skysight-inc/HackerNews huggingface dataset:
You make a good point.

I think there are two levels of security sales, if you will. One is junior//mid level to junior//mid level, and one is CISO<>CIO, and they both handle different pushes that play their own, sort of non-overlapping role in company risk management.

The CISO<>CIO thing falls right into the bucket that you're mentioning... big architectural changes need much more going for them than good salesmanship from security. If there's not a major benefit for the enterprise in non-sec areas by doing changes like ZTA, or a lot of precedent at this point about a SIEM/SOC just being something one has, it's an uphill battle.

That said, a lot of these breaches, like the Equifax admin:admin, isn't so much a "for the stock price, this is a net positive we'll run the risk for" type of decision that security loses. A lot of this is just patiently needling/selling to dev and IT teams about finally rotating a pw to something complex, for instance. That happens successfully.... attackers try another IP door on the internet and perhaps Equifax doesn't happen (using the theory that Equifax wasn't from an APT, which is of course a different situation). Of course insane change management boards exist, but in many cases it's just that easy of a fix.

My theory is even more relevant when you look at SaaS vendors, like SolarWinds, as really driving govt's innovation edge and by extension being the vector into the environments. In those cases, the security team's political capital is even stronger, as smaller companies mean much more cross-org influence is possible. Sometimes, it's just flipping "min pw complexity" as a radio button in AWS's IAM console, and no one is the wiser. When so many attacks source to these very easy wins to fix, that's where the salesmanship is lacking (or can really help) for sec.

To your point about "12 months and everyone forgets," that's not the case for the SaaS vendors working in a crowded space providing generic products. While the pool of possible vendors is shrunk by like how many SaaS vendors bother to pass FEDRAMP, and/or you stack on contractual inertia, there is still a pool. SolarWinds doesn't really provide that exceptionally unique of a product, and they got the entire Fed Govt pwned. That'll be >12 month impact for them. If it's not, I owe you a beer. This is even more pronounced of a motivator across the legion of SaaS vendors who have their first handful of serious clients, but a sec incident w/o a seriously embedded platform blows them up.
>Jews are rich and help each other through a secretweb of mutual assistance.

They don't? Have you guys seen Hollywood or finance or mass media or...? Or is the mistake in that line that the web is not really that secret?
Agreed. I'm kind of regretting using Node for my current project. Every time I look at package-lock.json, I die a little. I really like the way Go projects tend to have very few dependencies.
"I'm cool because I never learned some things"
Not a lawyer, and this is an incredibly complex legal matter, but I think precedent hints that when media are crossed (e.g. going from photo to paint, or from paint to woodcutting, or, like in this case, photo to tattoo), the work is (usually) transformative enough.

There are two tests the judge will look at: (1) Originality, and (2) Transformativeness. Obviously, the courts will litigate this (or it's going to be settled out of court, like in the Obama poster case[1]). Interesting edge-case nonetheless.

[1] http://www.nytimes.com/2011/01/13/arts/design/13fairey.html
The Rich Indie Writer (2011)
Art is my career and trust me, the "nonsense and PR side of art" is an important part of making it work. One I am absolutely terrible at and do the bare minimum I can get away with, because it's just not fun, and because getting good at it requires some very different mindsets from getting good at art.

Anyway. I think Paul Graham should think about his time trying to be an artist, take some of the absurd amounts of money he's throwing around for YC and put, like, one company's worth of investment into a bunch of artists. I volunteer myself for the pilot program. :)
The Rule of Silence
> My idea would be to craft laws saying you can't capture any video for anything off of your property.

Given the documented failure rate of eyewitnesses to be accurate (worse than AI face recognition), we should also ban relaying something you've seen. That way we can make a just society.
Not a VFX worker, but I did CAD simulations for a while (which uses very similar equipment, Xeons, Quadros, 128+GB ram) and we would definitely run tasks like test suites over the weekend on our personal workstations because there was no guarantee that the cluster we used for testing would ever actually run your workloads. This was especially true when releases were close.
I prefer it because I want a dark theme everywhere. It’s just a fault in the website if it shows me something unusable.
"infrastructure" as code :)
The ImageNet-A dataset (https://github.com/hendrycks/natural-adv-examples) contains thousands of hand-curated examples that are challenging for off-the-shelf classifiers. It's interesting to look through them and guess why each one's so difficult.

For examples like the surgical mask, the ImageNet "mask" category is for masquerade masks and halloween masks, I suspect it doesn't contain anything similar to a surgical mask. Imagenet categories are a bit weird that way - they're a pretty arbitrary set of labels that were selected for use as a benchmark, not for practical use. It's got 100 different breeds of dogs, because it was a way to test fine-grained classification. It's got crane (the bird) and crane (the machine). It's got 'car mirror' but not 'mirror'. It's got 'yurt' but not 'house'.

It's great if the categories you care about happen to match the ones on the list (in both name and type, as seen in the 'mask' example). But otherwise you'll quickly run into the need to fine-tune the model on some of your own data to get the categories you want.
Sorry I meant my background is business analysis
http://archive.is/1w9Qq
There are tons of people out there with Disney IP tattooed on their body. I've always been curious on their stance, or if tattoo artists are just hush-hush on drawing other's characters or trademarks.

Has there been any previous case law on whether or not this is allowed?
The IA has a number of SIMTEL ISOs in their Walnut Creek CD-ROM collection [0]. Makes for easy burning for a retro machine.

[0] https://archive.org/details/walnutcreekcdrom
Ridiculous. It’s not like the tatoo was printed with a machine on to the persons body - it’s a essentially a drawing by eye by the tatoo-artist.

I wonder if the photographer would sue if the drawing/tatoo wasn’t as good and was more crude?
"Unlucky people miss chance opportunities because they are too focused on looking for something else. They go to parties intent on finding their perfect partner, and so miss opportunities to make good friends. They look through the newspaper determined to find certain job advertisements and, as a result, miss other types of jobs. Lucky people are more relaxed and open, and therefore see what is there, rather than just what they are looking for."

— Richard Wiseman
isn't a closed implementation adversarial to those benefits?

I mean any implementation can handle the signing etc, as the operations are an open standard. But running the actual pgp implementation on a system you have no access to sources, can't really see the advantage of just using an old laptop to have truly airgapped system (plugging your proprietary device on a connected computer doesn't look that airgapped to me)
Since this law came in effect, I'm allowed to opt out of tracking, download my data, and request its deletion. If that wasn't the case, that data would still be held hostage by various services.
I think it always originates from business analysis requirements. Do you have some analysis that could be difficult to perform if using X? If it is then maybe switch to Y, or find a balance, or even build duplicates.
There are exceptions for journalism / reporting news.
I think this is spot on.

It certainly seems like a lot of super hero franchises were started as outright far right propaganda, even if now, the profit motives of the licensee corporations have dulled the messaging somewhat.

I think 'The Incredibles' is an interesting movie in this regard. It's probably the most family friendly pro fascist romp ever made.

The protagonists are literally Ubermensch held back by an ignorant and fearful society. The evil goal of the bad guy is to give everyone super powers. It wouldn't be possible to spell this out any clearer.
Show HN: What we've learned about virtual meetings
Racket News – Issue 46
It is evident that the author has not done anything with microcontrollers. All the fun that ever was is still there, with new fun rolling in all the time. The first time you see a physical object move because code you wrote changed voltages on visible output pins, you will know what I mean.
I'm using KeePass + Syncthing to get it around all my devices. Works like a charm! Except for iOS devices...
Try compiling it. The compiler will scream at you for a long long time.

Also see https://codegolf.stackexchange.com/questions/1956/generate-t...
> the second, just-released article, does not rely on the testimony of anonymous government sources

The first article relied on briefings from unnamed government sources.

The second article has named private sector sources who say "an unnamed government source briefed me too"

That's just anonymous government sources, but with extra steps.
I don’t feel like Blind is a good source. Selection bias at play. Especially with disgruntled employees or the ones who only care about optimizing earnings.
Other countries handle this through public service announcements in the form of "do you suffer from X/Y/Z? Your doctor can help you", for identified public health challenges, such as smoking or obesity.
Yeah, sadly I've ADHD and in my country I can't access them and frankly don't know what to do
Having just picked up a very heavily new-car-smelling rental car in which to transport my firstborn from hospital sometime in the next two weeks, this was not a reassuring read. Here's hoping 20 minutes of exposure as a newborn doesn't have any lasting effects. All the same, I guess I'll blast the blowers on maximum with all doors open for a few minutes before we hit the road, and maybe drive with windows cracked.
Isn't the appropriate procedure here to add a sticker and call it a day:

> This product contains chemicals known to the state of California to cause cancer
There's a way around it: uBlock Origin, a few extra filter lists, and a block on third party cookies.
It's comparing DFW metro area vs. Houston/Sugarlands metro area vs. SF/Oakland/Berkeley metro area.

As of 1990 (the point where the graphs diverged), DFW had 3.8M people, Greater Houston had 3.3M, and SF/Oakland had 3.7M. They were pretty comparable then; subsequent growth has been simply because the Texas metro areas have added more housing.
You nailed it on our persona!

I also love the idea of your product, for bigger companies a pattern we saw is that it’s hard to do entity resolution across multiple data sources
My guess is no better than yours, but FWIW I doubt that it's generational. I think people tend to overestimate that factor, plus the current generation also has some advantages over earlier ones, not only disadvantages. I think the causality arrow more likely goes in the other direction: i.e. not that you have this fear because of the generation you were born in, but rather that the fear is influencing you to see things in these terms. I hope that doesn't sound overly psychologizing! It's actually good news if so, because you can't change when you were born, but it's possible to work with fear.
That's about searching, not unlocking the vault.
yeah I also thought some terrible announcement was coming at the end, but I think he's ok
The purpose of copyright is to promote science and arts, not to make money.
Neolithic and paleolithic have definitions concerning material science and agricultural development. I think you are assigning a good/bad valuation to the terms that doesn't have anything to do with science. This is what I'm suggesting you recalibrate dispassionately. That other people are unfamiliar with the proper understanding of these terms is no excuse to acquiesce to ignorance.

>exchange of technologies

This is not a new insight, but a primary focus of archeology and anthropology in any theater.

>we're rapidly learning the only reason we didn't find the evidence is we weren't looking for it

Despite my quibbles with your gratuitous use of the pronoun "we", I think you couldn't be more wrong unless you're talking about more than a century ago. Particularly since the discovery in Clovis (1930s?), the archeological community has been rabidly (if not rapidly) looking for new clues as to how people came to, adapted to, and dispersed into the Americas, with very few theories discarded out of hand. The reality is that there is very little evidence to back up the various hypotheses that stray too far outside of the accepted conclusions today, but generally everybody is almost too eager to find evidence that would upset existing assumptions (i.e. reckless, see Ancient Aliens).

> only evidence of ancient civilizations that counts as advanced are greek/roman style constructions

Let's add the cultures from the Middle East (e.g. Persians), Eastern Asia (e.g. China), and parts in between, areas which were not coincidentally all connected by land. This, of course, all depends on understanding the context around "advanced". Typically when that word is used to characterize a civilization, it does imply a linear maturation of energy source and material science capabilities enabling new technologies that feed benefits back into that society for growth - things like employing the wheel, the lever, the screw, beasts of burden, plows, wind, etc for productivity gains, insulation from seasonal variation, defense, medicine, etc. The United States is a more advanced civilization today than it was two centuries ago, as are many (not all) civilizations on Earth today, though this pace of change is (to our knowledge) unprecedented since perhaps the Han dynasty.

This view certainly does hinder many people's appreciation of how obstacles were overcome in societies that were less "advanced" (in the above sense of the word). But at the end of the day it doesn't grant those societies capabilities the evidence shows to be absent. It also doesn't make me any less fascinated in the societies in the Americas or less open to new data. On the contrary, in a way these societies are all the more fascinating because they put us closer to understanding what the human experience was like in those conditions.
Any argument that this is infringement must be predicated on how accurate the tattoo is to the original photo. The artist would never think to sue if it wasn't executed so expertly.

Where do you draw the lines? Is it infringement if you draw a picture while looking at another picture? What if you do it from memory?
So, bigger, more secure mailboxes, then.
I broadly agree with this, but there's also been a disproportionate interest in crypto from the finance community. It's seemingly part of a larger desire for some sort of fintech-libertarian-utopia (hard air-quotes there). As such, a move against crypto would be a pretty big signal that nobody should expect anything other than a rather conservative (in the dictionary sense) approach to financial regulation.
I don't really know much about functional languages, but did the section on higher order functions throw any flags for those of you who know both functional programming and the game? The "assembler" components, when used as an ingredient in a recipe, aren't really acting as assemblers anymore, just as a component...
No, society is better off when police don't have the right to take data without consent unless they have probable cause. They have consent here.
Thanks, I reported it there. I am skeptical that it will get the image off Twitter any faster, but here's hoping.
Copyright law is pretty clear on this one. She's not in a great spot.
It was dropped because it had bugs, no-one ever really supported it, it was impossible to find hardware to run it continuously. There are many reasons it was dropped.
Once I've gotten a better grasp on C, I plan on moving up to a language with a few more conveniences for day to day programming. It's between D, Rust, and C++. I feel like the safe bet is C++, but since I don't plan on getting hired to do it, Rust and D are also in contention.

I like the idea of using D with a garbage collector and having something like GO, and then turning it off when I want to do something more performance oriented.

How is the performance of D compared to other garbage collected languages when the garbage collector is turned on?
Great point! I think we forgot to highlight that this is a feature in the product. Once you set up a template you can slice your results by cohort, traits and accounts (if you’re a b2b saas company)

On the suggested events that’s also something we’ve been looking in. Segment defined their spec, which is a standard naming convention for events and we were thinking about building on top of it
Reminds me of the "Kind of Bloop" fiasco 10 years ago: https://waxy.org/2011/06/kind_of_screwed/

> Remember Kind of Bloop, the chiptune tribute to Miles Davis’ Kind of Blue that I produced? I went out of my way to make sure the entire project was above board, licensing all the cover songs from Miles Davis’s publisher and giving the total profits from the Kickstarter fundraiser to the five musicians that participated.

> But there was one thing I never thought would be an issue: the cover art.

> Before the project launched, I knew exactly what I wanted for the cover — a pixel art recreation of the original album cover, the only thing that made sense for an 8-bit tribute to Kind of Blue. I tried to draw it myself, but if you’ve ever attempted pixel art, you know how demanding it is. After several failed attempts, I asked a talented friend to do it.
I love Go for its native capabilities to do things with servers etc like ssh, networking. I wrote some Go code for a small project to connect to external servers using SSH and it was a lot of fun and a breeze.
Wait until you try Dyson Sphere Program.

It definitely scratches that Factorio itch but in a different way.
There are few incentives for producing scientific and artistic advancement that are as powerful as monetary gain.
Yea, given that info, it is a little different IMO. You already have seen what a startup can be like. So you have to consider what you need/want most, a) learn from a more experienced team that does things in a more controlled process driven environment (assuming that is a true statement) or b) the startup life where you need to do a lot of self learning.

For me this choice would be, what is the startup vs what is the corp job. If you are leaving a good senior team to go to an unknown startup that has unknown founders I'd likely stay at the corp job for 2-3 years and learn. If you have an opportunity at an early startup that has experienced founders or has already hit some key milestones of growth/market/funding it might be different, especially depending on the tech stack and what you'd be doing really (not the romanticized version but actually). Really hard to judge honestly, there are pros and cons on both sides.
The language is fuzzy enough that it depends on how good and/or persistent your lawyers are. Coincidentally, a different photographer's photo of Miles Davis caused a copyright stink over an chiptune tribute album's artwork about a decade ago: https://www.litigationandtrial.com/2011/06/articles/attorney...
I suspect you are thinking of a different startup. We have never interviewed anyone to be CEO.
Telegram's animated stickers used for remote attack (fixed in v7.1)
Anything you didn't learn in Christian Science courses at university, you can find and learn more at your local Christian Science Reading Room! Most cities and towns in the USA have one, and even many airports for people on the go. If you're flying through SFO, you can visit the one in terminal 2!
Promotion via control. The person afforded that control can use it to fund their art or encourage future artists.
Awesome, glad to hear it! :)
I humbly disagree! Although most folks on HN seem to swing atheistic, I have found them to be comparably respectful, considerate, and open-minded.

Just because someone disagrees doesn't make them close minded. Perhaps your experience has been different than mine. But whenever I've brought up my (ever evolving) beliefs, I've found people to more respectful here than in the world at large, and certainly more respectful than the web at large.
A more charitable version of their argument would be that reading isn't a worthwhile activity by itself. It has been marketed as such given the context of screens, but it is not magically more stimulating on its own than most other activities, nor are Twitter and co. magically unstimulating on their own. Plenty of people torture themselves with trying to start a reading habit when their heart isn't in it, and often gain very marginal benefits out of it compared to other forms of light entertainment they could find more enjoyable. For people who do enjoy it naturally, there is obviously nothing wrong with it. But I notice that online platforms discussing books are rife with anxiety on the number of books read, the "productivity" of it, and are filled with articles about the benefits of reading.

Essentially, the attitude we have towards books is a form of cargo-culting. It's not the reading itself that is important, but getting exposed to new thoughts, knowledge, and perceptions and synthesizing them over time.
Data Immutability, Verifiability and Integrity Without the Blockchain Overhead
I suspect photographers will disagree, but a 31 year old photo of a long deceased person, hand copied to another medium does not ethically feel like infringement to me.
Bitwarden is open source and regularly audited, which is not something you can say about Lastpass.

Your thinking about Bitwarden becoming a more valuable target is probably directionally correct, but at least anecdotally, I think the biggest target in this space is going to remain either the built-in Chrome/iOS password managers, or Dashlane, which is a product that advertises widely on Podcasts, etc.
> If someone hits 12 of the 14 markers, does that make him a fascist?

as with everything, depends on point of view.

If you are in a region/demographic being crushed by foreign powers, i'd say someone hitting even 1 of the 14 markers could legitimacy be considered one

Likewise, from your very comfortable point of view, even someone hitting 14 of the markers may not be considered one. I mean, you can have that one friend with the racist jokes that even have a couple black friends, right?
I fear I'm one of these unsuspecting losers...except I guess that comment makes me suspecting.

IDK, I don't want to play the game but it only gets worse in the corporate world. I wish there was a good solution, where someone could play it straight and get rewarded justly.

Your art work is beautiful by the way.
+1 this is so nice.

I actually think this is a bit too much magic:

> import _ "embed"

> //go:embed hello.txt

> var s string

> print(s)

But the embed.FS example looks much nicer, I'm glad we can have both.
Thanks for taking the time. It showed me that I am not wrong in thinking this is a hard decision to make.
The photographer seems to focus an awful lot on legal matters:

https://www.extortionletterinfo.com/forum/getty-images-lette...

Pure speculation: Perhaps, in this particular case he was provoked by Kat Von D (short for Drachenberg), whose Wikipedia-quote includes a quote from a jewish magazine calling her an "anti-jew":

https://en.wikipedia.org/wiki/Kat_Von_D