skysight-inc/HackerNews huggingface dataset:
discriminating between different failure modes is important. However, every situation you've described is still some form of failure mode.

1. A user opening a phishing email means the email made it into their inbox (spamming failure unless whitelisted for the sake of a test) and the user was moved to click the email based on the subject line. This in itself is the lowest risk of the failure modes we're about to describe, But some risk will exist considering e.g malware has spread through the simple opening of emails before.

2. Clicking a link in a phishing email is much higher risk and, regardless of how the phishing test was crafted, is considered with absolute certainty to be a failure mode of any phishing test or event for three reasons: A user has definitively disclosed their presence within a company (email clients today may block trackers from loading, but clicking a link gives it away), the user has disclosed their receptivity to the message, and in a real world attack, merely landing on the page may trigger an event such as the delivery of a malware payload via a functioning exploit against the browser and the underlying operating system.

3. Entering credentials is probably the most obvious one.

---

Rather than a "password alert" control that just alerts a user that their account was signed into, what would be more helpful is a second factor; a bare minimum would be a prompt on a user's phone indicating that a login attempt was detected and requesting confirmation before that attempt can succeed. This at least helps a user potentially preempt an attack against their own account (assuming they're trained on how this works) even if they never figure out that they've entered their credentials into a phishing site, And if the second factor challenge is never met, an alert to the security team could automatically get the security team to triage the risky login.

Pardon typos. Voice to text.
It's a pity it doesn't work on Samsung Galaxy Note devices. With the "built in" pen it would be a spot on despite the smaller screen size.
Thanks for explaining! It sounds like I am just lucky with my set up not to run into issues. Hopefully they come up with a solution soon.
As owner I would not plan any European trips anytime soon.
I can see the delay when I remove my terminal from the DevTools permission in Security preferences.

So it's real.

However, scripts are NOT notarised, so what is it doing?

EDIT:

So after digging the scripts are being "checked" for malware, as part of XProtect.

This is interesting, it seems to be hashing scripts and testing to see if its known malware.

Anyway, easy to disable, but weird stuff.
Robinhood trader made 2,400% return in 5 days as virus and oil hammered markets
Clicking a hyperlink is certainly bad.

Browsers have vulnerabilities and you're broadcasting the attacker valuable information about yourself, including the fact that you're receiving, reading, and clicking on links in their mails.

Also, the article states clearly that 1 in 5 fully entered their credentials.
Seems like that role will also be moved over to battery installations, as they have an instant response time vs long minutes for a plant.
For those in the chat who react by saying “this should be law!”

Laws have unintended consequences.

Also I subscribe to a number of services I barely ever use, generally because I got in with an account very early on, and the price I’m paying is usually 1/5 or less of the current retail price. I do not want companies to proactively cancel my service.

“Thats Absurd!” You may say... well for about 10 years I kept my original AT&T unthrottled and unlimited plan goong on an iPhone, then iPad, until my credit card expired and the payment lapsed. Of course my account want instantly closed and my grandfathered plan unavailable.

Did I use more than 30 GB a month? No. Could i buy that plan again around 2017-2018? Nope. I was happy to secure that for $20/mo.

Do I want companies to have more red tape and penalties, such that they proactively shut down accounts from legacy plans? Absolutely not, get off my lawn.
Uh, did you miss this:

Things are tough right now ...

They're tough for everyone :( But when coronavirus hit here in the UK, the museum had to close its doors to the public, and we lost practically all our income overnight.

It's closed.

Weird that they still sell tickets.
Rust hasn’t "educated people" about "borrowing".

Lifetime management has always been there for any developer dealing with resources in any language. Over the years, languages and specialized extensions and tools have offered different solutions to help with that problem.

What Rust has brought is a system that checks explicit tracking embedded into a mainstream language.
Not true, I ended up on triplebyte a few months ago as a result of ads, so I also have a profile, and I'm in Europe.
If you want to say: This does not apply to a non EU citizen in an non EU country, you are correct.

But if you do business in the EU - i.e. have advertising from EU companies inside your media website or you are already dealing with the EU AND you have readers/users in the EU that pay for your service, it makes you instantly responsible for being GDPR compliant if you like it or not.

This is why some media companies block EU ip-address ranges not to fall into that "trap".
> C++ getting serious about safety. Buffer overflows and bad pointers should have been eliminated decades ago. We've known how for a long time.

The crowd that use C++ needs raw pointers sometimes, and you can't really prevent bad pointers and buffer overflows when they are used. There is a reason why Rust, which goal is to be a safer C/C++, supports unsafe code.

Smart pointers is a very good thing to have in the C++ toolbox, but they are not for every programmer. Game programmers, if I am not mistaken, tend to avoid them, as well as other features that make things happen between the lines, like RAII and exceptions.

The good thing about that messiness that is modern C++ is that everything is here, but you can pick what you want. If you write C++ code that looks like C, it will run like C, but if you don't want to see a single pointer, you have that option too.
Why Did Spotify Pay So Much for Joe Rogan’s Podcast?
If you use the author's definition of the owned term as "some non-reference type, e.g. i32, String, Vec, etc", the misconception is indeed one. But I disagree with the definition.
Show HN: VSCode extension to copy/paste multiple code snippets in your workspace
VS Code extension to copy and paste multiple snippets of code in your workspace
Taif Adventures
Well, let me recomend something else, check asrock mini-itx motherboards with on-board cpu. You can get those for ~150 euros, throw in some ram (~60 euros) and some disk (100euro) + some chasis (Phenom mini-itx for instance, ~100euros). For home server this will work great :)

I am running home server (100% self hosted including emails) with J1900-itx motherboard with 20Tb of disk space (zraid) for years. No need to bother with ps4/5.
Modeling Volatility in Financial Time Series
1. "the only possible and conceivable reason": you are extrapolating

2. Sexism can happen even when everybody cautiously avoid talking about the author's gender.
Kind of too long for an HN post but long distance running is all a game of efficiency. Good breathing makes sure your oxygen levels are working for you rather than against you. I remember subtle things like switching between calmer breathing to steady the heartrate and deeper faster breathing for getting over a hill. This all can happen naturally, but you'll be surprised the difference in doing the breathing mindfully/proactively rather than passively.

The breathing also helps mentally but also helps relax the body. As you are exerting yourself it can be a natural response to carry tension in your body. Tension is usually the enemy of body mechanics - it leads to inefficient technique.

Watch any sport (including running) and something notable about any pro is how easy or relaxed they look.

This can be learned and breathing has some chicken/egg relationship with relaxation
> This article is more of an opinion piece

Wouldn't that be legally required to end with something about selfishly self-phishing shellfish?

It does read a bit like SEO copy for a training consultancy that offers an alternative to the intuitive self-phish/reprimand cycle, but it brings up some interesting ideas.
The access token is designed for saving size. Scopes are in the ID token. The disadvantage of the access token is the required back channel. But then this scheme also needs a shared backchannel so it's pretty much an access token implementation (you could express it as such)

https://developer.okta.com/docs/guides/validate-id-tokens/ov...
Open-Source Phishing Framework
Developer mode has never been required on Android. App sources are managed by regular settings (Android 8+). Before that, there was a single switch for all non-Play-Store sources.

1. User downloads an .apk using a browser

2. User tries to open it

3. Android prompts the user to allow the browser as a trusted source

4. User agrees by flipping a switch

5. Installation resumes

6. User enjoys the app

https://developer.android.com/distribute/marketing-tools/alt...

https://android.gadgethacks.com/how-to/android-101-sideload-...
Docker is fantastic at precisely this use case: capturing tool and build dependencies in a reproducible way. I am not sure what performance issues you are complaining about. We run high speed trading services with single digit microsecond latency on docker just fine.
This sounds great for the kids. Does anyone have experience of the combination Wacom/similar with a (cheap) Chromebook?
Let's say it's a small office then. If they have just one floor and someone with a service dog what's a reasonable accommodation for a potential hire with allergies?
Context: this was used by Gitlab to conduct the phishing attempt against their own employee: https://news.ycombinator.com/item?id=23269661
Ask HN: Global mentorship day: How has a mentor helped you?
It's true, its not global mentorship day according to anyone else but me.

A lot of people say getting a mentor helps them with their career but this seems to be the sentiment rather than an evidence based statement. I have not been able to find repositories of evidence of mentors, apart from vague statements by startup founders on how other founders stuck together. <- This is probably it, maybe mentorship is mainly about motivation?

Since you're here, how has a mentor helped you in the past? This can help you reflect on your past experiences but also help others: when someone gets a mentor, they know what they're looking for, instead of begging for 'mentorship' and getting no responses.

Personally, I'm in the same camp as many people, "I'd love a mentor to catalyse my achievements, but don't have one".
The solution is simple. Make your profile something they don't want on their site. Link to porn, change your profile picture to porn and so on. It's effective
By the way, you don't have contact details in your profile, so I thought I'd mention here an answer to a question you asked four years ago. You asked about doing an "ls" when you "cd", and someone gave you this:

cd_(){
cd $*
ls
}
alias cd=cd_

That kills you if the directory has thousands of files, and especially if you're working over a slow connection. You can modify it like this:

cd_(){
cd $*
ls | head -n100 | column
}
alias cd=cd_

That then only lists up to 100 files. You can further extend it to put "..." if there are more files, but I'll leave that for another time.
This is why I love hacker news, I learnt that just breathing 30 seconds is able to averse from any vice or bad craving. It's like the matrix
I support this action and wish more companies do it. It would tremendously improve the security in every organization. The people that "bought" the fake login link feel ashamed, I'm sure, and they'd think twice before logging in next time.
Kudos for Gitlab.
Maybe digital nomad hotspots? Ones in SEA for example are in pretty inexpensive locations. I'm not too sure honestly, I'm also looking for the same thing as you.
SoftBank’s Masa-Misra Partnership Strained by Losses, Infighting
Show HN: Discover high-quality articles,videos and more with human-curated lists
Hey everyone,

Me and my friend were frustrated with garbage that we ran across on our search results and on the web. More than ever people are sharing articles, blog posts or videos on the web and parts of the web became a big garbage.

So, we created Jooseph as a place where you can discover and share curated lists of high-quality articles, talks, podcasts and more.

Also, we builded an extension to organize pile of tabs in your browsers.

Basically you can create different collections in Jooseph to store or share your lists on Jooseph. (e.g. you can create a list about Best Golang Resources and make it private/public, you can add any link from your browser with the extension)

I don’t know if it’s sounds good to you. We have shared here, a couple times. I am sorry if I am being spammy. But I wonder, would you be interested in using this kind of product and keeping closely in touch with us to solve your problem. (If you have this problem)

You can take a look at from here: www.jooseph.com
Does anyone else find it unfortunate that this entire topic is devoted to the fact that we find that a company being ethical about their business practice is so out of the ordinary, and we're spending a lot of energy guessing what nefarious motivation might lie behind it?
Battery installations are still relatively expensive right for the capacity they offer right?
Humans have about 2° field of sharp vision. Computers with wide angle lenses don't have to oscillate like the eyes do.
Thunderbird has always done this. Loading images prompting before send receipt notifications you name it.
That's like saying American law doesn't apply to Russian citizens in Russia when it clearly does.

The court may struggle to apply it's judgements, especially if there isn't an applicable extradition situation, but all it takes is one representitive of the company to go to Europe and they are open to things like arrest for not following the judgement of the court
Currently hndisq will load the comment posted by you only.

When your blog post page loads it will send two things to hndisq.

One is the username ( ColinWright )
Another one is href of the current blog page. (https://www.solipsys.co.uk/new/BeingSlowToCriticise.html?te1...)

So I know your username now and I can get all the submission from HN based on your username. And I will use the href to identify the correct submission. Once it found the submission it will use the submission id to load the comment.
My understanding of paypal is that it screws people receiving money more than those paying via it.
I do think this is the future of development and all IDEs will need to support this use case very well. BTW, non reason to not have a GUI just start docker with:

-v /tmp:/tmp -e DISPLAY=$DISPLAY

And you should be able to launch X applications inside docker just fine. I run graphical emacs inside docker everyday.
Change your credit card?
Don't let it, I've only skimmed it but I think you can get started and write some effective rust without even having or understanding the misconceptions.

And even if you did gain a misconception, so what, apparently you'd just be joining other people writing rust who share the same one.
What do the letters GW stand for?
I pretty much miss the 90s, Bill Clinton presidency and this cute website. What happened to the internet
Show HN: tailblocks – Ready-to-use Tailwind CSS blocks
It is. They are down to 1 um, so they need to make a bit more than an order of magnitude improvement to become performance competitive - 100 nm is early 2000s technology, Raspberry Pi is 40 nm size.
Dogs in an office. Dogs. In an office. What the fuck?
How to start a platform co-op
Ah that's the great tip. thanks.
It seems to me that humans require and get orders of magnitude more training data than any existing machine learning system. High "frame rate", high resolution, wide angle, stereo, HDR input with key details focused on in the moment by a mobile and curious agent, automatically processed by neural networks developed by millions of years of evolution, every waking second for years on end, with everything important labelled and explained by already-trained systems. No collection of images can come close.
Because, scammers.
It's additional risk that nobody asked for.
It doesn't have its own browser, it's just a misconfigured app that makes Android think its a browser.
It's a horrible way companies try to discourage data subjects from exercising their rights.

This is not lawful under both the GDPR and the CCPA. If Triplebyte follow through with their request against an EU or California resident, they'd be breaking data protection laws.

If comments here are any indication, too many people, being unaware of their rights, may fall for it though.
Speedy client-side coordinate conversion in geospatial apps, thus avoiding the round-trip to the server.
Lithium dreams: filtering out what you want to see
I dunno, that keyboard gave me feelings of RSI literally about after twenty minutes of use when I had to extract it from my desk for assorted trips/meetings/whatever. I ended up getting a 2015 MBP, provided by work, which was technically a downgrade but ended up being an upgrade in basically every way.

The red flag is thus: they give you an apple device manufactured after 2015.

;)
Do you intend to ban ranking algorithms?
I haven't seen an article on any good use cases for any cryptocurrency for many years now.

It's always about the price or tech problems.
Show HN: LaTeX.css – Make your website look like a LaTeX document
How is it different from the same attack done while you are in the office?
Researchers achieve optical data transmission speed of 44.2 terabits per second
Design-wise it looks cluttered af even for a thing that is supposed to be intentionally light. How am I supposed to differentiate users in such setup? Looks like hell to me.

The idea is interesting, though, and I like that it's written in Rust as well.
Bring your own device is bad for companies. Any of them using this approach are just begging to have their talent pool drained. If I do work for company on my own device there absolutely no difference between my personal research and the company research and in eyes of the law these companies will always lose if they try to enforce some "secret sauce" to not go to their competition. Wondered why FAANG companies never did this, those that will lick every penny from whatever corner they can? Exactly because they know too well they'll lose badly. Just look at that guy that got bankrupted by Google after he went to Uber - HN had an article a few weeks back.
Know someone who had this issue, turned out to be related to sleep apnea. Their life totally changed after it was diagnosed and a CPAP was used during sleep.
I would like to work on four free and opensource projects (all under non-profit model):

- A system for eliminating poverty by forming amalgam of best parts of UBI and NIT; this solution will involve developing both hardware and software (this actually ties in with the following three projects)

- A platform for free multi-modal global education system where everyone if free to choose the subjects they want to learn (many students don't get to study the subjects they want to study because someone else(i.e. the education institutions) decides whether a student is granted admission for the course)

- A system for free healthcare (many people cannot afford even simple treatment, I have seen this happen in front of me at various places).

- A platform to guage micro and macro economy at global scale to make informed decision by everyone possible.

Anyone wants to join me on this journey? :)
If you'd read some of my below comments, you'd notice I addressed this scenario. Fines should be adjusted for the probability of getting caught.

Also, certain torts, like stealing, are considered criminal.
> If fighting with the compiler is necessary for learning

I don't think "fighting the compiler" is a useful concept. No matter what language you're learning, you have to learn both the language's syntax and semantics.

If your program barfs up an error at runtime because you made a semantic error the language forbids, that's no better than barfing up an error at compile time because you made semantic error the language forbids.

So it's both more accurate and more precise to say that a language's semantics might be complicated or subtle, but the compilation step is orthogonal to the actual problem you're talking about.
Yes, our main application is mostly used as a cloud service deployed in Kubernetes, but also has deployments running natively on Windows.
I would like to see a standardized scopes composer tool to complement this.
Someone at my work (before lockdown) recently avoided a phishing attempt because they turned to their colleague and asked, "Why would the high-rank-officer email me?"
What the challenger banks did differently
Develop a SaaS product like Google Drive using these Firestore security rules
I wasn't saying it was good or bad, just that some companies do it.
There were automated railways 30 years before that too. https://en.m.wikipedia.org/wiki/Automatic_train_operation
"I aced the lengthy and nontrivial generalist quiz"

I actually think everyone aced it and ends up in the 80-100 percentile group. "This site says I know more than 80-100% of users" is good for word of mouth marketing.
your credit card 8 years ago had an expiration date beyond 2020?
The kid’s show ‘Daniel Tiger’s Neighborhood’ has lots of great songs for children, and one of them we use at home is the:

‘If you feel so bad,
Like you’ve got to roar,
Take a deep breath (breath in, out)
and count to four’

We sing this a lot with our tantrumers and it works great :)
That Netflix discussion is confusing. Basically I wanted to show demo on the homepage. Before submitting my own submission of hndisq to HN I want to display some comment to test and it's added in production.

Now that I've posted the hndisq to HN now it will load this discussion on the homepage.
Are you referring to written notation? Calling that geometry is a bit of a stretch. There's also nothing geometric about maths encoded in computer code, or many types of mathematical thoughts, so I think you are just incorrect.
MAGFest moves a bunch of maintained machines from a museum to an exhibit room every year. It’s really cool to actually sit down and play a game on a computer older than you. Looking at a machine through glass is neat and all, but it isn’t terribly interesting to me compared to actually using the machine.

https://super.magfest.org/gaming/museum/
Actual pros replace them with cintiq or similar and are always larger than A4. I've never seen a full time designer move down size, because you lose fidelity at the same zoom level and are constantly fiddling with zoom which is a source of major frustration
So I'm just holding out for Zen 3 later this year to upgrade my PC - like you said, suddenly the 10600K made the choice a lot less clear.
I had a good experience with a google app subscription - cancelled it from the play app, no problem.
HN can be fairly rubbish at times. People here can get too tied to their tools to even consider that other tools may be useful to others. NoSQL has it uses and I personally love using one.

OP, try https://www.arangodb.com
It is the the best NoSQL IMHO. Its multi model, extremely performant, has fantastic distributed/replication capabilities and good documentation. They even have a hosted offering of it.
Imagine if gyms did this.
I do not use SEL, but on regular Ubuntu the below works perfectly with respect to permissions:

#!/bin/bash
docker run \
--rm \
--net host \
-i \
-v /etc/passwd:/etc/passwd \
-v /etc/group:/etc/group \
-v /usr/local/share/fonts:/usr/local/share/fonts \
-v /usr/share/fonts:/usr/share/fonts \
-v /run/user/:/run/user/ \
-v /tmp:/tmp \
-v /home:/home \
-u $UID \
-e DISPLAY=$DISPLAY \
-t container \
/bin/bash