skysight-inc/HackerNews huggingface dataset:
There's a decent argument that current desktop OSes are a poor man's OS. The permissive-by-default approach of traditional OSes is deeply problematic and attempts at reigning that in (Mac App store sandbox, capabilities work on *nix) have largely failed to gain any traction.

It's certainly not elegant that we build a proper security model from within a browser rather than an OS, but it might be the only practical approach (short of some large-scale migration to iOS/Android/Fuschia etc, which seems...unlikely.)
While I'm concerned the security implications greatly, one should not always assume network access always works or that it is effective at all times. In the United States, for example, bandwidth limitations and caps are rampant far and above what is needed just to saite the greed of our corporations. Given the current political control of the judiciary and executive branches, I don't expect this to change any time soon. We'll likely see more and more limits to our ability to do "cloud" things unless we offer a greater profit than ever before to the incumbent ISPs.

Being able to do something offline is important. I can see how this goes forward with Google goal to get their "chrome is an OS" model.
Without the US's involvement in global trade Europe & Asia will likely erupt in war again. The US would be immune to most of the violence though.
Stan Lee, Creator of Marvel Universe, Dead at 95
No one is arguing that these factories shouldn't have been built. No one is arguing that these jobs don't pay more. The concern is the conditions for the worker are simply inhumane and the companies commissioning this work should be held responsible for knowingly profiting off this behavior. These would be Apple-owned factories, not Foxconn's, if Apple hadn't figure out they can pass the blame to rights abuses to whoever's name is on the building.
When you apply rent control you are basically telling the landlord to not invest in the property any longer.

I would bet that you'd find that this only helps people of color and lower income people in the very short run and that eventually you'd find that these apartments turn into ghettos.
I loved an estimation tool called Construx Estimate, by Steve McConnell. The few times I used it it was far more accurate than the other estimation techniques we were using at the time.

https://web.archive.org/web/20170920093850/https://www.const...
> I doubt doing farmwork 12 hours a day is worse than doing the same mundane repetitive action 16 hours a day.

Then why do Chinese farmers line up outside the gates of factories hundreds of miles from home in the hope of getting a job? If farming gave them an equivalent or better quality of life, they would just stay at home and keep farming.
Just looking at your website in your bio, you seem to have a good amount of experience, interests, side projects. However your resume looks awful. Remove all of the side images and links, remove the objective section, format your experience to make it cleaner and more readable (at least put blank lines in between jobs). Start your resume with a section summarizing your skills. Remove the 2 month or less duration jobs and round the other ones to fill the gaps. Good luck.
> The primary entry point for this API is a file picker, which ensures that the user is always in full control over what files and directories a website has access to. Every access to a user selected file (either reading or writing) is done through an asynchronous API, allowing the browser to potentially include additional prompting and/or permission checks.

I'm glad they are taking a security-focused approach from the beginning of the design phase. I expect no less from Google. However, I worry that the approach of putting the end user in charge of approving/denying access to resources puts an unreasonably high burden on users. Many people simply click to dismiss dialogs without even reading them, let alone thinking carefully about what they are agreeing to. This is asking for trouble. I would rather see a sandbox approach that restricts the locations and types of files that can be read and written.
AFAIK the Fairphone 2 is the only ethically made cell phone, and it actually cost half the price of an iPhone X :)
Stan Lee, creator of Spider-Man, X-Men and Avengers, dies aged 95
> There's a decent argument that current desktop OSes are a poor man's OS. The permissive-by-default approach of traditional OSes is deeply problematic and attempts at reigning that in (Mac App store sandbox, capabilities work on *nix) have largely failed to gain any traction.

What if they've failed because they're a poor idea that damage the reason why computers have become an ubiquitous tool and drivers of innovation? In Apples little golden garden, Linux, Chrome and hundreds of other things you've come to understand as required features of an OS would not exist. If Microsoft would ban competitive browsers like Apple did, we'd never dig out of the cesspool of IE6 internet.

And to build such innovative and updated software, you NEED the ability to modify parts of the system, not a sandbox.

(Disclaimer: This does not mean the security approach does not need to be updated. Sandboxes aren't a general solution though.)
I wonder if cybersecurity could be counted as a 5th area, and if so, how far behind the US is.
The US department of defense still uses the polygraph as an integral part of security clearance screening.

I am also dismayed, but not surprised.
If I were you I'd check to see if your router can run one of the several open source firmware packages like OpenWRT, dd-wrt, or Tomato. In my personal experience the OpenWRT/lede team is on top of security issues, and the router web interface and tooling is completely fine.

I'd be confident that flashing your device with modern open source firmware would solve the problem, but if you're paranoid just recycle the device and get a new one. In any event, I don't see a solution for you that doesn't involve some homework.
> This is by design. As long as it's profitable to exploit labor, nothing will change.

Do you by chance believe in "Intelligent Design" as an explanation for complex biological systems? It's not obvious to me that inefficient social systems (i.e. not optimized for worker/human happiness) require "design"? If we create an organism who's survival condition is "generate profit" won't it just do that as efficiently as we let it? When I think about exploitative systems as requiring "malice by design" I rarely seem to uncover a solution other than "wait for someone else to be less evil" or occasionally "live with it and treat the worst of the symptoms".
Utilising the browser to navigate through the web compared to its ancestors.

My first browser was Netscape Navigator 3. I remember how little RAM I had, couldn't keep many windows open (tabs did not exist yet) assuming Windows 9x didn't crash. Some webpages were annoying with blink, horrible colour combinations, many (bloated) pictures, or they had MIDI, GIFs, etc. What I'm wondering about is was all that harder to browse then say Gopher or Usenet? Why is it a website like HN with so little fluff is a breeze to use while Aliexpress or Google News sucks?
I thought the popular target was 'deplorables'. Or maybe internet trolls and fake news. Note the steady march away from elites and corporations as the enemy towards bullies on Twitter and social media being the 'issue of the day'. Seems like a very convenient way to shift the ire from those with power to those without. A way to make left wing politics from an economic battle into a meaningless circle of virtual signalling.
How does it encourage it? By saying that the owner will not be able to recoup a return? That does not encourage development.

The best way we can help housing is more supply, which in the bay area at least, means higher and denser housing.
"there’s a never ending list of things to educate people about"

I think you kind of hit on the problem. How do you trust "the expert" not to manipulate their status/authority/credentials without becoming an expert in everything. Rankings and rating are being gamed, scientists manipulate data, government is being corrupted by special interest/big money, corporate owned marketplaces are poor solutions, media is biased and manipulated. trust is failing everywhere.
I disabled it after this post, but it appears Plex switches to 'indirect' mode (it goes out to the Internet and back in) without it; i.e. I am using UPnP.

It's not clear what the solution is - update firmware? I am on the latest. Use OpenWRT (or whatever it's called these days)? Every time I look into it (I really want to!) I stop at the simple 'I want to do this, I will happily buy a new router, which one do I buy and know it works well and will continue to work well with updates?'
I get it. That would be nice. But from the product manager's perspective, I don't think it's generally workable.

The problem with publishing whatever they have lying round is is that a) even if you won't, many people will complain that it's a poorly documented, slapdash protocol, b) it's now a public protocol that they're going to have to support, and c) it sets a precedent, so that people will expect future product to have public documentation and support. It also builds a constituency that will noisily push for niche features that may not be economical.

Letting people reverse engineer and dealing with occasional document leaks don't add the same risks. Indeed, it's probably cost-optimal: the hackers still get what they want, but the company takes on no new obligations and makes it very clear that the hackers are on their own.
Very cool to see more action in the ActivityPub space – one of the nice aspects of the federated model is that more users of the protocol have a function of accumulative user bases, not directly competing with one another.

So in the future when Plume (a W3C sponsored ActivityPub blogging platform) eventually launches, there's no reason for WriteFreely and/or Plume readers to really worry about which platform a given author uses!
I don't think industry in developing countries necessarily needs to be exploitative. We don't need to stop these industries but we need to demand reasonable treatment and living conditions. The very fact that the workers' alternative is poverty means that they'll have a high tolerance of mistreatment, and that any good capitalist would be dumb not to exploit them. This asymmetry between employee and employer is not a justification that they should "just be happy they have any work at all", it should be a reason to demand symmetry from the employer.

There's no straightforward solution, but the status quo is not good enough.
Inboard Glider electric scooter pre-orders open
In the first example, the JIT version takes 0.218s and the non-JIT version takes 0.0007s.

Isn't the JIT version supposed to be faster?
No, is not for you the worrying. US is best in all the cybers.

Da, is good, comrade, is good.
The way I think I have no clue why people take risks like this other than for the obvious fame and fortune. Just the way I am it seems to be either narcissistic or foolish. I am sure others spur them on because what is not to like about being the friend of someone who does something where you don't suffer any large downside (other than you lose them as a friend).

Also there always seems to be a bit of 'watch car racing for the crashes' or 'watch ice hockey for the fights'. It seems to be something that people are interested because there is the chance of interesting devastation or perhaps elation after the fact that nothing happened.
Very well said. I had some similar thoughts but couldn't congeal them into a consistent thread.
Can you point out where I said I think cruelty to anyone is excusable?
I keep looking into it and keep stopping at 'what should I buy'. I'm willing to / assume I need to buy new hardware. What do I buy that will run it well, and continue to?
Ah yes, Bill Browder, man who made his fortune making investments in Russia in the 1990s. Absolutely the sort of background that merits uncritical extolment in the prestige press. A likelier champion of freedom and justice you will not find.
We've changed the URL to that from https://nakedsecurity.sophos.com/2018/11/12/botnet-pwns-1000.... Thanks!
A critique of Gmail's “smart replies”
Nice innovation, but i do wish that junk food wasn’t the norm at tech events.
Sure it is possible but why?
Do you offer Branded Pizza?
for example, we want to add our logo on the pizza or piza box.
QuickBooks 17.2.30 Full Crack for Mac Download
I know this is highly specific, but it's something I've struggled to find a good answer for.

Do you use Android 8+ with Firefox release and the BitWarden app?

I'm on Android 8.1, Firefox Release, and I haven't been able to get the BitWarden to pop up toast notifications and autofill in Firefox. (This does seem to work with Nightly, but that has crashed too often for me to use it regularly.)
This is a great idea and will mean that many Electron applications can just run much more securely as plain web applications.
Well, the increased power consumption of the hardware not entering sleep mode would be a non-marginal amount of power theft.

Not to mention consent...
Glimpses of Lost Railway Journeys of the Past
Tried to sign up but I'm not a Google Authenticator fan. You should consider other auth methods... like good ol' passwords.
How I Easily Ranked in Google’s Featured Snippets
In my case, WordPress and Ghost left my toolbox for two separate reasons. Note that these reasons are my own, and should not be taken as a wider denunciation of these products.

WordPress went away because I got tired of all the little fixes and tweaks I had to make to get it to be "just right." Even then, the way the code is structured leaves a bad taste in my mouth.

Ghost went away because I just don't like Node.js, and because some of the promised features still haven't materialized.
Are you sure these tags are RFID? I have only ever seen magnetostrictive tags [1] (but I don't buy expensive clothing...).

[1] - https://www.youtube.com/watch?v=KAm7qAKAXwI
No shareholder will agree to cut profits. The price of sustainability will be tacked on top of existing profit margins, as it is in all products where it is relevant. Like all sustainable products, it will be available only to those X% income levels who can afford to pay the premium on sustainable products.
Rolling out "grandma" as a reason to not do N is a tired chestnut that is growing less relevant with every passing day. It's ageist. It also ignores the fact that all of the people you're casually dismissing lived through the creation of the web and remember a time when going to someone's web server to view their particular content was the norm. You also appear to overlook the utility of post-it notes in your claim that coaching and repetition are a required ingredient for success.
It's interesting to me that "pwn" has entered the respectable lexicon. If I were to talk about "haxxors" or "warez" I don't think I would be taken very seriously on here. I guess it's because "pwn" occupies a meaning not fully encompassed by any other word. There is "root" which is itself a slang term but it's too specific, I suppose, and "compromised" is just too long,
Well said. There are many kinds of behavior that may be considered "out of specification" or not adhering to a contract. Here are just four:

* https://en.wikipedia.org/wiki/Undefined_behavior

* https://en.wikipedia.org/wiki/Timing_attack

* https://en.wikipedia.org/wiki/Thread_safety

* https://en.wikipedia.org/wiki/Privilege_escalation

Some of these probably don't come to everyone's minds right away. Please share your favorites.

The behavior(s) that a particular language guarantees is a design question. Once those guarantees are specified, we can objectively evaluate a particular language in terms of how well it does according to its own standards.
C, not C++.
While familiarity equals believability, we lose.

Humanity is fucking helpless this way.

@everyone: Prove me wrong, please.
The answer to the last part is "the US is probably in the lead or at least competitive to the lead."

Keep in mind that Stuxnet is generally figured to be a joint American/Israeli cyberweapon.
Honestly, I paid £2400 for my new macbook. They don't need to increase the prices. They need to pay decent salaries and don't take over 50% profit.
Honestly its less than <30 minutes per week for manual updating. I usually get notifications by mail if I need to update things (e.g. nextcloud, freenas, pfsense), and I have it running on Debian for auto update. I have had nextcloud break a couple of times on a major update, and that did get annoying.

It did take me quite a bit of time to set up though, and understand what I was doing. I would be incredibly hesitant to run what was in the link, as I have no understanding of how it works, security issues, etc.
Sounds a bit like SAS. Not the family part but the part about starting from an academic background, plus high growth.

https://en.wikipedia.org/wiki/SAS_Institute

SAS is an interesting company, both for their revenue growth and their work culture.

>During the 1980s, SAS was one of Inc. Magazine's fastest growing companies in America from 1979 and 1985.[18][23] It grew more than ten percent per year from $10 million in revenues in 1980[6] to $1.1 billion by 2000.[23] In 2007, SAS revenue was $2.15 billion, and in 2013 its revenue was $3.02 billion. By the late 1990s, SAS was the largest privately held software company.

>SAS is well known for its workplace culture.[36][41] The company was used as a model for workplace perks at Google[3] and is taught as a case study in management seminars at Stanford.

The page about the SAS CEO, James Goodnight, is also interesting:

https://en.wikipedia.org/wiki/James_Goodnight
Yeah, you can start by resetting the NVRAM of the router, (30-30-30 reset) then get a flash chip clip, read the data off the router flash using a raspberry pi, and compare it to the firmware binary from the router manufacturers website.
The C language (and the C++ language, for that matter) basically _never_ make backwards incompatible changes. This is a first class priority for the standards committees.

Adding simple abstractions which don't hide complexity in the underlying assembly is a huge productivity and correctness boost. Not that it matters anyways; modern optimizers are always going to do things that absolutely bend your brain.

Wouldn't that be nice if you could use a `scope(exit) {}` instead of accidentally missing two or three `goto cleanup_7;` which result in an RCE?

I would absolutely love a standards-compliant way to scope-guard sections of code. It'd make huge swaths of C code simpler; it's even in enough demand that Clang and GCC implement as their own extensions.
Browsers are filling a need that OSes have ignored. If you are against browsers, you should work on a zero-install native code sandbox that's actually secure enough to contain completely untrusted code (not relying on walled-garden app store verification procedures) while still providing important features like hardware 3D graphics and video decoding acceleration, camera access, etc.
I don't really see MAD as being a given, especially depending on if China or the US develops rapid technological advancements over the next few decades. I think it's a really unlikely idea to assume the nuke will be the great deterrent or equalizer for the rest of this century. China could easily conquer the planet if they pull sufficiently ahead in China, which is a fair possibility, looking at the current state of the US and Europe
Which one are you talking about? 1Password?
> Those that decide to self-host this stuff, do you ever worry about the maintenance burden?

Given that the name is "HomelabOS", I'm sure that this is aimed at people who are doing this because they find it fun and/or to learn new technologies, not people who firmly believe this is the most efficient way to run production software.
Sounds like someone repackaged the Less Wrong sequences for finance guys
Isn’t all the performance improvements by JIT completely swamped by the abysmal startup cost of the python executable?
Thanks! The first one isn't very relevant because it is the leader, who can say what he likes to indoctrinate anyone.

The second is incredibly interesting and seems very much like a brainwashing. I can see how an otherwise normal person can end up this way.
I've been involved in all of those acquisitions in some form, and many others not mentioned.

The general strategy for acquisitions is you get 2 years to mostly grow and run on your own. The ones that do fine on their own, continue to be on their own while slowing integrating with the rest of the business.

The ones that don't do well, get taken over more aggressively.

The "problem" is that no one is told this is the plan. I don't even know if it's a plan, but an organic thing that occurs.

The leadership of the acquired companies need to realize, they are in the same situation, and need to aggressively continue to work towards improvement. What I've found is, several companies go, "Okay, we're bought.. let's keep our current customers happy"

Current customers, while valuable, are not what SAP is buying. They are buying the potential for expanding to their whole base. Aggressively attacking these problems at the beginning would have turned the "unsuccessful" or less successful acquisitions into successful ones.

But it isn't just made clear to you that you have 2-3 years to do this on your own, effectively, or SAP will take it over and do it for you.

--- These are just my opinions/experience, ymmv.
Heck yes you can, you do you, friend.
What if the router was being unused? What if the power usage was minimal? I think it is unethical not to utilize resources that are being wasted.
> I would rather see a sandbox approach that restricts the locations and types of files that can be read and written.

Which is exactly what is in the security proposal linked at the bottom of the article.
Stan Lee is dead
Yeah I hear you.

Here's what got me to this point:

The framework that I started out on had a zero password system. But that's not secure enough, so I thought "do I go traditional usernames/passwords"? I then decided to go with the Google Authenticator instead of passwords because so many systems get hacked these days that it seems maybe its a better idea to have no passwords.

But then I launched, a little hesitant about my decision, and of course your email backs up the idea I should have just stuck with usernames and passwords. I'll have to think about what to do about it.

thanks for the feedback.
Which one are you talking about?
These are great, thanks!
The Red Baron spared Snoopy, also

https://www.youtube.com/watch?v=9WsbOLin8qc

The part about being able to hear Xmas bells from a roaring airplane is dodgy though
The U.S. and Russia have been signaling to each other recently that they would be willing to deploy low-yield nukes in a limited regional engagement.

Anyway, MAD has very nearly failed on several occasions -- Cuban Missile Crisis, false alarms, etc.
Could anyone share a tutorial on how to set up a basic WebRTC text and/or voice chat from scratch? I've tried but failed to get a proof of concept built, and personally have not found any great documentation
LD tests are an unreliable technique if the subject has a clue of what LDs do measure, namely stress, and how to control those forms of stress measured by the device. After a little behavioral training, most anyone should be able to significantly reduce their stress response when lying, making the test results much harder to interpret effectively.

LDs don't catch spies. They catch novices. Aldrich Ames beat the test repeatedly. But he would, since his job was counterespionage.
Remembering Stan Lee
The article is specifically talking about another "Great War", not limited conventional conflicts. All out, generation crippling war is a far cry from anything we've seen large industrialized countries engage in since World War II. I can't see how anything like another "Great War" could be possible without going nuclear.
Scientists turn Martian sunrise into a piece of music