skysight-inc/HackerNews huggingface dataset:
It didn't come from anywhere.

From Bloomber:

>"FTX co-founder Sam Bankman-Fried’s $250 million bail package is one of the largest in US history, but it doesn’t mean he actually has to put up that kind of money.
At Bankman-Fried’s bail hearing on Thursday in federal court in Manhattan, both the prosecution and defense agreed that the former billionaire’s assets have “diminished significantly.” Bankman-Fried has said he may have only $100,000."[1]

>"The $250 million personal recognizance bond approved by the judge was secured by the equity in Bankman-Fried’s parents home in Palo Alto, California, which is almost certainly not worth anywhere near that amount. But outsized bonds are more a means of establishing harsh financial consequences for bail-jumping and are often backed by assets worth only around 10% of the stated amount."[1]

Further:

>"In addition to Bankman-Fried and his parents, the bond must be signed by two other people of “considerable means,” one of whom can’t be a relative, by Jan. 5"[1]

So it sounds like he able to leave today with nothing more than the equity in his parents house pledged and now has until the 5th of the new year to find the other non-family signatory as well as the rest of the funding. I've read in multiple sources that his parents house appraised somewhat recently at $4 million, so that max equity they could have would be that. So if they are required to put down 10% that still means they need to find another 21 million dollars somewhere.

[1] https://archive.vn/QeZy7#selection-4563.0-4563.157
This isn't super relevant, but academia in the US pays very well. This is even more so the case for law, business, engineering, medicine, and a few other areas.

Obviously not relevant in the context of $250 million.
> Use a password manager that fills in fields automatically

(EDIT: To everyone saying this is a bad idea: yes I agree, and that's unrelated to my question. Before reading my subsequent paragraph, note this sentence can be interpreted two different ways. I thought it meant "automatically" as in "without needing to manually copy-paste" (to avoid phishing), but it seems maybe the intention was "without prompting the user"? The second one seems like bad advice and not what I was asking about regardless - I'm asking about the anti-phishing fill where the program enters the text, NOT about unprompted filling, which I already agree is a bad idea.)

It's not this simple in reality is it? Surely it's not just me whose password manager often has to prompt to fill in a legit website it can't recognize, because the domain or URL isn't the same as what it has stored in its database? Are non-technically-inclined folks expected to be able to follow this advice in practice?
Rendering the whole page on a canvas is the opposite of “open”, but whatever floats your boat. We’re going back to 2005 when it was fashionable to make your site be an single opaque SWF. Time is a flat circle.
I agree, but my company is in a very regulated area, so they standarised on Macs because of the very strong controls built into them at a hardware level.

I do miss my thinkpad and Fedora.
I remember Facebook doing some things like this. Such as storing the capslock-on variant of passwords as well as various typos.
> It's kinda both though isn't it?

You spotted my intentional hyperbole :) I wanted to draw attention to it because it’s underrated, but you’re totally right that it’s always a compromise.

> Wherever you end up, understand that there are rules.

Absolutely. And not only social, but inherent rules in the domain you’re working. For instance, math research has more discontinuous progress than building crud apps.
From Wikipedia:

FoldiMate was a California-based company developing a robotic laundry-folding machine founded in 2012. Their clothes folding machine was aimed to enter the market by the end of 2019. *In 2021, the company folded*.

Emphasis is mine. Great Pun!
Did a single one of the hoverboards or e-scooters that caught fire have a battery made anywhere other than China?
>If you're able to sneak into the supply chain and replace the _client_ with a modified, malicious version, you can make it send the master password AND the database to a remote server

I've heard about this as a possibility for as long as I can remember, but while this remains a possibility, major online providers get hacked every year or so.
It was merged in 5.15. Does any major distro configure this in?
as linked upthread: https://hackaday.com/2022/07/12/even-doom-can-now-run-doom/
What? The topic is about the cost of labor. It’s impacting small businesses just as much.
Sure, it's a hobby.
How many hours has the dev spent building the site, doesn't he deserve to be compensated for his hard work?
I have a suspicion about this, which makes me want a study to test if the strength of this effect is inversely related to acceptance of gender diversity in the social milieu in which individuals reside.
You have to be a little bit more specific than that and quantify and itemise the «many» part. Otherwise it is pure speculations, generalisations, arm chair theories and hand waving.

What is a «vanilla system»? A brand new laptop? Then the hardware is likely faulty, and Apple will replace the faulty computing contraption or refund the purchase. A brand new install on an existing laptop? Likely a hardware fault, a compatibility problem (less likely) or, indeed, a specific or unspecified defect in the software.

I reboot my laptop approximately once a quarter – when a new update or upgrade is released. The average uptime is 3 months. I run a uninterrupted succession of OS X updates and upgrades dating back into 2009 – when I begrudgingly switched away from my Sony Vaio Z17 business laptop running Linux due to the X server randomly crashing on and bricking Vaio Z series laptops in-flight or upon an awake with no available recourse. I have not had to reinstall OS X from scratch even once and still occasionally come across non-OS files on the file system being intact since the original 2009 install. Different kernel versions in between 2009 and now have crashed on me less than ten times. The laptop goes to sleep and then wakes up daily. Zero maintenance. I used to have to reboot it once a year to disable the CSR mode, but not anymore – the stuff just works (except when I need to run dtrace / dtruss which is a less once in two years activity now). Clearly your vague definition «many bugs» does not apply to me.

I can't say the same about the said Vaio laptop that I still happen to have around, and that is in a perfect working condition (sans the obsolete 32-bit CPU and maxed out 4Gb of RAM). It runs a version of Ubuntu but every upgrade is still a gamble. A upgrade to Ubuntu 20 has bricked the laptop in the umpteenth time, and it now requires an autopsy and a full reinstall via booting it from an external eSATA drive via a PCI Express card attached to it.
Disappointing that the comment section on that page doesn't use these images for the profile pictures of commenters.
https://www.pcgamer.com/doom-hacker-gets-doom-running-in-doo...

I think I even saw this on here a few months back.
>If you delete faceboom...

Is this a Freudian slip? I'll have to start using this term when referring to Facebook in the future.
Does anyone know how de-Googled Chinese phones work? How do programs like Wechat go about it?
I’m having trouble figuring out what this was aimed at. My comment was aimed more towards what the website can do and how it formats numbers when a user enters them.

Building in accessibility is a net win to all users, even those who think they may not directly benefit, spacing things out in a reasonable and predictable way helps everyone and especially those with eyesight, memory, and attention issues.
So if it weren't in the kernel it would need to run as root, wouldn't it? That gives the attacker nearly the same rights but a much more convenient programming environment.
>"Armchair thoughts-- makes you wonder what the game is here-- the prosecutors want a high enough bail that SBF can make, but not so high that he wouldn't pay the bond."

What would the prosecutors cared if he made bail? What is their interest there?
Because you would soon find that lifting a Sandwich to your Mouth is a Criminal Act
The Amiga's built in serial port was particularly atrocious as the hardware could only buffer 1 character at a time. This meant that it did not work particularly well at baud rates above 9600. Combined with the CPU being starved from accessing RAM when running in hires 16 colour modes (used when emulating ANSI "graphics" common at BBSes back then), this made it rather unpleasant as a terminal emulator.
For example the Engineer Law of Baden-Württemberg states in § 1.1:

(1) The professional title "engineer" may be held by anyone who

1. has successfully completed a course of study in a technical or natural science subject with a standard period of study of at least six semesters, corresponding to at least 180 ECTS credits, at a German state or state-recognised higher education institution, whereby this course of study must be predominantly in the fields of mathematics, information technology, natural sciences and technology, ... [1]

My own interpretation is that not all of these four aspects need to be included equally in a course of study. If the question is of practical importance to you, you should contact the Chamber of Engineers of the respective (federal) state for an authoritative answer.

[1] Original:

(1) Die Berufsbezeichnung »Ingenieurin« oder »Ingenieur« darf führen, wer

1. ein Studium in einer technischen oder naturwissenschaftlichen Fachrichtung mit einer Regelstudienzeit von mindestens sechs Semestern, was mindestens 180 ECTS-Punkten entspricht, an einer deutschen staatlichen oder staatlich anerkannten Hochschule mit Erfolg abgeschlossen hat, wobei dieses Studium überwiegend von den Bereichen Mathematik, Informatik, Naturwissenschaften und Technik geprägt sein muss, ...

Source: https://www.landesrecht-bw.de/jportal/portal/t/3ba/page/bsba... (in German)
Incorrect. It turns out your "vault" is comprised of unencrypted and encrypted fields. Unencrypted fields include URLs. If the attacker publishes this data, or sells it to somebody who does, this will be Ashley Madison x100.
Sometimes you can’t tell if the ”artist” is into “graffiti” or “vandalism”. Or maybe just vandegraaf generators.
I’m praying the car is running then, while I listen to some smooth jazz to play me out
Yes, I'm sure my wallet would be very happy with me running 20 different EC2 instances for small apps and databases.
A free alternative is here: https://recalendar.me/
> So if they are required to put down 10%

They aren't. The parents as surety for the full amount, the security claim on the home, and the two additional sureties for a smaller amount TBD are the approved requirements for the bond.
Yep. Same story in Oregon.
some are a lot earlier than others. New Orleans and Most of Florida are already having problems (especially when a hurricane creates a big storm surge).
Just like the goals of our tech titans!
Speaking of which, the original Economist essay (1955):

<http://www.economist.com/node/14116121>

<https://news.ycombinator.com/item?id=7879481>
I think the upthread theory was based on a mistaken assumption about how bail works, wherein SBF would have to reveal hidden assets to make bail if it was large enough.
I don't know, and it's really impossible to tell since things are changing quickly. People work as "data scientists", but there are headwinds and tailwinds. the main headwind, is that companies are cutting budgets due to the recession and dropping analysis groups that are part of cost centers. It's also easy to get the basic skills (coding/stats) done in your undergrad or masters w/o having research experience. The tailwinds, are that ML capabilities are improving day by day, so the potential to use that to make money are increasing. There's also a huge digital transformation happening, and companies have more data than ever before and potential to leverage that into savings, additional revenue, or new services.

When I started on my data science path, about 10 years ago, and there was no training pipeline, so when I dropped out of a PhD a few years later it wasn't that hard to get a data science job with the intersection of skills: math/stats/coding/research. Today that role is probably filled by someone graduating from an undergraduate or grad program, but I know the same company is still hiring for improvements on the research project I helped start.

Good data science, for me, is when you "apply predictive models to end user problems and ship solutions in products", but when I looked around for other jobs I realized that so few companies are able to act cross functionally to exploit the value of ML in products and services. Sure, finance does it, ads does it too, but it seems like the jobs I had access to were some ill-thought out skunkworks that a VP or exec thought was a good idea, or doing work tucked away in some business unit. There are like 10 individual problems there for YC to solve, but the more fundamental issue is that as long as we are still in the hype phase of data science, there will be incentive for business leaders to spend money on it in wasteful ways (at least for your career).

If you want to do data science or ML, it'd encourage you to find tech first companies that are actually using ML to solve real world problems for people, and avoid working on projects that haven't shipped. Also, stay under engineering orgs. In business units, you'll have a boss that doesn't understand what you do, and you'll be promoted out of tech.

Ultimately, I left data science and am now on an infrastructure team at a database company, which is just a better fit for values. If you can get into big tech or any tech first company, the data science is mostly figured out, but in my experience lots of companies aren't offering constructive experience. Good luck.
Is that in chapter 5 of his book (Parkinson's Law) by chance?

If not, could you at least point to the source?
Oof, that aged well:

> Too much work. At that point, it’s easier to just hack the LastPass servers.
I always thought neon green (not yellow) was the brightest color to the human eye.

https://www.mentalfloss.com/article/500751/most-visible-colo...
Google fell to seo spam a couple of years ago. Half my search results these days are machine generated lists already, or junk sites filled with keywords, or else “content marketing.” The rest are links to social media sites like Reddit or quora

When was the last time you found a legit independent website via google that wasn’t some media company spamming articles for seo? It’s not like you never find those sites, but it’s just rare now

Most new content is made for social media in some for or another these days (user generated content aggregator sites at least)
I can't believe that I've never noticed that link in the footer :)
Frankly it is not what they can do but the USA side cannot do in China. If the world is all under china it is “fine”. But given it is still not or not yet, let it like this is just give up and be slaved.

Good luck America, you really need it.
Fun read - I enjoy that it was just a guy in the 1930's who got a handful of people together to agree on something and they did. No dozens of working groups inundated by special interest groups.

I was curious what colors are used in other countries. Yellow seems to be the most common worldwide:

https://en.wikipedia.org/wiki/School_bus_by_country
It's amazing how far we've come in raw computing resources available on a desktop in 40 years.

Check the 2018 video of an Atari 8-bit emulator which can run 182 apps simultaneously (no idea what CPU is powering the box):

http://www.emulators.com/xformer.htm#XFORMER10
Looks like JMA says 9.0, USGS says 9.1. I don't really have enough expertise to know which number is more accurate, and I suspect it doesn't make a huge difference. It's in any case the highest magnitude earthquake ever recorded in Japan.
None of this is directly implicated by the comment above.
Quora launches Poe, a way to talk to AI chatbots like ChatGPT
I've been also thinking a lot that why it's so fricking hard nowadays to make phone calls to even people you think are your closest friends. It's like you need to schedule a time slot and then make the effort. What happened to "just called you to ask what's up"?
Do you know this for a fact? I'm having trouble believing a bank would agree to loan the parents $250 million with only a 4 million dollar house as collateral. Even if the parents equity was 100% of the appraised value that's only $4 million. What ability do they have to pay the rest back? They're not paying that back on Stanford faculty salaries. Further the parents themselves might very well be implicated in this whole mess. I'm trying to imagine a loan office who would be willing to green light such a loan given all the above.
chatgpt is often very wrong.
doom it !
There ought to be some kind of legal sanction against companies that try to hide the seriousness of data breaches.

I read the customer update, and the severity of this breach is hidden deep in the statement and skimmed over.

Basically: LastPass just shared which sites you have logins for with the attacker. This could be sold or released to the entire world. They claim the usernames are encrypted fields but often the usernames can also be in the URLs saved along with the site.
> This is partly because the company has been loaded with $12.5bn of debt to help to fund his acquisition
Anyone obliged to invent falsehoods to make their case reveals they have no case. No one has ever suggested we "destroy whole landscapes" for solar. You made that up from whole cloth.

Good day.
> First, where do I find the most popular one million 12-character passwords that use A-Z/a-z/0-9?

I'm sure it may not be easy to find this database, but it is probably not that difficult if you hang out in the type of circles that the people who cracked that site hang out in.

> Math...

This strikes me as nitpicking when one can access such powerful computing devices as to make the difference practically irrelevant. So make it 10million and wait a few more minutes, who cares?
It looks like a pretty basic demo/full setup where a good chunk works for free and you have to satisfy the customer with the functionality to get money.
It commonly happens with Reddit subs. A niche community emerges, it's really good. It gains popularity, quality drops. Moderation falls and before you know it the original audience has been drowned out, what made it good is a distant memory. Very few are able to resist, only "ask historians" comes to mind.
Agreed. Plus have you NOT seen the crap TikTok put out these days? YouTubes Shorts are no better. It's like some hypno crap now.
Holiday Break: December 26th to January 5th
So what convinced the court that his parents have $250M available? That would be rather surprising based on what's publicly known about them.
A MacBook is not that expensive and much faster than AWS VMs in the same price range (assuming a few years of usage) in my experience. The network storage of cloud VMs is particularly frustrating for development, unless you use ephemeral storage perhaps.
Yep. The challenge for OpenAI right now is how to drive cost-per-query down, particularly if they wanted to scale their capacity to something approaching Google scale.

Right now their cost per query is about 10-100x what it costs Google to perform a web search, of which Google performs 8 to 10 billion a day. So currently if they were to try to be on par with Google in terms of capacity their costs would be enormous. So driving those costs down is key.

Once that cost gets driven down, it's a whole new ballgame, and probably the first thing so far that could meaningfully challenge Google's core product.

There's going to also be extraordinary effort to tweak it, but it'll improve over time. That's not even taking into account business that will (and already are!) building on top of what OpenAI is doing, and tweak it heavily towards specific niches.
i mean you're just proving my point. They all involve onerous claim forms, or having to call... and just read and try and navigate all the conditions and caveats on those links. No thanks, i never want to navigate that mess, who has time for that? So it ends up being, you can instantly and effortlessly book for _cheaper_ with an OTA vs the hotel website, or you can navigate some byzantine claims process and _maybe_ it ends up being cheaper if your claim is accepted.

Its not a real option for most people who value their time, and thats by design.
This sounds more like you don't have other fulfilling hobbies to focus on once work finishes for the day, or management is pushing for results so hard that you feel like you need to work off the clock.

The only time I sometimes think of work outside business hours is on bike rides because its otherwise not very mentally stimulating.
The Platform Accountability and Transparency Act, Take Two
I turned this off. It is possible that the site gets hacked and your password manager automatically fills it in, the attacker now can read the password (via embedded javascript) that you've filled into the field without even submitting it first. By making this a manual process, it at least gives you a fighting chance.
I came across the most humorous password entry view blocking scenario on a firestick trying to login to netflix the other day.

You are visually moving the cursor around a graphically displayed keyboard... pressing enter when you are on the letter or number desired, at which point the hidden password entry form immediately increases by 1 in length.

Hrmmm... I wonder what that character was?!?
This is utterly incredible. I have so many ideas after reading way too much scifi and watching Ridley Scott’s scifi series, Raised By Wolves (what if we could create a benevolent, kind and caring ai to help humans grow and navigate into this world, like Father in the series)?

I want to jump in, badly. How would one go about picking up the skills needed to create stuff like this? As pragmatically, concretely and efficiently as possible without getting sidetracked in overly theoretical distractions?

I’m a fullstack engineer and have an MS in CS and pretty good math chops, but I sadly only took 1 machine learning course in all of my formal education.

How do I get into this (gpt-3, chatgpt are also on my mind)? Please, any books, moocs, etc
To add more data to the other comments, some federal agencies started pushing employees to use lastpass for work-related accounts a couple of years ago.
It's as big as you want it to be :) Some people build 1000+ page versions, which admittedly can push the filesize up a fair bit, but for the default config it weighs in under 3MB.

How the annotations are stored depends on the device you use. I just exported my 2022 planner in the reMarkable app with annotations (been using this file since May) and it's 32MB. So not exactly slim, but not massive either.
The salaries aren't particularly high at google vs any other tech company, especially when you look at the cost of living where they are located.

A lot of total comp is in the form a stock grants, which given stagnating and decreasing stock price represents a reduction in total comp for folk who are there long enough.

But also there's a difference between "this is your salary" and "this is your salary, but your job is no longer any safer than a contractor's"
Would there be need for a more personal take on Substack? Newsletter service which works on top of email - nothing gets posted to internet. And you could only invite people to subscribe your newsletter. Maybe some subgroups for your subscribers to manage whom you send your most personal thoughts.

Edit:
Didn't read the original post with my both eyes. Seems that's describing a service which is quite close to what I had in mind.
Huh, good point. I sorta wonder if nobody has "perfectly average color" who's vision matches the statistical average. Similar to how no pilot matches the statistically "average pilot size" as the air-force discovered when it first tried standardizing cockpits.