skysight-inc/HackerNews huggingface dataset:
I received a phishing email like this two weeks ago (different text and phone number but same scheme overall): https://pbs.twimg.com/media/FZWERGlXgAIUVF7?format=jpg

It took me a while to figure out what's going on, these were the steps that I took:

1. Examined the headers which looked legit, because well,
it's really from paypal.
2. Googled the phone number, and could not find any
mentioning of it on Paypal (though I must say it did
seem like a similar number to at least one of Paypal's numbers)
3. Checked Truecaller and found no record of this number (I later updated
this number description to alert other people from phishing attempts.
4. Logged in to my account, just to make sure (without clicking the link),
and found no evidence of any funny activity.
5. Googled the phishing text and could not find relevant results,
yet Paypal itself did have a page with very similar text (well thought out phishing attempt)
6. I stripped the link from all query strings, opened it in incognito,
and voila, I saw that it's an invoice page that anyone can access and pay.
7. I tried to click the "Feedback" button on that page,
which I expected to show me an option to report a phishing attempt but instead
it just did nothing, absolutely nothing, on both FF and Chrome
(not even a console error that I can remember seeing).

Some conclusions:

1. Paypal are using _exactly_ the same email address for invoice notifications as other formal emails that I get from Paypal.
2. Paypal are not framing the invoice in any way to indicate that it's originated from the invoice sender,
thus allowing fraudsters to convey the same official tone as the rest of their email.
3. Phishing@paypal.com is how you report phishing attempts to Paypal though they do I'm not sure what effect reports have.
I sometimes feel that way about spending time on HN. :)
you don't have to do anything unless someone is holding a gun to your head. Is someone holding a gun to your head? well then they're not your friend and you should unfriend them. i go on facebook maybe once per month or 3 or 4 times per year. not a single friend has complained about that.
Apple discloses serious security vulnerabilities for iPhones, iPads and Macs
I did this for my language because reactivity demands it.
Rarotonga is ~1000km more distant from LA with a similar great circle route.

By eyeball, there’s only a short segment where Hawaii is closer than LAX or PPT/RAR.

Kiribati might be an option but I don’t know if they have a runway sized for a 767.
if you like windows 2000 as a pinnacle of GUIs, you should be quite happy with the current stable versions of XFCE4
Batteries contain PFAS? Now I gotta test everything.
With age comes the wisdom on how to best apply the learning.
Ooohh, "power" and "efficiency" cores!!

AnD wItH tHe sAmE nUmBeR oF nAnOmEtErS tOo lol
They could do far more things to solve this issue...

For dormant account reactivation, they can ask the user for lots of details that are in the account. For example, "please type in email addresses of as many people as possible that you have sent emails to from this account". Which cities have you previously logged into this account from?

All info would be optional, but the more the user provides the quicker they're going to get in.

When the user has provided enough information to be fairly sure that it's a real user attempting to login, then start a 7 day countdown. During the 7 days, contact the users top contacted email addresses and ask them to reply confirming the user is trying to reactivate the account.

Hire attackers to try and break into old accounts, and use their input to find the likelihood of each type of information being correctly given by the real account owner and an attacker.
Have spoken to some Chinese engineers in the Bay Area and most see Uyghurs as terrorists (they will point to terrorist attacks) and do not know about (do not believe) the camps or oppression.
It is fascinating to get cell service in countries that don't have net neutrality. You can buy a 2GB/unlimited calls and texts plan from the largest Mexican operator for US$15. But after that you can get a plan that only allows social media like WhatsApp, Facebook, Instagram for US$2.50. As long as you stay within those walled gardens you pay almost nothing. Hard to imagine anyone breaking that monopoly when the alternative is more than 5x the price.
A non straw man of your first argument would be the definition of “rape.” Most people believe forced sex should be illegal.

But rape also means consent, in America, so you get “statutory” rape, and Romeo and Juliet laws, and different handling of intoxication all over the world. If two people are black out drunk, can either rape the other if they ostensibly agreed while intoxicated? Does it matter the sex of the participants?

Look no further than any Reddit post and you will see that at least some people think a 17 year old male having sex with a 25 year old female teacher should not be considered rape.

The definition of rape is unequivocally political.
We used to have artistic masterpieces for icons compared to the near incomprehensible "silhouette" style uninspired hieroglyphs we call icons today.
I still have a warm spot in my heart for Delphi. When I bought a license for Delphi 1.0 running on Windows 3.1, it was like a revelation to me. Having previously used Borland Pascal on DOS, I found it unbelievable how easy developing Windows UIs can be. I developed a 16-bit business app (accounting, inventory management, customer records) on Delphi 1.0 which is still running today (you need a 32 bit version of Windows 7 though). The bundled Borland Database Engine (Paradox desktop) was decent enough for structured data management in a single-user application. The best feature was the compiler that sprinted through my source code, turning it into a statically linked executable in mere seconds (on a Pentium 60).

While I have long moved on from Pascal, many great ideas of Delphi live on in C# and Typescript.
Is there a list of tips for users to keep them safe while using email?
Hello,

I'm looking for a list of tips that I can send to users to keep them safe while using email. For example, check the sender to verify who the emails from. Or checking the URL to make sure it's legitimate.

Thanks,
John Gruber
GitBit.org
These new 0 day flaws are:

CVE-2022-32893 – An out-of-bounds issue in WebKit which. An attacker can trigger the flaw by tricking target devices into processing maliciously crafted web content to achieve arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVE-2022-32894 – An out-of-bounds issue in the OS Kernel that could be exploited by a malicious application to execute arbitrary code with the highest privileges.
> It's just like teflon in basically every way.

Hopefully not in the bad ways? Is the "ceramic coating" proven to not be harmful?
This is a great personal-experience write-up of an independent photojournalist attending a rally for something akin to "the other side" (the author carefully doesn't articulate which side they belong to, other than that Trump-rally-attendee is far from their comfortable midpoint).

The piece describes the experience and the in-the-moment feelings of the author's experience simply. A good read, though I definitely also want to read the piece written a few weeks later with the benefit of time to work through the emotions and thoughts raised here. (Assuming that such a piece is going to exist!)
Ha, I just wanted to bring up Pure Data as example. It takes backwards compatibility very seriously. Patches written 20 years ago should run just fine on any recent Pd version. In fact, Miller Puckette strives for at least 50 years of support. Pd just had its 25th anniversary, so there are at least 25 more years to go :-)
I knew of a kid in elementary, this was in Chile, ordering missing Lego parts from the catalog. Was unthinkable. Pre-internet, I think mail or international phone call, something crazy. Unthinkable.

Plus the company introduces a wait. No blame on hot wheels, they (I think, not sure but want to believe) try to live up to being a cool toy. Good gift. They want to be a good gift, like get a kid saying "Ohhhhh, damnit I mean gosh-darn-it, sorry, hot wheels cars, real cars, wow oh wow oh wow oh wow!" Jumping up and down. But it's still a wait. So the problem is, reminiscing upon childhood, children make promises to themselves about holding out until birthdays and Christmas. So if they break that promise with themselves because a "company" (what's that?) "makes an error" (like on a test?) then it's like...nah, "I'm not a happy kid."
Yes, but if you're distributing revocation lists you might as well distribute new authorized_keys files?

Or wait, maybe I'm misremembering... does sshd support querying remote revocation lists? If so, point conceded. You still have to have to worry about the scenario of DoS or similar preventing it from fetching new lists. (I don't trust revocation beyond as being a QoI thing.)

I do favor the CA approach with e.g. 24hr expiry just because it's 'fail safely by default'. Of course one should ideally use much more frequent renewal, but OpenSSH has its limits wrt. that. (Kerberos seems saner in terms of results, just not in practice because it is/was so obnoxious to set up.)
Because anybody buying at an industrial level is wise to it being untrue at a gate length level. Plus it's easily available to consumers that the gate length isn't that size. Plus it's bullshit that at some level everybody buys, even Intel and TSMC in some roundabout way, at the highest levels for sure, though not at the ground level. At the ground level even eg 180 nanometer has virtues that 28 nanometer lacks, it's totally different things, different texture different everything, the graybeards know. They know. Then there's different radiation resistance but that's too obvious.

So if everybody believes in the nanometers, nobody cares.

Until you hit a wall.
Nothing beats cast iron. They aren't hard to take care of.(In spite of the rhetoric.) Actually easier, once you get a good surface on them. Pots, frying pans, woks, etc. They work very well. The most important thing is to give them time to heat up. Once they are, they hold the heat very well, so can cook at any temperature.
It appears that it's not so much attempting alternative identities as it's trying (potentially nonexistent) keys for different ciphers.
Most efficiency gains come from manufacturing fab process, not whether it's ARM or x86.

M1 is the only 5nm processor on the market right now. Yes, you will see quite comparable performance once Intel and AMD get to 5nm as well
Cast iron works as a non-stick with a bit of practice.
> but it's not like the final product (Teflon) is safe to ingest either

Sure it is. I don't think a less toxic material than Teflon even exists. It's toxicity is comparable to water.

The LD50 of Teflon is > 11,280 mg/kg. Water by comparison is 90,000 mg/kg. They were not able to measure the exact toxicity because it's impossible to eat so much.
I don't get the point. Is it something not testable? If it's testable, it's TDD-able.
"Comparison of the theif of joy." What better way to compare then hd photos on Facebook, Instagram, etc
Sounds similar to many encrypted HLS streams you see on the internet.

If you're savvy enough to watch the network tab in the browser devtools, you can grab the key and easily decrypt and assemble the chunks. You can even find reference implementations on github (hls.js for instance).
This. How easy was it to put together a well-functioning Windows desktop app in Delphi, compared with the complexity of developing a Web app these days?
> "My husband and I have a right to trade stocks with insider information, despite numerous professionals being restricted from doing so. Rules for thee, but not for me, because I'm a congresswoman."

I agree with your message, but one nitpick would be to not use quotations for something not really said by the person you are referring to. I was confused for a moment if that was a real quote.
In Japan, the cheapest I could find was 68000 JPY which is about 500 USD in the current exchange rate. It's better than your situation but still.
I’d be interested in hearing a comparison of how researching go about establishing causality for a smoking-cancer link vs. a Facebook-depression link. Obviously, it’s hard to do a proper randomized controlled trial in both cases. Anyone know more about what kinds of methods can be used? I think it would be useful to help this conversation be a little more fact-based and less ideological.
If it breaks, it breaks; but who knows! I once accidentally dropped the Eee from ~1 metre of height, chipping off some of the chassis plastic, but the computer continued to work.

Stuff like this was why I keep buying Asus. I was once watching an engrossing video and put my zenbook ontop of a washing machine. The top was slanted, so it slid off and kerb stomped the concrete floor face first.

Zero all effects except for some scratches. I still use it.
> As you know, causes for flight diversions can range from medical (related to crew and passengers), weather (unlikely), unruly activity (we would have heard about that)

Honest question, not expressing an opinion: for "unruly activity" how would you have heard?

I was on a SFO-Toronto flight, and it diverted to Denver because a passenger got unruly & they had him taken off & arrested. Would this have appeared anywhere online?
which is in turn referencing the plot of https://en.wikipedia.org/wiki/Zero_Hour!

Surely one of the great comedies.
IPv4 doesn't help. If every PC had an IP address, you could have a blog on your own PC, leaving it on overnight - even a laptop.
Dan Price, CEO who cut his pay so workers made at least $70k, resigns
Honestly could be anything. 5nm's long tail is surely tiny, but it's surely there; it can't be all smartphone SoCs.

For example (just to chuck some more entropy on the pile) googling "tesla 5nm" finds a bit of an indication they're doing things in that space.
Animals in the wild don't typically die of cancer, so that's probably not much of an adaptation evolutionarily. Even if they did die of cancer, it would likely be after they've reproduced, which means there's no selective pressure to develop the adaptation.
M2 is just an overclocked M1, and thus requires more power as well. Just the same as Intel when they boost clocks for performance

The manufacturing process matters far more than whatever tweaks they make intra-generation. M1 is 5nm, Intel is 7-11nm
Exactly what I was going to say, it costs 700 CAD... not sure where OP got 300 EUR from. Those specs, even on a normal laptop, go for around $600
Uploaded a file which was part of an exploit as a resource for a unit test for the mitigation. Months later, the file was added to the windows defender definitions that stopped everyone from downloading logs from their failed tests.
Lockdown effects feared to be killing more people than Covid
I ended up hand sewing several patches onto my synthetic $100 MTB shorts just last week. No guides, and the process was excruciatingly long, but it turned out fine. Give it a shot! I gained a newfound respect for sewing.
Normalise early-stage re-writes.

(Only slightly joking)
I would argue that the existence of Bathory alone is good reason for having a separate Viking Metal category.
Came here to say the same thing. Great article btw. Finished it with examples/js disabled :)
I switched to stainless steel, it is more to maintain, but it's not horrible. I also use a ceramic pan on very low temperatures to cook really stick stuff like scrambled eggs.
In that example, we may as well compare a thermonuclear weapon to a conventional one—the scales are gargantuan. In my opinion a more apt comparison might be the TI-84 calculator, which was ~350x faster than the computers used in Apollo.
What bad ways? Teflon is not harmful. Teflon is not the same as PFAS, and Teflon cookware does not leech any PFAS into food. See my other reply: https://news.ycombinator.com/item?id=32515717

And to answer your question, ceramics sometimes have heavy metals to get bright colors (cadmium mostly). Make sure to buy from a reputable manufacturer.
I say this as someone who has a Simula One on preorder, but yeah I think the form factor will need to get a lot more compact before I’d use a VR computer on the go in the same way I’d use one of these. Excited to try it out regardless!

It definitely could be though, and not having to have a display that’s physically as large as it looks virtually could be a big advantage. I hope there are FOSS options like Simula when that day comes and we’re not all stuck with the tech giants like we are with smartphones. :)
What's inherent about this problem that wouldn't benefit from chunking things into digestible, iterative parts that lend themselves nicely to the TDD approach as I described?
From a quick look it seems like you're doing gl.createBuffer() in a loop each time you're drawing, and never call gl.deleteBuffer(). It seems like WebGL will call deleteBuffer() automatically when the object is garbage collected by the JS runtime, but calling it explicitly when you're done with it will probably fix this particular issue.

Also a suggestion, try to allocate your buffers only once on setup, and reuse them each time you're drawing. Just call gl.bufferData() in case you need to push new data. Don't use gl.bufferSubData() unless you come up with a clever way to avoid pipeline stalls such as maybe a rotating queue of buffers. This approach might or might not improve performance, but I see little reason not to do it.

To make this work you prbably have to create a vertex arrays object explicitly using gl.createVertexArray(). This object is used to capture the vertex attrib pointers. Call gl.bindVertexArray() before gl.enableVertexArray() and gl.vertexAttribPointer(). Later, in a simple draw you need then only call gl.useProgram() and gl.bindVertexArray(), but there is no need to bind buffers or set vertex attrib pointers.
So? Many apps don’t need localisation. Responsive UIs weren’t all that important in the mid 1990s when monitors and their resolutions were all in a relatively small corridor. I remember 20 inch CRTs to be the absolute high-end that few could afford. Most PCs came with 14 or 15 inch monitors, 17 inch later.
Ceramic itself is safe. Ultimately for a coating, the safety depends on what's underneath if/when it wears through.
I got a couple different “ceramic” coated skillets and they were the stickiest things I’ve ever used. They went straight to the recycler.
Absolutely, I'm convinced people will keep on eating insects as wealth increases.

It's not out of constrain that people have them in their diet, but it's part of their culinary culture.

Of course, as people get wealthier, new habits form, they are able to afford previously unattainable food, and surely they're will a shift in the diet, but eating insects will not be eliminated.
Yeah, having used PayPal invoices for Reddit’s r/hardwareswap, all you need is an email address and you can bill someone for anything via PayPal. It even gives you their shipping address after they pay. Very convenient for the happy path, but definitely ripe for abuse.
Long-term compatibility plans for Scala 3
It's likely that there are many more axes than 2.
I’ve been that person who asks “How long has this been here? …So has anyone done anything about it?” and always the explanation was that everyone thought it was someone else’s job.
It is undeniably difficult to abstain from Facebook. There are local events, family events, businesses, family members, etc. that only operate within the walled garden. And the walls continue to rise, making it more and more difficult to peer at internal content from without.

I've been Facebook (and Instagram)-free for years now, but my personal relationships have suffered for it. Fortunately Facebook is its own worst enemy here, since it keeps making its core products worse and worse for personal relationships. Ads in Messenger, suggested posts, hiding content from friends, dark patterns... it adds up, and over the past couple of years more and more of my friends have abandoned Facebook. Those friendships have largely rekindled. But the heavy users remain jacked in to the News Feed, utterly addicted, to the point where it's difficult to even reach them through another medium.
I’ve heard something similar once, but I don’t remember where:

“Write it three times. The first time to understand the problem, the second time to understand the solution and the third time to ship it.”
When they take new designs to user research, one of the questions asked is "Which one of these options looks 'cleaner' in your opinion, A or B?" And when one of the objectives of the org has been declared as "clean up the UI" I'm sure you can imagine why we end up with the disgusting hamburger menus everywhere. And the people who championed a 'win' from such a change will parachute to the next company and do the same thing.
How to destroy ‘forever chemicals’: cheap method breaks down PFAS
> I think this cannot be done with IP/TCP because of the reliance on each individual to pay for both active web servers and some kind of DNS config.

You can pay someone for that, somewhere around the order of $5 a month, probably less, or free but ad-supported.

And that's more or less what Facebook is, except we pay with our data and attention on the back end rather than our dollars up front. The product might be rather different if we did pay in dollars, and for that reason I suspect digital protocols aren't the fundamental problem.
Cast iron or enameled cast iron.

Cast iron really doesn't require much maintenance. You can season it and never wash it and be delicate with it like a fancy chef, or you can abuse the hell out of it and it doesn't matter because it's basically indestructible. The only thing you can't do is let it sit in water or run it through the dishwasher. I mean, you can, but it rusts… which also isn't that difficult to clean if it happens.

Cast iron and a green scotchbrite pad or a stainless steel scouring pad and you are good. You can use hot water and soap to clean it. It will deteriorate any "seasoning" but so what. Clean after use, dry and store away. Takes maybe two minutes. If you want to get it seasoned so it has some non-stick to it you can, but you don't have to.
It's a pretty good guess, he has been found, reached out to, etc. He just wants to move on from that time in his life.

So it must feel really weird to him that people go to so much trouble to keep his old texts alife. It's like the whole _why thing is now completely separate to him and it's now about the idea of him and people care more about the idea of _why. It kinda feels like making a tribute site/song/whatever to your first love years a decade later.
@mike_d you are right I made a very bad assumption about the size of the environment :)

@antongribok sounds like you have it in hand having seen your subsequent comments just didn’t want to leave someone assuming that error rate was normal in the smaller clusters that are more commonly but not universally the case. Evidently not the case for you :)
No, Sundar can't solve it. He was brought on to bring rapid growth to google at a critical time. That meant rapid revenue growth but also rapid headcount. Unfortunately, as you add more people at Google, it does not scale productivity- productivity decreases with each additional employee above about 50K or so.

I expect Ruth to be brought on as CEO eventually and she will aggressively cut headcount until the remaining folks are motivated to work more.
I’ve seen news reports of this many times. I don’t think there’s anything to force the reporting, so maybe it’s missed sometimes?