skysight-inc/HackerNews huggingface dataset:
1. I think "fairly easy" badly mischaracterizes its difficulty. 2. I found Harry Blackmire, The New Bloomsday Book: A Guide Through Ulysses, very helpful.
Companies can’t “do” anything, they have no hands or brains. Human beings performed the hack in question.

Prosecutorial discretion is real and dangerous. There are two sets of laws at work in the US, one for us, and a different one for them.
Why does that mean that it gets flagged?

Why not post a link about the Iranian stuff?
It's pretty easy to say, full stop.
This. If I am about to post something I don’t need anymore to FB marketplace, first I will hit up a friend or two of mine who I would have in mind as people who might want it. And only if they don’t want it, then it goes to FB marketplace. I don’t expect or accept any “bribes” or favors for that. It is just a natural choice for me to go through them first, as that’s just a win-win for both of us, and everyone involved is a known entity.

I would bet the same principle works here. The whole idea of the auction is to get rid of unwanted items and get paid for it, and that’s exactly what’s happening here as well.
There are plenty of mini-DIN connectors and serial cables for mac on ebay.

You need just three wires for serial line to work. I would strip the wires and plug them in without any connector. :)
>What does an algorithm look like?

That's a million dollar question. Can code be represented in a visual way? Bret Victor tries to give an answer to that. I don't personally think that it can, but there is sure a way, to represent some parts of a program in a visual way.

People use literate programming today in Emacs, in case you are interested. I strongly recommend to try Emacs, LLM's can write Elisp for you, to automate parts of your workflow.
we need at least 8236 more job boards
The “interesting” parsing behavior of CMD.EXE made the spaces extra fun.

Not to mention it was under “Documents and Settings” and it was pretty easy to hit the 255 character path limit with all that as a prefix.
This does not add up. How did the Meta CS scammer get in to the PayPal account?
They can also push other Five Eyes countries to follow up, and Japan too. Korea might be difficult to persuade but hey we have a military existence over there.

After all, Five Eyes + EU + JK is pretty much THE non-China market out there. The others are not rich enough.
Author here. It's a good question. It probably does, but I admit I'm not familiar with Zmodem. I don't recall finding a terminal application installed on the laptop, but maybe I just wasn't looking hard enough.
>$100k is quite a bit below what I'm looking for at this point in my career.

It's a rough pill to swallow, but the rise of remote work is inevitably going to pull things down to a "national median" somewhere in this area. There will always be the coastal tech hubs where top tier folks can go to make real salaries. But for the most part we (in the US) are going to be lumped together and forced to accept something in the range of 2x the average income instead of 3-4x, similar to how things are in Europe. Particularly when you consider the amount of LatAm/Canadian nearshoring going on right now, and the absolute glut of junior/midlevel devs on the market.
Full disclosure, I’m a PM on GKE. These articles get written because EVERY CUSTOMER WE TALK TO ASKS FOR THEM. “What are the best practices for x…”. Personally I stave these question off with “it depends” or “I’d really need to understand your business so we can appropriately talk about trade offs”. But honestly, I would LOVE if my customers trust amongst each other would mitigate the need to ask us for all up best practices on how to build and ship software.
I didn't read that very carefully, but proving that a parallelogram with equal diagonals is a rectangle is obvious enough via triangle congruency that I suspect they were just taught it without the proof. It's not a particularly interesting detail.
The screenshots of the chat logs are really something. This firm claims to be in communication with the actual criminal, and the actual criminal says that using their firm would have helped prevent the breach.

I have updated my sense of the firm's trustworthiness accordingly.
If the threat actor has played it right, there is a high possibility that this will be the largest data breach in history.
The server runs the card and comes back with the slip for me to add a tip if desired and to sign to finalize the transaction. The slip is left on the table when I leave the restaurant.

There is no pin involved.

At some places, the server has a card reader in hand and just runs the card then and there in front of me.
> Sometimes it's best to be DRY right from the start.

In your case I don't see how it couldn't be refactored later on once you have the domain knowledge. In our company we always have 2 types of projects planned. We can't always ship new features under type 1. And refactoring is something we must do under the 2nd type to reduce the tech debt. With 2 type of projects in mind we always plan the capacities for both types of projects

And that's how exactly how you should do dry. Once you see the repeated pattern, you should refactor it.

I'm in the finance factor and we are seeing this kind of 'similar but not the same' problem a lot. We are constantly in the process onboarding new payment use cases while doing refactors to abstract away the common patterns.
you nerd sniped me. I had to find out exactly how pissed off you were:

https://www.space.com/brightest-quasar-ever-powered-black-ho...

That's pretty pissed off!
If they could get their hands on Pegasus tools, their use might be ideal for Russia if for no other reason than because it would sow uncertainty and confusion.
Desperate attempt to confuse the issue. Brave introduced a "bug" that if no one noticed would generate large amounts of money for Brave and would have eventually spread like affiliate links on tech news sites. They tried for a money grab, got caught, and called it a bug.

You're so gullible.
> The only rational take is to believe nations when they say that they will use them, not when they won't.

If that were so, any country making a nuclear threat (backed by capability) would get their wish granted.

It doesn't work that way. Threats are assessed, weighed & countered. Bluffs are called. And miscalculations happen (for one: I'd wager Putin wouldn't have attacked Ukraine had he known in advance how things panned out so far).

It's my hope that if Putin ever 'pushes the nuke button', some general or missile silo commander(s) will just say "No. Enough! We're not having this".

Idle hope perhaps? More hoping - that things won't come to that.

As for the non-nuclear part: it's really EU+US vs. Russia now, with Ukraine doing the dirty work. Whether Russia can 'win' depends entirely on how united / determined EU countries & the US are. In other words: politics & economics.

Who wants more to win this war? Morale among Russian troops seems low. Any change in that on the horizon?
Probably just a deadline to kill the subdomain and resources.
Is it so hard to write your own program which would just read a file stream and send it to a port? Maybe also split it into smaller frames with CRC hashes attached.
Arbitration costs Spotify more than the refund. What's wrong with mass arbitration?
Usually I develop applications with a front-end and back-end component. The front-end runs in the browser, the back end runs is in some cross-platform language like Java or Python. Usually the system runs on Linux in production.

My experience is that systems like this can be developed pretty easily in Windows, Linux or MacOS. I'd spend most of my time in a Jetbrains IDE like IntelliJ IDEA and it is mostly the same except MacOS has that thing with the option and control keys. I don't find it hard to switch. I mean, I have a compact keyboard on one computer with no arrow keys and I switch between that an a normal keyboard every day. It's a small difference.

If you use WSL in Windows you can use the exact same commands and shell scripts on Linux, Windows and MacOS. I mostly use my IDE or I use vim which is the same on all these platforms.

Personally I think the WTF/mile is worse in MacOS and Linux than in Windows. I thought Ubuntu's desktop was a train wreck 10 years ago, today I think it's just fine. If I go to work for company X I am going to have no problem using whatever OS they use.
This is great! I'm amazed that someone else has solved the same problem in a different context. Good stuff.
THIS. Otherwise it's a huge clickbait and absolutely nothing more. We need more "specialized" IT job marketplaces, as most currently existing seem to be fulfilling exactly the same role and not a single one is bringing anything new. For example there was something like "AnonFriendly" posted here on HN some time ago, I really liked this idea.
I hadn't noticed and I guess this is part of the problem. Sorry this post turned into a bit of a rant but I wrote it now.

When it was decided that HTML shouldn't be versioned anymore it became impossible for anyone who isn't a full time and very conscientious web dev to keep up. Versions are a signal, they say "pay attention please, here is a nice blog post telling you the most important things you need to know". If once a year there was a new version of HTML I could take the time to spend thirty minutes reading what's new and feel like I'm at least aware of what I should learn next. But I'm not a full time web dev, the web platform changes constantly, sometimes changes appear and then get rolled back, and everyone has long since plastered over the core with transpilers and other layers anyway. Additionally there doesn't seem to be any concept of deprecating stuff, so it all just piles up like a mound of high school homework that never shrinks.

It's one of the reasons I've come to really dislike CSS and HTML in general (no offense to your work, it's not the browser implementations that are painful). Every time I try to work out how to get a particular effect it turns out that there's now five different alternatives, and because HTML isn't versioned and web pages / search results aren't strongly dated, it can be tough to even figure out what the modern way to do it is at all. Dev tools just make you even more confused because you start typing what you think you remember and now discover there are a dozen properties with very similar names, none of which seem to have any effect. Mistakes don't yield errors, it just silently does either nothing or the wrong thing. Everything turns into trial-and-error, plus fixing mobile always seems to break desktop or vice-versa for reasons that are hard to understand.

Oh and then there's magic like Tailwind. Gah.

I've been writing HTML since before CSS existed, but feel like CSS has become basically non-discoverable by this point. It's understandable why neither Jetpack Compose nor SwiftUI decided to adopt it, even whilst being heavily inspired by React. The CSS dialect in JavaFX I find much easier to understand than web CSS, partly because it's smaller and partly because it doesn't try to handle layout. The way it interacts with components is also more logical.
In this analogy, Intel sells the parts to make garages too
The Supreme Court could rule that the law itself is unconstitutional.

Or it could rule that the trial was invalidly performed. That would overturn the conviction, though prosecution could be brought again.

As you note, either of these would cause all hell to break loose. Last week I would have said that it was nonetheless certain. Today, noting that the court decided not to abolish the Consumer Financial Protection Bureau, I'm far less sure. They have no specific love for the man, even if I still think they're likely to act in a partisan manner in general.
Can you imagine needing a license to operate a push lawnmower? Of course no. Therefore we don’t need pilot’s licenses.
Mashable -> Ticketmaster hacked. Breach affects more than half a billion users.

Irish Independent -> Hackers access half a billion customers’ data in Ticketmaster cyber attack

Gizmodo -> Ticketmaster Hack Reveals Sensitive Data for 560 Million People

Daily Mail -> Details of 560 million Ticketmaster customers are stolen in data leak

And so on...

(all these stories/headlines were published on May 29th, on the day when the rumor began to spread)
> Nothing is straightforward, there are too many things going on, too much documentation that I should read, and even then (as OP shows) I may be accidentally and unknowingly expose everything to the world.

I took a break from cloud development for a couple of years (working mostly on client stuff) and just recently got back. I am shocked at the amount of complexity built over the years along with the cognitive load required for someone to build an ironclad solution in the public cloud. So many features and quirks which were originally designed to help some fringe scenario are now part of the regular protocol, so that the business makes sure nobody is turned away.
I think you misunderstand what I'm saying.

There are _plenty_ of jobs in the range I'm looking for. This site doesn't allow me to find them. That's all.
Wow, they end the chat by insulting you.
I didn't say anything about DDG. Plus, the internet is full of influence campaigns and "organic marketing," so there's plenty of reason to be mindful and question what you're seeing/reading.

A suspiciously large number of people seem to "share their experiences" whenever anything tangentially related comes up. Authentic or not, it's raising spam flags.
nah, TicketMaster was just distributing the data. Everything is working as designed
@dang, if there are karma points at HN, you could add some for submitters who improve upon the oft-execrable original clickbait headlines/titles.
(Here, I see present verb tense being used for an incident from October of last year.)
You can indeed use xmodem or zmodem, and use a macbinary encoding to transfer any file you want in either direction. Does require you to have something that can receive over serial on the PowerBook. ClarisWorks could definitely do it, but office probably has exactly the same 'receive document' feature.

Alternatively, you can use the serial port to 'print' to, and just capture the serial output. It's essentially just unidirectional text transfer but that's enough for what the author intended to do.

On the other hand, faxing and OCR'ing is pretty cool.
San Diego ponders a bid to take over its for-profit energy utility
Because those are not what he was charged for. He was charged for falsifying business records.
> needlessly complex

The optional Braid extension can _reduce_ complexity for offline-first apps, e.g. relative to WebDAV, https://news.ycombinator.com/item?id=40482610

You might be surprised at just how elegantly HTTP extends into a full-featured synchronization protocol. A key to this elegance is the Merge-Type: this is the abstraction that allows a single synchronization algorithm to merge across multiple data types.

As an application programmer, you will specify both the data types of your variables (e.g. int, string, bool) and also the merge-types (e.g. "this merges as a bank account balance, or a LWW unique ID, or a collaborative text field"). This is all the application programmer needs to specify. The rest of the synchronization algorithm gets automated by middleware libraries that the programmer can just use and rely upon, like his compiler, and web browser.

I'd encourage you to check out the Braid spec, and notice how much we can do with how little. This is because HTTP already has almost everything we need. Compare this with the WebDAV spec, for instance, which tries to define versioning on top of HTTP, and you'll see how monstrous the result becomes. Example here:

https://news.ycombinator.com/item?id=40481003
What does "national median" matter in terms of REMOTE jobs? In theory there should be one global market then, where only (hard and soft, of course) skills matter. But I know we're yet not quite there.
Ok, then it's aparently the intermediate representation (what the parser feeds to the evaluator), which makes sense. The evaluator doesn't care, whether it comes from the parser or from constructs-to-c generated code.

Concerning the use case, an SBCL based solution would likely perform much better, though the Scheme VM of Common Music (https://ccrma.stanford.edu/software/snd/snd/s7.html) is also purely interpreted.
Trial results for new lung cancer drug are 'off the charts'
Generic specialty lawyers can make $350/hour, so can generic specialty SWEs. Don’t sell yourself (or others) short.

Remote has nothing to do with it.
That is utter bullshit. European brands are aside from Japanese ones the best at quality control. Even the oldest Volkswagen in my family is still in use, even it is over 30 years old. I mean there were some series of BMW that were bad, but those days are gone for good.
Headlines can only be so long. Other outlets (e.g. The Guardian) left the Chinese out of the headline, and nearly all of them (and yourself) left out the Iranians.
Maybe it was required to get a divorce at all but otherwise it seems that he could have settled on something “fair” without needing to force himself into it.
Why isn't there an app business that automatically goes through the corporate time wasting obstacles to burn the corpo's money on support calls?
Hardly AI, just a simple Python function that implements the Flesch reading ease algorithm: https://github.com/standardebooks/tools/blob/effcf0f6db05729...
Virtualization Internals Part 1 – Intro to Virtualization
That's perfect now. Thank you!
Yes, being able to see all the traffic on a given network is a legitimate threat to Tor's anonymity.

IIRC There is an alternate method of connecting to an endpoint which uses a 3rd node as a rendezvous point which is meant to be better, but I forget the name of the process...
From BS jobs to more meaningful and useful (for society and other people) jobs.
We had essentially a computer club in middle school. The teacher introduced us to QBasic. Later in high school I took a programming course which was Java. I found the C64 at a flea market around the same time and found it much more interesting than the make-work java problems we were doing in school.
People in ex-USSR also speak/write Russian, so while I have no doubt Russians frequent the forum, lots of others from their sphere of influence also visit that forum. Don't assume everyone on HN is a 5-eyes resident.
Ok, thanks. I'll look into that. I hope that they don't require some specific abstruse format for the models!
If your current car tripled or quadrupled its mileage, would you also stop filling it up? Seems a silly idea to me as you never know when you're gonna want to go a little bit further than you normally do on a tank.

I drive so little that I only fill up about monthly and I could fill up weekly to 1/3rd tank to save a little bit of weight penalty, but that would be silly and a waste of all that gas station time when the gas in the tank does just fine for a month (a year might be different.)
Oh, OK. So the boys are relatively overconfident, so more of them fail, but the girls are relatively realistic, so fewer of them try. Then the boys continue being overconfident and get related jobs, but the girls mostly don't. (Or perhaps they just like stats better, there's lots of stats in biosciences.)
Not defending the unrepairability of Apple products, but if the laptop is this important to him that he can't be away from it for a day or two, then perhaps a backup laptop that can perform ~75% of his duties would be a better option. Or a cheap mac mini tucked away somewhere. I assume he has backups, unless everything truly does live on the laptop which is just playing with fire IMO.
I have another one for you. GraphQL should never be used as a way to "GET-modify-PUT" records, but often is, because why reinvent GET if you already have GraphQL? Because the query specifies the fields, so if new fields are added to existing types, existing clients don't receive them and PUT the record back without those fields. You now have to try to deal with this in the backend, with subtle and severe edge cases potentially affecting the backend and all of its clients.
Yes, you can transfer files via COM port in MS-DOS using COPY command, but errors may occur. :) Also you have to switch port to 8-bit binary mode and turn off flow control. Don't remember how to do that exactly. Default was 7 bit XON/XOFF, AFAIR.
Have you tried the challenge of feeding it MyHouse.WAD yet?
> Rep. Brad Sherman (D-Calif.), an accountant and senior member of the House Financial Services Committee, told Axios in April that he wants to go "way beyond Direct File," calling for a "self-populating form."
>
> "Why in the heck should you have to fill out your return when the government has all the information. They know what's on your W-2 form before you do. They know what's on your 1099 … Do you know how many mistakes people make?"

Yes. Please.

Now fix Workday, too.
This topic resonates with me, because I'm currently building a horrible marketing static page with images and videos that top 150MB, prior to optimization. It causes me psychic pain to think about pushing that over the wire to people that might have data caps. Not my call, though...
Picking up coins in all the parking lots in all the world could net you millions, but it's not worth it in the grand scheme of things.
You can also use my.handle@gmail.com which I use (with a filter to trash immediately) when I need to sign up for something with a high likelihood of spamming me.
Show HN: I built a free Micro SaaS Ideas Generator (backed by SEO data)
Not true at all for bio and medical science in particular. (yes biorxiv exists but it is not most papers)
Not to be confused with the other Orion App available on the Apple ecosystem: https://kagi.com/orion/
So where does Keeping Up Appearances' Hyacinth rank on the Sandra/Karen and Jackie scale?
I think Russian security services work fully legally under Russian legal framework.
And that will be the day Chrome dies.
There’s something missing here.

From what the Hudson Rock article shows, they were able to use an SE’s creds to access their demo account. This is not a customer account and shouldn’t (but of course could) contain sensitive info. It’s not clear to me how this snowballed into a larger breach.

Perhaps customers had granted this SE access to their accounts and the data within. Or perhaps there’s a deeper hack. But this isn’t clear to me from what I’ve read.
I really dig not having to flag down servers, to order, add to order, or pay. Being able to transact whenever you want is great. Food just shows up. When at a busy bar it's even better, no waiting in huge lines.

Ideally the menu also has photos on it. Many don't take the time or maybe Toast (which seems to be by far the main player) charges too much for the feature (but I suspect it's more about laziness). This makes them a big upgrade over paper menus, which can only fit so much.

Typical HN cynicism in the comments. No signs of being able to appreciate the nicer bits. It's not perfect, but it seems fine. I do want paper menus to be available, want other affordances around, and it has a nice qualia to it, but the practicality of the digitized experience is wonderful. And we should be tuning & enhancing it, rather than turning back.
Installed, thanks.
I record myself reading my hand written notes, then I just upload the mp3 of the recording to MS 365 to transcribe.

I put special stop words like highlight/return so then I can post process and ensure the markdown formatting looks good.
Those byds are really bad, just like the Xiaomi ones. They are falling apart and disturbing the public safety; one of the panels almost hit a passenger
B–1 and the first generative feature film
It seemed like the initial Direct File rollout was limited to states that didn't have a state-level income tax, or directly cooperated with the IRS. Are they forcing all states to play ball, or will Direct File not cover state tax submissions?