skysight-inc/HackerNews huggingface dataset:
The simplest explanation is usually true. A billionaire enabler of Sam's was willing to put up $250M in collateral because Sam spilling on him would cost him far more that $250M. I think the claim he was acting alone solely on his own behalf is absolute garbage. He rose too high, and too rapidly to have been solely of his own creation. Someone bigger than him was absolutely involved.

I think we need to look further into FTX's Tokenized Stock Offerings, as that's what the SEC has been honing in upon, among other things.

https://news.bitcoin.com/report-suggests-ftxs-tokenized-stoc...

FTX was selling stock, claiming it to be backed 1:1, which was likely being used as collateral for further speculation, or as locates for short sales, despite never actually holding the shares they claimed to.

Crypto is unregulated and is a whole thing, but claiming to have stocks you don't have is a way to really piss off the ultra-rich.
> They also make up internal projects because external software can’t handle their “scale” they also made up

Which part of their scale did companies like Google and Netflix make up?
This was brutal. Woke to -33f counting wind chill (-17f w/o). Glad my furnace kept working.
They won't lose the money if SBF dies before court. Maybe SBF would be safer in MCC?

https://www.bop.gov/locations/institutions/nym
I literally can't find anything on a menu of any bay area cocktail bars that is more than $17. Trick dog, true laurel, pagan idol, smugglers cove, house of shields, etc. Most are $15 or less.

I can find the occasional $18 drink in Manhattan.
So what's the proposal, switching to requiring a different length when a unicode character is present? How do you know from what set of possible values (like thousands of possible unicode chars versus a-z) the user chose each character?

While 68 bits entropy are secure in a case of good hashing, I think the statement is misleading. Anyone who uses a random generator will just use 16+ random alphanumerics (optionally with symbols) and call it a day; users aren't going to be able to input a unicode snowman with combination marker with orange skin on every keyboard without using the clipboard or other software. It's not more secure, it's just asking for trouble. A software tester can do this, but there is no practical reason to lower the length requirement to 4 characters because an ẍ might be entered.

The author doesn't end up proposing such a thing, but the argument in this paragraph still doesn't sound practical to me.
Have any of you tried to chase the microvm train instead of docker on MacOS? Thus far, it feels like this is a deeply lost cause with a passing hope that somehow you can hack a solution to nested virtualization and drop into a KVM-style experience on a guest vm and then go a layer deeper with microvms on top of that guest. Oofff. What an absolute horror show.
Only if you guess it on the first attempt.
> that argument can be used to stop the inclusion of any new large functionality in the kernel.

Sure, it could be, but there are shades of gray. Arguing that adding a full fat SMB server to the kernel is not the same thing as suggesting that file systems should be 100% in user space. You and I both know that the threat posed by introducing a large amount of remotely reachable code is not at all the same as that posed by a new kernel filesystem.

The last few decades of arguing about micro vs monolithic have surely convinced everyone that there is a time and a place for both. Yes, embedding the server in the kernel gives us lower latency by eliding a context switch (a few hundred cycles) but this comes at a pretty high cost that we're going to be paying for years to come.

Call me overly dramatic, but ever since the NSO group stuff went public I've been a lot more risk averse when it comes to introducing remote attack surface because we know that these bugs are being used to kill people. Making kernel compromise harder means possibly saving someone's life. Do I think someone is going to die over a ksmbd bug? Probably not. Would I want to be the one that checked in a huge remotely accessible blob of code? No, so I think carefully about what code I put where to minimize the risk.
I don't think the other fields would be unencrypted. url makes some sense for an extension that doesn't need to unlock the vault to know if there is a password available for a site. it's not the end of the world but it certainly isn't a great look. look at bitwarden. the hn famous security guy tpatek or however you spell his handle recommended that a while ago and it's open source and pretty good. the ui kinda is not amazing but i guess that's alright. (it's 2022 almost 2023 how are they not letting you sort by recently created/used/etc?)
You can read all about it right here: https://www.hsgac.senate.gov/imo/media/doc/HSGAC&RulesFullRe...
They all are against tiktok, because it works

Go to instagram and see posts about cats. Go to tiktok and see posts about you
Can't wait for a court to toss that particular one out. "Consumers who purchase a product containing a copy of embedded software have the inherent legal right to use that copy of the software" (Chamberlain v. Skylink)
I have been reading various reactions around the net and some of them are bewildering.

The main complaint seems to be that this will cut jobs and that gains aren’t redistributed.

It’s mind boggling because automation isn’t free. There are people working to create that automation and the software. We are eliminating low paying minimum wage jobs. We are educating young people and providing them skills that are more technical.

Yes, someone who needs the minimum wage job isn’t going to be working at their low paying job..but we take care of them separately. Luddite Pearl clutching achieves nothing. It won’t slow down progress. And automation.
> When Twitter, MySpace, and FaceBook came along, they were initially considered 'microblogs' that had the potential to democratize personal publishing (no need for complicated mechanics) and foster better discourse by getting people out of silos onto a common platform where there would be a greater diversity of opinion.

Most people take extreme personal offense at the concept of diversity of opinion. A common platform is always, without exception, a way to unify opinions, not diversify them.
The problem is that it isn't just me. It's everybody. Everybody that uses an SQL system has to learn a version of logic that looks like something they've learned before but actually has no relation to it. People can learn it, but it is a chore and takes a lot of real world experience (i.e. costly mistakes) to get it drilled into their head just like it did with me. As someone who does a lot of mentoring of data engineers, it's infuriating that they all have to go through this at some point.

Unfortunately the problem is made worse by the proliferation of languages making the equally heinous mistake of treating null as "false-y". Bad form, Peter, bad form!
Push-pull amplifier with cross-over compensation (2021)
I think I'm trying to describe the world we live in, and how the US copyright system works. A lot of creative work is just, 'Throwing shit at the wall and seeing what sticks', and essentially the business of 'curation' in art galleries is just picking what seems good out of a system generating massive amounts of random art.
I guess LVT is better, though I find it almost a pendantic thing at this point given that in so many places where property is expensive the property tax is effectively a land value tax already as the land dominates the assessed value so strongly.
I wonder if he will flee.
Some random stats for successful web services (unit is average minutes of use per day per user):

YouTube - 19 minutes

Spotify - 140 minutes

TikTok - 95 minutes

Netflix - 71 minutes

So we’re looking at roughly a 1% - 10% utilization range, depending on where your game streaming or AI inference app falls. You need to factor that in when figuring out the pricing, your competition certainly will.
> the market is nowhere near saturation

Need to show > publications, conference appearances/posters, generated data products/pipelines, and contributions to relevant software.

These appear to be in conflict. If companies need people with such skills, they can't just hope to get the elite few who present at conferences, they need to be hiring among the audience members as well. If they are in fact just hiring the speakers, then the jobs aren't really "bountiful"
> Have you seen journalists attacking a dictatorship while living there, and go unpunished? Have you seen the same, but on democratic countries?

After Glenn Greenwald reported on the 2013 leaks, the IC and news media started up a bunch of threats of treason and were questioning his status as a journalist (to make him more legally at fault)

This doesn't necessarily contradict your statement, given we state the obvious that the US govt (and executive agencies especially) are not democratic
It feels like they’re intentionally reprimanding me for doing a guest purchase when I’m actually deciding that I liked the business enough to come back. Such a customer service fumble
> "This will put so many people out of work," said another commenter.

No it won't. The entire point of this thing is that the jobs it's replacing are ones that they can't get any workers to fill. There's a reason this is only happening now and not back in 2019.
> the m1 chip doesn't really have a competitor in that department

the m2 chip :)
When people talk about licensing programmers, I always say: "Better watch what you ask for." Licensed means regulated.
Please, lets not waste electricity & emit more CO2 for the sake of unnecessary eye-candy..
> I don't agree with this sort of cynicism at all, and I very much do believe that while it is very flawed, democracy ultimately is still doing its job.

Democracy is good, yes, but blindly asserting that USA == democracy is an incredibly naive, elementary school textbook level take of how our society propagates itself (not saying you're asserting this, but addressing the hypothetical point)
I would say it's a great way to learn about device drivers and hardware, because there's a lot less to learn than, say, the Linux DRM subsystem, and there aren't as many internal layers between your driver and the hardware. But modern smartphones run full-fat kernels with non-deterministic scheduling, not an embedded RTOS.
That's how I did the last one hundred or so in the end too. Someone also said shift click works to select everything as well, I tried it but it didn't work for me in Safari.
That’s the kind of fight I’d like to have though. A good thing to stand up for.

I could also probably be fired for things i say on the internet with my real name, but i think it’s worth standing against that kind of thing and not being afraid of it even though it’s entirely possible. (I do on occasion say things which are very much not well thought out, rude, just to trigger good discussion, or because I’ve had too much wine or am feeling ornery… in other words I’m not ashamed to be human)
Ask HN: Which ecosystem/language would you choose for an ERP project in 2022?
Assuming you want to have an enterprise product with the complexity of SAP; would you go the Java way or perhaps something different?
DECLARE foo record[];
> Getting a sneak peek of how the sausage is made gave me the hibbie jibbies and I switched to 1Password there and then

The big question with this is of course if 1Password's sausage is made any better.
I stand corrected. 30% more than average.

I believe that must have been a value judgement then.

Would need the average car price as well to get a true understanding, but at best that's going to make it middle of the pack.
export to gLTF? Then you can use the model-viewer tag

https://modelviewer.dev/
> in the us maybe you can file complaints with the ftc

As someone with complaints relevant to the FTC... where do I file a complaint with the FTC that falls outside of their website workflow? Their website appears to shoehorn everyone into payment disputes and fraud. But the FTC is supposed to protect consumers from more than just payment disputes and fraud.
This is an unhelpful and useless comment
Do you have any articles where people were not released from jail and they went on to kill an innocent victim while awaiting trial?
> The problem is that the demand isn't being made by security professionals, it's being made by risk management people

I'm actually not sure how true this is. There is a huge "security checklist" industry backed by persons with some fancy Security title that provide security analysis checklists for companies to follow, often citing very interesting interpretations of best practices from actual security orgs. These checklists are pushed on regulators who likely lack any ability to assess the validity of such requirements, rubber stamp the checklists into regulations, and now you have a series of unenforceable or ridiculous security policies and practices that basically serve to frustrate the user while failing to prevent actual attacks.

I've been at companies where there were rather interesting policies like

- Three factor authentication (because a single method isn't enough for some reason)

- No password managers allowed (how this is enforced is completely unknown)

- 6 week password lifetime

- Past password similarity checking (I'm actually not even sure how they do this unless they somehow have access to the plaintext version of user passwords; if there's a benign/secure way of doing this I'd be very curious)

- Random character requirements/limitations (you must use non-letter characters from set X, but not from set Y, and absolutely only latin letters)

And those are just some of the bangers surrounding password policies; the less said about the network security policies and antivirus policies the better.

And these requirements don't come from some regulation/risk assessment group; they're enforced by such groups, but the actual requirements come from some security firm that sell lists and a stamp of approval once you have every box checked.

It's difficult to not look at such firms as swindlers with a guaranteed paycheck from a captive audience; they sell their services to regulators as a benchmark to meet, and then in turn they sell implementation services to companies that are forced to meet said regulations.

And the end result is just extremely frustrated users who still end up falling for "Hey Bob check this out" phishing emails which is plenty for an attacker to get in and jump around your network until they compromise enough of the environment to take the business down. But hey! The business followed the checklist, so they can't be held liable for exfiltrated data!
I think that's really bad. I've never seen that high of overhead working private sector.
I had a feeling you were speaking from experience with that 300k number. Does that include the cost of password stretching? As others have pointed out in this thread LastPass uses PBKDF2 with 100,000 rounds. Even if you have a supercharged PC with 6x ATI Radeon HD 5870 you're only going to be able to derive 25k AES keys per second tops to even try, since that doesn't include the cost of deciphering. So how do you do it?
Once you start thinking in sets instead of collections of independent statements as per PHP et al, SQL starts looking a lot better.

If you try to fit SQL into the general purpose programming language box, you're gonna have a bad time. A really bad time.

SQL is a DSL for set theory. Nothing more. Nothing less.
I’m trying to understand, could these pico models be used for low poly games?
There are more than 1600 people with my first and last name in North America and the UK and I have first.last@gmail.com. So, when the give a fake email… it’s mine.
France and their reaction to the opec cartel under DeGaulle should be taught in schools.

Please look up how modern French politicians sabotaged that country’s incredible nuclear rollout and replacement plan since 2015 by adopting laws that forced their energy industry to stop investing and roll back nuclear. You might break a screen or two if you aren’t familiar with those events seeing how stupid and evil it was.
Can't go into details but they couldn't support our workload.
https://web.archive.org/web/20221223015919/https://www.busin...
https://pages.nist.gov/800-63-3/sp800-63b.html#memsecret

They refer to it as a “Memorized Secret“.

The appendix, “Strength of Memorized Secrets” is informative rather than a guideline, but I would recommend quoting it too in such discussions:

> composition rules, which require the user to choose passwords constructed using a mix of character types, such as at least one digit, uppercase letter, and symbol. However, analyses of breached password databases reveal that the benefit of such rules is not nearly as significant as initially thought… although the impact on usability and memorability is severe
Hi Marshall. I've enjoyed listening to you all on Array Cast.

I've always been put off by the weird character sets, but I guess it's time to finally get over it. I've been meaning to try BQN, especially since it's FOSS.

Having only 2 arguments to a function is another major pain point for me. Boxing isn't an answer there, though it could be usable with destructuring or something.

My initial introduction to array languages was an article about K for HFT from several years back. There was a lot about how much performance they were able to squeeze out using a tiny interpreter, which might be why I always think of array languages together with performance.

I think there's a niche for an array language geared towards big datasets. Essentially something like Tensorflow that streams data between the CPU and accelerators. The advantage over regular Tensorflow would be neater syntax and maybe some fancier operators.

Thanks for the link on the music, I'll check it out. I've been thinking about playing procedurally-generated music, particularly with GANs and the like. Array languages would be great to play with algorithms, since that code should be reasonably easy to translate to a TF pipeline for training production neural networks.

Anyway, this post is probably long and incoherent enough by now. Major respect, and thanks for doing what you do.
It's called "rank and yank", a philosophy invented by Jack Welch at GE and wielded heartlessly Microsoft for decades.
Because I was using it to practice making digital art which I just don’t have time for right now. I use it to make Christmas cards and doodle probably 5x in a year.

I don’t regret it because I can see that what I paid for is worth the value of the app despite not using it as much.
I noticed the same, and seeing the calander with red yellow and green days makes it easy to see how well I’m doing (plus drinking or not getting a good nights sleep is super important)
How Amazon Uses AI to Automate Work in Its HQ
The Future of Games is Instant
security theater
This dude embezzled like 7B and you think he doesn't have 250M squirreled away in crypto he can't pledge to some psychopathic billionaire buddy of his?
Reminds me of the recent effort to translate the Tanakh (The Jewish Bible, Old Testament) into Hebrew, from Hebrew. Modern Hebrew is close enough to Biblical Hebrew that its speakers feel reasonably confident in reading and understanding it. But their actual comprehension, in terms of the original meaning, is something of a controversial point. Modern Hebrew is in fact different. It's enough difference some academics believe Biblical Hebrew has to be translated to be properly understood; or at least approached as a foreign language and studied as such. That can be hard for people who understand it automatically (but perhaps incorrectly).

Semantic shifts are the worst offender, probably. Constant and ongoing. For an historic English example, sensible. Able to sense. Sensitive. "He's very sensible." once meant he's neurotic or passionate. But it shifted in meaning "able to sense with wisdom" or something like that. Now it means he's wise. And a possible ongoing example: just the other day, a young acquaintance misinterpreted "I appreciate how you feel" as "I am happy about how you feel" rather than "I understand how you feel." (And since he felt bad, he was quite offended.). Native English speaker! The other 20-somethings in chat understood the meaning, but to use their words, that sense is "old-fashioned" and "formal". They've heard "We appreciate your business" and such their whole lives. Little wonder that sense is coming to displace the others.
The Japanese wore masks before Covid all the time.
To be fair, I'd probably crack doggie12 sooner than dog because who has ever seen a website with a password length requirement below 6. But technically, yep you're 100% right.
I am afraid of China. China has developed missiles that can evade our ability to detect them until it's too late. Meanwhile our military is busy with initiatives like... declaring "Sir" and "Ma'am" as gendered language that should be eliminated.

The fact that American boys are increasingly preferring video games to sports should also worry you. There is a shortage of fit young American men for special-ops programs like the SEALs, etc.
First ‘Vagina-on-a-Chip’ Will Help Researchers Test Drugs
Who came up with the $25 million for bail? BTW an Eichler in Palo Alto cost $4 million.
I realize that it's easy to reach the forgone conclusion that yes, he's guilty and a criminal. You'd have to really tie yourself into knots to find out how he could be innocent. But our legal system still treats people not yet convicted as....not yet convicted.

Speaking more generically, people released on bond need to be able to have the resources necessary to form a proper defense, and also to try and avoid their entire life being destroyed by an arrest that may or may not lead to a conviction.
Yes, they’ve spent HUNDREDS of billions on “green” tech without a plan. How’d that work out for Germany.

They forced France to adopt laws to cut off their nuclear plants back in 2015. INSPITE of a law that mandates lower energy production from nuclear right now, France still produces much more than that and the shortfall is from whatever the French government invested in as the replacement, which is green bullshit.
I have a nearly maxed out Mac Studio and my experience was the same, until I got my work to fork out a license for parallels and I just installed docker in an ubuntu VM and configured my DOCKER_HOST on the host to talk to the vm. Now it's crazy fast.
Yes and that is true for most countries.
Bonobos brand jeans have served me well. I highly recommend them.

I too notice the decline in jeans quality. The cheap jeans I had as a kid in the 90’s were nearly indestructible. Sometimes I’d skin my knee but my jeans wouldn’t get a hole…
It's not preventing you from changing it to the current password, it's preventing you from changing it to any of the previous N passwords where N is usually 3-10.
It's accurate, and completely depressing as you note.
There was a discussion here recently about how high-status people can afford to countersignal. But if regular people do that then they tend to suffer negative social consequences.

https://news.ycombinator.com/item?id=33942670
> Do you simply tax the shit out of people if they have over £1bn in wealth?

Seems like the obvious answer, though you're probably right in that people will move assets around and do elaborate things to avoid the tax but they already do that now.

Make a hard cap wealth cap at $1B. Oh you made a great investment that made you $400M dollars? oops looks like you're $200M over the cap. You now owe the government $200M. But good news you hit the $1B cap. You "win" capitalism. Have a nice medal maybe.

Seems reasonable to me.

I suppose the argument against it is that you'd be dissuading near billionaires from investing their money in things (eg. starting new companies) though I'm not entirely sure if money is a real motivator for people who have ~$900M. Is it? I don't know any 900 millionaires to ask.
Their son had this crypto exchange that was flinging money in every-which-direction.