skysight-inc/HackerNews huggingface dataset:
You know, the longer I'm at this, I see more and more effort thrown at developing security and one thing remains the same - you've got a user sitting at a machine with network access and the ability to execute code, and sometimes you can trick that user into executing code. I guess the bigger the company, the more users which means more targets/chances.

For decades I've been told that security through obscurity is no security at all, but in the back of my mind, I think it might be the best thing I've got going for me working at a small place. Though I should say, that's far from being our only security - we do work at it too.
Oh, come on. No one considers Seamus Heaney a “British poet,” even though he was born in Northern Ireland. He’s Irish. I don’t think the Welsh or the Scots place much emphasis on being “British,” either. It’s a perfectly sensible designation to call Stoppard an English playwright.
I live in a Spanish-speaking country, so Google defaults to Spanish Wikipedia. I forgot to change it to English like I did with my second link for the HN crowd. But you are incorrect yet again. https://en.wikipedia.org/wiki/Rygar ctrl-f "Metroidvania"

My point is that you create a lot of noise when your "corrections" aren't actually correct. It's basically nerd sniping to be wrong on the internet, especially about games.

Yes, I'm contributing to the noise. But I'm correct, so it's okay according to unwritten HN guidelines.
Agree. Something primal about it I think.
How about Arcan? [0]

It seems very well reasoned, has stable API, excellent backwards compatibility and does not require GPU and i5 as this one might? Its author also has proven record and actual experience, which I'm not sure authors hpf TFA have, judging solely from their writing.

0: https://arcan-fe.com/
> And you need the private keys to conduct business so obvi they can exit the HSM

While I agree with you in general, this is false; the whole point is that the HSM can sign transactions using the keys inside it but will never expose them to outside.
NBA2k is over 100GB. Sports games seem to do this a lot. It’s obviously due to the art assets that AAA roll out but there’s gotta be some way to trim the fat or at least do it incrementally.

“Simple” was probably a bad choice of words.
Thanks for this recommendation. I just ordered a copy.
The incident in question is generally believed to have been a weapons test. They deliberately hit a satellite with a rocket to see that they could.

It also created an insane amount of junk in a high orbit that won't deorbit any time soon.
It’s too bad the user experience across devices sucks. The best experience by far is a yubikey nano since it is mostly permanently attached to your laptop. It’s always there and you just quickly tap it. Love it.

Of course that doesn’t work with my iPhone. So I guess I need a second NFC yubikey that stays on my key chain in my pocket (which I don’t have since I don’t carry keys.). So then I have to remember to register both yubikeys. Then every time I have to login to GitHub or whatever on my phone I have to pull out my keychain (which I don’t have) and tap it on my phone.

I wonder when I can just get a virtual yubikey built into my phone. No extra device. My phone is my device. It kind of sounds like what Passkey is but I don’t want to pull out my phone to auth my laptop.

I really loved the idea and convenience trade off of SoftU2F. Too bad it’s dead now.
Pretty much none of that. What exists is a whole lot of money, a willingness to lose that money if a bank makes bad bets on the trust and security of a customer, a bunch of laws to adhere to, and willingness to go to jail if those laws aren't followed (or, perhaps willingness being the wrong word, an understanding one will go to jail if those laws aren't followed and protected parties lose money as a result ;) ).

In short, it's a different category of risk than the category that an individual business or even a business that is acting as a middleman for transactions takes on. And it's a different category precisely because most of the solutions aren't technical; they're legal, social, and financial. If a bank gets screwed it just gets screwed; even if the law intervenes to deal with transgression, money is often just gone as a result of such fraud. So they are comparatively more conservative in their decision-making.
they should set up a fractional reserve system, where you deposit your valuable cards at a card bank and get a "card voucher" you can then use to play actual games with. The card bank could then lend out the cards to other players for profit.

over time, you may not even need the actual cards anymore and just have the vouchers.
Uber investigating computer network breach – report
So bitcoin has moved to proof of stake?
Right but 50% of people who had long COVID had experienced “worry, perceived stress, or loneliness” in the past ( not ti mention depression/anxiety) I’d expect that number to be much higher.
> In the world of blockchain gaming, it's trivial to build tools

It's not trivial, because making fun metagames is hard, because game design is hard, and blockchain is not a shortcut to it.

> I can host a small bit of static HTML that gives users the ability to battle cryptokitties

This is backwards. A game about battling kitties must start with kitty battling gameplay that is fun. This is like discussing the programing language -- who cares? Tell me how your game is fun.

Blockchain won't help you at all there. Nothing about it makes anything "fun".

You are proving the other commenter's point: blockchain is not a special sauce for games. Whether a game is enjoyable or not has nothing to do with blockchain. In fact, it turns to be the opposite: if blockchain is involved, you can almost bet there's very little gameplay at all, because that's not what the developers care about.
Nah, it was about what the big name exchanges annointed, and that was decided by a cabal in which the big miners were significant players.
Run a real card for a real amount and write a check to the person whose card you used. Do this multiple times with different types of cards.
> Sadly, Qualcomm was very bad at implementing caches, but that’s a story for another day.

Anyone know what that story is?
Someday it could be this site that faces the same threat kiwi is facing right now because you will eventually say something lucas' ilk or whatever elites behind the scenes don't like then you'll understand too late.
Yet another unreliable, overcomplicated piece of machinery managed by incompetent carriers, with terrible security and privacy properties.

Our goal should be to turn cell carriers into dumb data pipes. They have demonstrated repeatedly that trusting them with more is a bad idea.
Here's a different way to get to the same result, without knowing various densities, just with some rules of thumb.

The first rule of thumb is that for a given substance that has both liquid and gas phases, the density of the liquid is about 1000 times higher than the density of the gas. It's not exact; for water the density of the liquid is 1000 g/l and of the gas is 0.8 g/l, so the actual ratio is 1250, but 1000 is easier to remember.

Second rule of thumb is that our density is about the same as the density of water (it's slightly lower, since we can float, but barely).

Third rule of thumb is that the density of a gas is proportional with the (average) molecular mass of the substance that forms it. Air is made of 20% O2 and 80% N2, which have masses of 32 and 28, so it's average molecular mass is about 29. Helium is just He, with a mass of 4, so air has a density about 29/4 higher than Helium, which is 7.25. Or Helium has about 13% the density of air.

The same rule of thumb is to get the ratio of water vapor and air. Water has a molecular mass of 18, and air about 29, the ratio is 29/18 = 1.6. (By the way, this approximation is surprisingly correct, the actual ratio is about 1.605; the ratio for air/helium is also very close to 7.25; using the numbers above it comes as 7.22).

So, 1kg of human is about the same as 1kg of water, which is the same as 1 liter of liquid water, which is (rule thumb 1) about the same as 1000 liters of water vapor. 1000 liters of air will be about 1.6 times as heavy (rule thumb 3), so a balloon filled with vacuum will be able to lift about 1.6 kg (of water, or human, it doesn't matter, a kilogram is a kilogram). But the balloon is not filled with vacuum, it's filled with helium, which has about 13% the density (rule thumb 3), or about 0.2 kg. So the buoyancy of the helium-filled balloon is about 1.4 kg for each 1000 liters. (If for some reason we remember that water is actually 1250 times more dense in liquid form than in gas form, rather than 1000 times, we can divide the 1.4 by 1.25 and get the 1.1 calculated above). If we throw in some adjustment for the mass of the balloon itself plus the gear around it, and a reasonable rounding for our imprecision, we get to 1000 liters of helium for each 1 kg of mass.
> Why can't these hypothetical powerful people rent time on a mining farm?

They can, but so can the rest of us. Unlike under PoS.
I use the pi for storage (external 4TB USB) and minidlna to show on network. Playable by VLC, Roku and other DLNA aware devices. The RPi is headless.
I wonder if Sony is now going to rip out the PS2 emulator.

They've removed features before. They tore OtherOS out of the PS3.

I don't see PS2 compatibility as being sacred to the PS5.
Dunno, I did hulu plus ... till they added ads and cancelled.
Yeah of course, de-orbiting or grave yarding a single piece of debris is doable for a few million dollars right now, but we are talking about a large fraction of 900K+ pieces. That's the really hard part.
It will be a solution for everyone running a legal business (i.e. one that doesn't impose significant negative externalities on others). Making life harder for criminals is a feature not a bug.
https://en.wikipedia.org/wiki/Tulip_mania
“A fool and his money…”
This is why California has property tax grandfathering for continuous owners and I fully support it.
Quite true, not sure why you're down-voted. Colonial empires managed to get away extremely lightly, with respect to putting right their wrongs.

Compare that to Nazi Germany, where reparations were paid in significant quantities, and kids in schools are still taught to be embarrassed by that section of their country's history. Whereas you get the sense that Britain is still, in some ways, proud of its rather ruthless and barbaric empire.

Well, it was a long time ago, so why bring up the atrocities now, eh? Thanks for the wealth, and here are a few meaningless pennies in aid. You can consider us your heroes now. /s
At first I got excited that maybe someone finally developed a modern TV with no Smart TV features at all but nope it’s just linux crapware I’ll never use because I just plug in an Apple TV box anyway.
> If your mortgage company started foreclosing on your home incorrectly, or the title company said "new phone who dis?" when you tried to sell your home [...]

Right, but that's a totally different situation and not one that would involve protest (it'd involve lawyers/lawsuits and court).

The problem with public shaming is the presumption that the people doing the shaming are in the absolute moral/ethical right (which is always subjective) and that anyone affiliated with the decided perpetrator (in this case, Stripe) are at fault. That's the problem with showing up at their office as an angry mob of people. An uninvolved worker could come out of the building and the mob could start shouting and attacking them even though they're a low-level employee who had zero involvement.

Doing it online is hypothetically better, but again, it just introduces a lot of unnecessary negative energy that is very unlikely to remedy the actual problem (and in extreme cases can still spill over into reality).

I agree that threatening someone's livelihood is bad, but in this specific example my immediate question would be "what were you or your customers doing?" If it's even remotely in the grey area of the TOS (however foolish/restrictive that may be), the owner has a responsibility to consider alternatives up front and communicate the potential for those to be necessary to customers.
What percentage of Android phones out there can use RCS?
The other thing of note with this is timing as yesterday an ex attorney testified against the ex security chief for the 2016 breach cover up. And the next day there is this breach. So based on the damaging nature of the testimony where further discovery could be needed it seems a bit too convenient to have a breach the next day. So is it possible this is a fake breach in order to scrub further damaging evidence of others involved in the original 2016 cover up? Something to think about plus the notice seemed to go up in record speed.
My understanding is all the current plans have no ads and will not have ads going forward. There's a new cheaper tier coming with ads, that doesn't bother me. As long as I pay what I consider a fair price and see no ads I'll be happy.
The bigcorps don't make exceptions for Tiny Tony's. If you work at these sorts of firms, you should probably start an anonymous exposé blog, it would be enlightening for the rest of us. It would also probably help get things fixed so they could avoid further embarrassment before it becomes a real problem (like in this case).

I bet you could make a fair sum from the ad impressions alone, and feel good knowing you were acting as the force multiplier for positive change.

Edit: Your personal jabs aren't in the spirit of a collaborative or curious conversation. You've revealed yourself as just another 007 wannabe. Boring.
Obviously it's impossible to burn fossil fuels to capture carbon and remain carbon-negative. But that doesn't necessarily hold true for nuclear, solar, and wind. It might still be true, but it's plausible.
thanks so much for the encouragement. are you across this space? If yes I would love to have a chat with you
Anything bad they did they did with full malicious desire and intent, and anything good they did is either ignored or, as I said, discredited ("they only did it because they were forced!")

If they give up the Koh-I-Noor to whomever plundered it before them, ten years later someone like you will be claiming that it is hilariously naive to believe they just gave it up.
Unless you're optimizing for sexual desirability of offspring, which essentially means you look for the same characteristics the majority does.
There are loads of non-smart large displays on Alibaba. Just a dumb display with two HDMI and and DP maybe.
== Those numbers are so horrendous that you'd be better off going to a bar and hitting on every single woman. You could get shot down 50 times in a row, yet as long as you want to 3 bars in a week w/at least 20 approachable women each, you'd still have a date within a week, which is already 1/3 of the success the guy in your example had in a tiny fraction of the time.==

Treating relationships as an equation to be optimized might be the real hindrance.
Obvious conclusions like exercise good and harder exercise better
> Math, when done well, is based on a logical foundation that makes it understood by its intended audience. NO, they are not just making it up or blowing smoke.

I think you may be misunderstanding what the author is trying to say, or, rather, what part of a mathematician's activity they're trying to discuss. Mathematicians are not making it up, in the sense that we're not engaged in some elaborate game with shifting but meaningless rules. The final product of mathematics is fully as polished and rigorous as its weighty presentation suggests.

However, the act of doing mathematics is, or can be, messy, non-rigorous, and nonsensical on the way to discovering that perfect polish and rigor. Much like the old adage that, if you never miss a flight, you're spending too much time at the airport—if every bit of a mathematician's work is up to the full stands of rigor required of a final publication, then that mathematician is not doing the best work that they could do.
Agreed, plus it raises this question: why would any gaming company cooperate with an API that effectively removes their control over their assets and enables competitors and third parties from building on top of them without requiring authorization?

I can only see the "open API" benefit for free open source games. So it wouldn't have helped Vitalik and his famed WoW sword.

Then again, making fun games is hard, and there's no escaping it. So maybe it wouldn't help free games either.
It didn't lower housing prices because foreign buyers were single digit percentage of all transactions. Canadian real estate is mostly propped up by Canadian buyers buying multiple properties by leveraging existing equity.

It's not unusual for someone to use their HELOC to buy and 2nd or 3rd property and rent it out.

Of course with rising interest rates (and mostly variable mortgages) that's all coming home to roost now, al la USA in 2008.
Somebody make an SMS answering machine that just replies to texts with "Hello, this is an automated reply! I don't use SMS for text messages; please download WhatsApp in order to message me."
I'd be interesting in testing it and providing early feedback.
>war zones

Were we at war with Yemen when this happened?
Is it known if Valve is contributing things they've improved/fixed upstream.
Complaining about UIs on forums that the people responsible for the issue will likely never see is not and never has been constructive criticism.

It's a gripe, or a whinge, which is fine and open source shouldn't be immune to it. Although I will say that open source projects in my experience tend to be much more responsive to bug reports and actual constructive criticism from people paying them $0.00 than proprietary software projects are.
With pow, the cash you burn on that mining farm is gone after you give up on your vote or your attack. With PoS, the simple act of being rich means you get more vote, you don't need to burn it or spend it. You even get richer while you do it
Moved to New Hampshire lately and I love it. No state income tax, no sales tax. Property tax is a little bit higher than where I used to live but on the whole I worked out that I still save $10k in a typical year in tax burden compared to the same value property there, not even considering the lower COL in other areas. Working from home in a quiet peaceful hobby farm in a cheap state is living the life.
If you're not cheating, you're not trying.
The CEO buying a burrito and paying for it with their own money because they want to eat a burrito is not revenue inflation. I can't even imagine what kind of fantasy world you would have to live in to believe this rubbish.
I can't tell if this is sarcasm. Social change can take centuries and I'd argue this trend is moving in the other direction.
There has been some applications of machine learning in the field of molecular dynamics (and therefore protein folding simulations). Here’s a review from 2020: http://public-files.prbb.org/publicacions/ca66c5f0-0f76-0138...
> You get the feeling that this was likely due to his race and so you don’t hold it against him.

What would cause someone to get this feeling? Does a candidate just have to indicate that he wanted bigger projects but didn't get them? Seems like the exact same thing that would happen to someone who was not ready for bigger projects.

Would you do the same thing for a dev with a strong southern accent who worked at a company with mostly left leaning employees?
Yes thank you, couldn't remember their name
Exactly. Not fringe. Part of the normal struggle for existence.
You care about 1 in 1000 ? Did you know that 660 out of 1000 watts of primary energy used to create electricity are wasted by the time the electricity arrives at the customer meter? (source: https://www.enerdynamics.com/Energy-Currents_Blog/How-Much-P... )

Logically, you should be 660 times more "horrified" by this waste than by cryto mining, and yet you are not. In fact most likely until today you were not even aware of such waste. This is what bothers me the most about these discussions. People have priorities in the wrong places. You want to show you care about waste? Then start caring about the most important problems instead of being laser-focusing on 0.1%.
You don't typically don't want to switch output resolution to match the resolution of whatever your outputting on modern displays, but instead want to match the panel resolution and software scale the content. You're way too likely to confuse the monitor trying to match resolution. There's something to be said for matching frame rate, but there's even more dragons in that practically.
Usually the datacenter was manned (sometimes by guys with guns) and they had various mechanisms for ID verifications.

And they had an entirely separate IT setup that wasn’t related to yours.
You are in for a big surprise if you think you can airtight anticheat. Never going to happen.
You think that will change anything?
Last I heard Pinecone doesn’t even support full text search, let alone hybrid indexes, what do you think you are disproving exactly?

Real-time upserts on hybrid and vector indexes is very unusual, please link to how you do this.
I would mind, because possession is nine tenths of the law.
> I don't see why it would be an issue for Canada or the country of origin, even if you do it repeatedly year over year

Unless you're intimately aware of the intersection of tax and immigration law between Canada and every other country on the planet, that's a rash statement to make.

> Letting your employee be out of the country for 3-6 months every year on a tourist visa is a lot different from actually getting incorporated in that country and paying income taxes there.

Except that the company's responsibilities may extend far beyond just incorporating and paying income taxes. Every country's tax system is different and weird.

Companies don't require their employees to tell them their real address just to be mean, or to prevent labor arbitrage. They have genuine, legal reasons to do this.
On hybrid indexes with full text and vector support?
Eloquently explains how I’m increasingly starting to feel about link aggregators and how they impact my own behavior
He should redirect to https://en.m.wikipedia.org/wiki/MacWrite as HN would easily get distracted.
I hope you’re not reading any paper books - the environmental impact of paperbacks is phenomenal when compared to eReaders.

And of course, you would never waste energy by purchasing a hardcover, that would be morally reprehensible.

Honestly wouldn’t surprise me if a kid playing minecraft on an old computer had drastically less impact on the environment than your average book snob - especially the “I buy paper for the experience” kind.
What do you think inflation is?
>scan their intranet and find a network share

Did their IDS/IPS not go off on this? I wonder if this was a sophisticated scan designed to go slow and evade detection or if it was just nmap lol

I can't wait for the post-mortem, hopefully lots of good lessons to learn.
They are 4, 4, and 1 inch below average for white males in the U.S. respectively. I guess one could call Gates average.
> single glyph variable names due to the unfortunate decision to save paper by denoting the product by juxtaposition.

Programmers tend to have this lack of fluency with written math that they completely miss: the concise names are not to save paper or make writing easier or anything like that. They're because they make the structure of expressions easier to visually identify and parse. The shapes of expressions are an incredibly important feature of the language and often contain implicit structural analogies. You need to be able to see those analogies to correctly read mathematics, and long variable names would obscure that part of the language.

I suppose it's similar to having enough fluency in a natural language to mechanically translate the words of a poem, but you can't properly read things like the metre, so you've unknowingly missed half of what the author originally wrote and lost it all in translation.
Ether’s New ‘Staking’ Model Could Draw SEC Attention