skysight-inc/HackerNews huggingface dataset:
The Netherlands: the terms "debit card" (typically “pinpas”) and "credit card" ("creditcard") are used exclusively to describe the payment infrastructure, and only the payment infrastructure. In everyday language, ‘pinpas’ always refers to Maestro/VPay, which are networks run by resp. MasterCard/Visa but are nonetheless incompatible*, and are accepted almost everywhere, while ‘creditcard’ always refers to MasterCard/Visa, which are almost never accepted, except at touristic attractions.

However, as the Maestro and VPay networks are being shut down by MasterCard and Visa, things are in the process of changing. Most payment terminals now accept MasterCard/Visa as well as Maestro/VPay, though due to EU/EEA legislation, some may only accept debit cards as well as credit cards issued outside the EU/EEA (but not credit cards issued inside the EU/EEA).

At the moment, most banks are still issuing Maestro/VPay-based debit cards, likely because a small amount of payment terminals still doesn’t accept MasterCard/Visa. However, some smaller banks have already started to issue MasterCard/Visa-based debit cards.

* Historically, ‘pinpas’ referred to cards on the domestic PIN network, which were usually co-branded as Maestro for international use. With the introduction of EMV, the PIN network was retired, but debit cards are referred to as pinpassen to this day.
Stronger security can also help the marginalized. If your abusive SO has the phone plan in their name they can order up a new SIM card and reset passwords on websites that way too often fallback from “two factor” to SMS as a root password.
A number of sites I've signed up for recently have required TOTP to be setup, but did not provide back up codes at the same time. There's a lot of iffy implementations out there.
Sounds more like getting various permissions and money, be actually doing the work.
I have a prepaid online fax account that I use semi-regularly, almost exclusively for dealing with financial matters. Quite useful.
Can someone hit me with the value proposition of all this WASI stuff and WASM and ELI5? (I get the browser use-case)

My understanding is as follows:

WASM - a portable, platform-independent virtual machine for executing a "web assembly"

WASI - an extension to the virtual machine that adds APIs for interacting with the system and breaks all the WASM sandboxing (presumably NOT platform-independent?)

Is the point of this addition to Go that I can now target "WASM implementations that have WASI" with Go source code compiled to WASM?

Why would someone want to do that? Just for edge functions in cloud workers?
because with that knowledge, you will be able to decompress 0 dollar to infinite dollars which the storage mafia will pay you for not publishing your breakthrough in making them obsolete.
If you don’t care who that is, what they work on, the results of it, and don’t think this merits walking back the blanket slurs then I’ve got nothing for you.
The real test is when this stuff is out in the wild and no one tells you it’s AI and the thought doesn’t cross your mind. Of course it’s not impressive nor surprising when the answer was given up front.
>This also applies to non-work related calls: someone from your credit card company is calling and asking for something? Call back on the number on the back of your card.

There's a number of situations, not just credit card ones, where it's impossible or remarkably difficult to get back to the person that had the context of why they were calling.

Your advice holds, of course, because it's better to not be phished. But sometimes it means losing that conversation.
Q: Why do you restrict to a single CPU core and exclude GPUs?
A: The primary intention is to limit compute and memory to some generally available amount in a transparent, easy, fair, and measurable way. 100 hours on one i7 core with 10GB RAM seems to get sufficiently close to this ideal

Sorry, who are these people that don't have a GPU? Even laptops have GPUs. Why would you spend 100 hours on an "i7" (which generation? 4790K or six times faster 13700k?) CPU when you can achieve orders of magnitude better performance on a consumer GPU that literally everyone has access to?
Microbots fold like origami to control their descent
The problem with decriminalization/legalization is that those are the most abused drugs.

However, our drug war is causing Mexico to descend in to anarchy and people are dying by the thousands, or living in total fear of cartels that we trained in the School of the Americas.

Thus, I conclude we have to decriminalize and treat our addicts. Enforcement is not working. If we had a sane drug policy 30-40 years ago, Mexico might be a healthy vibrant trading partner.
They're less than 30 people, the pro version probably brings them nothing.

Been in that situation a few times, and we went above the message display limit only after adding bots relaying our production warnings.
Latitude matters so much for this, people love to make blanket statements forgetting that their situation doesn't apply universally.

People hardly realize (or straight up don't realize) that once you're in the tropics even the notions of summer and winter start to get fuzzy. Consider: if you're on the equator then you can go from "summer" to "winter" in only a few steps. Obviously, near the equator solar is a no brainer.

And of course the opposite is true, once you're inside the arctic circle solar is basically pointless because there literally is a period of no sun lasting anywhere from several days to several months. Of course not too many people live inside the arctic circle so it's not too much of an issue.

Even between these extremes though, the usability varies a lot.
The idea that we should somehow just follow what nature dictates and revert to less is never going to work. We'll go mine asteroids if there's not enough material on Earth to make the batteries we need to run our industries 24/7, lights out. We want everything faster, in more comfort, to last longer, to be cheaper, to be more automated, to me more grandiose, to be more precise, to be more convenient.

If humans wanted to live by nature's vagaries, they would have remained chimps.
I always find it weird when someone puts forth the attitude of, essentially, "you don't really need these things that other people have, so just deny yourself the things you want and it's all good!"

I will certainly agree that "keeping up with the Joneses" is a very real phenomenon, and we are marketed to death to get us to want things we don't need, that actually won't make ourselves happier or our lives better.

But there's a lot of wiggle room there. Debt is a useful tool, and it can measurably make our lives better if used wisely and responsibly. Should a few mistakes push you into a different class of people who don't have access to that? I would say no, that's unjust.

And that's without getting into all the ways that a credit report often doesn't accurately reflect your ability to manage debt, either just because of its imprecision, or because of reporting errors and unaccountable businesses that don't care who gets screwed over.
Its doable but not in 10 years. From [1]

> They found that soil fertility takes less than 10 years to recover to old-growth forest values. Plant functioning takes less than 25 years, and species diversity takes 60 years. Above-ground biomass and species composition take over 120 years.

This is also discounting any of the unique biodiversity in the Amazon, of which there is a lot and may never come back.

[1]: https://news.clemson.edu/researchers-if-left-alone-tropical-...
Both Windows and macOS have binary whitelisting in place making it harder to run arbitrary binaries that aren't known good to the OS vendor. Pain in the ass sometimes because Windows Defender quarantines executables and DLLs I freshly compiled, and you have to do command line magic -- after every update -- to get unsigned stuff past Gatekeeper and Xprotect, but in terms of endpoint security for normies both Windows and macOS are way ahead of Linux.
> Lossy text compression has little utility

You're describing every book you've ever read and learned from.
Some of us who came up on the ops side routinely check logs. It is both how you spot problems other monitors might miss and partly how you learn how your system works (or doesn't). Especially with MacOS, where the documentation quality ranges from shit to nonexistent and the source is unavailable.
Oh for the love of God -just because any fool will believe anything doesn't mean we have to play along, does it?
Without opening a philosophical discussion on Python package management what were the pragmatic reasons from switching from Poetry to Hatch?

I'm about to run my first bit of kr8s code!
I don't really want Silicon Valley getting anywhere near health care, surveillance as home care monitoring, or gig economy services for seniors. First they need to focus on making the products they have accessible - just basic accessibility. Once they've gotten good at they, maybe they'll have some insights into the post-35 crowd.
Related. Others?

Saurabh Kumar's fast-cmix wins €5187 Hutter Prize Award - https://news.ycombinator.com/item?id=36839446 - July 2023 (1 comment)

Hutter Prize Submission 2021a: STARLIT and cmix (2021) - https://news.ycombinator.com/item?id=36745104 - July 2023 (1 comment)

Hutter Prize Entry: Saurabh Kumar's “Fast Cmix” Starts 30 Day Comment Period - https://news.ycombinator.com/item?id=36154813 - June 2023 (5 comments)

Hutter Prize - https://news.ycombinator.com/item?id=33046194 - Oct 2022 (3 comments)

Hutter Prize - https://news.ycombinator.com/item?id=26562212 - March 2021 (48 comments)

500'000€ Prize for Compressing Human Knowledge - https://news.ycombinator.com/item?id=22431251 - Feb 2020 (1 comment)

Hutter Prize expanded by a factor of 10 - https://news.ycombinator.com/item?id=22388359 - Feb 2020 (2 comments)

Hutter Prize: up to 50k € for the best compression algorithm - https://news.ycombinator.com/item?id=21903594 - Dec 2019 (2 comments)

Hutter Prize: Compress a 100MB file to less than the current record of 16 MB - https://news.ycombinator.com/item?id=20669827 - Aug 2019 (101 comments)

New Hutter Prize submission – 8 years since previous winner - https://news.ycombinator.com/item?id=14478373 - June 2017 (1 comment)

Hutter Prize for Compressing Human Knowledge - https://news.ycombinator.com/item?id=7405129 - March 2014 (24 comments)

Build a human-level AI by compressing Wikipedia - https://news.ycombinator.com/item?id=143704 - March 2008 (4 comments)
Arithmetic coding allows you to make a prediction and only provide bits for correction.

Have the de-compressor predict the next data based on the outcome so far (a statistical prediction of next data will be lossy as it won't always be correct). If the prediction is correct you need to spend very little to confirm that. If it's incorrect you'll need to spend data to correct it. Arithmetic coding is the best way to make this work.

It's also been used by all winning entries of the Hutter prize so far.
Ah... I had professors who graded like that
Wow I’ve not heard of that one! Do you have a link?
So it sounds like you don't think most of the US will adapt.
P2P doesn't have chirality, but methamphetamine does. Any carbon atom with 4 different groups attached to it will always be chiral, in meth it's the carbon next to the nitrogen. It has: methyl group, phenol group, hydrogen, and the amino group.

> – I don't understand how any enantiomer of P2P (if one exists, see above) can be selected for specifically via a chemical reaction

You just react P2P and get a racemic mix of L- and D- enantiomers of meth. Then you react it with tartaric acid, which will preferentially react with the "right" meth.

> tartaric acid, which is a chiral molecule itself

Ah, I see the confusion. Tartaric acid derived from biological sources consists of just one enantiomer, that's why you can use it to do chiral resolution.
Or just connect you directly if you call back within a few minutes from the same number they called, no need to press anything. But I guess that's too advanced for 2023 technology
> The only liberty being sacrificed here is showing an ID at a pharmacy counter to get Sudafed.

It would be interesting to know if the people concerned about the need to show an ID to vote share that concern about the need to show an ID for access to medicine.

> This particular "logbook" has existed for almost 2 decades now, and its scope hasn't creeped from there, so your second argument is pretty easy to shoot down.

The policy has proved ineffective at curtailing the availability of methamphetamine while inconveniencing honest people. That's not something the public is clamoring for more of.

But it never really was. It came about to begin with as part of the Patriot Act. The lack of expansion is unsurprising given the lack of any 9/11-style crisis to use as an excuse in the intervening two decades. The test is when the next one comes.

One of the failings of the existing style of government is that the "passage by both houses of Congress and signed by the President" system used to pass legislation is the same system required to repeal it, which rightfully makes it harder to pass bad laws, but wrongfully makes it harder to repeal them. And then they get passed during a crisis and inconveniently stick.
What I said has nothing to do with the US. Do you think that if the US is wrong in a bunch of unrelated matters, it makes Russia's actions ok?

But even given this... Would you say "Nobody cares what you think about Iraq, except your mother, so don't bother telling me about ..." Yeah it doesn't hold.
The basic premise is in https://datatracker.ietf.org/doc/html/rfc6238, although today I'd use SHA-256, not SHA-1, if possible.

But I'd disfavor TOTP over hardware tokens that can sign explicit requests.
"AFAIK there have always been addicts in every culture."

Surely you would agree that there the proportion of addicts varies by culture and society, that the US for example has a much higher proportion than many poorer nations? I don't know about the first comment's claim that lack of interpersonal relationship is the root cause, but a strong social component looks obvious to me.
does this provide sane default behavior for refreshing expired auth tokens and retrying random client timeouts? the "official" SDK has driven me absolutely crazy trying to wrap all the different pieces with retries so that basic long-running operations won't randomly raise spurious exceptions...
Far, far too many people would sincerely say it looks legit dispite looking like a horrible paper mache project done for a middle-school art class. Pretty depressing tbh
I don't think most people who get scammed this way pause to say "oh, this might be someone stealing my credit card number", then disregard that thought because it's too much of a pain to call back on an official line. Instead I think they don't question the situation at all, or the scammer has enough information to sound sufficiently authoritative. Most non-technical people I've talked to about this are pretty scared of getting scammed, but tell me the thought never crossed their mind they could call back on a trusted number.

I like the "hang up, call back" approach because it takes individual judgment out of the equation: you're not trying to evaluate in real time whether the call is legit, or whether whatever you're being asked to share is actually sensitive. That's the vulnerable area in our brains that scammers exploit.
Note that the competition close to 20 years old

...though I also had a GPU in 2006, so idk. Then again, you need to define something as reference hardware and it doesn't really matter what it is. Better compression should win out over less-good compression no matter if you run both on a 100-core system or a 1-core system, I think?
I think having good pay/benefits is more important than a nice to have like a career framework. If I’m not paid well, it doesn’t matter how organized a framework they have
I particularly enjoyed his modest self-eulogy:

> I don’t know what I may seem to the world, but as to myself, I seem to have been only like a boy playing on the sea shore, and diverting myself in now and then finding a smoother pebble or a prettier shell than ordinary, whilst the great ocean of truth lay all undiscovered around me.
So in the present example from Raymond Chen you need the loop for a similar reason.

The binary .exe program which the script is trying to delete is the one which created the script and launched it. So that means the .exe is still running at that point and cannot yet be deleted. Lauching the script indicates "I'm about to die", not "I'm already dead". The script cannot delete the .exe until the .exe terminates. Without some event to indicate that, you poll.

The script knows it can delete itself, so it tries that only once.

If a handle could be attached to the process, then the script could do a WaitForSingleObject on it; that would be the prim and proper way.

It doesn't seem worth doing; the chances are low that the process cannot terminate within 20 seconds of launching the reaper script.
Because not only I can, whoever trusts a company such as Google to not continue layoffs even when they announced positive results is waiting to be very disappointed.

They can easily cut another 5,000 or 7,000 employees globally and it would not be an issue to them nor would it be a surprise at all.
> Switch from pgvector, get FREE AirPods Pro.

> Book some time here, and we will help switch you over for FREE and get you a pair of FREE AirPods Pro

This just comes off as sketchy to me. If the tech is good it will stand on its own.
If he had just paid the minimum $25 or whatever, he could've avoided even missed payments.
What's the chances of Unity blowing them out of the water with lawsuits (patents, whatever)?
HTML Optional Tags
So assuming server side compromise not xss - in theory the servers can be isolated, in practise its rare for people to do a good job with this except at really big companies.

Regardless if they got your spa, they can replace the html, steal credentials, act as users, etc. Sure the attacker might want something more, but this is often more than enough to do anything the attacker might want if they are patient enough. Certainly its more than enough to do anything TOTP would protect against.
I do think it's interesting that recent submissions use nearly the entire 50 hours. I wonder how much better people could do if faster hardware was allowed.
That’s what I meant. Oops.
Anything's possible, but the simplest explanation (per Occam's razor) is just that the employee was fooled.

Is it plausible that if a good social engineer cold-called a bunch of employees, they'd eventually get one to reveal some info? Yes, it happens quite frequently.

So any suggestion that it was an inside job, or used deep fakes, or something like that would require additional evidence.

Kevin Mitnick's "The Art of Deception" covers this extensively. The first few calls to employees wouldn't be attempts to actually get the secret info, it'd be to get inside lingo so that future calls would sound like they were from the inside.

For example, the article says the caller was familiar with the floor plan of the office.

The first call might be something like "Hey, I'm a new employee. Where are the IT staff, are they on our floor?" - they might learn "What do you mean, everyone's on the 2nd floor, we don't have any other floors. IT are on the other side of the elevators from us."

They hang up, and now with their next call they can pretend to be someone from IT and say something about the floor plan to sound more convincing.
That’s really neat. How long have you been working on this?
Seems like that should be even more reason for Texas to upgrade their energy infrastructure like California.
The Meaning of Lore
PCem and 86box are focused on accurate hardware emulation.
Highly reminiscent of the sort of social engineering hacks Mitnick would run. In his autobiography he would pull this sort of thing by starting small and simply asking lower ranking employees over the phone for low risk info like their name and things like that so when it came time to call higher ranking ones he could have trustworthy-sounding info to call back to. The attack is clever for sure, but not necessarily any more sophisticated than multiple well-placed calls.
Study Refutes Younger Dryas Impact Hypothesis[video]
Thanks. I had ChatGPT Plus read it and then asked questions. I now understand the problem. It's similar to the methane release from Siberia, a run away effect that can't be reversed. These are other modes of run away effect.

Crossing 6 out of 9 planetary boundaries would not necessarily mean that parts of the Earth have become uninhabitable for humans, but it would signify a very high level of risk for abrupt and potentially irreversible environmental changes. These changes could severely disrupt the Earth's systems that make the planet habitable in the first place.

The concept of planetary boundaries is designed to identify the "safe operating space" for humanity. Crossing multiple boundaries increases the risk of triggering non-linear, abrupt environmental changes on a continental to planetary scale. These could include extreme weather events, loss of freshwater resources, collapse of ecosystems, and other severe disruptions that could make life increasingly difficult for humans and other species.
I think we might have run out of trees.

> 90% of the old-growth forests that existed in the contiguous United States in the 1600s have been cleared.

https://en.wikipedia.org/wiki/Old-growth_forest#Logging

https://en.wikipedia.org/wiki/Deforestation

Locations of remaining tracts

35% in South America
28% in North America
19% in northern Asia
8% in Africa
7% in South Asia Pacific
Less than 3% in Europe
These responses may have been a goal of the attack.
But it needs Linux, while wasm runtimes are available for all OSes natively
To me, the way you've characterized this (which rings quite true) is a great example of why a lot of philosophical arguing doesn't feel terribly relevant in the modern world. What practical person is going to constrain themselves to have no clear boundaries whatsoever, simply because they find it useful to frequently assess actions by their downstream effects instead of exclusively by initial conditions? Don't get me wrong, it can be useful to do thought experiments under these kinds of strict constraints, but only up to a point.

Under retributivism, family punishment could also be incredibly effective up until the point they declare "no punishing of the innocent." That it is a gotcha that consequentialists are prohibited for doing same is just silly.

People make allowances, exceptions, and put hard limits on otherwise open-ended systems in order to make them practicable. Why would consequentialism fall apart if you had to put a few sanity checks into it, such as "don't punish the innocent?"

For the sake of thought experiments, sure, see how each side plays out under very strict rules. But the real world is messy, doesn't fit nicely into one particular "ism" all the time. Your entire belief system shouldn't be predicated on thought experiments.. therefore there is no reason to get so dogmatic about building moral justifications from only one direction. Especially when a flexible or hybrid approach offers such obvious advantages.
In the category "then update your FAQ, you've have many, many years to do so" =D

(not to change the rules, but to explain why they rules haven't changed, and to clarify the super vague phrasing even back when the 3dfx Voodoo was the pinnacle of graphics. Level playing fields are a worthwhile pursuit)