skysight-inc/HackerNews huggingface dataset:
many problems here:

a) why exactly is google qualified to comment on national security?

this either means they are verbally overstepping their bounds,
know more than they should about secret+ programs,
or are processing their vast data in a security-relevant way on the scope of a nation state

b) phones being hacked != compromised telecom infrastructure

c) if android fragmentation leads to less security on a national
level, then by extension, google has monopoly or at least
cartel level influence

probably more..
I'd be willing to advertise a culture string like "en-US" if I thought adtech would respect it, and not try to override it or profile me further.
Asking the Hive Mind who might play with HTB, vulnhub and other labs (OSCP paid one):

1. Aside from: linux cmds, nmap, metasploit, sqlmap, mimikatz, kali's well known tools - what other tools are often used by pen testers ?

2. How is MFA beaten in today's enterprises ?

3. Do most engagements assume one is already in the network ? If not, how does one scan (basic OSINT towards their externally facing website, but let's assume that is very secure)

4. How well do pen testers know the defense side and amalgamation of so many defensive tools - how do they learn what to beat ? Is it really as simple as try to fingerprint and then look for known vulnerabilities on msf ? Or do pen testers not care if xyz enterprise is using this version of Palo Alto or a carbon black EDR etc.

e.g. Alphabet soup of products in a large enterprise for defensive solutions - NGAV, EDR, SIEM, honeypots etc. etc.

5. How do you keep up ? aside from Reddit

6. any advice to future job seekers working their way into learning more infosec ?
> at the RISC-V Zurich conference next week

Curiously this session is only 15 minutes long. June 11, 17:45 - 18:00, by Krste Asanovic.

Nevertheless it is quite promising:

"Vector Extension 0.7. The vector extensions have reached a major milestone with the release of version 0.7, which is intended for widespread implementation and comment".

Excellent news.
> * The police acquired a warrant and presented the warrant legally. The man refused, committing the crime of contempt of court*

The article also mentions that the law is not settled as to whether, and under what circumstances a court may compel the disclosure of a password. In the 11th circuit, courts are generally not empowered to compel decryption[0]. Being forced to disclose a password or key is treated as equivalent to being forced to testify against one's self, which is expressly prohibited by the fifth amendment. Florida is in the 11th circuit, and Montanez might have grounds for a lawsuit here.

[0] https://www.eff.org/press/releases/appeals-court-upholds-con...
I'll check it out.

Not exactly what the book is about, more a foundational assumption in the big narrative. Most of the book is about the subsequent examples driving history.
That's really weird that they don't host the video themselves but instead on YouTube and send all their users (who go on that webpage) automatically to Google.
Of all the things I wish Mozilla did differently, their choice of internal corporate email provider is roughly at the bottom of the list. Using a FOSS solution provides essentially zero benefit to even a fraction of a percent of their users.
Intelligence can't transform the unknown unknowns into known unknowns. Awareness of one's own ignorance has to be taught.
My junior thought: spending 3 days to optimize code to make the UI faster and use fewer resources will be appreciated by managers and users, so win-win.

My senior thought: spend 1 day to SOLVE the problem, and 5 minutes removing the code entirely.
So it's basically just a virtual currency a la Twitch Bits, Riot Points,
old Xbox Points etc. but running on blockchain
Don’t forget that Facebook is extremely capable of reading the public. It could be a marketing tool designed to capture early adaptors.
Makes me nostalgic when I discovered a trove of chaos/complexity books in the college library, apparently the most represented topic in the science shelves as of 2008. Knowledgeable idiot warning. I was impressed about human brains existing at the edge of chaos. It does not go over one edge, its a system that has the opposite property of the butterfly effect: its state is buffered against impressions and strong impressions may move it to another stable state. Over the other edge: a normal brain plots as chaotic brainwaves while an epileptic plots as regular phases.
And this is probably their real argument to Trump administration.
This would of course put a much higher value on proximity to renewable hydroelectric power, e.g., “Florida Man Becomes the Sex Organs of the Machine World“.
Circle Medical (YC S15) Is Hiring Phlebotomists in San Francisco
> "However, when I am searching for a pressure cooker, it would be great to go to a centralized repository of ads and look through who markets this sort of thing the best and may be have some objective reviews along with it..."

Isn't this similar to what Amazon Marketplace does? Of course, they do allow advertisers to promote their stuff, but apart from a top few sponsored content, rest all are ranked by reviews (or so they say).
I think it's the same compulsion that makes many (though not all) people who get a PhD feel like they have to mention that fact everywhere (e.g. Dr. John Doe, Ph.D.).
German Naming Convention
The word is not perfectly precise, but it’s meaning is anchored in trial testimony. A witness is someone who testifies at trial, based on their first hand knowledge of the facts of the case. Because there is generally an extended pre-trial phase, where prospective witnesses may be interviewed or deposed, those folks are generally also called witnesses in that context, and the Fifth Amendment extends to such pre-trial proceedings. But all of that is in connection with their possible testimony at trial.

You would not call the IT guy a witness, because “providing access to information” is not “testifying.” A witness is someone who has facts relevant to the charges, and who testifies those facts to the jury based on her personal knowledge. The IT guy has no personal knowledge of the crime and won’t be called to tell the jury about it.

A good litmus test is: would you possibly tell this information to the jury? You may need to know the accused’s office number to search it. But that office number isn’t relevant information to the case in and of itself. It wouldn’t be a point you’d tell the jury. And the receptionist that tells you it isn’t a witness.
Hey David! Good memories. David glad to hear you've sorted your demons out! If you are ever in Cape Town, drop by to say hi.
Starcity, the Largest Co-Housing Building in the World, Is Coming to San Jose
>> Graphics is much more subtle than just vector instructions as can be seen from the failures of Larrabee.

It is. But given there are zero other open source solutions, I think LLVM Pipe running on the vector extension would be a decent option. It's not going to compete with the big guys, but it will make SoCs possible without licensing grahpics IP.
I've read on this website about people launching minimum viable products that appear to the customer to be some kind of automated service that in reality are the owner manually satisfying the order.

The software isn't necessarily what the customer values. You can provide a valuable service with 0 LOC
Also, the green new deal idea is not by Edward Markey and Alexandria Ocasio-Cortez. It was a term used by Thomas Friedman as far back as 2007 and the policy ideas have been bouncing around in more or less their current forms for quite some time.

Perhaps he is aiming this screed at arch conservatives who prefer the later films in the alien franchise.
Pluralsight Free Weekend
Engineering and cost to me are intricately intertwined, so yes it is an engineering problem. If they could solve it without affecting the bottom line (or even better improving the bottom line), I'm sure they would.
This, and everything else in the #plottertwitter hashtag, seems super cool. Are there any good resources for exploring this space and getting into it?
As a native English speaker who's learning Russian, I can certainly relate (Russian is quite difficult for me).
Well obviously a distributed database needs a consensus protocol.
Advertisement is literally as old as civilization.

Modern advertising is as old as Edward Bernays and the 1920s - https://intercontinentalcry.org/the-century-of-the-self-happ... and https://www.youtube.com/watch?v=DnPmg0R1M04 [The Century of the Self - Part 1: "Happiness Machines" documentary]
Twitter Is the Afterparty
That's probably a made up story or at least not accurately told. That's not how the legal system operates.
That wouldn't mean that all of Rust is undefined behavior, it means the compiler is the spec, and the behavior is defined by what the compiler will do. The language having no specification only means that you can't easily determine if what the compiler does is "technically correct", but that's always secondary to the matter of whether the compiler does what you actually want.
Trademark Application for “Libra”, Facebook’s Cryptocurrency
I like these types of definitions, but in that case - a heart that "stops" - isn't a heart anymore?

The hard part about drawing lines like this is that it requires it to work on both sides of the life/death spectrum.
The type of system I was referring to is the core within the broadcast facility, rather than extending to the home viewers (which is a separate downstream distribution encoding/mux process). Timing is important for when you switch between different video feeds to avoid on-air impacts so all the signals have to be video frame-aligned basically. In an IP system PTP timing is used to lock all the devices since greater precision is needed than NTP can provide.

Low-latency is also important for when the SDN system initiates a route to switch since it generally needs to happen according to a tight broadcast playlist schedule and we found that with SDN (central controller telling all the switches what to do) rather than IGMP type system (multicast subscribe with switches doing a lot more work parsing packets) is the best approach to handling very large volumes of routes and having them take effect in a low-latency predictable way.
The comment I replied to claimed that the Fifth only protects you from testifying at trial. You said a coerced confession would be inadmissible, implying it’s still legal to do so, it just couldn’t be used as evidence.
Sure, but it undermines their public opposition to Google and their practices. DuckDuckGo appears to operate just fine on Fastmail.
Uber drivers are not employees, Fair Work Ombudsman rules
I understand where you are coming from, and certainly my goal is to exactly "to clear hurdles for individual contributors who are more technical than you." It happens to be that this case specifically is not about a technical / developer role.

Still, ultimately I am responsible for the team's output and the team's utility to the organization as a whole. Without that concept, then what exactly are we doing here?
This is a misunderstanding of open source. Just because you share your research does not mean there is zero benefit to doing that research. There is significant benefit to getting the answers you need. There’s a lot of groups that would value getting their research done even if they have to share it, including universities and public healthcare research institutions outside of the US. Requiring that the information be open would not starve nasa of customers, it would simply attract different customers. Forcing the research to be public could have significant benefits to the world.
Librem 5 vs. Android – Which boots faster?
>Understood as senior: Communication skills matter most.

I can't speak enough on this one. In our craft, The better one is at communication skills, the more effective their technical skills will be.
>Apple isn’t claiming the shop doesn’t have the right to repair iPhones, it is claiming it sells counterfeit screens.

Under that system, if you go outside the US, disassemble your own phone and mail it to yourself, you would be charged with "counterfeit" because the parts have Apple logos.

>For me, “refurbished” implies “original, but not new”, and “compatible” implies “new, but not original”. What is it?

I always take refurbished to mean the 'essential' parts are original, but the ancillary parts (screws, gaskets, frames etc) might or might not be depending on who refurbished it (seller/supplier/third party vs OEM)

>If the first, the shop should be able to show how it obtained refurbished screens or old screens that it refurbished itself.

I think many parts are taken out of old broken phones and then repaired.

>I don’t think that ‘thus’ holds. “Official Apple part” can also be (somewhat) implied, for example if the seller calls himself an iPhone repair shop, and never explicitly states the replacement screens are third party, or if the shop

That is a judgement call. In certain industries where repair is common, for e.g. Automobiles or Computers, there is no assumption that a repair shop advertising itself as a Toyota repair shop is going to put in OEM parts.
Interesting to compare this to the Hello World that's now possible with WASI and its fd_write function:

https://github.com/CraneStation/wasmtime/blob/e530a582afe6a2...
ex-cloud ops from Joyent here. I've done the literal migration of TextDrive and Joyent's shared hosting off them (300+ Solaris Zones and loads of legacy FreeBSD Servers) so ping me if you need help migrating. jmarneweck at gmail dot com.

I also have experience running SmartOS on Leaseweb (they purchased Uniquity Hosting where I setup SmartOS instances on numerous servers in numerous datacentres.
>Let's be very clear about how bad an idea this was: it was a balloon filled with hydrogen, with a chamber beneath it filled with hot air warmed by an open fire. An open fire. Beneath a container of hydrogen.

sounds familiar - https://youtu.be/fSTrmJtHLFU?t=43

> Useless sacrifice, in my opinion.

i wonder where you draw a line between the Challenger and De Rozier, of course if you draw any line here at all.
This seems like it would suffer from a lot of the sorts of AI problems in games, where computers are better at memory and ingesting information than people generally are.

Games like Avalon or Secret Hitler tend to be much less fun if people are playing with notes. A lot of it involves seeing what sort of lies/adversarial behavior you can get away with because people aren't paying attention to every single thing in the flood of information.

A tight example of this is if you watch TotalBiscuit's old series of games of Secret Hitler with friends on YouTube, they essentially ended up quitting partially because one of the guys started taking notes on exactly who had voted what way on everything, and counting cards. It turned out this both made him really good at the game at first (patterns in who votes with whom is valuable) and made the game less fun for everyone else, since they now had to play more "perfectly" and more directly do things to tamper with the dataset, instead of relying on no one remembering the exact votes from 15 mins earlier.

In the end, I somewhat question if the computer is actually better at any of the parts of the game that are fun/interesting, as much as just better at pattern recognition. For instance, in a game like Avalon, you'll often not be able to piece together who some of the less-important roles are, mostly because it's not worth the time, but a computer is likely able to overtly or passively track things like that because it has no reason not to.
Over the course of my career, I've gone from deploying via scp, to svn-up/git-pull, to every variety of actual deployment pipeline imaginable with dedicated dev-ops teams. Now I'm the only engineer at a tiny 501(c)(3), git-pull straight from production again, and have never felt more free.
In British English, it is common that only the initial letter of an acronym is capitalized if the acronym is read as a word, e.g., "Unesco", "Nasa", "Nato". The BBC in particular has this as an explicit editorial policy.
Yet another reminder of exactly how horrible my cellphone plan is.
Yes, and they admitted error and the issue they're describing is that it was very difficult to rectify the error.
Codebases all go to shit pretty fast. That is really what you learn as a senior developer. The fully sustainable codebase is a myth. All codebases will inevitably get progressive more difficult to work on no matter what you or anyone else does.

All software eventually gets rewritten. Either in full or in parts. So "good enough" means "will this keep it going until this software, or piece of this software, is thrown away and replaced". Because that is typically much more economical than code review infighting causes 2-4 rewites of every feature until its perfect. Or spending 3 times more time on a feature to make it perfect. Or having to hire very expensive developers that are capable of writing to that high standard.

There are obvious exceptions in specific industries, but this holds true for 80%.
That's the root philosophical argument of this whole thing, which we will be arguing about with bad metaphors and mismatched analogies for the next 2-3 years by my estimates.
Michael Bloomberg to plunge $500M into clean energy effort
Liquid brains, solid brains
The current market cap for BYND is bigger than the expected global "fake" meat market in 2025 ($7.5 billion) and they are far from the only player. Its definitely valuable but I dont think its worth that much

https://www.alliedmarketresearch.com/meat-substitute-market
I need an invite code. Please help :)
> Are you saying that Linux is also doing it wrong?

I'd say yes, the coupling of operating system and distribution of software applications has always seemed very wrong to me.

Software should run on the operating system which functions as a platform, not be coupled with the operating system. Linux package management essentially works like an app store with the additional burden of maintenance loaded on the distribution owners. I'd be very happy if flatpaks and snaps take off quickly because distribution agnostic up to date software, maintained by the developer, should be the norm.
Ah, sorry, misread it -- that is different from Snapchat, although still similar in that only a sliver of voting shares are publicly traded.
Ask HN: Why doesn’t HN have notifications?
I love the conversation and debate that goes on here but I don’t always go back to check if people responded to my comments. Wouldn’t comment notifications be a really helpful feature of HN?
But all games you bought from steam will still be yours to play. Stadia games will just stop working as soon as Google pulls the plug.
SEO is one reason, but the reduced attention span of today's people surely is another. People just won't bother figuring out what a "mystery title" book is about.
Yes. Generally the delineation if its something you could have on you is allowed, but what is in your head is not. Biometrics are generally seen as something you have on you, so fingerprints are generally seen as less secure than passcodes.
There were a ton of talk submissions, and the schedule is incredibly tight because of it. =(
Whoever wrote that blog post made several claims which are contradicted by the linked blog post. I'm wondering whether that's just being confused on the different between enabling the DoH code behind a disabled default setting and changing the default configuration to use a particular server.

Here's what Mozilla said:

> Firefox does not yet use DoH by default. See the end of this post for instructions on how you can configure Nightly to use (or not use) any DoH server.

> Our second effort focuses on building a default configuration for DoH servers that puts privacy first.

https://blog.nightly.mozilla.org/2018/06/01/improving-dns-pr...
YouTube is deleting videos on Nazi history as part of its hate speech crackdown
AdTech is wonderful, from a technical perspective.
The standards are rich while the ecosystem is rife with opportunity.

If you are a developer in AdTech, you will NEVER hear about interaction, or see contract, with most of the companies listed...other than a handful (maybe FB, maybe Yahoo, maybe Instagram). I've worked for Experian (the US Company) and talking about them in the AdTech space is the same as talking about HN in the cooking recipe space. There's a tiny bit of overlap, but it's largely pointing to shoehorned third parties because that isn't something Experian's existing infrastructure performs.

AdTech is fun, it pays well, and you get to be at the ground level of these moral compass debates. I have refused some pieces of work and AdTech is tolerant to negotiating concerns. I think most developers would benefit from experience in AdTech, even if it's just a short time.
That is the exact point the article is making. When you are junior you think that code style is the most important thing but it isn't. (Also it can be handled automatically as you say)
Looks like they already registered the TM (without a logo). Filed 2014 and registered 2016. It is odd they claim the use of the mark was first used in commerce with the 2014 application date.

http://tmsearch.uspto.gov/bin/showfield?f=doc&state=4808:40h...
> Understood as senior: If a junior programmer tells me they found a system-level bug, I won't believe them and will tell them to go figure out what's wrong with their code.

My first job was in finance and I remember one time that I had a glitch on a complicated Excel spreadsheet. I checked it over, checked again and checked again until I finally concluded that the bug was in Excel itself. So I go to my boss and tell him that the data isn't ready because there's a bug in Excel. I was laughed at by the entire team. They agreed to give me $1000 right then and there if it was really a bug, but if not, I had to admit the shame. Well... of course it wasn't a bug in Excel, I just made a careless, albeit hard-to-find, mistake.

Lesson learned. If millions of people use something, that doesn't mean it doesn't have bugs. But it does mean that you probably aren't going to find those bugs unless you are doing something strange.

oddly, I did once find an actual bug with indexes in Postgres. Because of my earlier experience, I spent a lot of time assuming it was me before I finally isolated it as being a bug with postgres itself. I submitted a bug report and it was patched within a day. But still, 99% of the time, it's me.
Eh pro-choice seems just as misleading to me. Choice could mean any choice about anything. Seems like they're trying to conflate a choice about abortion with being in favor of any ordinary choice. Both sides have their own preferred terms that try to conflate something uncontroversial with a highly disputed position. That's a common enough thing in politics for sure. It's highly biased and not as all neutral to allow one side to pick a misleading name while requiring the other side to use a more literal name.