skysight-inc/HackerNews huggingface dataset:
nation-state" is not just a fancy infosec word for country,

This is pedantic and adds no value. In what sense could the precise definition of "nation state" matter? in this context everyone understands the phrase in exactly the way it's meant -- a resourceful national government.
I'm not defending uber at all - just saying that in my experience, people were more willing to go to bars/restaurants after cheap rides became available.
The web is increasingly not an option and you know it.
Try the graphs on page 2060/2061 of this link:

https://onlinelibrary.wiley.com/doi/epdf/10.1111/ecoj.12166
I don't know how all cab services work, but my local cabbies have told me they split the fare 50/50 with the company. The company owns and maintains the car and the driver pays gas. With Uber they seem to take pretty close to half get to push all the vehicle expenses on the driver. It just doesn't make sense to me.
I don't have it, but I would go to dark.fail's onion address and browse there (http://darkfailllnkf4vf.onion/ verify this and get in the habit of doing so! dark fail's clearnet website just got hacked while their onion site was unaffected), and then I would go to Dread forum (onion reddit clone) and ask there.

A little tedious but there is lots of commerce on onion sites, and a lot of valuable information in general that I've never seen anywhere else, so it can be worth it.
I think what happened is I saw the breadth of the writeup, saw the title of the website, and thought "whoa, there are other writeups like this on other topics? It must be a platform anybody can submit to." That's a complement - this is an impressive undertaking.

I love the style so far. It hits that sweet spot where it's thorough, like documentation, but isn't obtuse, instead being written in prose, like a typical blog post, but without being wordy and overly conversational. This is truly valuable.
No expert, but Neanderthal brain size is reportedly larger than Homoerectus (1400 cm^3 versus < 1200 cm^3).
I know others have thrown out other things, but: Have you been tested for sleep apnea?

What you describe sounds much like how I used to feel.
Before the 90s? Hmm. Well, if you believe Thomas C. Reed's account, the US was using trojans to sabotage Soviet oil pipelines in 1982.
Couldn't the pipeline have it's own network connected to a monitoring station. At the station employees could access the pipeline network but never connect it to the network from which they could communicate with the people who would be dispatched to make repairs or adjustments?
That article equates "work" with farming alone, which is a common but fallacious trope. A subsistence farming household has to manufacture virtually everything they need, and in your "small farm in Europe" setting, spinning and weaving alone consume essentially all the working hours of one person in a family:

Put into working terms, the basic clothing of our six person farming family requires 7.35 labor hours per day, every day of the year. Our ‘comfort’ level requires 22.05 hours (obviously not done by one person).

https://acoup.blog/2021/03/19/collections-clothing-how-did-t...

The main difference between the subsistence farmer and the wage worker -- and ACOUP goes into this in detail -- is that the subsistence farmer has to optimize for security over productivity, meaning that the marginal returns for working harder/longer hours are much less. Working twice as hard to till twice the fields won't help when a summer frost nukes the whole crop.
> though the US doesn't round them up & disappear them, they go through the court system

Yeah, unless you are suspected for terrorism. I recommend the movie named The Mauritanian.

> Mohamedou Ould Slahi (Arabic: محمدو ولد الصلاحي‎) (born December 21, 1970) is a Mauritanian man who was detained at Guantánamo Bay detention camp without charge from 2002 until his release on October 17, 2016.

> The book, Guantánamo Diary, was published in January 2015. It is the first work by a still-imprisoned detainee at Guantánamo. It provides details of Slahi's harsh interrogations and torture, including being "force-fed seawater, sexually molested, subjected to a mock execution and repeatedly beaten, kicked and smashed across the face, all spiced with threats that his mother will be brought to Guantánamo and gang-raped.[1]

[1] https://en.wikipedia.org/wiki/Mohamedou_Ould_Slahi
A lot of people are talking about the the results of this hack and a little bit about the industrial control systems, but no one is really addressing the hack itself.

>James Chappell, co-founder and chief innovation officer at Digital Shadows, believes DarkSide bought account login details relating to remote desktop software like TeamViewer and Microsoft Remote Desktop.

>He says it is possible for anyone to look up the login portals for computers connected to the internet on search engines like Shodan, and then "have-a-go" hackers just keep trying usernames and passwords until they get some to work.

Nothing sophisticated, nothing difficult, you just need some capital in the bank to buy some leaked credentials someone else worked hard to poke at, that is, some academic security person on a PhD worked hard for months to find some bug in software back in 2014, that turned into code someone else copy and pasted back in 2017, that yielded a dump in 2019 that some other hackers actually probed for some sucker's old login details he probably didn't even realize was in a dump, or might not even use anymore! The only hard work in this story is that academic in 2014 did and he definitely probably no connection to the criminals who basically got the president to issue a national emergency.
A few years ago I stayed in a guest house in a similar town. The WiFi router closest to my room wasn't working properly, and needed to be rebooted every few hours. I was there for a week and just got used to doing it (the staff showed me where it was). When I checked out I asked if someone is coming to fix it, they said "maybe next month".
You can have a maintenance network that is disconnected from the internet.
I just took Lyft rides in San Diego and Las Vegas. No problems.
It's a nice narrative, Uber drivers have disappeared because of some kind of enlightenment after close to a decade of operations, but it's likely just untrue.

Uber drivers have declined because Uber riders have declined dramatically due to the global pandemic. All that's happening now is that demand is starting to grow again as parts of the U.S. get vaccinated and the demand is growing faster than the rate at which Uber drivers are returning.

A few anecdotes here and there about a driver who quit Uber over wages or work conditions definitely sounds nice, and absolutely you can find sincere drivers who decided to call it quits over legitimate concerns, but it's a small minority and unlikely to really have much of an impact in the long run.
Sadly, they taste nothing like strawberries. They're a little sweet, though, and can be used as a filler if one takes good care to strain out the seeds & skin.
One of the greatest problems of desktop Linux is the huge
fragmentation. Linux desktop has fewer users than MacOSX and Windows, and lots of distributions, each one with a different packaging methods and incompatible dependencies which may result in work duplication and dependency hell, that can happen if one needs to install an application outside of repository, but it needs a dependency that
overrides an already installed library. Other problems of Linux distributions is that they not allow keeping multiple versions of the same application and multiple versions of the same compiler. The packaging issue is not relevant for people using Linux as server due to Docker, that can package any application alongside the configuration, dynamic linker, GlibC and shared libraries.

Another reason why is hard to find binaries for Linux is the lack GlibC backward compatibility. Even a fully statically linked application or packaged with all shared libraries dependencies via LD_LIBRARY_PATH or RPATH may crash if the application was linked against a newer version of GLIBC and is deployed on an Linux distro with an older version of GLIBC. The linking error happens due to the
lack of backward compatibility of the GLibC, which is the main bridge between the user-space and kernel-space on Linux.

A possible solution for packaging an application for multiple distribution with minimal work duplication might be: 1 - minimize the number of dependencies; 2 - static link as much as possible; 3 - instead of linking directly against shared libraries such as Curl, Gtk or SSL, load those libraries through dlopen(), dlsym() Unix APIs;
4 - build the application on distro or docker containing an older version of GlibC for dealing with GlibC compatibility problems; 5 - pack all shared libraries dependencies on the same directory as the application setting RPATH to a relative path to the shared libraries dependencies; 6 - embed all files additional non-source files such as
images or text in the binary using resource compilation; 7 - distribute the application in a zipped archive; 8 - use GO (Golang) which is able to static link almost all dependencies and also bypass the GlibC by performing system calls directly. A golang binary will just run everywhere with minimal effort.

Linux distributions could make the developers life easier if they copied the MacOSX app bundle idea where applications are distributed as <APPLICATION-NAME>.app directories containing metadata, the executable and all shared libraries dependencies. The advantage of
this approach, is that the application can be installed by just dragging and dropping a folder to the /Applications directory and uninstalled by just deleting a directory. Another benefit is that the user can keep multiple versions of same application and not fear dependency hell or overriding a previously-installed library.
Gig. Work. Is. Exploitation. It was always unsustainable.
what's this about right off the bat - 20 years ago? Tabs were not as common/I'd argue didn't even exist, 20 years ago. Like, Opera might have had them but Firefox didn't popularize until what, 2004-05 maybe? And even that took awhile to go anywhere if you factor in initial slow growth of Firefox...so we're talking late 00s by time Tabs are a thing
Critical data belongs on magnetic tape.

Should have also kept nuclear launch codes on floppy.
> bundle Busybox, a 1.6mb binary, to run shell scripts with bashisms

What do you mean? Busybox doesn't come with bash so it wouldn't work with bashisms.
Assuming for the sake of argument that a non-zero % of experienced disutility is caused by increasing inequality (despite things improving in absolute terms across the board), I'm not clear on what the (moral) argument is for acting to mitigate it on that basis.

The most common practical argument that I've heard is that not doing so will cause those experiencing that disutility to take matters into their own hands, which is:

1) risible, to the extent that it is untrue, as slander generally is, and

2) unconvincing, to the extent that it is true, because it's a trivial case of extortion, and the correct game-theoretic answer to extortion is "no", and is also immoral for the same game-theoretic reasons.

I'm curious if you have a more convincing argument, along any dimension. n.b. My prior is that such redistributive efforts are long-run harmful in expectation to material conditions at all levels of the economic ladder, possibly with the exception of revenue-neutral taxation of land value & externalities (which may or may not end up being redistributive in the progressive sense). If you disagree with that, there's obviously an argument that could be made on that basis.
Because it isn't just happening in the construction industry. There are restaurants in my town offering a $3000 bonus if servers and cooks commit to 4 months of work. They literally cannot open entire sections of their restaurant because they cannot find enough people willing to work. Same thing with the trucking industry, there was a driver shortage before the pandemic, and it has only gotten worse. People are simply not willing to work so long as they are being paid to sit at home.
Typically anchovies yes, but sardines are also an "icky" topping.
Or they could know something about the intelligence literature. There are very few people in professional careers, lawyers, doctors, engineers etc. with measured IQ below 115. It’s close to impossible. The demands are just too high.
The thing is, you use phrases like:

> may not have been possible

> incredibly challenging

> a total guess

Which, yeah, rocket science is hard! But the above is not difficult because it's impossible to solve for, it's difficult because we never tried! Nobody, government or otherwise, thought that rapidly iterating on rocket technology would be a good idea. This above all was the ticket to SpaceX's success - when you can throw rockets away for science, you can learn a lot in a short amount of time.

Did some things need to be invented before SpaceX could use them? Obviously, although I have doubts that the computations being performed by these "GPU solvers" really require a modern custom-built GPU and couldn't have been done on FPGAs or arrays of microcontrollers from the 80s. If we understand the math being crunched, it's just a matter of throwing more computing power at the problem.
But you can just sell stock continuously, as it is more tax efficient. Eg 2% dividend is just 2% of portfolio sold every year.
I guess Hitch was one of those TLS frontends, what was the other one?

https://www.hitch-tls.org/
Thanks for your many informative posts here. It's a pleasure reading from someone who knows what they're talking about :-)

I did say ROMs, but you can also use EEPROMs, which are erasable in-circuit, and you certainly put a physical write-enable in that circuit. Ideally, it would be a momentary push-button that has to be pushed in person on-site.

Back in college we used EPROMs, which are erased by putting them for 20 minutes or so under a UV lamp. EEPROMs came out later.
see:

tabbed (suckless.org)

XEmbed

i3
Yeah if it absolutely has to be web-driven, I prefer to use my own browser and just have it as a pinned tab in Firefox. That way I can leverage its privacy protection too.
The Fastly CDN is built on Varnish VCL IIRC.
Confucianism has a work ethic that while not exactly the same as the Western/Christian one, has a lot of similarities. Although Confucius was Chinese, these ideas spread into other East Asian countries that were under historical Chinese influence like Japan, Korea, and Vietnam
The idea being pushed is that you have more volume with Uber.
I tried that a few years ago and was able make a semi decent go of it. But not since they started to charge to bid on projects.

What most people don't realize is you are playing a completely different game. People want the cheapest and good. Most of the work involved quickly understanding what the project needed and wording it in a way that could get a conversation going and then the real work of selling yourself, defining the project
and trying to justify why you need so many hours when the 5 dollars an hour guy says no problem we'll do it today.

The biggest problem is upwork ranks people by score, salary and/or specialist creds they give. You need to respond within minutes or be cheaper.

The work required to make things work and the rewards don't add up. I'm old enough to remember rentacoder and freelancer. These platforms startoff paying well and slowly turn into something else as supply increased. What happens is the quality drops so the best clients move on and you are left with vague requirements and impossible tasks like the $100.00 build me a google search engine project and it becomes unusable.
"I care about my family more. I couldn’t tell you why, I just do, it’s my instinct."

Let me rationalize that for you. In order to keep yourself at a functioning level you have to see some good in yourself, to be able to respect yourself, and in that line of thinking - to trust that your physical base has enough value to be preserved long term in the genetic pool. You also have to see the same kind of value in the person you associated yourself with (i.e. your wife), and consequently - in the resulting lineage. Anything less is just prone to higher risk in the natural selection game.

"I don’t believe in utopias nor do I commit myself to what other people consider «worthy» goals, this is not a popularity contest for me, it’s about survival."

Not believing in utopia is one thing but, unless you're a nihilist or think we're at the end of times, you surely have to believe that the world can be made better and maybe do something about it. That's part of caring for the same descendants that will have to live in the world you'll leave them to. In consequence, the fact that you say you don't commit to other people's goals could mean that (A) it's because you don't share any views with other people out there on what would make the world better, which is very unlikely, or (B) you care and can afford to contribute but you just rely on the fact that others' effort will be enough and you can focus on more personal gains (which attracts contempt, and rightly so), or (C) you share the concerns and maybe even the goals for common problems but can not afford to do anything due to some limits in your life, like if you're in a war zone and can care only for physiological (Maslow scale) needs. It's hard to believe that you'd be in condition C, but then you actually say that it's about survival...
See https://github.com/gcanti/fp-ts. Heavily haskell-inspired and includes a TS implementation of higher-kinded types.
Anyone not using U2F/WebAuthn to protect all of their internal resources is behind the state of the art. It's really not that hard, especially when you're a BigCorp and already have an SSO system in place.
Air Craft carriers and jets were proven in WW2 to be the big differentiator. US took note and has more than the entire world combined. 'Battle force ships' is a very loose term and your source only includes navy resources. You forget we have Army, Air force, Marines and not to forget coast guard that all have their own watercraft. Also, don't know if you've been seeing some of the new SWISS ships the US have been developing. Very small, hyper fast ships with a crew of 6 or less with a crazy amount of firepower in terms of AA, 50 cal, even torpedos. Those aren't categorized as 'Battle Force Ships'.

Also, despite the huge waste that is inherent in it - no one has bases like the US does. We have forward operating bases all over the middle east, geographically separated units all over east europe, africa, asian pacific, and military bases all over europe and every key point of the united states. Nasa never quite got launches down but we do have some of the most advanced satellite, imagery and other military instruments. look up number of military spacecraft by country.

Whether it's moral or not is an entirely different question, but there is a reason the international monetary fund has a weight 44% USD; It's not because all the other countries like us that's for sure.
>if you are a critical service and if your service drops due to items being on the internet, for each occurances 10% of your total revenue (including your parent companies) are forfeited.

The problem is that it matters less than we'd like to think how "serious they are about security".

I'm seeing a lot of discussion about the responsibility of the victims to secure their networks, and it's mostly valid.

But it's strange that we're talking about how to punish the victims versus the criminal conspirators. We virtually let the malicious, overtly criminal party off the hook. It's almost like we're saying we expect criminals to be criminals and these guys are so hard to catch that the onus is entirely on the targets to repel their incessant attacks, else they're negligently malicious themselves. Sure, most of these victims can do better in just about every case. But, people here know better than most how difficult it is to 100% secure every layer of the stack from software to firmware to hardware, with multiple vendors and vectors, OSS, zero days, etc. And the bad guys only have to be right once across this broad attack surface. It's impossible to defend completely. There will always be breaches.

So, there's another element of this that has to be addressed, and that's getting serious about punishing these people. As it is, there's zero disincentive for them to just keep trying until they get through, but the upside is massive.

Most if not all of this activity originates from nations that are adversarial towards the US. So, we need to start treating these instances as official sovereign actions, especially when they originate from nations wherein the government and their intelligence services exert control over (and outright sponsor) such criminal schemes, and wield these attacks as a projection of national power.

These regimes also tend to feature oppressive criminal justice systems and harsh reprisals for even political dissidents. So, the message is, "we're not going to argue whether you're sanctioning these acts, but we're also not buying that you can't stop them, so we'll treat each incident as an official act of the state. We're holding you responsible for your criminals when they attack us and we will respond accordingly".

Detailed discussion around exactly how the most recent exploit might be mitigated is interesting and useful. But the balance in these discussions between mitigation and reprisals for the perpetrators needs to be shifted much more towards the latter. Otherwise, we can expect these discussions ad infinitum.
> Race is a social construct with a tenuous connection to underlying biology.

Yes, the connection is so tenous that exactly 100% of Japanese people can guess I am a foreigner and ask where I’m from. And this despite clothing in Uniqlo.
Antitrust is not a thing in America anymore. (Ok, my opinion, but really? Has there been any major antitrust suits since the Microsoft one? Please do say so if there was, I'd be interested in reading the case(s)).
My inherent cynicism leads me to believe the real reason they shut down the pipeline was because the attackers took down the accounting system.
I think part of the problem here is that Linux doesn't really have anything 'native' when it comes to GUI. Even the most common options are split into GTK and Qt derivatives (of various versions too). Unlike pretty much every other OS that has one native GUI.

But it would be amazing if a react-native app would adapt to KDE or Gnome/GTK style widgets based on the DE used.
Totally, take out all the hospitals, education and basic needs for the rest of the innocent people. Or just nuke them, that will teach um.

On a serious note, sure retaliate, probably don't hurt innocent people.
Modern trucks are still huge relative to other vehicles on the road. I want smaller trucks.
PLEASE let this be the direction we go in.

The traditional banks will never be good at UX because they can't attract the talent. Their apps are always a bloated mess of web views. I loved Simple because it lived up to it's name -- it was dead SIMPLE! For example, 99% percent of the time when I open the app I just wanted to view the list of my transactions. Many banks can't even do that right. Other than that I primarily just want to move money in and out as easily as possible.

One example of a well executed front end / back end model is the Apple Card where Goldman Sachs manages the back end. The Apple Card doesn't have the best rates and rewards programs but to be honest I don't give two shits about any of that. I want it to "just work" like the iOS home screen. I want notifications not to be a buggy mess. I want fast and reliable access to support.

If Apple does checking accounts (backed by Goldman or whoever) and checked the basic feature set I'd switch to them instantly. Everyone's finances are getting more complicated with more subscriptions and such. Despite this headwind I still want to spend as little time as possible poking around a UX from hell as possible.