skysight-inc/HackerNews huggingface dataset:
That's trivially correct. You can't get anything on a screen without a driver for your graphics card. You can't get any input from a keyboard without a driver for the keyboard.

However, Linux comes with drivers for more or less every audio interface that is possible to use on Linux. That is, there are essentially no 3rd party drivers - it either works with the drivers in the kernel(1) or it doesn't.

(1) depending on how your distro built the drivers. for the most part, things are OK.
Please re-read what I said. The carrier equipment can read the memory of your phone remotely dog. It's a "feature" in nearly all Qualcomm chips
It really depends how these things are setup.

Factory resetes that reset the EEPROM basically usually means that the hardcoded values form the ROM/Firmware will be used on the next boot.

However you usually have another tier today which is flash storage which isn’t a mechanism that can be easily reset with a “factory reset” because it involves a file system.

If the bad config files are on the flash you need a factory reset mechanism that basically tells the main firmware or boot loader to recreate the file system on the next boot.
Hugelkultur: Raised Garden Beds
Not OP, but my medication's blister pack is perforated so I can break off one pill.
They do get a cut via google payment options in and out of the play store... but most apps people use are "free".
> "Programmers don't want a system for writing build scripts; they want a system for writing systems that write build scripts."

It is a truth universally acknowledged that a shitty scripting language in possession of a large user base will be in search of a new scripting language that automatically generates the shitty scripting language.

But then you have two problems.
I live in Portland, OR. It was actually illegal for Black people to live in Oregon until well into the 1900s. That is partly why so few Black people live here. My company has been trying to hire more Black people, but it is really difficult when none apply since so few live around here and all the other companies are also trying to become more diverse. If you are a programmer who is also Black, please consider moving to Portland.
It was a bit tongue in cheek but the actual gist of my comment was (as demonstrated by the deluge of suggestions, especially hicker's and carpenter's styles) is that there was not enough investigation for prior art unless the whole piece was an attempt to get HN to provide it.
tldr: researchers build computational models of mice's brains then study the models through methods of algebraic topology e.g. looking at artificial neural cliques (https://en.wikipedia.org/wiki/Neural_clique) up-closed i.e. at a level of detail unobtainable with an actual slice of brain tissue, and measuring their dimensionalities

Here are the stuff the project published so far: https://www.epfl.ch/research/domains/bluebrain/blue-brain/pu...
Yeah I went for about a month thinking my Mac Mini fan was broken.
Twitter hack discussion and a way to secure internal apps
The Twitter hack was a result of unauthorised access to an internal tool. Traditionally, apps are protected via 2FA, network restrictions, logs auditing and access control. However, those are not enough to minimise the biggest risk - humans.

Employees can:

1) Be socially engineered into giving their credentials, even bypassing 2FA

2) Be bribed or get frustrated into "acting badly". I assume they hope to get away by making it look like they were "hacked".

A SOLUTION

- Mitigating login attacks: The idea is to prevent attackers from using the tool even if login is compromised. To achieve this, we must tie the usage of the app to a specific device for each employee[1]. Doing so will not allow any other device to login. This is OK from an employee workflow point of view since they don't switch machines anyway. It also makes it very difficult for malicious employees to fake that they were hacked.

- Mitigating insider threats: Assigning strict access controls and having sensitive actions be approved by multiple people in the organisation reduces the risk of a single point of failure.

- Logging + analytics: All actions an employee takes must be logged, making auditing easy post an attack. One can even build ML models to detect anomalous behaviour and stop bad actors in real time.

DISCUSSION

- Is anything that I have assumed wrong?

- Any thoughts on the above solutions?

- How do you think the Twitter attackers bypassed 2FA?

Thank you for your time.

---------------

[1] How to tie usage of the app to one device per employee:

- Post login, the app must allow only one alive session for that user (i.e. no new session can be created). This means that using login credentials on another browser won't work.

- No log outs allowed.

- Sessions need to be safeguarded against theft (see RFC: https://bit.ly/2ZHuPji). In case of theft, block the employee's access.

- Re-auth for every sensitive operation while maintaining the current session.
The problem is that this... methodology... works for both true & false claims. Pure credentialism held up Lysenkoism, among other things, for quite some time, after all. I mean, I read this:0

> If there was a clear bias in the authors' background, this would call into question the credibility of the paper.

And I can't help thinking how there would always be a "clear bias" of people who weren't strongly in support of the Party against Lysenkoism, so it just puts people into a stronger bubble, it doesn't defend any truth.

I think that those not capable of defending a position scientifically shouldn't attempt to do so and should leave it to those who can. I think this because I see these failed attempts as a way of weakening the point they're attempting to support.

> To summarize: HN commenters are generally ill-equipped to prove/disprove arguments in a scientific paper.

I disagree strongly with this, we have a lot of good scientists here who are better equipped than the vast majority of sites. Maybe not everything can be written into a single post, sure, but most of the people here have blogs or what have you and it's not uncommon to see someone post a rebuttal on their blog and for that to make the front page of HN.
Thank you! I also wish there was more content like this.
Check again. I left. many of my buddies at Google left. People are going back to where they came from
This comment is 100% your emotional baggage and 0% logic.

You expect an employee to stick around to "take the lumps" voluntarily, for LESS compensation than they would get elsewhere?

The reality is that you just don't give a shit what happens to the company or the employee, so you're happy to see the whole thing fail.

...and that's 100% your baggage - don't subject the rest of the world to your emotional problems.
IMHO the greatest falsehood I believed about build systems was:

- If build system X is used, people will read its documentation and write build rules according to the documentation.

No, people will just copy what's already there. And if it pulls in 35 external dependencies, compile 500 unnecessary files, and fails 25% of the time because of race conditions between external dependencies, people will add "Note: if build fails, run again."

Sigh.
Guess what, people do not like being insulted. If you are going to say to a large number of people that their clothes and by extension them "look bad" you are going to get a lot of pissed off responses. It is completely healthy and miles better than the alternative of internalizing it, believing you look bad feeling embarrassment, humiliation, guilt, etc.

By the way this is the way the fashion industry has operated for a long time and people are rightfully sick of it.

The author would have done much better to avoid making general statements. He could have said something like "i really do not like the way pockets look on my pants. I like to wear tight pants and large pockets really ruin that look."
WordPerfect and Novell. There are several other names that have affiliation with Utah as well. The University of Utah is Alan Kay's Alma Mater. It's just a fantastic place for tech.
Personally, I haven't found the gnu efi toolchain very helpful. I just use clang with the appropriate flags, which are:

-target x86_64-unknown-windows -ffreestanding -fno-builtin -fshort-wchar -mno-red-zone

And link, again with clang, using these flags:

-target x86_64-unknown-windows -nostdlib -Wl,-entry:efi_main -Wl,-subsystem:efi_application -fuse-ld=lld-link

I believe you can do the same with gcc and gold|gnu ld without much more effort. The toolchain doesn't really justify its complexity at all.

The headers, on the other hand, are invaluable. I use c-efi[1]'s headers, but would probably use gnu efi another time; c-efi has some bugs and missing structures. Worth noting: despite the name, gnu efi isn't gpl licensed. In fact, I don't think either (c-efi or gnu efi) can really be considered copyrightable; they're essentially direct translations of the spec.

1. https://github.com/c-util/c-efi
Sorry for that. I thought it would be visible enough in red. RM, LM and PM were printed by the bootloader.
It most likely isn't a clone. While Bear predates Notable, the timeline does not seem like Notable was a deliberate clone at all.
After reading the article and comments here, I can't help but think about the times I've seen people here, on Hacker News, writing that they would be happy to be treated by doctors who get their entire medical education from YouTube.

Yes, it's expensive and difficult, but maybe "gatekeeping" is not so bad, given the intellectual and emotional pitfalls of being human and the number of people out there who have it to their advantage for you to believe false things.
I think the reason people are spending so much time talking about cargo pants is that they recognize, even if they don't articulate, the logical error on your argument. You spend a good amount of the post talking about how there is a lack of innovation in the fashion world. Instead, changes tend to be incremental. You then claim to have created your own innovation, a new kind of pants pocket. Yours is a new product. "But," your audience rightfully says, "don't pockets like that already exist in some pants?" You respond that the existing pockets are on casual pants, such as cargo pants, and that your pocket is a different product because it is on dress pants. But moving a pocket design from one style of pants to another is exactly the sort of incremental change you that you say shows the absence of innovation in fashion. We're drawn to your cargo pant statement because it is demonstrably false.
This is a well noted connection between MLM and religious fundamentalism.

https://www.patheos.com/blogs/rolltodisbelieve/2018/02/28/ov...
It has unfortunately. It's used in some of Keysight's oscilloscopes. Even the new ones. And it's not even a new version

https://ripitapart.com/2018/10/15/gaining-access-to-the-wind...

Some of the later ones run Linux apparently but I've never seen one. All the Rigol ones are Linux based.
The conspiracy theory is a pretty necessary part, because the ideology needs to be able to dismiss the medical status quo, and it’s simpler to claim that the whole system is a conspiracy rather than attempt to address any actual medical or scientific claims.
He easily could but would end up taking votes from the Democrats, thus helping his opponent in the process. The American system doesn’t work well with third-party candidates and mostly incentivizes against them; see the 1992 election for a recent example.
Are they police, though? I was under the impression that federal agents are not police?

Should they not identify as whatever agency they are? I would even imagine (but I could be wildly wrong about this) that for example an FBI agent is not allowed to identify as a police officer?
At least now, Overstock is the most famous company I can think of in SLC.
*human population continue to explode.

I think you need to look at the data on that one.

No one wants kids anymore, and the data is showing world wide. Japan is panicking quite a bit over it and the US should be but our immigrants have always helped keep the numbers up.

I think we will at some point move away from toxic metals and more into a plant based tech at some point.

Some commercial uses in the works:
https://www.plant-e.com/en/

https://en.m.wikipedia.org/wiki/Artificial_photosynthesis
neckbeard 4channer school shooter
blister packs are fine as long as they aren't too big (or can be cut with scissors). :-)
IM'ing passwords/secrets is totally believable.
I expect the mainframe model will re-emerge at some point. Paying for consumption instead of capacity is just too attractive.

One thing that would make this easier would be a shift towards systems like LegoOS[0]. Instead of a host-centric design, you directly attach hardware components to a "fast enough" network, each with a little bit of local controlling logic. So there are no hosts per se, just a pool of CPUs, a pool of RAM, a pool of disks etc.

It wouldn't be suitable for workloads where locality dominates flexibility. But in the long run, it could be very useful for scale economies. Especially since different workloads have different patterns of demand for CPU, RAM and disk.

[0] https://www.usenix.org/system/files/osdi18-shan.pdf
My experience in general with windows is that you need GUIs everywhere to configure stuff, whereas linux is text config first. I just deployed 20 pi's at work for a project and remote management on raspbian is fantastic. My BOM for the project is $300 and the previous system's BOM was $3k. Love raspbian.

The other piece is that there are 10 years of raspbian questions and answers on the internet. You have a problem, then someone else has hit it.
When I'd click on the link, I get download failed... and the version I'm seeing on F-Droid was 2yo... I did download and install via the github repo.... may play with it a bit more later.

F-Droid definitely wasn't a recent one when I tried (in the comment above) it now seems to be showing more recent ones on my phone... I don't use f-droid often, so may have been a syncing/update issue or something else.
I’m not sure, but would be very interested to find out.
But then when you’ve unlocked access, you could just make the same fat-fingered mistakes due to implicit use-context settings.

You might use use-context to set yourself to that restricted production context at the start of an incident. 30 minutes later you resolved the incident, but the access is still active and whoops you delete a deployment you thought you were deleting from a stage experiment or something.

All that does is add an extra hoop to jump through. People need to stop believing that adding extra bureaucratic hoops offers any type of safety - it doesn’t.

If you want to restrict access then you need to actually restrict it and convert on-call alert responsibilities to a central devops team that, like it or not, is responsible for solving everyone else’s problems.

If you don’t want a central devops team that can be paged and on the hook for everyone else’s systems, then you cannot have write access controls.

There’s just no way out of this dilemma. Temporary access that can be self-granted == no access control. Temporary access that requires admin approval == admin team is on pager duty for every other team.
It’s kind of like the difference between syntax highlighting on or off in a code editor.
An open standard heavily influenced by a combination of Apple's whims and licensing disputes with standards bodies :-)
External breast pockets work okay for this, too, provided they're big enough and have some kind of flap (with a button or velcro or zipper) to keep it closed. Such pockets are especially handy on shirts.
The freedom of choice for individual components is certainly a benefit of the platform, but I would argue that it also doesn't preclude having a default preset of components that form a cohesive vertical experience. In other words, the defaults should work. That most likely means forking select components, which is what Mint did with Cinnamon, to create a micro-ecosystem that is internally consistent, but they just haven't gone far enough yet.
Check out their Engineer pants, they have that pocket on both sides. [1]

1. https://www.duluthtrading.com/mens-duluthflex-fire-hose-rela...
> stat is slow on modern filesystems.

Is this not true?!? While working on my build times I benchmarked that something like a quarter of my time in clang was due to my having large numbers of sparse -I folders as the stat calls were so expensive (this was a 12" MacBook running macOS 10.14 on, I assume, APFS).
With no pockets on the butt it makes the pants look weird. The plain area is just too empty. Might I suggest adding the words "sexy" or "pink"
Like a built in fanny pack?
Run a BPF program on socket lookup
It's more like the very least we could collectively achieve while remaining functional.
I use simplenote but I still feel like the added features to this are enough to convince me to switch
We also knew that children tend to look like their parents long before we knew about genes.
So the way I’ve been using it is pretty much for toaster notifications and asynchronous updates that are sent from the server to the client. Any component can subscribe to async updates on the shared bus and it will know when a particular object has been updated and can choose what to do with it. We don’t use the global store for all the objects because we deal with a lot of large page-specific state. Toaster notifications are also really nice this way: a lowly modal can send a top page “an error happened” notification without having to do the plumbing for this through every page and component. I don’t see any of that as an anti pattern.
He didn't denigrate cargo pants wearers, he just said this design isn't for people who wear them... And then cargo pants wearers decided that was reason to complain even more.
Team Lead Anti-Patterns
Interestingly I have a pair of pants (these: https://www.duluthtrading.com/mens-duluthflex-dry-on-the-fly..., see pocket detail here: https://www.duluthtrading.com/dw/image/v2/BBNM_PRD/on/demand...)

They implement this pocket strategy and work well for me. The author would likely be interested to know that this topic was covered in detail as an engineering exercise in NASA flight suits. More functional pockets for people strapped into a vehicle.

One of the more interesting innovations was a pocket on the top of the thigh for holding flight checklists or maps. It had a clear cover so that what was inside the pocket could be viewed without taking it out. A phone pocket like that would be pretty cool (and way nerdy but hey, if the pocket fits ... :-))
Exactly this! Make is the worst build system, except for all the others.
I accept the rebut. There maybe a deeper understanding to consciousness that is not obvious from our perspective. Still, calling this the 'greatest mystery of them all' feels disingenuous, as there may not be a mystery.
I have it, I "see" sounds and especially musical notes as flowing shapes with color and texture. Very strongly as a child, sadly faded quite a bit by now (in my 50s). It's definitely a blessing. It adds several additional dimensions to music and makes the experience so much richer.

Edited to add: Listening to music smoking pot back in my college days was just an incredible experience. I don't miss pot, but I miss listening to music like that.
Source ---[Big Red Button]---> Artifacts

How did this go wrong??
I think we limited "Math" to the wrong things in school.
Is that fallacy also true for cooperatives?
As much as I agree with Lovelock's sentiments about the environment, Gaia is more wishful thinking and certainly doesn't have its foundations in science. That is, the world does not tend towards stability. Ecosystems tend towards chaos and don't return a norm.
That's a good observation.

Any deficiency in a complex, widely used and difficult to change development tool will be fixed by adding an extra layer over it.

If the deficiency is something like complexity or lack of reliability that can not be fixed by adding extra layers, read this comment again.
I am always glad when someone calls out nonsense that wastes people's time. Even if this wasn't fake, the headline says something completely different than what it actually is. It isn't nitpicking to point out a lie.
>The US doesn't have the maturity to produce cocaine and distribute internally w/o becoming another cartel.

It already does.

Stepan, a chemical company in New Jersey, is the only company in the US licensed to import coca leaf, which primarily comes from a Peruvian state-owned company. The cocaine is extracted and sold to Mallinckrodt for pharmaceutical use (it's used in ENT surgery, as it's both a local anaesthetic and a vasoconstrictor), whilst the remnants are sold to the Coca-Cola Company for use as flavourings.

https://www.nytimes.com/1988/07/01/business/how-coca-cola-ob...
All of that is repugnant to the constitution and our natural rights. It will also do nothing to stop violence.

One comment regarding the term "Buyback", the government never owned them they can not "buy" them back. It is simply a euphemism for confiscation. Moreover, you can go to pretty much any gun shop or pawnshop to sell a gun you do not want.
Those were different times. And besides that, assuming Stripe is organized properly, which given the Collison brothers' reputation I would not doubt for a second that money does not flow through their current account but through a third party account meaning they can't touch it unless they (1) disburse it to the merchant or (2) return it to the customer.
Wordperfect. Fun little epilogue - Wordperfect founder Alan Ashton used some of his fortune to establish Thanksgiving Point[1], a group of attractions in Utah including museums, a garden, a golf course, and some restaurants and shopping. The area is in biking distance from the offices of many Utah tech companies in Lehi City. I just moved to a home in the same neighborhood and it's really nice! We got a year pass to the attractions for the whole family for like $300 and bike over to something a few times a week with the kids.

[1] https://en.m.wikipedia.org/wiki/Thanksgiving_Point
Brian Kernighan Interview
I've interviewed in SLC before and the biggest problem with their startup scene is the complete lack of diversity. Otherwise it would be amazing to live near those mountains. I'm just not interested in working at a company with so literal cultural and racial diversity.
Yet another electron-based notetaking app.. There's already so many of those. And it's not even open source (anymore, since version 1.5.1). Why go to closed-source for something like this?

I really miss the old Tomboy. It was lightning fast and you could hotlink to another note just by typing its name. It had keyboard shortcuts for everything and searches were pretty much instant. But it's not maintained anymore, and the "NG" version lost the speediness of it (it was a complete rewrite)

The only thing I didn't like about it was that it was based on mono/.net and that it didn't have a CLI version. But despite using mono it was still really fast, it was just a bit of an installation hassle. I'd still use it today if it was still viable, but the lack of HiDPI support in particular makes it really difficult to use today.

One thing about Tomboy that I was a bit divided about was the lack of images. Today I use OneNote because it's basically the only thing my work supports. But I took much better notes with Tomboy as I always had to type content in my own words, whereas with OneNote I got lazy and just screenshot presentation sheets (which aren't searchable and make the database huge and slow).
If your statistics are correct, that lends credence to the old saw, "An armed society is a polite society." But that's likely predicated on everything thinking that everyone else is armed (which in high gun control areas would not be the case). Sort of like nuclear weapons' "mutually assured destruction."