skysight-inc/HackerNews huggingface dataset:
> slap some people on the wrist and issue company wide memo saying something to the effect of "Please don't say stupid embarrassing stuff like this in the company chat or over email".

While that's on the low end of the range of severity I'd expect, I can't help but point out that that is, in fact, punitive action and would, in fact, discourage (albeit probably not prevent) any warnings about the next unsafe design.
I do not understand what you mean by "how your software should be provisioned"?

I have about 40 kubernetes services all as modules using the kubernetes terraform provider. I think I have 1000+ pods running on our one cluster all deployed through terraform.

It works very well because I can chain infrastructure resources into my service deployments. For example, I can create a dynamically named bucket and pass the name of that bucket as configmap/secret into my service to use.
The Last GE Man
I think the point was sometimes people make less than optimal choices for themselves which can indirectly affect others but they should have the freedom to make them.

Probably we all do this at some level. Hopefully we can encourage each other to do the right thing, but most of us won't at least some of the time. And, sometimes the other party really doesn't know best or understand all the circumstances.
How are we going to get kids to graduate from high school if they can quit school and make a six-figure salary at Taco Bell?
Super Hexagon is one of my favorite games ever, as it's extremely simple, extremely hard and extremenly engaging at the same time. Brilliant.
You pay also for the fact that everything is open, down to the microcode loader. No closed management engine, no firmware blobs.
Right, instead of BTRFS RAID5/6, they use Linux md raid, but I believe they have custom patches to BTRFS to "punch through" information from md, so that when BTRFS has a checksum mismatch it can use the md raid mirror disk for repair.
This is a rather broad over-generalization that tries to simplify a complex history into a pop psychology explanation. There’s no simple set of reasons that Lisp doesn’t hold a prominent position in the current software topography, and it’s doubtful that Lisp programmers’ psychodynamics have very much to do with it.
Apple has had mandatory device-based 2FA for a while now, but it only works for iCloud logins.
Why is it not a great direction? I think if we can keep human population under 10 billion by reducing the birth rate it is probably best for everyone. And immigration rates are fairly high relative to what they have been historically (higher than 2008-2015) [0].

[0] https://www.migrationpolicy.org/programs/data-hub/us-immigra...
As far as I know, current consensus is that the Soviet Union would have defeated Nazi Germany regardless of Western intervention, it just would have taken more time (and a lot more casualties) to get to Berlin.

It really is a case where the Nazis picked a fight they just couldn't win.
> It would be useful if the web-site had a real case-study where they show all the features in action. Right now it looks like vaporware -- like one of those sites people put up to see if there is interest in an idea.

True. We'll add better images and case-study to avoid the confusion.

> And perhaps stuff like this should have on-site capability for enterprises that don't use github, gitlab and such?

I'm assuming you are talking about GitHub Enterprise, Gitlab Self-Managed and Bitbucket Server. We currently have support for Bitbucket Server and working on the rest.
Personal projects: format however you want!

Otherwise, decide on a style and let the automatic formatter enforce it. The tools and IDEs are so good you can literally format each time you hit enter.
I use a pedal-powered computer. For me, every watt counts.

My desktop system is a NanoPi M4 and a 16" Sceptre monitor. The combined system draws a total of about 6.5 W. Granted, there are some laptops that come near that level of power consumption. I simply like the form factor of a desktop PC.
At least in Europe we’ve got a plenty of highways where you can reasonably go past 120mph as long as you use the GPS to preemptively slow down for merging traffic.

Of course, this will certainly not be viable during the typical commute hours.
Watering deserts New ways to pluck water from desert air
site de vido
Using thermobaric bombs on wildfires: A Proposal (2018)
Epstein was, by all accounts, absolutely obsessed with sex and abusing underaged girls. One of his victims described the abuse he and Ghislaine Maxwell committed as "a full time job."

So the question is, was he more or less restrained in broadcasting his proclivities in the early 2000s before his first conviction? And, was he more or less restrained on his private island which was essentially constructed for the purpose of facilitating his abuse?
I see how that argument would work for Sealy, Simmons and Serta. I don't see how this would work for Casper or any of the other no-name mattress-in-a-box company.
I don't think it's correct that the deposition says that sex happened -- I'd greatly appreciate a reference to that if you have one.

The deposition contains questions like "Where were you and where was Ms. Maxwell when she directed you to go have sex with Marvin Minsky?", which seem to focus entirely on Maxwell's behavior rather than telling us what Minsky's response was.

(For the record I think Minsky's conduct -- in continuing to associate with Epstein after being offered sex by a young woman on Epstein's private island and then continuing to host conferences there after Epstein's conviction -- is terrible either way, but agreeing on which facts are actually known seems important.)
I found the 4+1 architecture docs very helpful when working with a recent client. https://en.m.wikipedia.org/wiki/4%2B1_architectural_view_mod.... What I like about it is that it separates the architecture into four views each for a different audience
I was born and raised in Brasília, currently living in New York. The city is indeed unique and beautiful and building it in about 4 years is an incredible feat, but the airplane-shaped urban design is terrible.

It is easy to cross the city from east-west but quite painful to do so north-south. Things are quite far from each other, so it isn't common to simply walk: you either drive or take a bus (and the public transportation system is awful) even for the most mundane things. Retail suffers a lot because there is simply not enough people walking close to stores. No day-to-day coffee shop survives because people don't take their cars for a regular coffee (only gourmet ones thrive). Even worse, the city is more or less sectorized (hospitals, government buildings, hotels, industry etc are clustered in specific zones), which drives up the number of cars in these areas.

Also, the city was planned for ~500k people, up to 1M. The metro area currently has 3.5M inhabitants and is one of the fastest growing metro areas in Brazil. Since the airplane sector cannot be modified, most people end up living in dorm-cities around Brasília even though 95% of them work in the airplane. A commute of 20-50km is pretty standard, so the traffic during rush hours is horrific.

At the end of the day, in my opinion, the design really influences how people behave in the city for the worse. Since I left Brasília to live in "normal" cities, both in Brazil and abroad, I came to the conclusion that Brasília became a failed experiment of the Brazilian modern architecture and urbanism.

Feel free to ask me anything about my hometown or even disagree with me if you also lived in Brasília!
Too bad the scum bag wasn't fired for not following the company's rules about not having romantic relationships with subordinates.
"Security" in the context of a game console manufacturer means its users are unable to execute unlicensed code on it. So if Spectre or Meltdown are a concern, the system has already been compromised. It's not another layer on the onion, the onion is already gone. Security on a console is like a safe that contains the key to your Bitcoin wallet and the combination to the safe.

Usually there's SOC that manages IO, and the ROM contains a key/publisher cert. To run code on the main CPU, the SOC has to bless it. No code other than what's on the SOC's EEPROM can run on the EEPROM. And flashing the EEPROM requires the manufacturer's key; you load a potential image into the SOC's RAM, it verifies the image, it flashes the image.

Getting unlicensed code to run on modern consoles is generally more difficult than jailbreaking an iPhone. And even if you get your code to run by tapping the bus or whatever, there's no data in main memory that's worth stealing, nothing that could help you get a persistent break or anything. The valuable data lives in the SOC.

Preventing Spectre/Meltdown is less important than the extra 2-4% performance.
Deals take a lot longer than 7 days to close-- especially real acquisitions, but even asset purchases usually take months.
After using TOTP like Google Authenticator since around 2013, I now think the friction needed is just too great. Especially for banks which log you out after 15 minutes or so of idleness. Google doesn't do that.

Not to mention Google Authenticator deliberately prevents these stored tokens to be backed up and transferred to a different device, which makes upgrading devices troublesome.

I wish everyone would start using Yubikeys. WebAuthn is now widely supported by browsers.
> Not something you've always done

I recently donated to TeamTrees. I'm looking for other places to donate that will have significant impact. This is a guess, but I think that charities are likely able to make a bigger impact per-dollar than I can by trying to decarbonize my own lifestyle. I found this[0] Vox article recently and the first two organizations look compelling. I need to do more research, but I'm hoping that they're making significant differences and that I can help just by donating regularly.

That said, I'm still considering buying an electric car this year. I at least want to contribute to having fewer ICE cars on the road. I know there's a difference of opinion on whether buying a new EV actually helps...short-term, it may not, but if nothing else I'm supporting the industry's growth, and long-term hopefully it does reduce my own personal emissions. And, locally, I'm just tired of inhaling exhaust...

[0] https://www.vox.com/future-perfect/2019/12/2/20976180/climat...
They make their money from commissions, not ads or personal data.

They've been audited by at least one security firm per the article, and their privacy policy https://www.joinhoney.com/privacy says "We do not sell your personal information. Ever."

Anyway they only have one permission on firefox and the usage for that permission Mozilla mentions is exactly what they do. https://support.mozilla.org/en-US/kb/permission-request-mess...
Consumer Reports is non-profit and purchases all of the products it tests. Its revenue comes from subscriptions and grants/donations, not advertising or commissions.

https://www.consumerreports.org

Some U.S. public libraries offer access to Consumer Reports for free with a library card.
But our unicorns!
If you use it normally (1-2 drinks or less max daily) it doesn’t seem like a drug to me. Basically a perhaps mildly unhealthy food item that makes you a bit more social for an hour.
What parts of the United States remind you the most, and the least, of Brasilia?
Albany Airport, New York, Pays Ransom After Being Hit by Cyber Hackers
That's the Miami Herald misunderstanding the deposition, I believe. The actual deposition talks about her being directed to offer sex to these people, but doesn't say explicitly whether they accepted it.

Example quote from the deposition: "Where were you and where was Ms. Maxwell when she directed you to go have sex with Marvin Minsky?"
They killed Aaron Swartz after all.
I'm not sure that the standard socket is so important. I don't remember ever changing the CPU on a motherboard: by the time significantly better CPUs are available, they need a different socket.

An AArch64 desktop could be built in the same way that the Raspberry Pi was built, just with a higher spec CPU and more connectors.
It's not that crazy. In other fields, there are stores for "alternative ___". There's a record store a couple blocks from me which sells every physical medium except CD. There's a car dealer which sells cars for every fuel except gasoline. There's many restaurants which serve foods with every ingredient except meat. There's government departments, education departments, and stores which deal in every language except English.

When one way is dominant, it's not uncommon for all the others to get rolled up into an "alternative" grouping. Any one of them by itself would be too small to amount to even a small store, but all of them together are a decent set.
Indonesia as well:

https://www.theguardian.com/world/2019/aug/26/indonesia-new-...
The odd thing about SMS 2FA is the amount of critical services that rely on it as the only method of extra protection.

You want your: bank, utility provider, entity-that-has-lots-of-personal-data-on-you to offer other secure options.

This might be a costing issue though. When your customers number in the millions, your call center is probably handling thousands of "im locked out" issues per day and these need to be handled in x-minutes. Other security options might cause the time meant to handle these scenarios to increase and SMS is generally 'simple' compared to them.
This has been posted half a dozen times, but now gets 250+ up-votes and 150+ comments?
I would make the same critique about all American cities with their grids and wide roads compared to the character of old European cities. Having spent years living in London, San Francisco, and Brasília, I definitely consider London the superior city. But between San Francisco and Brasilia it’s not so clear. Brasilia for all its flaws is much greener and pedestrian friendly.
More than that it's the amount of work and cost. Average consumer doesn't care about it so why fix something that's not broken. People won't pay more for it
Ah yes, Woody Allen, the well-known judge of character when it comes to matters of child sexual abuse.

The "former prime minister of Israel" was probably Ehud Barak, who solicited $1 million in seed money from Epstein for his startup Carbyne, received large political donations from Epstein's benefactor Les Wexner, and was a frequent guest at Epstein's NYC mansion.
Only if they neglected to offer backup codes (which anyone who does TOTP should).

Otherwise, you can just grab a few backup codes out of your fireproof safe and register your new totp code, or go to the bank and get them out of your bank vault.

Sure, the fireproof safe costs as much as a few yubikeys, but if you go the yubikey route you both need the yubikeys and a fireproof safe and bank vault for your spare yubikeys too.
I mean yeah, people might want you to do that, but you dont have to.

Its your life, and your code. You can post it, and keep it messy if you want to.
I asked them over twitter back in may.

https://twitter.com/skunkworker/status/1131297869703438337
How big is your project and is it on the level of scale of Rust
The movie Gattaca showed in detail how routine spoofing of a variety of IRL DNA samples could work.
I've been using TSM for about three months now. Prior to starting, I was a frequent binge drinker and experienced significant memory loss from drinking once per week on average. After three months, my interest in drinking is very little to none. TSM gave me my life back.

If the headaches you are referring to are hangovers, this is common and happened to me. The community often refers to them as "Nalovers". Those stopped for me when my consumption got down to a safe level. I recommend sticking to the method if it is just that your hangovers are now much worse.
The only good solution at this point is to legislate cell carriers to make SMS more secure. Everyone perceives it as secure, everything uses it for auth, and it aught to be secure for its own sake.
> It's really hard to know what's a good price for a mattress.

I don't understand this at all. You can Google and have all the prices right at hand, so comparison shopping by number isn't hard.

You can go to a mattress store and lay on a handful of mattresses and figure out pretty quickly what you like - is the pillow top or foam too soft? Do the coils poke too hard? Too firm? Too heavy for you to move when you need to do the sheets? - You admitted to doing this yourself.

I could never see myself buying a mattress from a company like Casper personally. Returning something like a mattress because you don't like it has got to be a level of hassle that I can't even begin to imagine being worth it, vs just making sure you bought one that you're comfortable with in the first place.
Apple needs to help move the needle on 2FA/U2F/webauthn. Unfortunately you can even create an apple Id without a dreaded SMS "authentication".
Don't give them any ideas...
A tire tax would incentivize people to drive on worn tires longer.
My mother died 6 years ago in her 60's due to alcohol related complex health issues. Se was psychotic for the last months of her life, died of a cardiac arrest, and a had an advanced form of pancreatic cancer.

At one time she developed severe dementia due to neurological complications from alcohol. She recovered, but started drinking again after that.

I'm not saying what you should feel, but I know the frustration and anger a relatives addiction can cause.

Personally, I'm now fine with the fact that a person can destroy their life.

Because the option would be, that there would be an arbitrary threshold beyond which a persons right for self determination could be taken away, and unless it's bleedingly obvious (as in they are a vegetable) it's most likely an arbitrary and an unfair arrangement.

We are not yet masters of the universe. We are not even masters of human lives. But we've come up with societies that allow individuals freedom to live the lives they choose. This freedom includes the freedom for self immolation. The freedom for self immolation is the price we pay for all the other freedoms. Each one of us need to decide for themselves is this price worth the cost. Personally, for me, I say - yes it is. The price is pain. But the alternative would be even more unfair, and more painfull (i.e. there would be arbiters in the society with more or less arbitrary power to curtail personal freedom due to arbitrary life choices they made).
The the former Israeli Prime Minister probably being Barak; Israeli media has uncovered that Epstein gave him use of his NY apartment, and millions in investments.
Airtel also makes you to accept that SIM Swap request on old sim if you are not coming in person to a store with ID documents; most of which is Adhaar number verification.
There's something to be said for computers that came with BASIC built in. But you know, if you have Windows and Office, you still have BASIC built in...
I have few personal google apps grandfathered account, & I think it sends an email to all admins if you do not log into it for about 10 months.
I thought much more highly of him when I didn't work in games and I was a web developer. Now that I work in games I don't think very highly of him. He's an uncompromising fundamentalist that sends would-be game developers down impossibly unproductive paths of worrying about minutia that will never matter to their projects before they've ever built their first game. He's famous for being a rude guest in both academia and in conferences. He's basically the equivalent of someone that says that you should NEVER use node because node_modules gets big and if you're writing a server it should be in Rust and if it isn't you're bad and you should feel bad. His worldview does not at all take into account the differing problems faced by differing people, having differing access to resources and differing budgets and time constraints. He is _only_ concerned with how you should work if you have no deadlines, an essentially unlimited runway, and your most important concern is resource efficiency. For most games projects, the production bottleneck is not CPU or GPU efficiency: it's the cost of art production. What he has to say is, for the vast, vast majority of people, not applicable. He is, essentially, an apex predator of confirmation bias.

The thing about Jonathan Blow is that for a lot of people, he's the first graphics-focused outspoken programmer that they run into and so they think he's some form of singular genius. He isn't.
Now, on the other hand, Tesla wasn’t a compliance car manufacturer for-hire, EU regulations would still make polluting cars more expensive than Teslas, and manufacturers would have an even greater incentive to shift to less polluting cars more quickly, resulting in less overall pollution in the air.
It's a traditional pressure cuff in watch form. Is It possible to measure blood pressure optically/continuously?
The problem here is not SMS itself, but that it's trivial to socially engineer most operators into transferring somebody else's number to you.

(FWIW, SMS is also insecure in that it's fairly easy to passively snoop on SMS comms, but that's a separate problem.)
Of course it doesn't make you a bad person. In fact, there's a good chance you're a good person, and if you have accidentally made someone uncomfortable, it was through something they could easily put their finger on; you said something, you reminded them of something, etc.

This doesn't sound like it's that. He does, after all, call it 'inexplicable'; literally unable to be interpreted or expanded upon. It was a 'gut' feeling, a combination of all the things you pick up quickly and instinctively, the summation of which is discomfort.

That _also_ doesn't mean the guy is bad, or that it's necessarily fairly representative of him. Just that he gave the OP a feeling of discomfort.
I wonder how that looks like for bank apps? Banks could (and I’m sure they have) offer their own TOTP client, perhaps a bit more integrated. I’m sure that would be easier and offer a better experience than downing some random. "Google Authenticator" app.
All modern smartphones came out after XP SP2 so the industry knew the problems with exposed ports - I don’t believe any shipping smartphone in the US today comes with any processes with open listening ports by default (even carrier bundleware) - please correct me if I’m wrong.

That said - because of the sheer number of phones in existence, on IPv4 you’re guaranteed to be running behind a giant NAT operated by your network carrier - and on IPv6 the address space is too big to port-scan (at least) but while it’s no help if attackers know your address - I understand there’s still a mix of carrier-based and handset-based network lockdown going on.
You're right about the socket, but the problem is that every chip/board basically needs a custom bootloader - you can't just plug in a USB stick with a Debian AArch64 installer and go to town, you need a custom packaged blob from the vendor, which usually comes with their own blessed Linux distribution (e.g. Raspbian), and you're out of luck if that doesn't meet your needs.

If this model works for you, then yeah, a Raspberry Pi or a similar board could work. I've been hearing pretty great things about the new Pinebook Pro laptop.
No iphone currently sold is connected to its modem via DMA. They've all got some type of iommu.

Given that most traffic is encrypted (eg any major website via https, or mail provider with smtp-over-tls, or most apps via https), a baseband vulnerability isn't a great deal of help without an iommu bypass (AFAIK only one has ever been publicly disclosed for ios, and it took the researchers over 6 months).

IIRC correctly (from a few years back) the pixel phones also have one, but most Samsung phones did not.