skysight-inc/HackerNews huggingface dataset:
Salame was the only criminally-charged executive [0] to not testify against SBF. Caroline Ellison, Gary Wang, and Nishad Singh all testified in the trial as part of their plea deals and are still awaiting sentencing. Will be interesting to see how their prison time compares with Salame's

[0] https://apnews.com/article/ftx-sam-bankman-fried-ryan-salame...
I do not believe that this is accurate. California Investor Owned Utilities (IOUs) have had their profit decoupled from revenue since 1981. [0]

The Federal Energy Regulatory Commission (FERC) allows for an equity rate of return on assets of approx 10% (9.3). [1]

As a result, California IOUs don't have an incentive to sell more power, but do have an economic incentive to build more assets. Asset construction is driven by growing peak demand. Or under-investment in O&M.

[0] https://www.sciencedirect.com/science/article/abs/pii/S09571...

[1] https://www.utilitydive.com/news/ferc-lowers-pge-transmissio...
Yes, it hides the URL, although sadly not the domain.
Highly recommended, didn't think I'd watch the whole thing but the production quality was great and it explains everything much better than the wired article.
The strong expert consensus is that fault-tolerant quantum computation is physically possible and it’s just a challenging engineering problem. One key insight is the threshold theorems, which show that if you can build individual physical gates with error rate below a finite threshold (typically 0.1-1%), you can just stack these gates together and they simulate logical operations with logical error rates that can be made exponentially small.

https://en.wikipedia.org/wiki/Threshold_theorem

If it helps, there are plenty of historical analogies. Quantum-enhanced sensing took more than half a century between conception and practical use, but it is currently used daily at LIGO.
I appreciate the thoughts you put into this, and thanks for sharing.
Is the HSTS preload list used by anything other than browsers? I'd expect it to be minimally useful for an API.
Wouldn't a geo-replicated single-primary DB suffice? Reads would have low-latency, and only writes would pay for the latency to reach the primary far away.
He agreed to forfeit over $1.5B in assessts

It says "Could " Do people even read the headlines they link to? The DOJ link did not mention giving up everything. It said restitution of millions.
thank you Ivan looking forward to an android version!
OpenAI: Fallout
If he can squirrel away a few million, < 1% of the forfeit amount, he's still set for life.

I don't think it's possible for a billionaire to cease being rich.
I have asked that the building administration get more info on where/when/what type of noise but they haven't come back with anything useful yet.

We don't hear the noise. Our building has plenty of general noises but nothing that would justify a complaint
> Do you have information about it that the rest of us don't?

No, that's why I asked. I was aware of the less than perfect record elsewhere wondered if they had done better.
> I remember it well: it was WiFi drivers and I had to load Windows drivers via some compatibility layer

ndiswrapper
The DOJ link did not mention giving up the billion. So I am basing my opinion off that.
I would say it does make sense as a nice upgrade path for services that don't yet support https but you'd like to switch as soon as they enable it, or if you're forgetful or lazy and didn't type https:// in front of the link you were given or so

Whether that's still common enough to warrant the extra complexity in the fetch function is not something I'm qualified to judge
That's an excellent point, and definitely something I've done without thinking about it. I'm going to stop, and disable those. Thanks!
No activists fight for taxes that would target the wealthy, such as capital gains taxes and wealth taxes and are shut down by established wealthy interests.
Don't have HTTP available at all
Most audiences will still consider it to be somewhere between vaporware and a glorified tech demo, but its adherents are fervent.
> Raskin was emphatic that the Swyft and Cat should not have modes — when you release the keys, the operation is over, whatever that ends up meaning.

But that's not what this is. Search is a mode; it's just one that, in the Cat design, requires holding down a key to keep active, and by dint of modelessness as a design goal also fails at discoverability. (How do you cancel a search?)
Yes, it'd create a multi-path circuit causing the trip.

This (multi-path circuits) is not uncommon when homeowners try to wire up a smart switch requiring a neutral to a switch-circuit without a neutral (as most light switches actually only need to switch the hot) and so they "borrow" a convenient neutral from a neighboring circuit which causes it to immediately trip!
Not totally, only partially. At the time the Bulgarians were already a mix of the Slavic, Byzantine, and other peoples - including, of course, the Bulgars who, too, settled there, in the process of their migration from the East. The Bulgarian language and the Bulgar language have little (if anything) to do with each other.
The Biggest Ponzi Scheme in Hollywood History
I propose that developers are allowed to use it in production... so long as they do all the development work on a 9600 baud dialup with a VT102.
This $10 isn't nearly enough for actually maintaining it. For customers without net, it's not just $10. It's $10 plus some per-kWh cost to try and scale it based on your actual load on the grid equipment. If it was a flat rate for all customers it would have to be a good bit more than $10.
> I am also very sceptical that mental pain can be as great if not greater than physical pain.

I don't find it such an extraordinary claim, but if you do, perhaps you can consider the rather extraordinary evidence that this woman chose to die to escape her pain as proof that it may be possible.
Given that they specifically say they don't do that, what concrete evidence do you have? I don't see anything in their prohibited activities list that would require them to do so (e.g. recipient complaints would suffice)

https://improvmx.com/terms-of-service/

https://improvmx.com/our-pledge-to-you/
truly l337
No it doesn't. What kind of an excuse is that?

When a password manager maker finds a vulnerability they should absolutely tell their users to regenerate their passwords!
Is this supposed to mean something? I skimmed, doesn’t explain what the acronym means. And it certainly doesn’t go back in time and give me an understanding of what ATS is or why I should care.
What is the humidity like? A dry heat is different from a sauna type heat.
We need to pivot to this. As hybrid and battery electric vehicles become more common we're essentially defunding a range of services that depend on gas tax revenue.

Now we can come up with an alternative way of generating revenue, but what is clear is that the gas tax itself is no longer effective and sustainable.
Why do you expect the electronic device to be within reach of the phosphorus in the first place?

The antenna would[1], but the valuable electronics has no reason to be left outside, and practically any amount of concrete, rock or even dirt would protect it from WP.

Also, from your description you're probably confusing WP with termite, which is different (but would be equally inefficient again EW devices for the same reason).

[1]: and with WP you're likely going to just damage the wires and not the antenna itself
That's literally what the article suggests:

> A great solution for failing fast would be to disable the API server's HTTP interface altogether and not even answer to connections attempts to port 80.
Numeracy is definitely associated with different brain regions than just reading. See, e.g.
https://www.sciencedirect.com/science/article/pii/S105381191...

(Dehaene also has a book, “The Numbet Sense”)
Are people really that brainwashed that they don’t realize that the only reason tiktok is being banned is because of the Israel Lobby?

A foreign nation wants to ban it because it doesn’t serve its interest, this foreign nation happens to buy up all our politicians.
It used to be a 1,000. I guess it’s just a reminder to be succinct.
Mortgages Stuck Around 7% Force Rapid Rethink of American Dream
Red Hat was a well-documented Linux distribution with a far more approachable installation process than most of the few other distros available.

IMHO, their reasons are irrelevant today and you shouldn't use their path as a guide.
But PG&E doesn't own all the lines.

https://gis.data.ca.gov/datasets/260b4513acdb4a3a8e4d64e69fc...

For example, PG&E owns the line that goes from Coyote to Tracy, but the ones that runs perpendicular to it is owned by Critical Energy.

Or https://gis.data.ca.gov/datasets/260b4513acdb4a3a8e4d64e69fc...

One line owned by PG&E, the next line is https://en.wikipedia.org/wiki/Path_66 (some of which is owned by PG&E, some of which is owned by other companies).

> Two of the power lines run from Malin Substation southeast of Klamath Falls, Oregon to Round Mountain Substation northeast of Redding, California. One of them is owned by Western Area Power Administration, with the other owned by Pacific Gas and Electric and PacifiCorp jointly.
Not if you're building Mechzilla. There's plenty of room for them at that scale!!!
Oh the view's a good point, if your window faces the back of an other apartment building and all you have is a wall of AC you're better off with frosted glass.
This is better, and the only way to really prevent the primary problem. Why would an API be on HTTP at all?
As in, selling API keys? Not sure what you're asking for. Are you looking for a webshop that has API key sales as a default item type or something?
Can't wait for the supercut of every presenter saying "AI".
No, i know countless people who condemn a lot of the actions of the US. But what are you gonna do about it?
That doesn't mean we should hold everyone to low standards.

Also: the attacks on palestinian children are everything but eliminating the threat. Sure you can blame hamas for hiding behind civilians.

If i you punch me and hide behind your toddler and i come and punch your toddler to death, it's your fault, right? I am still allowed to punch your toddler to death?

Sorry for this obscene wording, but i think it's much worse than these words for the children in palestine.

Of course it was also bad for the kids in israel. I wish no one had to die. But if people die in wars, at least let it be us grown up mean who get tricked into believing in causes to die for.

Seriously, why can't just the whole of HN think about the 3-4 most influential people the know & organize a plan to bring orchestrated peace.

I mean just if we reached out to all sysadmins in the world telling them to shut things down until the weapons are stopped or whatever... what is any of this worth if babies don't even live to their first birthday before getting to know German (& American) weapons fired at them from a country that was built to protect the people from things like that...

Shouldn't the internet have something like this as a usecase? Bring power to the people?
For what? To download whatever we want? Watch as much porn as we want? Or to actually have an impact & stop the madness?
Come on... anybody at least thinking he/she'd support if we came up with an actual plan?
Are you GenZ? Because the OP is about GenZ. It's highly possible that we're out of touch and they think differently :).
But a calculator wouldn't be very good if it's only correct 99% of the time for arithmetic...
I'm not sure what you are arguing for or against. I think janosdebugs made it quite clear what they are trying to do.

You do realize that many apps on F-Droid are developed by businesses? OSMAnd, Fennec, Jitsi Meet, Element, Telegram being big examples. We also had the Simple family of apps for a while.
didn't the vendor fix it?
4.4 billion could also pay for a lot of rural cellular infrastructure. As in most of the US, but it wouldn’t directly bring in customers.
It also says

> We didn't have the guts to disable the HTTP interface for that domain altogether, so we picked next best option: all unencrypted HTTP requests made under /api now return a descriptive error message along with the HTTP status code 403.

So close and yet … their misconfigured clients will still be sending keys over unencrypted streams. Doh
Wow, I'm feeling lucky. I have the exact same turntable. Using a different app (since I use Android) I was able to gyroscopicly measure just 1.3% average difference.

I have a sense of tone and it's always seemed fine to me.
Guess when you zoom in very closely to something, a lot of differences appear, and when you zoom out, somethings look similar.

If you step back and just take it as comparing the functional programming concepts in both F# and Rust, then it seemed like a valuable comparison. Just because how they get compiled is different and that they started with different goals, doesn't change how they are similar in programming style. Not sure why making that comparison is invalid.

And. Not sure even your fundamental objections are true anymore. Rust can be compiled to WASM, and F# can be compiled to WASM, does that mean Rust is no longer just for systems programming? Why make such a strong stance, if it isn't a 'system level' then you can't use Rust or compare it to anything else. "you better just use it for system level stuff or else".

All in all, it does seem like you need to take a chill pill. Rust isn't what it used to be, it can be something beyond systems programming.
Yes. Even if he loses everything nominally on paper, careers await upon his release. he has the connections still. These people almost always fail-forward.
Hey dang, it looks like this was flagged incorrectly.
I have forgotten the source where I stumbled on the requirement for a qubit error rate to run the Shor algorithm. I would greatly value it if someone could put a key reference here.

A recent result considers a generic error model and a subclass for particular kinds of prime numbers [1]. The important result is $epsilon > cn^{−1/3}$ where epsilon represents qubit error rate and n number of bits in the factorised number. As $n = 2^N$ where N is a number of qubits, the result:

error_rate < const/2^{N/3}

Therefore, the error rate must decrease exponentially with the number of logical qubits with which the computation is made.

[1]: https://arxiv.org/pdf/2306.10072
Another thought, where do you see that Greenpeace is opposed to the technology? I don't take that as a given, perhaps that is why we disagree?

The stated concern is mixing of seed crops, not a blanket concern for any GMO crop of any type. If the concern were for the latter, I would expect the reasoning to state so.
My personal website (darigo.su) doesn't have HTTPS. I just deployed it a few months ago and haven't really done much with it yet. I guess I'll have to get around to it eventually, but I find charm in small old sites that haven't implemented modern protocol stuff. My site also uses <font> and <center> tags all over the place.

Maybe I'll do some more quirky anachronisms, like only serve the site via HTTP 1.0 or something. Who knows. Since my site has very little functionality, it doesn't really matter, it's just for fun.
The basic idea is that whenever you find yourself memorising an IPv4 address, there's a failure somewhere. Possibly at policy and governance level.

Hell, if you run a modern Microsoft domain (think newer than Windows Server 2008), you're hamstringing yourself if your network is IPv4 only, because since NT6 Windows is IPv6 first system, and there are indeed some corporate features that do not work if services aren't available over v6.
CDNs have the same privacy and content validity implications as ISPs in the pre
Fix it? Do you mean the design? Because there's not fixing this one.

It seems to me the fix would be to not have your backup generators below the water line.
SwissCom do this well. When you sign up you can get a discount if you agree that all your support requests have to go via a chatbot first. Or rephrased, you can agree to pay more to get priority access to human support. So the ISP cuts you in on their savings - fair.

I plopped for the chatbot, then I had a problem. My apartment is wired weirdly, long story. The chatbot was very clear that it was a bot, it worked well, and it only took a few minutes of chatting before it decided to escalate to human support. The human support called me, so I didn't have to pay any phone bill, and they did it within a few minutes of bot making the decision to escalate.

All in all it was pretty satisfying. Comcast's version sounds ... less satisfying. The arXiv paper is really the cherry on top.
that hasn't worked in years mate.

it is one of the reasons why many application systems, even if they're able to parse your resume, require that you manually add things like jobs, education, and certifications.
This is awesome. I'm like 99% sure I saw some of these effects in some of my late-80's CRPG type games :)

It looks like the color gradient is per-pixel, not per-character. Would anyone have any idea how the package does that?
Because the way HSTS works fundamentally implies a stateful client, and because it was fundamentally created to solve a human problem (i.e. humans entering in URLs directly in the address bar). It really doesn't make sense with a non-stateful client, and it isn't intended for cases where someone isn't manually entering in the URL to hit.

E.g. fetch is often loaded in transient situations - it really shouldn't be updating its own config because of responses it gets. Also, based on the other comment I was originally thinking it would be good if fetch would just error out if it gets a redirect from http -> https AND also a Strict-Transport-Security header, but in that case it would still mean it was dependent on the server setting up the STS header, and if they could do that they should just go ahead and get rid of the http -> https redirect in the first place.
You’ve already been shouted down, but thank you for daring to suggest this. I maintain APIs and proxies for APIs for legacy devices, and will continue to suggest that some kinds of APIs remain appropriate for HTTP access. Never do your banking this way, obviously, but where is the harm in allowing older devices to access content in a read-only fashion?
The author includes a surprising response from "Provider B" to the HackerOne report.

> Provider B: Reported on 2024-05-21 through their HackerOne program. Got a prompt triage response, stating that attacks requiring MITM (or physical access to a user's device) are outside the scope of the program. Sent back a response explaining that MITM or physical access was not required for sniffing. Awaiting response.

I think Provider B morally should require HTTPS, but it really surprises me that the author would say "MITM or physical access is not required for sniffing."

Is that true? Isn't HTTP sniffing an example of a MITM attack, by definition? Am I using the words "MITM" or "sniffing" differently from the author?

I'm familiar with the following attacks, all of which I'd call "MITM":

1. Public unencrypted (or weakly WEP encrypted) wifi, with clients connecting to HTTP websites. Other clients on the same wifi network can read the unencrypted HTTP packets over the air.

2. Public encrypted wifi, where the attacker controls the wifi network (or runs a proxy wifi with the same/similar SSID,) tricking the client into connecting to the attacker over non-TLS HTTP.

3. ISP-level attacks where the ISP reads the packets between you and the HTTP website.

Aren't all of these MITM attacks, or at the very least "physical access" attacks? How could anyone possibly perform HTTP sniffing without MITM or physical access??
Why is it better?

I can't think of large differences. What comes to mind are two human factors that both speak against it:

- Having an HTTP error page informs the developer they did something wrong and they can immediately know what to fix, instead of blindly wondering what the problem is or if your API is down/unreliable

- That page, or a config comment, will also inform the sysadmin that gets hired after you retire comfortably that HTTP being disabled is intentional. Turning something off that is commonly on might be a time bomb waiting for someone who doesn't know this to turn it back on

Edit:

Just saw this reason, that's fair (by u/piperswe) https://news.ycombinator.com/item?id=40505545

> If the client can't open a TCP connection to port 80, there's no unencrypted path to send the API keys down

If that immediately errors out on the first try, though, what is the risk of the key being intercepted? The dev would never put that in production, so I'm not sure how the pros and cons stack up. I also loved this suggestion from u/zepton which resolves that concern: https://news.ycombinator.com/item?id=40505525 invalidate API keys submitted insecurely
This looks nifty but what is the story on security?

It is great to have the File0 code next to the over verbose
S3 code.

The S3 code contains a few security operations that are missing in the F0 code.

What is the story on that?
Kotlin + Compose Multiplatform is another up-and-coming option for fully cross-platform apps that is compatible with WASM.
Yeah but why have people there at all? Upthread commenter is asking about just filling it with concrete and leaving it alone.
Treasury Sanctions Creators of 911 S5 Proxy Botnet
Depends how close they are from the civilian population, as always.

At least with HE you can limit the damage to the particular place that holds the device, when I'm not familiar with any use of white phosphorus through precision munition (I'm far from a munition expert though, so I may be wrong here).
Reaper's great, but it and Ableton are focused on very different things. It's hard to come up with a workable analogy but they are probably at least as different as Photoshop and Illustrator are from one another.
In the tech realm: I'd spend my time doing optimization work for open-source projects. It's fun, and you get to show some objective results. I'd probably do that until I had some sort of concrete idea for a cool project or some kind of project that might benefit the world somehow.

Or maybe I'd just leave tech behind entirely and do volunteer work.

But I feel like that's a one-way street. If I walked away from tech for a few years, and decided I wanted to go back... it feels like it would be very difficult.
- I believe in fair price. I've noticed the end users pay for the inefficiency of those companies not because the product is worth this value.

You could tell me, well it is the value as soon as someone pay for it? But do we have a choice? I just want to give that choice. I am even tempted to offer a pay for what you think it is worth.

If I am wrong in my idea, you'll see me raise the prices ;)
>But only one side a the majority of scientists on its side

Looking at what "science" is supposed to be nowadays I have my doubts. Looks more like there are a lot of people that all say the same thing because out of fear of loosing their jobs.

> How ironic because you did the same the sentence before.

Glad you noticed it.
there are a number of famous criminals back in the game. Being infamous is invaluable on twitter: jordan belfort, Shkreli, billy mcfarland. Just get a twitter account and sell the movie rights
Sounds like we need to subjugate these orcas to capitalist alienation
That is a very pointless comparison. Mass Effect is a plot-driven theme-park, while Star Citizen is a World-Simulation. Not quite the same type of software. Minecraft or Microsoft Flight Simulator are probably the better comparison.

> Aside, does $700M make this the most expensive (or, rather, well-funded) video game of all time?

World of Warcraft and similar long-running service-games could be in the same range, but it's again a different type, and it's usually not known how much money went into their development.
Maybe check for carbon monoxide poisoning, he could be hearing things that aren't there.

Other than that, remember that the burden of proof is on him. So don't go crazy over it yourself.