skysight-inc/HackerNews huggingface dataset:
Byzantine Empire? Lasted over a thousand years, fell to the Ottoman cannons.
It is when those users' passwords unlock not just their own data, but that of millions of other users as well.

Alice could have set up 2FA and adhered to all the best practices, but she still got her data stolen because Bob used "hunter2" and was hacked.

14,000 accounts compromised, 7 million users' data taken. There's no way 23andMe should be able to offload their responsibilities to Alice's cousin Bob.
I read his book when I was younger and he said that if you run a company, you "pay yourself first" and if there is no leftover money, you don't pay your employees.

In the linked article, he says "He says he is in debt because “if I go bust, the bank goes bust. Not my problem.”"

So basically, he's a sociopath.
> they're not the only route to GDPR compliance.

But if it was the easiest and cheapest. Their lack of basic foresight is painful and has made the web worse.
You are not wrong. (Apple never shipped GNU coreutils or GNU tar. It did ship GCC long ago and maybe related packages like binutils.)
This is why MFA (not SMS based) is so critical especially for services like this. I sometimes hate it when it is forced on me as a consumer but for these types of services, it absolutely must be enforced. Kinda cop out for 23andME to just blame the users even though users should take some blame of course.

In 2024, if you want to access a highly sensitive database, you must be forced to setup MFA at the minimum. My opinion.
A botnet is not a single system. It is a network of multiple compromised computers or devices, in all kinds of locations. Each piece of a botnet could be in a different country or even city.

HIBP only knows about breaches that are made public. Based on the current evidence, this was not a breach that was made public. It was a breach being sold.
Thanks! Does this attack actually depend on extremely large files in any way? My understanding is that this method can always find fixed-size pre-images for collision attacks, and is unaffected by the pre-image size in a pre-image attack.

That makes sense about newer functions being immune. However, note that both of the cascaded hashes must be immune to prevent this attack (as described in the paper).
> those best situated to speak truth to power

Why are they the best situated to speak truth to power?
As my long ago roommate from Long Island stated as she opened the pizza box to find ham & pineapple "That's not a pizza! You don't put fruit on a pizza." We're still good friends to this day.
I wonder how much time it will take China to get their EUV photolitagraphy tool ready for production.
Show HN: To build a product that made $45k+ already and going
It turned out to be very easy, no knowledge of SMM, SEO, just publish for sale, run a couple of promotions and you're making money. Insane.
And Segcache is available in Rust as part of Pelikan project https://github.com/pelikan-io/pelikan
A company isn't the same as a corporation. A corporation is a legal privilege granted by the government to give a company legal personhood. Thus the word "corporation", from latin "corpus", signifying that the state considers this specific company to be a single, legal body.

Corporations aren't a free market concept, it's a way for the state to give special protections to certain companies that need it for some prosocial reason.

A short history: https://newint.org/features/2002/07/05/history

Basically, the original idea is, a corporate charter is granted to create a corporation, which acts on behalf of its shareholders (who the government trusts, have some worthy interest in mind).
Maybe this is a good time for me to vent about exit row seating? I was recently on a holiday flight where an older couple walked very delicately up to the gate. When prompted, "are you able and willing to assist in the event of an emergency?" the lady immediately said "oh no, we can't..." and the guy says "well, there won't be an emergency, right?" To her credit, the crew member checking us in very sternly told him that his attitude was completely unacceptable and that their seats would be moved.

But it made me think: realistically, the only people sitting in exit rows should be reasonably fit 18-45 year olds in most cases (and I'd prefer men). Yet it's usually whoever has the most money/points/status to get the extra leg room.

/end rant
Winner. Anything no-nonsense, now a days in this world, is a winner! Thank you!
And a bitcoin cultist who predicts the total collapse of the US economy one month in advance...every month.
Everyone Is on Their Phones
It’s also not “abolish all parking” it’s “don’t force parking”. Or rephrased in a libertarian way “if there is a need for parking the market will provide it” (I make no comment on whether to expect a positive or negative outcome of this experiment)

I mean, you seem to be adamantly opposed. I assume for good reason (at least in your mind). Why not make an argument that actually relates to the proposal? At least I would give your opinion more weight that way
Border Violence Monitoring Network: To End violence against people on the move
Can't blame the programmer for that - Windows shouldn't allow the programmer to do stupid shit
So I'm a user of 23andMe. I have DNA relatives on (dont find it that useful though), but I don't really see much "DNA" in terms of "my relatives" (I've also never accepted anyone to see any of my profile, I just see who they say are relatives and how close they are (first/second/third cousin and so forth).

I assume most people are the same.

Therefore, I'm not sure what significant information an attacker could have gotten on me. Anyone care to enlighten me?
Show HN: Free AI-Powered Personal Finance: Goals, Budgeting, Tracking
Fwiw, I would guess, after unity, C++ targeting windows is the dominate approach to game development by a margin. And I see game engines on HN pretty often. Doesn't seem that strange
> I have many uses for a smart, controllable and low-code screen in my house, and barely the time to figure it out myself.

I also don’t have time to figure it out, so I’m probably just going to buy a used iPad and put it on the wall. I’ll get a nice bright screen and anything I want to see just needs to be viewable in a web browser.
> "The EU didn't force cookie banners, they just made it so that companies have to choose between the banners and their revenue, conversion tracking, and business metrics."

You don't have to choose between those.

Revenue tracking is clearly necessary; `SUM(total) FROM orders` hardly violates the GDPR. Conversion tracking can be done in an anonymized fashion, or via things like coupon codes. Plenty of business metrics left to go on.

The EU correctly decided the balance of things was too far in the corporate direction versus the consumer direction.
maggie appleton recently shared this on twitter, i am not a design person but the resources seemed nice

https://maggieappleton.com/
https://smart-interface-design-patterns.com/
https://www.ooux.com/people/sophiavprater
https://www.amazon.in/UX-Magic-Daniel-Rosenberg/dp/170806161...
https://shiftnudge.com/
>but I've always been pretty leery of giving up the trivial snapshotting and rollbacks and other creature comforts of old-school virtualization when it comes to deploying long running applications,

You can do that too with k8s with APIs which support more than just one backend.
Similar to this, I created an android wallpaper that shows what percentage of your life is already past. This helps me ensure that I'm spending my limited time in the most valuable way possible, and really helps put things in perspective.

App: https://play.google.com/store/apps/details?id=com.machineryc...

Source code: https://github.com/ethanmdavidson/DeathProgress
Show HN: CyberNvim, the simplest and most extensible Neovim distribution
CyberNvim is a fully-featured and incredibly easy-to-understand Neovim config. It is a fully-featured IDE-like setup with an extremely simple configuration and an uncompromising featureset.

CyberNvim is where simplicity meets power.

Only 1200 lines of code
Built to be broken
Zero compromises in available features
Minimal learning curve
Plug and go personal configuration

See it here: https://github.com/pgosar/CyberNvim
Murica not catching up with the game not regulating anything and literally letting crooked billionaires do whatever they like is one of the worst things happen to the web :(
The basic use case here of making videos and transcripts more accessible is super valuable. Are LLMs better than full text search though?
We're the companies he was involved in scams or are you just assuming everything that involves crypto is a scam?
there were some past submissions that seem to indicate they were playing around in the "clone your voice, fool your friends" space

https://news.ycombinator.com/item?id=29786132 -- Show HN: Clone your voice and speak a foreign language (January 3, 2022 — 513 points, 112 comments)

https://news.ycombinator.com/item?id=31728939 -- Show HN: Voice Clones for Creators (June 13, 2022 — 71 points, 63 comments)

clicking on the domain name next to any submission shows their other ones https://news.ycombinator.com/from?site=coqui.ai
honestly I browse without JS enabled most of the time and most websites not only work just fine (to the extent that they show the content I requested), but they also load faster, look cleaner, and the overall experience is a huge improvement. Considering that in the rare cases where it doesn't work it's just a couple of clicks to selectively allow JS (which can be remembered so I only need to do this one time) or to re-enable JS globally it's really not a problem.

It'll depend somewhat on what you use the internet for I guess, but it doesn't make the internet broken by any means. Because of the work I do I've got a ton of other things disabled too which can make it harder than it would be for most people and it still usually isn't an issue. I also keep a non-hardened browser around for cases where it really is a problem, but I rarely need it.
NetBSD 10.0-RC2 Released for Testing This Big BSD Release
>your data was still compromised if your third cousin once removed had "hunter2" as their password.

And you opted-in to share your DNA data.

But yes, the entire business model of 23andMe makes me uncomfortable. But it's a bit removed from the password security stuff I wanted to focus on, especially as the password security stuff is applicable to any type of service.
Location: Toronto, Canada
Remote: Yes

Willing to relocate: Yes

Technologies: Golang(8/10), PHP (8/10), Node JS(6/10), React JS(6/10), Postgres (SQL)(7/10, Kubernetes, Docker

Résumé/CV: https://github.com/asudhakar/resume/blob/main/Sudhakar%20Ann...

Email: asudhakar@live.in
Such a garbage article.

What happened to EVs is what happened to all new car sales.

Reminds me of the time a couple decades back when a bunch of power plants went offline in Florida, and the only news article about it was about how a nuclear power plant stopped.
Reminder to non-UK people: when people in England refer to the “North East” and “North West” and so on, they are referring to only England, even when talking in the context of the UK.
> Under the law, which passed with a narrow 51% yes vote, the state rolled back certain transfer tax protections. As a result, any child who inherits their parents’ property today could be subject to a higher property tax bill since the home would be reassessed at market value at the time of transfer.

If the property was the parents’ primary residence before they died, the law does carve out a $1 million allowance to be excluded from the reassessment for the child who makes the inherited home their primary residence within one year of the transfer

The law addresses a really unfair prior condition, that houses handed down to children would be rented out at massively landlord-friendly terms, with 20th century tax assessments. Rent easily covers the taxes anyway. It may be that a few inheritors don't get to move into the parents' house, but that doesn't make up for the loss of tax revenue or the unfairness to people who weren't gifted a house. The fact that the inheritor receives a step-up in their basis for capital gains tax means they win big for a valuable house anyway. There may be some losers in this but there will be winners too.
It probably was about 2 months of initial CAD and drawings, another 2ish months of manufacturing, a month of testing, a month of iteration, another month of manufacturing, more testing, reviews, qualifications. Add in some time for Davis working on other things + the part waiting for other projects to finish manufacturing or testing, and you get nine months.

For a cleansheet part from a engineer who never built one in his life during the early days of this approach to aerospace, 9 months seem reasonable to me.
"Nonetheless, because most benchmarks run for several seconds, including the startup time does not greatly affect the results."

https://github.com/attractivechaos/plb2#startup-time
Working in fraud prevention and I would love to know how to detect a botnet system, beyond the usual velocity checks. A decade of working in this space and I haven't found a reliable, fail-safe way to do this. Genuinely interested to know if there's a suggestion.
Your toddler game ideas are thought-provoking. Thank you for sharing!
sorry if I wasn't clear: under JP copyright, you can encode and then redistribute, presumably for a profit or other gain, and not renumerate content creators at all. True wholesale piracy which destroys the economics for all forms of content creation that don't have another obvious way to make money (e.g. authors can't sell concert tickets).
Care to elaborate? Steam for example reports > 96% windows usage.
Just checked it out. Yes, that's very similar indeed, and I'll probably draw some inspiration from it.

My use case is to primarily help me understand pip/venv a bit better and do more experiments with bash.
For me the switch is not ergonomic and frequently causes my hands to fall asleep when using it. The steam deck has no such issue and is nice to hold comparatively
"Most authors in the Western cannon" as a group is not representative of most authors, Western or otherwise.
Porsche Design System v3
I wish it worked this way but I have my doubts. Since I started working on frontends I looked for ways to automate feature development but it seems the priorities of software organizations does not include this. Having a custom Content Management System should be an easy win, but in practice it seems it is too complex for the liking of most orgs. It would require a large dedicated core team that is not directly adding value to the business, and so it is not prioritized. Instead teams are pushed in the direction of owning part of the product and every slice of the product lifecycle.

I think if you build the app from the ground up to be a CMS, it would look like a custom WordPress/Drupal, and those requirements are engineering only. It would only add indirect value which is hard to measure and therefore, unfortunately, it is not something that software orgs will invest in, despite the potential efficiency gains in the long term.
Bleh, I guess it's legal for now. We'll see if his opinion changes in the future since he seems on the fence already.

> These things are plausibly not "material nonpublic information." But they are obviously things that investors want. That's why investors meet with companies. That's why investors who meet with companies perform better than those who don't. And all of this is legal. Or legal-ish. Or at least in a broad gray area between legal and illegal.
37C3: A Libyan Militia and the EU – A Love Story? [video]
https://en.m.wikipedia.org/wiki/Aeroflot_Flight_1492

https://www.flightglobal.com/analysis/analysis-superjet-fire...

Made for interesting reading. I think that it's possible that one more life could have been saved without those carry-on bags. That's a responsibility the passangers and crew both share.
> the vegan influencers are commonly known to die of malnutrition.

Can you provide some backing for this statement? A quick search shows a ton of news articles about one specific influencer who died last August, but I didn't find much that suggested a trend as you indicate.
Cats of the the bag, unfortunately. Can websites detect that setting to avoid popping a redundant cookie banner?
Arch is weird. I consider myself a Linux power user, including kernel hacking but no way I'm going to manually set up partitions and type gazillions of commands to set my system up.
This is off putting, I have no idea what's wrong with an installer. WTF Arch?
Show HN: Open Prices, an open database of prices for food products
On His Cameo profile his rate is 10k for 10 minutes and says he is doing it for charity.
Loving posts
For some reason this page doesn’t load on mobile Safari because it crashes. Reader mode doesn’t render anything either.
laying the ideological foundation for socialising of losses, privatising of profits and destruction of the environment.
My cousin has some of my DNA in her DNA. She blundered it away. I wish 23 and me had treated her like the blubbering fool she is.
In context, "computer or collection of computers that are distinguishable as a unit by the server they are attacking".
The World of Warcraft Server emulator TrinityCore has a hot reload system for its Scripting (Boss AI, Spells etc.).
AFAIK when it's enabled, those modules are compiled into their own shared library and when you make a change to one of the script .cpp files, it triggers a compilation and then unloads and reloads the shared library (I think the process is more complicated than that so it doesn't crash for scripts that are currently active and different operating systems behaving differently).

Made developing those scripts much, much more comfortable when it was introduce. You no longer needed to manually compile, stop and start the server, wait for all the database stuff to be loaded, switch to the client, log back in, wait and then retry on every single tiny change.
To me, it was like magic.

Today, I wonder why they didn't just use a proper scripting language.
Was laid off from Big Tech after working nights, travelling around the world for the company and giving everything I could to keep my job.

The job market seemed dead, also I was competing with around 500+ people that were laid off as well with me... luckily(!!!) I've found a new job after only 2 weeks.

The compensation is lower, but it's fine. Europe compensation for developers sucks in comparison to North America :-(

My new job is in a small company, but really nice. Cool people, laid-back and interesting. I really like it.
With roughly half the number of passengers.
You're comment history doesn't suggest that you're a Russian troll, so my interpretation is that you're making a pointed remark that you either don't really mean or perhaps haven't fully thought through. So without meaning any offense, let's pick this apart.

To be fair, I disagree with my country's cracking laws as well. We should do better here, the right to one's data is an important freedom. I support the fight for saner copyright laws.

But let's also be real: There's no universe where that injustice somehow outweighs the entirety of human rights violations that go on inside Russia. Persecution of minorities, decriminalization of domestic violence, torture in prisons. Just to name a few.

Western copyright laws aren't good. But there are worse fates in life than not being able to watch old blu-rays.
How would you enforce use of (only) the correct kind of mutex in interrupt context?
I want to begin game development as a hobby, but I'm unsure where to start. I did follow through https://learnopengl.com/ a few years ago, and while it was a very interesting experience, I imagine I would need to use an existing engine to be productive.

Do you recommend any books and tutorials aimed at experienced programmers with 0 knowledge of game development/design?
"all the time" is not correct. Because just as well, people "all the time" correctly judge people to be credible.
Like the Dual_EC_DRBG issue involving the NSA?
This is 50% of them opting in AND being considered relatives to the 14k who reused vulnerable passwords. For all we know, there may be 99% opt-in but only half the opt-ins are "relatives".
No, it is definitely trivia. You can just as easily look it up on an as-needed basis.

Whether or not developers choose to observe time complexity is orthogonal.
> That's very arguable when it was the US who led the world in opening up to China in the 90s/early 2000s, opening its markets to China, bringing China into the WTO, etc. (all at great cost to middle class Americans). China was an economic basket case and incapable of developing on its own. No country in history has been more generous to another.

I'm intrigued by the metrics you're using to conclude that the US has been more generous towards China than it has been towards, say, Israel or even Mexico, as a matter of state policy. Especially considering that US placed China under trade embargo and singlehandedly denied it UN representation for 20+ years.

The actions you are describing as representing a historically unprecedented level of generosity seems essentially to boil done to US agreeing to maintain normal trade relations with China, similar to those it has with nearly every other country. Worth noting that the US extends Most Favored Nation (MFN) status to all its trading partners — it's not some exclusive or rare privilege as its name might suggest but a standard practice in international trade.
The problem is that the more the cache is filled, and the closer the Hand gets to the head of the queue, the closer are newly inserted items to being evicted.

There doesn't seem to be any good reason for this over putting the newly inserted items at a consistent distance away from the Hand, so they are a predictable, controllable number of steps away from the threat of eviction, and so that the Hand movement is just a cyclic treadmill with no spot of the circular buffer being arbitrarily special.

If randomization of the distance is beneficial, let that be explicit! Feed a stream of pseudo-random integers to the cache which is used to select the distance between the Hand and the Insert point. That could be still be nicely controlled as a jitter within a minimum and maximum range.
EU is law is so bad that Wikipedia has a cookie banner. It literally bans all non functional cookies unless the users consents like preference cookies, performance monitoring cookies etc. I am sure all their government sites violate their own rules because i see preference cookies getting dropped without my consent and if I block the cookie, site still works.
Amazon Disables iOS Kindle App
In the last 24 hours Amazon made a change so that downloading a new book to the iOS kindle app causes the app to shutdown. Once a new book is downloaded the app will spontaneously shutdown after about 30 seconds. Currently there’s no fix.
> A warning, not an admonishment: Use Apple services in a novel or unsupported manner and you're asking for trouble.

+1

I've always had sync issues with iCloud Drive when storing developer projects and related things there. It ends up stuck or confused or conflicted but tries to resolve the merge conflicts opaquely and it's hard to know there's a problem in real time vs until later when you find something broken. I keep all dev things out of iCloud after getting burned by this enough times over the years.

To OP: Consider a repo dotfiles setup like using Chezmoi or similar. Transitioning to it was less friction than I expected and the only downside really is having to remember to commit changes across devices.

https://github.com/twpayne/chezmoi