skysight-inc/HackerNews huggingface dataset:
> but none of them make a case that the current subsidy level is necessary.

I wasn't actually arguing that, yes there are a bunch of unknowns. I'm only making the argument that there is a clear formula connecting mining rewards, potential double-spend profits and the cost of attacking a PoW coin. I don't care enough to actually derive the formula and plug numbers in it to answer that question.

> Recipients can adapt to the behavior by requiring more confirmations, restricting who and how they attack

More confirmations don't really work as a solution. The cost to hold a double-spend open is known, so we could try requiring enough confirmations to make such a double-spend unprofitable, but the attacker can execute multiple double-spends in parallel to spread their costs.

For large transactions (relative to the hashrate of that coin), the confirmations can can get quite high, which destroys the usefulness of cryptocurrency for fast and easy transactions.

For one of the "random shitcoins" I was tracking, I found the centralised exchange I suspect the attacker was targeting (presumably trading them to another currency and then withdrawing). The exchange had set really high numbers of confirmations (2-5 days worth of blocks) but the because these coins were so cheap to attack, the attacker had no problem doing reorgs that large.

And then the exchange delisted the coin due to "51% attacks".

> The total value of activity on the chain isn't equivalent to the value available to attackers in an attack, especially to the extent that attacking undermines the value of the system as a whole.

Yes, another thing to go into that formula.

Centralised exchanges and other automated systems interacting with cryptocurrencies really mess things up. They provide a lot of liquidity open to double-spend attacks.

In a world were cryptocurrencies were only used as the peer-to-peer cash in the way a lot of it's early proponents advocated for (and still do), where everyone can manually verify their transactions and establish trust, then your suggestions do work somewhat better.

But in the highly centralised nightmare that cryptocurrencies have become... well it changes numbers going into the formula.

> That's also not clear to me, there are an awful lot of idle two generation old miners out there at any given time.

When hashrate is trending up, I suspect the two generation old miners are slow enough to not worry about.

But the economics might change as block reward subsidies drop, or if the potential profit of double-spends goes up.

> Perhaps it isn't but if you really strongly believe that there are about 1000 cryptocurrencies that you should be figuring out how to short hard instead of posting on HN. :P

I mean, I considered it. Hence the research.

But these were really, really, shit shitcoins, not listed on exchanges with futures markets, so the only real way to profit was to execute the 51% attacks myself, and I didn't want to go down the black hat path.

Also, I moved onto other hobbies.
Florida State has a high ranking? After the STOP WOKE act, which explicitly prohibits professors from promoting certain viewpoints?
You can't drive more than 8h in any 24h period, and it isn't hard to bust them when they do due to simple physics.
Something which shines out in this, is how often Saint Jobs of Steve made unbelievably stupid, bad decisions. Ignoring Ethernet. Refusing to use adobe's print engine and having the slower printer. Demanding the Mac have fixed memory for cost, and gains 512k because his engineers ignored him.

I would love to read how Woz reflects on this. "Oh, well.. that was Steve" vibe I guess.

I was dealing with apples across this time, we had a Canon laser printer which was a giant barfridge beast but the print quality was awesome, and it was fast. All Apple had was "yea but it's small and it works well with your mac" which of course was all it needed once you were in Adobe print production. And for mass media you could make colour separates for bromide and real printing. But Maaan it was a pain for a Unix person to deal with that applenet crap.

We had a phototypesetter which had one guru who could drive it in nature, he spoke hex to it lovingly. Nothing compares to microfilm font. I loved the immediacy of the apple printer but for real camera ready 10,000dpi is where you went. It was slow, but gorgeous.
> The shellcode would then disable memory protections like ASLR and DEP that normally prevent arbitrary code execution. This would allow the attacker to execute a ROP gadget chain or other payload to jailbreak the sandbox and run remote commands on the device.

This sounds like chicken - egg scenario. Can you clarify how original shellcode bypasses those protections?

I don’t think you can disable DEP on runtime.
If you Google around it seems like there's plenty of anecdotal cases of it happening, although some of them are a bit tabloidy and sensationalized, and some of the people had multiple substances going on

https://www.independent.co.uk/news/world/asia/bali-death-ong...

https://www.manchestereveningnews.co.uk/news/greater-manches...

https://www.irishtimes.com/news/man-jumped-from-balcony-afte...
Politeness is a whole topic on its own in linguistics.

There is, for example, a divide between “Excuse me” and “Sorry” in English vs. “Bitte” and “Entshuldigung” in German. Cantonese Chinese has two different versions of “thank you”, one that is heartfelt and one that is for an expected service, and using the wrong one is a major faux pas.
They e.g. want to ban ChatGPT before age of 13. My daughter was using Amazon Alexa at the age of 3. We had Girl's day and introduced some prompt engineering to girls (actually starting at the age of 13 due to legal reasons). And I see a strong need that children need to cope with those technologies as early as possible. Keeping it out of schools is the worst choice one can make IMHO. For sure there needs to be requirements on transparency, etc.
The full title is "China's ancient water pipe networks show they were a communal effort with no evidence of a centralized state authority". Trimming the title down really buries the lede. Try "China's ancient water pipe networks were a communal effort" if you want to fit the character limit.
IMDb reviews are reliable…as long as you wait a few months after something is released. Pre-release/release reviews are clearly manipulated.
> while you are physically in the EU

This is the only part that really matters here, AFAIK. Practically, there's no good way to enforce this limitation.

The residency thing is seared into my mind from people using EU "citizen" instead of EU "resident" when talking about the GDPR.
Any beautiful place gets boring after years if the same scenery.
I'd love to read a study if the walled garden actually produces more secure software. I've heard this claim a lot but I also see lots of 0-day vulnerabilities for iPhones. There's a patch for an in-the-wild 0-day literally today.

https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zer...
I have had a similar experience on DoorDash. As soon as I tried to place my first order, I got suspended. Despite many calls with their support people and seemingly getting unsuspended, trying to place an order seemed to always get my account suspended.
Sähköposti might disagree...
Ok, I'll try that. Thanks.
How were these numbers arrived at?
I think Tesla also had heated rear seats in the Model 3 as a software unlock, then they went nah just make it standard?

They still have eg footwell lights that are physically there, but not available for activation in the RWD version (LR and P only). They might just flash on during a software upgrade, never to be seen again!

It makes sense that automakers want to segment features at the lowest possible cost, but the acceptance of something as basic as seat warmers being a subscription service on a premium car is probably lower than for advanced autopilot stuff.
I have hundreds to thousands of tabs at any given time. If Firefox has issues with those, then one of my plugins must be fixing it well enough for me not to notice.
How does ChatGPT know facts from 2022 if its knowledge cutoff is September 2021?
By the way, you can perhaps check https://nebula.tv for a list of good YouTube channels (not all of them are great IMO, but a lot of people who make content on Nebula fit the "small web" criteria)

Now that I think of it, perhaps you can call Nebula "the Kagi of video streaming". Maybe you guys could collaborate somehow in the future ;D
Haven't done a full writeup, but Doom Emacs is _really_ nice.

Takes a little while to acclimate, but it's very useful once you're used to it.
Location: Any in the US
Remote: Yes
Willing to relocate: Yes
Technologies: Python, Java, C/C++, Python, HTML, CSS, JavaScript, Pytorch, Tensorflow, Pandas, Hugging Face, nltk, spacy, OpenCV, scikit-learn, git, bash, deep learning, computer vision, object detection, natural language processing, data science, data engineering, machine learning, operating system, Selenium, Airflow, Docker, AWS S3, AWS Lambda, AWS CloudTrail, SQL, ColdFusion.
Résumé/CV: https://drive.google.com/file/d/1dICmp57BGaq_j_a8xrHkHtpjcoy2vP9m/view?usp=drive_link
Socials: phamkienxmas2001@gmail.com

I'm undergraduate student studying Computer Science at the University of Minnesota and currently doing a software engineering internship at AWS. I have > 2 years of experience working with machine learning and software development on high-impact projects. I enjoy solving mathematically or algorithmically challenging problems, as well as diving in some of the quirks of machine architecture, operating systems, or just about anything I haven't learned before. I'm interested looking for a internship position for summer 2024. Contact me if there is a position which I might be a good fit for and I would love to talk.
True.

That said, they do give a lot of granular control to the user to turn off individual functions if the user feels differently and wants to change their stance eg iMessage can be disabled with a switch in settings.
This is a weird stance. Anyone can say anything on the internet, they can be legal opinions or other things. It should not be necessary to disclaim such an opinion because no one should be using the internet as their basis of law (or medicine, etc) instead of a professional in the first place.
Doesn't eu law apply to european citizens living in other countries?
> We’re talking about Bitcoin which is not “crypto” as you probably already know.

This is nothing but cope from bitcoin maxis in the face of the terrible reputation that cryptocurrency now has.

Bitcoin was the first cryptocurrency, it practically defines the term cryptocurrency, it has all the same features as other cryptocurrencies, many of which start life as either code or chain forks of Bitcoin anyway. It has first mover advantage and name recognition, but it absolutely is a cryptocurrency.
Yes, let's ignore all of the contributions from the vast and varied team of smart people that also contribute to a product that is no longer directly tied to "bro".
> And WhatsApp is almost unusable unless you consent to uploading all your contacts to Facebook.

What? How-so? I've never allowed it to do that and it works fine for me, across iOS/Mac/Windows.
On the modeling side, it's compelling to separate the memory from the linguistic skills. Vector search is hella fast and can be very good. So you can off load the memorization part of the problem, and let the language model focus on the language. This should allow better performance with much smaller models.
I really wonder if Apple could force the EU's hand by not selling iPhones under these rules.

I'm not saying they would, but I do wonder if EU citizens would pressure lawmakers to rollback these rules in that case.
Same in Slovak except mýto is not archaic in context of highway toll.
Okay ill tell you. You need to start a startup that sets up a good number of cameras at manual labor jobs. Most of the footage will be completely useless but every day you hit a once in a day event, every week you get a once in a week event, every month, every year, every decade etc! Then the guy working there for 40 years wacks pipe 224 with a hammer 50 cm from the outlet and production resumes.

The footage can be aggressively pruned to fit on the disk.

When the robot is delivered in 2033 it can easily figure out, from the footage, all these weird and rare edge cases.

The difference will be like that between a competent but new employee and someone with 10 years of experience.

I can see the Tesla bots disassembling the production line already. Or do you think it wont happen?
Your starter kit inspired me to finally bite the bullet and write my own emacs config from scratch instead of using doom. I'm not sure yet if I'm thankful for that, time will tell ;)
It would, but the weight savings would matter more for handling then for power. Motor weight is still a fraction of battery weight.
In parts of the US with large korean communities, gimbap is its name, if only because the ingredient list is so different.

Sushi, for the most part, is seafood raw, and gimbap often has heavily marinated beef or other non-fish meat.
Is that true? According to Wikipedia:

> The coolest month is January, averaging 5.4 °C

Doesn’t sound very cold to me. If anything, I’ve only heard complaints about how hot it often is in Tokyo (and most of Japan, except Hokkaido).
> That's some serious gaslighting

Devil's advocate: how would you know if BMW subsidized what would have been an add-on package?
I used SVN extensively since the early 2000's, and while I still don't like git (at least for projects that also involve non-coders), I liked git-flow even less (and as the sibling poster said, SVN encouraged a much simpler trunk-based development model).

My impression was that git-flow was pitched by people who didn't have much experience with other version control systems and were also new to git.
This is not a legal context though. I am not a lawyer, I don't claim to be a lawyer, and even if I were a lawyer, no one in the internet should be taking my comments as legal advice in the first place. One should not need to disclaim everything they write with such a statement.
Could FAT be actually better than NTFS in this regard?
It sort of makes sense. They're getting market share by using geo-ip and browser agent strings.

Either a bunch of hackers in NK are pretending to be iPhones, or some small lab of iPhones was marked as NK in the geo-ip database. But since the numbers are probably tiny 99% probably isn't too hard to achieve.
Comments moved to https://news.ycombinator.com/item?id=37421730. Thanks!
cos shogi
I personally more easily envision personal uses of radioactive materials than psychedelics.

Self powered devices, vs some psychedelic trip?
I honestly don't see how "who benefited more" matters to the question of whether it's bottom-line worthwhile for Google to give Chrome away for free.
What do you mean "native code" and why will you not program in such code?
Ok, we've put a different segment of the title up there.
At least in my circles it is common that people play or have played, especially males. I myself play on average two tables or so per day online. Although I certainly should force myself to read up a bit more on strategy.
>including stuff like Revanced.

Modded clients are notorious for stealing people's accounts. While Revanced is safe if you patch the official apk yourself, normal people will fall for trojans that inject malware into it.
the sexy saxophone is heard in the background...
Your description claims that Google sends topics to site X only from history related to site X.

Which makes this useless from advertising point of view. Which also means that Google is using the whole history to come up with "rough tooics".

Let's see:

--- start quote ---

With Topics, your browser determines a handful of topics, like “Fitness” or “Travel & Transportation,” that represent your top interests for that week based on your browsing history.

https://blog.google/products/chrome/get-know-new-topics-api-...

The browser observes and records topics that appear to be of interest to the user, based on their browsing activity.

https://developer.chrome.com/blog/new-in-chrome-115/

With the Topics API, the browser observes and records topics that appear to be of interest to the user, based on their browsing activity. This information is recorded on the user's device.

https://developer.chrome.com/docs/privacy-sandbox/topics/ove...

--- end quote ---
I solved that by buying a tv that was on sale (sales guy warned that they have gotten lots of returns because the smart features were somehow not so good on the model) and promptly never connected it to internet. So far no ads outside tv channels' own ads.
Herbal teas were common in Europe before camellia sinensis tea was imported, so I find it hard to believe the Latin origin is correct.

In Lithuanian 'arbarta' colloquially refers to all types of hot water infused drinks, there isn't any distinction of what kind of leaf or fruit (e.g. raspberry or buckthorn tea) is used.

On the other hand, the consensus in English is that where wasn't a word for this type of drink, you just used the herb's name itself.
I'm shocked, shocked that there is gaming of systems for economic benefit!

Obviously, paying to get a positive review or to bury a negative review is cheating and should be treated as such.

OTOH, paying to get reviewed honestly is completely OK -- it's how many indie films get noticed. While large studios don't (openly) offer cash, they do entice reviewers with food, drinks, meeting cast & crew, swag, etc. Some reviewers seem to feel pressured, others seem to not give a care. AFAICT, they all keep getting re-invited.
Am I correct in assuming the right way to pronounce this is "Nah-No-Fuzz"?
This way, wealthy consumers effectively subsidize hardware for less wealthy consumers.

That's not how this works. Everyone who buys the car is paying for the feature equally. All of the cost of the R&D, the materials, the labor to build the feature in your car, that's all in the price you pay to buy the car. The subscription is entirely an additional cost to use the feature you've paid for. Mercedes are not discounting the car for everyone and then making the discount back from subscriptions. They're nerfing the car and then charging people to unnerf it.
The Firefox extension "Fingerprint Shield" will show you when a canvas is generated in your browser. You can try it out on Best Buy.

https://archive.ph/ZjnwY
Japanese used to do this thing too -- back then Kanji was still the proper scholarly thing to use and scholars were the main contact to Western knowledge. In fact, a good number of Chinese words for Western concepts came from Japanese translations. 社会 society, 经济学 economy, 自由 liberty all came from Japanese translations.

https://zh.wikipedia.org/wiki/漢語中的日語借詞
Thank you for your kind words of encouragement!
You haven't been around enough people doing psychedelics then. Psychotic breaks are not uncommon. Once you're at a music festival where n=thousands you realize this. Flying and drowning in lakes is not unheard of.

Everybody thinks they are immune to psychotic breaks until they do enough psychedelics and have one. This could be you some day.
I think the question is not whether it's possible to set up in theory.

The question is whether it's possible to actually deploy and maintain the solution in reality to millions of concurrent users in hundreds thousands of disjoint organizations in thousands of municipalities all over the country. It would require a constant supply (due to organizational churn) of highly qualified tech people who'd willing to be working years for low-five-figures salary in a rigid ineffective governmental structure, surrounded only by non-tech-savvy people. These tech people should also be saints so that they don't embezzle half the budgets while trying to set things up. Also the top visionary who'd push for this multi-year project should not be subject to election cycles.

I honestly think that this level of concentration of long-term effort might be impossible in a country with more than 10 million people or so.
I'm getting similar behavior from another user with the same pattern.

I also get their college results, government assistance, a payday loan company, pinterest and subscriptions to newsletters sent to me for them.

Ive mailed them directly, multiple times but they dont seem to care. I'm now returning the favor, signing them up for all the crappy sites when i need a throwaway.
What happened with HMOs?
The concept is called third place and I think it's super beneficial to any city https://en.wikipedia.org/wiki/Third_place
Azure Cognitive Search takes care of all of this combining semantic search with other layers of traditional search methods
I really don't think that's true - the state of appsec and security awareness in general has really improved a lot, and all of the major platforms (windows included) are much much more secure now by default than in the activeX era.

It's definitely not the case that anyone can just throw together an iPhone zeroday, which is why the price of these exploits is so much higher.
sarcasm

They should also remove tests from the projects as well. Such a burden on the developer to write test and worry about how to test when they just need to focus on implementing the logic.

Very few programmers are typically interested in having their opinion on writing test changed. Most programmers find themselves drawn strongly to testing or not quite early in their career, and then spend the rest of it rationalizing The Correct Choice to themselves and others.
I’ve been around a lot of people on mushrooms. I will say that the experiences I’ve observed never made anyone think they could fly off a building. Maybe they were just lucky or the shrooms were always weak.

However, I have very real concerns about the effects on those who might have dormant mental illness. I have no proof but the idea that many kinds of drugs could amplify or accelerate a mental illness scares me in a mass consumption setting.

If there is no evidence for this then I’d like to know. If there is evidence for this then we need to really make it clear and educate people of the risk.
They are trying to present that as legal basis, and it's not.
It could be, however I also never tried it.
There are some misconceptions in your comments that I think could be useful to clear up.

When exploiting a running system, your goal typically won't be to disable ASLR (which would only impact newly spawned processes), but instead to 'infoleak' where ASLR has placed important things you care about, so you know where to access them.

Modern devices have mechanisms like KPP/KTRR, though, which make it impossible to modify kernel code anyhow.

You also propose that CoreGraphics might not be sandboxed. CoreGraphics is a dynamic library which can be loaded into any process. It's _processes_ that are sandboxed, not dynamic libraries, so CoreGraphics can definitely exist in a process that has a sandbox profile applied just fine.

You also mention that graphics functions might not be sandboxed because they need to access graphics acceleration features. This is a good thought! In fact, the kernel extension that enables hardware graphics acceleration, IOMobileFramebuffer, is accessible from the app sandbox for this very reason. As a point of interest, many vulnerabilities have been discovered in IOMobileFramebuffer over the years -- it's an attractive target specifically because it's reachable from the app sandbox.

Lastly, you mention jailbreaking the sandbox. I know what you mean, but "jailbreaking" typically refers to a series of abilities, such as the ability to control the kernel task, the ability to create RWX pages, the ability to bypass the FreeBSD MAC policies, etc. The ability to bypass sandbox restrictions is only one condition of a jailbreak, and a sandbox escape doesn't imply a full jailbreak. Also, jailbreaking doesn't entirely break "the sandbox" -- it's a selective change that can be applied on a per-process basis.
In other words, you don't have any evidence.