skysight-inc/HackerNews huggingface dataset:
You guys have an insanely large territory but I always found it very confusing with all the complaints about police conduct why is no one there pushing for a federal level single training institution and increased academy training.

Most other places in the world cops have to train for +24 months and most of it is focused on physical conditioning, descalation/conflict psychology, and Law.

I mean knowing my local government incompetence I would be pretty nervous in having people with guns being trained by a local institution. It needs to be federal, standardized, and just longer than the few months training US cops have.
Because......you can't really go below it? So they are calibrated to start at 400ppm, because your ambient air won't have any less than that unless you have active CO2 scrubbers running, and that's very very rare.

Also I have multiple SCD41 sensors and can confirm that they do give you values both below 400ppm and above 5000ppm - they just get less accurate out of that range.
You could try the browser extension "Old reddit redirect".
CPUs too. And RAM, no way that goes wrong. Hey, hard disks are infallible right?

Yeah, nothing is 100%, and if it were nothing could prove it was.
It's Ohio, a backwater state. The kind of place where AGs claim fabrication for any story that might embarrass them. I wouldn't hold my breath. If the state government stepped in, the outcomes might well be worse.
now that's a new low.
I think people should take their lithium.
When is the right time to go against predatory and corrupt companies?

Yesterday. But today is a good second choice.
The last time I checked, this pearl-clutching over "book bans" was about books being dropped from library shelves or school reading lists, not from the books actually being prohibited for purchase or reading.

Come on, folks, censorship is when you use coercive power to completely prevent access to a resource, not when you curate a list and it doesn't happen to make the cut.
El Salvador president readies bill to eliminate taxes on tech
“Next week, I'll be sending a bill to congress to eliminate all taxes (income, property, capital gains and import tariffs) on technology innovations, such as software programming, coding, apps and AI development” president said on Twitter.
They mean they are not sure if anyone actually downloaded the private key.

That's the "caution" part.
On the subject of foreign language films. I have a hard time watching most modern films, it is the dialog, the dialog just sounds bad (do people actually talk like this??). But I will happily watch a film in a language I don't understand.

My theory is that the dialog is just as bad if not worse in foreign films, If I could understand it I would still hate it. It is actually a case of reading rather than listening to the dialog, in consuming it it written form, rather than audio form, my brain fills in the gaps, covers up the inadequacies, the audio is only there to convey tone, I suspect that this forced quick reading covers up many sins of the spoken word.

Sometimes I am tempted to try and find foreign dubs and native subtitles for native films.
> Why is there seemingly no accountability going on?

Warrants are petitioned for by district attorneys, who are elected officials. In principle, the means of redress for inappropriately pushing for warrants and improperly using prosecutorial discretion is at the ballot box.
> .. but that should always be in addition to what an outside body decides.

I.e. civil society.
Three Comments on Leetcode
Wrong. A CBA is always needed. If the potential damage from MITM attacks made possible by rotating the key is greater than the potential damage from a rogue key multiplied by the likelihood that someone actually accessed the key, then it is wrong to rotate the key. It's that simple.

The only way a CBA would be unnecessary is if rotating the key didn't have any security risks. But it does.
Block published a press release [0] saying they intend to sue. But, that article by Hindenburg seems quite in-depth and they'll have a hard time squeezing themselves out of this.

[0]: https://investors.block.xyz/news/news-details/2023/Blocks-Re...
Always has been...
Ssh keys are much simpler than the PKI cert infrastructure. This has advantages for development, as well as bug resistance. But it means ssh expects every server behind the same hostname to use the same SSH key.

You can't get two (well functioning) TPMs to have the same key. They come with their own, un-extractable* and unchangeable keys built in.

*TPMs claim this, it is probably not impossible to extract keys just incredibly difficult and requiring specialist knowledge.
I saw the face of God in a semiconductor factory
Spotted here: https://www.ft.com/content/423f90b5-dca6-4370-9650-eb92c92d4...
"Surely you're joking, Mr Feynman" I think is the most famous and is quite enjoyable.
They must put a banner on every page on Github to notify this.
“ Initial Disclosure: After extensive research, we have taken a short position in shares of Block, Inc. (NYSE: SQ). This report represents our opinion, and we encourage every reader to do their own due diligence. Please see our full disclaimer at the bottom of the report.”

I’m surprised that it’s legal to short sell then go on the attack. If it is, imagine having the cojones to do that and then go live with this report.
https://www.chordieapp.com/, you may need https://www.tobias-erichsen.de/software/loopmidi.html as companion.
> Dorsey [...] told investors about the large number of songs named after Cash App and described how music had become a way to share with others how valuable the app is to them personally, providing them with “so much utility.”

> A review of songs mentioning Cash App shows that the artists are not generally rapping about Cash App’s smooth user interface and robust software integration toolkit.

> Instead, lyrics describe how easy it is to move money through Cash App to facilitate fraud, traffic drugs, or even pay for murder.
Until this tech moves into our brains. AI wetware ushering in transcendence.
I've actually been in this situation. In a past life I was a programmer at a t-shirt printing company. On their first day at the company everyone worked on the line for ~4 hours. I was picking and printing t-shirts on the factory floor. I was able to see how things worked and how they didn't.

But the major factor is I wasn't scared to make or suggest changes in how I worked. Everyone else on the line needed that t-shirt printing job so they just did what they were told. I wasn't afraid of being fired or reprimanded for making changes so I was much more free with my words and work.
One of the creators of Flower here - I can only say that the team behind Flower appreciates the contributions of FedML to the field of federated learning. Their work helps to make federated learning more widely known, and they published significant advances in making federated learning more robust and scalable.

In fact, we are in the process of implementing LightSecAgg, and we'd welcome their feedback once we have a working version.
That’s Hindenburg’s MO. Extensive research -> short position -> publication of research
I think there's a substantive difference between something you experience and recollect from the input of your own senses and something digitized, recorded, and preserved in perfect form in a format that is easily shared in every detail and easily repurposed in endless ways.

I do think that people should be able to record events that occur on their own properly, and even their own phone calls without consent of another person, but I worry about the implications of saying that our ability to remember events and the ability to log data are basically the same. Feels like a loophole that a lot of evil people and companies would happily jump through.

Generally though, I don't really see an ethical problem with data collected strictly for an individual's personal use and I guess in theory we could have two party consent laws that acknowledge that but still offer some protections.
Of course, these anarchist projects all fail (like Occupy) or have murder rates significantly above baseline society (like CHAZ) so this shows… something.
As someone who does actual software engineering (although I have done my share of software tree houses and garages as well):

If you don't have solid experience already: Don't plan your projects with anything except plain React configured with TypeScript. Use "Create React Application" (cra) to set it up and stick with the standards.

Everything else you can add later - if you need it - and in the mean time you have the chance to move faster without breaking things and make better decisions.

If you already have solid experience: consider this anyway if it is just another web application. I personally at least have seen a lot of time wasted because people always deviate from the standards both in React, Angular and Maven.

When time comes to add things we think we need, think about the tokens mentioned in https://boringtechnology.club
Hey, knowledgegpt is a library we wrote for creating chatbots based on various information sources easily, currently, it can retrieve information by scraping websites, using YouTube transcripts and audio ( in case of no written information is available ) as an information source, extracting text from raw audio to use as an information source, and querying documents such as pdf, ppt, and doc files.

It's available on PyPI so you can install it using pip install knowledgegpt

It introduces some dependencies though if you don't like that you can read this blog post to introduce it: https://medium.com/geeks-of-data/knowledge-gpt-a-library-for...

You can check the sources mentioned, every feedback is welcome, if you have any ideas on short-mid-long term vision for the project, just ask here or use either of the links provided.

Thanks a lot to everyone who are interested.
It’s legal but you must talk about facts and not make anything up, and you must act without insider information.

This is why the report is surgical in its wording.
Run "ssh -T git@github.com" command.

It should error like this:

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:uNiVztksCsDhcc0u9e8BujQXVUpKZIDTMczCvj3tD2s.
Please contact your system administrator.

Note that the SHA256 present there matches perfectly the one github send. If you don't remember the very first time you connected to github you also had to accept the key. The warning above shows up because the server is saved as a different RSA, for the SSH client it seems that someone setup a server for github but has a different key, which could mean someone is trying to trick you into connecting into the wrong server. This could also mean that github changed their RSA key which is why they published this article.
> It can reason correctly about hard problems with very little information.

i am so tired of seeing people who should know better think that this program can reason.

(in before the 400th time some programmer tells me "well aren't you just an autocomplete" as if they know anything about the human brain)
The issue is that the twitter thread makes it out that leaving comments is “amateur” or “wrong” without giving the author a fair chance to rebut them. Anyone seeing this is going to start stripping their comments so they don’t get framed this way.
We are talking about a computer program that cannot make decisions. Often times human intelligence is compared with the types of decisions the person makes.
Parts of Northern California will see Northern Lights due to geomagnetic storm
It actually is legal and the way how Hindenburg Research (and other popular/infamous shortsellers) make money: Research and expose fraud to hold companies accountable, with a (massive) financial stake to be correct in the research.

Personally, I used to be quite antagonistic to shortsellers, but at least the ones holding onto the principles of journalistic integrity and good research provide good value to society. Just look at Wirecard.
There have been many "hmm, that's odd from a Standard Model point of view". The only one that has definitely been verified is nonzero neutrino masses, which were easily incorporated into the SM. There are still many open puzzles and tantalizing hints.
If you ever push anything to a public Github repository it is immediately mirrored by a host of bots. If it was there for any amount of time, it's there. That said, if I'm honest I think almost no one checks the SSH host key. I would bet that for 9 out of 10 engineers / devops / security people, they will ignore the SSH Host Key and might even set StrictHostKeyChecking=no.

I know I know. All you have to do is to just MITM someone's DNS or IP traffic or whatever and it's all over. Well, I will guarantee you that millions of bitcoin are sitting there waiting for you to take it. It's all yours. Go take it. You could be a millionaire tomorrow. And if you do it right, they'll let you keep some of it if you send most of it back.
Sure I can imagine that. And in doing so, I imagine this attack is pretty unlikely.

I mean, think of the confluence of things that have to line up for this to work for someone. Many stars have to align in order for someone to successfully exploit this leak. Is it impossible? No, of course not, and so GH was right to rotate the key here, even if their server request logs suggested that no one had accessed it.

If people actually have this sort of attack in their threat model, there are ways to protect against it. Signing commits and verifying them. Pinning to a particular git SHA1 hash. Etc. If people are not doing these things, then it's possible they've made the decision not to worry about this sort of attack. Sure, you can disagree with, but I think you'd probably be in the minority. That's ok, though; you can certainly protect the things you're responsible for in stronger ways.
What do you use it for? As a web developer I use Github's Copilot and enjoy its assistance the most in unit tests. I haven't found any use case for ChatGPT yet. I get better & quicker results searching what I need on Google. I'm much quicker searching by keywords as opposed to putting together a full sentence for ChatGPT.
> gamble with the future of humanity

what in the world are you people talking about, it's a fucking autocomplete program
A comment doesnt' need to be a rebuttal. I was expanding on the topic.
Does he know they had Socrates killed for being annoying?
You don't need to involve a P vs NP discussion at all if you want to have a practical discussion to begin with. Big-Oh is sufficient?
Note the MITM here :)

We humans really aren't cut out for this, are we.
Doesn't look like Block's collapse would cause any issues with the financial system
Look for the part of the article that says "the following message"

Or the parts below it about updating and verifying in other ways.
Worth noting that the title of this HN post is a little misleading - and Hindenburg actually have not accused Block of fraud (only of facilitating others to commit fraud through their platform).
I saw once a support person from $COMPANY_I_WORK_IN ask a client to send their private key in email, so they could troubleshoot something. I pressed "Reply all" and called it out, and was yelled at later.
The man in question will live out his final years as an international pariah, paranoid about appearing weak in front of any potential rivals domestically, unable to freely travel internationally and with his legacy tarnished beyond repair.

I’m not sure we will see him in a jail cell, but currently he’s not exactly living his best life …
What I am surprised of is how it is legal to have long position in stocks and then lie and pretend to increase the company value...
I would guess so. It would have been nuts for the Swedes to build custom ammo that nobody else uses just for the Grippen, especially given they aimed the jet at the export market as well.

Stuff like missiles and bombs seem to be easily fitted to basically any jet with hard mounts: see the Ukrainian airforce using western missiles on Soviet era aircrafts.
OK now do Western Union.

Full disclosure: I'm heavily invested in SQ.
>...Every criminal case goes before a jury.

No they don't.

>..... If enough cases are decided despite the letter of the law,

In the US, the process IS the punishment. So even if people are found not guilty, they still incur the costs of impound fees, forefeiture of property destroyed or taken during arrest/search, loss of lawyer fees, having to check the box on job applications and whatnot. And laws don't change for the better because people get off on charges.
Just introduce: "Flat 50" (フラット50) is a thing in Japan
The UK has the IOPC (Independent Office for Police Conduct) which is the latest version of oversight that has only existed for about 20 years, once it became increasingly clear how bias, corrupt and insular policing was. No system is perfect but it is having a good effect. They are independent and can investigate whatever they want and take referrals from the public and within the police. Any police interaction that results in a death or serious injury of anyone immediately triggers an investigation.
They do not have a 100 year plan because you can't have one of those. They can't exist. It doesn't matter if they think they have one.

China has a personalist government centered around Xi, so if he dies there go his plans.

Here's ours: https://slate.com/human-interest/2015/11/en-lan-2000-is-a-se...
I like to think of the bike problem. Sit down and draw a picture of a bike from memory in as much detail as you can in 2 minutes. Easy right? But it is surprisingly hard.
It makes me think of "fury road", which I regard as one of the finest films of our generation, a stupid film, but masterfully done.

Anyway, the legend is the the film uses very little cgi, but that is not true, it is full of cgi, the masterful part is that the cgi is invisible. you can't tell it is there. and that is a sign of great cgi.

Note: the film is also full of great practical effects, which I think helps ground and make invisible the computer effects.
Reddit Enhancement Suite still works. One option is to open every link in a new tab.
I've had dogs for a while, and at least for my dogs they use their eyes and ears more than their noses. I've tested this a few times with steak, and using their nose is a last resort tactic.
It's very verbose by default, but that's when/why you use it. If you just want to know why something doesn't work, you use ping.

$ ping nxdomain.example.com
ping: nxdomain.example.com: Name or service not known

$ ping example.com
PING example.com(2606:2800:220:1:248:1893:25c8:1946 (2606:2800:220:1:248:1893:25c8:1946)) 56 data bytes
64 bytes from 2606:2800:220:1:248:1893:25c8:1946 (2606:2800:220:1:248:1893:25c8:1946): icmp_seq=1 ttl=52 time=93.2 ms

If you want a short summary, you use host:

$ host nxdomain.example.com
Host nxdomain.example.com not found: 3(NXDOMAIN)

$ host example.com
example.com has address 93.184.216.34
example.com has IPv6 address 2606:2800:220:1:248:1893:25c8:1946
example.com mail is handled by 0 .

or nslookup (from the same bind9-dnsutils package as dig):

$ nslookup nxdomain.example.com
Server: 127.0.0.53
Address: 127.0.0.53#53

** server can't find nxdomain.example.com: NXDOMAIN

$ nslookup example.com
Server: 127.0.0.53
Address: 127.0.0.53#53

Non-authoritative answer:
Name: example.com
Address: 93.184.216.34
Name: example.com
Address: 2606:2800:220:1:248:1893:25c8:1946

If you want to debug DNS, with all the raw data, then you use dig.
That's an unworkable solution if much of the electorate actually enjoys the prosecution using such frivolous warrants to target the "wrong" kinds of people.
SDC30 has higher accuracy and cost me almost the same as SDR41 price I'm seeing. I am confused.
Used in such a way, the entirety of Github's SSH connections would be bottlenecked by this HSM. It wouldn't scale and it would be a single point of failure. As lrvick points out, you'd have to use a certificate-based host key scheme like PKCS#11 to make this scalable. That's fine, but it is a different scheme than RSA host key identification.
If this is a security, then so is pokemon.

This is a token sale. It never called itself an "ICO".

The whitepaper never once claimed the token is expected to profit its owners, and repeatedly warns of the risk of loss. It explicitly says the paper is not an investment prospectus as well.

>>What do you think the median person buying into that ICO was expecting? "I'm going to spend a few thousands dollars on this token that might have utility in this project in a few years"?? Come on.

If it turned out that the median person buying Pokemon cards were doing it for the purpose of deriving a profit, that wouldn't turn Pokemon cards into securities.
You guys need to take your medication.
> You're also legally allowed to go write down what someone just said to you; when you do that, it magically becomes much stronger evidence.

That isn't just magic. The longer a memory stays in your head, and the more times it's called up, the more likely that recollection is to be changed by your own brain. A written account of events shortly after they occur is a good way to protect against future damage to the memory.

It doesn't mean that what's written is accurate to start with, we know how little eye witnesses and even our own senses can be trusted, but it's probably going to be a lot better than what we think happened days/weeks/years later.
Which HSM are you looking at that would be able to handle the required number of transactions per second?
I can't get below 400ppm even outdoors.
I feel the same way. For me, the worst part about new mobile is the overlay that appears on every page reload to force me to use their mobile app. And it's noticably slower to load.
Weird haven’t thought about this much but don’t believe to have lost any contacts ever, have people on my phone from at least fifteen years ago.
Am bringing this up because am curious how people lose contacts, don’t they live on the SIM card? Only way that comes to mind is losing a phone or similar
Dorsey is a big Bitcoin fan, so that’s the kind of utility he appreciates.

Coming soon: the CashApp ransomware API.
LOLOL shilling so hard = company probably bust soon?
How would one stage a MITM attack without knowing the private key corresponding to the old key?
I think treating them the same as the rest of the population would suffice
fish exist. trees exist. races exist. we have laws about overfishing, laws about cutting trees down, and laws protecting against racial discrimination and these laws largely work. the legal system has developed techniques for dealing with gray areas too.

science is for describing what is, and in detail, but science's failure to do that just means we need more science, not that we should quit and claim the above words have no meaning.
Exactly. This article is just culture war pearl-clutching at its very worst. Having students adhere to a campus policy when having parties on campus seems perfectly reasonable, and considered without the hyperbolic tone of the article, the policy itself seems fine in substance.

If you didn't take into account that it is written for undergrads etc you might think it was strangely specific but then you realise these are people who in some cases have just left home. In an ideal world you could just have your policy be "don't be an idiot" but sadly the people who need that policy in the first place also need it spelled out for them in a little more detail.
> The whole point of a HSM is to never reveal the private key

That's not "the whole point". You can have methods to copy a key between HSMs, methods that can scale just fine while being much more secure than a file in a repository.
OMG, I love this product is exactly what I've been looking for. This is awesome!