skysight-inc/HackerNews huggingface dataset:
Correct, in some circumstances, files are great. They suck for Jenkins.

What are they? Lots of different things: build logs, job configurations, server configuration, secrets, cached unpacked plugins, build workspaces, etc. Some of those you want in S3, some you want in a database, some you want on fast ephemeral storage, some you want in a credential store. Good luck with that; only the secrets are doable with plugins.

Where are they? Sitting on some EC2 instance's ephemeral or EBS storage. But you don't want them there, so now you have to throw a bunch of crappy wrappers in to occasionally move them if you want them somewhere else. (Even if you do JCasC/JobDSL/Jenkinsfiles for version-controlled configuration and secrets, you may still want to back up your build artifacts and logs)

And them being files, it doesn't scale. Using EBS? Only one host can mount it (unless Nitro), so good luck scaling one box's workspace filesystem past one gigantic EBS volume, or doing master-master. And you have to clean up the filesystem every time a plugin or core version changes, or the cached version on the filesystem will override your container/host's newer version. Using EFS? Network filesystems suck (scalability + reliability + security + performance woes).
I think the charging speed of most EVs are expected to improve for all cars in the coming years due to better batteries and battery management.

Affordable EVs these days, for example the ID.3 or ID.4 do 125KW charging, at least up to a certain point. Teslas are not much better. Yes, the Model 3 can charge much faster than this, but only for a short time until it will throttle down significantly.

For this reason though, charging only a little makes even more sense. Bringing your battery from 10% to 50% should be relatively fast no matter which car you have. The last 50% will take much longer.

Once the car throttles down the charging speed, you are probably better off finding another charger an hour or two away - unless you're planning a longer stay.
It is all another chapter of the US war against its own people. All the money is going to scammers, I mean, mega corps.
"Nobody drives that route at that time; it's too crowded."
>is that unauthorized access?

Yes. And SCOTUS's problem is that they think the punishment for visiting facebook at work shouldn't be the same as the punishment for stealing company records - and that's fine, and of course something I agree with. But SCOTUS should actually address that directly, rather than going down this weird path of trying to warp the definition of "authorized".
Sorry all - was an issue with Sendgrid, but we have it fixed now.
The police routinely catches drug dealers by selling them or buying from them drugs. This is no different. Entrapment would only be a defense if you showed that absent police action you'd never do anything like that and they essentially coerced you into it. But if they know an officer is corrupt and routinely sells data to criminals, then to obtain hard evidence by staging a sting sale would be completely ok for them. In this particular case, the officer reached out to the criminal for money, so it'd be hard for him to claim he'd never done it if the police weren't involved.
To buy more bitcoins.
This is where the threat of retaliation comes in as a deterrent, and the country should be equipped to do so. But publicly subsidizing private cybersecurity is both impractical (how would that work exactly?) and would encourage underspending even further.

Why do you think China or Russia prefer to hack foreign private competitors rather than sending a bunch of missiles on their infrastructure?
My wife and I are homeschooling our daughter. She's still pretty little, 7 1/2. She went to school for a year and then we started homeschooling, not because anything was particularly wrong at school but we just love spending time with her (and she with us) and our lives are flexible enough to do it.

In her first year at school, the teacher was incredibly effusive about her. We were interested in maths because before she went to school we had always thought that she struggled with anything to do with numbers, but the teacher reassured us that everything was fine. But within a week of us sitting down with her to do maths, it became very clear that she had absolutely no idea of even the most basic concepts around numbers, sequences, addition, or anything else. We asked her how she had managed to do the material that the teacher had shown us, and she looked a little sheepish and said: "well, we do all that in groups..."

I don't know how long she could have kept faking it in the school system. But at least in our case, our daughter was perfectly capable of playing the system and slipping through the cracks, in a way that was completely impossible with us one on one. We're lucky that we're educated and have resources etc, but our daughter will absolutely be better off getting the help that we can organise for her and the personalisation in her learning that we can offer than she would be in the school system.
going to give it a shot! Looks awesome
Quick Six-Figure Salary Facts That Will Blow Your Mind
who isn’t using that strategy? openpilot uses it.
Help Save Zak
Criminal? Maybe in 2013 Silk Road days.

There's a ridiculous amount of volume on Bitcoin and it's mostly moving to and from exchanges. There's no way a majority of those are illegal.
I loved that version of office.
It happens accidentally from time to time. It's easier to do (accidentally or on purpose) in some planes, and engine-variants than others.
Mac developers have been bitching about Apple for 30+ years. There are lots of valid criticisms. At the same time I find the "Apple takes us for granted" complaints a little hollow.

I think a lot of developers discount the platform and think it's all their apps that bring in iOS uses. This was more true in the 90s on the Mac. The platform Apple provided was good but it was the third party software that really made the platform what it was.

There's a handful on Windows applications I remember today. It's only because I used them all the time. On the other hand there's a ton of Mac apps I remember candidly even though I used them far less frequently.

The iOS platform of 2021 is not the Mac platform of 1995 or even 2001. Apple moves more iOS devices in a quarter than they moved Macs for the entirety of the 90s. Third party apps a an important part of the iOS platform but they're not the primary driver of device sales.
Nailed it in the first try!
Sounds like maybe not the best for people who work at the company and whose livelihoods depend on it (especially, of course, those whose purview has nothing to do with cybersecurity).
Show HN: Google Photos open-source alternative with React Native
Yes a recent study also manage to generate unique identifier if you are using different browsers on the same machine. Some installed apps were responsible for the same, like Spotify, Telegram etc.
Also this probably blows a huge hole in the "EULA violation is a CFAA crime" argument. I'd say it probably would not survive this decision.
Apple might win battle with Epic, but lose relationship with developers
If you want a separate search bar you go to the firefox customisation page (same page as all other firefox customisations) and literally drag and drop the search bar back into the header
Or wear one of these t-shirts: https://www.spreadshirt.com/shop/design/stop+sign+mens+premi...
A demonstration of why it will be a long time before it'll be rendered safe enough to drive on its own
Let's look at the chain of events. Computing machinery becomes exponentially cheaper, and it gets pushed into all corners of industry.

Shared computing becomes a thing, and the need to have a better model of security is realized as a lesson from Viet Nam, and the Capability Based Security model is born.

Microprocessors again exponentially decrease the cost of computing, and Capability Based Security isn't required because all of the installations tend to have one or a handful of users.

The internet is born, and the cost of networking becomes exponentially cheaper, now all of those low security end users are connected together.

Systems become more powerful with the continuing drop in the cost of processor, memory and storage, so they become more complex. Nobody writes their own software any more, almost all coding is outsourced in some fashion. Security is only a concern if it trickles back to the original source as a problem.

A culture of "move fast and break things" pervades Silicon Valley, and the internet, and thus newer is always seen as better.

The lack of a security model at the base of all these systems is exploited for financial gain. Band-aid layers are added to try to patch the obviously inferior operating systems that pervade the land.

Because the lessons of capability based security were ignored for decades, and not taught, the common consensus is that computers can never be made secure, and your best hope is to hire the smartest people in the world, at less than the average market rate, to secure your systems.

And we repeatedly blame criminals, corporations, programmers, users, and now other countries, instead of solving the problem by properly implementing security.
I think the question itself begets more questions. For example, I've seen Jenkins jobs replaced with an Apache Airflow DAG or two, but obviously that's not the right call for continuously deploying applications to K8S clusters, which is where I'd use Tekton, Harness, or Argo CD. If we go way back, companies used to churn out Perl and Ruby scripts and eventually they were replaced with anything from Python to Go to Rust. It always goes back to _why_ someone finds deficiencies in what Jenkins jobs provide. Ask 10 people that hate Jenkins and one is likely to find 10 different products / solutions appropriate for them.

Most folks I've seen replacing Jenkins for a job runner wind up using Ansible, Salt, or Rundeck if they're not in a giant enterprise (there's also the old HP Operations Orchestration system but that's buried now unfortunately). All of these have their own holy wars brewing and deficiencies, sure, but I personally prefer those warts over adding more maintenance issues by adding in Jenkins. I'd also suggest StackStorm for a more modern, async approach to orchestration workflows. The workflow software ecosystem is built around business domain specialization and it's kind of silly to try to go against Jenkins toe to toe as a company, so this is what we've got sadly. After all, Jetbrains makes TeamCity which is essentially a Better Architected than Jenkins system but it's definitely not very popular either.
That rate sounds too high. Typically scan test gives 99.9% logic coverage. This me as random defects must hit this exact subset of logic to cause a fault undetectable by production test. Given defect rates are low, 1 in 1000 having a fault that got past theses tests seems too high. Unless of course Intel does not use scan test, and has a more functional type test method, though even then I'd imagine they must have a high coverage rate.
Why and how do founding entrepreneurs bond with their ventures?
You are probably in an extremely small minority. At the very least most people have their 2-3 messaging apps of choice, without which the phone might as well be a brick.
I've been on the receiving end of various emails like that. They have details on specific systems and specific attacks. They're occasionally useful, but often not. Knowing that a particular app is vulnerable to XSS might be useful, if I have staff that can fix it and they have the spare cycles.

For example, a hospital IT department might get an email telling them that their MRI is exposing remote desktop to the internet with default credentials. They know that. They don't change it because if they do, their vendor will drop support. This is a real thing that real medical hardware has to deal with, and it's only slowly getting better.

A big industrial company might easily have it worse than a hospital. Fixing the specific CVE on a specific port on a specific machine might mean having to retire a whole series of obscure, niche bits of SCADA hardware that don't support anything modern. It's like all those IoT gadgets that don't support 5GHz, writ large.

https://en.wikipedia.org/wiki/SCADA#Security_issues

Somewhere between those two, you have your well-run Windows network. It's probably a month to several months of patching behind. IT has a whole process to test any new patches for stability and compatibility with line-of-business software to ensure that nothing breaks. Knowing that their systems are vulnerable to the CVE that's fixed by a patch they're testing - or tested and found broke something important - might not always help them very much.
Sorry this has been fixed. Your sign up most likely went through if you try and log back in with those same credentials.
>His reasons for accessing the data were wrong

This, by definition, makes his access unauthorized. That's the point. "Authorization" is more than just technical controls. He was not authorized to access the data for this reason.
The title is a bit misleading. It is the U.S. Department of Justice that is promising to give the prosecution of these hacks a similar priority to terrorism. Not the entire United States government. Please keep this in mind before speculating about military actions or SEC regulation or new lays being passed or the intelligence community getting involved. This is about DoJ priorities.
If you try it out, I would be interested in knowing if it helped with the fuzzyness. I experienced the same on a 38“ 3840x1600 display, which only looks bad in macOS. I no longer own a macbook so I can‘t do any testing on my own.
It's partially because I'm not as familiar with other tools but they don't expose the ability to interact with an entire pod within the build.

Gitlab Action Services for instance is closer to Docker Compose.
Not all corps are mega corps. Some might be mom and pop, your corner grocery, mechanics shop, tailor, dog groomer, etc.
Every business owner is either ignorant (default), has made the wilful calculation that risk < cost, or is so busy barely surviving that things like security are not high priority enough to get attention. Security is fundamentally a resource attribution problem. Overspending on security results in high opportunity cost. Under-spending on security results in high risk in terms of trust and money, as well as poor national security.

A valley company that takes security seriously will: Hire experts. Scope attack surface/risks. Implement direct mitigations. Implement policy. Implement defense in depth. Develop a system capable of discovering indicators of compromise (IOC's). Verify security via bug bounty and pen testing, both internal and external.

Clearly most of these things are not "features" and therefore are a cost. Furthermore, since every company must impeliment these, the cost of security for society at large is an O(N) problem.

We must set up a system that mitigates the unpayable O(N) cost of security.

Pen testing/Bug Bounty/verification is probably the most easily scalable problem to solve. Whether you unleash hackers on companies by indemnifying them or specifically pay for Project Zero like entities or turn our own nation-state attackers against US companies with the weight of the US government behind it, it seems quite feasible to create scaled cybersecurity monitoring which can then better inform both technical solutions and policy solutions.

Once companies know they have poor security and once a business can see being breached as a certainty rather than a potential risk, I think the free market can probably solve the problem.
Sure, the cops will also say your a dumbfuck for transporting hundreds of millions of dollars on an open bed truck in the middle of Detroit.
most 7/11s are franchised. While the brand should be interested in such pieces to help their brand, the reality is that sometimes bad batches show up, or local franchisees stretch their dollar a bit in unscrupulous ways.
For those who have access to WSJ, here the relevant article: https://www.wsj.com/articles/entrepreneur-business-children-....
Yeah, not sure what it would be worth, obviously US is just one part of the BTC story, 1$ is just a random number to say it would crash super hard.
It's fascinating to watch this technology develop, but as a driver I usually feel more anxious using "autopilot" that not using it.

With one huge exception: self parallel-parking.

I don't understand why this innovation doesn't get more love. Tesla's not the only manufacturer to offer this, of course, but this particular innovation has increased m enjoyment of city driving more than ... well, more than anything I can think of.

Even if they never get anything else to work, it would have been worth it just for self parallel-parking. lol

From an engineering perspective, of course there are serious problems that need attention, but sometimes it also good to celebrate the wins.
That is really great, haha. What's it from?
Except you can't do that, which is why the army metaphor doesn't work.

(If you want to argue that this is a realistic response, please explain how doing so would not be acts of war, inviting both retaliation and much worse acts then justified by ours.)
As someone who isn’t a security expert,
If you had a magic wand, what does this future look like to you?

What is properly implemented security?
Yes, just DOJ. So not drone strikes, but undercover FBI agents spending months trying to cajole and harass coders into writing ransomware so that they can bust them.
Previous discussion: https://news.ycombinator.com/item?id=27042629

MapSCII is really a cool project.
Obligatory evangalism:
Considered Kotlin as a JVM-lang-of-choice? We use it on all our backends and we really love it.
This probably won't be viewed as an incentive until the US demonstrates any sort of willingness to employ this strategy.
If one of the lights in the back of that truck had illuminated red, would the car have put on the breaks in the middle of the road?
Previous discussion (8 hrs ago): https://news.ycombinator.com/item?id=27381425
I would rather use Jenkins for all of eternity than use TeamCity again. TeamCity is probably the worst CI/CD product out there.
I'm gonna throw the truth to ya big entertaining crew :Ð

get skilled... FIRST... before assuming you are a service :Ð

damn nab crying... => again :Ð
I would not say “no different.” Religion is a protected class[1], web browser preference is not. The law does not treat all kinds of discrimination equivalently.

[1] https://en.m.wikipedia.org/wiki/Protected_group
More like a proper social response to bad behavior. We can't keep hiding from the truth, especially when we live in an interconnected world where other people don't have to agree to forget.
Or, alternatively, the NSA could be tasked with constantly pen testing US companies' computer security. If they find a problem then they would mandate fixes and assess a hefty fine. The fine would be used to cover the NSA's costs and to pay a bounty to the individual who discovered the weakness.
That makes sense. Thank you for the explanation.

Lost definitely felt episodic and incoherent at times. I think they did plan out some arcs loosely that worked over the course of a few seasons. Some character progression and morality flip was clearly unplanned, and those arcs felt like a soap opera.

I’ve seen the other shows you’ve mentioned, but not Babylon 5. I had read of comparisons between it and DS9 before, and now that comparison makes more sense.
I wouldn't call it a poor hack. In a way it's a parser, which aren't really poor hacks, but can be abused. Sure, it's not perfect and I'd like it better if it was checked at compile time, but it's way better than using a simple int. Also, the moment you have a bug, tracking it is really easy: just list the functions that returns this specific type.
A restaurant only sells its own merchandise so this comparison does not make any sense.

The App Store is a 'store' in this case (it's in the name) and is the only store where you can buy items for your Apple home.

Imagine if Walmart sold homes and you could only put items in it that were bought at Walmart.
> where the visualization (not even the autopilot!) gets confused by seeing real (!) traffic lights on a truck, so it paints them in space, but then has to re-recognize them because they are moving.

Just my hypothesis: but I think the autopilot really did see them as traffic lights, and just got lucky that they weren't powered and ignored them as out of order. Were there a cross street, I suspect the car would have stopped and treated it as an uncontrolled intersection...
Is Google's vetting process non-existent or do they just not care?
I mean, it can be argued that trying to damage our infrastructure by hacking our computers is just as much of an act of war as firing a missile at our infrastructure. In some cases, the effect of the damage is the same. (I admit the 'cleanup' of the Colonial Pipeline problem is much less than it would be if someone blew up the pipeline, but the impact it had on our country was similar.)

I don't expect the US to start handling this that way any time soon, but I'm not sure it'd be irrational for a nation to decide a cyberattack is, in fact, an act of war.
How to Set Up a Stack to Instantly Respond to Critical Outages
This concept was described in Cryptonomicon (1999). I have seen no proof of concept for such an application as of yet, but it would indeed be simple.
How is that different than offering someone 6 grand? Had no one offered him six grand he never would have committed the crime.

Like there's literally no victim here other than the accused.
The team is impressive, I was wondering what all this new internal language, 400 macros, etc., could be put towards, thinking they were stuck in over-engineering. But after seeing that promise for their app, I changed my mind. Something that’s capable of making you 100 times more productive probably does need that level of development.
I searched for dang categories in the footer (comments) and found the first useful result:

https://news.ycombinator.com/item?id=22649809
It might sound a little silly but in the expanded mode where all windows are shown, the desktop wallpapers have a huge border radius on them and it makes me happy every time I see it. I have also had non GNOME using coworkers comment on this detail as well as how the windows sit slightly outside of the wallpaper in this mode. I also remember seeing a number of minor UI tweaks around the place but I have forgotten which ones as they just look normal now.
You can also have a total free for all. Murder, kidnapping, etc, all legal.

See? I can do it too.
I know the point, I'm a C# dev by trade, but if I'm going to implement validation that goes beyond static type checking, which is most of the time, I'd rather put it all in a single place and not have to deal with the type nuisance in every single line of code I write.
Well it's one thing getting robbed when you took precautions like securing your back entrances, putting security cameras in your store, putting the cash in some kind of safe and it's a different if you take no precautions whatsoever and everything is out in the open.

Many of these companies that get hacked haven't even done the bare minimum, so it's not even remotely comparable to a robbery imo.
For any type A -> B operation, it's possible to fail - that is the whole point of parsing into type B, to catch when B's invariants would not be satisfied. The bug could be as simple as neglecting to handle that failure scenario.

Some languages make this less likely (Haskell, Rust) but most mainstream languages will happily let you introduce this bug.
If progressive people create a weapon known as cancellation, then they absolutely deserve it when the same weapon is used against them. They created the new normal.
We do, the "we" I subscribe to
Working on open-source form validation library