skysight-inc/HackerNews huggingface dataset:
We are unofficially, however not Offensive Security roles.

We are open to hiring somebody for firewall management (specifically Fortinet firewalls) as part of our Sentry offering.

https://navisec.io/services/sentry/
Show HN: WordPress Running on .Net Core
It's also a reason we generally push everyone to centralize authentication on an SSO provider like Okta or Google Cloud Identity, both because those platforms allow you to easily set policy requiring 2FA, which breaks the attack, and because OIDC and SAML let you log into lots of services without exposing each of them to account takeover independently.

There are other good reasons to do this, too.

At Black Hat last year, I cornered a bunch of CSO-types at big startups and asked for what their first 3 initiatives would be, and this was something I heard a bunch.

You should have some kind of SSO set up, early.
Search for "power breathe" on Amazon. Found them by typing in IMST.
Incentives of the publisher and the consumer aren't always aligned. Publisher might want you to spend / use the mobile app (tracking) / budge your political leaning / confuse you with disinformation / etc. The consumer / user is simply outgunned, and it's getting more and more lopsided. Regulation is inevitable.

This isn't just about good UI. Not everyone is using these sort of behavioural tests to present a better UI. It's also about influence (micro influence). I'm not sure you're seeing the whole picture.

It sounds like conspiracy, but Obama and Cameron had "Nudge Units", and that was 5 years ago.

http://freakonomics.com/podcast/white-house-gets-nudge-busin...

https://www.warc.com/newsandopinion/opinion/how_the_likes_of...

https://www.forbes.com/sites/beltway/2015/09/16/obama-nudge-...
Interesting... I would prefer you not use the roads, schools, courts, plumbing, utilities, waste management, firefighting, ... that our taxes pay for. Unfortunately (fortunately?) I'm forced to tolerate you against my will.

I guess we all have to make sacrifices
or money/connections/asylum?
> geo-hacker

Geographer? Geologist? Geometry-specialized mathematician?
personal and social responsibility are two different things.
I'm not too familiar with open source licenses, but does a license exist that allows someone to (enforceably) open source their code with the stipulation that it is for academic/security purposes, but forbids forking/reselling/other usage?
Idea: When you pay tuition you agree to pay a fee of $X,000 if the college catches you red handed cheating.

The college can then offer contract essay writers $X,000 if they provide communications proving a student is buying an essay, including the essay itself before the student turns it in. This fee can be as high as it needs to be to cover the cost of lost revenue (including lost word-of-mouth referrals) so that it's worth it.

The only pitfall is you would have to carefully design the requirements for the trap since framing someone is now lucrative.
That's fascinating. When you have that many services, platforms, company divisions, etc you end up naturally competing with yourself, or enabling your competition.
I just bought one called Powerbreathe on eBay, they seem to have mechanical and electronic ones. Probably can’t hurt, I’ll give it a go. Drop me a line if you have questions, I should have the device in hand in a couple weeks.
If you need an extra check in any API to do something really damaging, the problem is with the design of the API itself.

I generally just prefer not using Bash scripting, as it's very hard to compose functionality in it.
Friend of mines parents spent the college fund on her brothers private school. She was expected find a man to support her. She wasn't eligible for any student aid at all. Took her about 12 years of working and going to school to finish her degree.

I think the history of means testing is kinda negative. But it's deeply embedded in how the people the run the US think. Witness Hillery Clinton blustering that free college would just be a give away to wealthy families. Better a bunch of poor kids have the door closed in there face than let one child of privilege skate.
Semi-related, was wondering how much telemetry / user tracking this does.

Figured we'd be able to look at the source to know. Guess not. :(
I disagree. If an outage in the product your team managed was caused by a bug your team introduced 5 can point at several root causes and solutions that your team will be able to control and implement.

Management only comes into play when causes like "under-funding", "constantly changing requirements" or "too tight deadlines" are identified.
If you are being passed on the right in the US then you are doing it wrong. Slower traffic keep right except to pass. By your definition, you're in the wrong lane.

Lane surfing happens in the US because people here don't understand how to drive on freeways. It is non-existent in Germany because drivers there know how to drive.

I used to live in Seattle, a perfect example of a city that has enough freeway but still has traffic jams because people drive cluelessly. Not just my opinion, but the opinion of traffic enforcement in Washington.

And people on their phones while driving just make the situation worse.
Totally depends on your risk exposure. If you're building websites for massage therapists and not making a ton... probably not a requirement. If you are building applications for businesses that do a lot of revenue and are mission critical - totally make it official.
Free the Falkland Islands?

Of course most likely someone will just submit a pull request or fork the repo.
The device shown in the video is the Powerbreathe K3 breathing trainer. On Amazon US, the Powerbreathe K4 is selling for $499. However, there are lots of more affordable inspiratory muscle training devices from other manufacturers.

Has anyone used these devices and what improvements in health, if any, did you notice?
https://wiki.openjdk.java.net/display/loom/Main
Is "make more money" the best criterion we can find for determining what educational paths should be encouraged and supported?

It's bad enough that students are likely to be naturally drawn towards certain career choices - such as advertising technology - because of the generous pay to be found in that sector, rather than because they see an opportunity to make the world a better place. Let's not give educational institutions an added financial incentive to promote the most lucrative courses and careers rather than the most beneficial ones.
This is perhaps a stupid question without context, but doesn't every kid of the age where this kind of things is an issue carry their own smartphone nowadays? With mobile Internet?
Yep,if that's what is meant by lane surfing then that would be a bad idea too. I was referring to lane discipline.
I don't know where you got 1965: clearly they just labeled 1990 as 1980. And truncated scales, clearly marked, are not a cardinal sin. They can be used to mislead but I see nothing wrong with the way they were used here. Cutting it off in 2010 is the bigger issue, I think.
An educated population is a public good. Particularly in a democracy.
How does `this` prevent any function from being a pure function? Classes could be just a different way to organize your code.
Anyway, lots of good arguments were made for and against in that reddit discussion.
https://www.reddit.com/r/javascript/comments/awk2be/reducer_...
The supreme astronomical example of the Eye of Sauron is this Hubble shot of the star Fomalhaut and its debris disk: https://en.wikipedia.org/wiki/Fomalhaut#/media/File:Fomalhau...
Ray Dalio's Hollow Lament
It is not incredibly rare. Many people from the Netherlands drive to Austria and Italy for vacation.
> I'm pretty convinced most stress caused by driving is just people driving way too aggressively.

In my experience, the exact opposite seems to be the case. Aggressive drivers tend to move with a purpose, pay attention and react logically (even if recklessly) to events on the road. By contrast, the bored people zoning out while driving, the people stuck on their phones or just clogging up the fast lane while driving under the speed limit are unpredictable (and when they do wake up, they tend to panic) and cause problems all around themselves as everyone else is forced to adjust. People who can't be bothered to care about driving while doing it are much worse than people who care too much.
This is short sighted. You would at least be able to see exactly who was involved along the line. It would be public knowledge to find unreliable suppliers that had a higher rate of contamination. Also, it would be really cool to see exactly what farm something came from.

It doesn't apply to a bag of cheetos but it definately does for a waygu beef steak.
Yeah, I can't wait for Amazon University to start graduating Warehouse majors. Now that's a degree of value.
Anna Delvey Managed to Scam Her Way into a $35,000 Charter Plane Ride
In what way is carrying a dedicated device not realistic? My second factor lives on my keyring and is only a bit larger than a typical door key. Everyone carries keys.
Ok I mean, now what you're writing, that's not even wrong. The black part of the image being larger than the actual radius of the blackhole is a discussion about the relative size of the black area you see in the image, to the actual black hole itself. I think that should make sense to you? It's not an argument about why he predicts it will look like a "fuzzy coffee stain," as opposed to other simulated images. Are you able to see the difference between those two ideas?

I think you have some other discussion you were having confused with this one. To remind you about your earlier comment, you stated disagreement with me, saying this video was him only talking about why he predicted the image to look like a "fuzzy coffee stain" as opposed to some other simulated and theorized predicgions. I think the above paragraph and reply should obviously show you why this is actually not true. Are you still with me?

I do think most of the video is interesting, but he never states an argument about why he chose that prediction. That was what I thought was ridiculous. Science is about reason and evidence, not just saying "believe me."

Maybe you watched a different video? You should watch this video, the last 30% talks about simulations done in which the acretion disk reflects around the black hole, he uses example images which look a bit different!
Can you do kubernetes without docker? Does it support other container engines?
My phone already prompts me when I login to a google account on another device.

Is this new / different?
The whole sending all kids off to college model is a joke. Most people are average, they don't enjoy studying or have strong sense of direction in life. Send these kids at the ripe age of 18 to college, where they pay incredible amounts of money and are more or less pressured to succeed lest they waste alot of money and you get a recipe for gaming the system. The older i get, i believe that for most people going to college slightly later when you have more maturity and life experience is a lot better. Maybe apprentice type programs at 18, work at them for a few years and then decide if college is right for you.
This video from "Mentour pilot" has been deleted (supposedly upon request from boeing):

https://www.youtube.com/watch?v=EzgBft-79U8

You can see it here (european version of youtube): https://vimeo.com/329558134

Or more info here: https://news.ycombinator.com/item?id=19627525
Save travel time by accelerating fast? So you get to 40mph a half a second faster? Are you being sarcastic?
You should probably write this in an issue so that the developers see it.
How about if you think of it in terms of the bond that such branding rests on. Surely, if my tribe, home, and history is tied to the name Amazon, then that beats (for some definition of "beats") one's relationship with an online retail place?

I am not arguing for any side, but I do acknowledge that the Amazonian community's right to the name rests on a very good argument.
Hey now, the street also allowed jaywalking.
additionally for passwords that are already stored, it's not too costly to check the hashes against the blacklist and revoke those existing passwords.
I think that society as a whole should bear the costs of regulations it imposes, regardless of how narrow they are, so that the balance between practical gains from the law and the costs of its enforcement is more broadly considered. When laws are written in such a way that their enforcement is borne by a small subgroup for whom they're relevant, the rest of society tends to ignore the costs, even if they're large, and focus on the benefits, even if they're small. It basically encourages tyranny of the majority.

(Courts should not be funded via court fines, and prisons should not be funded by inmate labor, for similar reasons.)
That's correct, albeit more nuanced than I was getting.

My point is that they'll "shrug", accept your return, and issue you a refund. Yes, they may come back later and say, "Actually..."

When I say, "you're long gone", I'm referring specifically to taxpayer identification fraud, where you'd file a (fraudulent) return on behalf of someone else (often a dead person or someone from Puerto Rico[1]), receive their refund in the form of a debit card, and "disappear".

In any case, it's way easier to avoid paying someone in the first place than try and claw it back later.

[1] https://www.irs.gov/taxtopics/tc901
It's okay to conclude after a root cause analysis that the root cause is not something you want to work to prevent, because the cost-benefit is skewed.

For some products a AWS S3 [1] outage might be a influential enough that they add a redundant second storage at another provider, for other it might be "this is too expensive and time consuming to work around for the problems it caused, let's hope Amazon gets their shit together"

[1] https://aws.amazon.com/message/41926/
Reflections on the Georgia Tech Online MS in Computer Science
The Art of Barter: When Money Has No Meaning
The Science Behind the Mental Clarity Diet
Sure, that is incredibly shady, and doesn't deserve any sort of justification.

But, for the sake of the discussion, I'm purely focusing on common shares that the employee already owns, which means vested options that were already exercised.

Zynga's shady practice was affecting unvested options.
To solve the original problem of downloading all potential dependencies without any knowledge about the state of the target machine, I suppose you could just prepare a minimal Debian installation in a container with only essential packages and run "apt-get clean && apt-get -d install $package". In principle you could then copy the downloaded package files to the target and install them offline with dpkg. You'll probably end up downloading much more than you need, though. That's inevitable without two-way communication about the state of the target.
It also went directly into corporate balance sheets instead of to the average person. People that own tons of stock won BIG.
People that own small-medium amounts of stock (think retirement accounts) did okay.

People who didn't own stock got nothing.
Geospatial data/apps
People are moving to Docker and Kubernetes
There's Sibelius AudioScore http://www.sibelius.com/products/audioscore/ultimate.html

I haven't used it personally, but from what I heard a few years ago it wasn't very accurate.
Cate Faehrmann: Why a Lawmaker Admitted to Taking MDMA
Ray Tracing Gems Free on Kindle; Consider Google Play for Books
Now, imagine you have 5,000 such checks in millions of lines of flight control system code, many of them interdependent, and you have to fly the ship to test each one. You need to schedule time with the test pilots (who have lives of their own) and get the data dump from IT post-flight. It's aerospace so all this undergoes review, documentation, and signoff, and it all takes time. How do you prevent a single check from slipping through? It's not easy. These software engineers and others in the process screwed up, but it's a failure of processes and not just forgetting a conditional statement.
Another World Creator Éric Chahi Is Back with a PS4 VR Game
Einstein first developed the theory and the equations that allowed for them to be discovered.

You can imagine that space-time equations have many solutions and properties that can't be contemplated all at once even having them right in front of you.

Schwarzschild took the equations and obsessed over them for countless hours and eventually discovered that one solution to them implied this phenomenon and therefore he discovered black holes by discovering a specific solution to Einstein's equations.

Of course no one knew at the time if the mathematical solution represented real physical objects that exist in the universe, because it doesn't always happen that way. Occasionally some obscure corner of the math predicts something that's a dead end or anomaly that doesn't have any meaning of value as far as it is known.

They had no way to know one possibility from the other.
Duc: Disk usage info in a optimized database
This is great. Hopefully it'll get more people using 2FA. I don't think this is the best security practice, as others are nothing how insecure Android is. But it's better than nothing. It also pushes more people to use FIDO and 2FA. This is for the average person. If you want more get an yubi key or something.
Mobile homes, their pitfalls, and the big investors killing their affordability
The Man Behind Huawei
> There are some middle camps like Humans should control technology that should control humans like China, but roughly thats still nets out to "technology should control humans".

> However, when it comes to corporate environments, its becoming harder and harder to define humans as the control point, since there are so many corp benefits to putting technology in control.

If you're a bit lenient on how you define "technology" so that it includes policy and process, then that group of humans controlling technology controlling humans gets much larger, as it starts to define most medium to large businesses. Put in that context, it might be more accurate to think of it not in terms of technology, but systems. Humans have been using systems to control humans for millennia, and the arguments are just as old, and the system controlling the people is not a new trope either (e.g. Orwell's classic 1984). I suspect researching and regurgitating those discussions will yield interesting perspectives.
Most control systems are not airgapped, because most people don't think of themselves as targets of that level of attack. Stuxnet was targeting national security infrastructure, which is much more likely to be airgapped, but your local powerplant doesn't (at present) think of themselves as national security infrastructure, so they don't take the same level of precautions.

Note: this only describes cases I'm familiar with, in the US. I bet that some countries with more experience on the receiving end of cyber-warfare (e.g. Ukraine) are better.
It took me 10 minutes to find on my phone on the train. There are probably dozens of bugs like this...
I'm mostly like you, except I've seen where DoH (or rather the equivalent DNS control) can go wrong on my local network. I have a NAS, and did not set up the manufacturer's optional global DNS routing (because why the heck should anything on the internet know anything about my NAS). Unfortunately that means my Chromecast doesn't stream files off it properly, because that hard codes to using Google's global DNS servers (8.8.8.8), which isn't going to know about my local hostnames (nas.lan). I've had to change things to use IP addresses instead.
Maybe they were busy flirting with Apple at that point.
that was for shadowsocks I think (e.g. a powerful tool to escape the chinese firewall).

they even tried to DDoS github as far as I remember.
In a lot of industrial sites software security is a joke. Embedded systems tend to use very old, well proven technology, which in itself isn't a problem, it fits the market well, but the side effect is that security isn't always properly considered as it wasn't a concern when the software/hardware was developed.

I was involved in a project a few years ago delivering a series of monitoring systems running Windows XP to a brand new 700 million dollar oil rig. This was at the request of the client, they had software they needed that would only run on Windows XP. They had a fit when we had trouble sourcing Windows XP licenses. The expectation is that these systems will have a 20 - 30 year life.

It used to be that keeping every air gapped was enough, but organizations want easier monitoring, so more systems are being networked in an ad-hoc way without a lot of thought about security.

I expect we are going to see more things like this happening in the future until we start taking security in systems / embedded space more seriously. And even then there will be exploits of older systems for years afterwords since the replacement cycle is so long.

I wonder what a secure embedded system even looks like when I think about it. The environment isn't suitable to the kind of continuous patching that is done in the web world, but exploits will be found and dependencies will need to be updated. How do you square keeping things up to date with stringent testing requirements in systems that can kill people. Many of these systems / plants are unique, there is only one plant like it in the world, so testing becomes very hard.
I thought that. AFAICT it's local via Bluetooth, as opposed to through Google servers and push messaging. Good idea, but better if it's open.

Of course their motivation as normal may be to have users have their wifi/bluetooth on all the time so they can reliably collect more location data.
I don't carry my keys when I'm traveling if I'm not driving my own car. So, no, not everyone carries keys.

ADDED: I do have other 2FA hardware as well. But I assume I'm not guaranteed to have it with me when I need it.
> more bland, generic work

We see generic and bland work from marketers and designers quite often, to be honest. With predictive designing, we want to step up everyone's game.

If you create unique and engaging content, then for sure no A.I. can judge you. In fact, if you create extremely unique content you will be an Outlier in the prediction probably and will not score high enough. But think of banners on websites.

You have to gather the attention of the user, that will last not even 2 secs, and you have to make your creative memorable in order to increase the brand recall in your company. This is a case study were A.I. could rank your design in terms of memorability.
All Android devices certified by Google will have a hardware security module which should keep the keys secure. Some cheap non-certified devices (mostly Chinese) might not have hardware backed keystores, but I doubt those devices would be able to run this Google app.
At 40,000 feet you have ample time to react. At 1000 you don‘t. That‘s my argument.
Especially if you depend on the money the job pays now and you can't pay a legal battle while searching a new job.
Sure there are such licenses, but they aren’t Open Source. By definition they are proprietary.
>Of course they don't, but they've got a very legitimate claim to own the TLD.

Not really. Once trademarks become "things", that trademark ceases to be effective and can rarely be enforced. TLD's are not for trademarks. This isn't complicated.

> A tool used globally to catch fish, birds and other animals for a millenia.

Because .net, like .com, is shorthand. ".net" is short hand for network. And Verisign is the organization responsible for maintaining that TLD's domain registry. It has nothing to do with branding or trademarks.

>A tool used globally to catch fish, birds and other animals for a millenia.

This should be your sign that you're just grasping at straws and you're not here to learn or make any kind of substantial argument.