skysight-inc/HackerNews huggingface dataset:
I suppose with the state-level hacking of the powergrid is, most can do it, but won't because the enemy can do so, too. So like the nuclear standoff. Nobody uses it, because the enemy can wreck your shit, too.

But the whole grid needs a rework. Also because of renewables and batteries etc. To better react do changing demand and enable a free market, where it is easy to buy and sell power.
Only if they’re used. There are no DMARC records in place for harvard.edu or subdomains, which is kinda shocking.
The irony being that for us (Quad9) the majority of the tinfoil-hat complaints are that companies donating to a non-profit make it _less_ trustworthy. Can't win either way. :-)
They probably aren't malicious, but they are definitely antagonists.
Updated my post to make it more clear I was referring to HN and not your post specifically.
Okay, that's what I get for trying to be even slightly witty, username notwithstanding.

Some cells never divide, and so theoretically shouldn't become cancerous. They still happen though: myocardium tumors shouldn't happen, but hey, rhabdomyoma. In that case, it's more likely in youth / congenital, because it had to happen via inherited defect rather than one that accrued through cell replication in your lifetime. It is rare, though, and ridiculously rare in adults. Still, "on a long enough timeline...". I mean geeze, let a guy get a tiny bit poetic.

Other cells don't have DNA and don't reproduce, so they shouldn't be eligible (red blood cells.) They still fall into a grey area though: the RBC itself will be dead soon enough and never leave behind cancerous progeny. On the other hand, your bone marrow can absolutely lose its mind and pump out the equivalent of a red blood cell mass, a condition known as polycythemia. You can also have RBCs turn cancerous before they become fully mature and shed their DNA. The erythroblast stage - the late stage of RBC development, the last stage before it chucks its nucleus and becomes disposable - can develop into a leukemia.

Our reproductive system generally keeps its genetic payload cells in stasis for the lifetime, so it doesn't accrue replication errors, as well as sitting behind a protective wall (e.g., the Blood-Testis Barrier) similar to the one that protects the brain. Even in stasis, though, damage accrues - the age of the parent has a direct impact on the likelihood of various congenital disorders.
That's a great article, thank you.
When everything is connected via USB type-C you have to trust way more. Currently, I don't have to trust the outlet in the wall, since it only has two or three connectable lines, and I plugin my vacuum cleaner, I am pretty sure it will only transfer energy, no data. But in a speculative future with USB type-C connected vacuum cleaners and USB ports installed in the house, I'll always wonder whether there is some backdoor somewhere in the house, that infects the firmware of my vacuum cleaner. I know this sounds like paranoia, it is not. I used to know that a sd-card connected to the sd-card reader doesn't send key strokes to my computer or uses my network to phone home. In a world where everything is connected via USB type-C those kinds of assumptions are pure speculation. And don't get me started on the different kinds of cables for USB type-C.
> Gab, a social network favored by right-wing extremists

Twitter is censoring the President of the US (and anyone else they dislike), Parler is not even available, and anyone who joins the only other network that's available and not censoring free speech is a "right-wing extremist"!

With journalists like that I don't need to be reminded to regularly visit Gab just to make sure it continues to thrive.
My experience with JenkinsFile has improved once we setup library functions for it to leverage on. Only downside is that you need to write them in Groovy but the payoff is that the JenkinsFile reduces to basically a function call or two per stage which makes it super clean + it makes JenkinsFiles more or less "standard" (because there is practically no project-specific stuff in it - the complexity is managed by the library functions). This approach has made fixing issues or enhancements so much more easier for us.
> Very sensibly, most companies are on a journey towards achieving this environment

Yes, until they realize how much of a crock it all is, and go back to actually getting work done.

Backstage looks interesting though, so maybe I'll get something good out of the article.
Regardless of which side of the political spectrum one is or what qualifications one has or what terrible deeds one has done (or alleged to have done), the fact is that phishing attacks aren’t very easy to avoid (you’d be fooling yourself if you believe you’d never fall for one). You can ace all the phishing email tests your company routinely sends you and still fall for a more sophisticated attack or fall for something that in retrospect seems stupid because you were preoccupied or stressed or had other serious things going on in life.

Victim blaming and questioning how she could believe that she’s qualified for some position is the wrong thing to talk about, and is also disgusting in certain ways.

What would be better, at least in a tech focused community, is to find out more details on how this happened and where the gaps (that are obvious in hindsight) are. I wish someone like Brian Krebs (of Krebs on Security) could get more information on this and do a detailed write up. That would be more insightful and useful to everyone than rants about the victim.
What about false positives?

From the fine article: one Google system was detecting emails coming from another Google system as phishing. This is ridiculous.
2020 United Nations World Happiness Report: place 28 (from 156).
They're never gonna care. They aren't incentivized to care. The only thing that can change the situation is the power of the American federal government, which needs to break Alphabet into 20-50 different companies.
For 5 years of work.
Linux Mint fixes screensaver bypass discovered by two kids
Time Card
Have Bad Days and Let Others Have Them Too
The lack of DMARC records, even if it could facilitate spoofing, won’t magically make reply emails addressed at a valid @harvard.edu address land in a spoofer’s inbox. A different Reply-To address is possible but then you can’t claim a lack of warning signal. There’s something else going on.
Launch ´mtr google.com’ on one of your devices (preferably connected via Ethernet to your router) a few minutes before the cut off, and watch what happens when the cut occurs. It will show you exactly which equipment on the route starts dropping.

Although I suspect your ISP has a 24h lease and your modem renegociates at 3:40 everyday
> nobody in power at Google cares

My assessment might be “nobody in power has time to prevent the myriad of problems happening all of the time, even though they handle the majority, with help from businesses, government agencies, etc., and given the huge impact of some problems to society as a whole, they may feel as though they’re rising in the front seat of a roller coaster, unaware of your single voice among billions from the ground down below.”
Wait until this is also applied to a list of domains from the SPLC and other groups to further censor “hate speech” on the internet.
Not sure why this is getting downvoted, this indeed seems to be the case. https://www.theguardian.com/global/video/2020/nov/03/obama-c...
I wonder if it would be faster to deal with this through legal. I’m not a lawyer, but I wonder if you could send a C&D to Google legal or something because this seems like an actual case of slander and reputation damage.
I do not trust management folks, whose paychecks and promotions are dependent on how successful such hostile actions are, to take the right decisions. I also do not think that they are deliberately ignorant/indifferent or that calling attention to it will do any good. These types of individuals got to where they are largely by knowing fully well that their actions are malicious and legal. I used to work under such people, and currently interact with and work with such people on a very regular basis (you could even consider me as part of them tbh). It is very much possible that the management level folks at Google don't have an ounce of goodness in them, and will always see such decisions from a zero-sum perspective.

To make it relatable, do you care so much for a mosquito if it's buzzing around you, disrupting your work and taking a toll on your patience? Because your SaaS is a mosquito to Google. After a certain point, you will want to kill the mosquito, and that's exactly what Google execs think so as to get to their next paycheck.
So what would they use instead? It's not like there are any other free, real-time and mostly accurate malicious-URL databases around for people to plug into their browsers and products.
Ideally, we would be able to choose the best company, such as the one that does answer their phones. In this case we can't, which is the real problem.
>The only thing that will stop the company from treating its biggest fans so poorly, it seems, is if those fans suddenly begin disappearing like the games they created.

So why r u still playing Nintendo games?
He said he was lonely already, do you want the white people to actually avoid him?
> Commands are indented (horribly, by tabs, because make was created in the early days of Unix when they were still obsessed with saving bytes)

See, to me this is exactly not simple (a reference to make’s “simplicity” appears shortly after this). It’s a form of complexity because every time something is wrong with the build, this is one of the things I will need to check.

Moving the complexity elsewhere so that it becomes someone else’s problem just does not work for me as a definition of simplicity. You see this pattern a lot. Golang is pretty much an entire object lesson in this dynamic. Everything is “simple”, aka, “your problem”.
Advanced Promise Patterns: Promise Memoization
Consider some of the parts of an MMO server backend:

1. Login (Authentication and identity)

2. Persistence of data

3. Social graphs

4. Gameplay

5. Metrics/telemetry collection, ingestion, tracking, presentation.

1,2,3 and 5 are generalizable and a framework can be made to fit almost any game. Metrics/telemetry might be game-specific, but you can come up with an abstraction to fit most of the types of things you might want to collect/observe.

I'm not even talking about operation and maintenance. You can assume those are fairly well-understood generalizable problems. Or the type of networking requirements of WoW vs CoD.

Number 4 is impossible to generalize. A gameplay server will be unique to each game. Frameworks like SpatialOS etc. are not scaling out game play. They are scaling out the persistence and distribution of game state. Those are two very different problems.

A lot of engines (like Unreal) include a "server" component which you can use for upto 64-ish players. After that, any optimizations you need are going to be very, very specific to the game.

For example, the requirements to scale a diablo-style looter game are completely different from an FPS or a WoW-style classic RPG. How many ticked objects you have in a game instance on the server for example will vary from game to game and will drastically alter the scalability.

Many companies, including Unity and Unreal at various points have tried to come up with such a framework and have failed. No such framework exists even at a paid level. Let alone an open-source framework where your users will be mostly non-technical game designers who just want the damn thing to work so they can be creative. As much as I love their creativity, I would go mad trying to satisfy such an audience :-)

TLDR: Gameplay logic is not conducive to a generalized abstraction and thus cannot be scaled independent of game type.
> I stopped reading at ...

Always the sign of a moron.

> that's what ends up with databases designed with pointless auto-incremented proxy-primary keys

You're actually very incorrect about them being pointless:

- databases will assign an implicit numeric id (row id) if you don't (ie. that's what MySQL InnoDB does.) But it may be hidden and unusable if internally-generated, so you just screwed yourself.

https://blog.jcole.us/2013/05/02/how-does-innodb-behave-with...

- sorting a numeric id is always faster than a long string

- most database mgmt. tools require a table numeric primary key to work at all.

But cheer up. In one or two decades, you'll be right.

Source: DBA.
Semantics.

I’m saying a HIPAA certification from HHS or any official governing body doesn’t exist. A 3rd party auditor might give you a “certification” but it’s meaningless to call yourself “HIPAA certified”. You wouldn’t say that. You’d say “we’ve conducted a 3rd party independent audit”.

You can go ahead and claim HIPAA compliance all you want, but most health systems are going to ask you if you’ve conducted an audit or if you have any certifications - SOC 2, HITRUST, etc.

So in reality you’re not HIPAA compliant until you can prove it. That’s my point.
It's great to see community feedback actually works, I really hope people can talk about having the option to disable .DS_Store now
I think the author highlights the main issue at the end of the article. This is where pressure needs to be applied. I get it, Google’s process probably protects a lot of end users from malicious sites. Getting a real business added to this blocklist by a bot though is not cool. Perhaps a process to whitelist your own domains if this power can’t be wrangled from Google.

> Google literally controls who can access your website, no matter where and how you operate it. With Chrome having around 70% market share, and both Firefox and Safari using the GSB database to some extent, Google can with a flick of a bit singlehandedly make any site virtually inaccessible on the Internet.

> This is an extraordinary amount of power, and one that is not suitable for Google's "an AI will review your problem when and if it finds it convenient to do so" approach.
It's a recursive query, but it's basically the simplest recursive query. It's not that bad.

WITH recursive_traversal(depth, id)
AS (
-- base case: the root has no previous
SELECT 0, id
FROM todo
WHERE previous IS NULL
AND user_id = $1

UNION ALL

-- recursive case: traverse to next row
SELECT depth + 1, todo.id
FROM todo
JOIN recursive_traversal r ON r.next = todo.id
WHERE depth < $2
)
-- we only accumulated the ids, so join one more time to get the rest of the columns
SELECT todo.*
FROM todo
JOIN recursive_traversal USING (id);
Curious why they've got pictures of Wordpress code on MacBooks for a .net framework.
This could also be a power or electrical interference issue. I would start by logging the connection with ping every 1 sec or so to see if it's only 3:40pm.
Dubai recently launched a digital nomad visa
1. Start the ping command at 3:39pm and leave it running until 3:41pm then make a note of whether packet losses start at 3:40pm. (E.g. "ping yahoo.com" on Unix or "ping -t yahoo.com" if on Windows).

2. If there are packet losses, then you have your answer: the issue is from your ISP.

3. If there are no packet losses, then you'll need to look closer at your network. Check to see if some hardware on your network might be performing a reboot at the 3:40pm mark.
Maybe I've got the wrong document, but why would a private api have a public doc on how to use it?

https://chromium.googlesource.com/chromium/src/+/HEAD/docs/s...

Edit: Unrelated to what's above, but searching around I came across chrome://sync-internals/ I wasn't aware that existed in Chrome. It's a pretty complete admin type view.
Should You Trust Your Passwords in the Cloud?
> Thanks, I totally agree. Just to be clear I'm not saying it's malice as I don't believe that. I'm just saying the end result is the same so one should consider them a hostile actor for purposes of threat modeling.

No worries at all! I interpreted your post the way you intended; and I agree fully being also in InfoSec.

Going by how you phrased your original post, you're probably more patient and/or well-intentioned than me as I'm farther along the path of attributing mistakes by big, powerful corporations to malice right away.
I can confirm this. The time is around 7:00PM and the IP address changes, and I have to log in again to some websites because my IP has changed. Downtime is approximately 2 minutes.
SDR? Sure. But unless something has changed recently, 4K Netflix on PC requires a particular flavor of Windows DRM that is only supported by NVIDIA GPUs starting with Pascal and Intel integrated graphics starting with Kaby Lake‡.

On a more technical related note, I'd imagine 4K SDR variants of all Netflix HDR productions are generated on the back-end as an output of the same post-production process used to produce SDR prints at lower resolutions for reasons of both creative control an delivery efficiency; HEVC is just a compression algorithm, after all, and mostly orthogonal to matters of colorspace conversion and tone mapping.

See, e.g.,

https://partnerhelp.netflixstudios.com/hc/en-us/articles/360...

and observe that the example Dolby Vision workflow yields three distinct masters,

1. Dolby Vision (HDR + SDR tone mapping metadata)

2. SDR (generated automatically from the Dolby Vision source)

3. DCI-P3 (for potential theatrical exhibition)

I therefore assume the requirements for 4K SDR playback of SDR and HDR titles are identical.

‡ If and only if said Kaby Lake iGPU is connected to a video output.

I mention this because I can only watch 4K Netflix on my Hades Canyon NUC with the help of a Pascal eGPU, because, while the Kaby Lake iGPU is present and fully functional, all video outputs connect to the NUC's discrete AMD Polaris GPU, which Netflix doesn't support.

DRM sucks.
Are you familiar with the "Reply all" podcast? They have a "recurring segment, called 'Super Tech Support' [in] which [...] the Reply All team [...] takes on odd or especially complex tech support issues that the listeners or friends of the hosts have encountered." Not sure if your situation qualifies, though.

[1] https://en.wikipedia.org/wiki/Reply_All_(podcast)
What other browsers? Almost all users of SB are using Chrome.
Looks like your course focused on real-time and embedded systems, but used the same name. MIT's course is focusing more on general-purpose servers.

I expect MIT also teaches RT/Embedded also but probably calls it something along those lines.

Both skillsets are necessary, and IMHO not enough programmers are exposed to real-time systems in school. It's a very different style of coding and all modern desktop systems would work better if their designers had a better understanding of real-time principles.
Agree, we can only vote with our clicks.

Sadly gmail and google docs are top notch products :(
Perhaps “comes the hour, comes the man” would apply? It's a difficult problem, but if there was an urgent need for a solution, I'm sure one could be found.
I wonder why no one has not mentioned tests. For me, the tests are more valuable for system or service understanding than, for example, documentation.
But the best scenario when you combine tests and documentation. I have joined the new team recently. They have a lot of e2e BDD tests implemented using the Cucumber framework. It helps me to get a complete view of the system in the shortest possible time.
https://timebucks.com/?refID=218840928
Change your DNS servers.. I use openDNS, but there are lots of other choices. If the Pi isn’t in use set it up as a Pi-hole (DNS server / ad blocker), so you’re not use your isp provided router for DNS.
Sorry, but you don't get to tell me I am obligated to browse your site without being notified if you have malware.
Do you use FreeBSD on virtual machines, and why do you do it?

This might sound like obnoxious question. But I genuinely don't know benefits of FreeBSD, have been using Linux virtual machines all my life.
Back in the days when Kotlin didn't exist and even Scala was in its infancy, some people genuinely liked the JVM ecosystem and even aspects of Java itself, but were turned off by the verbosity of Java. Those were the people that started using Groovy and also projects such as Grails (especially since they saw the success of Rails and Django and wanted to emulate that).

Also, I guess some people genuinely like gradual typing, although I've never found much use for it.

Nowadays, I wouldn't pick up Groovy anymore, but there was a time where it was basically that, or Java (or a different ecosystem entirely; or something like JRuby / Jython).
It's probably not meaningfully higher - this discovery was made a long time ago, and since then we've had a lot of research into which tumors it's really relevant to, and those tumors now get anti-inflammatory medication as a standard part of treatment to prevent just that from happening.

The staging is just ("just") a reflection of the primary cancer mass, which is really predictive of outcomes. It's generally not directly related to whether these sorts of satellite tumors form, since the above advances. It's mostly at this point a historical point of "this is part of how we figured out how cancer works," and ties into the rationale for some of the now-standard treatments.
Yeh I've given it to techies and non-techies as it's very readable and suits both audiences.
Yes, there is such a thing as complex prime numbers.

If you restrict yourself to looking at numbers whose real and imaginary parts are both integers, then you have a ring called the Gaussian integers. A Gaussian integer a + bi is prime if and only if neither a nor b are zero and a^2 + b^2 is a prime number in the integers, or it is a product of +-1 or +-i and a prime integer of the form 4k+3.

Rabbit hole begins here: https://en.wikipedia.org/wiki/Gaussian_integer#Gaussian_prim...
There was a recent WSJ article I submitted recently that details how companies such as Land O' Lakes are doing just that -- honeypots on internal networks.

https://news.ycombinator.com/item?id=25741589
Firefox and Safari. I know, Chrome is huge these days and it's a problem, but it's not like anything can be done about Chrome.
From the nested blog link:

Passed in 1968, the Wiretap Act makes it unlawful for someone to “intentionally intercept[] … any wire, oral, or electronic communication,” unless that person “is a party to the communication.” Facebook users brought a class action alleging that the tech company violated the Wiretap Act between 2010 and 2011. Specifically, the users claim that Facebook plug-ins on different websites allowed Facebook to gather URL data even when they were logged out of Facebook, which the users contend was an unlawful “interception.” The district court dismissed the case on the ground that Facebook was a “party to the communication.” Acknowledging a circuit split, the U.S. Court of Appeals for the 9th Circuit ruled that the case could proceed. In Facebook v. Davis, the company asks the justices to review and reverse the 9th Circuit’s decision.

It looks like the court still has to decide if they’ll hear the case, but that’s happening next week.
Answer to Do you think Elon Musk’s wealth is temporary?
Just Read Chrome Extension
Thank you for posting that. There are obviously way too many people here (and elsewhere) who think they're way too smart to fall for phishing and other forms of scams unlike "stupid" grandmas, journalists, etc.

The reality is that we all do things when we're distracted and not really paying attention. Or we get caught up in the excitement of something and we don't stand back and ask ourselves whether it really makes sense. And anyone who thinks otherwise is just arrogant and misguided.
This episode makes me wonder: how many times an anonymous source “verified” by a journalist is just someone pretending to use an organization’s official email address.
A name resolver for the distributed web