skysight-inc/HackerNews huggingface dataset:
My guess is that it’s both: the Dutch story specifically mentioned direct personal profit, which I’d bet GitHub knew about, and if the story about North Korea using it to launder the proceeds from high-profile hacks are true that’d certainly explain the specificity as not picking one option out of many but rather the one which came up in the process of a big investigation. Half a billion dollars is enough to attract all kinds of attention – I’m sure Monero would get a similar reaction if the Lazarus group was traced to that network, too.

What this suggests to me is that these services are about to mostly go underground as primarily criminal organizations’ internal services. It’s like running a Tor exit node but worse due to the liquidity requirements: you have to be an incredibly privacy-minded activity with a huge sense of security to link yourself financially to a service which you know will inevitably be used by one of these groups.
Seems like an old man yelling at the clouds type of post.
> What I could see them doing is making apps declare URLs that they need access to. Basically, you get full functionality on declared URLs, but if you are just using WebView for a "generic" in-app browser you lose the ability to inspect random pages.

This is exactly what I'm expecting, because that's how they've handled other similar restrictions. Becoming a full on web browser with the iOS 14 web browser entitlement will probably be the only way to not be bound to a list of URLs, and they don't hand that entitlement out willy nilly.
Opengauss active and standby installation problem
[omm@gsmaster ~]$ gs_install -X /opt/opengauss/clusterconfig.xml
Parsing the configuration file.
Check preinstall on every node.
Successfully checked preinstall on every node.
Creating the backup directory.
Successfully created the backup directory.
begin deploy..
Installing the cluster.
begin prepare Install Cluster..
Checking the installation environment on all nodes.
[FAILURE] gsmaster:
Checking old installation.
[GAUSS-51806] : The cluster has been installed.
[FAILURE] gsslave:
Checking old installation.
[GAUSS-51806] : The cluster has been installed.

[omm@gsmaster ~]$ more .bashrc
# .bashrc

# Source global definitions
if [ -f /etc/bashrc ]; then
. /etc/bashrc
fi

# Uncomment the following line if you don't like systemctl's auto-paging feature:
# export SYSTEMD_PAGER=

# User specific aliases and functions
export GAUSS_ENV=2
export GS_CLUSTER_NAME=myCluster
export GAUSSHOME=/opt/huawei/install/app
export PATH=$GAUSSHOME/bin:$PATH
export LD_LIBRARY_PATH=$GAUSSHOME/lib:$LD_LIBRARY_PATH
export S3_CLIENT_CRT_FILE=$GAUSSHOME/lib/client.crt
export GAUSS_VERSION=1.1.0
export PGHOST=/opt/huawei/tmp
export GAUSSLOG=/var/log/omm/omm
umask 077
If you're referring to ISO20022 that's a messaging standard primarily used between financial institutions, not an AML compliance thing. It's got nothing to do with regulation at all, let alone AML regulations. That's kind of like saying companies that run SMTP servers must therefore be in compliance with GDPR or email archiving laws.

As for why Moneygram invested in Stellar who knows? CDPQ invested in Celsius. Better to ask forgiveness than permission, but as the parent said, lack of enforcement does not mean lack of regulation - and it has no bearing on future enforcement.

Financial services companies take AML compliance seriously because if they don't their liability is practically unbounded and I have to say Moneygram looks nothing like Tornado.
I wouldn’t be surprised if what happened in underground music scenes will happen in the visual arts: a lot of pioneering electronic music (eg techno & house) exists completely off of the internet and is only available on vinyl (or on digital if you happen to be extremely lucky and know the producer). A lot of underground producers exclusively release on vinyl because they want their music to reach a smaller audience, remain in club spaces and collected by thoughtful curators. If generative ML requires data to catch on to new trends, then it seems reasonable that many visual artists might try copy the path of underground music producers and keep all their work completely offline.
That name actually was an homage to Gulliver's Travels, where it was intentional.
I don't think TDD gets to own the concept of having a test for what you're refactoring. That's just good practice & doesn't require that you make it fail first.
ImaNewbie Does Brittania (1998)
For Ultima Online lovers in the early aughts. Also maybe an early example of webcomix.
"given that free actually has a cost in terms of privacy, attention"

Why? You're assuming your conclusion. A different protocol can have different starting assumptions.
My apologies, I wasn't aware we had different definitions of driving.
> Does anyone live without a smartphone?

No, I have another phone (Nokia basic) just to handle calls.

> What does that look like?

It may look like, you are loosing trends and info (FOMO), but you'll be fine in time.

> Do you feel isolated from your friends/family, or do you have some other more traditional way of keeping contact? Do you think it's beneficial to you?

Tell em, that they can reach you on 5PM-6PM [your own time frame].
Hey, at this point I tried deleting my account, but couldn't find it in the UI. Is it even supported?

Anyway, can you give me a hand and ban me instead? Your help is much appreciated!
Is anyone doing double sided stuff yet, besides MEMs? I would assume you could dope in interconnects, between the sides.
I hope they leave means of communication available. Something like window.postMessage. Like how Chrome extensions can expose a limited part of the Chrome API to webpages so they can post messages to certain extensions, without needing to inject anything into those webpages.
I don't know what's going with Android at the moment but are Google using Dart themselves for anything serious?
> They're going to heavily lockdown WKWebView after the Instagram and Tiktok revelations, probably in iOS16.1

are you just making a prediction, or do you have knowledge of this?
I've had similar experiences where I got charged by amazon for Prime & wasn't sure what it was. They certainly make it hard to find your payment history for Prime renewal.
about 50. no.
What if the slower pace is a conscious choice that makes the resulting documentation better and codebase more solid?
> > This has happened to me several times while writing this book. I would get the code a bit twisted. “But I have to finish the book. The children are starving, and the bill collectors are pounding on the door.”

I wonder how much methodologies, books are written with the same banal driver. It is somebody's livelihood and they don't pay writers to stop middle of it because they realize its flawed.

I once found a book on triangular currency arbitrage or something like that at my library. It was 4000 pages long and the book was heavy. The book would ramble on in languages that made it difficult to follow and would be filled with mathmetical notations to the brim which really offered no value because the book was written in the 70s and it no longer offered any executable knowledge. But finance schools swear by it and speaking out would trigger a lot of people.

TDD is a cult. Science is also a cult in that manner, it rejects the existence of what it cannot measure and it gangs up on those that go against it.
I assumed that comment was so obvisouly dripping with sarcasm that the /s wasn't needed, but that's what happens when on assumes
Fiction Is History: A journey through Joseph Conrad’s life at sea
https://www.bvoptometry.com/daily-contacts-vs-monthly-contac...
Are you sure it does and isn't just the bog-standard generic driver for your OS? Because likewise, you provided the computer, OS and everything else for it to work with.
That may be one of the best lessons that can be taught, period.
Magnet Fishers Pull Trash, and Treasure, from the Depths Below
This is a submarine article touting the authors' executive coaching service.
>If you do it right, the tests are trivial to write and are very short and disposable (so you don't feel bad when you have to delete them in the next refactor).

The raison d'etre of TDD is that developers can't be trusted to write tests that pass for the right reason - that they can't be trusted to write code that isn't buggy. Yet it depends on them being able to write tests with enough velocity that they're cheap enough to dispose?
There's a distinction here between using safe languages to implement a program and allowing an attacker to write code in your safe language and attempting to avoid sandbox escape.

For example if I wrote a web server in JS or WASM I just made things much harder for someone who connects to port 80 and tries to attack the server through a buffer overflow etc. A lot of the vulnerabilities that you would look for in a C/C++ web server just won't be present.

However a modern browser is trying something much more difficult: Letting the attacker write code in the "safe" language and trying to avoid giving them full access to the machine. This is what Flash, Java, JS, and WASM attempt and it's the boss level of defensive security work.

The article mixes those up in the intro, but it's an interesting article, especially the use of embedded fp constants to construct shell code.
The Github API [0] is a good place to look- it seems like they thought a lot about their hierarchies.

They do things like

/orgs/ORG/repos
/repos/OWNER/REPO/issues

In other words, GH scopes their endpoints usually one maybe two layers. I think conceptually that makes a lot of sense

[0] https://docs.github.com/en/rest/repos/repos#list-organizatio...
And maybe some people have good reason to carry bombs onto planes. The existence of good uses for something is not the standard that we use to make laws. We make laws if the benefits of implementing the law outweigh the harms. There is very little harm to sanctioning TornadoCash, and the benefit is that crime becomes less profitable because the cost of laundering increases.
I would even go a step further and say that there was no memory safety bug in the code. The attacker-provided exploit contained the memory safety issue by calling potentially unsafe APIs "incorrectly".
Sadly it is pretty much the story of the world with a few rare exceptions.
Far right movements ethnic/religion/political have engulfed almost every place , amplified by social media and re-amplified by media.
Note that Hindus get shot in their homes in Indian state of Kashmir too , the latest being 1 day ago.This eye for an eye will take anyone anywhere.
1. It does not matter whether the phone is full of bacteria or not (almost everything is anyway). If you are worried about it, you just need to wash your hands later on and avoid touching your mouth/eyes

2. If you don't want to hand your phone to a stranger, don't. If they hand their phone to you, it means they are ok with it.

3. Most of the time, when I am handling my phone to a stranger it's because I am in a foreign country, I don't know how to write something. There is a context behind it. I am not handing my phone and then moving away, so I can clearly see they are using my phone in the context.
InAppBrowser: TikTok injects code to capture all keystrokes, including passwords
Awesome. I would have loved to have had this when I learned SML by running through Okasaki's "Purely Functional Datastructures".

The type system and compiler eventually beat me into submission, but an LSP would have probably eased me into it.

I highly recommend that book by the way.
They tried to sanction a Monero wallet once and ended up sanctioning a transaction hash.

https://www.treasury.gov/ofac/downloads/sdnlist.txt

> Digital Currency Address - XMR 5be5543ff73456ab9f2d207887e2af87322c651ea1a873c5b25b7ffae456c320;

https://localmonero.co/blocks/search/5be5543ff73456ab9f2d207...

It's unclear how resilient Monero will prove to be over the long term but it's certainly looking stronger than centralized coin mixing services.
> For dormant account reactivation, they can ask the user for lots of details that are in the account. For example, "please type in email addresses of as many people as possible that you have sent emails to from this account".

Oh. no. I'd rather they just up an deleted the account, instead.

Google is already painful enough to get into old accounts that you haven't used for a while.

For a dormant account, what's the chances that you're going to remember the email address that someone used years ago? People have address books for that, and the address book is locked on the other side of that password prompt.

> During the 7 days, contact the users top contacted email addresses and ask them to reply confirming the user is trying to reactivate the account.

Yeah, nah. That's awful for several reasons.

It's another phishing-like prompt - "Hey joe bloggs is trying to log into their email. Do you think it's really them? Click here to let them into their account".

If you invert it, then you're at risk of someone with a grudge against you clicking the "No, it's an attacker" link. Even a friend clicking it because they think it's funny.

There's no way I'd want most of the people I email to have any involvement in accessing my account, without me being able to nominate specifically whom the system emailed.
> The goal is to keep software free of the bonds of scarcity inherent in physical goods. Because digital goods are virtually free to copy, they can only be limited by typical systems of ownership when artificially forced to. Software spread openly is better able to help everyone rather than just a few capitalists. Private industry has fought against this in its drive to grind profit out of everything it can.

No it isn't. You are describing the 'Open Source' movement which is the scam that the tech bros ran with to popularise and to get around the issues in the free software movement; which the latter has been a total and abject failure.

As soon as their own tools have been used by scammers, criminals, etc have always turned out to be for the ideals that they have fighting against; which is against the development of opaque, non-free surveillance software used against the general public created by governments, big tech, and the like. Both the free software and open source movement have hand in hand made no difference in stopping the surveillance and spyware that is proliferating today.

> The people driving the spread of crypto are zealous advocates of a system inherently opposed to FOSS ideals. Like many before them, they will push software freedom to the extent that it helps them and then relentlessly pursue its enclosure when it doesn't.

Yes. This is exactly the reason why 'free software' is a total failure and did nothing to stop the rise of cryptocurrencies which will advance more surveillance.
This guy was the most insufferable poster on all of LinkedIn. And that's saying a lot.
You don't need to be doing TDD to be writing tests!
For others in similar position as parent (i.e. in need for a hand held portable Linux computer) but couldn't buy a GPD device for various reasons(availability, cost, trust issues etc.); Then here are two recommendations which are just as good(or better?):

1. Buy a used smartphone with postmarketOS support[1]. I suggest Poco F1 if you want to make phone calls with it right away (or) Oneplus 6/6T if you can wait a bit long for it to be fixed. I use Poco F1 as a daily driver and these are the most powerful, feature complete Linux smartphones right now.

If your work depends upon tool adamant on glibc and couldn't be compiled for musl then Mobian works on the aforementioned devices[2] too.

Use a foldable bluetooth keyboard, case with kickstand; you can get just as productive as a GPD albeit more portable and also feel good about taking away a device from potential e-waste.

2. Buy a 11" used Chromebook (Mainly used in schools) which is supported by Mr.Chromebox's UEFI firmware[3], You can use any Linux with it but I use PeppermintOS for its light weight and OOB support for Chromebook. Of course any portable laptop could run Linux, But they tend to cost 2x-3x the Chromebooks.

[1] https://wiki.postmarketos.org/wiki/Devices

[2] https://wiki.mobian-project.org/doku.php?id=install-android

[3] https://mrchromebox.tech/#devices
Where did anyone say "applications written using React are functional"?
The major difference is that for nearly all other causes nearly all victims chose to use the thing. My own brother died during a jetliner crash (SR-111), not surprisingly while he was in the plane after deciding to climb in it. I'm sad about this but I sure cannot say he didn't decide to accept the risk.

This is not true for nuclear energy: even very remote bystanders unwilling to take the risk are majorly exposed. In other words those who build or agree are exposing those who don't (along with many generations to come thanks to plant decommissions and nuclear waste).

Moreover traveling to very distant places by land or sea is way slower, and more difficult/dangerous than by using a jetliner.

This is not true for nuclear energy: we already use other types of equipment (wind turbines, solar panels...) offering the same fundamental service (and we know how to alleviate their intermittency), without any measurable risk of major accident, no long-term dangerous waste, no dependency towards a combustible... Those very equipment, and this should not come as a surprise, are more and more preferred to nuclear: https://ourworldindata.org/grapher/nuclear-renewables-electr...

Iterating/improving does not guarantee constant enhancement, nor a progress on the long-term, as any software development specialist knows. The keyword here is 'side-effects' (discovering a bug, then fixing it... and by doing so inducing a latent and more dangerous bug). Even if it did there is no way to be absolutely sure of our risk assessment because being sure implies to know each and every defect/flaw, therefore the very decision to take (or refuse) the risk would entirely lay on trust towards the specialists, leading to a vast array of major challenges (to begin with: specialists will be both judges and defendants).

No, given the RBMK architecture the positive void coefficient isn't a major flaw. It simply implies that some ways to operate the reactor (letting it gain thermal power after reaching a given low-power stage) is strictly forbidden. Each and every reactor has limitations of this sort, mainly defined as dangerous maneuvers or states duly declared to the operators as forbidden.

This approach (positive void coefficient) is intrinsic to RBMKs, there is no way to operate a RBMK reactor under another principle, and (I repeat) many of such reactors ran for decades after Chernobyl, and some operate right now. Therefore the positive void coefficient isn't a critical flaw (which would imply to immediately quit exploiting all RBMK reactors).
Somewhat similar, but I owned a Toshiba Libretto back in the late 90s and the keyboard was quite compact. I could still touch type even though my fingers were all right next to each other, so it's not a deal-breaker.
Google's Helpful Content Update
I’m with both of you, but it is a real problem.

I know someone who has no problem getting back to the app they were in, but doesn’t seem to know about/use tabs on their phone. Since tabs don’t auto-close by default they often have hundreds of them by accident that opened one by one when they followed a link in another app like Messages or Mail.

I’m pretty sure they know about tabs on the desktop, though I’m not sure they use them. On the phone it seems to be just a little too “out of sight out of mind”.
> If _why chooses to do so they can go after anyone republishing their work

Given that they haven’t. And haven’t for years, I imagine they’re done with the whole thing.
Here in Japan there has been an explosion in QR code payment services over the past few years since the barrier to entry is so low (and traditionally credit card payments have had relatively low uptake compared to the west so it's seen as a wide open market)

It's extremely common to be confronted with a display like this at the register of a chain store detailing the bewildering array of supported payment options https://i.imgur.com/jmYrgHR.jpg
Because where else will you find a convo between a scammer and a bot that thinks it’s a banana?
> You're not exploring anything, you're not celebrating life, not producing any meaning. You just sit there, like a robot, pissing it all away.

I would suggest that meaning can be found, even if you are unable to transcend our human limitations in this insanely large universe. But I can tell that you are on a path of reflection of what a meaningful human life means for you, and that's exciting! I wish you the best!

(Don't read this as if I have it all figured out, because I most certainly do not)
You joke, but PFOS doesn't start to decompose until it's north of 400°C https://pubs.acs.org/doi/suppl/10.1021/acs.iecr.1c01504/supp...

At ppt concentrations in seawater, it doesn't seem worth it. PFOS remediation is for contaminated soil or industrial wastewater.
What are you basing “most” on? It’s kind of hard to tell, after all. Do you think that “most” is roughly the same by volume?

I’d bet that there’s a chance a majority of users aren’t breaking local laws, at least if you exclude small scale tax evasion, but it takes an awful lot of people who care enough about privacy to pay extra for it to balance out the $450M USD-equivalent which just one North Korean group is alleged to have laundered. People who care about privacy will use it some of the time if they remember but someone with a lot of stolen money is going to use it every time and that will start to dominate the transaction volume, especially any time gas fees go up and people who don’t need to decide they don’t care that much.
In-app browsers are a huge mess and security/privacy nightmare. Browsers implement a security sandbox. In-app browsers break and circumvent this threat model in nasty ways. I hope this gets the same attention as cross-site scripting (XSS) attacks and browser engines implement strict countermeasures by default locking WebViews to the equivalent of an Incognito/InPrivate tab.
> 1. Buy a used smartphone with postmarketOS support[1].

having an attached keyboard is the whole point though
>2 separate teams get the requirements; one team writes code, the other write tests.

This feels a bit like when you write a layer of encapsulation to try to make a problem easier only to discover that all of the complexity is now in the interface. Isn't converting the PO's requirements into good, testable requirements the hard technical bit?