jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
I am not a security professional now, but I kind of used to be (at least one aspect of it). I'll take a run at giving answers. Caveat with these answers is that it assumes security > usability > cost, and the budget is high enough to afford the answer implementations. It also assumes the organization is extremely paranoid and security-conscious, both good things in this area. None of this information is Classified or FOUO. All of it is pulled from publicly available best practices, or my own thoughts.

1. Computer stations use two types of fingerprinting at all times, facial recognition and typing biometrics. Also, login to the system requires password or pin entered after a card is inserted, followed by a fingerprint authentication, followed by the password of the day. Critical software/data must be accessed at an air-gapped machine inside a Faraday cage.

2. Employees only access based on what they need for their job that week, access controls are fine grained, employee access is logged, and that log goes via data diode to an otherwise air-gapped computer inside a Faraday cage.

3. Users can't download and install. Only trusted professionals can, and then only after the software is vigorously tested and approved.

4. Hot site goes fully active, personnel are immediately transitioned there, and a root cause analysis is performed to figure out just who screwed the pooch to allow the server room to burn. Repairs are made as quickly as possible by vetted personnel, then checked for security by different employees, and then checked by a third team.

5. Physically disassemble the computer to the point where you can unsolder the USB ports (some come with support on board for USB ports but none in the case, enterprising bad actors could open the case and install their own USB port). Also, have anti-tamper cases with anti-tampering turned on after that. Have OS protections preventing media not whitelisted.

6. Step 1: Phone home and wipe procedure on drive activates if the computer boots up and authorized use does not log in with X minutes. Disk has full disk encryption and is reencrypted with new password each month. Step 2:Fire the CEO unless they were mugged, or a K&R family situation.

The above steps are extremely expensive though, and only very large organizations will be able to afford them. For startups, I have no idea..some of them are implementable, but most aren't. Also, you have to accept that 5m-10m of every hour is taken up by security measures.

None of the above prevents a computer that a bad actor has physical access to being compromised, but it makes it hard enough that generally it's only going to be state-level actors that will take the trouble, and you'll likely know it's happened so you can take steps.
Honestly, I upvote pretty much anything that meets the bar of "this looks vaguely interesting and might be something I'll want to read one day." That is, I use upvote more as a way of bookmarking things, than as any kind of endorsement or sign that I think anybody else should be interested in the content.

Yes, I know there is a "favorite" feature, but using that requires one extra click, so...
Even higher this morning. Up to ~ $6000/MWh or $6/kWh. http://www.ercot.com/content/cdr/contours/rtmLmp.html
Who knows more about investing, the editors at Webster’s or Warren Buffett?
1. Sharpie marker attached to my keyring, can’t keep count of how many times this came in handy (Marker, Ready-to-Edit)

2. Espresso + Emacs: former for fast HTML/CSS prototyping, latter for fast prototyping of everything else

3. Wacom tablet when I don’t use the keyboard a lot. Faster and more accurate for me compared to a mouse.

4. KeyRemap4Macbook: rebinding the keys I don’t use often to something more useful (caps lock to control, right command to escape, etc.)
I disagree on that plant based plastics, and you are missing my point. My point on petroleum was just to say I derive some of my lively hood from commodity markets based on trading Crude, NGLS, Ethanol, and some other things like metals, coal, etc. Even though this is the case, I still am a huge proponent for solar! However, we need to focus on a systematic cheapening of solar output per dollar for mainstream use, not clear solar panels that don't even make use of the most powerful spectrum of light.(even so I am still mostly in favor of this research)

Which brings me to my second point and why I disagree on plant based plastics. Oil is way cheaper to make plastics with than any other organic element. Further when you devote arable land to something other than food there is always going to be market pressure that will drive up food prices. I have enough experience in commodity markets to know that ethanol is a losing proposition right now. If we stop making oil based plastics we are going to run into the same issues with unnatural subsidies propping up the market. I do wish that we could just stop pulling oil out of the ground and use our plant waste to make all the plastic we currently use, but it just isn't the case. Attitudes and consumption per capita would need to go WAY down for this to work out.
You're reading too much into the article than is there. The father in the article mentioned speech therapy, therapists and lots of doctors. It's clear that he is doing what he can to help his daughter, this particular article just wasn't about that part.

This article was about self-acceptance, about accepting something about yourself and your family that you didn't choose. That doesn't mean that he ignores it, or doesn't work to change his daughter's behavior. Acceptance doesn't require you do nothing. Acceptance can help see all the ways the disorder is impacting things more clearly, and that can lead to more effective interventions.

(Side note- I do absolutely agree with you on the current trend of explaining away mental disorders as gifts, 'differences' to be tolerated, or evolutionary trends that don't make sense anymore. No, autism\ADHD\ect are not a gift. Serious disorders that affect all aspects of your life are not something to celebrate or ignore.)
> Wouldn't any process running as root on the computer be able to re-flash the router?

No, because router's management interface is only available out-of-band. This is a conscious design decision to mitigate against this threat: "In order to protect the PORTAL from tampering from malware (or malicious users), it also requires a third administration interface. This can be either a serial console, or physical connection."[0]

---

[0] http://grugq.github.io/blog/2013/10/05/thru-a-portal-darkly/
Did you actually watch the whole video? The entire point of that video was that input channels (senses) can be repurposed to completely different uses, and the the brain's processing functions are generally undifferentiated. I suppose in the most pedantic sense it is the "same" sense, but when someone starts "feeling" the stock market or "feeling" a factory, it rather strains the language to say they are just "touching" it, or whatever. And certainly someday there will be processes that take an existing brain and grow a new input channel for a direct feed into our blobs of undifferentiated processing function.
Not if you powered the ship with a laser from a solar system, or pick up fuel along the way.
I really like Rust so far. I have no idea how to create anything useful with it, since every library seems to be in flux right now, but the way the language has stabilized, it's....nice!

This feels like a modern language, it feels like you can be productive, it feels it might be huge.

It's got an uphill battle though, and it's definitely more chaotic than a language like Go, which has had pretty good API/lib stability for years now, even if it's technically a weaker language.

Will be interesting to see how things progress.
Looks like standard security patches for libraries needed by Tails, not security holes in Tails itself.
To be fair the last two years were not kind to ride sharing.
Ah, of course - makes sense. Totally obvious in hindsight. Thank you!
I'd still like Prism to live on...it allows the user to turn any website into an application.
I 'm happy for you ars technica and imma let you finish, but there are much more serious issues that facebook refuses to address. For example, look at this older post about how facebook irrationally banned adsense from their apps and refuses to respond to developers' complaints for more than 2 months now:

http://news.ycombinator.com/item?id=2291336
Better time would be spent ensuring that out-of-date data doesn't get replicated.
"Faithful reproduction" is not a goal of Bose kit. A psychoacoustically pleasing reproduction with fine detail, by simulating the effects of a better acoustic environment in a room of a house is.

I have a pair of Bose speakers. They cost me $100. I wouldn't use them for pro work, but I don't feel ripped off by them because when I put my TV out or music through them, they deliver on the ads' promise of "room-filling sound".
Any particular reason you didn't go for http://www.getreward.ly?

just curious!
That makes sense. I wonder if something like the free realm transfers in World of Warcraft would make sense. Maybe the AZ mapping randomization keeps things balanced but encouraging multi-az deployments seems like a good idea.
The recent Amazon outage, in which actual data was lost, would seem to make a case for NOT using this.
Yeah, I'm doing that. :)

I've got this pure functional language and rather than deal with impure IO I just assume a git repo as a data oracle and then file and string operations are all nice and pure!

Instead of regular IO you operate on 3-tuples of (hash, offset, length) where the hash is the git hash of a data blob, and offset and length specify a subset of the bytes in it.

Conceptually these 3-tuples represent lists of ints but the runtime is free to do whatever is most efficient in terms of representing and processing them "under the hood".
"when a simple date-picker would do?"

I guess it would depend on the context. Some people might find it handy in an Alexa type device.

But yeah it makes no sense on a phone or PC.
> but in regular drive, the lack of hard shift is really pleasant.

I sometimes drive an US-designed car with, I assume, an US-designed automatic transmission (traditional planetary sets + torque converter) and I was actually surprised it doesn't shift very smoothly, worse than a good driver on a manual and much worse than dual-clutch transmissions. With the latter it's pretty much impossible to tell when it is shifting if you cannot hear the motor rev.

(When you switch that car to 4L... oh dear, every shift feels like a learner driver learning to shift with the entire car jerking around. Everyone nods in approval!)
Youre really missing the point here.

This zip file is an executable webserver, you just add files to it and it will serve them when you run it.

If you can't understand what is cool about that maybe just don't speak.
> This portfolio was made when I was young and stupid.

Chances are you're still young if you have crypto.
I'm not sure it's fair to say that I'm gatekeeping what people read. It's more about the spirit behind the reading.

Anyway, if it's gatekeeping to suggest that people should pursue personal growth through their own authentic interests rather than reading as a chore to be "more efficient", then call me president of the gatekeeping club for all I care.
This can be actually somewhat cool.

Like bringing the Fry's experience to the Digital realm.

Can bring multiple most wanted items that people can shop or like a great shopping experience or even just a good browsing experience.

It can become an experience that brings back all our old memories w Fry's. <3
You can find me on Gab!
No. I spent enough time wearing the journalism hat today. I really have to get back to my actual job.

Tell me if you find anything
You may be interested in Turing's Cathedral: The Origins of the Digital Universe, by George Dyson. Some additional discussion which you may find relevant is also available at https://news.ycombinator.com/item?id=6979671.
My pet theory (which complements yours) is that it was, before the invention of writing, part of the mnemonic techniques used to perpetuate vital information. Other worthy mentions are story-telling/acting, poetry (rhyme and meter) and painting.

Being innately predisposed to like these disciplines makes one more likely to practice them, become good at them, and help propagate useful info undamaged, thus rising the group's survival abilities.

They were vital for so long (compared to the few millennia since we invented writing) that we still have the taste baked in, even though writing, then the press then computers and photographs took over those roles.

Rhymes and meter are the CRC32 check of prehistory.
> You’re completely deluded into believing that genius is overrated.

...

> Shame on you and your ilk for suggesting Descartes, Newton, Kant etc. were just there picking low hanging fruit. They were doing work no one had the courage to do.

There's a lot of passion in your comment, but it's also really antagonistic. The person you replied to was very respectful and cogent in expressing their point of view; you abandoned that civility quite quickly - and for what?

If you're as well read as your references imply, surely you can appreciate an argument which casts aspersion on the "lone hero" ideation of historical progress.
It's not straight forward. Someone has to be involved in the process of validating that decision and then we get these kind of clowns - https://www.telegraph.co.uk/news/health/news/4215059/Dignita...
I've had a couple people review my resume but they were all non-technical. That's a good suggestion.

In the two technical interviews I failed, one was an algo question that I bombed. I choked and everyone understood it was no-go. The other was a practical coding exercise that I failed but I didn't get any feedback. I can guess why but I'm not sure what was expected. I don't think anyone could have done the exercise perfectly in the time given, so I went with one set of trade-offs. Maybe I'm wrong and I'm just too slow, or maybe I chose the wrong trade-offs.
Agreed. I think this thought was the starting point of the http://cascalog.org/ project (a high level clojure frontend for Hadoop MapReduce).
Minor quibble:

Snipers and long range target shooters establish a baseline zero and then adjust their sights off of that based on variables like the wind. As the author correctly notes they learn how to make those adjustments by missing.

They learn how to make their bodies perform both by missing and by practicing a lot; a large fraction of those "5,000 shots in training" will be something better than "misses" if they're going to be successful in the field or competition.

Lesson for this domain:

Learning how to do some things reliably on demand is also a part of being generally successful (it's at least one foundation) and for almost all that takes plenty of practice.
Yeah, no passphrase, just a hard to explain set of weird looking DNS entries to confuse the heck out of non-technical people with. The point of having no passworwd is to make it simpler. You might as well go back to using a password instead of using SPF.
My sister is an accountant specializing in audits and forensic accounting. I've talked to her about this extensively. Any portion of the tax code that mentions "reasonableness" is indeed open to interpretation. The interpretation of this code is (much like criminal law), based on judicial rulings; case law. In the case of a "reasonable salary", the following stipulations apply:

* The IRS will not force your corporation in to an unprofitable scenario as a result of the salary requirement; i.e., if your corporation is yielding a net loss, they will not force you to take salary, but then again, your tax issue is already solved if you have a NOL

* The reasonable salary clause is targeted and applied specifically to S-corp operators who take a disproportionately large amount of their income in the form of a distribution, rather than salary

There is potential for abuse with the existing tax code, but the reasonable salary requirement was created specifically to address that. Enforcement of this clause isn't intended to be applied in the context of market salaries (which is how we usually think of them), but in the context of the ratio of salary to distributions.
For practical purposes what does it matter? He is basically saying if humans cannot comprehend something like the fifth dimension then we couldn't build an AI that could either. So what.

I do believe humans could build a fusion reactor so a computer with expert level knowledge in all areas related to fusion reactors could build one thousands of times faster that it would take a human to do. So anything you think a human could do a high-level AI could do dramatically faster. So even if the AI could never construct something smarter than itself, it could make something faster, and in turn that AI could make one even faster. That is the singularity.
>The only problem is: he now provides literally no value. He’s excluded by fiat the possibility of ever being useful in any way. He could be losslessly replaced by a rock with the words “THERE ARE NO ROBBERS” on it

except for the value of having a security guard visible so that 99% of the robbers who might conceivably want to rob a Pillow Mart decide to go rob Quilting Heaven down the road instead.
Because they transitioned to paid inclusion so the prices and objectivity of the results are not as reliable.
It's certainly good that SpaceX uses many ways to test hardware, including those approaches successfully used before. During development of F-1 some interesting debugging techniques were invented, some could be well applied in SpaceX.

Gas generator cycle in general doesn't allow reaching effective Isp as high as closed loop cycle. On the other hand, smaller pressure reduces stress and generally considered safer. NK-15 were single use engines, but NK-33 and most other modern engines are all reusable.
"Well, we tried with blind faith for a while. Turns out that didn't work all too well.

So, how do you propose we control something that we are not allowed to know anything about?"

Agreed, with the first sentence at least. Let's be real though; no incarnation of oversight is going to have you and I involved directly, nor should it. You cannot expect the populous to be sufficiently educated on the intricacies of foreign policy and global threats.

So my proposal would be for the lawmakers to propose a better form of oversight which includes strict provisions for surveillance, especially the domestic variety. These provisions also cannot hamstring the NSA or the like; there has to be balance.

The parent comes off as a proponent of opening up the floodgates. That's ridiculous and it will never happen (nor should it). You cannot have a system which A) allows for full disclosure, and B) does not weaken our ability to defend ourselves.
I believe you would have to pay property taxes on these houses.
Bex (http://www.bex.io/).
The article describes how to start an operating system, not how to write it. The article even states this at the end:

"Now, your job would be to develop your little kernel in the system.asm file.
Personally I'm a fan of Persona for this sort of thing - circumvents the issue nicely.
"Most people who quote Einstein’s declaration that “God does not play dice” seem not to realize that
a dice-playing God would be an /improvement/ over the actual situation." (5.1)
I wonder how much language popularity is affected by this effect.

We Lisp/FP fans crow about how easy and quick dev in more expressive languages is, but to a clueless manager that's potentially exactly the problem. If it doesn't look like work, then the manager is apt to wonder what they're paying you for.

Whereas JavaEE ...
Can you send a mail to pierre@openfoodfacts.org so that I can invite you to the OpenFoodFacts slack.
Barcodes are indeed a tedious issue.
I'm a bit confused what benefits buses have at that point - you would need to dig a dedicated subway tunnel (and maybe spend additional to widen the tunnel so that buses can navigate it more easily) so you're out all the construction costs - you're just using a vehicle that has the ability (which you've now restricted) to more freely change routes... one that probably suffers higher maintenance costs over subway cars... and one that might be more difficult to electrify.

I think running buses in subway tunnels is just someone's creative idea to attempt to sabotage having reliable mass transit so that ridership doesn't get too high and they can argue that the whole program should be cut a few years down the line.
Could you be kindly offer pointers to the aforementioned archives+fan websites, please?
that's interesting. I wonder if the stimulus of a day at work with people and interactions and pressure and more could make something more meaningful come out.

Sort of like a little external entropy added to the random number generator.
I have no issue with lossy compression; but things like 4:2:0 aren't really typical lossy compression. It's like calling resizing an image to half its resolution "compression".

Also lossless compression can reduce plenty of "wasted" bits already (see: png vs bmp).
I say it's not completely open-source mainly because it's not free and people usually expect open-source to equal free.

Once you purchase it you get full access to the original server-side code (PHP, MySQL).

For the client-side part you only get the bundled JS/HTML/CSS (the original client-side source code is TypeScript, React), mostly because otherwise I would have to provide all the build tools and document better the code, tooling, building, releasing, etc.
I wouldn’t consider PA / Pittsburgh Midwestern anyway.
Also, Ruby lets you call private/protected methods with Object#send.
I don't agree with your conclusion - and I say this as someone who has fully accepted the ideas that human existence is a random occurrence due to the recursive emergence of complexity, that life has no intrinsic purpose and that we are on our own, so to speak.

Even imagining consciousness as an emergent property of simple brain functions doesn't fully explain it; the particular experience of various qualia, the sensation of being...these are hard to quantify.
I'd be very curious to see actual statistics around that. This is a belief that is highly subject to selection bias.

I myself don't like the Bay Area for my own perception of the lack of diversity there, but again I would not be surprised if that is my bias showing through.

(and for instance I live in a neighborhood that has a history of multi-ethnic families that goes back to before that was socially acceptable nearly anywhere else in America)
9 acres can distribute quite a few scattershot engineers.
The GM pivot in 2008 would be hilarious.

Disclosure: I work for GM.
What an awesome quote and customer validation;

"I said, 'I'm sending you some carrots to see what you
think.' Next day they called and said, 'We only want
those.'"

Also this tail quote from the inventor of the baby carrot;

'When you've done something you're proud of and it's
been acknowledged, it's a dream come true.'"

Kudos to the carrot hacker of our times. Now I'm feeling hungry for some orange crunchy.
The debate isn't whether or not collaborative work is highly beneficial. It is highly beneficial. Crucial, even.

The debate is about whether or not we want to force employees to exclusively in a collaborative way, with no reliable option for quiet solo work -- as many of these "open office" workplaces do -- is a good idea.
FWIW, maybe the approach in this case is traditional normalization to get the product out the door. When it becomes untenable, hire someone for whom star schemas are boring.

Put another way, the star schema was known to be a better approach only after the fact. Had your team researched “exotic” (unfamiliar) approaches early on, there is no guarantee you would have landed on a star schema.