skysight-inc/HackerNews huggingface dataset:
You're still thinking all-or-nothing, talking about "exploits" or "vulnerabilities" where finding one lets you take over the whole ystem at once.

That is not how these attacks happen, that is not what happened at Maersk, and that is not what the article is about.

The breach happend via compromised third-party software installed on a small number of regular workplace PCs. The big damages happened largely because sloppy privilege managment allowed the attackers to hop between systems and gradually acquire more credentials and more privileges via weak or reused passwords and accounts shared across systems and functions, until the attackers controlled thousands of PCs and servers across the entire international company.

This kind of thing is a process, and the amount of damages depends mostly on how fast the attackers can gain more privileges vs. how soon they are noticed and countermeasures taken.

Better privilege management, as suggested by the article, can easily slow down that process to a point where it won't cause significant damage.

And your whole extortion argument hinges on the idea that an attacker can demonstrate the ability to cause X amount of damage without actually doing it or giving the victim information that can be used to prevent the attack. That is not how it works in reality, except in the case of DDOS attacks, which are an infrastructure rather than a security issue.

In reality, the amount of damage an extortionist hacker can put a price on is only the amount they can undo or provably refrain from doing in the future. Specific examples of this are mass-encrypting data and threatening to publish trade secrets. And those are things we see happening in reality, but the amounts are much smaller because they cannot include the large-scale disruption of operations that Maersk experienced.

By your logic, the form of extortion you describe should already be happening, constantly, to every large company on the planet. It should be the most profitable form of organized crime ever.

But that is not happening in reality. Because in reality, security and security breaches don't work like you seem to think they do.
The consensus on mice models is that they suck and we need something better, and until we do, everything needs to he tested in humans before widespread approval is given so we arent ever relying on mice data alone to make regulatory decisions. Seems like a reasonable consensus to reach
If cops are quitting like they seem to do currently, you will certainly get the most corrupt police force you have ever had if you plan to quickly replace them. Not saying the current one is perfect, although its numbers were surprisingly good compared to the stereotype of being cowboy cops. Even with a certain number of unreported cases, say we had 20% of those.

But the state of the police and its militarization is due to policies of the last decade, meaning that deescalation wasn't tried at all. The former terrorism has become domestic terrorism, something early critics predicted (wasn't even hard). The loudest voices we hear from seem to not be able to hold a thought, because the other side needs to be silenced first.

Ultimately I believe many cops will quit due to lacking support of their governors or president. But I doubt we will see significant changes. Private security will become an even more booming market. Police departments will lack funding but will be sold expensive riot gear.
The writing was a little confusing. "but he was a little more wary of caving after." refers to Bob and not Ackerman
For the same reason tesla competes against toyota, not against porsche.

The gap in education is at the bottom, not at the top
have you worked with VDSL modems and lines?

it can be a nightmare.
There’s really no connection.

If Apple wants to unify iOS and MacOS a common chip architecture doesn’t really help them do that.

Anyway, I don’t think it’s going to happen. I understand the worry, but it just doesn’t make sense.

They might allow and support macOS running on iPads, though.
Triyambakam, please don't take these criticisms much to heart. Smokers were parroting the tobacco industries claims that smoking didn't cause cancer in their own ignorance. There may be a similar thing happening now with the wireless industry. We are just scientifically beginning to discover the non-thermal effects of EMF radiation. If these fields do cause detectable changes to the pysiology of human cells, there is reason to believe that your wife could be sensitive to these changes.

Wi-Fi is an important threat to human health
https://www.researchgate.net/publication/323998588_Wi-Fi_is_... Electromagnetic Fields Act
Similarly in Plants as in Animals: Probable Activation of Calcium Channels via Their Voltage Sensor

https://www.researchgate.net/publication/305691437_Electroma... How to
Approach the Challenge of Minimizing Non-Thermal Health Effects of Microwave Radiation from Electrical Devices
https://www.researchgate.net/publication/283017154_How_to_Ap...
Big companies don't hire properly for sysadmin/security - you don't think law enforcement knows what they're talking about here, do you?
It's wrong to think of ditching oxidizer and keeping fuel. They both contribute as components of the rocket's energy source and its working mass. If you get rid of the chemical reaction, the "fuel" is not fuel any more, and you should replace your concept of it as such with a narrower concept of "working mass."

The questions here include:

- whether you can get more efficient propulsion overall when the heat comes from a reactor instead of from a reaction in the fuel

- whether switching from a fuel/oxidizer energy-source/mass combo to another working-mass-only substance might net you other engineering advantages (storage concerns, perhaps? though if you're switching to hydrogen like one often considers for nuclear rocket working mass, you will have plenty of storage problems)

- what sort of engineering disadvantages the nuclear reactor component brings (added mass, heat dispersal issues, etc)
Hanssen was more of a psychological / power / control sort of thing.

Ames was just gettin that $$$. Dude made it through like 2+ lie detector tests, too, which goes to show how useful they are.
My understanding is that these are pure vanity. Doesn't require any reputation to give, doesn't give any reputation either, nor does it sort your post.
Those "developers" shouldn't complain that Apple doesn't care about them, as they should have given their money to a Linux/BSD OEM.

Apparently only UNIX has developers, the rest of us are something else.
> It's worth noting postgis has exported to mapbox vector tiles for some time (ST_AsMVT).

It's pretty conceivable to use ST_AsMVT now in QGIS to power a layer or two. We use QGIS pretty extensively to work with PostGIS tables already, so the ability to see the data in prerender stage (raw geometries) and all the middle and end stages (processed geometries and MVTs) we want is super powerful for anyone wanting to work with vector tiles and PostGIS.
I used to work in "geo", as the author puts it.

Oil is definitely important. It's the only good that behaves macroeconomically as if it were essential to everybody, and you're right that organic chemistry, plastics, etc. are not just part of daily life, but irreplaceably so.

That said, half of oil usage in the USA is for gasoline and diesel [0]; another 15% is natural gas produced as a byproduct of extraction. As we drive and fly less, we'll need less fuel. Oil demand collapsed earlier this year [1], and it could collapse over and over again until the industry shrinks to the right size.

I don't think that taxation on oil imports is the right move, because it doesn't limit the USA's oil exports. Instead, we ought to tax oil products, specifically gasoline, diesel, and jet fuel; and use the funds to plan for when oil is no longer as important to us.

[0] https://www.eia.gov/energyexplained/oil-and-petroleum-produc...

[1] https://en.wikipedia.org/wiki/2020_Russia%E2%80%93Saudi_Arab...
A browser doesn't have to win a beauty contest in front of developers; that would be futile anyway, given how inherently generational web development is. It only needs to win over users (let's call them readers, because that's what a browser is for in the end).
What it means for Macs, according to most analysts, is better performance at lower power levels.

Apple knows why the Mac is popular with technical people. They're not going to f*ck that up. I know this bugaboo of "they're going to turn the Mac into an iPad" comes up every so often, but I really see zero evidence of that.
Show HN: The Bare Message Encoding
Clock is ticking before we get the first 'AI Restaurant' where you have to eat the Chef special and the Chef is code. Might work for the novelty factor as a pop-up that moves around, could be a way to get people into the tech.
I was curious and read up on wikipedia. You left out some important facts.

> The FBI classified the WUO as a domestic terrorist group, with revolutionary positions characterized by black power and opposition to the Vietnam War. The WUO took part in domestic attacks such as the jailbreak of Timothy Leary in 1970. The "Days of Rage" was the WUO's first riot in October 1969 in Chicago, timed to coincide with the trial of the Chicago Seven. In 1970, the group issued a "Declaration of a State of War" against the United States government under the name "Weather Underground Organization".

> In the 1970s, the WUO conducted a bombing campaign targeting government buildings and several banks. Some attacks were preceded by evacuation warnings, along with threats identifying the particular matter that the attack was intended to protest. Three members of the group were killed in an accidental Greenwich Village townhouse explosion, but none were killed in any of the bombings. The WUO communiqué issued in connection with the bombing of the United States Capitol on March 1, 1971 indicated that it was "in protest of the U.S. invasion of Laos". The WUO asserted that its May 19, 1972 bombing of the Pentagon was "in retaliation for the U.S. bombing raid in Hanoi". The WUO announced that its January 29, 1975 bombing of the United States Department of State building was "in response to the escalation in Vietnam".
It may well be impossible to walk back what has happened to universities. Large institutions move slowly. There are too many stakeholders. Even when they can change, it's inevitable that forces will resist the change, resulting in half-measures.

So it may well be more expeditious to start over. There are many other models, and if nothing else, whatever success those models have will provide more capacity. That may also draw away students and force them to lower prices.

It still won't be easy. The price rise is driven in part by a mythos about the value of the four-year degree. People will continue to see education in any alternative as "lesser". And it doesn't have to be "lesser". I am a big fan of the work being done at Signum University, which has been working for years to establish an online model that's more than just a MOOC. It's actually closer to what a liberal arts education was supposed to be, the thing that gave four-year universities such prestige for producing well-rounded students. They don't teach computer science; they teach literature. And that means teaching dialogue, discussion, and insight, rather than being a glorified vo-tech school with a bunch of humanities thrown in. I'd love to see CS education move to a place where it taught how to craft software rather than teaching us to be mechanics.

Even when that happens it will be seen as "lesser" for a long time. We use the four-year school as a marker that the student can at least jump through the hoops, speak and write at least marginally competently, and can do the mechanical, testable aspects of the job. It doesn't actually do that very well, but people think it does, and don't believe anything else can.
New GitHub App automates resolving merge conflicts (JavaScript only)
Real world? AFAIK no not yet. The issue is that traditional benchmarks don't really tell the whole story. IPC isn't directly comparable because ARM is ostensibly RISC (this is debatable I'm aware) and Intel is CISC (also debatable). So until things like Adobe Premiere or Media Encoder are ported over (if they are), or similar real world workloads like Blender, it's going to be really hard to compare. Even then things like design power matter. A 15w Intel chip is likely to outperform a 5w ARM chip just because it has more headroom thermally. It doesn't mean that either is faster (IPC per watt goes up the more you downclock for a variety of reasons).

If this sounds like I'm saying it's apples (no pun intended) to oranges... that's pretty much the case. Apple is likey not going to produce an ARM chip in directly comparable fashion to an Intel chip. E.g. equal cache, memory bandwidth, TDP (using Intel calc method), PCI-e lanes etc. Mostly because it doesn't make sense to do so because Intel's chips are designed to be a component of the system while ARM chips are largely designed to be an SOC.
In theory, if every job went remote, employees would have more bargaining power, as they have more options, which gives leverage.

In reality, most people aren't skilled negotiators, and become significantly less motivated to negotiate salary once they reach a number that they feel is "fair". And "fair" seems to be a correlated with living expenses.

Furthermore, if most engineers are willing to take a pay cut, this would impact those who are skilled negotiators, for the obvious reason that industry trends are an anchoring point for salary.
PyDev of the Week: Adrin Jalali
Intel to Use Nanowire/Nanoribbon Transistors in Volume ‘In Five Years’
This argument does not fly IMO for sugary drinks, for two reasons:

First, there are healthier alternatives. Sugar-free sodas are probably not ideal but they can't be worse than sugary drinks.

Second, while sugar may be addictive, it is not that addictive. Some people would murder to fuel an heroin addiction, but no sugar addict would walk a mile to get their fix instead of drinking water. And if they did the exercise would burn some of the calories :)
Looks like blogspam. Basic docker documentation already has the instructions. This page offers nothing extra.

Edit: Yup, user is spamming his own blog, often posting more than once the same article.
Remote dev for 15 years, leading like Chief O'Brien now
How to Download a File with Python [video]
Because Apple, first and foremost, wants to be able to control its own destiny. Being tied to Intel has slowed them down on upgrading their higher-end laptops for years.

OTOH, they're having GREAT success with their ARM chips in mobile.

So, you know, you do the math.
You forgot the two last ones including "The German BAFIN is not very smart and German financial regulation is substandard", which is a pretty big lesson for the biggest economy in Europe.
You run into a regulatory capture problem in any capitalist democracy.

Companies squabble over nuances that less impact them, and more greatly their competitors, implemented through their political pressure on representatives.

Which is why historically most democracies have trended laissez faire on directly compelling specific supplier behavior. Demand-side modification has the same dangers, but to a lesser degree.
Looking back on my education 20 years later... obviously the math degree gave me the skill set to take advantage of the opportunities handed to me. (It’s how I got back into grad school & out with a PhD in just 4 years; it let me work with Mike Abrash.) but the skills I learned in school that have helped me as a person were from the courses that weren’t “certificatable”: literary analysis, my beloved history, the philosophy I always hated.

I worry in a certificate-driven education that we’ll leave those things behind.

On the other hand, the person I know with the best grasp of history, philosophy, and literary analysis barely graduated from high school and did a 4 year stint in the Navy: apparently, being stuck on a ship for years gives you ample opportunity for self-study. Maybe what we need is just boredom, opportunity, & books, and not more schooling?
Data Dividend Project
Anything close in what regards? There are amazing games coming out all the time.
In this case it's a brand new account posting inflammatory claims with no references to back them up.
>The scientific community often comes to an incorrect consensus, and this consensus becomes dogma that must not be questioned because the consequences would be too damaging to reputation/credibility/whatever

While this does happen, science at least allows the possibility of enough evidence to force people into accepting the new model. Without science, many more things are considered untouchable dogma and there is no method to challenge that.

Scientists are still human and make dumb ego driven mistakes, science still provides the best theory out there.
I think an important difference between sugary drinks and heroin is that there is an easy sugar-free alternative that people might swap to more often if it was cheaper.
However, nuclear thermal was also not just considered, but actively developed, under the NERVA program which ran from the fifties until 1973.
I remember, as a 13 year old with newly acquired PC, spending most of my summer playing this game into the early hours of the morning. The conspiratorial story branches and gameplay were so compelling to me at the time, I didn't feel the need to do anything else. No friends, no outdoor time, just Deus Ex- No regrets either.
In EU I have read that the part "No Reverse Engineering" is null/void and the rest of the contract is still valid. There is several null-ification of part of contracts in EU-legislations.
Have you tried the older games? Maybe I'm biased since I played them when they were new but I believe they're still very much playable.

There are overhaul mods like GMDX, New Vision and Deus Ex: Revision (which I'd rank from best to worst in that order) that are meant to make it a bit nicer too.
I went to meta-discussion and learned more details. Most of the thanks comment are written by folks who already have upvote powers. Anyways its a fun read. Grab popkorn and go through it :)
Your hash functions are contrustructed in a way such that the concatenation has the security properties of a 128 bit hash function (because your construction is equivalent md5).
I am not sure that results holds for all concatenations of hash functions. Or for SHA concatenations.

I appreciate you making me think deeper about hash functions. Nice construction.
My question is, how come Doordash still spams me?

I never signed up or even knew of them until the emails started arriving.
Yeah, this is nuclear thermal where uranium is burned as fuel to heat a hydrogen propellant. That limits the heat and energy the propellant can absorb so while the efficiency end up being high due to using all-hydrogen fuel with a very low molecular weight the thrust isn't that great. These are good for second stages or transfer once in orbit but they don't make very good booster engines. Well, not unless you're going to do something really exotic like a gas phase nuclear lightbulb design[1]. But thankfully it won't be releasing any radiation into the atmosphere if it's working properly, the hydrogen fuel has to absorb two neutrons on its pass through to turn radioactive and it really doesn't want to absorb that second neutron. And if something goes wrong before its turned on uranium, even enriched uranium, isn't that radioactive and honestly there are scarier heavy metals that aren't radioactive at all.

Orion, by contrast, uses its bombs effectively as both fuel and propellant and achieves far greater temperatures/efficiencies and power. It's a stupendously efficient and effective engine. However, that does mean that you've got nuclear reaction byproducts coming out of the engine which are pretty radioactive and also will tend to fall out of the atmosphere onto us down below in a reasonable time. Each one only produces a little but you'll be setting off many of these and overall you're looking at the same level of fallout as a multi-megaton thermonuclear bomb airburst. And we banned open air test of those for a reason. Still, if you're launching from some place that's already exposed to cosmic radiation and the solar wind, like the surface of the Moon, it might be a useful means of transport there.

[1]https://en.wikipedia.org/wiki/Nuclear_lightbulb
Actually, whataboutism is the lost art of putting things into perspective.

Accusations of whataboutism is a cold war tactic - but from the west: to ensure only one sided criticism of what the USSR did was heard.
>Our current paradigm is optimized to avoid injuring humans at all costs, including to the extent that it diminishes the chance of success.

I would characterize it as more avoiding the liability of injury to humans than avoiding injury overall (edit: and by liability i'm not just talking legal liability, there are also emotional consequences a person would experience if someone dies or is gravely injured as part of their medical research). A family member died of cancer this year. Nobody is liable for her 'injury' because there's no evidence it wasn't a natural occurrence and standard of care was followed in her treatment. However, a number of plausibly beneficial alternatives or adjuncts to that standard were in phase 3 trials that either her doctor flat out refused to consider or that she was ineligible for...not due to concerns of clinical efficacy of the treatment, but due to prior treatments that could have smeared the signal in the results (this is particularly true for immunotherapy trials).

It's a medical version of the trolly problem and from what I can see and definitely in our experience doctors choose to ride the rails they were set on. I don't blame them either. With the current climate in medicine a wrong move could end their career and possibly prevent them from helping those in the future.

It's an extremely tricky situation and I empathize with those that are faced with these dilemmas every day at the office. I just don't buy the story that changing our current approach is somehow de-prioritizing injury avoidance.
Show HN: GoodFlow – Most simple BPM software for startups
> I'm all for increasing police de-escalation training and policing standards in-general, I just don't think it will solve the problems that the protestors want to be solved when the crime rate is as high as it is.

Neither do the protestors, which is why they aren't out chanting “increase police funding for additional deescalation training and increased standards”.

Dismantle/defund/abolish isn't about incremental training and increased standards, it's about radical reorganization of basic services and rethinking the role of armed law enforcement within that spectrum.
Wirecard says missing $2B never existed