skysight-inc/HackerNews huggingface dataset:
What has been lost of the privacy of the data, which can be returned.
This one is tricky. Effective phishing preys on the weak and the vulnerable. For better or worse, we do have to train people -- even weak and vulnerable people -- not to fall for scams, and there's no better way we know of than to do training exercises. Cruel though it may sound, unless we can think of a better way, I think it's the most effective option.

The fact that employees are failing this proves the point, and until we can show that they are no longer falling for it, it shows how vulnerable we remain from an infosec posture.
You're probably right that ignorance is the root of their apathy. Hopefully with this event making the news, doctors at least in the same specialty will hear about it and do something. Unencrypted offline records physically secured in the office building seems more than adaquate in all but the most exceptional scenarios though. Maybe it wouldn't be good enough for doctors of high-value targets (celebrities, politicians, etc.) Burglars targetting medical records seems uncommon.

Harsh fines are probably the best way to make doctors care though. If they know they risk financial ruin for not securing their records, they'll have a strong personal incentive to remediate their ignorance.
The slash menu drive me mad. Why the heck would anyone want it in the middle of a word? The only time I use slash commands is in a brand new empty block. It would be lovely to simply be able to disable this.
CrowdStrike Launches Free Tool to Identify and Help Mitigate Risks in Azure Ad
The first Dune book.
I scrolled down the thread wondering if someone would mention him and if nobody did I was going to.

It's insane how much hype he had at a young age and how he's delivered again and again. The only players with similar [amount delivered] * [hype] values are peyton manning and tim duncan, but lebron's is way bigger.

Also worth mentioning in his accolades: brought a championship to his hometown, has never had any PR disasters (except for "the decision"), has many charities (scholarships, gives out bikes, etc), and elevated his friends and family to make them successful as well. He's basically done everything right.

And I say this as a long time celtics fan and lebron hater.
I gave up telling them they were wasting their time, and now my spam filter takes care of FB headhunter spam for me, as it should.

FTR, I do think that's a bit unfair. Judging other peoples' circumstances is a perilous pursuit.

But I will say FB is parasitic on and dangerous to society and is run by amoral shitbags, I don't believe anyone with a sense of ethics or self-respect should work there.
Excellent point. I hadn't thought of it, but knew it as a kid, when I read your comment.
Better yet, just bounce the coin off of two surfaces before it lands. Makes it almost completely unpredictable.
If a company had a pen tester offer bribes to people, and those employees accept bribes, the pen test was indeed failed and those employees should be rightfully reprimanded. That's good security.

If a company had a pen tester send what appears to be a perfectly legitimate message to employees offering them a company bonus for responding (during a worldwide pandemic where everyone is short on money), and then says it was a pen test and they've failed, that company is awful and heartless. There might not be a legal case against them, but the company is still deserving of public scorn and outrage.
Ok, point well taken. Thanks for all the work you do keeping the site civil and high quality.
I'd like to, but the fact they required the TV was pretty crazy, to me. They've captured a huge portion of the smartphone market, but apple tv is only 1-2% of the market, and in many countries much less than that.

They don't allow your phone to show Fitness+ on the TV through HDMI, nor through airplay. The phone screen is just way too small.

So what's left are iPads, which can be a really great experience, particularly on the 12 inch pro, but it's a shame they don't allow Macbooks... I'm okay with the buy-in to some extent but man... A watch, phone and an apple tv is necessary, all from the same company, plus a subscription just to do a video-assisted workout that shows your heartrate on the screen? That's a pretty insane proposition. Would've been great if they allowed more options or third-party stuff. Just casting from my iPhone would've been a good start, or casting on my macbook... Honestly it's pretty ridiculous.

Happy Macbook, iPhone, Apple Watch and Airpod Pro user, otherwise.
The deck chairs appear to be arranged optimally at this time, but we understand that other circumstances may reduce demand for them.
Having a kid. Every day is filled with joy, and sometimes sadness, but it's so great to watch him grow and learn.
It will be interesting how that looks in the next generation. The Graviton looks decent, but not an intel killer, but more of a price/perf value. Apple's shown that ARM can be quite competitive, especially for Amazon and similar companies that to pay for not just hardware, but space, power, and cooling.
Despite Solarwinds, Fed wants to collect more of your data
Again, it’s not how I would write these regulations. That said, regulators are working with real world data.

The expectation is for people to be able to exit the building or at least get to a lower floor, because that’s the usual case. Failing that ladders can generally evacuate people from the 5th floor. Jumping is very much considered a rare last resort, but is more controlled than people simply falling that distance. Further, first responders are more likely to be onsite which again increases the odds.

As an example of 4 people jumping from the 5th floor and only one being sent to the hospital. While everyone else in the building evacuated normally. https://www.independent.co.uk/news/world/europe/family-jumps...

So, while there are a lot of relevant regulations building height is a meaningful distinction.

PS: On an 18m tall building. The 1st floor is ~0 meters off the ground, the 2 floor is 3 meters up, 4th floor is ~12m up and 5th floor is thus 15m and the roof is at 18m. A window adds 1m but someone dangling removes ~2m based on their height. As in dangling from the 2nd story window is ~2m fall and a 15th floor balcony would be a 13m drop vs ~14m from a window. (Using G, 1, 2, 3, 4 is the same numbers just offset by 1.)
Illmatic, Nas' debut album.
Hi, this does not work for me between W10 and android. How can I go about debugging this? Both names appear on both screens, but no files seem to transfer. I tried web & app on android, no difference. Thanks!
Facebook's ad inventory is sold by auction. Inaccurate targeting isn't a big deal as long as all advertisers are treated the same. Furthermore, granular targeting is no longer the way to scale on Facebook. Therefore, inaccurate targeting will have little to no effect on most campaigns' efficacies (at least the ones designed by those who are knowledgable of the ecosystem). Any FB marketer worth their salt knows this.

Many people are claiming FB ads are a scam due to their personal inability to make ads work for themselves. As someone who's spent 8 figures on FB with no special connections, I can tell you this assertion is complete hogwash.

In fact, the opposite assertion than the one in the article is true: Facebook is LEAGUES ahead of its competition as far as its ability to accurately predict user conversion rate given a specific ad and user.
My company has been sending out monthly tests for about 2 years now. There were some modest early gains (~33% -> 20%) but it's been stuck there for 12 months or so.

They're not particularly convincing fakes either: "please update your password sent from @ourc0mpany.com" or "Dear Customer, your Worldwide Freight package has shipped" type things.
85. Cultivate compassion for those less intelligent than you. Many people, through no fault of their own, can’t handle forms, scammers, or complex situations. Be kind to them because the world is not.

Don't assume someone is not smart because they have trouble with something you find easy. People have different strengths and weaknesses and the same person you are tempted to look down upon as "dumb" may blow you out of the water on some other task.
Paying a teacher is very expensive and a large time commitment, could you elaborate why the things a teacher can show you are not covered by online or self study
I'd say there's effectively no latency, since most games don't need or benefit from <10 ms response times.

I mainly play twitchy shooters on a fairly high-end PC (CSGO, Tarkov, Q3A back in the day) and was super impressed with Stadia to play games like Assassin's Creed. It felt like I had my PC anywhere, but I attribute that to the forgiving latency requirements for the game.

I wouldn't expect CSGO to work as well (though I'd definitely try it).
Intel is absolutely not finished. Sure, in some filter bubbles, AMD has won and the remaining share is eaten by ARM, but take a look at the bigger picture:

If you're buying a server, Ryzen/EPIC-Servers are just appearing right now. The dell server line-up [0] is still mostly Intel-Servers, with one novelty AMD server per category. I bought a laptop this summer and most offerings - by far! - are Intel, especially in the ultrabook category. In the gaming scene, AMD has its fans, but raw single-core performance is still important and quite a few people still choose Intel. Lastly, your average consumer really doesn't even know the difference. ARM could be a threat, but the low adoption of Windows ARM and ARM servers shows that this yet to realize.

Additionally, the recent publicity stunts from Intel also clearly show that they see the upcoming threat and are reacting to it. And even if they don't, long lasting contracts and sheer inertia will keep them above the water for quite a few years to come.

In summary, yes, Intel is not in a great position, but it is far from dead. And if you're attempting to short it now, there's a good chance Intel will stay liquid for longer than you.

[0] https://www.dell.com/en-us/work/shop/poweredge-rack-servers/...
At this point maybe FAA should have several "hot drones" charged and ready to takeoff as soon as the next sighting occurs to chase down the culprit.
There was an episode of the old "Breaking Vegas" series [1] on the History Channel about such "dice dominators". This site seems to have the episode online [2].

[1] https://en.wikipedia.org/wiki/Breaking_Vegas

[2] https://www.goldentouchcraps.com/HistoryChannel.shtml
>People are clearly just upvoting based on the title.

Yes, that is why I even flag it. The article has no technical ( in terms of both technology and stock trading ) discussions, and very little analysis.
Thats make two of us. SE (gen 1) here too.

You make a good point but always consider the trade off (as you have done) between all the info you now know is out there and what to incorporate. That's always the trick, what you leave out must enhance. But you knew that!

Don't hold your breath, as I'm tied up with other things, but I'm working on a user movie scoring technique now. Testing on immediate friends for now.
I was working on writing the same thing, though less clearly. :)

As a minor note, in Python 2, types.ClassType was a "thing":

>>> import types
>>> types.ClassType is type
False
>>> isinstance(types.ClassType, type)
True
>>> my_class = types.ClassType("spam", bases=(), dict={})
>>> my_class
<class __main__.spam at 0x106732670>

I don't remember the details any more, but it looks like it was the base for class for old-style classes. Using your class definitions:

>>> isinstance(OldStyleClass, types.ClassType)
True
>>> isinstance(NewStyleClass, types.ClassType)
False

Python 3 replaced that functionality with types.new_class(), which returns an instance of type 'type':

>>> my_class = types.new_class("spam")
>>> isinstance(my_class, type)
True
>>> my_class
<class 'types.spam'>
>>> type(my_class)
<class 'type'>

As I recall, in the early 1.x days it wasn't apparent that the class/type dichotomy was a problem. It took a lot of work during the 2.x era to bring them together.
We know that Intel has a 32-bit Arm architectural license and likely has a 64-bit but not all of those are publicly known.
Estimated transmissibility and severity of novel SARS-CoV-2 Variant of Concern
True story, but I’m not making a point here, or trying to disagree with you. Just something that happened to me once:

I was leaving a hotel near the airport in Delhi, and as were waiting outside for an Uber the manager of the hotel told us not to be alarmed if we saw some guys with guns running towards the hotel. Told us the police were running a terrorism scenario to see how the local hotels would react, and whether they would follow the plan for such an event. The guns would be unloaded, but everything else would seem realistic. The manager and the outside security knew about it (because they had to let the “terrorists” into the hotel) but no other staff or guests had been warned. We were only told because we were outside and might see them coming and he didn’t want us to give the game away.

Fortunately our Uber arrived before the “terrorists”. It’s possible the manager was just fucking with us, and none of it happened, but it didn’t seem like it and if he was that’s a pretty messed-up thing to do, too. It occurred to us that if they were actual terrorists he might be in cahoots and making sure they got into the building.

He also told us how in a real event he told his outside security guys to run away, they couldn’t stop terrorists anyway, and there was no point getting themselves killed.
JPEG XL Bitstream Frozen
Given the wording, I still don't see how this works. A more long term, indirect approach would probably work better.

If Facebook had a continuous, long term, PR campaign, where they reasonably established themselves as helping small businesses, and then they did this. I would get it.

But like this? In isolation, it feels more like a knee jerk reaction and not a thought out messaging campaign.

My guess is that the root cause is one of internal perception vs external perception. They see the threat and honestly believe they're in the right. That's how they rationalize it, but the rest of the world assumes more nefarious intent (which is also exaggerated, the truth is likely somewhere in the middle).
If you're trying to show raw space RG (50, 50), then when you show (100, 0) and (0, 100) in adjacent pixels, there are exactly 50 * 2 units of light distributed over each pair of pixels, so your eyes will see (50, 50) if the pixels are small/far enough.

Another way to put this is that dithering works because of physical blending of photons due to an insufficiently sharp eye lens before perceptual mechanisms in the brain.
Ah, gotcha. But I don’t think that that’s actually a difference—it’s just a slight terminology change around “type” and “class”, which I think may have been related to tidying up old-style classes. (That is: yeah, if you’re comparing old-style classes, it may have been a difference (I’m not certain), but I believe it’s completely superficial once you’re comparing the recommended form of classes for the last quite a few years of Python 2.)
You are assuming that seeing real emotional stakes in the phishing exercise actually helps with recognizing the same in a real phishing email. I very much doubt the validity of this argument.

Note: I'm not against testing your employees for phishing attempts. That is extremely valuable. I'm against using something with an emotional impact as the pretext of the phish, when I believe a more neutral pretext will do just as well.

A separate note is that according to the pictures shown, it seems this is also a particularly bad example, as the email has legitimate headers, showing that it's coming from godaddy.com - so it would only rely on employees distrusting the contents to recognize it as phishing, which is a bad lesson to teach.
The original or Fury Road?
¡Feliz navidad!
The apex phishing e-mail is indistinguishable from a legitimate e-mail, except by SPF/DKIM. After all, the apex phishing e-mail is based on a byte-for-byte copy of a legitimate e-mail.
Actually I think the first example was a really simple case, where statistics would expose the error. So even the doctor said, that they experienced an uptick in Down syndrome diagnoses. So basically they just didn't investigate it properly. From my experience every advanced ML-System have proper monitoring and such anomalies would be detected very fast. Especially when you change the machines. Actually it is a shame that the doctors couldn't figure it out by themselves or at least investigate it properly.
I can imagine that on a slow, lazy flip with a big coin, but is this realistic with what I think of as a "normal" flip, i.e. a US quarter, flipped rapidly end-over-end with the thumbnail, 2+ feet in the air? It's hard to believe that even decades of practice would get this reliable, and I don't think I've ever seen a stage magician rely on it in a routine.

For comparison, the other method (where the coin rotates about its vertical axis) is something you can learn to do tolerably well in a few minutes, and to do very well after a month or two at most. The motion of the coin will look perfect, and you can even get the "ding!" noise of a real flip. The only giveaway is the hand position; a real flip is done with the thumb under the coin, and this trick (for me, anyway) requires the thumb to be on top.

Source: taught myself to do this many years ago. I'm not a magician and have never used it to win money, I just use this to settle arguments between my kids.
> I have no idea how anyone lives with it for anything except writing extremely repetitive, formulaic, and superficial code, because having to dig into its guts feels like a nightmare.

It’s interesting that Python powers an outsized chunk of contemporary scientific research.

Perhaps its fitness for purpose is a result of its messiness, or perhaps that messiness maps better to the way that many people think? Would a more rigorously-typed alternate-universe Python have been as successful?
> I credit the film for making me rethink some really important things

I recommend reading some of Philip K. Dick's works for more of that, which I would summarize as "what it is to be human".
The 'class' versus 'type' distinction here is actually arbitrary. The same C level code is responsible for the message that you get from 'type(whatever)' in both Python 2 and Python 3, but in Python 2 it drew a distinction between heap-allocated things (which were reported as 'class') and things that were not heap allocated (which were reported as 'type'). Non heap allocated things had to be created in C; heap allocated things were usually implemented in Python and were usually made with 'class X(base): ...'.

(This change was introduced in Python 3.0a5, bug #2565. Looking at the bug, this is a followup of making the type() of new style classes be reported as 'class ...', but preserving old behavior of type() for built-ins, done in 2001.)
What could explain the mechanics of how this happens?

Surely FB employees aren't managing those bot accounts themselves. Do they generally determine accounts that engage with ads to be "human/real", thereby incentivizing bad actors who spin up fake FB accounts to click/"like" ads?
The Falcon Heavy launch. Wow.
You're citing an absence of evidence as evidence of absence.

Consider the following: if Facebook knows its targeting is ineffective and doesn't meet the criteria, why would they put that in writing, knowing that anything on writing can be subpoenaed?
It was used quite a bit in video editing in the early 2000s because the video frames often came from disk or a card in that format, and you could do some fast processing tricks with it. Those days have largely passed, though.
Again, while you may be proving a point and obtain a localized victory, it is Pyrrhic. There are other phishing scenarios that can be tailored for the proclivities of each team. Overdue POs for purchasing. “Hey I saw some source code leaked on this site” for engineering. Etc etc.

The only reason you would have to send something like this is because you are lazy, need to generalize quickly, and blast it to the company. And you will teach a lesson. And you will kill any goodwill to the security team as a byproduct.
I left that one out of my memory when I said "all their games"...
Put yourself on the other side. If their employees are failing this test when they send such messages themselves, the company cannot feel comfortable that they are secure if a malicious actor sends such messages to their staff. It's a case of bad vs. worse. There are no winners here.
Related: https://fivethirtyeight.com/features/can-you-make-an-unfair-...
Anecdotally, FB shows me the same ads on repeat: Few are relevant, and the same ones repeat past a threshold I'd assume would indicate I'm not interested.

https://www.youtube.com/watch?v=KbKdKcGJ4tM
I got mine through my insurance's cashback program, pretty cool. As long as you workout enough, you get 1/24th paid back monthly. The workout requirement isn't too crazy, commensurate with 2 weekly workouts and some daily activity (like a walk), and based on heartrate (so effort-based, instead of performance based. if you're out of shape and your heart rate goes up a lot from a simple walk, it'll get recognised as a serious workout for you, because in a way, it is).

Not sure I'd have gotten it otherwise. But at the same time, it's pretty easy to rationalise any cost when looking at it as a monthly payment haha. A 3-year usage and a 20% resale value on the SE ($280) will get you a $6 a month price. If that improves your daily activity by just 5 or 10%, that's probably the cheapest medical intervention in your life, ever. That's probably why the insurance companies offer cashbacks, it's a cool model. They can give me a watch for free every few years and get in return a person who, on average, spends >1x the apple watch less on healthcare costs, every year.
It's rare but not unknown - for example Facebook employees' e-mails are whatever@fb.com rather than whatever@facebook.com and sometimes facebook send e-mails from whatever@facebookmail.com ¯\_(ツ)_/¯
I do not know Ross Ulbricht, and apart from having followed news reports about his case, and having watched a documentary shown on the BBC (Silk Road: Drugs, Death and the Dark Web), my opinions matter as little as those of others not privvy to evidence presented in court hearings.

Bright chap, but misguided, might be a view that I'd be happy to defend.

I would not, though, want to leap on to an uninformed bandwagon with respect to his alleged conspiracy to murder, or with respect to any campaign for presidential pardon.

Old-fashioned as I am, I would prefer any such deliberations and rulings to be the domain of the judiciary and legal systems, rather than of random public opinion.
The election resulted in far less violence in the streets than I expected.
Darwin, Expression and the Lasting Legacy of Eugenics
Not disputing this theory, but want to add: This, if true, is only the case because of our collective human short-sightedness, greed and stupidity.
Off topic but, on mobile I use Youtube vanced which is perfect. It blocks ads, allows for picture in picture, background play and a dark theme.
But it's not e2e encrypted.
No, if their total compensation with tips winds up being below minimum wage the employer has to pay them enough to get them up to minimum wage. Do companies abuse this, probably, but according to the law they need to be paid at least minimum wage. Waiter/waitresses need to declare their tips to their employer so that they can make sure they are getting paid at least minimum wage.