skysight-inc/HackerNews huggingface dataset:
You can use an hardware wallet, protected by a HSM, on a computer which is itself airgapped. I've written a decoder which decode Ethereum transactions and verify that at least it's what the hardware wallet says it is signing that it is actually signing (amount / fees / destination address).

So you take your hardware wallet, you connect it to a fully airgapped computer (one without any WiFi capability and without any ethernet whatsoever) (btw let's please not get carried away with exfiltration through "fan rotating speed" or the like and hence that not being a really "airgapped computer" and the very concept of "airgapped" being non-existent).

You then sign a tx on your hardware wallet, which generates a text file. You copy that text file to a USB stick. You check that USB stick from another airgapped computer running the tx decoder software. You can see what's signed.

If it's what you wanted, you broadcast the transaction.

This is reasonably secure.

I'm talking about security for people protecting millions in assets, not $1 K, not $1 billion.

There are still several issues. For example the Ledger hardware wallets, often regarded as the be-all / end-all of hardware wallets require constant updating, needing the wallet to be connected to a computer connected to the Internet to download updates.

You can update the firmware before entering your key (for example on a new wallet), but you cannot install the "Nano apps" before entering your keys. Which is an issue in itself.

Data exfiltration through non-deterministic signatures is another very serious issue.

I haven't looked into using the same seed from different hardware wallet vendors and verifying that you get the transaction signature: if that can be done, I'm all ears.

The Ledger CTO and Ledger overall will constantly dodge questions on these issues.

The answer is basically: "Trust us, we won't exfiltrate your seed through non-deterministic transactions" and "Trust us, we won't exfiltrate your seed during apps or firmware updates".

Firmware updates which aren't even signed with a signature people can verify: Ledger can decide to serve, if they want to, a backdoored firmware leaking seeds through non-deterministic to one person in one thousand if they want to.

And they pretend there's nothing to worry about.

What Ledger should do is let people download firmwares and Nano apps offline, put them on USB keys, and then update their hardware wallets from an airgapped computer.

This would at least allow people to crosscheck their firmware and Nano app hashes.

It still wouldn't solve all the issues.

It's very hard to have something you can really trust and the hardware wallets vendors are really trying very hard to make sure you cannot verify what they're doing.
How is that not the same thing? If you can reliably exchange it from one to the other?
FTX users appear to be cashing out of crypto exchange through a Bahamas loophole
I’m a big fan of the Royal Game of Ur. Here’s an update online version:

https://royalur.net/game/#
Strange: White people are 3x more likely to be killed by police than Asian people in the U.S.

I’m not from the U.S., so I have no idea how that fits in with the stereotypical narratives.
Materialistic? I fail to see how LGBTQ folks are more or less beholden to desire than straight folks... or that some Buddhists are 'bad' for not practicing in a certain way.
get a lawyer
The anecdote about being sleepy on a plane makes me wonder if we couldn't just modulate our CO2 intake as a sleep aid. I find it _incredibly easy_ to sleep on a plane, and I generally have a very hard time with sleep due to brain not turning off.

I think it would be interesting to see if there's any correlation between restful sleep and CO2 levels too. Maybe change the CO2 level to higher to induce sleep, and then fall asleep, and then bring it back down to have a nicer sleep.
I don't think we'll ever see the end of cryptocurrency. Too good of a grift.

I wonder if we will reach a point where "crypto" will revert to not meaning "cryptocurrency" though.
Yes, massive interventions took place - but if that's not a sign that you should be confident the US government will stand by the dollar I don't know what will. The bank was saved, nobody lost deposits. Regulations prevent this from happening in the future.

However I stand by my argument that the US will be repaid in full for its 2008 bail-outs. There's already been $109B in profit, and still $191B in principal left from Fannie and Freddie alone - and they continue to pay massive dividends of about $20B/yr. They US will come out ahead on this and faith in the dollar was restored. Jobs and the economy were saved. And a known good path forward (restoring Glass-Steagall for instance) exists.

I'm not defending Citi. However equating Citi within the economic system with FTX is nonsense. One's a bank which made poor, legal decisions and was saved because of its role in the broader ecosystem. The other is a shady off-shore bucket shop run by a CEO (and his 9 closest bone-bros) who allegedly fraudulently gambled away everyone's money and is on a plane to Argentina.

tl;dr: Even with the Citi bailouts from your article at face value the government will recoup far more than it spent on 2008.

This whole post feels like the dril tweet about the wise man explaining there's actually no difference between good things and bad things.

[1] https://twitter.com/dril/status/473265809079693312
To save democracy, Americans need to hang out more
On nice! I will save that one and read up on each species. I think it would be useful to know which of those are beneficial and are missing from the 20 I utilize.
> The point is that just freezing cold is not miserable

I think the fact that what is most "miserable" to people varies so much is why trying to use the names for seasons to apply to whichever weather you dislike the most is confusing. I prefer the cold to the heat, and I'm much more miserable in hot humid days due to sweating than I am in the cold when I can bundle up and feel mostly fine, but it would be absurd for me to refer to June through September as "winter" in the northern hemisphere based on this.
Sure, it's still shorter than days that international bank transfers take. Especially over the weekend.

It doest't replace day-to-day payment but is pretty good for paying invoices.
Overall, a life that I get to dictate/live on my terms. Whatever that is, I will be happy. Everything else is lower level details. So far, I think I am 95% there.
VPN, pseudonym, don't reupload any previous projects, avoid contributing to same projects that created problems, behave better in the future? I don't see how they could 'hunt you'.
In some cases. In some cases the folks on welfare cannot be bus drivers, etc.
How the collapse of FTX is hitting sport
Yep, another reason any welfare should be replaced with a UBI which isn't dependent on any circumstances.
Similar forces hampered the adoption of Smalltalk in the 90s as well [0]. Charging per-seat licenses to use programming languages almost never works, introducing friction that counters needed network effects, especially when prospective users can download a perfectly viable (if not much worse) alternative for free. Sure, there are a few systems bitterly hanging on to this business model - Lispworks, Cincom, Mathematica - but it's clear they are surviving in spite of it.

0. https://gbracha.blogspot.com/2020/05/bits-of-history-words-o...
Polae: Interactive Science Fiction
The sad part was that they had the platform that could have competed with ios and android. A linux based platform that they had worked on since 2005. (Or 2004 even).

For som reason the not-so-visionary mgmt decided to cut it, right when it should have started to scale up.
How does one measure sleep quality?
My all-time favourite podcast episode [0] is on the Sumerians in the Fall of Civilisations series [1]. As a STEM-focused SWE, I can't overstate how captivating it was for me. The podcast's narrative style brings history alive, deeply humanising the epic scale of the accomplishments, greed and suffering of our past.

[0] https://www.youtube.com/watch?v=cq1g8czIBJY
[1] https://fallofcivilizationspodcast.com/
Yes the actual original title should be
'What's Wrong with California?
A defense of the Golden State, and a modest proposal' and it's essentially all about how taxation funds the benefits programs
REBOL might scratch that itch,
it is "not dead yet" kinda of like how Amiga is not dead yet

I gave up on it with the switch to 64bit machines ...
but it still holds a warm and fuzzy place in my memories
as how I "got" lisp before I even knew what a lisp was.

warning free but not even open source
[http://www.rebol.com/]
Archived copy of Levine's article, with full text: https://archive.ph/q4Z1L
C-c C-u is bound to `slime-undefine-function`, though it prompts you for the name of the function and doesn't determine it by the present context. `slime-unintern-symbol` is also present but not bound by default and also prompts for the name.
The child isn't going to be put in a group home. He lives in a $100 million Woodside estate, has a father and grandparents, and a team of nannies to raise him.
This article is hilarious. It’s basically distilled flamebait that totally buries the fact that it’s satire until the very end.
Tell HN: Help defeat poorly implemented dark modes
I've noticed recently that at least two major open source projects have gone to dark mode by default:

https://www.postgresql.org/docs/ and https://docs.djangoproject.com/en/4.1/

Looks pretty bad - especially the Postgres one. Or am I the only one?

I just want to create awareness among programmers to please stop doing this.
How about when you piss off an entire state for your unethical practices?

IBM banned from QLD. 10 years in and there's still no IBM contract within the state government that I'm aware of.

https://www.itnews.com.au/news/queenslands-ibm-ban-lives-on-...
US Mobile is really great pre-paid plans on Verizon and T-Mobile. If they had a wearables plan I'd move all my phones over in a second.
That's just sarcastic talk. Both can be true at the same time.
That's the joke.

The article is intentionally being arch by using "welfare", a word that's usually used to refer to programs that give to the poor to refer to one giving money to the rich. It's making the point that "government handouts" are reviled when they go the poor, and accepted relatively uncritically when they go to the rich
> Most people never try. People who never try have a 100% rate of failure.

What an astoundingly ignorant and out of touch thing to say. It's completely irrational for most people to buy a long shot chance at wealth with a much, much greater chance of winding up worse off and in poverty (or deeper in it).

Also, what you said is an excellent sales pitch for a scam real estate investment system.
On what basis is GitHub obligated to provide them service?
Try and get your employer to put pressure on them. Your employer pays them.
I really dislike the trend of locking people out of professional work and banking due to bad or disagreeable speech. I really don't see a world in which this doesn't lead to some sort of backlash that we're all going to wish hadn't happened.
I’d use fish if my bash scripts would work in it. Looks awesome
Drama Queen :)

Make a new account from a fresh email and you are probably good to go.

How would they know it is you? If you use your work email, yeah, you have to ask your employer to give you another one. But is that so hard?

If the permaban is appropriate is a different discussion. Without seeing that comment that go you banned, it's impossible to say.
Surely, out of the billions of books that exist in the world right now, some will survive 5000 years. The Library of Congress is archiving many (but no longer all) tweets [1] and web pages. The British Library is similarly archiving tweets, podcasts, etc. The Internet Archive idem ditto, and many national libraries throughout the world are doing the same. If even a tiny fraction of that survives the next 10,000 years, there'll be much more remaining of the 21st century than of the 35th century BC.

[1] https://blogs.loc.gov/loc/2017/12/update-on-the-twitter-arch...
I don't have a solution but I regularly make controversial but polite points on Microsoft's open source projects so this worries me. I am anti-Telemetry and against some of the decisions they have made as a business which have impacted usability of their tools in my sector.

Perhaps we should simply not be building organisational dependencies on this product.
Yes, there was a bug with the image not rendering with certain emojis, so I had to remove them as a quick fix. But I’ll investigate to find a way to show them :)
The great thing about California’s welfare program as mentioned in the article is that the amount of welfare received is not dependent on income so it does not disincentivize employment.
Although FTX was a crypto exchange the crimes committed were not dependent on blockchain technology. FTX is a company and was holding money and assets for its clients. It's somewhat similar to what Bernie Madoff did to his clients, before crypto was relevant.

Blockchain based cryptocurrency isn't going anywhere anytime soon. This will remind people to take self custody of their crypto and not leave it on an exchange.
Very cool project! What do you think about including a QR code linking back to the user's GitHub page on the rendered card?
The two sentences

> Instead of selling and crashing the price

and

> these are held onto and used as a collateral to borrow against.

Are not compatible. If selling the assert crashes its price, it is a terrible collateral.

I would like to see how lenders justified in writing accepting large quantities of FTT as collateral.
They're probably using among other things IP addresses.
As long as we limit the payable tax to the sale price of the home, then you're not screwed. It would suck to have all the money disappear, but if you didn't pay your mortgage then you would also owe the entire amount of the sale price too.
California's Proposition 13 law (https://en.wikipedia.org/wiki/1978_California_Proposition_13) "locks in" property taxes on homes at the time you purchase it. Most other states do not do this, the value of your home is re-assessed annually, and your property taxes are based on the current value of your home.

In general, home values have consistently increased, year-over-year, in California. This means that many people pay less property taxes than they would if California didn't have its unique Prop 13.

Many people feel that this is an unfair law, as it largely benefits people who are _already_ financially established.

This article satirizes the situation, by framing the law as an intentional 'welfare program', rather than a tax break with unintended consequences. Part of the humor is that this 'welfare program' benefits the wealthy at the expense of the poor, contrary to how we typically think of philanthropy.
Get a new phone number.

Get a new email address.

Use a clean/new browser profile.

Create a new github account.

If that doesn't work, I'm curious to know how Github connects the accounts to the same person.
There’s probably a bit of all 3, but one factor you don’t mention is the chaos element that comes with Musk. Traditional brands like stability and whatever one’s feelings are about him, stability is certainly not the first thing that comes to mind when you think of Elon Musk. For example, if Elon suddenly starts sharing pictures of himself giving a nazi salute and promoting holocaust denial, most brands won’t want to be associated with that. And given his history of pushing conspiracy theories, you really can’t rule anything out. So brands are backing off to see where this is all going, which would fall under option 2. See also: Kanye

Edit because I remembered an even more obvious reason. When the first wave of advertisers left, which could be argued as “political activism” he named and shamed those brands with the implied threat of boycotts from his army of loyal followers. If I were in charge of a brand running ads on Twitter, that alone would make me question whether I want to continue to do business with them. You don’t threaten your customers and expect that to work out well for your business.
I’m living it now but didn’t realize it until recently. It’s easy to focus on what we don’t have and want something else. I came to this realization when I kept getting everything I worked for but then was on to the next thing. When I was 20 I never could have imagined the life I ended up living (in my mid-40s now).

After getting burnt out in tech startups 3 times I made a change. Sold 95% of our worldly possessions in order to have the flexibility to live anywhere. I get to spend my days drawing, writing, creating info products, and helping people get unstuck.

Sometimes all we need to do is look at what we have, figure out what we want, and get rid of the rest.
It works the exact same way as any other lien. It becomes due as soon as the property is transferred for any reason. If the sale is not enough to cover the liens, it’s the lien-holders who get screwed, not the seller.
You mean they banned the whole hedge fund OP works for?
Something worth remembering when criticising traditional herbal medicine for its lack of double blind clinical trials, is that clinical trials cost serious money.

It's unfortunate, but with the way things work in the western world currently, it isn't in anyone's commercial interest to invest in proving the efficacy of any of these herbal remedies. They aren't patentable (because they're plants and because there's prior art), so even if you were to sponsor a trial that statistically proves a remedy as effective, there is nothing to stop your competition - established pharmaceutical manufacturers - from jumping on the bandwagon and eating your lunch. It just doesn't make commercial sense for anyone to invest time in them.

I'm not here trying to insist that big pharma out to suppress natural medicines or whatever, or that it's some big conspiracy (or that it's not). I'm just pointing out that there's a logical, commercial reason that the we don't categorically know how effective these plants are. There are many examples of this with non-organic compounds also, that have shown therapeutic potential but are no longer studied for their benefits because too old to be protected by a patent.
I would hate to have a machine in my bedroom that is capable of raising the CO2 level. I don't think anyone could convince me that it would not decide to suffocate me at midnight next 29th February or something, regardless of its safety features.
Hi, for now the book is available only on Amazon (Kindle format), but you’ll find many tools on the web to convert it to ePub or other. Also, you can read the book online using Amazon’s reader. Hopefully this is good enough for you :)
I tried that. It’s the third account they terminated.

Whether or not the comment warrants a permaban or not, I’d gladly delete it, avoid the behavior in the future, and also clearly regret it!
From the linked RFC:

> There are two types of flags in IMAP4rev1 ...

Read or not-read is recorded in '\Seen', a system flag.

My question pertains to the other kind of flag, a keyword.

> Keywords do not begin with "\". Servers MAY permit the client to define new keywords in the mailbox ...
I thought of a random analogy here - the block chain miners are the equivalent of a common carrier parcel service here (albeit with far stronger guarantees against tampering).

So it’s not a middleman like a bank or a payment processor. Rather a bulk processor who moves a bunch of opaque chunks somewhere for money without any particular regard for who or what as long as they get paid for it.
So you think it would be useful to deploy one or two nuclear first strike weapon in space on the x37, versus let's say the Navy's 18 Ohio class submarines already actively deployed, each of which has the capacity to take out a small country? This makes no sense at all.
That's way too general. An entire company and dozens of people could be behind one IP address.
Figure out how they figure out.

IP? Unlikely. You probably do not use a static IP that only you use, right?

Your ssh keys? Delete them.

Cookies? Delete them.

Fingerprint? Use a different browser to find out.

Etc etc.

If you are not too technically versed, maybe start from a fresh computer.
8 months ago I commented "Anyone else oddly skeptical of FTX? They seemingly came out of no where with ungodly amounts of money, and began slapping their name on anything and everything."

Glad my BS detector works I guess.
Work and home IP address, possibly.
Work domain.
Vscode settings possibly.
They seem fine to me. What is wrong with them?
I did it at the beginning (it’s quite easy), but I think it took too much place on the image, and wasn’t sure it was that helpful.

I’m planning on adding a few customization options to the generation. I may add the QR code as one :)
Your interviewer claims that you actually hired him?
I didn't even know GitHub permanently banned people, notwithstanding users from sanctioned countries.
Seems like this could have been better handled by suspending you from commenting and creating issues instead. Best bet is probably appealing like you've tried already.
Reading this gave me flashbacks to the time when I tried figuring out why my laptop keyboard was typing letters by itself randomly. Turns out the always-on-usb feature of the laptop was causing some short circuiting: https://forums.lenovo.com/t5/Lenovo-P-Y-and-Z-series-Laptops...
I find this part the most interesting:

"Since then, my focus has been on AI research, and part of that involves the design of planning systems that (maybe) can eliminate the need for most programming. You tell them what you want, as you might describe it to a smart grad student, they maybe ask some clarification questions, and then they go do it. That only works if they know enough about the world and have enough "common sense" to avoid blunders."

I wonder what he's working on to enable that kind of environment. Thinking about how most of the programming I do (in high level languages) comes down to starting with a pretty rough idea and iterating on the idea while learning more about what's feasible / effective, typically refining what it is I'm building rather fluidly. I rarely know exactly what to build upfront, nor do the CEOs, product managers, designers or sales people I've worked with so far. I think this feed back loop goes far beyond "asking a few clarifying questions".

Maybe the kind of task a professor would give to a grad student is entirely different from that kind of typical industry work?
Related, because I just happened to listen to a audiobook version of it:

The Gilgamesh Epos, a mythic tale about an old Sumerian King. One of the oldest books in human history. Interesting to dive into the mindset of the time. To see what is different - and what is pretty much the same ..

(the german audiobook from Klaus Buhlert is fantastic)