skysight-inc/HackerNews huggingface dataset:
> Not every transaction needs complex fraud detection or being able for the customer do to chargebacks.

Well, not until you get hacked.

We might be happy with instant, no-undo transactions until our device gets hacked and our bank account with many thousands of dollars gets drained, through no fault of our own.

Then suddenly, complex fraud detection and transaction reversals seems like an awfully good idea.

Because the issue here isn't about chargebacks where you genuinely made the transaction but the business failed to deliver, and maybe you lose a couple hundred dollars. The issue here is about when you never authorized transactions at all, and you lose all your savings.
I swear a lot of wars get started by guys like Xi who after seizing power internally try to seize power externally and it often ends really really badly for the host country.

Seriously, the leader of Germany in the 1930's, Stalin, Putin, Saddam Hussein, now Xi. All seized power domestically and then couldn't help themselves when it came to neighboring countries.
It's a Tokyo based company, Sakana means fish in Japanese, and the icon of the company is a bunch of fish. What's up with the Danger AI Labs Hebrew translation in the tweet and article?
I'm starting to see electric delivery trucks.
TFA didn't address the one thing that, in my experience, has been the raison d'être (at least in my city) for large employers to generate lots of emergency medical calls.

SICK LEAVE POLICY

We get a ton of calls to certain call centers in our area while other large centers generate very few. When management isn't hawking over the patient, I ask them what the sick leave policy looks like. Generally, they can only take a limited number of sick days without triggering some kind of adverse metric that will impact their employment. These metrics can be measured in points, stars or some other arbitrary method to keep track excused vs. unexcused absences.

If you call out sick, that would score the highest in terms of adverse action record keeping. If you "go down" at work, you have more options and the metrics do not generally apply. You can also file a workers compensation claim which you can not generally do from home with a cold. Whether or not the claim is accepted by the insurance agency is another matter entirely. However, it is not a stretch to see why a bad sick leave policy would lead to employees figuring out ways to circumvent the policy without damaging their employment status.

These types of abuses, again in the states, are so prevalent that we joke about it at the station. The EMS system is abused from top-to-bottom and there is nothing to hold anyone accountable. It is simply going to break someday and that will be that. I can say that it seems the day when there are no ambulances available is drawing closer and closer... It already happens a few times a day in my city.
it also has a robust Lua scripting interface. I made a tool in Golang and Lua that allows Mpv to treat torrent files and magnet links as if they were http links. You can then stream a torrent directly.

People also don't realize that mpv not only has the ability to stream youtube videos but you can also search youtube on the CLI using mpv `mpv ytdl://ytsearch:query`

it can also play videos directly in the terminal using ascii, sixel or kitty image protocol (which is by far the highest quality)
And that becomes industrial, as someone takes 50 thousand cards, and then steals $20 from each. Then the next store takes another $20...

Fraud is already a big business, with the current security levels. With worse security? Fraud goes up some more.
> business owners are incentived to provide that info.

Business owners usually provide it on their door. I added opening hours to many places, and importantly I didn't have to add opening hours to many other because they already had them.

> For real time bus/rail status you need integrations to countless public transit systems.

For public transportation, I personally usually need to buy a ticket, which Google Maps doesn't provide. So I use the public transportation app of the country in question. For countries where public transportation are public, which usually implies an app, of course. Countries that have broken public transportation won't work the same, but anyway the public transportation is broken there :-).
The best advice IME is the old advice, 'when someone shows you who they are, believe them.' It applies to the organization.

If the receptionist and the person you meet are cold and disdainful, that's the culture. If they are compassionate and creative, that's the culture - that's the CEO, even.

Unless it's a special event, people are too busy, stressed, and weary to constantly conceal who they are, and they are usually not self-aware enough and too jaded to see themselves with any perspective. Even the professional con artists (which includes many business leaders these days) are obvious cons; even if you don't know the truth they hide, they are transparent about it - like someone playing Three Card Monte, you know they're a con and it's a trick, even if you can't figure out where the card is. Brazenness almost a point of pride for them, so believe them!

And you are doing it too; don't forget that. :)
That would further increase the need for a single standard.
> socialists at The Guardian

A _liberal_ paper, not a socialist one.

Always calling an ambulance when there's a medical problem may simply be a terrible policy that puts a strain on public resources for the benefit of reduced liability. Tesco may take an approach which is more measured and less of a drain on wider society. There's something up, regardless.
A fantastic mediaplayer, quite minimalistic and performant; it does what it's supposed to do!

Also has a fantastic commit where the author rants about locales: https://github.com/mpv-player/mpv/commit/1e70e82baa9193f6f02... worth a read for some chuckles.
Everything is identifiable if you hire an expert. Or if not, bingo! you have a new species.

In any case the main idea is not destroy the samples throwing it into a blender
Joining the praise in this thread. Extremely reliable, fast, versatile, plays anything.

What I haven't seen mentioned is that it has 1- or 2-key keyboard shortcuts for almost everything, down to adjusting audio/video delay, subtitle size and offset, etc etc.

Once you've had the experience of adjusting the video just how you like it in 5 seconds with a series of keypresses without having to pause or disrupt the playback, you'll never want to go back.
Great, now do scandals in the US. The Chinese internet was very interested in the Ohio train derailment, for example.
Tell HN: Immersive-translate plugin may expose you to XSS attacks
This post might not directly concern English-speaking users, but I know there are many users (at least many Chinese speaking users) browse Hacker News with immersive-translate plugin[1]. The plugin has https://news.ycombinator.com included in its default list of sites to translate.

I recently identified a potential XSS injection target. When users navigate to a specific piece of content using the plugin, malicious code could be executed by their browser. This allows the possibility of cookies being stolen or other malicious activities. I have reported in their issue tracker[2].

Example:

<button onmouseover=alert(123)><img src="/404" onerror=alert(789)>im a button<script>alert(456)</script></button>

If you translate the above content using immersive-translate, you’ll see a popup. Moving your mouse over the translated content could trigger another popup.

Suggestions:

- For Immersive-Translate users: Until this issue is fixed, I recommend disabling the default translation of Hacker News content and only translating content that has been manually reviewed.
- For Hacker News admins: To mitigate this risk, you might consider adding a `Content-Security-Policy` header in the server responses or including a `<meta http-equiv="Content-Security-Policy" content="xxx">` tag in the HTML `<head>` section.

[1]: https://immersivetranslate.com/

[2]: https://github.com/immersive-translate/immersive-translate/issues/2022
> If I provide false or misleading information, I understand that I might be subject to a fine, prison time, or both

Enter your password wrong and you're off to jail?
Would you trust five year olds the do the same? The AI would have to have some measure of self control, and an advanced knowledge of market economics.
But why would you use AI for that when it's inferior to the Flask docs and the VanillaJSX example code? I've written projects with ChatGPT in the driver's seat before, you end up spending more time debugging the AI than your software. For topics like history or math I would expressly argue that relying on AI as a study partner only makes you dumber. The way it represents code really isn't too far off either.

Again, it's your choice how to spend your time. I just cannot fathom the idea of learning from an LLM, a tool designed to expand on wrong answers and ignore the discrimination between fantasy and reality. It feels to me like this stems from a distrust in human-written literature, or at least a struggle to access it. Maybe this is what it feels like getting old.
Why even use spring when you have spring boot which lets you get up and running with an orm and automatic migrations under 100 loc?
rooftop delivery bays might become a thing
Schmidt has been on a public relations campaign for the last year or so. It's unclear why.
One impressive thing about Tetris is that more people than ever play it 40 years after the game was created.

Another amazing thing is that CTWC (Classic Tetris World Championship) [0] launched in 2010, and still runs, bringing new generation of players every year.

Even more impressive, in recent years those new generations of players found new creative ways to use the original NES gamepads (e.g. rolling) to get to levels that were previously unreachable to humans.

There’s great documentary about Tetris and CTWC: Ecstasy Of Order [1].

[0] https://en.wikipedia.org/wiki/Classic_Tetris_World_Champions...

[1] https://en.wikipedia.org/wiki/Ecstasy_of_Order:_The_Tetris_M...
This is just a test of how likely you are to generate the same word as the LLM. The LLM does not produce the "correct" next word as there are multiple correct words that fit grammatically and can be used to continue the sentence while maintaining context.

I don't see what this has to do with being "smarter" than anything. Example:

1. I see a business decision here.
Arm cores have licensing fees attached to them.
Arm is becoming ____

a) ether

b) a

c) the

d) more

But who's to say which is "correct"? Arm is becoming a household name. Arm is becoming the premier choice for new CPU architectures. Arm is becoming more valuable by the day. Any of b), c), or d) are equally good choices. What is there to be gained in divining which one the LLM would pick?
Same thing in Ukraine. And it's not because they face less fraud attempts, it's just their tech is years ahead of US.
Not yet. The "Dilation" protocol (which is about 80% implemented) is intended to support WebRTC as a transport layer. IIRC it requires a public server to tell you about your external IP address, but magic-wormhole already has a server that could play that role. Once a side learns its own address, it can send it to the peer (via the encrypted tunnel, through the relay server), and then the WebRTC hole-punching protocol tries to make connections to the peer's public address. When both sides do the same thing at the same time, sometimes you can get a direct connection through the NAT boxes.

We don't have that yet, but the two sides attempt direct connections first (to all the private addresses they can find, which will include a public address if they aren't behind NAT). They both wait a couple of seconds before trying the relay, and the first successful negotiation wins, so in most cases it will use a direct connection if at all possible.
This has been done with Zelle and people are crying because they're dumb enough to fall victim to obvious scams.
Doesnt matter how hard ya beat ya dog. If ya dont feed it, itll come home.
It is. Macbook are very common in enterprises, as well as iphones (for the mdm features)
It’s actually worse than that. Given the opportunity to escape, I’m sure many would pay to to allowed to do so.

Entering multi factor hell just to get into Teams is something I’d happily pay to avoid.
Nice work. Would love a similar repository for Google cloud’s equivalent services!

Or a PR on this that accomplishes the same, as @clemlesne mentioned.
Thanks a lot! A text such as this one would have been great to find somewhere relevant when looking for a bit of technical information about whether the image processing pipeline will be the same or not when taking photos or videos. With this message you've probably driven me towards finally investing the time to try GrapheneOS :)
Because you don't want someone that steals your credentials to spend large amounts of money in things they ship to themselves, instead of to you!
Links to Bryan Lunduke are commonly themselves flagged here on HN.
Screenshots to prove: https://imgur.com/a/vaKVo52
> I made a tool in Golang and Lua that allows Mpv to treat torrent files and magnet links as if they were http links. You can then stream a torrent directly.

Increíble. Consider putting this up somewhere folks can find it.-

> it can also play videos directly in the terminal using ascii

Beats Star Wars over telnet :)
I am not American, so I don't know the rules of ssn. However, can someone calculate what are the chances I guess a valid ssn, if I know all the ssn rules?
The LLM didn’t generate the next word. Hacker News commenters did. You can see the source of the comment on the results screen.
It hasn't been free since 1993.
Nice advice about the CSP, but ultimately the issue is with the browser add-on?
Visa and Mastercard both have net profit margins of around 50%. So unless you think they’re taking on vast commercial risk, which I don’t, then there’s no reason we should be paying so much in fees.
You've pointed out what the US is doing. That's good, but you're clearly biased, so let me tell you two things that China is doing that is contributing for that instability you've mentioned: claims in the south china sea that no country would accept if it was done to them and a major naval build up.

You need two to tango and both the US and China are dancing right now. Anyone only blaming one side need to stop for a second, take their US or China tinted glasses, and look again at the problem.
This is a great addition next to my race car VHS rewinder.
Point 4 seems to have been made by you, not the article.
> Google Authenticator did not transfer to the new phone properly.

This seems to be my normal experience with a new phone for MFA apps. I’m doing something wrong.
That and setting up email are so dreaded that I hold off updating.
Think I used Hatchet for a book report every year from like 3rd to 7th grade.
> EDIT: I see the general problem of origination fraud. But that can be mitigated by imposing limits and requiring extra levels of authentication for bigger payments.

Which are exactly the kinds of things credit cards do, but it can't be perfect so they still suffer losses, so they still have to charge a percentage.

(Of course a lot of the percentage can go to rewards programs, so we're talking about the percentage once those are accounted for.)
I don't know that much about ring modulation, but having read a bit about it, I think I love at least most of the uses of it I know. The guitar solo in Paranoid Android is one of my favorites in any record. But I love pretty much everything Jonny Greenwood has ever done.
Libskibidi: Two Minute Papers for Gen Alpha
Spring sucks. Decorator magic non-debuggable garbage that chokes under performance limits with inscrutable error message misattributing overflows with the location it overflowed at.

Wouldn’t touch this project with a ten foot pole despite it not matching spring in any meaningful sense.
What is that SNL sketch? The famous "Point, Counter-Point" 1979 sketch starring Dan Aykroyd and Jane Curtin. The one where Dan Aykroyd says the phrase, "Jane, you ignorant slut."

I actually burst out laughing when I got to this part.

These people need a serious talking-to. It's clear they have no idea what the sketch was about, and that it was actually deeply and brilliantly anti-sexist to its core. Let alone the of climate of the time, or how their reaction might be received by the great Jane Curtin.

There's also this concept of "irony", but that may a bit too far out for them at this point.
I just read this out in your voice
Offtopic: vlc too
It is lost to git if you delete the branch...
Previous thread (3 up, no comment):

https://news.ycombinator.com/item?id=41277593

// nevermind, I screwed up

I meant https://news.ycombinator.com/item?id=41237670

but also didn't want to complain about anything
Or I could just do nothing, it's worked so far. When someone inevitably steals my ID, just use the Shaggy Defense, "It wasn't me"
> Oh and the English island never had an s sound, but is spelled like that because of confusion with isle

So the German cognate (I assume) Eiland probably hasn't had one either. Makes sense, since the Nordic Eya / Øy / Ö never felt like they should, and they must be just northern variants that lack the -land (literally the same in English) suffix.
Yeah Home Depot is a bizarre exception, AFAIK they signed a contract with PayPal at some point long ago that prevents them from accepting tap-to-pay. Their checkouts have all the hardware for tap-to-pay, but contractually they can't turn it on.

Hopefully that contract ends soon, because wow did they shoot themselves in the foot on that one.
Mox: Modern, secure, all-in-one mailserver
At least 3 of those companies came into existence in relative recent history. If you think you have something to offer, then do it.
Yes. The issue is caused by the browser add-on. Before they get it fixed, I think it's better to notify HN users who use it.

They said in previous posts that they are using `DOMPurify` to sanitize the code, but it turns out that it did not work well.
I can't see the gov actually ever making identity fraud the banks problem. The best we can hope for is gov identity that's not ssn and we just move on
You scored 6/15. The best language model, gpt-4o, scored 6/15. The unigram model, which just picks the most common word without reading the prompt, scored 2/15.

Keep in mind that you took 204 seconds to answer the questions, whereas the slowest language model was llama-3-8b taking only 10 seconds!
ElementaryOS developers seem to use it.
Related:

Magic Wormhole: Get things from one computer to another, safely - https://news.ycombinator.com/item?id=27262193 - May 2021 (178 comments)
If the systems are local to a specific country, they could reasonably skip the idea of chargebacks and just rely on the legal system to resolve any disputes?
If this had been around 20 years ago, I suspect hosting your own mailserver wouldn't have fallen out of vogue.
> For some more exotic testing, I was able to run my own magic wormhole relay[1], which let me tweak some things for faster/more reliable huge file copies.

The lack of improvement in these tools is pretty devastating. There was a flurry of activity around PAKEs like 6 years ago now, but we're still missing:

* reliable hole punching so you don't need a slow relay server

* multiple simultaneous TCP streams (or a carefully designed UDP protocol) to get large amounts of data through long fat pipes quickly

Last time I tried using a Wormhole to transmit a large amount of data, I was limited to 20 MB/sec thanks to the bandwidth-delay product. I ended up using plain old http, with aria2c and multiple streams I maxed out a 1 Gbps line.

IMO there's no reason why PAKE tools shouldn't have completely displaced over-complicated stuff like Globus (proprietary) for long distance transfer of huge data, but here we are stuck in the past.
Interesting! Some powerful players think it's both cheating on grid maintenance costs, and stealing capacity from the grid (to the detriment of all other users), if Amazon's DC is directly connected to the electric power plant next door to it.

SO - if I sent a shipping container of stuff from NYC to Boston via rubber-on-the-road truck - no ports nor ships involved - am I cheating on maritime infrastructure maintenance costs?

OR - if I have high-demand skills, and accept a full-time job offer from XYZ Corp, can other potential employers sue me, on the basis that they are harmed by my removing myself from the job market?

(Yeah, I know it ain't quite that simple. But either the IEEE has gotten too friendly with the parties to Amazon's deal, or the folks on the other side are doing a crap job of picking their battles and articulating their positions.)
I think this is a good joke on nay-sayers. But if author is here, I would like a clarification if user is picking the next token or the next word? Cause if it is the latter, I think this test is invalid.
Linus Torvalds’ git is the perfect case in point: wonderful data structure wrapped with adequate tooling.
Lol

If you have an unprotected vector fraudsters will find and exploit it. They're literally paid to do so.

I've seen fraudsters that are ridiculously persistent to make $2,000 in a year. But they just keep poking at it at a certain point you're able to ramp that up to $80,000 in a month I know they're good it was completely worth it to him for several years.

How I've seen people spend hundreds of hours to generate a few hundred dollars worth of in-game currency or on-site reward points.
I once had Wolfgang Pauli's cousin use my checkstand at the grocery store. I noticed his last name because he wrote a check. When I asked if was "Pauli like the exclusion principle?" he got very excited and hung around for an hour just to chat.

I don't miss checks, but that was pretty cool.
You also have to “buy” change. Banks don’t give bulk change that a cash business needs for free. You have to purchase standard denominations to give as change
What product are you envisioning that Apple doesn't offer? Rackable compute? Not worth their time.

Look at the products they make. They try to make stuff that targets the widest market possible; everybody. They try not to go for niche markets.
This is one of those amazing single feature utilities that does one thing incredibly well and goes completely unnoticed as it’s so good but also unremarkable. I should try to be more grateful for these brilliant creations.
Anyone who believes that the government is on their side needs to have their head examined.