, however briefly.
Interesting. I used to program CNCs (lasers and punching machines) for automotive parts. We couldn't rely on the path planner either. If the punching machine's turret ran too close to the clamps, it would crash and put it all out of alignment. There goes a day of production. The planner assumed all material was rigid, but when perforating thin material that wasn't the case. You'd end up with corners bouncing up into the turret that get caught and crumple the sheet metal like paper. The third issue happened when the auto path wanted to change tools multiple times.

It turns out that manually programming paths to account for those issues actually generate hundreds of saved production hours per year.
Yikes. You are right and I had not thought about tires as an obvious source of microplastics.

What's the solution though?
Android and Chrome too. They are products, not open source. Google uses its lawyers to jump through loopholes and lie about being open

Embrace, Extend, Extinguish, but with better PR
Do they?

I can't remember the last time I sincerely used an integrated GPU, Intel or AMD, since they're too weak for my purposes. I only ever use them as a Lowest Common Denominator failsafe when troubleshooting.

And for use cases (not necessarily mine) where low-end GPUs make sense, it's not like Nvidia and AMD don't sell bottom of the barrel GPUs that you (or OEMs) can buy for a Franklin each or something.
Perhaps you're missing the point though? Maybe your friends simply don't care enough to switch.

Bottom line is iMessage works really well and people like it. Same with FB messenger and Whatsapp. You want to move friends to something else? There needs to be a selling point much larger than just security.
Besides the Roomba, iRobot is a defense contractor.

Add to this Amazon's inexplicable push into surveillance with Ring.

My conclusion: Amazon is quietly growing a defense arm.
Where are the docs?

There's nothing (obvious to me) in the repo. The official site is just the README.md. I installed it via brew; there's no man page. Bash can't find it. Spotlight found it and ran it...I guess.

What am I missing?
I setup a BlueBubbles server on a spare Mac and I installed the BlueBubbles App. Boom. iMessages on Android. Done.

Messaging is already extremely fragmented. BB is only the eighth messaging app on my phone. Considering getting on Beeper to consolodate this madness. Matrix/Element was too rough to utilize as is.

Almost everyone I text with is on iMessage in the US. 95% or more of my regular contacts. Many are often outspoken about their cult like allegiance to iMessage. Finally some respect.

The look on their face when I send them an iMessage from my Galaxy is priceless.

Now, nearly all of the SMS messages I get are spam. Google Messages and the phone companies are pathetic at stopping them.
There's a few dozen ways to work with k8s that don't involve helm. I understand that hasn't been your experience but to deny they exist shows a lack of.
They can use a 64k table in ROM for all 2-arg ops, and 256-entry tables for the rest!
I wonder what percent of app downloads are re-downloads onto new/wiped devices. I've had Google Maps since it first came out, back before Apple had its own maps. So every time I purchase a new iPhone or iPad, or restore one of my existing devices, Google Maps gets another download.

It's possible these re-downloads are utterly swamped by people picking apps out of the app store. But it can't hurt to have a huge base of legacy installs that reduplicate every time someone gets a new device.
Hence why I said “not built in” — also per the document, “all RCS chat messages will be E2EE if both clients have the latest version of Messages” which means if an attacker with enough resources blocked the target end-point and inserted a device without the add-on E2EE encryption, sounds like the messages would be sent in the clear, which to me is not end-to-end encryption; that is unless both parties get an alert the messages will be sent in the clear, preferably before they are, using prior method a nation state or telecommunications company at their order could likely easily read all the messages and forward them on without either party knowing. Hence, SMS & RCS need to die.

Am I missing something?

PS- Assuming that document is by Google, but unclear, what is the source that links to it?
It's not whether it's a controversy, it's that it's a generic, tropey and unsubstantive comment. 'X sux' is a bad comment even if X really sux.
That comparison is Intel 14nm vs. TSMC 5nm nodes.
Please verify from the link.
That's appx a one node difference.
Intel fumbled the ball on EUV intro.
Right, I get that. But even if a hospital was literally next door to you in Nebraska, laws would be put in place so you couldn't get an abortion there. That has been happening since Roe v Wade in order to make abortion next to impossible to get, even if it was legal. Like the laws passed in southern states that made it effectively impossible for black people to vote.
The problem is that it's insane to leave all of this for the website to implement correctly. It's a UX nightmare and it opens the door for a company to game the system, secretly ignore my privacy setting, etc. The EU solution is, of course, to turn a technical problem into a legal problem. Sue the company if their "Allow" button is too big or it doesn't work as advertised.

It should be a consistent browser-based preference that makes it impossible for a website to do something that I told it not to do. The problem with that is it requires innovation because cookies have inherent privacy design flaws. When you can't innovate, legislate.
The ANC is something of a Labour-based party - so it has a blue-collar bent to it and gets the endorsements of many unions. I'll assume the 2 people you met were not blue-collar, so chances are they are not ANC supporters.

There really is not single politically party that enough support to get more votes than the ANC, whose share of the vote has been dropping steadily by 3-5% every 4-year election cycle.
> These are in no way comparable.

I would suggest to you that you need to think of this in a different way.

There are mechanism and then there are legalities.

You may receive a transaction and you have a mechanism to reverse the transaction, but now your account is tagged as the sender is a known tracked account. You have just interacted with a known drug dealer, terrorist, enemy of state etc and you are now by association suspected of wrong doing. Reverse the transaction, your account is still a data point in some database.

Send money to the wrong account, and yes you may stand a high chance of getting it back but you may not.

The situation does differ when it comes to hacks though.
Companies will always act in their own best interest, that doesn't mean you should let spite get in the way of what would be a positive change for consumers. Google sucks. Apple sucks. Microsoft sucks. Unifying a broken ecosystem is a net positive regardless of which entity happens to be championing it
We're a terrible employer? Let me tell you what kind of employer we are.

We pay top 1% of market. We work to have a low stress environment. We put life before work instead of work before life. We prioritize having the best benefits on the market, including platinum health care with $0 employee contribution and full mental health coverage for therapy and medication not covered through insurance. We don't overload our top performers by giving them more work when they overperform but instead let them take the extra time off. We give everyone when they join a private office and an unlimited budget to buy tech and decorate it to their heart's desire. We don't have required hours in the office or even require that people come to the office at all. Most people do though since they enjoy their nicely decorated private offices with multiple high end monitors and tricked out desktops.

Which part of that makes us a terrible employer? That we ask people for an hour of their time to do a coding exercise? Is that how your judge if an employer is good or bad?
>How many times has SGX been broken now?

So frequently that I believe it's deprecated nowadays.
> what the OFAC press release explicitly claimed

You linked to [1]. Better links might be [2][3]. Broadly speaking, if you're an SDN (a) U.S. persons are prohibited from doing business with you and (b) your assets under U.S. jurisdiction are subject to seizure.

That second bit is the problematic one. Because due to secondary sanctions, even a non-U.S. person interacting with an SDN can be subject to asset seizure. So in practice, anyone who has a U.S. nexus will stop doing business with you. (Or the U.S. can take their stuff. Also, everyone who doesn't want the U.S. to take their stuff will stop doing business with them.)

[1] https://home.treasury.gov/policy-issues/financial-sanctions/...

[2] https://home.treasury.gov/policy-issues/financial-sanctions/...

[3] https://en.wikipedia.org/wiki/Office_of_Foreign_Assets_Contr...
A very quick google returns 400k hits. The Sun is just one of zillions of sources.
I mean... the spam texting I get is annoying, but it doesn't seem much different between iOS vs. Android devices...
I would't even mind not having a _single_ standard, as long as all the standards were _open_ standards.

If I could use an Android iMessage client when I have to talk to iPhone users, that would be fine. Or we could even see the rebirth of multiplatform messengers like Pidgin, Gajim and Trillian.

The issue is that right now there is no way to have a modern text conversation with iPhone users (high quality media, reactions etc.) if they don't want to leave iMessage. (Most of them don't.)
Milgram Questions
100% wrong for me.
> Who's locked in? I can and have switched back and forth between iPhone and Android devices.

The cost to switch is not trivial for most of the world. And the cost of iPhones is high compared to the alternatives.
Humanity has to downsize its expectations and ego. Cutting most passenger air travel is a key part of that. Next we should ban most non essential plastic objects. Then slam a sticker in front of every product with its carbon footprint.
> To keep your identity as veiled as possible, we recommend not adding a publicly known phone number or email address to your Twitter account.

What? How? Twitter doesn’t allow voip numbers or any sms gateway that is not a brick and mortar teleco company that requires full ID verification.
SEEKING WORK | REMOTE ONLY
Available for part-time or full-time contract work, preferably on a long-term basis, but I'm also available for smaller projects.
I am very flexible with my working hours.

I am a full-stack developer with more than 9 years of professional experience.

I also do DevOps and DBA parts of the project either.

I prefer a long-term contract, but I'm also available for smaller projects.

My rate is $100/hour.(neg)

Tech Stack: Flutter, C# .NET MVC, WPF,WinForms, UWP, JavaScript, Xamarin, REST, SQL, Azure DevOps, Circle CI, AWS, Docker, Blazor, WCF, SOAP, SCSS, Kubernetes, Rabbit MQ etc.

Github: https://github.com/rufw91
SF: https://sourceforge.net/u/rufw91

Email: rufw91@live.com
That’s… a far cry from never.

“It never happened! Except that one time when it was an alpha”