skysight-inc/HackerNews huggingface dataset:
Haven't heard of the first one before - when you say "all key fingerprints to the server" do you mean the public client key or the public key of the host it's expecting or something else completely?

2 is true is https and most other protocols without concern. The problem usually comes to running an old version not telling the other side you're running an old version.

3/4 seem to only be true if you go and misconfigure settings from defaults, which is true for nearly everything.

I'd be curious what the risk of 1 really comes down to because other than that I'm not seeing anything to be worried about if you know you're connecting to an untrustworthy box.
Right. This is the fallacy of assuming the cause of disparate outcomes occurs in the place where the outcome is measured. The causal factors, in this case, occur before the candidates even apply.
> “You can't tell from the data that the lockdown was unnecessary,” Prof Ralph Brinks, one of the study’s co-authors, told German television.
Paid support seems to be a good way to go, you could always pay a few people to be on call, and charge for that service.

Hardware that just works is worth more. Charge $100 more for unit 1 orders, then discount down to the current price in quantity.
Depends on whether you get everything right. If done correctly, yes. But for example in my local area, most "outdoor dining" was inside tents with poor ventilation and tables at most 6 feet apart where nobody was wearing masks. Once we understood the aerosol transmission model it became obvious that this was bad, but it kept being done.

In a sense, an outdoor lunch event is potentially much worse than a seminar or meeting since at least during a seminar/meeting people don't have an excuse for taking off their masks and they can socially distance more easily vs sitting at a table together.
I think that's what they're referring to. Elerium-115 seems to be the current name* for Element-115, which is said to have antigravity properties and so is how UFOs are able to do their impossible maneuvers.

*Back when I was obsessed with this in the early 2000s I'd never heard of Elerium-115, it was always Element-115. Looks like the origin of the name is actually a game in 1994, but may not have become common until around 2013/2014.
For terminal mode applications, unit separator is Control+Underscore and record separator is Control+Caret (Ctrl+Shift+6 on a US English keyboard).

However, many terminal mode applications intercept those keys and expect them to be commands rather than data. Often there is some kind of quote key which you can press first. In readline and vim, the quote key is Ctrl+V. In emacs, it is Ctrl+Q instead.

GUI applications are more variable. But vim and emacs still support their respective quote keys in GUI mode.

And if you have to type this a lot, you can modify your vim/emacs/readline/etc configuration to remove the requirement for the quote key to be pressed first.
I'm really curious what the future will look like for charging infrastructure if majority of people switch to electric.

Is the ideal long term goal to have a charger in basically every parking spot?

For example an apartment building where every single spot in the parkade has a charger.
> What CEOs have ever been fired for security breaches?

None. That's part of my point: the root problem is not actually security by itself, it's bad corporate governance. CEOs should be fired for such things, but they're not.

> If the "free market" doesn't care

Corporate governance is not a free market nowadays. It was more of one in the past (although an argument can be made that there were important non-free market forces even then), when most stock ownership was in the hands of individuals who at least had some incentive to hold boards of directors accountable for long-term stewardship, since they were investing with a long time horizon for their own retirement.

But now most stock ownership is in the hands of large mutual funds (since that's where most people's retirement funds are now), which don't care about long-term stewardship; they only care about short-term earnings. So corporations have a positive incentive to overlook things that, to be fixed, will require sacrificing short-term earnings for long-term stewardship. Individual investors never even see this; all they see is the overall rate of return of their mutual funds. So they don't realize the long-term consequences of what is going on and aren't able to apply free market incentives to correct things.
When is it appropriate? Whenever it's relevant in some way, or if you'd like to talk about it in the interview.

Most of your time in any company will be working on WIP. So wouldn't it be great to talk about where you are, how you got there, how you're planning, milestones, etc.
> No, you can acknowledge race as a widespread social construct, which having been constructed, has material effects that can only be fully discussed by including race.

That is still essentialism with extra steps. Social or not, your category hinges on purportedly durable and universal attributes, whether they arrived from within or without.

> The idea that we can only discuss categories with an essential characteristic is, itself, an incorrectly essentialist idea.

That's a strawman argument I haven't made. I am against conflating pragmatic categories with essentialist categories. There is a difference between using x as an ephemeral demographic category to address the material issues you allude to vs overplaying it to an x'ness as an essentialist identitarian concept.
that is post peak... iPhone was released 2007
Here's how Circle K does it in Norway:

https://www.youtube.com/watch?v=4TVohXHjLro
Sorry this was a sendgrid issue that has now been fixed
>it all comes from these dodgy "Global Insights" app consulting firms.

Most of my Data were deduced /inferred from Official Apple and Google, Mobile Carrier, Government Numbers. For more numbers Benedict Evans slides has many more details.
Yeah, that's my model here. I'm still waiting on full immunity and I got shot 1 a day after eligibility opened up. I am not particularly concerned about my safety but I'm still wary of accidentally exposing someone who's unvaccinated and it bothers me to see businesses and other organizations just dismiss the risks posed by actions they could simply avoid taking.
The feds can’t even secure all their own systems. We had the OPM hack which resulted in the personal information of federal employees exfultrated who knows where. Also the federal government were still using passwords that were exposed in the breach 3 years after https://www.forbes.com/sites/leemathews/2018/11/15/office-of....

Tbh I trust the FAANG companies to run better security. Government is incompetent in this area.
So many of today’s problems result from a lack of morality. If the solution doesn’t involve Bitcoin then it involves religion. Security is impossible and digital security doubly so.
1. Creating an ansible role is not contributing.

2. > PiKVM seems to have an odd contingent of fans who have taken it upon themselves to pop up whenever people are discussing TinyPilot to claim that I'm exploiting Maxim.

no, people speak-up when they see injustice, thank you for the free insult.
I'm not sure I'd classify licensed professions as rare, frankly most US states have an overabundance of occupational licensing in my view.
Then how about nationalizing that infrastructure, if it is so crucial for national security and the private sector is unwilling to spend enough to protect itself against threats? Let's not kid ourselves: this is first and foremost a matter of incentives and consequences rather than a lack of capabilities.

I don't see what the public could do better than private entities, besides absorbing their costs.
The only way I can see it practically working is if the private sectors would allow government entities full access to their IT infrastructure, submit themselves to random controls, audits and checks, and bear sizeable fines if they're found to be negligent.
I date a surgeon and this topic comes up a lot.

My question was always "why do transplant surgeons have two kidneys?"
Glad it worked for you. Some of us had less successful outcomes and years of pain, discomfort, disfiguration and the resulting depression and suicidal ideation. In my experience with surgery(one urology related, one shoulder surgery), surgeons over promise, under deliver, and are not at all compassionate when their magic fails to fix you.
I haven't checked, but I'm willing to bet that the costs for a one-time Fargate task and Lambda are similar enough that Fargate will be vastly simpler. Both can use containers, but Fargate is more explicitly built to just run a container without managing any server. And there's EKS Fargate, too.

Fargate Spot pricing is $0.012144 (vCPU Hour) + $0.0013335 (GB hour) + $0.000111 (Ephermeral Storage hour). Pricing is per second with a 1-minute minimum. So for one hour of compiling on 1 vCPU, 1GB ram, 1GB storage, that's $0.0135885, to run any old Docker container.

Lambda cannot execute for longer than 900000 milliseconds, or 15 minutes. For 15 minutes at 1GB for 1 request, that's $0.02. For 4 requests (1 hour) that's $0.06.
love react because HN only does upvotes. I feel like they're straying from their mission. They did really well with moving the market but now that the market is moving, I have a hard time believing Tesla will stay at the top.
learn HTML rendering before trying to teach anything :Ð
Check out vrland.io, we’re working on this!
> throwing together some components from different libraries

That's actually a winning strategy.
> You really think that praying and other religious rituals are more effective than evidence-based techniques? If you want to multiply bread and fish, use the Haber process and fisheries.

Science is great for that, sure. But is that the whole of what a society needs to function? Does science give you answers about how to raise families, structure communities, etc?

The answer is that the hard sciences don’t give you answers to those things. In secular society, therefore, we’ve layered on top a lot of the social sciences. In my opinion, those teachings aren’t meaningfully more evidence-based than religion, and have a lot less in the way of proven track record.

I’ve got a degree in aerospace engineering. I certainly know and appreciate the Haber process, etc. But as to other aspects of being a human in society, my kids learn about the golden rule, how the meek will inherit the earth, turning the other cheek, forgiveness, repentance, etc.

When I was an atheist I thought that these things were universal moral norms, overlooking that these ideas aren’t universal and I only felt that way being raised in a Christian society.

> The social structures are parasitic and shackled our ability to do things.

You need social structures to mediate interactions between human beings in a society. The only question is whether your social structures are conducive to a well functioning society or harmful to it. The social structures of Christian societies have the advantage that there are a bunch of successful societies built on them. It’s an existence proof of efficacy.
Or social media could implement automatic autodelete, like Snapchat but after a longer time.
There was a TV show in Japan where a man had to stay in a room until he managed to win $10000 of value in sweepstakes. I wouldn't say you can make a full-time job out of trying to win sweepstakes, since he ended up staying in the room for about a year.

https://en.wikipedia.org/wiki/Nasubi#Denpa_Sh%C5%8Dnen_teki_...
Chrome will now notify you about untrusted extensions
How much of these hacks would be prevented by adoption of simple preventions like Yubikeys for login, backing up data and images regularly, and encrypting data by default?
> If I see them murdering someone, I'm not going to say to myself "That person is allegedly a criminal".

Maybe you saw wrong? Hmm?
TWENTY FUCKING ++++ YEARS LATE.

Fuck these guys - cluesless morons.
If it was illegal to pay the hackers back, and the Colonial Pipeline ransomware attack still happened, what would the options be? We'd have to turn the systems back on some way right?
Apple used to account their software development cost as part of their product COGS. Which is what Steve's way of saying you buy iPhone for iOS. Both are the same and one. I believe this was listed in their late 00s investor notes. We dont know how much they account for those development though. It was never listed, but in the case of 2018, $10 / devices were put to Services Revenue. Which is roughly $3B annual revenue to Services Revenue.
FYI: both you and your wife are classified as heavy drinkers by the NIH. https://www.niaaa.nih.gov/alcohol-health/overview-alcohol-co...

I’m curious, what do you tell your doctor when he/she asks how much you drink?
Oh, that's interesting.

I'm doing something like that now, except the premium features are just in a Pro version.[0] There are only a handful of purchases per month of the Pro version, and I've wondered whether I should scrap it for some other model. It's possible that even though people don't buy the software standalone, it's part of what makes people purchase hardware kits from me, as the hardware packages all include the Pro license.

[0] https://tinypilotkvm.com/product/tinypilot-pro
Note that this is just a software limitation, you can't turn it on and trust that they can't break it next month. As the article quotes, it's more obfuscation (that they haven't yet worked around, apparently) than doing anything. It would be rather impressive if you could encrypt the key necessary to decrypt your RAM yet continue to use the computer, i.e. this will always be just obfuscation.
Don’t forget vrland.io
There’s a lot of great points being made by others, but for me, it boils down to just one.

Privacy.

Offices have no privacy. If my brain is stalling out, there’s nowhere to go to take a 15-30 minute uninterrupted, shameless nap. Bowel movements are subject to crappy, public stalls with big cracks in the doors.

It’s just not worth it. I get way more work done at home, and I’m far more comfortable.
This is such a bizarre comment. Do you think people will just forget how easily it was for their entire lifestyle to become illegal? Do you think those that moved to the suburb will forget the incredible freedom they purchased?

I think the pandemic highlighted a key deficiency of cities which most people will not soon forget.
Chargers in parking spaces makes sense for urban areas. Dedicated charging locations make sense for highway driving.

A couple of examples of dedicated charging locations:

- Circle K in Norway: https://www.youtube.com/watch?v=4TVohXHjLro

- Gridserve in the UK: https://www.youtube.com/watch?v=FoN4WCpuxHY
I was expecting more courses focused on databases.
Vrland.io works on mobile devices via mobile web. Also works in VR.
Exactly! I'd love for every interstate or highway fast food restaurant to have fast chargers. Even 70KW is often fast enough to get to the next stop in a lot of cars.
This is just a software limitation, you can't turn the option on and trust that they can't work around it next month. As the article says, RAM encryption is obfuscation more than really doing anything. It would be rather impressive if you could encrypt the key necessary to decrypt your RAM yet continue to use the computer.

That isn't to say RAM encryption doesn't have other benefits, but if your computer is unlocked and unattended, then yeah someone is going to be able to dump those keys one way or another especially if the system isn't tamper-safe (like a smart card aims to be).
Vrland.io is like this too, supports VR and mobile. Best solution out there by far for 3D collaboration and virtual remote work.
Is this a curriculum or a complete list of classes? 88 courses over a 4 year degree sounds a bit heavy.
> Conversely, if you falsify information that has no bearing on whether you have authorization to access the site, it also doesn't matter what header it's in.

Ahh, but here's where things get tricky. Who decides that the information has no bearing on whether you have authorization to access the site?

Imagine a situation where a very poorly designed site allows "My-Obscure-User-Agent", but denies all other User Agents. This is obviously a horrible design, but if the intent of the developer was to authorize access to a specific set of internal clients, identified by a unique/non-standard user-agent, how would you classify the act of changing one's browser settings to send the accepted agent?

User Agent is a great example of something that has a pretty well-defined purpose (and that purpose has nothing to do with authorization), but has also been misused by naive or lazy developers to control access to sites.
Inertia, perhaps. We certainly have been seeing reports of digital nomads growing over the last decade, but major shocks can be useful in speeding up transitions. Likely very few CEOs previously imagined how robust the remote work infrastructure had become, and certainly didn't have obvious incentive to implement all the tools until now.
Check out vrland.io
Well, it's either that, or every company is extremely biased in hiring. Which is very, very unlikely as the numbers pretty much match the demographics of the talent pool.
https://archive.is/9myUQ
Very few cars are stopping for an hour. The typical stop time is between 20 and 30 minutes.
Seems like a reasonable solution - if Russia won't arrest Russians who extort Americans, why should America arrest Americans who extort Russians?
Use pi-kvm please. As far as I can tell there is a pretty one-way relationship between the two.

The market for this tool is probably large enough for 2 or even more different suppliers that have differentiated themselves to serve different people with different priorities. These two proje ts are slightly different, where TinyPilot seems to be aiming for a less diy user experience, so on that level, it's fine for TinyPilot to exist. That is a perfectly ok differentiator, and it's perfectly ok to make that a product vs a project, ie charge money for it and make it your livlihood.

But, me being aware of both projects, something about the way TinyPilot presents itself just leaves a bad taste in my mouth. I think he should be acknowledging pikvm more, or, at all, and it would give a much better impression if I ever saw him on the pikvm discord or submitting pr's to the pikvm github. And as someone else already mentioned, it's at least a question to be answered whether it's even allowed let alone nice, to take GPL3 code and create a MIT derivative of it.

The more he says "It's my code" without even any qualifiers, the less sympathy I have, and I want people to be able to make an honest living while working with open source hardware and software.

It's possible I'm being hugely unfair, right? I'm totally aware of that. So what I am saying is, having been aware of both projects for some time, this is the impression I'm left with, and it's not because the pikvm developer ever wrote a blog post complaining about it or anything like that. He's just plugging away at his project like a machine. If the TinyPilot developer wants me not to have this impression, anf believes it is undeserved, then let this be a heads up that this is the impression he is creating. Go ahead and enlighten me, and along the way, everyone else.

I have spent thousands of employers and customers money and at least few thousand of my own on similar products in this category over the years, and even a year ago before the new hardware pi hat was ready, pikvm wiped the floor with my shiny new Lantronix Spider, and I donated the cost of a new Spider to pikvm, and since then have not regretted it at all. The guy is a machine and not a complainer or blogger.
I believe other commenters have said that autopilot doesn't respond to stop lights, but aside from that: if a car sees an unlit stoplight it probably should stop. An unlit stoplight could mean that a bulb is burned out, or that there's a power failure in the area. In either case, continuing through an intersection is unsafe because you can't guarantee the cross-traffic is yielding right-of-way.

In this case, obviously it's not a safety concern because the object is being hauled on the back of a truck.
"Something as simple as an offsite tape backup completely thwarts the attack."

Not true when they are also blackmailing companies to not release their internal data.

Even something as simple as a companies customer base and contracts with them can do a huge amount of damage to the company if it's publicly released. So paying a 2 million dollar ransom is the more profitable choice for the company.

Even if the company isn't doing anything illegal or that it's ashamed of.
DFY Suite 3.0 Review – Should I Buy This Software?
>The market doesn’t incentivize security until it is too late.

That's why you have government and law to require it. The free market solving everything is a myth, and the USA is lucky that all the pipeline hackers wanted was money. Imagine if that was a nation state trying to immobilize the military in preparation for an invasion. No ransoms, instead bombs start falling while you are paralyzed.
>The reliability stems from not touching the power train design (for 20+ years)

Why isn't the Dodge and lineup regarded as reliable?

Ford E-series is how old?

Most of Nissan's sedans are pretty long in the tooth now that I think about it.

A large part of why Toyota stuff is so reliable is that they're expensive up front both new and "newish" used. They also won't finance just anyone with a pulse like the "unreliable" brands will. So the people who get their hands on them can afford to maintain them on schedule and can afford to treat them well. You'll never see a newish Sienna owner stacking one floor to ceiling with bags of concrete to avoid paying for the Home Depot truck rental. You'll never see a newish 4Runner bouncing down the road with an out of round tire. You'll never see a newish Camry dragging ass hauling a family of 5 and all their luggage (the person with that use case in the Toyota tax bracket can justify/afford a Highlander) Can't say that about a Pacifica, Patriot or Altima.

Refinement certainly helps but Toyotas are reliable because any car would be reliable in the hands of Toyota owners. Any car would routinely make it to high mileage if they got babied for their first 100k (or so)
50KW chargers are typically closer to $80k for an install than $1k.
That's super slow, you could only handle a few hundred ids per second.
Jenkins is great because you install it (easy), start it (easy), and anyone (junior to senior) can have it doing useful work within the hour. It is a single place where multiple people can collaborate and self-service. There are special purpose tools for going deep into single aspects of it (scheduled jobs, CI/CD, deployment) but as an all-rounder it's really terrific and the price is right.
I'll throw out there that I've never seen a case of patents helping a software startup that intends to make a product. Patents take a lot of capital to file and defend, and at the end of the day larger entities will simply stonewall for longer than you can pay your lawyers.

I've only seen it pay out for small players with non practicing entities. Where you patent something, never intend to build your own product, but wait for someone else (hopefully a large company) to clearly infringe and sue them for less than the seven figures of a patent trial so they they just roll over. Because you haven't made anything they can't countersue with their own patents.