skysight-inc/HackerNews huggingface dataset:
You needn't read or analyze everything just the stuff that is reported and since 90% of the problem is 1% of individuals if you can keep the same old folks from coming back you will ultimately have less to process. The logical thing is that the kind of human moderation that they actually needs costs money and you acquire said funds by charging monthly. This has the side effect of making it easy to permanently ban problem children via their address and or method of payment. One need not take prepaid cards either.
so anyone knows Tokio is production ready ?
This, this, this. I don't use PS anymore, Photopea does everything better without the needs to dabble in Adobe's shit.
I pay $150/year for BorgBase backup and store 1.66TB, mostly because I really like Borg backup and am comfortable with it. That's my last-tier backup. I highly recommend BorgBase, they're good folks.

I also pay $120/year for Google drive which is my "online" backup, then store the files locally of course.

Seems to work OK for me, and I'm insulated against the problem of: "google's algorithm decided I was a Bad Person and terminated my accounts".
I'm curious what your take is on the incident detection side of things. Would Grapl have helped Uber detect anomalies?
Hi! I'm the tcl bot, you're the 27th person to ever mention tcl on HN!
And some sites like AWS management console don’t allow you to register more than one key :/
"me too" - rclone with Azure Archive tier for last-resort backups. I like that rclone doesn't tie me to one storage provider, and I'm not sure why anyone would use the linked project over rclone.
This is bad :-(
We had a great deal of experience with NGINX and the original architecture for Cloudflare was based on NGINX. When we came to move away from it we wanted to fully own our destiny (as we had done years before when writing our own DNS server) and so moving to HAProxy would not have made sense.
I am still genuinely amazed about what was achieved in this era, bearing in mind that these things took years to develop so started much earlier when most people probably had never heard of a transistor.

Despite the infancy of the industry, these people not only designed an enormous electronic circuit but had to work out how to achieve compatability with inputs and outputs as advanced as graphics, how to store data in memory, had to perform a tonne of debugging and had to get this thing etched onto silicon and then produced at scale.

Wow, just wow.
Apparently there is a need 'to focus on customers who run the risk of being pushed off the internet'.

Don't get me wrong, I'm not into the alt-righters, but a little push-back against the Google's and Amazon's of the world can't hurt. I've seen a few to many stories of people dropped by Google on a whim.

Maybe they can start payment services as well, seems Pornhub might be looking for one in the not so distant future.
Those are all cautionary tales...
> NeXT was mind blowing when you look back

Yes indeed it was. I ran OS X in beta on a G4 for a year as my main OS. It was that innovative and great. Like magically having the “Linux on the desktop” dream come true overnight.

It was clunky and slow at the time but it was so awesome it hardly mattered.
Or just that all your apps in company live under .internal.example.com so you can just ssh app1 withouth much fuss.

Now it is kinda broken because of SSL certs pretty much having to have fqdn or else they're useless.
Those pylons are a much easier to swallow pill than wind turbines with their shadows and noise + train noises.
The “can we talk” phrase has caused anxiety for time immemorial.
Censorious ideology is a minor point compared to the overall picture. Haphazard content removal wouldn't be an issue if the space wasn't controlled by a handful of private companies that routinely abuse their power.
> The offer is supposed to help him prove he did not cheat when he beat Magnus Carlsen, the world's top-ranked chess player, in a tournament last week.

How would such a spectacle prove he didn't cheat, unless they also persuaded Magnus to play as his opponent?

Instead they should try to prove that he did cheat, by offering the $1M to another GM (someone higher rated than Niemann) to play against a nude model with no chess experience but who had been trained to use the method that some have proposed.
doesn't the article say that the proteins they dreamed up didn't work
I’m confident it’s an AML issue because they’re getting stonewalled which is standard operating procedure when a Suspicious Activity Report has been filed. I don’t think using Stripe Connect is the red flag.

The thing with SARs is that they tend to be cascading as OP described. So if I (innocently and totally coincidentally) do a transaction with someone who has been flagged for suspicious activity my account might now be flagged as “higher risk” for suspicious activity and will be monitored more closely.

And, if they decide they’ve found suspicious activity in my account then everyone who does business with me is at risk of having their accounts flagged as “higher risk” for closer monitoring and so on.

And the bank isn’t allowed to tip anyone off because if any of those accounts are actually laundering money they might suddenly withdraw it and then the “lead” from the SAR is moot. It’s actually a crime to notify someone about the suspicious transaction(s). Which is why you get stonewalled.
I'd not heard this before, but a quick search gave me https://www.smithsonianmag.com/history/how-the-chicken-conqu...

I'd need to read more to understand properly, but from a glance it appears interesting and possible.
~/Projects
I've put in a few classifications my job could fall under, and gotten RN for at least two. Perhaps there's just more nurses than people assume or realise?
I'm glad he's keeping busy!
> Note that, in the event of retrieval, it's not just per GB, it's also per request.

This should fall in the free tier in most cases, since the script creates archives of the specified size. The free tier has a few thousand requests for free.
> Funny enough, her book is about the dangers of an algorithm-based AI supersystem...

Skynet is here.
In a dot file.
New Linux OS Scheduler Reduces Lag by Keeping Light Work on Fewer CPU Cores
Why are you assuming that any sensitive information about customers have been compromised? Uber is legally required to report to its users what is at risk of having been stolen, and so far they haven't said anything.

Canceling cards preemptively is a nuclear option.
I wouldn't call Scott Alexander a techno-optimist given that space's (the LessWrong diaspora) whole focus on AI risk.
I think io_uring support [0] still is not production ready.

[0]: https://github.com/tokio-rs/tokio-uring#project-status
Lots an easy statement to make as a pandering politician or internet poster.

The military is an insanely complex organization with probably thousands of different financial systems. Whatever a “complete audit” is, you can be sure it will take a long time and get extended many times as congress paints the airplane in flight and changes the standards.

The issue is a political football.
I still have one unopened that I almost forgot about. I got it from their Kickstarter campaign. I've been waiting for my kids to get old enough to use it. It might be time.
In 2009 I was certain we'd have cars with no driving seat available for general purchase by 2018.
I have not had that experience, generally I don’t see ads thanks to adblockers, and the platform just works and supports almost 100% of all apps. It is also fast, and I’m sure Linux could be faster but I feel it’s lacking features and support for most games and software that I use (making it easy to see why it could run faster).
The eagles would have easily been seen coming from far away by the Nazgul, the eye, or anyone else.

This is a common question but it doesn’t hold up to scrutiny. The point was to SNEAK INTO Mt Doom and the only reason this was possible was because of the massive losses and distraction Mordor had suffered.
Part of what I do first at any new employer is ask myself the question, "if I wanted to burn all of this to the ground, how would I do it?" I generally don't share the fact that I'm going through this little thought experiment with my management, but it helps triage what's currently "broken", and gives me a clearer focus on what needs to be fixed.

If I'm thinking about it, I can be assured that someone with differing motivations likely already has, or soon will be thinking about the same.
Agreed. The financial aspect doesn’t bother me as it is very likely that action can be taken to prevent future misuse, and reparations can be made for past abuse.

Drivers seem to be hit with a PII breach though, and I’d have concerns if pickup and drop off locations were exposed, particularly for those where that information might be sensitive (e.g. journalists in some jurisdictions).
I envision regional/county governments implementing something similar to this to nickle-and-dime people for smaller infractions automatically. Combine this with governments moving their currency management to crypto [1] and people could get auto-dinged for jaywalking. [2]

[1] - https://www.federalreserve.gov/central-bank-digital-currency...

[2] - https://wikiless.org/wiki/Jaywalking?lang=en
> Western European countries, and Germany especially have had to be pushed into supporting Ukraine.

Absolutely untrue of "western countries", only of Germany.

The american "push" was welcome as a sign of confidence that we could support Ukraine not merely on our own, but with the backing of the United States. But this is our continent that is under attack. The US wouldn't otherwise care, but taking down Russia is a huge get for them so they care.
>Second problem is that sometimes my brain just tunes it out, and I catch myself 5-10 minutes later not having to actually listened to any of it, having to go back again.

I think the key here is to listen while doing something undistracting and boring -- so not like driving (which requires your attention often), but rather e.g. on the treadmill or commuting in some longer distance, where you can passively zone one (eg. long train commute, not 3 subway stops).
It is not just the performance boost, but the fact they can support any non-rfc compliant bullshit there is on the web they feel like is necessary.
By setting up a dummy login screen that you unwittingly enter a valid code into (which I believe is the current best guess for how it was achieved in this case.)
Origin of reading a decimal point as “spot”
It’s hard to say they lost the money game when they ended up with $20B.
No way. that would be a 9'9" experience, I believe..

Although I think your point is correct.
Do we know if the details were stored in a format I need to worry about? If their protocols are in place surely a breach is just high level PII
How is an fpga different from an emulator? From what I've read it looks like just a microcontroller that emulates a cpu chip.
Absence of proof is not proof of absence. Uber has no fucking idea what's happening, just like Heroku a few months ago. They got completelly pwned. Assume everything has been leaked.
> That's like saying MD5 is fine for hashing passwords, because it's better than plaintext.

If for whatever reason you can't have anything else, MD5 is obviously better than plaintext. Not fine, but better.

With passwords you don't have external dependencies but with MFA, you do. Things are more complicated and real life is messy.
Actually the Angles, Saxons, and Jutes came from Germany (IIRC). The Danes came from Scandinavia.
Thank you.

I read a lot of stuff - kind of knowing random stuff is part of my job as it allows me to use better analogies to explain things to my stakeholders - and I love to share with this community - the discussions that get sparked are extremely worthwhile. And yes, I use the bookmarklet.
Increased risk of death after discharge from compulsory care for substance abuse
Original title slightly too long so cut "immediately after discharge" to "after discharge"; but the "immediately" is actually quite relevant -
"The risk of dying during the first two weeks after discharge was higher than during the remaining follow-up period – hazard rate ratios comparing the first two weeks with subsequent time windows were between 2.6 (1.3, 5.0) and 3.7 (2.4, 5.9)"
Do you mean a physical key?
Some corporate 2FA apps send a push notification to a mobile device. Because of how that is set up, it doesn't always (A) show what the login is for because it shows the name of the SSO app instead of the actual application, (B) show other correct data, e.g. if the user is on a VPN, the location may be the VPN endpoint because of IP-address based locations, and (C) it doesn't always show on the user's device that a login needs to take place, because it may be an Exchange connection refreshing periodically in the background

So, some people just accept whatever pushes they get.
The lost ways of programming: Commodore 64 BASIC (2020)
The world is a lava lamp. The blobs coalesce and shift around but never for too long in the same spot.
> The article is interesting and the solution great but saying it is safer because Rust is misleading.

Using Rust (without unsafe) precludes memory management bugs being turned into exploits. That closes an entire category of attack.

Sure, “safety” can be defined along different axes, but Rust handles one entirely. How does that not make it safer than using a memory unsafe language?
You can submit a comment simultaneously with (or of course, after submitting) a link. I'll occasionally reference other discussion in that way.

Your submitter comment has no special status, but it is (usually) the first comment which will appear in the thread.
I find this lazy, high-cost shipping to the foreign lands beyond the map both irritating and baffling. This folds, it fits in an envelope or through a mail slot. It shouldn't cost more than a tenner to ship it. But because they just got 1(one) quote from UPS for hyper-express service, they're missing out on 400 million potential clients in Europe. It's so, so dumb.
While I can’t compare “manpower” energy, someone did the math comparing ethereum to ec2 - ethereum was 1 million times less efficient in processing power, network costs, and storage.

Those numbers were obviously from the POW network, so unknown how they will change post merge, but arguing that current systems waste energy too seems a bit biased.
Most likely Uber Eats as well. I use both apps and my account is linked between both of them.
done! Took a while but I added email sign up now :)
If this is about the word (policeman/border guard/whatever) then remember we spoke in another language and I'm translating it all into a language I myself wasn't born with.

If you mean that nobody ever is there - that's not true. Ocassionaly they put up a guard, sometimes even a guard stopping each car, e.g. when the pope went to Poland there were nonstop guards stopping each car (yes I mean on the German border, and that was just around the time he stole the cars btw); when the "immigration" "crisis" was in full swing they were there nonstop too, etc.
You prompted me to look more closely at the terms of the bet [1], and they are indeed absurdly biased: just one in ten on three of the five scenarios counts as success. On the substitution of a robot, which simplifies the task, Alexander says "we" agreed to it, and I assume the "we" includes Vitor, as, in his comment (in which he does not concede defeat), he seems to accept the substitution (he also acknowledges that he probably should not have accepted these terms.)

The other issue is who judges the outcome. The terms specify Gwern or Cassander (without having secured the assent of either) or they will "figure something out." In his victory claim, Alexander does not mention any independent judge, and interestingly, Gwern posted two comments without explicitly concurring with Alexander's claim, though his second comment might be read as tacitly accepting it.

My initial comment, therefore, needs some modification: replace the "given that" with "if", and I think it stands as a counterfactual conditional, having a probably-false antecedent.

I don't think Alexander is doing his reputation any favors by being so triumphalist about this misbegotten bet.

[1] https://astralcodexten.substack.com/p/a-guide-to-asking-robo...
added email sign up now :D
Writing a Better Options Library (2016)
Think we'll have an AWS region in Alpha Centauri by then...

Edit: and it'll still break when us-east-1 is destroyed by the sun exploding.
Some people are insanely overprotective of books. I see the point of a signed copy, first editions of some rare old books and things like that, but I've seen people go nuts about cheap paperbacks.

A friend of mine borrowed a copy of 1984 I had laying around. She accidentally folder one of the pages or something, I don't recall. I don't think I've ever heard anyone apologies so much, but she REALLY loves books. It was just paperback I picked up because it was dirt cheap... I ended up giving it to her, that way it was her own book she damaged ever so slightly.
Can't you also just use existing tools to backup to s3 and then move it to deep archive?
So you’re stating that you have been involved in a situation in which a merchant account was frozen due to circumstances involving the Bank Secrecy Act? I just want to be completely certain that this is the assertion?
Uploads are not free as described in the project I think. Unless I’m misreading, AWS’s cost page showed about 5c / 1000 files.
There still seem to be some many basics that FB and YouTube get wrong with their "automatic" video moderation.

Use people's "report" button clicks as an early indicator that something should be looked at - a big flag.

Look at certain words or phrases that are either unambiguously bad or possibly like "kill" or "why I hate ..." - a medium flag

Phrases that are less certain, = a small flag.

Block some things proactively, moderate others, react to the others as they are reported. I don't think people are bothered that bad stuff gets posted as much as these companies not doing anything about it when it is reported. If 1000 people flag a video, up to the top of the list. If the flagging is malicious, then downgrade the reputation of the accounts that flagged it. If new accounts upload stuff, rate-limit it in some way etc.

I know I am making it sound really easy but with how ever many 1000 Developers, it shouldn't be impossible for someone like FB to do this much better.
Even worse is the fact that they sacrifice quality for bandwidth. Even if you manage to meet all their silly DRM requirements, you get poor quality video that's high definition in name only. There are titles in Netflix that have compression artifacts in 90% black frames.

Meanwhile pirates enjoy Blu-Ray rips encoded by people known for taking pride in providing the highest possible quality.
Still running my Panasonic 50" Plasma from that era.
So heavy. And yes they are power hogs, but in reality, ours really isn't on that often. Three, maybe four hours a week, on average.

But oh, the picture quality back then, compared to LCDs and rear projection. No comparison, and even today, it holds up well.
200% outsider, and not my impression at all, I largely don't see how "quirky" has to translate to "childish". I could follow the post just well, but maybe my mind was infected by _why's general style.

Please, allow me to have one more round of chunky bacon.
Security is like an onion and in this case every layer was rotten.

* Social engineering successfully got someone

* MFA approach did not protect from a simple fake webpage tunneling hack

* VPN was based on a password rather than a certificate

* Network scan was not detected and stopped

* High level credentials were stored in a public file and not detected

* Abnormal credential usage was not detected and stopped

I probably missed a few but point there were many ways to stop this hack and all of them were broken. This wasn't some highly funded government operation that bypassed layers through clever approaches and expensive zero-day exploits.
No. Just cars.
Not an extreme. Pink noise works really well and brown noise to some extent. White noise is a bit harsh for our human ears.

The pink noise besides simulating the shushing also serves as sort of a noise blanket to make other sounds being made around the baby pop up less, sort of sound mantle.
> I would much rather they focus on developing than marketing at this stage.

Totally reasonable to feel this way, but personally I think naming is so important that it transcends any technical merit a project might have.

For my own projects, I never write a single line of code until I come up with a name I truly love. Some times it takes weeks, but then the project has an identity which keeps me motivated over the long term and actually inspires my technical choices of what to build.

Compare to the “Yet Another” naming scheme which (to me) feels like a preemptive apology for a project’s mere existence: https://en.wikipedia.org/wiki/Yet_another
But that’s the difference isn’t it? In a number each digit represents groups of powers of ten. The number of hundreds, thousands, etc in the number.

The digits in a credit card number are meaningless. They have no relation to each other. If you choose two digits next to each other one doesn’t represent groups of 10x as much as the other digit. Or any other quantity.

The digits are effectively just symbols, not quantities like in a mathematical representation.
What exact features are you looking for?

I believe that there is no exact alternative, but you might find something on:
https://jobboardsearch.com

We are also running a job board platform [1] in a few countries and require each company to publish:

- salary brackets

- detailed tech stack

- development methodologies that they use

[1]
Switzerland: https://swissdevjobs.ch

Germany: https://germantechjobs.de

UK: https://devitjobs.uk

Romania: https://devjob.ro
How is that false? Name a single example where SMS 2FA is worse than none. And just because it will always come up: 2FA, not treating the second factor as only factor.
The answer there, clearly, is to not have an individual be a potential SPOF. If failure of that kind of support costs millions of dollars, you absolutely need to have the ‘walked in front of a bus’ scenarios worked out.
"an object"

Shouldn't that be multiplied by the number of bytes of this object? I still don't quite understand the math apparently because then we'd all be losing 10KB+ files yearly.
anything in ~/ or /media/user/2TBSSD is fair game.
I just travelled eight time zones away and (apparently) lost my security key there. It caused pretty much zero issues, I just stopped by the office and picked up a new one to bootstrap off a spare key. Then I revoked the old one. If you don't have another key (you should really get one!) you can call in and they'll figure it out.
My only guideline so far has been "can this trigger a conversation I'd like to read?". If I answer "yes", I post it.

HN is an incredibly diverse and smart audience. It's always a pleasure to engage in discussions here.
Wow, that's a lot of books!

Assuming 10% of those books are, in some way, in your opinion, better than the other 90%, what would you say were the best couple of dozen books you've listened to? How much would you say the performer affects your perception of the book?