skysight-inc/HackerNews huggingface dataset:
Show HN: Panther v1.0 – Open Source, Cloud-Native SIEM
Hey HN,

My name is Jack Naglieri. I’m the founder of Panther Labs - an SF-based cybersecurity startup. Prior to Panther, I was an engineering manager at Airbnb. Before that a security engineer/analyst/forensic analyst.

Today, I’m excited to announce Panther v1.0, an open source, cloud-native SIEM:

http://github.com/panther-labs/panther

Teams can use Panther as an alternative to traditional SIEMs like Splunk.

Panther is the culmination of our team’s experience building security tools at scale, including StreamAlert at Airbnb and critical internal monitoring systems at Amazon.

Panther runs entirely on serverless to enable small teams to detect threats at scale. Our backend is Golang and our frontend is React/Typescript. Panther is also self-hosted and uses Python3 for flexible detections.

At a high level:

- Panther receives security logs

- Panther baseline scans cloud infra and determines security posture

- All data is saved to your data warehouse (powered by Athena/Glue/S3)

- Alerts are dispatched to your team via Slack, PagerDuty, etc

- Automatic remediations can also be applied to fix infrastructure

Panther v1.0 includes support for:

- Analyzing logs from AWS, OSS tools such as Osquery, OSSEC, Suricata, and more

- Threat hunting on all your security data with standardized fields (IPs, domains, etc)

- Real-time cloud configuration monitoring

- 150+ built-in detections

- A UI for creating, updating and tuning detections

To get started:

- Quick-start: https://docs.runpanther.io/quick-start

- Read our v1.0 announcement: https://blog.runpanther.io/panther-v1-open-source-siem/

- Register for our webinar tomorrow: https://webinars.runpanther.io/panther-101

You can also find us on Slack (https://panther-labs-oss-slackin.herokuapp.com/), Twitter (@panther__labs), and Github (github.com/panther-labs/panther).

We’re happy to answer your questions. Just drop a message here.

Thanks!

We also send our best wishes to those affected by COVID-19
Show HN: Covid Almanac, a Reference of Resources
Apple did feel good enough to launch new hardware, which is now available. Seems to me it would have been smarter to wait and feed off the momentum of people wanting to touch the goods immediately after they were announced.
HTML 4.01 is relevant to HTML5 in that it was the direct precursor to HTML5.

Put another way, when I learned a lot of the HTML we all use every day there was no HTML5.

By agreeing with the original reply and looking into why, I saw that it was defined in a specification I have read several times (HTML 4.01[0]). I knew CODE being vague was a thing and was part of why I didn't use it much, so seeing SAMP was similar explained why it would have slipped my mind or I totally glossed over it.

Another reply pointed out that <pre> is the block-level styling element I want and that <code> or <samp> make more semantic sense inline and nested. This does make sense to me and I thought it was funny that in a technical document like an HTML specification they would note the importance of the elements in technical documents but not give any example or further explanation.

Yet another reply corrected me again, that SAMP is defined with a monospace font-family in the CSS2 specification[1]! Now I can complete why I used to be wrong and now am not: <pre> always worked by default to get a monospace font and preserve literal whitespace in rendering. <samp> may have, I'd be interested to know but not interested enough to do research into old browsers' specific rendering. The entire <samp> thing was effectively unknown to me. <code>, while similarly defined in HTML, did not have that default font set and thus would not work in a spec-compliant browser by default unless they extended the specification in that browser. That is why in my head I used to prefer <pre> over <code> and that was all; and also why I enjoy posting in communities like these!

> If I'm not mistaken, even Google amp is considered valid HTML5?

So far as I know (I haven't kept up with this level of detail in AMP) it is entirely implemented via some subset of HTML/JS/CSS: presumably any Google AMP would then include valid HTML5.

[0]: linked in my original post

[1]: https://drafts.csswg.org/css2/sample.html
A more recent post of his that specifically mentions the SciAm article:

https://www.math.columbia.edu/~woit/wordpress/?p=11690
Show HN: Open access platform aggregating clinical trials for Covid-19
Those circumstances are that we dont know Ebola is spreading. Actual circumstances are quarantine, disinfection and other intentional measures to stop the spread.
Ventilating a patient with active pleural effusion (fluid in the lungs) is a finicky process. The vent alarms constantly, and the patient frequently needs to be suctioned, which is a team effort often involving several bedside nurses and a respiratory therapist. Even if we stock up our ventilator supply, I have no idea how we will get enough people to operate them effectively.
That's a great write up, thanks for sharing.

I'd add that a genius like Einstein would have thought of fantastic things wherever he was – it just so happened that this was the experience he was exposed to which led him to think about time and light, per your story.

I wonder what sort of amazing discoveries he would have made if he had been exposed to, say, biology and healthcare instead!
I did an HN post this morning about Disney having the best day in company history yesterday...there is no rationality or reason for this, and sorry to every HNer I already mentioned the Keynes quote about the market remaining irrational longer than investors remaining liquid.

But seriously we have so much in the way of resources, but instead the millionaires and billionaires are investing in a cartoon mouse and company that runs theme parks, hotels and cruise ships that will not only remain closed for the foreseeable future, but when they do open people will not risk going.

Its not just the public companies either, look at the university systems. Between just the top 10 schools with the largest endowments and they have collectively over $250B stashed away. 10 non-profits have $250B, they have labs and they have researchers at the ready...but how much of that money are they spending to combat this? How many of these brilliant minds are at work in the labs?

I won't even get into the government response...all you need to do it look at the President of the US who accepts and promotes medication based on his feelings and hopes and shuts down actual medical experts. It is all so ridiculous believing this is a manufactured conspiracy would almost be easier to accept than what is actually happening right now. But when you are dead, you will be glad you bought that Disney stock for under $100/share, it is after all a once in a lifetime opportunity.
If not, where is patient 0?
Everybody loves to talk about government overreach, but if a total war (such as WW2) strikes Canada, the US, or any other freedom-loving country, they will round up millions of young people, give each of them a rifle, and tell them exactly what to do, where to sleep, what to eat, and a whole bunch of others, and eventually shove them into a transport ship and tell them to run into a trench and start shooting people. Penalty for desertion is death.

Somehow, all of this is constitutional, and these countries didn't descend into Orwellian hell after WW2. Context matters, and desperate times often require desperate measures.

I consider quoting 1984 as a very lazy form of argument, because it can be applied to everything the government does, regardless of context. It has no predictive power, and is no better than Godwin's law.
Verena was my teacher, one the biggest influences in my life, and a good friend.
I think there are extremes here, and you and 'commandlinefan are on opposite sides of the extreme. I'm somewhere in the middle, in that I agree with neither of you.

Writing an Android application is not something that requires anyone to learn an entirely new skillset. At most, it's a programming language and a toolkit of difference for any experienced programmer.
> Absorbing star host

We are BORG

This is neat, like a text rpg or something

Is there a time constraint on the game? If I stay idle too long do I lose?
I think about it like this: what would happen if you did this manually, at the same scale? If I went around asking every single person you've ever met if they could provide any pictures in which you're in the background, and collected them all and sold them as a collection, i'd be borderline harassing/stalking you. Not necessarily straight up illegal, but maybe in some ways? That's what this is, digitally.
I love this, thank you. Sadly you have to hold the mouse button while moving the camera around but it's still amazing.
Looks like a bear rally:

https://www.investopedia.com/terms/b/bear-market-rally.asp

Some previous bear rallies have lasted for weeks (like in 1933)

There are some strong forces in the future including 5 trillion dollars in stimulus, a bottom forming in energy, and Saudi Arabia folding its hand (cards) within the next month. And of course the virus and its mostly predictable and a few unfathomable and unpredictable outcome possiblitys.
> Not if the features decrease the need for the App Store

Fixed it for you. It's all about profit.
I don't understand why string theory gets singled out for this. It is a theory of ultra high energy physics. No theory of ultra high energy physics is testable with current technology, or any foreseeable technology. At best we make inferences from natural experiments, and that is equally true of any alternative to string theory.
It's great design if you're trying to push Google products.
This is a preventable catastrophe, but prevention requires extraordinary measures.
It's more interesting than that even.

The study of Complex Adaptive Systems[1] is pretty fascinating, and is a somewhat systematic way of getting at the concepts being mentioned in this quote. It's definitely science it's just a different focus, where you spend a lot more effort looking at the emergent and often unpredictable properties of an adaptive system with autonomous components.

This isn't exactly some groundbreaking theory at this point, it emerged in the late 80's or so and had a mild pop culture moment[2] but it's still pretty handy for providing a framework and some language for understanding and discussing situations like the one described here.

[1] https://en.wikipedia.org/wiki/Complex_adaptive_system

[2] https://www.amazon.com/gp/product/B07WVV5J2R/ref=dbs_a_def_r...
One thing I didn’t mention in the article: we built a full emulated version of the watch at Pebble with QEMU and used it for the majority of our automated testing. We even allowed 3rd party devs to build apps against it.
Today, I think we’d be using Renode instead. By focusing narrowly on embedded, Renode built a simpler system that is very simple to extend.
Really cool! Add CS:GO to the list and you'll get hugged to death in no time!
Day 620 Emergency Mode
It's entirely possible these are being used by a static site generator or some such. It only takes a real repo to use GitHub pages.
Prince Charles tested positive for Covid-19, announces British royal family
Thanks! TBH I have heard of the ring but just assumed it was a scam for some reason, never really looked into it. Just bough one from your link. I've been looking for a tracker that's not a watch, and now that jawbone shut down there wasn't many options. Excited to try it out.
> To implement 32-bit + in hardware you need 31 full adders and one half adder, each of which uses multiple gates and depends on the result of the previous adder.

This is not how CPUs typically implement addition, or other ALU operations. Carry-lookahead adders have existed since the 1950s: https://en.wikipedia.org/wiki/Carry-lookahead_adder
Known2U | Full Stack Engineer | Full-Time | Remote | USA Only

Small bootstrapped company in the ETL integration space. Looking for a full stack developer to help us build out our platform. Our core technologies are built around the java ecosystem(e.g. spring boot, apache camel). Ideal candidate would have experience working with java and associated technologies as well as a familiarity with sql and javascript. Depending on your comfort/desire besides working on the core of the product there are opportunities to work with a modern javascript framework and to help with our cloud build out. Looking for a pragmatic individual to help us improve our product and process.

Contact: careers at known2u.com mention you saw the post on hn
"There’s an argument that “if there aren’t enough ventilators and patients are being turned away, I’d rather have a slim chance with a hacked solution than no chance with no solution. The reality is closer to “if there aren’t enough ventilators, a hacked solution will most likely do more damage than good, take up too much time from already strained health care resources, and could lead to death.”"

This is a difficult point for many people to understand. Sometimes the problem really is too complicated for a simple solution.
Honestly, I find the (as of now) guidelines quite clear:

> When remote work is not an option, include ONSITE. Don't include both!

Quite frankly, I'm skipping over job postings that violate the above guideline.
GAN Compression
Tenorshare iCareFone 6.0.1.24 Crack With Registration Code 2020
The 128-bit tag length, which offers less than 128-bit strength depending on the nonce size, makes GCM and similar AEAD constructions poorly suited for archival storage. If you want to store more data without rekeying you need to reduce the authentication security. GCM makes perfect sense for ephemeral, message-based network traffic. Traditional, separate, keyed MACs still seem preferable for archival storage, especially with tree-based modes--native as with BLAKE3 or KangarooTwelve, or constructed like SHA-3-based ParallelHash.
Goals and Priorities for C++
Prevent DOM-based cross-site scripting vulnerabilities with Trusted Types
browser feature detection is the way grown up developers have been doing this for several years now. user agent sniffing is dumb because it bundles a ton of assumptions with a high upkeep requirement, all wrapped up in an unreadable regex. It's been bad practice for ages; I'd be surprised if that's how Amazon is doing it still.
Would it kill glibc to add arc4random?
Speaking of ancient CSS features that looked overwhelmingly promising but never caught up as successfully as they deserved, it is probably worth mentioning User Styles. CSS was initially meant as a "dialogue" among User Agent, User, and content Author, with styles as a tool to express individual preferences. User agent sets some "browser defaults", Author sets their styles and User can participate with their own sets of preferences that can be "weak" like those defaults or even stronger than author's. It is the (or at least mayor part of) "THE 'C' for 'Cascade' in CSS".

Browsers to this days are required by specs to give user a way to participate in the cascade, but it never wasn't easy or even pleasant experience - it mostly involved editing some magic file and restarting browser (for "native" user styles) or using some extension, what feels like a poor excuse to not support it natively and mostly is implemented an a way that does not comply with specs anyway - because it mostly just spams author origin level and does not create user origin level. (I miss the old days when web was young and "userstyles" and "userscripts" seemed like natural development of tech what every user will use daily.)
It's already a collaborative database using tons of user supplied data. How hard would it be to add another entry for (price, date, supermarket, location)? For example (€4.99, 25/3/19, Lidl, Berlin DE)

There's already an app with a scanner, you could just walk down the supermarket and scan a few things and when you do you see the price displayed for your location (if available), if it's significantly different you can change it.
When I worked on the Mosaic project, I went into my boss's office one day and his shelves had sprouted about 6 shelf-feet of O'Reilly books.

Somehow Terry convinced some O'Reilly rep that since we were helping them sell so many books that maybe they should give us some free books. Turns out that the entire catalog was 6 feet at that particular moment. So he had every. single. O'Reilly book in print. I was not entirely gracious in my jealousy.

A couple times a year I am reminded of the comedians and speakers I heard as a child talking about old things ending all the time, and it's been happening more and more to me. The worst is still the "Guess who died game", but that's so far about losing people I grew up with. As you can tell by the above, I kind of grew up with O'Reilly, and I hope this isn't the end of an era.
Show HN: Wasp Inspector – conditionally generate web-app with a debug layer
For graphs beyond ggplot2, I am happy for the various D3 to R packages, such as

networkD3 (for Sankey diagrams) - https://christophergandrud.github.io/networkD3/ ,

R2D3 - https://rstudio.github.io/r2d3/ , and

htmlwidgets - http://www.htmlwidgets.org/
The mortality rate of ventilated COVID-19 patients could be 80% [1]. I get that we don’t want people to die, but at what point is this standard intervention just cruel? It feels like we should have a serious discussion about palliative care.

[1]: https://www.thelancet.com/journals/lanres/article/PIIS2213-2...
Takeaways from Marques Brownlee's 2020 iPad Pro review
UK cash usage halves within days as shops close due to coronavirus
Did this commercially for 15 years. Always the same problems.

We ended up with several solutions- but all of them generally work the same conceptually.

First off, separation of I/O layers. System calls into the FS stack should be reading and writing only to memory cache.

Middle layer to schedule, synchronize and prioritize process IO. This layer fills the file system caché with cleartext and schedules writes back to disk using queues or journals.

You also need a way to convert data without downtime. A simple block or file kernel thread to lock, encrypt, mark and writeback works well.

Another beneficial technique is to increase blocksizes on disk. User Processes usually work in 4K blocks, but writing back blocks at small sizes is expensive. Better to schedule those writebacks later at 64k blocks so that hopefully the application is done with that particular stretch of data.

Anyway, my 2 pennies.
My comment from a similar article:

Rather than wiping local storage/indexed DB data after 7 days, could you not just make it an opt in thing, like the camera or mic? For example, ask users "Allow myapp.com to store app related data on your computer?". If they allow it, then give access to local storage APIs, otherwise don't. That way users can still have fully local PWAs if they wish.

As an ardent PWA developer, this change annoys me immensely.
That online manpage is quite outdated; I recommend man7.org, which gets regularly auto-updated: http://man7.org/linux/man-pages/man8/cryptsetup.8.html . The current default for LUKS is XTS.
The goal of ElasticSearch, I always thought, was that it scales horizontally and can handle the loss of multiple nodes without availability- or data-loss. It's interesting to build a single-server replacement, and this can likely work for many use-cases, but it's definitely a different approach from ElasticSearch itself.
Debugging Memory Problems in a Go Worker
WeWork under pressure as more members contract coronavirus in co-working spaces
> We failed to understand that complex systems defy simplistic reductionism.

That reads like anti intellectual mumbo-jumbo to me. What complex system [0] are we talking about? There aren't very many feedback loops in the dynamics of a pathogen invading a totally susceptible population. That's the whole problem. The main one that comes to mind is the lock downs that are being put in place everywhere now - once you already have a big issue.

I fully agree that a lot of people don't understand the severity of a pathogen spreading exponentially as long as the absolute numbers look low. But there are more than enough people who do, who can give solid advice in that kind of situation. These people have been really concerned since late January at the very least.

If they weren't heard, that's the problem.

[0] https://en.m.wikipedia.org/wiki/Complex_system
typo: "automation purpouses"
Furthermore, Iceland is likely the only country to sequence every positive sample.
Well, I don't know how close I am to getting yelled at for feeding a flame war here, but...

You described yourself as "a guy who taught himself programming starting with calculators in middle school by the way (TI-Basic => C via SDCC => Assembler on calculators and MCUs". So you've had, I'm guessing, a few decades to learn and absorb all this stuff, and you started from the bottom/most concrete layer of abstraction and worked your way up - just as GP is suggesting everybody ought to do (and which I'm agreeing with). By mastering each layer before popping up to the next, each one was simple and made intuitive sense, so it seemed easy the whole time.

Now compare your experience to that of the hypothetical stockbroker who's diving into React native app programming without even really understanding what a loop is. He has decades to go before he understands what he's doing! What's NPM? What's a text editor? Is that different than a word processor? I screwed up my initial install... how can I start over? Insisting that programming is really easy and it's gatekeepers adding requirements that make it hard isn't doing him any favors; he's going to feel like a complete failure.

Rather, being honest with him and telling him that software abstraction is layered, and each layer depends on the ones below it, and while most people work at the top layer, each layer has idiosyncrasies that impact the layers above it that you need to understand when something goes wrong so you can easily troubleshoot problems, will probably ease his anxiety about diving into this (yes, very complicated) field.

And for the record, yes, I absolutely believe that programming as a profession would benefit from professional licensing like medicine, law and accounting do.
I think dtrace monitoring can be enabled, but requires removing some system security settings, if I remember correctly, so I guess if they go that route they still need to beef up security.
That was really fun! ...and kinda scary. Love it!
I do not have a cell phone; since some people do not have a cell phone (or may temporarily have loss of communication for whatever reason, including airplane mode, loss of battery power, leaving it at home, etc) it may not work. But what if someone has more than one cell phone?
Awesome, a simple tracker, no complexity. That's what I needed everyday to check what's up.
> Our hospitals here are all losing money waiting for a crowd that may never arrive.

Wow! You are in a better situation than most of the rest of the world. What is there to complain about?

> Kids are silly miserable.

Oh. That's awful. We should definitely let people die to prevent that.
Hi, I work on the Cloudflare Blog, we're working on deploying a fix now.
D3 is great, but last time I looked at D3 it worked a lot more like jquery than modern frameworks. Is it still worth using or in the decade there are better ways to work with React/Vue/Angular.
I only take it off (and charge it) when I shower or go in the hot tub. The battery lasts a few days, which is long enough for me to take it on 2-3 day trips without charging it.