skysight-inc/HackerNews huggingface dataset:
then they aren't priceless if that is what people are willing to pay? Storage imposes a cost. it's the white elephant problem.
tl;dr

The most obvious way to generate all SSNs you can think of: brute force enumeration

the numbers alone are useless.
In 2019 Quillette claimed to have hard data that "Twitter Treats Conservatives More Harshly Than Liberals".[1]

Their data includes upstanding examples of Conservatism such as The American Nazi Party. I kid you not. There's a bunch of accounts in their set where you can have a reasonable discussion about where the limits should be, but tons of them are literal actual self-described Nazis. There's an overview at e.g. [2].

So yes, colour me sceptical on these types of claims.

[1]: https://quillette.com/2019/02/12/it-isnt-your-imagination-tw...

[2]: https://rationalwiki.org/wiki/Quillette#Banning_Neo-Nazis_is...
I've been using sharedrop.io which also is open-source [1] and it works quite nice, I particularly like this one because I don't have to install any third-party app on any of the devices.

I think on mac Safari usually doesn't work as well as in Chrome, but I've been able to transfer from Windows to iOS, Windows to macOS and macOS to iOS without installing a thing.

[1] https://github.com/szimek/sharedrop
> You see this most clearly in endpoint security, where "defense in depth" loaded everyone up with security and AV agents that were all riddled with memory corruption vulnerabilities

There's no way you can seriously argue AVs have caused remotely as much damage as they've mitigated or prevented. Especially not without any kind of citation to back it up.

> It has in cases prevented [...]

A lot of things go wrong "in cases". In cases, governments give poor recommendations. In cases, HN users give nonsensical opinions. In cases, police end up killing civilians instead of criminals. In cases, criminals go free because they refuse to testify against themselves. I could go on, but you could use this kind of argument to dismantle just about anything you don't like. Especially when you absolve yourself of the need to provide any kind of evidence of the relative harms.
And carried around.
The time between study and testing (retention interval) is the most salient factor for students. Repeating material at intervals attenuates the forgetting curve somewhat, but not enough to generate passing scores. Cumulative exams only force students to study all material in a massed study session prior to a final exam.

I say this as someone who works on education and as a lifelong learner who has tried many ways of improving retention.
But in terms of how our brain works, and why it evolved, it really is prediction.

Prediction allows us to behave according to what is about to happen (or what we want to happen) as opposed to just reacting to what is happening right now. "I predict the sabre-tooth is going to run towards me, so I better be prepared", is more adaptive than "Ouch! this fucker has big teeth!".

When we're driving (well) we're continually predicting what other drivers/pedestrians are going to do, what's the best lane to be in for next exit, etc, etc.
The problem is you can't simultaneously say "secure things via network access" AND "ensure everything has strong auth" -- invariably that collapses to the easier/cheaper of the two.

So the superior realpolitik approach is to mandate the latter and remain silent about the former.

Best case, they'll do both. Worst case, at least now they do the important one.
The initial QR code isn't a TOTP code, it contains the secret used to generate the TOTP codes.
I think it's a design mistake to allow single-shot weapons to fire as quickly as your input device allows.
This illegal collusion and wage suppression in our industry still occurs, it’s just kept better under wraps now as the executives have learned how to not write things down and use signal disappearing messages.
Yeah, I don't know who labelled a CDC 6500 a "supercomputer".

My first college course used a 6600, and there was nothing "super" about it, except the time you waited for your job to run.
> most common combo in terms of number of sites running it. Wordpress...

does that claim do anything for anyone? India is the most populated country on earth, so?
CachyOS has also put out a repository of packages compiled for zen4/5 [1], which I'm fairly sure Phoronix has shown an interest in doing an updated comparison against the current x86_64-v2/v3/v4/etc versions

[1] https://discuss.cachyos.org/t/zen-4-5-optimized-repository-t...
this is a good point. there really used to be two major items that were part of this asymmetric leverage. one of them, retirement plans, have started to disappear, and that's a good thing.

- as you mentioned health insurance (and to some extent life insurance, cheap when young, but not so cheap as you get older)

- retirement. this seems to be steadily changing to 401K type schemes. the 85 point (age + years of service = 85) pensions are solidly in the rear view mirror, and i for one, applaud that. you can take your 401K where-ever you want and decide for yourself what age and how much money you need.

but i have other problems with "universal" health care though; the VA has something like this and it's not better. must it be that way? maybe not, but is it likely be that way? yeah...

then you have the free-rider problem vs. basic human rights. i'd just be happy if everybody could purchase the same insurance at the same price employed or not if they wished to do so. it's not quite there yet, although i have received quotes from Kaiser in CA for equivalent individual policies are that are nearly the same price to what just my parole deduction portion is from $$big$$corp - not counting their ~40-50% portion. which implies, as usual, big companies are being not very efficient. billing is a disaster; why is my insurance charged $50,000 for something i can buy out-of-pocket for $5,000? patents and drug companies are a disaster; problem: drugs are too expensive - solution: give artificial monopolies...

so what we've done so far in this country manages is a half-measure that manages to be worse than what we had before and just as bad or worse than some ideal universal health care would be. i acknowledge that health care is a thorny problem, nothing seems to be a good answer and we're highly unlikely to be fixing it (by fix, i mean make it better, not just doing more stupid stuff).
PDFKit is awesome to use. Thanks!
Obviously this always depends on what code you compare it to. I don't think there can be much doubt that a well written performance oriented framework-free implementation is in practice always going to be faster than anything using virtual DOM, as one can update simply the parts that need updating without creating the virtual DOM in the first place.

If you assume programmers who don't know what they are doing it is a very different question. Some people will manage to make a train wreck both with and without a framework. But if we assume that there is a skill level where people will manage to make something useful with a framework, but not without it, or vice versa, then I really do not know which way it swings.
Excuse me, why is linking to something bad? Especially when it contains your own data?
Ambulances called to Amazon's UK warehouses 1,400 times in five years
This is a joke, though it might be indicative of the state of software that I totally believed a JavaScript file could exfiltrate the names and security numbers of everyone in the US from some central system.
Where I work we call it "minimum vacation", so you're required to take at least that number of days off, but you can request as much as you like over that.
I wish you were right, but you're not: https://www.thedailybeast.com/trump-praises-turkish-presiden..., https://edition.cnn.com/2019/11/13/politics/donald-trump-rec..., etc
> He would also say that Germany banning Nazi speech is censorship, for example.

Are you suggesting it is not? If you don't think it is censorship then how do you define censorship?
I think because a full proof covering existence and uniqueness will either be really long or require tools from outside the scope of the text. E.g. there's a somewhat concise proof using linear algebra which I'll partially reproduce below. (I like this proof because the equation is derived from first principles rather than starting with an ansatz.)

---

Let x_n be a sequence defined by the recurrence relation:

x_{n+1} = a * x_{n-1} + b * x_n

Observe that if we define a sequence of two-element vectors of successive elements:

[x_0] [x_1] [x_2]
[x_1], [x_2], [x_3], ...

then we can form the relation in terms of matrix/vector multiplication:

[x_1] = [[0 1]] [x_0]
[x_2] [[a b]] [x_1]

Let's name the sequence of vectors as y_n and call the matrix M:

y_1 = M * y_0

We can get the next term in the sequence with another multiplication:

y_2 = M * y_1
= M * (M * y_0)
= M^2 * y_0

By induction we have:

y_n = M^n * y_0

M has characteristic polynomial:

r^2 - br - a = 0

with roots:

r_1 = (b - c)/2
r_2 = (b + c)/2
c = √(b^2 + 4a)

Therefore we have by diagonalization:

y_n = S * [[r_1^n 0 ]] * S^(-1) * y_0
[[0 r_2^n]]

where S is the matrix of eigenvectors. From here, we can finish our existence and uniqueness proofs from the existence and uniqueness of the eigenvalues of M.
No, having some radiation indicating device is a lot better than not having one. It at least shows when it's safe to leave your basement for a short while or not.
Or maybe its just that china demands all of south china sea for itself up to the phillipine coast. Ah no that must be the fault of the USA too! /s

https://en.wikipedia.org/wiki/Timeline_of_the_South_China_Se...
> you wouldn't have liked the internet in 2000s. there were isis beheading videos to stumble upon randomly.

What are you trying to say? That this was somehow a good thing?

And you can say "you wouldn't have liked «something in the past», there was «something worse than today» going on!" on pretty much anything.
Build AI Actions for GPTs with Zapier and ChatGPT
Now they can even filter it via AI companies.
Space beer may taste better than Earth beer
Handling cash has its own significant cost, it's not a direct comparison to a low-fee digital payment.
Putin ally shows off Cybertruck equipped with machine gun, suggests Ukraine use
Yes, cheaper in the same store, but not usually compared to other stores that don’t have cash discounts.
No.

With 99% of my transactions I don’t care one bit about the ability to do chargebacks.

I just went grocery shopping. VISA was involved and took a few percent. Why??

I got my groceries. I’m not going to do a chargeback because the salad was bad.

Earlier, I bought something on Amazon. Again, VISA took a share. Why? In 15 years of shipping with Amazon they have always hinteres my returns.
>Not every transaction needs complex fraud detection or being able for the customer do to chargebacks.

Fraud is an industrial level enterprise. You absolutely need fraud detection if you're accepting payment that isn't cash.
Do you believe in being generalist or a specialist?
Thanks. I remember looking into this a while back and finding some of these limitations. Maybe it’s time to try again, as much as I’m not a fan of paying a subscription
People in Texas wanting tougher regulation of noise. Who would have thought?

Relevant Dust reference: [1]

[1] https://www.youtube.com/watch?v=EHjgJWYj4Pk
In machinery industry it’s absolutely the same situation as in article
> So, no, pigs are not resistant but more resistant than cattle and humans.

That's what I meant, sorry for the confusion. I didn't mean that they are 100% immune just that they are more resistant. Perhaps that's the difference between a medical "resistance" vs the colloquial meaning.

I would definitely not jump into drinking raw pig brain smoothies either way and won't advise anyone else to do it either.
Are you better than a language model at predicting the next word?
ALL CREDIT CARD PIN CODES IN THE WORLD LEAKED: https://pastebin.com/Nn2ZcdfC
Acrobat implements more features than say muddy I assume. So in terms of attack surface it would be riskier, But maybe they have more security analysts too..
looks around I use `htop`
Maybe it should be a non-profit endeavor, where the actual profit is a society of happy, lasting relationships.
TMTLA - Too many three letter acronyms.
Cash has a processing cost to business as well, sometimes more than card processing fees.

Not only do you have to pay to deposit, you have to store it, count it, secure it and transport it.
Confused about what point you're attempting to make here?

Political conflict with a trade partner obviously leads to reduced trade, no matter the parties involved. What part of that statement are you taking issue with?
There are only a billion numbers. Counting everyone who has already died since they were introduced, and all the "taxpayer id" numbers that are issued for people who don't have real SSNs, how long until we run out? Or are they already being re-used?
I forgot about what I hate about mongo, so I will rant here about it: its data model is close enough but different enough from json to be both annoying and dangerous.

The empty string is a valid json key but not a mongo document key.

Mongo uses $operator keys to serialize its datatypes to json but does not sanitise the result: which means that {"foo":100000000000000000} and {"foo":{"$longInteger":"100000000000000000"}} will have a collision with the json export format. (Even if you choose the fully explicit Canonical format as there is no $document operator to wrap ambiguous documents)

So if your plan is to dump json to mongo you should plan for that (also sometimes $operators are evaluated sometimes they are not, it depends on each method and the documentation does not tell you )

The official client (both csv and json) is unable to export a collection if a field is both a value field both an atomic value and an object, so a collection with two documents:
{a:1} and {a:{b:1}} will cause problems of you try to export it.

My colleagues have other issues with the json DSL and how most operators exist in 2-3 different forms with different syntax or how the syntax {$operator:{arg1:..., arg2:...}} is unintuitive but I actually sort of like it.
Yes, this is obviously a joke given that the first file starts with SSNs with prefix 000. That prefix is not used [1]. The only information listed here is what appears to be an enumeration of every possible SSN, without any other related fields.

[1] https://en.wikipedia.org/wiki/Social_Security_number#Structu...
This is like the renaming to JavaScript to ride the coattails of Java.

I suppose Spring is still a popular, widely known framework. Other than desired popularity, there's no resemblance and is antithetical. Anything I see associating with Spring, I would assume to be outdated and inefficient.
In addition to the things already mentioned, there are a few higher level things which I find helpful:

- http req counts vs total non-200-response count vs. 404-and-30x count.

- whatever asynchronous jobs your run, a graph of jobs started vs jobs finished will show you a rough resource utilization and highlight gross bottlenecks.
Sure, you could move out to rural nowhere, where housing costs next to nothing. Find some part time job, and live your life.

I'm from a place like that, and a bunch of my old classmates from HS have lived like that their entire adult lives working part time. They work 2-3-4 days a week.

Of course, you'll be sacrificing lots of materialistic things, but that's a given.
This assertion is commonly made but never backed up with data, because it’s fiction. Elon Musk even gave full access to various people to try to find something to back that up and they found no evidence of anything like the alleged censorship campaign. Even Matt Taibi was reduced to tricks like pointing to the Biden campaign reporting tweets and hoping his readers were credulous enough not to see that those tweets were non-consensual nudity.
Soldiers are people trained to go to war. They do not "represent" a
country; they go, kill other people or die. It's not olympics. They go
to an environment without rules. It's not a boxing match with a referee.
I made a little game/quiz where you try to guess the next word in a bunch of Hacker News comments and compete against various language models. I used llama2 to generate three alternative completions for each comment creating a multiple choice question. For the local language models that you are competing against, I consider them having picked the answer with the lowest total perplexity of prompt + answer. I am able to replicate this behavior with the OpenAI models by setting a logit_bias that limits the llm to pick only one of the allowed answers. I tried just giving the full multiple choice question as a prompt and having it pick an answer, but that led to really poor results. So I'm not able to compare with Claude or any online LLMs that don't have logit_bias.

I wouldn't call the quiz fun exactly. After playing with it a lot I think I've been able to consistently get above 50% of questions right. I have slowed down a lot answering each question, which I think LLMs have trouble doing.
Not only do I argue that, but it's a banal argument among security practitioners.
By that point, I think it's easier just to cut the tube open.
> you need a machine that can handle whatever link speeds you need

I would have expected the relay server only being used for initial handshake to punch through NAT, after which the transfer is P2P. Only in the case of some network restrictions the data really flows through the relay. How could they afford running the free relay otherwise?
Target AI infrastructure providers.

Ideally metered by perf-per-energy-per-time.

You'll tax out some low-value use cases, but that seems less concerning as long as the tax rates are kept modest (<10%).
Or just have a different idea about the time frame they think is relevant. Because /now could mean "where are they now" or "what are they doing right now" and both are interesting to different people.
There’s less actually. Each state has its own unique 3 digit prefix.
This comment ignores the facts of Chinese naval activities that many of their neighbors, including the Philippines, are wary of. You can say that US diplomacy is taking advantage of these facts in a way you don't like, but pretending the facts do not exist makes it necessary for people who do know them to ignore you.
> It's just statecraft and covert influence campaigns

I'm sure that has something to do with it, but such campaigns are catalyzed by china's military aggression in the south pacific. Morality is an afterthought.
The structure you are referring to is a Bayer Array. Algorithms that do the guessing are called debayering algorithms
Wow! Thanks for sharing.

So do you change your toothbrush every quarter?
> IOW, the negative aspects of at-will employment really don't have much impact on the average techie's life.

It would for me. It would be a constant worry, being jobless from one day to the next, how to pay the mortgage etc? I would find that a huge negative, even if it doesn't actually end up happening.

Also besides the notice period you're also entitled to a significant fee when you get fired (up to about a year's worth of salary depending on how long you worked for the company). Which is really reassuring especially for paying mortgage etc. I don't want to live on the edge of my seat all the time. And it's also something that stops me from moving to another job because I would have to start from zero and lose this protection. Which I don't mind, I don't like job-hopping anyway.

I really don't like the American mentality of high-risk, high-reward. I don't care much about money but I do care a lot about stability. But anyway I live in Europe and I'm happy with the way things are here. I do hate the neoliberals here that try to make europe like America (which mainly benefits the big corpos, not us).
You leave your credit card on the table at a coffee shop. A thief takes it and goes to the grocery store. You’re going to do a chargeback.
6 is so true
purchasing protection and fraud need to be a percent. And "necessary" isn't the correct term for prices, "can" is.
Was going to look into non-website code to see what shenanigans are they doing that are not compatible with "other browsers". As expected, someone already beat me to it and created a PR: https://github.com/AndreiBalan-dev/there-is-no-website/pull/...
It is like people saying Houston has no zoning, which is technically true, but they just use other mechanisms to restrict land use in the same manner, like deed covenants and parking minimums. https://www.houstonchronicle.com/news/houston-texas/article/...
A bare repo on a server, which I `got push` to and `git pull` from.
This particular nugget has been known for nearly 15 years.
Oh, but you are moving out of React. And svelto IMO is waaay friendlier and "sane" than "typical" react. Svelte reactive model (observables and computed) are very friendly and simple to use.
It’s the ultimate two sided marketplace and super hard to bootstrap.

But if you find a way to debit peoples bank account with 0 fees and 0 default risk and <5s latency, I believe you could potentially establish a reasonable super-low-fee payment provider and have a clear value proposition for merchants.

The problem is: Getting merchants and customers on board.

I’m personally super interested in this topic. If anyone what’s to chat about this: mail@konstantinschubert.com
What next, all the CVV/CVC numbers, validity dates? Maybe someone should list all the credit card numbers too...
U.S. Wealth Inequality [video]
Only on HN would someone figure out that this was a joke because of the implementation details of SSNs... lol
It's almost as if they're making their comments from a place where they are unable to read about these Chinese Navy military activities.
This is just one example that's come to light, as reported by Reuters:

https://archive.is/ZlCmK

Note:

> Unlike earlier psyop missions, which sought specific tactical advantage on the battlefield, the post-9/11 operations hoped to create broader change in public opinion across entire regions.

> ...

> Nevertheless, the Pentagon’s clandestine propaganda efforts are set to continue. In an unclassified strategy document last year, top Pentagon generals wrote that the U.S. military could undermine adversaries such as China and Russia using “disinformation spread across social media, false narratives disguised as news, and similar subversive activities [to] weaken societal trust by undermining the foundations of government.”
Right, that's exactly what I (GP) took it to mean. Maybe there is medical "resistance" term to mean 100% immunity from something, but I meant it in a pedestrian sense that pigs are considered _more_ resistant than say cows, when I thought they'd be about the same risk for both.
How does the threat model change when exposing grafana to the public? Apart from vulnerabilities in grafana itself? Perhaps hackers will be extra motivated to cause blips in those graphs? Exposing grafana publically is unusual, but I don't see an obvious error-mode.
Counter question: Why do you think another product is needed in this space?