skysight-inc/HackerNews huggingface dataset:
There’s really no significant nexus documented here between Yass’ political giving and the legality of his tax avoidance strategy. He’s a free-market libertarian who hates paying taxes. He donates to groups and candidates that agree with his philosophy.

Maybe in 2025 a GOP trifecta that had help winning from Yass (and many, many others) will zero out all capital gains taxes or something, but that’s not corrupt, it’s just the long term policy see-saw tilting a different way.
Static binaries.

Cosmopolitan libc for poly-OS static binaries.
In those cases, you can send one to DDG and Bing, which are in the US. It won’t affect the actual website or other search engines, but it’s better than nothing.
Well, I don't understand the distinction you're making, as search doesn't seem special here to me. The key feature that makes something a shadow ban is that everything looks normal to the shadow-banned person, but the rest of us don't see their stuff or see it in some restricted way. That seems like it would apply equally to search, forum comments, etc.
At my workplace which deals with millions of customers.
What we have is essentially a segmented clone of prod. It's a 1:1 copy of prod with real data flowing through.

We use feature flags to enable-disable features. This way when our devs ship code to prod - it first lands in this segmented clone.

Then incrementally changes are propagated from this segmented area into actual prod-prod.
What the United States Owes Afghan Women
newsclues seems to be seeking the root of the problem. I'm no US history expert, but I don't figure there were PACs and SuperPACs influencing electoral politics when this country was founded. The congresspeople seem to have been here before the corrupt lobbying industry arrived, which would suggest corruption within the members of congress themselves arose first.

Please feel free to correct me if wrong.
Isn’t most of the value here in not allowing sideloading? In iOS your grandma/child cannot be tricked into clicking “allow apps from untrusted sources”, which is how most breaches happen.
Chatgpt, please write a function in python for the nth digit of pi.

Sure, here is a function in Python that calculates the nth digit of Pi using the Chudnovsky algorithm:

from decimal import *

def nth_digit_of_pi(n):
getcontext().prec = n + 1
C = 426880 * math.sqrt(10005)
M = 1
L = 13591409
X = 1
K = 6
S = L
for i in range(1, n):
M = (K ** 3 - 16 * K) * M // i ** 3
L += 545140134
X *= -262537412640768000
S += Decimal(M * L) / X
K += 12
return +str(S / C)[n]

Seems off, but I learned something: https://www.wikiwand.com/en/Chudnovsky_algorithm
Has anyone converted the formula to code?
Does SD have to recreate the entire image for it to violate copyright?

As a thought experiment, imagine a variant of something like SD was used for music generation rather than images. It was trained on all music on spotify and it is marketed as a paid tool for producers and artists. If the model reproduces specific sounds from certain songs, e.g. the specific beat from a song, hook, or melody, it would seem pretty straightforward that the generated content was derivative, even though only a feature of it was precisely reproduced. I could be wrong but as far as i am aware you need to get permission to use samples. Even if the content is not published those sounds are being sold by the company as inspiration, and therefore that should violate copyright. The training data is paramount because if you trained the model on stuff you generated yourself or on stuff with appropriate CC license, the resulting work would not violate copyright, or you could at least argue independent creation.

In the feature space of images and art, SD is doing something very similar, so i can see the argument that it violates copyright even without reproducing the whole training data.

Overall, i think we will ultimately need to decide how we want these technologies used, what restrictions should be on the training data, etc, and then create new laws specifically for the new technology, rather than trying to shoehorn it into existing copyright law.
So a Python interpreter implemented in Forth?

That reminds me of some code I came across one time which was a BASIC implemented in Forth. It was less than 100 lines of code, which I thought was impressive.
Golden Cove’s Vector Register File: Checking with Official (SPR) Data
The fact you have access to the source code and CAN audit software and modify it (ie to remove trackers) makes it much more balanced relationship.

Note you do not have to do it yourself you can rely on someone to do it for you (there is no monopoly here)

If you use Oracle you have no choice you Have to trust Oracle - if you use PostgreSQL you can chose to choose to PostgreSQL Global development team or of many commercial and community vendors who provide PostgreSQL builds for you.
I keep an old Windows XP VM around with Java 6 just for this exact reason.
Implement Q&A against your documentation with GPT3
There was once a time when mathematics was considered central to humanistic and philosophical development. It is said that at the entrance of Plato's Academy, there was the following prohibition: "Let no man ignorant of geometry enter here."
What would the fermentation feedstock be? Wheat?
There are three levels of visibility in livejoirnal: public, private, and friends-only. Many of my online journal entries are set to private, those are, as you said, for internal processing and private matters. I have the least interest to read those thoughts today. I’m more likely to reread friends-only posts which generated discussion with people who I’ve never met in real life, but who nevertheless became my good online friends. But in any case, if I were to open my journal today it would be to write new entries, not to read old ones.
How much protection will they get from external weather? What about soil quality in the middle/long run?

If weather becomes unreliable or far more extreme, indoor farming may be a better bet than hoping than a flood, a drought or other extreme weather events don't happen before harvesting.
My outside understanding is that a lot of value comes from the network. From meeting people, having access to the alumni network, etc.

Not all the value of course.

Good luck.
My TL;DR Summary With time I have moved further and further away from using the computer for important things and believe that tech has long since exceeded George Orwell's wildest fever dreams

I assume a freshly installed OS is compromised [1] and the hardware it is on is also compromised in the BIOS and firmware at very least by state actors but then I also assume those state actors have poorly vetted contractors that may also be compromised by other nations i.e. who pays the most gets access. I would not be surprised for a moment if they have competing backdoors that try to block one another. Since I can not control any of this I just imagine the national actors of the world are watching my screen and yawning. More likely the latest iteration of ECHELON AI is yawning. I instead focus on securing important externalities making bank accounts read-only from the web, not all banks will do this. I also diversify where my assets are stored and make a best effort to require physical access.

Beyond that layer I do all the usual hardening practices but that only goes so far as every browser likely also has intentional weaknesses in them. Even FireJail and SELinux/AppArmor will likely just happily relay malicious instructions. Addons may raise the bar keeping some script-kiddies off my machine but I never for a moment assume that it stops government contractors from relaying instructions to the backdoors in the hardware and/or OS and ultimately to the hidden CPU instructions that likely take multiple layers of obfuscated instructions to tickle meaning SandSifter will never find them.

The above is for PC's. For cell phones I assume FAANG are interactively on my phone and since most of them were initially funded by the government. I do not use it for anything sensitive. I also assume that all cell phones have backdoors added by their manufacturer. Each one does seem to dial home to different places and make unique DNS requests. Putting phones into developer/debug mode does seem to quiet them down which is the opposite than I would have expected so maybe they know someone may be watching. i.e. malware knows it's in a sandbox

Wi-Fi Access Points are a story in and of themselves.

Why should I care about state actors? That one's easy. The best contractors will have leaks in their OpsSec and for-profit companies will acquire the weaknesses and use them to do illegal and unethical things to citizens for a price and political, economic and a myriad of other motivations. I would not be surprised if some government actors sell off access and end up working for said companies.

[1] - https://news.ycombinator.com/item?id=34388990 [and hundreds of other threads]
Unfortunately a willingness to fire a senator or rep for one term, can be capitalized on by candidates or entire parties that are incapable of governing, but exist to attack and disrupt. And even those candidates are still plugged into the same money network.

It can work the other way around too. Voters can be influenced by fear of electing the wrong person. The predictable outcome of electing someone who promises to "disrupt the establishment" is a lesson that a society needs to re-learn once in a while.
I don't think so. While I am not sure about what "devices" means it's common practice for example to assume your root password is always compromised. The consequence here is that you don't allow remote, password-authenticated root.

On a similar note services and networks should be treated as compromised as well, meaning you must use encryption, authentication and in general make sure to limit attack surface.

And all of that boils down that you should make sure you should not rely on services, users, etc. don't for example access personal information they are not supposed to access.

After all the problem with things like Ransomware is exactly that this isn't assumed.
Maybe it's just because I'm sorta an audio guy, but this is how I first understood it.
Perhaps the advice is bad because this doesn't appear to be mentioned in the documentation.
I daily drive an m1 mac. I cant even change the initial boot screen wallpaper because it’s on a sealed partition. The previous intel/T2 approach of modifying then blessing the modified partition doesn’t work on m1. When i dug into the depths of this simple problem (changing boot screen wallpaper before login) i came away impressed.

So I feel fairly confident about the machine firmware & OS. Less so about my keyboard for example. Also because i opt out of a lot of the securities (e.g. i download from homebrew rather than using app store apps), I can’t be sure i’m not being compromised.
I wasn’t claiming that ignorance of the law is a defense. I was just speaking to the issue of inconsistent behavior in warning one but not the other. See the thread up to that comment — the relevance will be more clear in context.
Try not to use apps written in unsafe languages like C and C++, etc.
That was an old Cisco server, right? I think those models still require Flash even if they're fully updated, and people have to use VMs with Flash installed to access the BMC.
If the apps sandboxed, how can installing an app cause breaches? As far as I know, iOS apps are sandboxed.

Either the sandbox is very weak and Apple instead relies on App Store audits, or they disallow users installing apps outside the app store to protect their 30% tax that makes them a LOT of money.
It isn't published, it's a pre-print.
See also Plouffe's earlier (1995) formula to extract hexadecimal digits of pi: https://en.m.wikipedia.org/wiki/Bailey%E2%80%93Borwein%E2%80...
though the quote at the end is worth considering, the messenger is rather… interesting.

These so often have that particular flavor to them, a little lecture-y, a little “look it’s right in front of you.” Typically coming from a person that most certainly, well, “has.” Time, money, flexibility of many sorts.

https://www.syruspartners.com/

Bit odd that “who we are” is a list of one, which leads you right back to FS.
I am curious if there are any organizations (formal or informal) that audit popular FLOSS projects for such issues.
The linux kernel is much more than a million LoC. Closer to 30 million.
There are many ways to do this, most utilizing some kind of proxy-like architecture for all requests, or just to retrieve cookies. My personal favorite for retrieving cookies is FlareSolverr.

For strictly reading public webpages, public paywall bypass tools and archive sites work pretty well.
I suppose you could complement that with a camera + AI that recognizes when you leave your computer.
> "Assume breach" was the phrase they taught us at Microsoft (at least in 2016)

security(7) man pages on FreeBSD and DragonFly, I think originally written by Matt Dillon also tells you to assume breach for example for the root password, which is why you shouldn't allow password based logins over SSH, etc.

This is the earliest I could find, and it already contains assuming breach in 1998.

https://github.com/freebsd/freebsd-src/commit/f063d76ae36ca4...

Does anyone have an idea on how to see the file and its history from where it was moved? I checked 4.4 BSD, because the copyright mentions Berkley, bit I failed to find anything in the man1 directory.
This is very much called out in the Monad Burrito Tutorial Fallacy[1].

[1]: https://byorgey.wordpress.com/2009/01/12/abstraction-intuiti...
> What you want most of all is to have more projects that maintain themselves. You try to follow all the best practices: you have a CONTRIBUTING.md and a code of conduct, you enthusiastically hand out owner privileges to anyone who submits a high-quality PR.

I've helped out on other people's projects a lot in the past - enough to be given write access which I guess is what this guy means by owner privileges.

I walked away as soon as I stopped being interested in contributing, with no regrets, even though I could see the project needed help and I had become an expert in it. Why? Because I was not an owner. The project still has the other guy's name on it and if it's successful all the recognition goes to him.

So, while I feel a lot of sympathy for what has been written here and even have experienced some of it myself (the huge list of GitHub notifications especially resonates), I feel it's missing something important: if you really want to get people to become co-owners of your open source project,you need to give up control. Take your name off the front. Create a Github organization and move the project there. Give people actual control rather than pretend ownership that you can take back on a whim. Remove your ego and your name from your OSS projects and start to think of providing them as a service, start to treat long term contributors as equal teammates and you'll have a much better chance of creating projects that sustain themselves. On the other hand, if you're determined to keep your name on the front of the tin, well, isn't it fair that you do most of the work too? After all you're not paying anyone else for their contributions.
I assure you, lobbyists existed from the beginning. The rich - heavily represented in the Founding Fathers - have always had friends and "friends" looking to use their influence. Go outside the US and you'll see the same phenomenon; Viking chiefs will have had their buddies, the French kings had their courtiers, etc.

PACs and SuperPACs exist because the rich willed them into existence.
It took me a while to find it; you have to click the "See results about 'Double Asteroit Redirection Test'" link.
I suspect OP used it in the way that “I believe all my posts are showing up in the places that they should, but unbeknownst to me, they are being suppressed.” In this instance, I could see a “search engine shadowban” being an appropriate moniker.
There has been money and corrupt back-room dealing in politics as long as money, politics, and back rooms have been around.
I think "discretize" is the opposite of using continuous functions, if I understand correctly.

They probably meant to play golf in some kind of grid system and using only a few different strengths and angles.

But interestingly, most complex games have some kind of mixture of both: basket ball having discrete points, but fouls are remedied with a free shot on a continuous plane.

Ice hockey, on the other hand, has only a discrete set of places where the game can continue after a foul.
Maybe you're thinking of privacy, not security?

In terms of privacy, Android is "compromised" by default, i.e. Google collects and stores a ton of private information about you. I believe Apple used to be much better, and still is, but getting worse.
Chris’ Corner: Performance Talk
Finally, we can find the last digit of pi
Jeff Yass is amazing at staying out of the news in general. I'm surprised to find him on the front page of HN. But while Ken Griffin is top of mind to every gambling Redditer, with them following his jets and calling for his imprisonment at every opportunity, Jeff Yass does the same things Ken does, and they don't have any clue who he is.
Absolute joke isn’t it, going back if you have typed something freezes the tab for 3-5 seconds while it decides if it should warn you about losing your edits…
$ sudo -l
[...]

User yrro may run the following commands on fw33748-02:
(ALL : ALL) ALL
(ALL : ALL) !/usr/bin/sudo, !/usr/bin/su, !/bin/su

So

$ sudo su -
Sorry, user yrro is not allowed to execute '/usr/bin/su -' as root on fw33748-02.example.qq.
I don't know whether killing Tweetbot was intentional or deliberate. However I was a pretty heavy user of Twitter - scrolling through my timeline on the tram, in cafes, on the toilet or whenever I had a spare moment. I assumed that the API outage was temporary so I didn't download the "official" app, and figured I'd just wait a day or so for Tweetbot to be fixed. It's now been ~3 days, I don't miss not having Twitter, I don't check it at all. I'm maybe missing a couple of @dril posts, podcast recommendations or funny images I could've shared with friends but that's nothing.

So intentional or not, I'm effectively lost as a Twitter user. I'm not claiming to be particularly high value, but I don't imagine my experience is unique. I'm quite far from a fan of Musk but I enjoyed my Twitter experience enough that his meddling was just an amusing side-show until now. It's not a dramatic rage quit, just a sort of accidental "oh I guess I didn't need that" realisation that I didn't plan on having at all. Weird.

Interestingly if Twitter had said "We are killing off Tweetbot, you have to use our app" I probably would have just begrudgingly downloaded the Twitter app. But because they didn't say anything, I just waited and went through the "cold turkey" period, where every now and then I'd instinctively tap the Tweetbot icon before thinking "ah yeah it's down, oh well" - before completely losing that habit. What an own goal.
I believe you, but do you know of any books or resources where I can learn more about this?
Interestingly the method used to deal bridge hands for top tournaments doesn’t shuffle at all, it generates a random number between 1 and 52!/(13!^4) and maps that number to a corresponding deal of the cards.
Ask HN: Technical Leader to Security Consultant
Hi,

I'm currently working as a technical leader in the banking industry.

We usually order security audits and I'm fascinated by the skills of the auditing team.

Plus, I really like architecture/code reviewing, auditing our stack and hacking.

I'm really interested to work as a security expert/consultant on my own in areas such pentesting or cyber security engineering.

What are the certificates I need to pass ?
Is there any good learning path I can follow?

Regards
alternative source https://newsable.asianetnews.com/world/mada-9-taliban-unveil...
No offense, but I worked on the Hill as a Staffer and activiely worked on helping draft legislation. Having a front-end developer with no legislative experience trying to explain my former job to me and how we actively wrote legislation is a bit jarring.

Also, I never said it didn't exist - I said it's more common at the state level than the federal level
In an incognito window, I googled: mcdonalds yelp dc

1.5 stars, 2.5 stars, 1 star, 1.5 stars, 2 stars, 2 stars, 2 stars, etc...

And this is maybe the most popular and beloved fast food restaurant in the world!
Near-Miss at JFK Airport
From the parent poster:

> > "I think you're missing the case where the hospital is trying to let you know about the state of your loved one."

But how is any information about the state of someone will impact the course of actions for that person?

> He'd have died anyway

Exactly this.

Maybe it's stoicism, but personally I don't know how I would be upset about actions I couldn't change.

If anything, the voicemail saved your brother a good night of sleep, that would have been otherwise wasted doing... what exactly? Pre mourning? Creating some familial unity by suffering together? Scaring him emotionally by having to hold the hand of a dying person?

I just don't understand all this.
I wll strt mttng vwls frm my cmmnts t rduc nrgy cnsumptn. Svng th plnt n vwl t a tm!
The Trump organization committed tax fraud, and as this article lays out, Yass’s techniques were / are also illegal.
The sandboxes are regularly breached. Basically any time you hear about people "rooting" their phones, that's an intentional sandbox breach.
Rhadamanthys: New Stealer Spreading Through Google Ads
Its something of a tradeoff space that is always there you either have things that look the same be implicit (eg is 1 and 10000000 the same type? How about 1 and 1. ? How about 1 and -1?, how about 1 and moo? 1e2 and 1f2?

You can have things be explicit and verbose (have explicit unambiguous identifiers on every value), or you can have things magic and then surprising in something like this.

Rails also made a similar decision to basically auto convert what would be the string true to the Boolean value true in many cases. It's not obviously right or wrong, it's just a choice that has tradeoffs.

I think my own sensibility is that it's actually reasonable for something like yaml to allow you to choose to omit quotes and if you do then it's automatic typing: 1e2 is a number and 1z2 is a string. If you want it to be a string you can put quotes on every value if you want, exactly like you would in json, choosing unquoted for things that are strings is choosing the automatic typing case.

But these other values like y and n being autotyped as bool are suspect autotype behavior to me: even once you've accepted unquoted is autotyped you are more likely to be caught off guard by this than by 0 vs true vs 0z.
"I worked as an individual staffer in 1/538 offices" isn't a great refutation for reputable news reporting; I certainly wouldn't be surprised by lobbyists targeting specific receptive legislators for the tactic. We've got plenty of incontrovertible evidence of lobbyists getting their precise language into bills; a staffer is quoted in the NPR article with a very different opinion than the one you're espousing.

(I'm not a front-end dev, incidentally. That's my absolute least favorite part of the web.)
... but the pair's orbit was changed by some amount. How much?
It should have been titled "Stop Reading Today's News"

"Today's news" was invented with the telegraph.

If you haven't read Postman's "Amusing Ourselves to Death" it's worth your time.
People told me that over and over but it didn’t help — because it didn’t make sense why repeated multiplication would cause rotation!

Later in that video, we see a visualization of the rotation. I was able to grasp how the exp function could yield rotation where I’d never been able to understand why e*e*e*e… did.

https://www.youtube.com/watch?v=ZxYOEwM6Wbk&t=2178s
Stop feeding the hype and start resisting