skysight-inc/HackerNews huggingface dataset:
You are both correct and incorrect. By following simple procedures you can likely stop the majority of ransomware attacks that have occurred recently, but that is because most of the ransomware attacks were likely done with a budget on the order of $1k-$10k since that is all you need to get a $1M payout from these organizations. No point in running a mission impossible style attack when walking in the front door works just as well.

The problem is that they are getting $1M payouts on a $10k budget. That is a staggering ROI of 100! If you could magically improve the security of every system on the market by 1000% you would wipe out the current forms of attack, but it would still be insanely profitable to run $100k attacks to get $1M payouts. To actually stop attacks from continuing to escalate exponentially at their recent pace of >100% per year that any VC darling would be proud to achieve, you need to make it cost more on average to attack than they can get.

We are literally orders of magnitude away from that in the average case at current returns. And even worse returns per attack keep escalating. Just 4 years ago during WannaCry the ask was $300 per computer which can be a painful chunk of change for an individual which is who most ransomware attacks were targeting before, but nothing for any company. They were attacking companies for ~$10k payout and still making enough money to expand their operations doing it.

As the focus has moved to industry the payouts have increased exponentially since there are many companies whose operations are so valuable that they are willing to pay millions or tens of millions or even hundreds of millions per day. At those payouts there are 0 commercial IT systems that can make attacks unprofitable. So, when those attacks become the ones with the best risk-adjusted ROI you better believe they will occur. And when the attackers have a $10M budget simple defenses and techniques that worked on $10k attacks will not work because the attackers will have literally 100,000% more resources at their disposal in much the same way that defenses that work against a rock thrown at 10 m/s do not work against a ICBM traveling 1000x faster at mach 30.

So yes, simple mitigations would stop the simple successful attacks now, but do not solve the actual problem that it would still be profitable to attack even if they were all implemented everywhere since payouts are so much higher than cost.
HTTP!
Previous discussion: https://news.ycombinator.com/item?id=27095701
lol, this would result in engineering teams generating progressively smaller scoped tickets to maximize tasks and reviews completed.

Update Text For Button -- started 5/10, completed 5/11

Update Color Of Button -- started 5/11, completed 5/12

Update Margins Of Button -- started 5/12, completed 5/13

Update Border Radius Of Button -- started 5/13
Benzene is not a PFC as it only contains carbon and hydrogen, not the fluorine that puts the F in PFC. According to Wikipedia [1], "fluoroalkanes are generally inert and non-toxic" and "do not bioaccumulate." That was surprising to me too, but apparently they have many established medical uses, including liquid breathing, which makes this application seem more reasonable.

[1] https://en.wikipedia.org/wiki/Fluorocarbon
I'd also be curious to hear about an expert weigh in on "original antigenic sin" in this context. (My lay understanding: your immune system gets partially locked onto its first response to an antigen, and may fail to respond as well as it could to future variants).

If you power up the response to massive levels, does it also augment the downsides of that "original antigenic sin"?
5 different programming paradigms. A single language can have multiple paradigms.

Do you think there are tradeoffs worth considering between language paradigms? Is there a reason why you might want to write something close to the metal, vs something in a scripting language? Is there a reason you might want FP over OO for certain problems?

I mean...my curriculum didn't explicitly call out languages anywhere, but along the way I picked up Python (intro class), Java (most classes), C and an x86 assembly (embedded class), C++ (graphics class)...and within two years of graduating I was wanting to learn a functional programming language, and changed jobs just to do it. Had I gone AI track I would have picked up a Lisp. It's not really that big an ask.
Doesn't Tab Overview in Safari on macOS already does that? ( Without the Drag and Drop Part )

The problem is its current implementation completely kills your SSD if you have too many tabs. The problem has been going on for years. To the point I have to manually disable Tab Overview gesture and icons.
Disappointing; that doesn't really count!
The dollar only has value because you are forced to pay the government with it to pay taxes or else you go to prison/get beat to death for protesting. The nice thing about crypto is the absence of a mafia threatening my life if I refuse to use it :)
It sounds like it's more like RSUs or other stock grants, where your taxes vary based on when you received _those particular_ shares.
Why are you working an extra two hours? Can't you bike 20 minutes around your neighbourhood finish two hours earlier and do a quick 20 minutes after work?
Does it try to achieve feature parity with Electron?
I guess the typer's experience could be a factor. I would expect someone to type around 10WPM - or even less - the first time they were placed in front of a keyboard. Getting to 40WPM usually takes years of practice. No evidence one way or another if this method could achieve the same with just practice and no changes to the technology.
Forth has almost no syntax, which leads to every project becoming some kind of domain specific DSL. This is not necessarily a problem, but it leaves Forth without a strong sense of identity as a programming language. This is my opinion, of course.
> The argument quickly went from "wear a mask to protect yourself"

That was never the argument. Wearing masks isn't about protecting yourself (only properly-fitted high-grade masks do that well, and regular people wearing those would have taken supply away from medical staff). Wearing masks is about protecting other people from you spreading the virus (which they do a decent job of when combined with distancing).

The reason it can't just be a personal choice is because not wearing a mask isn't endangering you, it's endangering other people. It's the same reason we don't let people smoke indoors. And having a blanket rule to always wear a mask in public was mainly about keeping the messaging simple. Constant debating over which situations were safe or not for going maskless would have harmed our overall responnse to the virus. The reason the CDC changed their guidance is that there's now enough evidence to confidently say that vaccinated people can't spread the virus to others, but honestly it may potentially cause those same issues.
With about a word or two error every few minutes...maybe they could make the idea of rage run the backspace key.
Does this include the noble gases?
So is your concern here about natural gas leaks?
Police photograph faces, press passes of journalists covering protests
I wasn't really saying it in jest. The ";)" was more of an "oh, the horror" signifier, meaning I don't really think it's great that the cost-benefit analysis here is so short-sighted.

Any employee choosing to spend millions to avoid the cost of a heretofore unencountered cyberattack would be making a strategic decision, while probably not being empowered to make decisions at that level. So they do not take action.

Bureaucracies do not take visionary action. They stay the course.
The short of it is that there was some early research done in TB transmission and they found that the nose was really good at blocking particles larger than 5 microns but it showed that 100 micron particles would be suspended in the air as an aerosol and there was subsequent research that used the 5 microns as gospel for aerosol cutoff even though particles greater than that could be considered aerosol and that cutoff stuck.
WebPageTest Newsletter
I automated a little bit webpagetes.org in WebPageTest Newsletter. Web page performance test every week in your inbox. Ah, Core Web Vitals are included in the report ;-)
>Internet browser tabs are a major source of friction on the internet. People love them. People hate them. For some users, tabs bring order and efficiency to their web browsing. For others, they spiral out of control, shrinking at the top of the screen as their numbers expand.

how about multiple layer tabs

I am a big fan of hoarding tabs. Bookmaking a page can sometimes result in the page being different when reloading or not working. Tabs stay permanent in memory can be referred to later in an unchanged state. It is like the digital equivalent of a library. I can always defer to an open tab when i need something.
Some disk space as a proof cryptocoin could be useful for this..
> and has sufficient leverage to have the FBI focused

RELX is certainly big enough to do this:

https://en.wikipedia.org/wiki/RELX#Controversy
CreatepreneurAfrica,in the World of Animation – Exploring Motherland Africa
Plastic Logic powers the world’s first smart sailing jacket
Reminds me of an API I worked on. We had a max length for some token. A client had an incrementing sequence number, so they decided to pad it out to the max length. It looked something like this:

A00000000000000000000000000000000000000000000000000001

A00000000000000000000000000000000000000000000000000002

etc
Does this mean that a one-shot vaccine like Johnson & Johnson's is inherently less effective?
Docker enabled Kubernetes. Before then we really didn't have a unit of compute that could be reproduce easily in different environments.

However, Docker has some downsides:

(1) It centers the unit of computation in the Operating System layer

(2) Docker relies on a completely homogeneous infrastructure (same chipset, almost same Operating System).

(3) It relies on a Virtualization layer (usually KVM) to be run securely

I believe (1) caused a vast amount of complexity when scaling, since you are scaling "OS Instances", not applications or functions, which caused Kubernetes to inherit most of this issues and be perhaps much more complex than it should.

I think (2) is key because with new trends coming up (such as Edge Computing, Serverless, IoT and 5G) we are starting to have the need of running software universally across a more diverse infrastructure (different chipsets).

And (1) and (3) causes a significant slow-down for startup times (see Firecracker state of the art project with a ~250ms best startup time - not good enough).

I believe most of this issues are solved with WebAssembly: simpler scaling, universal execution across diverse infrastructure and fast startup times. And I'm actually working full-time in Wasmer [1] to make of this vision a reality! :)

[1] https://wasmer.io/
Availability and inequality is a fair concern, but why should we stop working on something that would improve everyone's lives? Nobody said it's going to be mandatory for travel.
Happy System76 Laptop user here, too!
However nothing goes over the programmable, ergonomic split keyboard „Kinesis Advantage 2LF“ ;-)

https://kinesis-ergo.com/shop/advantage2/
This issue is very similar to the problem of malicious macros in Microsoft Office documents, and I think it needs to be addressed somehow (by figuring out a proper security model and asking for user confirmation for actions outside this model).
Same here, it is acting like a reading list. Mostly because Bookmark sucks.
The argument is that it saves more lives than it kills.

>Killing someone innocent for the good of others is never acceptable

You make this trade off all the time by e.g. not giving all your money to charity.
The Wikipedia entry https://en.wikipedia.org/wiki/Forth_(programming_language) is terse but matches what I've read elsewhere over the years:

Forth is both easy to implement and yields very compact binaries, so it has been favored as the first environment implemented on new hardware, and as the controller for satellites. This has become less important as resource constraints ease.

Forth's progeny PostScript continues unabated. Humans tend not to code directly in PDF format, as that is grave-digging. The "specification" has many geological layers (the earliest are easiest to code in) and no verification or even machine-readable definition, so one is at the mercy of testing PDF files with multiple applications. All the problems associated with Markdown, only on steroids. But one can easily write code that generates valid PostScript, and have the results translated to PDF.
Cybercrime is the market response to under utilized/paid tech workers.
Once logged in perhaps. But credential stuffing is a thing.
I am really eager to have a custom search engine for the content of the papers. What is the cheapest 100TB solution one could get?
Create Scripts in JavaScript with Zx
Ads are a toxic and cancerous model. They need to be banned, regulated or competed out of business.
I'll publish soon. I think my real invovation for ScamStableCoin is that I won't actually ever let anyone convert ScamStableCoin to USD. That way my lack of actual cash will never be exposed.
> But the universe must have decided that this wasn’t good enough, and presented me with the phrase the very next day

"Baader-Meinhof phenomenon". You'll see this name again soon.
I had hundreds and I use all of them at least once a week
Man if System76 is listening, or any keyboard manufacturer for that matter: please make a mechanical version of the ms ergonomic keyboard. All the other "ergonomics" seem to be trying too hard and have layouts that are so different from a standard keyboard as to be annoying. The MS one was perfect in every way, just needs mechanical keys.
It could well be that CoVid19 led to a 50% productivity loss (processes had to be completely reengineered or stood up from scratch without setting foot in the office).

Then, if the actual measured loss is 20% then perhaps it actually went up by 30% (the difference).

One cannot really conclude much from this study due to a lack of control, and I hope this is discussed honestly in the paper.

One thing I could observe is that working from home required a lot of people that are not used to it to learn to communicate professionally in writing, which they weren't used to. With the option of clarifying via a quick personal chat on the corridor taken due to an "all remote" forced work mode, poor communicators really do need a lot of overhead in terms of extra Teams/Zoom/Slack... meetings to get their message across.

Another observation was there was suddenly a lot of extra work. Initially I expected to have more time due to less business. In reality, CoVid19 also presented new opportunities, so extra projects were launched that would not have been required without the pandemic. Another variable that can't really be controlled.

Working from home as a planned/rolled out thing for a percentage of people is vastly different from a pandemic improptu shutdown. I was actually surprised how quickly the whole business world adjusted. I've been arguing for years in favour of working from home but was told it can't be done, or people won't do enough work.
The FBI has shown that it will doctor emails in order to get FISA warrants. This fact is subverted by the narrative that one person was caught doing it, as if to imply that he woke up one morning and chose to do it all on his own.
Smaller Chips Open Door to New RFID Applications
According to the current freenode people page, tomaw is head of staffing, projects and communities and also the overall project lead in charge of the other heads.

Edit: here’s the staff as of 23 Apr. tomaw is still there today, the rest are gone, including fuchs.

https://web.archive.org/web/20210423231451/https://freenode....
CVE-2021-32606: CAN ISOTP local privilege escalation
I wouldn't say they're esoteric, but there is a learning curve because they're incongruent with the UI we've been taught by our graphical desktop environments. I do concede the somewhat dogmatic tone, but that's honestly just par for the course with any GNU software, though emacs is for sure one of the worst offenders. I still love it though, but wouldn't recommend it to anyone that isn't already expressing interest in giving it a try.
Or, so they say... We really don't know enough to say anything here. It might just as well be that whoever controls the funds at Darkside pulled an exit scam.
Hilarious!

Though I'm kind of disappointed about the lack of HTTPS support on that site.
Would you go 3x Margin Long on the S&P 500 and then take out a loan against that to buy things? Because that's basically what you are doing if you take out a long against your crypto holdings. I would be very, very careful about touching it.

This strategy, but applied to developing nation currencies and the dollar has ruined many an economy (ruble crisis, euro crisis, Asian currency crisis, etc). When your obligations are in a different currency than your assets, it's danger zone. People become blind to risk in a bull market - crypto can certainly drop 90+% and wipe out anything you have borrowed against it.
I 100% agree you should be looking at all incoming traffic as hostile or at least potentially hostile. The other comments are contending that there's nothing a hostile user could do to a 'public' page.

One of the things using cloudflare gets you is all those protections without having to know how to do them yourself. Which a lot of the developers don't know how to do.

There's also something to be said for catching a lot of this at the network layer on a cluster of machines that can handle any incoming traffic that your one poor neglected vm can't.
If memory serves vanilla JSPs were largely stateless but JSF was pretty much the Java version of Web Forms. Obviously it being JVM it required a lot more bootstrapping since it was less opinionated/OSS but the effect was largely identical.
> We have a moral obligation to evolve to suit the environment

And we've done that by evolving our mental capacities and developing a wide range of tools that have enabled us to survive and prosper. We are apex predators of apex predators, to the point that we kill other predators for sport rather than food.

Stick me naked and toolless in the wilds of Siberia and I'd estimate my survival time in hours rather than days. Without our tools we're a pretty useless species that hasn't even evolved far enough to be able to walk on two legs without developing back pain, unlike penguins.

Vaccines taken once in a lifetime, or taken annually, or taken daily are just another tool. Why is this any worse than brushing your teeth, showering, taking medication or even getting dressed. If a doctor told you to take heart medication on a daily basis to stay alive, would you refuse on the grounds that it's better for humans to evolve hearts that are less prone to heart disease?
Maybe it's my smug sense of intellectual superiority, but if I could go back and do university again, I'd still rather learn language theory and discrete algebra than how to use vim and tmux (neither of which I use more than once a month).

I didn't study Computer Science to learn how to write bash scripts.
Naive question: are the batteries themselves really the limiting factor at this point?

The fastest chargers seem to be in the 250kW range. That's a lot (on par with a loaded tractor-trailer moving at highway speed), requiring sophisticated cooling of the chargers themselves, and complaints that the cables are too heavy for some people.

If we could charge 60x faster, would it be feasible to hook up a 10 megawatt cable to it? That's literally the power output of a small country.
> It turns out it propagated onto their main network

> the virus had gotten out of control, which I didn't mean it to do

This isn't just a whoops, how do you "accidentally" create a virus that leaves the boundaries of the computer and traverses their network?
Well, let's start with the places I take issue with:

> OS updates are non-events

Big Sur and Catalina have been the most disastrous updates in MacOS history. I'm not really sure why you'd choose now to highlight their notorious stability and ease of use. Ask any sysadmin who had a fleet of Macbooks during this update cycle: it was a nightmare and a half. Failing that, ask them about Catalina. They might run and hide under the table, a lot of them are still a little skittish about the word.

> I don’t know why you say that there is no package manager. This is demonstrably false.

Brew and Macports both suck. If you use Linux on a daily basis, then you're well familiar with what a good package manager looks like: apt and Pacman are both good examples. The amount of software on either of those platforms default providers makes Macports and Brew look like a pathetic joke. Add in the lack of extensibility offered on them both, the lazy Macports development cycle, Brew's half-correct installation philosophy and how out of place they all feel on MacOS, and you've got yourself a package management system that is just about as helpful as 'make install'ing it yourself.

> The old coreutils are the result of GPLv3. Latest versions are one command away with your package manager of choice.

The ball is in Apple's court then. If they want to brag about being a real Unix system, the least they can do is ship modern Unix tools with their OS. Ironically, MacOS is the least compatible Unix system around.

> If you’re alluding to the Little Snitch thing, it had nothing to do with VPNs, and has been fixed AFAIK.

No, I'm referring to the fact that Apple gives divided their networking API into privileged and non-privileged systems as of Big Sur. Now, Apple can designate certain developers (and themselves) a way to circumvent any custom network filters when sending data.

> Honestly, your points sound like third-hand complaints you’ve heard in an echo chamber. It’s fine if you don’t want to use the OS, but then you don’t need to comment either.

I mean, the M1 Macbook Air is sitting in my desk as we speak. I've also run MacOS on my beloved Thinkpad(s), but even the magic of a touchscreen Mac couldn't really persuade me to like the operating system. My guff is well founded, I think: as the most valuable company in the world, Apple has an obligation to provide at least some level of modularity in their ecosystem. Otherwise, the precedent they set will continue to influence every market we can conceive, until our concept of "ownership" is poisoned to mean a subscription service. It's driven by greed, and makes me sick. It always comes at the cost of the user, and the declining greatness of MacOS is a perfect example of how Apple's hunger for money is poisoning their product line.
So far I have not met a researcher who held the opinion that sci-hub is a bad thing.

Actually the way I learnt about sci-hub a few years ago was when I asked an acquaintance of mine whether he'd share a copy of a paper he co-wrote with me, what I got from him was a sci-hub link.
In the office I can go take a nap in my hot car. At home, it's in my bed.
Office: a walk around the office building and cars/traffic. Home: go outside and water my plants
Office: take breaks with co-workers or no-one Home: Play with my baby/spend time with my wife.

Etc...
Yes but "you must support up to 100 characters" also has no upper bound - supporting 200 characters also fits that requirement.
Watch a Waymo AV get freaked out by traffic cones
Ah yes. Checkbox Driven Development. AKA Monkey Paw Development, where you give exactly what was asked for; it remains surprisingly popular in the government and enterprise spaces.
In what sense am I "configuring" this when the only thing I can change on it is the switch feel?
Ergodox and the like have one big problem: hard or impossible to use if you need a layout for a language that has more than 26 characters.