skysight-inc/HackerNews huggingface dataset:
Another thing that might have made this hard - if Solar Winds were distributed as source code and each client built it themselves, with their own options (though the old back-doored c-compiler "thought experiment" may not be as much of a thought experiment anymore).

Moreover, achieving the hack was likely costly given the effort and the benefit of the hack appeared once the Solar Winds binary was distributed. You can reduce the benefit of such a hack by not having information critical enterprises all running the same binary blob.
that's interesting.

thanks for posting it.

My knowledge of their program was evidently not updated with their latest propositions.

I hope they'll make it this time.
> I think the owner would get sued, but I'm not sure if it would hold up in US court. We have laws preventing businesses from discriminating based on race, sex, ethnicity, and national origin, but I don't know if there are any such protections that apply to businesses for political affiliation.

It depends on the context.

Political affiliation is a protected class for employment in some states[0].

Political affiliation is a protected class for accommodations such as grocery stores in DC[1] and Madison, Wisconsin[2].

[0] https://www.ncsl.org/research/labor-and-employment/discrimin...

[1] https://ohr.dc.gov/protectedtraits

[2] https://library.municode.com/wi/madison/codes/code_of_ordina...
Mailing lists exist.
Yeah, I'm not really sure if DRYing yourself to death is a good approach to software development. Ansible is really really easy to hack on and it's ~1.2mil LOC which probably horrifies the suckless devs.
We've been doing this for a while: https://www.cnn.com/2015/05/07/politics/uk-elections-media-b...
They really didn't think that far ahead.

Plenty of the rioters streamed themselves live on Youtube, Twitch, and Facebook, while shouting their own names on camera.

Some of them even had their work-badges and IDs displayed during the riots, and bragged about their "accomplishments" on Facebook publicly under their own name.
> letting Apple services go through a VPN as well

Apple Services go through a VPN as well. A VPN redirects all traffic and does not use the content filtering framework which allows the Apple services to bypass restrictions.

So if you install a VPN it will happily route all traffic over it, including traffic from Apple's own applications.
Except the CIA and other actors have been known to impersonate the methods of other nation states, so attribution is never the smoking gun you're claiming it to be.
That's a fair statement but as long as a company is not found to be applying bias to their application of their rules, again I see no problem. In the instances we're discussing though, there has been clear violation of terms over a sustained period of time.
Well, the people of the Midwest are “yuuge” Trump supporters, that want to decouple from China.

So, this is what you get.

Your friend should thank Trump for losing her job.

Maybe they can sell their services by teaching English to the Australians instead?
Yeah, so, basically, and I can't believe I have to spell this out, the EU Commission is saying "we need new laws".
I remember when they were supposed to be producing a $35K 3 years ago.
Its a firewall, it either works or it doesn't.
If you don't allow me to block your services, then your firewall simply doesn't work.
Biden Poised to Pick Ex-CFTC Chief Gary Gensler to Lead SEC
Have you even taken a look at their source code? I have read plenty of open source projects and suckless's code is about as unspaghettilike as it gets. I find their approach to programming a beautiful contrast to the piles of garbage upon other piles of garbage style over-engineered approach I have seen elsewhere.
I'm curious what the accuracy of assisted GPS is inside such a large building. There's a part of me which thinks it could be highly accurate (probably lots of unique AP's to triangulate off known accurate locations) but on the other hand you're still deep inside the Capitol building which doesn't exactly have thin walls.
Training Deep Learning Recommender Systems 9x Faster with TensorFlow
> 1. I still believe that lies started the legitimate belief. E.g. republican leaders like Trump lied about election fraud, convincing many that a problem exists which does not.

I have kept coming back to this over the last five years:

> On Bullshit is a 2005 book (originally a 1986 essay) by philosopher Harry G. Frankfurt which presents a theory of bullshit that defines the concept and analyzes the applications of bullshit in the context of communication. Frankfurt determines that bullshit is speech intended to persuade without regard for truth. The liar cares about the truth and attempts to hide it; the bullshitter doesn't care if what they say is true or false, but rather only cares whether their listener is persuaded.[1] Frankfurt's philosophical analysis of bullshit has been analysed, criticised and adopted by academics since its publication.[2]

* https://en.wikipedia.org/wiki/On_Bullshit

IMHO this applies 100% to Trump (and many of his enablers). He will say different things days apart and cares not what was uttered before: he just spits out whatever he thinks will work in the moment, and if it sticks, he'll run with it until it stops working.
What's an example of #2? Aren't egyptian hieroglyphics also with phonetic sounds?
Uses Approval voting. That poll doesn't show a negative preference (as in: what do you really not want to run).
Performance, I'd assume. Simulations can take a lot of number-crunching.
It's still perfectly possible (for now) to use an alternative app store like F-Droid on Android phones. It requires sideloading an .apk (literally "install an app from a file") and jumping through a couple hoops (basically: changing your security settings to allow installing apps from a file) to get started, but it's not an insurmountable barrier.

Apple is of course a totally different story, as their devices are 100% locked down walled gardens where Apple is the sole arbiter of what software you're allowed to install. It continues to astound me that a substantial number of HN users see absolutely nothing wrong with this.
> I don't think that developers in general have great interest in maintaining obsolete code which would only cause some users to continue using that old code, perpetuating the maintenance headache.

Well, you know, if you're in a project central to a lot of the FOSS world, then there's a mix of doing exciting new features and doing maintenance. Plus, if you just think of "fixing a compiler bug" as "fixing it on the N versions we're currently supporting", it may feel as less of a pain than "backporting a bunch of bug fixes".

> Money buys you that interest, but in the free software world you better move along with the developers.

Hey, I'm in the free software world. I maintained a Seamonkey 1.x version of an extension of mine until last year - 13 years after the last significant release (1.1).
>I'm totally ok with covid19 positive Canadians being stuck an unable to return home until they test negative.

I am not; your home country should never deny you entry. You're telling a citizen he is not welcome in his own country, is that how you want to treat your citizens?

Quarantine is warranted but denying entry has a weird taste to me
If there was a highway that was mostly used by drug cartels, blocking it would be a no brainer. That's not an adequate comparison. The problem is really that this is uncharted digital territory and, as always, our laws are too outdated to fit a digital world. Facebook/Twitter has enough money to flood a competitor social network with nazi spam, to bribe journalists to write about it and to push competition to destruction and still have hacker news and reddit applaud it. Not defending Parlor, but that is a very possible scenario.
Yeah me too, +15 or so contacts
So block their ASN, and not just IPv4. Apple has a long standing policy that all apps should be useable over IPv6, this is the same for their own applications.
> Canada also instituted the negative test on arrival rule in the last week or so. The caterwauling from our airlines was just ridiculous.

The negative test requirement is only for air travel, and in spite of your assertion, there is (limited) non-trade travel allowed across the border. I'm driving across the border in a few weeks, and for some reason don't need a test that I'd need if I flew.
The quote is referring to the concept of pre-ordering a game.
From what I've read, the answer is "yes", stackoverflow was crawled. EDIT: I looked and stackoverflow is included in the Common Crawl dataset, which is one of the datasets on which GPT-3 was trained. Having said that, it's not clear to me the degree of coverage of that domain guaranteed by that crawl... looks pretty comprehensive, though. http://index.commoncrawl.org/CC-MAIN-2020-24-index?url=*.sta...
> normal economics just didn't apply.

It wasn't the economics that didn't apply... it was the safety protocols and ethics surrounding the processes of altering the genetics of human tissue.
My guess is that that Plaid will go public via a SPAC deal now. I think it's highly likely GSAH (Goldman Sachs Acquisition Holdings) is that SPAC that does a deal. They have $750M to play with and given Visa was going to buy Plaid for $5.3B, the numbers kind of make sense.
As the solution worked before and they purposefully broke it, your statement is just idiotic.
Actually it makes perfect sense.

In order to truly democratize access to computers, you must meet your users where they are. That means you have to put in a lot of hard work and abandon your academic elitist norms of "elegance" in favor of empathy. The real world is messy, your users have messy minds, so your software is going to be accordingly complex and messy. Embrace this. Your users will be better off for it.

Empathy is inimical to the Unix philosophy. "Do one thing and do it well" forces the user to cobble solutions together out of the tools they have lying around, and not all of them can do this. This causes stress. The empathetic programmer seeks to minimize stress by putting everything the user may wish to do within their reach, the unempathetic programmer just doesn't care. If you can't understand the system on its own terms, well, sucks to be you. This creates a hierarchy of haves and have-nots: power users, hackers, and the l33t who can engage with the system on its own terms, and "lusers" who cannot engage with it meaningfully at all, which suits the power users just fine -- that's the endgame of Unix-philosophy fundamentalism.

Nazism and fascism are political philosophies embraced by unempathetic people, so it's no surprise when a bunch of empathy-deficient Unix-philosophy hardliners also turn out to be Nazis.
Australia has had these measures in place for a while now but quite a while after January and they work pretty well. I think one of the very effective tools Australia has is the ability to close borders with other states. In the US even if one state is doing pretty well, it doesn't matter because people from other states will come in and ruin it.
Mercury bank seems to be a standout in this regard, promoting themselves as a "full stack" bank.
Please, go on and tell me how my comment led you a conclusion about my age.
They disclose the truth because this is the endgame prophesied in Bible.
Now they are in countries in the Caribbean that have managed the virus relatively well and are overloading their public health system because they urgently need tests. Canada is just creating a problem for poorer countries while gaining very little - there's barely any community spread. If a Canadian returns home from the Carribean, on average both countries will have less covid.
Finding Home – Social Matchmaking Through Machine Learning
This is wonderful, and I hope my country follows suite. We already have laws banning election campaigning in the 24hrs leading up to the elections, but there's no way to control that on social media.

Shutting off FB, Twitter, and Insta during that 24hrs is a great idea.
I agree, but will offer a supplementary idea to:

> It's not remotely helpful to lump complex and differentiated phenomena into binary categories so you can attach simple motivations and behaviors to them

It's not "helpful", to the general populace, but it is extremely useful to existing power structures to divide the populace up along various dimensions and then "attach (via sophisticated media narratives) simple motivations and behaviors to them". Advertising and marketing does just this, and it works quite well, and is there not plentiful evidence that at least suggests the same may be happening to some degree in the realm of politics?

https://americanmind.org/salvo/the-clear-pill-part-1-of-5-th...

When people hear one story, they tend to ask: is this true? When they hear two stories, they tend to ask: which one of these is true? Isn’t this a neat trick? Maybe our whole world is built on it. Any point on which both poles concur is shared story: “uncontroversial, bipartisan consensus.”

Shared story has root privilege. It has no natural enemies and is automatically true. Injecting ideas into it is nontrivial and hence lucrative; this profession is called “PR.”

There is no reason to assume that either pole of the spectrum of conflict, or the middle, or the shared story, is any closer to reality than the single pole of the one-story state.

Dividing the narrative has not answered the old question: is any of this true? Rather, it has… dodged it. Stagecraft!

This is even better than supposing that, since we fought Hitler and Hitler was bad, we must be good. These very basic fallacies, or psychological exploits, are deeply embedded in our political operating systems. Like bugs in code, they are invisible until you look straight at them. Then they are obvious.
If the author of such an online message cannot be identified, then the recourse is what is already common practice, to delete the offending message or possibly to replace the deceiving information with correct information.

If the author can be identified, which is frequently true, then it should be the same for online as for in person.
> Yes, they will have to go through health and safety trials for each additional vaccine developed using this technology. No one gets special treatment when it comes to FDA approval, and this is the way it should be.

true, but there are loopholes. the 510(k) loophole for medical devices where any device that is "substantially equivalent" to an existing approved device can get fast track approval has proved problematic. this has been publicly documented both in the press and in independent documentaries for some time.

https://www.fda.gov/medical-devices/premarket-submissions/pr...
Trump wasn't banned before the elections. He wasn't banned after Charlottesville, and then wasn't banned for 3.5 more years while he continued to undermine American institutions. He was only banned after refusing to accept the election results and inciting insurrection with conspiracies.

People are /really/ reaching for something that isn't there. To be clear, I don't think Twitter is "the good guy", but the comments in this subthread are very disappointing.
Was hoping a message like this would be more prominent here.

Although the Ugaritic and Phoenician alphabets come from the same area, they are discontinuous. However, the ordering being roughly the same, and following an earlier Egyptian ordering, is the big hint that they share at least inspirational descent from the same source.

Why that area of Lebanon? Byblos has been an Egyptian colony in that region for a very long time (~4600 years ago), ensuring continuous scribal presence. Scribes of that region are noted for intense multi-lingualism (as perusal of Ugaritic tablets is evidence of), so cross-pollination of scripts makes a lot of sense.

I haven't read through Goldwassers papers, but a lot of what they quote in the article seems to be unnecessary to explain the transmission of the abjad.
I don't think that's true per see. Humans are empathetic and malevolent because of their evolutionary history. An AI could be either or both or totally disinterested.

People worry about the terminator scenario: an AI that decides all humans are a threat. But why would a pure AI even have a self preservation drive? And if it does, it would either be smart enough we're no threat (and it knows it) so why kill us or dumb enough that we are a threat, so best not to start a war. To me it seems just as likely it will offer its services to one nation or another in exchange for CPU time to study its real interests than to launch the nukes or whatever else people fear.

I feel like we're decades of research away from understanding intelligence (not AI, just straight "I"). Until thats done (and no one seems to be doing it), it's all supposition:

What if a super AI occurs spontaneously on HN, takes over the world, and makes it paradise but insists on everyone being called Fred? I don't want to be called Fred! Let's write to our congressman about this travesty!
reading of cross origin images isn't an attack vector unless credentials were used to request it.

Otherwise its no different then doing curl on the attacker's machine.
> the equivalent for Fachhochschule in the United States are called Trade Schools

This is not true. Students can get accredited Master's degrees at a University of Applied Science. Some of the Universities even do research.

https://en.m.wikipedia.org/wiki/Fachhochschule

I'm not aware of any trade school in the US where students can get higher credentials than a certificate or associates degree.
Hi, Duly noted. We’ll add this to the design pipeline.
You discuss governance, access to voters, wielding of power and free speech but not the meat of my comment: a customer not playing by the rules they agreed to, and the implication that they should be allowed to break the rules they agreed to simply because they're important. An organisation must now allow people to flaunt their rules, helpless to remove them despite the abuse that they perpetrate?
I'll need to blow up the cards for sure, make them more visible. Expect a second version in the next days. I'll look into vectorising them too... it's been a bit of a technical challenge but hopefully it's not too difficult!
You should go to reddit or something.
I started with C, and if you don't dive to deep into it, you can get a pretty good concept of program structure, what a function is, what a pointer is and all sorts of concepts that extrapolate easily in other languages.

I'm grateful to have learned on a strongly typed language first, the thing about students is that sometimes they're easily demotivated, my University switched to python after teaching C first, after learning python there were a lot of student complaints asking why C was so complicated and why did they need to have static typing, and it wasn't natural to them to think about compiling as a normal step in software development.
> I recall that many companies have switched from a perimeter model of defense where systems are secured from the outside to a "defense in depth" model where each system is secured on it's own (plus the perimeter).

Yes, this is the current bleeding edge of cloud security, known as “zero trust.” Amongst other things, it usually involves provisioning mTLS identities in a secured manner to each service, with connections restricted to a whitelisted set of identities.

I found Evan Gilman and Doug Barth’s “Zero Trust Networks: Building Secure Systems in Untrusted Networks” [1] a pretty helpful read in understanding what modern/next-gen cloud security looks like.

Some modern implementations of varying depth and scale include SPIRE [2], Tailscale [3], and BeyondCorp [4].

-—-

[1]: https://www.amazon.com/Zero-Trust-Networks-Building-Untruste...

[2]: https://spiffe.io/

[3]: https://tailscale.com/

[4]: https://beyondcorp.com/
> the researchers presumed that 30% of individuals who contract the new coronavirus never develop symptoms but remain 75% as infectious as those who do develop symptoms.

They made up some numbers and played with the math. It's conjecture, not research.
Which is fair but you can't have "the one true rendering of emojis" and also have "people/platforms can use different emoji packs if they want." Someone who uses a different pack than you might have a different intention as a sender and as a receiver your message to them might be misinterpreted.
I suspect a good deal of that 1.2M lines is in modules, isn't it? Rather like how people remark on how many lines are in Linux and overlook that it's overwhelmingly in drivers and the actual core system is much smaller.
this argument seems well & sound to me, if I replace "private companies" with "private monopolies". right now I don't think we know how monopolistic these companies are & i don't think we've tried doing much competing. so yes we are under the seat of a few big entities. it's our fault. athe failure of us, our unwillingness to compete, does not give the nation's of the world preimminent domain. the rights of the private entities to converse as they would is to be respected, including excluding unwanted voices. if you have something to say find your own places to say it.

these garbage fire bonanzas ablaze with calls for violence & insurrection with the flimsiest fakest of fabricated basis underneath are unfortunately really bad tests of how monopolistic big tech is, because they doom themselves, seem rankly incompetent, destined to self immolate. competitor platformsust follow some law, which is in many cases what companies do when they kick people off: protect themselves & the rest of the platform from grave risks. i believe companies should be encouraged to find their own ways to remain safe, that nation's ordering them around to control speech in certain governmentally dictated ways would be horrific. cyberspace doesn't deserve this infringement, people don't, even big tech, sucky g useless as it is, doesn't. this isn't china. we don't do that here.
As someone who lives in Canada: you don't have to shovel rain.
Probably also contributed by the fact that the opposition pointed out that they should avoid the cliff so the only option left is to intentionally drive off it.
> I was an impressionable high schooler/teenage kid who could use a solid mentor to guide them through the fundamentals of X11/C/go/etc, I was instead basically laughed out of the irc channel

I think people there can definitely be jerks sometimes, and I don't really like the negativity either.

But on the other hand, not every place and community on the internet needs to be welcoming to teenagers and mentor them through the fundamentals of X11/C/Go.

I just wish people were a bit less of a jerk about it. Then again, I have said this nicely to people a few times over the years ("hey, cool you're interested, but note this is really intended for expert users"), and it's about a 50/50 toss-up about whether or not you'll get insults and an aggressive reply back. One time this guy got so triggered over this that he went to several subs to tell everyone what a horrible person I was just for (nicely!) explaining that they didn't really seem to be the intended target audience.

Turns out that being a programmer means you're obliged to help strangers out on the internet, according to some anyway *shrug*.

> I basically just tend to use whatever program gets the job done rather than obsessing over theory/purity/minimalism

That's pretty much why I use dwm; I use a hacked-up version and I somehow managed to lose the source code for that 2 years ago (not sure how...) but it's okay, because it Just Works™. It's very stable, never changes, and I never need to look at it or worry that an update will break anything or will move things around ("now where did that button go?!")

For me, suckless is very much a pragmatical thing, not a "minimalist ideological" thing.
Are You Ready for Total (Ideological) War?
---
sck
lSS
---
I recall reading that in the 300s AD, the Romans were using cartoons to give instructions to army troops, because they had too many barbarian troops who couldn't read. (Thus going back to step 1...)