skysight-inc/HackerNews huggingface dataset:
I mean, for the kind of highly-trusted "ruggedized" scenario represented by an ATM, one would hopefully get their hardware from a manufacturer that exists under a political regime they have no enmity with, or are perhaps even allegiant to. (That's half the reason many US government officials and contractors used Blackberries: the US government could—given the political realities of the time they live in—trust a device whose chips were verifiably made in Canada.)

For the workstation scenario, though, you don't really care who has the "ultimate" root, just so long as you can get whoever that is to help you to stop a particular class of attacker (e.g. your own employees, contractors, and any "visitors" in the building) from getting root. It's fine if the PLA has root on the boxes, because the boxes aren't actually storing trade secrets or anything; the point of having pseudo-root on the boxes is, in fact, to enforce a security regime that ensures your employees don't store any trade secrets on the boxes!

See also: being an "organization owner" in an enterprise SaaS service. Sure, I can't stop Google from snooping my GSuite data—but I'm also paying them to host that data for me, and e.g. selling it would be a violation of the contract. Even though they can, in theory, do it, they're economically incentivized against doing so (and doubly so, because if they did it once and got found out, they'd never make any GSuite money again.)

> Unless you're running something like a Raptor Talos II, You don't really have the root of trust.

Mind you, there are "multiply-descendant root-of-trust" setups that are quite common these days. In modern Apple devices, you've got an Intel processor doing most stuff, but then the Apple-controlled T2-chip domain doing encryption stuff, with its own boot chain completely isolated from the Intel one.
Big Tech Companies Founded During Busts and Recessions (2011)
RPZ Zone Files to Block DNS-over-HTTPS
I did something similar to reduce my snoring. Many people do it to help prevent heartburn at night. Makes one wonder how humans slept in nature before beds became a thing.
If you want to use Tor in another country then come through a border, what's the advantage of HiddenVM over putting Tor on a bootable thumb drive, using it, then throwing away the drive before crossing the border? Just the persistence?
I am fine with Facebook petitioning a court of competent jurisdiction and following legal due process to stop phishing activity. I am glad that Namecheap is not giving up this information without a proper court order. I am not happy with Facebook making this PR release trying to paint Namecheap in a bad light because they are standing up for privacy. This PR release is completely unnecessary if Facebooks intentions were simply to stop the phishing attacks.
There is no fair context for that under the law. The name is trademarked so unless you have approval from Facebook to use their trademark then using it is not legal. It's not that complicated.
At the previous company I worked it turned out pretty well. We used Grafana (which is OpenSource) for our high volume in-app analytics and servers monitoring. It took a bit to implement all the graphs, but we had exactly the graphs we needed. Even if we went for a SaaS, we would still have had to implement those custom graphs in their interface.

We have also paid (a lot) for DeltaDNA to have more insights into monetization, but their platform was a lot slower than our self-hosted Grafana and they even forced us to use our own S3 buckets to store the data (set them up and link them) due to GDPR (they said). Not only that, but creating custom graphs in their platform was very tedious and a bad experience overall.

I am not saying it makes sense to always go self-hosted, you are right that depending on the application you want to host you might need less or more technical knowledge and maintenance.

I would never recommend (for the average individual/company) to self-host email servers, CDNs or Slack chat server alternatives, but I do think for some applications it's worth the time, for example static pages (instead of using a website builder get a theme and host it yourself) or analytics.
Oh yeah you're right, I read the comment above the query and assumed he wanted only customers which had orders.

Could just modify it to exclude the orders above 100 ("where not exists"...), no?
imo, this is part of a more general problem with emojis. the "name" of the emoji does not always correspond to the image very well, so you have to confirm that the image actually conveys the tone you are going for. then as the recipient, you might sometimes wonder whether the image or the name of the image carries the intended meaning.
You forgot the buses, the IOMMU and so on.
Taskade (YC S19) Is Hiring in San Francisco, Singapore, and remote
A thread from 2017: https://news.ycombinator.com/item?id=15035419
\ is a backslash

/ is a forward slash, a.k.a. simply “slash”
What's the sand and gravel being used for?
That was what I looked at yeah, and I appreciate that it's actually a Netflix gag site for Bojack Horseman but still.
Conferences Cancelled, Postponed or Delayed Due to Coronavirus [Covid-19]
> But what does Facebook want, names and addresses?

Uhhhh, to help in the investigation and arrest of the ring of people that are scamming and fishing Facebook customers?
I agree that the police work and charges appear to be pretty flimsy, based on what I read in the linked articles throughout this thread.

But that's all orthogonal to the feasibility of such a gun.
Universal basic income would be an acceptable approach imho.
You can acclimitize to the cold, up to a point.

I occasionally swim in lakes and don't like to swim below 15C, even with a wetsuit. But some people who swim all year round can handle much colder.

I remember having a BBQ with some British and Brazilians guests here in the UK. The British people were wearing t-shirts and shorts and saying how lovely it was. The Brazilians (who came from the very hot North of Brazil and were only visiting the UK briefly) were wearing jackets and shivering.
Pyup.io Is Defunct
The Python vulnerability DB of pyup.io is no longer maintained (https://github.com/pyupio/safety-db/issues/2282, https://github.com/pyupio/safety/issues/240), and support is not responding to issues or emails.
PMID: 25785977

>What’s surprising is that the trailing edge of old
insulin products did not generate a market for
generic competition but rather became a set of
obsolete products that were promptly removed
from the U.S. market. Pork and beef insulins
are not merely underutilized, they are unavailable for human use in the United States. Even
when practitioners prescribe NPH and R insulin
in place of insulin glargine and insulin aspart,
these cheaper prescriptions are filled with newer recombinant products sold under brand
names. And yet on the whole, it’s hard to say
that contemporary patients who cannot afford
their insulin (let alone the patent-protected glucometers and test strips required to adjust the
dose) are well served by having as their only option an agent that is marginally more effective
than those that could have been generically
available 50 or 30 or 10 years ago, had generics
manufacturers introduced cheaper versions when
patents expired.

I shouldnt blame the doctors, my comment was a little facetious.

Some "low cost" versions did come out in 2019, but it feels more like the diamond industry selling both natural and lab made diamonds at different price points.

Back to my original point, Doctors seem to agree that analog insulin is preferable to older formulas. - https://www.healthline.com/diabetesmine/why-not-more-afforda...

>Since we’re talking about cheaper insulin, Novo Nordisk’s Novolin ReliOn brand deserves a mention here. Sold for just $25 a vial without a prescription at Walmart, ReliOn includes “Regular” (short-acting), NPH (longer-acting), and 70/30 (biphasic insulin), a combination of the other two. These ReliOn products are not generics or biosimilars, but rather older “human” insulins — as opposed to the newer “analog” versions being produced today. Many patients and doctors agree that these older formulations clearly don’t provide the same level of blood glucose management as newer insulins.
But if you’re forced to choose between using them and doing without or rationing insulin, these older insulins are certainly preferable.

The risk is real. https://www.usatoday.com/story/news/nation/2019/08/09/man-di...
Neat! I personally prefer the very quick vertical tab method: Ctrl+L.

Quick and easy.
For any other confused Americans: "jumper" = "sweater"
Because you clearly know better.
Shouldn't law enforcement have that information rather than Facebook? Or does Facebook see itself as the internet police now?
The problem isn't too many events; it's too many words.
I have a little experience and a bunch of contacts in the wine industry. I’ll look into that.
> So a family that needs to fit three kids across, only really has the choice of SUVs

All 3 of my kids fit with booster seats in my 2005 Prius (deceased) or Ford Focus EV. The 5 of us regularly go out in the EV. It even worked when I had 2x slim carseat (Diono Radian) + booster.
You still are just a trust leaf, not the root. The root is a ROM you cannot read or change on the Intel side, so no trust control there (only delegated which for some people is no trust at all). With no ability to verify it, an exploit like this would not be something you can detect and as such breaks the trust chain.
One word:

Heat.

Smartphones are decently powerful, but they typically only use the CPU in short bursts. This has allowed them to get away with being extremely skimpy on the cooling, which is good because a phone that needed a heat sink and fan would be incredibly bulky.

If you ran something with sustained CPU usage like F@H, within a minute it would be considerably warm and probably have crazy amounts of thermal throttling.
I had a manager that forced me to take a day off at least once a month and I still owe them for that. I dont do it every month now, but I definitely take the time to rest more often and in the end I am much more productive.
I know the feeling.

Personally, I find it easier to commit if I know exactly what I'm committing to. So, for example, instead of "go to the gym regularly", try "go to the gym three times a week".

With dieting, small steps can be very helpful. For example, here's a commitment you could make: at least once a week, at the grocery store, buy something healthy that you don't usually eat, and then eat it at one meal.

And don't kick yourself when you find yourself off the wagon, just get back on it.

Good luck!
I'd say it's a little different if you're running a blatant phishing site, it's more than just trademark infringement
Yes it was more of a general question, exactly what you articulated in your last sentence. Thanks.
I hope not, or I'll never read a single web comic, photo journal, or blog ever again, including corporate blogs.
Sorry, who is "we"? And got a writeup anywhere?
So, this is simply a civil issue in Facebook’s eyes?
Dataset of COVID19 in South Korea
"UBI is a political decision which is renewed with every government"

If this is true than implementing UBI will be more problematic than I thought. All UBI proposals so far call for all other financial safety nets to be removed in order to finance UBI. Managing that will be a nightmare if you can just cut off UBI, then you have to spin up everything else again. I imagine UBI to be something similar to how the pension system is, once in place it stays there forever-ish (meaning that it can potentially collapse).

"we do know how people behave when they are born with a million dollar bank account, and it's relatively very rare that they are criticised for how they choose to live" - that's an excellent point.
the way to go here is probably creating an "administrator" account which is used by those merging scripts, and allow push access to protected branches for administrators.
We originally built OpenFaaS for Swarm, then moved to Kubernetes and support both now. The complexity of K8s is harrowing, but by and large works well, if you can keep up with the pace of change. Try running a controller you last modified 12 months ago on Kubernetes 1.17.

Now we've spent time looking into containerd and trying to provide microservices/faas on top of that instead - without the clustering (https://github.com/openfaas/faasd)

Something I do like about K8s is the ecosystem - in 5 minutes I can automate TLS with LetsEncrypt on a managed cluster.
On a less serious note, self-hosting also feels more like you do own your business, have full control over your products and are not just a merchant buying low and selling high.
That would more accurately gauge the effect on how much it disincentivizes, and how it changes the lifestyle of the recipient.

It does very little to test economics. Perhaps UBI leads to a lot of people deciding to tend bar at the local tennis club, volunteering for the job. Maybe introducing UBI across a large area has marked effects on gym memberships.

Those seem easier to test if you put a large area on UBI for a short-ish term (though I admit I haven't seen any UBI research that analyses such social effects - perhaps somebody knows of some?)
Usually when people think they're "just overtly shaming", they're also posting flamebait. Please leave the online callout/shaming culture behind when you step in here, and follow the site guidelines regardless of how you feel about appalling behavior. You may not owe Google better, but you owe the community better if you're posting here.
There are some interesting ideas around using quantum computers for verifiably-random numbers, including a proposal from Scott Aaronson himself: https://www.quantamagazine.org/how-to-turn-a-quantum-compute...
Personally I think a fair amount of the worst decisions people make tend to be motivated by an irrational sense of guilt.
We do lots of things, but one of the most important steps is an in-depth role-play where we go through numerous scenarios. We're not just looking for the knowledge (which given their qualifications and experience they should have) but also for their ability to use that knowledge in the context of a parent's own goals and philosophy. If someone brought their own philosophy or values, and not just their experience and expertize, then we wouldn't bring them on.
This is what I find so baffling - he didn't need the money and it seems like the whole Otto pursuit had a significant enough downside risk for someone who was already quite wealthy that I'm surprised he was willing to take it.
> if the provider has to re-encode the content for each streamer

There's no need for that, the CENC standard has more robust watermarking support, but it's not really used in practice yet because it's not commonly supported by browsers and possibly other clients.
Long time ago, my friend was building an accountability social network/forum. The basic idea was that you would pair up with someone who would call you/Skype with you. Having to answer to a real person may motivate you to work on your goals.

This might be a good startup idea if you can manage payments and phone calls where people don't have to share their numbers.
No, because you can be educated in any topic up to and including the history of the Kardashians. This in no way contributes to a better functioning society. Your entire premise that education = more intelligence is completely wrong. Would you argue a person educated by extremists correlates with a better functioning society?

The only thing that betters society is the positive application of knowledge to creating something of value for others. It's not enough to learn a topic, you must actually apply it make a difference.
This is why Yang wanted to make it a choice. The average welfare recipient is getting less than $1k/mo in help and are limited in how they can use it (food stamps can't buy the car repair you need to keep your job).

But I do think that is is an overstated concern __because__ most welfare recipients are already receiving less assistance. Btw, there's capitalist oriented arguments for single payer options that libertarians are in favor of (tldr: health care operates under a network effect and single payer can minimize individual and public costs).
"This week we filed a lawsuit in Arizona against Namecheap [...] for registering domain names that aim to deceive people by pretending to be affiliated with Facebook apps."

The press release says "for registering domain names" so I think the original title was accurate.

Previous similar court case where Verizon won a judgment against OnLineNic on the basis of trademark infringement: https://dockets.justia.com/docket/california/candce/3:2008cv...

So it doesn't seem like this suit is just about discovering the identities of the registrants.
I think it may depend on the company and on how these "averages" are calculated.

For a company where almost all the workforce is white collar then yes, $10K seems reasonable. In fact, I'm surprised it's not more.

For a company like Wal-Mart, I'd be shocked to see that much spend on software subscription.
Sweden has 10 million people. The U.S. has 300 million.
That's great to hear, been a while since I've been in the sector. As for breaking into it via a SaaS, it makes sense that they would build it themselves. Seems like operators all do the same thing but differently.
> personally don't find the maintenance onerous.

I don't deny that, and I dream one day of having a well stocked larder and fridge, better skills, and the better ability to look after and cook with and look after seasoned iron. For now my cheapo 4L enamelled dutch oven works for me.

I dunno if you follow "Glen and Friends" on YouTube, but he's done the odd video on getting started with and looking after seasoned iron, the process of which I know you're well aware of, but I'll leave it here for other readers, but would be interested in what your take is?:

https://www.youtube.com/watch?v=bFXTecR4-Hg
What is "Mutual Credit"?
Or in other words: fire your marketing department.
U.S. to Hold Tech Firms Accountable for Spread of Child Sex Abuse Imagery
On this topic, I'm a single vehicle family with two toddlers. We have a Nissan rogue and are very happy. But I've been looking at possible upgrades in size as the kids get older and its stupid.

First off, the Rogue is considered a "compact crossover" and yet it has far more cargo space than the Murano or Pathfinder. I don't get names. It's like cars are named like video cards. So confusing.

Also, if I do want to go up in size, I have to go way up. And suddenly it won't fit comfortably in my garage. And it's annoying. I don't want a six cylinder engine. I don't want a tow kit. I just want a rogue with 20% more trunk so I can fit everthing a modern parent needs for a trip with two kids.

Sigh. Is it minivan time?
I understand this complaint. But Facebook attacking Namecheap in a public post for doing the right thing is the wrong way to go about changing the system. They should instead petition ICANN and/or their political rulers to change the process.
Surely you jest? If that was a serious comment then you obviously have no understanding of the business and legal requirements for payroll systems.
There is a ton of this kind of work available. I run into various people online who need a simple automation task done, but either don't know where to start, or start and don't know how to make progress.

e.g., a month ago I made a small machine for a dental research lab that basically added a feature to a piece of test equipment. The feature was so basic and obvious, I have no idea why the equipment didn't already have it. But it was an opportunity for me to step in and make a small piece of hardware to do what they need at little cost.

A few months before that I made a GUI for a customized bit of veterinary equipment, and so on... These jobs are out there. They're quick and easy for an experienced engineer but the problem is finding them consistently. My main focus these days is trying to do just that.
Normally, I'd agree with you - however, my org just had some minor drama over someone attempting to classify a certain piece of tech as "dead". The people who were invested in that tech were riled up.

It's difficult to know with certainty the motivations and emotional attachments people on either side of a debate will have, so it's sometimes easier to avoid some of the more "loaded" words.
Just a small remark: I think usually not the X multiplier is the important factor in making the decision to go self-hosted, but the price, privacy, lack of features or poor performance or availability of the service.
Sheets will fit a lot of excel use cases for those not doing serious heavy lifting with it.

FWIW, I'm a software engineer and our IT department actually let people opt out of Microsoft office if they weren't using it to save money, and encouraging people to use Google Docs/Sheets (as most do anyways). I'm guessing a good deal of software engineers did that but there are plenty of non-engineers that probably also did outside of finance / some sales people.
It was the ME firmware that was compromised with this CSME exploit.

Of course, few people notice if the ME firmware is updated, and Intel doesn't often update deployed ME firmware. But it verifies the BIOS, and the BIOS verifies the kernel.

And that's the point where people start caring. Hence I used the kernel as an example.

Signal is thinking about using SGX, but they also have other ways to grant the user reasonable security. After this CSME exploit, Signal may reconsider using SGX.

Either way, my point still stands: verifiable builds do not rely on trusted computing at this point. I hope they never do. It would be twisted logic to tell the user the only way they can have their software freedom is by asking the trusted computing infrastructure to verify it for them. The trusted computing infrastructure being absolutely as opaque and locked-down as possible. Trusted computing is not reproducible! Its designed-in purpose is to be opaque, to hide things from the user.
It's a slang term for paperwork, it means a mechanic with dirty hands had to sign something.
Code should be the one version of the truth, don’t add comments
What's the purpose of sealing?
it's opt-in by default with an opt-out which seems reasonable. If you don't want ads, dont opt-in
I'd be curious to know if (and to what extent) these observations change the mid- and long-term impact of global climate change. That is: does this mean that the SARS-CoV-2 outbreak effectively bought us additional runway before we hit the "point of no return"?
https://web.stanford.edu/~nadal/A-Decentralized-Data-Synchro...

https://era.eco/

http://axe.eco/
"Invest" is the correct word. You take on a complex software with zero guarantees, zero support, outdated documentation and basically have to do it all yourself: analyzing the quality of the thing, making it seaworthy by developing a deployment if needed, testing it, migrating it, etc etc. The boss's boss's eyes glazed over when I said free and open source but he got a reality check when I told him no, significant cost accrues elsewhere.
I use spreadsheet programs all the time during software development. it's a great way to quickly look at data or do some calculations.

I use Numbers. Is it as good as Excel, not really, but it's good enough (although data import is still a bit lacking), and it's not a subscription.
Lacking Competition, Cable Companies Quit Investing in 2019
Probably using a node.js background, websocket, and DOM-manipulating JavaScript.. or WebGL for performance..
I was thinking more about investigative reporters and news outlets than buggy-whip makers.
I'm surprised. I've lined up before races in the cold and I've found an emergency blanket keeps me warmer than a trash bag. I've tried both. Neither beats used sweats from Good Will, but that's too much to run with.
The blobs you have to include in Coreboot for modern CPUs don't have much to do with technical restrictions. A pwnage of the ME does not do the reverse-engineering-and-rewriting effort on the FSP for you.