skysight-inc/HackerNews huggingface dataset:
We’re (3Box Labs) releasing the beta of ComposeDB on Ceramic: a decentralized graph database that combines GraphQL, reusable data models, and decentralized event streaming. You can find the docs at [https://composedb.js.org/docs/0.4.x/introduction](https://co..., or learn more at [https://blog.ceramic.network/composedb-is-live-on-ceramic-ma....

In its current state, ComposeDB is focused on letting Web3 developers build fully composable applications: apps that share data models and data so they can scale together and deliver user experiences across platforms that aren’t possible with siloed databases. For example, building DMs that persist across multiple apps, reputation that aggregates across platforms, and content collaboration from multiple different interfaces.

For my involvement, I’ve joined the 3Box Labs team recently. 3Box Labs is responsible for creating Composedb and Ceramic, which is the protocol that ComposeDB leverages to deliver its functionality. I’ve been lucky enough to work on both parts in my time with the company. Previously, I was in the network security and web2 space, and started looking for something which can help move us to a decentralized internet, and hopefully to a place where users own their data. Bonus points, if whatever we build is more secure, and less prone to having my data leaked constantly.

Ceramic and composedb will hopefully provide the building blocks which allow dApps to be more easily built in Web3. Would love to know if you find the project interesting, what things you might want to build, or issues you have using the project.
> Using a PSK alone doesn't make WireGuard quantum-safe.

Not sure what you're trying to say here. If you share the PSK out-of-band, securely, then wireguard is quantum resistant (I wouldn't say quantum-safe, because I'm not that optimistic).

> If an attacker were to obtain the PSK

Indeed if the attacker obtains the PSK then obviously the PSK isn't going to help you.
> It's downvoted because the propaganda suggests that "it's different when we do it".

Isn't it how it always works? When we[1] do it, it's a "humanitarian intervention" or "special military intervention" or "to protect human rights" or "spread democracy" or "prevent genocide" or "protect the women and children", but when they[2] do it, it's an "aggression", "genocide", "atrocities", "crime against humanity".

[1][2] feel free to pick any side here, dosen't matter. We == good, they == evil, for any we and they.
Agreed. Although I like Rust and modern Java too.
Wicker furniture was also the weight saving solution used on the 1920s/30s British airship R101: https://www.airshipsonline.com/airships/interior/R101Interio...

Of course that was before aluminium was cheap and widely available. I'm going to say that aluminium or plastic seems like a more likely choice for future Mars missions, at least until they work out how to grow bamboo locally.
That is how I perceive it. Yet there are apparently lots of researchers who "think" otherwise. However, I question to what degree they have a solid theory or for what motives they push forward in the face of what would seem impossible?
Funny. Yesterday, I asked a co-worker to edit an org-mode document (it is plain text after all) that will be exported to Latex (because it is a lot easier to deal with Latex in org than to edit raw tex). To my surprise, he did not barf. Kudos to him, but yeah, I'm always apprehensive when I reveal my org workflow to colleagues.
Well, the stock is up 3.24% today, so mission accomplished.
Stripe has always been a model of the ideal remote/async/build in public workflow many people on HN seem to desire(including myself).

The culture seems to reflect with the systems created. Conway's law applies heavily here.

https://en.wikipedia.org/wiki/Conway%27s_law
$0.13 and a "Sorry, it won't happen again."
I'm agreeing with that part. The part I disagree with is that we are somehow "fucked". We have lots of smart people working on that problem. Which is why we've actually had some good climate news lately. Doomer-ish statements like, "we're fucked", are just as likely to lead to demotivation and panic as they are to helpful solutions or action. So I avoid that mindset completely.

It is a funny punchline. That's why I say it's a great joke. But let's not read too much into that.
SurfingKeys has way more features. It supports Firefox and Chromium-based browsers so I can keep a single config file for both (.config/surfingkeys/config). Vimium and Vimium C are good if you need basic Vim navigation capabilities. Pentadactyl and Vimperator (both discontinued) are Firefox-only.
It’s going to be absolutely wonderful at automated moderation.
You know, I’m starting to become slightly more serious about switching carriers solely based on how terrible it would be to experience SMS/Call diverting of my number.

While I use a yubikey, OTP (where possible), and unique passwords…there’s still places where I have no choice and my number is my auth (or stupidly a reset option).

I genuinely am happy with TMO service in the US, and frankly abroad it’s excellent…but I’d be lying if every single article I see about their security breaches reminds me I may be on borrowed time myself.
If the default understanding is a strawman of what all self-avowed free speech absolutists believe, that will favor the side of those free speech absolutists in the long run. I’m ok with that. I’ll be right now and forever, the rest of you will have to catch up later on when you discover you’ve been fighting a strawman.
> T-Mobile declined to answer questions about what it may be doing to beef up employee authentication. But Nicholas Weaver, a researcher and lecturer at University of California, Berkeley’s International Computer Science Institute, said T-Mobile and all the major wireless providers should be requiring employees to use physical security keys for that second factor when logging into company resources.

> “These breaches should not happen,” Weaver said. “Because T-Mobile should have long ago issued all employees security keys and switched to security keys for the second factor. And because security keys provably block this style of attack.”

At what point do we consider industry self-regulation on this a total failure? You don't need to make Yubikeys a part of every auth workflow in your corporate enterprise if there are legacy systems/integrations, but you should at least do it for the things that can change customer mobile subscription details and there can't be any excuse.
Legion Health (YC S21) is hiring a founding engineer to fix mental health
There isn't any specific site to disable. It's just an IP that was allocated randomly to my cluster on the VPN I'm connected to. But, sometimes they also have domain names because I need that. Anyways, my point was: it's not that much of a burden really.
As others have pointed out - you could have not spent money on computer science as well - if anything that's a field that has no problem at all with the self taught.

I'd also like to propose that reading history novels isn't the same as a history education, in much the same way that reading those novels isn't the same as an English degree.
Understanding media, notably.

See: "Understanding Media" by Marshall McLuhan.
curious: for the blockIO engine can a qcow2 image be specified as a path? how do i run python in this? can i get to the BPF engine?
I was more thinking of donating to a Go Fund Me or something like that.
Bread, circuses, whips and chains. Spicy.
I recently read an essay about this tragedy of algorithms, perhaps phrased differently.

The bittersweet success of general algorithms that just chew up data and compute time to arrive at very good answers, over algorithms crafted from a careful understanding of the problem.

I tried searching for it, but haven't found it yet.
you think they're real? do you think i'm real?
Based on their own press release, sounds like they failed that already.
Wasn't redis (often considered an incredibly approachable codebase) initially written by one person?
They closed the API's I used to sync with org mode.
SBOM is a 'massive galaxy of mess' for supply chain security
How is it just a Slack setting? As in if you were to talk in the office and suddenly the other side shouts out loud so everyone on the same floor can hear it that's also just a setting?

People start private chats for whatever reason they like but they assume it's private. Until there is an agreement by both sides for it to be public it shouldn't. It shouldn't matter whether that's online (via Slack) or in person (via a private room).
I’m the opposite. There’s always one PITA android user breaking text threads for teams or school things.

The worst was one of the crappier phones that would send a half dozen differently scaled pictures.
Only VC++ is working on it, the clang tidy developer looking into lifetime has moved on.
You didn't read the article. This isn't about a data leak, it's about being able to intercept SMS for any T-Mobile phone number.
Another theory is that it wasn't an 'accidental' leak but a bio-weapon against the West, with the unfortunate collateral damage of affecting China too.
RadioGPT will use AI to put your local DJ out of a job
Yeah, my apologies, I read the post as dripping with sarcasm. My mistake!
I too love messing with the bot scrapers that decide stock trades.
Pandas is still way too slow, if only there was an intégration with datafusion or arrow2
This would indeed be very interesting to see these pictures side by side, excluding the color / lighting correction of the picture as a whole. I wouldn't discount them entirely though, as I think at least a while back some pretty nasty selective color / lighting manipulation was being used to lighten people's skin color.
Audiofy -Music, MP3 Pplayer
Discover the ultimate audio experience with Audiofy - the best music player. Enjoy seamless offline playback and immerse yourself in high-quality sound and easy navigation. With our well-organized music library, find your favorite songs with ease. Browse by playlists, artists, genres, folders, albums and more.

Built with the latest technology from Android and in active development, Audiofy is the music player app you need. Our user-friendly interface and customizable options make your music experience personal and tailored to your needs. With offline playback support, you can listen to your music anywhere, anytime.

Get the most out of your music collection with the best audio player. Download Audiofy - Music Player now and experience high-quality sound and effortless navigation.
It’s primarily for industries with strict regulatory/compliance requirements on managing sensitive data. The more detailed description is at [1]. Keys are stored in a cloud service, admins and end users use SSO to retrieve a key whenever they need to access an encrypted document. This is supposed to let companies do things like enforce rules on forwarding or printing sensitive emails, revoke access to particular documents if needed, and reduce the scale and risk of leaks if Google or an individual user account was breached. Of course, it’s not perfect in practice.

[1] https://support.google.com/a/answer/10741897
Yeah, you shouldn't have GC in systems-level code any more than I should have lifetime concerns in application-level code. Problem is leaders end up choosing C++ for both and saying y'all should know how to deal with it.

Google also has a lot of stuff in the middle where they're fine with sacrificing a little speed for a lot more safety, but Java etc are too slow. Golang was supposed to satisfy that, but I'm guessing it was too big of a leap from C++.
Yes, so it's a central government (BJP) agency arresting a state government (AAP) leader.

Not sure what do you mean by "they turned a blind eye", but:

>> 140 Cases Filed Against AAP MLAs and Members, 72 Disposed of, Just 1 Conviction So Far

>> Of the 140 cases against the party analyzed by News18.com, only one has resulted in conviction while 72 have ended in acquittals, discharges or settlements. Of the remaining, 39 are pending and the rest have either been stayed, or are cases where the charge-sheet has not been filed yet.

https://www.news18.com/news/india/140-cases-filed-against-aa...
Researchers collected data from studies on over 100K brains, insights on aging
Ah the days of ISAPI ATL extensions. :)
The Offshore Networks of Oligarchs
Surely any enterprising criminal would do both sell and exploit users data…
That's my secret. I'm always lonely.
You still can. The problem arises when you don't actually wanna pre-share the key, and you still want post-quantum forward secrecy. Then you need a PQ KEM like McEliece or Kyber to run a PQ-secure key establishment.
> Phish T-Mobile employees for access to internal company tools, and then convert that access into a cybercrime service that could be hired to divert any T-Mobile user’s text messages and phone calls to another device.

If they are doing all this through phishing and aren't being as successful with other networks there's some serious issue that's being overlooked. It's unclear from the article if this is due to training, lax security on internal tools, lack of two factor (as claimed in the article) or something else (even insiders).

That's too bad, I've been on T-Mobile for years. Whenever I can I'll use yubikeys or OTP. But there's still a large number of sites and services that rely on SMS.
My father taught at a local state university, nowhere near state flagship level but still a "university" in name, and he occasionally had kids in class who were close to functionally illiterate. His reading for the semester was very light (something you would get through in a competitive university in a week) but from helping kids who came to his office he could tell it would have been a hundred hours of reading for some of them, even if they skipped all the words they didn't know.

I think I approve of letting every kid take a crack at college. If they graduate high school, there should be a school somewhere that gives them a chance. The problem is that if they aren't ready, there's no place they can go. They can't go back to their old high school and demand to be taught what the teachers pretended to teach them. The best they can do is take remedial reading classes at the university, borrowing money to learn what their local schools were supposed to teach them for free.

Most (maybe all?) of the kids like this that my dad encountered came from rural schools where you have a similar range of preparedness and home situations that you see in an urban setting, but you only have enough kids the same age to fill one or two classrooms. A teacher can't personalize the curriculum for every single student, so a kid who falls significantly behind will, after a certain point, no longer receive a meaningful amount of instruction, because the curriculum that's appropriate for the bulk of the class is beyond what they can engage with. Schools that recognize the unfairness of failing a kid that they're not even teaching tend to pass these kids along from grade to grade and then graduate them, and it's hard to fault them for it. If you think of instructional level as a spectrum from remedial to advanced, rural schools only have the resources to cover the middle part of that spectrum where 90-95% of their students are. All they can do for the rest is give them an apology and a diploma.
Unfortunately, most carriers (except ATT & Verizon) are just T-Mobile resellers... so you might think you're not using T-Mobile but you're still affected.

Even if you use ATT or Verizon, the article mentions they're also hacked and SMS intercepted often.
The author is a native speaker of English, who immigrated from the pre-electronic world of Emily Brontë and Jane Austen, as evidenced by writing such as "[a] tale which I tell here not to evoke sympathy nor to seek redress, but to caution any others similarly compromised of the costly perils of unyielding stupidity."
YC: The Potential of Generative AI
Pilot makes 360-degree turn to let passengers view northern lights
> [...] just being normally capable of speaking [...]

I think you may be confusing a medium (speaking) with communication itself. Successful communication is as much about the choice of medium as it is what you're communicating. Communication is the method through which we extract thoughts from our own brain and share them. Code is a form of communication! You can be a fantastic speaker and a terrible communicator, likewise you can be a terrible speaker and a fantastic communicator. The right environment for you is an environment in which you're able to choose to communicate in the medium that has the best outcomes.

For example, spoken communication is my weakest form of communication and yet it has not hindered me at all, in fact, I am considered an excellent communicator by the people I work with. Sometimes, you have[1] to use a method of communication that you're not confident with, so you can develop strategies to help you communicate more effectively in that situation. When I'm speaking, I take notes in advance to flesh out my thoughts, and if I find myself struggling during a conversation, I'm honest about it and recommend next steps -- e.g: "I'm not sure about that off the top of my head, so after this call I will put together some thoughts and get back to you by the end of the day".

The people you work with benefit most when you succeed :) You're clearly a very capable communicator based on your comments here, you don't need to argue against the fundamental importance of communication, rather, you need to find an environment where you're encourage and rewarded for embracing the communication methods that work best for you.

I couldn't have spoken this comment out loud and that has zero impact on my communication ability.

[1] Dyslexia is a common example of this that I've encountered. If a colleague prefers listening to reading due to dyslexia, I will choose to speak with them because even though I'm bad at it that is the most effective means of communicating with them.
Similarly, my experience is that it requires a single person on the team who cares “too much” about code quality, consistency, etc. They basically forced everyone to comply. This is not intended to be a negative.
Looks awesome.
I wish a tool like photoshop to open email, edit and save on git, without copy/paste thing. Maybe even a plugin to VSCode.

But it is just wishes.
Nice work!
ChatGPT and the AI Apocalypse
I mean, you get no compensation from your data being sold.

This case is notably different from hackers stealing your data. Instead, they could steal your identity. With this type of access, they could impersonate you at your bank, your email, anything that uses SMS as a form of verification.

This isn't a "whoops, people know your birthday now (again)." This is "whoops, someone hacked into your bank account." All because TMobile's security practices (or at least Employee training) are extremely lacking.
Admitting that it's been [cough] decades since I was anywhere near an English Lit. course...even back then, the workloads (hours/week of required reading) were notorious. Similar for the lackluster job market for English Lit. majors. That does not sound like a combination to attract many marginally-qualified students, regardless of affirmative action.
The pizza ovens at this scale are massive industrial conveyer belts: the bake time is the time it takes the conveyer to move from the start of the oven to the end of the oven. The length of the conveyer belt is influenced by the number of pizzas (and other baked goods such as pastas, wings, and baked desserts) they want to be able to bake in somewhat parallel (obviously it is something more like a queue, but there's a major overlap in baking times of consequent items). The speed of the conveyer belt is influenced by operator safety concerns and also avoiding the "Lucy and Ethel backup problem" (from the famous episode of I Love Lucy about the conveyer belt at the chocolate factory).

In many ways, at this industrial scale of oven the pizza recipes (and pasta recipes and wing types and baked desserts and everything else sent through the oven) are calibrated specifically to the bake times of the chosen oven conveyer belt length and speed rather than the other way around.

(Which isn't to suggest that such ovens don't get redesigned from time to time, but that's likely a large enough project that Tracker programmer has plenty of lead time.)
The poster was talking about "human error". If you are out of a car because your lender messed up (perhaps intentionally to pocket the late fee) you are in trouble, because everyone needs a vehicle to get to work on time. And of course you have as much recourse against your lender as the people at the receiving end of the Hertz case. Didn't Peter Thiel say you need a seven-figure sum to make the legal system work for you?
This may be a dumb question, but would it be possible to apply these techniques to something like text completion and/or visual question answering? If you went ahead and used the optimizations but still scaled the model up?
WhatsApp build something like that: https://engineering.fb.com/2022/03/10/security/code-verify/
That depends on the coworkers really. If you got coworkers, who understand, that it is simply plain text, and who have a half decent editor or IDE, they will have at least OK-ish syntax highlighting and should really not have any problem editing the file or collaborating on it.
This is not just tick a checkbox and it is done. Enabling it is non-trivial as it requires setting up a whole bunch of stuff, like integrating with a third party key service provider (or setting up your own).
https://archive.is/nK0Mj
Ideal soil and water locations may move. Running out at current farms is different from running out on earth.
Pretty typical for most first line support though. Especially outsourced.

It's hard to find people with languages and tech skills so most outsourcers just fulfill the former and cover the latter with endless infernal flowcharts. Really sucks when your problem is not on the chart. Escalating is usually discouraged by giving targets per day to the agents.

I guess you're in the US so perhaps language isn't as much of an issue but a lot of US companies support from the Philippines now because they have a favourably perceived accent (unlike Indians which a lot of customers have come to associate with 'poor support' so it leads to kneejerk reactions *). But anyway in the Philippines it's now hard to find staff too.

But anyway my point is that the support experience is not really related to internal IT competence.

*) not my personal opinion but I have seen US companies in particular use this argument. Unlike in the UK where Indian accents are common. I worked on the contact center tech realm for 20 years.
I've lost that hope / illusion a while ago. Today, I spend days away in pointless attempts at convincing someone to fix a bug that I know full well is not going to be fixed, just so that I could clear my consciousness (or cover my rear) by pretending I've done my job.
Very interesting set of design decisions. Really does seem so much simpler. Not sure how exactly they handled some of the tricky bits of state (such as disk volumes and environment variables) but it’s at least “working” in the video.
Look at women as people and not an appearance rating between 1 and 10. It could help.
It still stuns me that so-called ML experts have turned into the "just add more layers" meme.

I denounce LeCun for his political tirades and just generally bad takes, but this statement of his is a healthy skepticism.
Not if they are doing a SIM swap. If they are paying $1k as claimed they are after far more interesting things in your accounts than just basic information to sell.