Hacker Newsnew | past | comments | ask | show | jobs | submit | jimbob45's commentslogin

His kids were probably watching him type over his shoulder and he didn’t want to hear, “Daddy, what does crap mean?”

"Daddy, what does cr*p mean?" Kids aren't stupid and this self-censorship isn't protecting anyone from anything.

(if a platform is serious about Bad Words for whatever reason (moral?) they would also forbid character replacements; ultimately it's the intent, not the word itself, that they try to steer with rules like that)


I'd consider that a joke - but also zero issue using any words talking in front of kids. You might wish to explain them anyways.

I am arguing that they would ask that anyway.

I guess I never understood censorship when it’s plainly obvious what you’re censoring. Anyone who can read will clearly know that it said “crap”, so I don’t see how it’s fundamentally different than just saying the word. You still put the word into my brain.


Why use mutexes (mutices?) over semaphores?

Aren't semaphores a more fundamental primitive that is trickier to get right? Otherwise, the mutex guards in Rust are very ergonomic.

Semaphores are more general for sure. The common semaphore is just a counter, when you lock it you decrement the counter by one atomically. Therefore a mutex is just a semaphore with a limit of 1. I wouldn't say they're much trickier to get right, maybe just less frequently applicable in e.g. general web io tasks.

I suspect the reason that semaphores aren't as common in Rust specifically is that once you go above one reference to something, you stop being able to mutate it safely. Mutexes work because "one thing writing to this means nothing else can read it" doesn't go against the borrow-checking grain, but as soon as you want to allow two references to something, you can't write to it safely, so it only works when you want to delay processing of non-shared data (which as you mention is not particularly common) or read-only processing (at which point you probably just want an RwLock to get shared read-only concurrent access).

Wait but...if you use an ATM, you're going to be hit by ATM (read: middleman) fees every single time. Also, you massively increase your risk of getting hit by identity theft via compromised ATM.

> you're going to be hit by ATM (read: middleman) fees every single time.

This is highly country specific. In many countries, (at least domestic) ATM withdrawals are still free.

> you massively increase your risk of getting hit by identity theft via compromised ATM.

What exactly does a compromised ATM do in terms of identity theft that a POS terminal can't do? Both can read your card, which today is not a big problem anymore, and certainly not yours or your bank's.


The problem with shoes is that there figuratively (and literally) is no one-size-fits-all. There are several elements of a shoe that can wreck your experience with it without you understanding why.

- Heel drop, as others have said, can destroy your Achilles if you go too low. Too high and you can exacerbate hip issues.

- Big feet? If your manufacturer doesn’t offer wide versions, you’re going to have a bad time. You still might if they only expand the upper without actually widening the lower (Nike pulls this shit).

- Running on weird, slick surfaces? Better hope you have strong grip and traction (they’re not all equal by any stretch)

- Running in a hot climate? Better hope for a breathable shoe or your blisters will wreck you.

- Need stability elements? Or a carbon plate? Better hope you bought a stability shoe! Also keep in mind that there is research that those things can wreck your foot health long-term.

- Ugh, I’m so confused, I’ll just get the most popular running shoe out there, the Nike Pegasus! Well, you might be in for a nasty surprise when you learn that it’s the only modern shoe that still contains literal airbags. Step on bark chips the wrong way and your shoe might pop!

And that’s all before you get started on colorways. The idea that shoes are all equally good for everyone is as outdated as the idea that you can swap two people’s Chipotle orders and no one will notice.


That’s great for martial artists where the new arts are objectively better and more robust against the wider array of attacks one must withstand today.

But software…? He’s declaring victory at virtually every level but the highest. Who honestly thinks JS should be cemented as permanent? X86/RISCV? CMake? It’s cool to abstract away the lower tiers when our tools are this powerful but it seems silly to leave this much performance, readability, and extensibility on the table forever.


Any proof of that? I’ve always found Yandex to be substandard but never for reasons of censorship.

there was a source code leak and you can see some examples there which make the president's image more alluring. e.g. if you search for "Putin" they add an invisible "-crab" to your query

that's the most innocent example from the top of my head. There probably are many more serious censorship issues


Yep, plenty, and tbf it's entirely logical. The people working at Yandex do not want find themselves dying of a nerve agent or polonium, which is a real and acute danger for people who displease the ruling regime.

https://hal.science/hal-03217497

https://euvsdisinfo.eu/yandex-from-tech-innovation-to-inform...

https://pmc.ncbi.nlm.nih.gov/articles/PMC10130930/

https://misinforeview.hks.harvard.edu/article/a-story-of-non...


If it's true just link to a first party example on the yandex site

You have to wait for the investigation to complete to receive compensation if you’re hit by fraud on a debit card. Credit cards don’t share that issue. If you’re poor or living paycheck-to-paycheck, debit cards are potentially a risk to your livelihood.

As someone who has been hit with fraud on a debit card and a credit card, the process to recover money from fraud on a credit card is so much easier and more hassle-free than a debit card.

The big difference is that with a debit card, it's your money that is hit by fraud. The debit card is basically just a proxy. You have to go file a police report. You have to hope the bank will give you the money back.

When the credit card gets hit, it's the credit card company's money and they will seemingly chase the fraud to the ends of the earth to recover it.


> The big difference is that with a debit card, it's your money that is hit by fraud.

I kind of disagree. I think what's happened is the bank would prefer you to believe that. Imagine I kept my money at the bank, and deposited $10000 with the teller. Immediately afterward a robber follows in and steals that $10000 from the teller. Does the bank say "oh no Mr. TheChao! A robber stole your $10000!". I mean, no? The bank got robbed. Just because the bank's digital security is more tied one-to-one to dollars and its easier for a robber to steal from "my till" doesn't mean it was me who was robbed. It's the bank's job to stop that.


But that's not what happened when someone steals your debit card number. Once the teller enters the deposit and you walk away from the window, the money in your account is yours, the cash the robbers stole is the banks.

When someone steals your debit card number and uses it, it's your money that is debited from your account, not the banks, and debit card transactions have much different rules than credit card transactions where you're generally not held responsible at all for fraudulent transactions)

But with debit card transactions, you can be responsible for up to $50 of fraudulent transactions reported within 2 days, and $500 for those reported within 60 days. And the bank is not required to return the money while they investigate the fraud.

Though many banks waive those liabilities and treat debit card disputes the same as credit card disputes (but still may not return your money while they investigate, so you could be bouncing checks when someone makes a $1000 fraudulent transaction if you can't float the $1000 yourself while they investigate)

I refused to allow the bank to issue me a debit/ATM card against my primary checking account, fortunately they are one of the few banks that still offer a dedicated ATM card so even if I lose the card, it's useless without the PIN.


This was also the subject of a brief sketch on That Mitchell and Webb Look:

> Bank official: Sit down Mr. Coleman, I'm, I'm afraid I've got bad news about your account.

> Mr. Coleman: Really?

> Bank official: I'm very sorry to say that someone's stolen your identity.

> Mr. Coleman: Oh God! Do you know who it was?

> Bank official: Well -- they said they were you, but uh--

> Mr. Coleman: Of course. So, um, what happened?

> Bank official: Well it was on the bank website, someone logged in, and committed identity theft electronically.

> Mr. Coleman: I see. Did they take anything else?

> Bank official: Uh, no.

> Mr. Coleman: Oh good, so all the money's still there...

> Bank official: What?

> Mr. Coleman: Well: it's just my identity that's gone -- none of your money?

> Bank official: Well no, they did -- they, they, emptied your account. It's identity theft, they took all the money.

> Mr. Coleman: That sounds more like a bank robbery.

[continued] -- see https://www.youtube.com/watch?v=CS9ptA3Ya9E for the full skit.

Just as a handy thing to chuckle over and then link others to, if the topic comes up again.


Eh when you deposit money with a teller, it gets added to your account, which is in physical terms probably just a big storage and a database who has how much.

But in the case of debit card, the card ties the money to your account. It is actually that.

It's as if someone would steal from a personal safe at the bank.


Except that you have strong statutory rights and commercial agreements between your bank and the card networks making it very likely that you’ll be made whole.

Eventually you'll probably be made whole (unless the bank isn't one of the ones that waives your $50/$500 liability). But usually they won't return your money until after they resolve the dispute so your account is still missing the disputed money which could make you bounce checks or be unable to use your debit card until the dispute is resolved.

> likely

> will

Which is why the credit card is still the better option. Especially given that the max liability on a credit card is always $50 if caught within the first 60 days, while the max liability on a debit card is $50 only if caught within the first two days, then up to $500 if reported after up to 60 days.

They may post a provisional credit when I report the fraud on the debit card or they can wait up to 10 days to do so. With a credit card, no money has left my account and I get the final say on whether I want to part ways with my real money. If the bank really wants to fuck me over by saying it's not fraud, I get to make it as unprofitable as possible for them, which includes forcing them to sue me if they really want the money.

I will take the ding to my credit report and a lawsuit over actual money taken directly out of my account any day.


> while the max liability on a debit card is $50 only if caught within the first two days

Within two days of learning of the fraudulent use or the loss of an "access device" (i.e. a card). Otherwise you have 60 days from the statement date as well.

> I will take the ding to my credit report and a lawsuit over actual money taken directly out of my account any day.

That's definitely true for many people, but probably not for many others, e.g. anyone wanting to buy a house or even rent an apartment.


If the money is taken out of your checking account and you can't pay a bill or rent, you are in the same exact situation of having your credit/rental history ruined. The time horizon for that happening is just sooner. The credit card still wins.

This depends heavily on the country you’re in. In the UK banks are required to refund you within a single business day if they don’t have any evidence that the customer isn’t trying to defraud the bank themselves.

They try to squirm out of that of course. But in general getting your money back isn’t too tricky even with a debit card.


Oh yeah. I should definitely caveat: I am in the US. I think banks here are required to cap your loss to $50 USD if you report unauthorized fraud within two business days. But still, the onus is on you. Meanwhile, virtually all credit cards in the US offer $0 liability protection. Which means at most you pay nothing.

2 business days is a lot more strict than credit cards, which at the very least would not blink an eye at 2 weeks.

Er what?

You don’t even pay for the fraudulent credit card transactions in the first place! There’s no money for them to return!


This is where you find out which banks suck, and which do not. I will say that while USAA is a long ways from perfect, when someone swiped my wife's debit card and took $5000 from our checking account, they put that money back within a day while the investigation was pending. No police report necessary, either.

I don’t thing Regulation E allows banks to require a police report before processing an unauthorized payment, nor can they outright refuse to do so.

Practically, Reg E is essentially as strong as Reg Z.


> Practically, Reg E is essentially as strong as Reg Z.

Not even practically, but that's beside the point. The point is that with regulation E, I am potentially put in a position where I have to work to get my money back; I have to file a lawsuit against the bank if I think their determination is wrong (and that's assuming there isn't an arbitration provision, but many people don't realize they agreed to binding arbitration).

With regulation Z, the bank has to work to get their money back. They have to file the lawsuit against me if they really want the money. And it's $0 liability under many circumstances mandated through the regulation, not just a revocable promise from the bank.


> With regulation Z, the bank has to work to get their money back.

Yes, but you potentially have to work to get your credit back.

> And it's $0 liability under many circumstances mandated through the regulation, not just a revocable promise from the bank.

Debit card liability is also largely mandated to be $0 under card scheme rules.


The underlying problem is that the whole concept of cards is insane. Basically, you go around telling every shopkeeper the code for your safe, and ask them to take however much cash you owe them out of the safe.

Sane ways to organize payments:

- Merchant gives you a bill-id. You input it into your bank website - where you see the bill amount being charged. You accept, and bank pays merchant.

- You give merchant your card number (that's the only information - no expiry, no ccv, no name). A notification pops up on your bank website asking if you want to pay what the merchant is requesting. You accept.

- You go to your bank website and obtain a random number, either allowing a single transaction or a recurring transaction. You give the merchant the number. After merchant charges it, no other merchant can charge the same number.


This would also solve a major annoyance I have with card payments, which is no way to link a particular purchase back to a transaction.

With checks, you write a check and can write down the check number with a note about what the payment was for. When the payment posts, the check number is part of the transaction. With a card payment, they charge your card and, sometimes days later, there's a pre-authorization with some obscure transaction description. So many scary transaction descriptions that make me think "wait is this fraud".

With this method, the approval flow would also allow people to add a blurb for what the transaction is for.


> You go to your bank website and obtain a random number, either allowing a single transaction or a recurring transaction. You give the merchant the number. After merchant charges it, no other merchant can charge the same number.

That's basically how Blik works in Poland. With the exception being that the number is random 6 digits randomly generated when you open the app, that is active for ~2 minutes. So you don't deal with the issue of very long and error prone numbers to copy.

Much better way to pay online.

https://en.wikipedia.org/wiki/Blik


Cards have supported strong, positive cardholder authentication at the POS (chip and PIN) and online (3DS) since the 90s.

It’s entirely the US credit card industry and its regulating bodies’ fault that it has made neither mandatory in the way that e.g. the EU did, and is in fact fighting any attempt to do so tooth and nail (please think of the conversion rate!!)


Can you guys still write a check at the supermarket checkout? No pin credit cards are small potatoes next to personal checks in terms of weirdness. But I wish we had that trust culture everywhere.

Which guys? :)

I haven't seen checks being used to pay for groceries in either the US or EU in the past few years, in any case.


Americans :). Glad it's not being used anymore.

I've always had fraudulent debit charges automatically reverted. Typically the bank's fraud detection disables the card and you clear up the matter on the phone. Or they call you to verify if a suspicious charge outside your profile was actually yours. The banks aren't required to do this but they can choose to provide this level of service.

the cc fraud (and fraud protection) is THE main selling point of Visa/MC credit cards.

it is that different treatment of debit/cc fraud that pushes people towards high fee cc.

it is cc fraud protection that justifies high cc processing fees.

without cc fraud there is no need in visa/mc duopoly.


I thought the main selling point was that they work almost anywhere. Whereas my EFTPOS card only works in Australia, my Girocard only works in Germany and my Pix account only works in Brazil.

Eh... I guess YMMV, at least for a low amount it took me literally an afternoon, I just froze my card, walked to the bank, explained the issue, and they refunded me on the spot (also switched out the card for a new one). They said technically it could be clawed back after investigation but they never did.

Weird take, credit card debt is much more of a risk to that demographic than debit cards ever will be

How could they possibly know? If Tristan posted on r/math and they slurped that up as training data, that would count, no? They might never even know. I can’t envision any absolute statement by them claiming that they didn’t use his work that survives legal rigor. That is, this statement was never not going to be in this post in any of the infinite multiverses.

This is private work that is being done with Codex. Not drafts shared on r/math. I suggest you reread the article.

This is more of an expectation of privacy issue. If you write on an envelope and USPS has a copy, you have no reason to be mad; if you write on a letter inside the envelope and USPS still has a copy, you could rightfully be mad and say this is disgusting.


What does it matter? They offered concurrent credit to the other team. I thought I saw sole credit elsewhere in the leaked DMs on Reddit too. This is plainly fair.

Consider the twist-and-tape method if no one has suggested it yet. It’s inarguably safer and good enough for NASA!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: