skysight-inc/HackerNews huggingface dataset:
Would a nationalized bug bounty program help here? Along with some compliance enforcement that the bounty is actually addressed, fulfilled, and payed by the vulnerable entity or the government (funded through some form of corporate tax). I haven't really thought out the details, but likely some kind of practical and effective threshold exists where a business entity in the US enters into mandatory participation.

Genuinely curious, would love to see others' thoughts.
You trust Science, not The Science, not the Scientists. You trust the Scientific Method, and nothing else.
It took mankind a lot of centuries to get free from the shackle of the gods, let us not replace the pantheon with our science man.
Letters of Marque! I like this way option way better than that other commentator who wanted to start a nuclear war.
To be clear - this guy's article didn't lead to the Iraq war. He was writing about the information that the US intelligence offices were putting out, which at this point we know was dubious. That really has nothing to do with his credibility.
Assuming a lab leak, but not judging, it's surreal to think what it would be like to be someone involved with the initial handling of Covid-19.

I can't imagine being in those shoes while this unprecedented, global event unfolded with political and economic consequences on such an insane scale ...
I think this is right on point. We need to protect critical infrastructure before these yahoos miscalculate and cause a tragedy.
There are mountains of evidence. Proximity to the lab is barely the tip of the iceberg.
Pcicrawler looks interesting, but its too bad that it uses sysfs, making it tied to Linux. I wonder how hard it would be to make it use pciutls, which would make it portable to FreeBSD, MacOS, Windows, etc..

EDIT: There is a libpci for python that uses pciutls...
By the way, perhaps cryptocurrencies may devaluate or even die out if a viable alternative letting everyone unconditionally and anonymously transfer and accept conventional amounts of money is introduced. Perhaps this may destroy the ransomware market which is about sending huge amounts of money in cryptocurrencies.
I don't think ssh provides the same level of confidence as https, unfortunately. There are no root CAs that are agreed upon, so the users are too used to blindly accepting whatever server keys they are given. This makes MITM attacks too easy.
It's refreshing how the news media suddenly notices something everyone has been talking about.
> most fragrant violations

I love the smell of marginally improved security practices in the morning.
They would’ve had a better chance of being taken seriously if it wasn’t actively a bannable offense to talk about them on major social media websites.
Fauci is clearly dismissing the notion that it was engineered. He says pretty clearly that if a natural virus escaped the lab it would still be a natural virus and hence not a useful topic when it comes to treating it. I don't think he ever said it wasn't possible just that there's no reason to believe it. And it's understandably not his primary concern to figure out.
I've been using Clojure for a while (8+ years) and I don't use them often. Unless you have a specific need (say, very high performance), regular Clojure maps give you most of the benefits without any obvious downsides.
You write this as if NIH is a privately run foundation with Fauci at the head. He's not even head of the NIH, and while I have no doubt that he was directly involved in decisions to fund research at the Wuhan lab, this is a government agency, which as we're told over and over (when it's convenient to say so) means layers upon layers of bureaucracy and red tape , particularly when handing out money.

Is it your position that he was able to run it as some personal fiefdom?

Suppose that Fauci had known for a fact in May 2020 that SARS-COV-2 originated in that lab. How would that have changed the advice he (attempted to) offer regarding public health and safety?
Covid antibodies may or may not be produced and if they are seem to fade quickly. This has been widely researched and documented [1]. T cell responses to SARS-CoV-2 are a better indicator of exposure [2].

[1] - https://www.nejm.org/doi/full/10.1056/NEJMc2025179

[2] - https://abcnews.go.com/Health/fda-authorizes-cell-test-game-...
Many of the most serious recent incidents don't involve theft of end user data or impacting end users in any real way, unless you consider the "end users" of gas stations and ferry boats to be the victims of these attacks. That's not incorrect in a way, but also seems like a pointlessly wide net.

The thing I'm a bit tired of is IT people in these threads taking every incident that comes along as an opportunity to elevate their pet cause. These more serious incidents have more in common with mafia extortion rackets than computer security.
yes, I was trying to make the case for side-loading being good. If the iPhone had an f-droid equivalent I would probably switch over.
Europe WordCamp Online Registration Is Opened
There are reasons to ignore what Trump says - not reasons to believe the opposite of what he says. In other words, if Trump says "Covid was made in a Chinese lab" that shouldn't convince anyone either way. I'm afraid it may have convinced our media though that "Covid was definitely not made in a Chinese lab" and that is basically the same mistake as believing everything Trump says.
I did a degree, and I am jealous of how much stuff is packed into this one. Kinda wish I could take this one to be honest.
It is strange the author writes blogpost full of questions, but provides no way to answer. No comments on site, not submitted to HN, reddit or slashdot.
As someone who has run two services for over a decade, even though it's only down to maybe 2-3 nights a year where there's an off-hours outage, it's annoying enough to make me question keeping the things running. It always seems to happen with the worst possible timing!
Wow five whole hundred?

If you really think about it, all the EV subsidies need to go the charging infrastructure. Tesla has already proven people want EVs. The real challenge is the charging for people without houses. Right now much of DC Fast charging falls on Electrify America's hands and they really do not care at all as they are just a punishment company for VWs diesel cheating scandal. In my and a lot of other experiences, up to 25% of public chargers are broken and can take months to repair. Only Tesla has decent organization to fix it in just a couple of days. People who buy EVs now are in for a rude awakening.
That headline is a misrepresentation / a misapplied quote - according to the article, the scientists say lockdown had no effect on R falling below 1 because R was already below 1 when lockdown started. Saying that it had no effect on the pandemic is a much stronger claim.

In any case, without the actual link to the paper, this is propaganda (even if true) and not science.
As a person that’s been in development, devops, secops, network engineering and now co-runs a software backed IT service startup focused on SMB’s, this doesn’t actually work well IRL in my opinion.

Hosted desktops require a consistent, reliable data connection. Which means any time mobility (car, plane, train, etc) is on the agenda or if an employee needs to work from an area without 100Mbps or better broadband (rural), work or access to work is complicated at best. Further, accessing that hosted environment still requires some kind of user hardware anyway.

Dedicated hardware per employee is still the best route in my opinion. At least then, if data connectivity is nowhere to be found, they can still get stuff done.
Sorry to hear about your bad experience but glad you said something.

My husband had a Whipple five months into our marriage. The surgeon was great. Empathetic. Responsive. Took all the time we needed. The nurses, however, were overworked which led to (not quite) inattentiveness. Thankfully, I stayed in the hospital with my husband for two weeks and did lots of things the nurses normally did (measuring urine output, etc.) and was an advocate for my husband.

It was only after he left the hospital that I learned all sorts of things I was entitled to: meals on the hospital, a deal on parking, etc. It would have been so much easier had I known this. We were fortunate not to have to worry about money. But it was annoying as hell and I wrote a letter about my two experiences. Heard from the surgeon. Not anyone else. And this was at Georgetown University Hospital. I expected more.
> I think the analogy still holds here.

I really don't think so.

Let me tell you a little story.

Banks have offered checking accounts (now usually via debit cards) for a long time. Everyone understood how they worked, and if you wrote a check, it would be refused payment if you didn't have enough money in your account. This is the classic bounced check, and the merchant would be angry with you.

Fast forward to the 2000's. Banks changed the rules, and now (unless you explicitly disallow it) if your check was going to bounce, they will instead charge you an overdraft fee. Even if your account was in the negative by one cent.

All in the name of profit, because the fee would be like $35. And of course, this hit the poorest people the most. And let's not talk about check cashing services, which really screw over the people.

Now if banks stopped there, that would be one thing.

However, one of the "innovations" that Wells Fargo came up with (it was innovated for the profit margin, for a little while) was to re-order transactions any way they saw fit.

Suppose you have $5 in your checking account. This morning, you deposit $50, and in the afternoon, you withdraw $30, secure in the knowledge that you have $55 in your account. Seems safe, right? You're doing the right thing, and playing by the rules, you'll still have $25 left. You are still out and about, so later, you take out another $5 for a meal. No problem, you still have $20 left.

But Wells Fargo changed the rules. They decided that all the transactions coming in on the same day could be ordered (serialized in database terminology) in whatever order they decided. So they would process the $10 withdrawal first, charge you a $35 overdraft fee, and then apply the deposit, leaving you at -$10. Then, when you take out another $5, this is allowed, but because you're already negative, they charge you another overdraft fee, so now you're sitting at -$50.

That is innovation in the modern age of the financial industry.
Jack London's Call of the Wild begins with the dognapping of Buck. It was set in the 1890s.
> rather than going down this weird path of trying to warp the definition of "authorized".

I don't think they are. I think SCOTUS is looking at this, as is their wont, from a legal perspective.

We have two legal systems: civil and criminal. Both of them have the concept of "authorized." What SCOTUS has said here is that whether or not something is unauthorized may be a civil tort claim--you broke a contract--versus a criminal offense--you broke the law.

That seems to be the knot everyone is trying to untie here. It's not illegal for me to break a contract with someone. It is illegal for me to break the law.
Maybe the problem is people filling air with pseudo-scientific BS all the time, for instance, i dunno, Scientology?
It doesn't parse tests. It doesn't track test success/failure/runtime. Because it doesn't parse tests, it can't show you the output from only the failing tests. The UI is horrid. It's so far inferior to almost all it's competition, I have no idea why anyone would use it.
IMO the first step to fixing is to add liability. If a breach happens through a piece of software, then the vendor is liable. Same way cars get recalls. (sometimes)
The secret problem creators face
I’d guess several small teams have received single digit million dollar grants to look for the origin of Ebola. Maybe one or two got double digit millions.

China put sanctions on Australia that will and have cost their economy billions for implying that the lab leak hypothesis is plausible. Reasonable or not the Chinese government believes suppressing this theory to be a major policy goal. So I expect they’ve either spent orders of magnitude more effort than we ever spent on looking for Ebola’s origins, or they have some reason to believe they wouldn’t find anything.

This isn’t a smoking gun, but it is a dog that didn’t bark.
Investigative journalism? Do you know how long it takes to do that sort of thing under normal conditions?

How long was it between the writing of the Pentagon papers and their release? How long did the Catholic sex abuse situation take to be fully reported?

It's been a bit more than a year since the virus turned into a global pandemic. I'm willing to grant journalists a bit more leeway in the timeline for serious investigative journalism, particularly when the central locate is a somewhat secretive Chinese lab in an area that was completely locked down for months as the pandemic started.
We’ve been trying to find the zoonotic origin of Ebola for decades without any success. We don’t have anywhere near a complete catalog of animal diseases, and of those only a fraction have been sequenced.
Haha. No. It’s because of politics and TDS. People were taught that this was a Trump theory. That’s all the media needs to say to ensure that nobody will take it seriously and nobody will tolerate anyone else who takes it seriously.
Not to tout my own horn, but it really doesn't take a genius to put two and two together in these instances.

I never read 4chan or many opinions in genral, but I knew all of those points (minus the vitamin D) on my own.

The quote of 'knew a picosecond after he heard' resonated with me, because my intuition - as a laymen - was exactly the same. The moment I heard of the wuhan institute, I basically was pretty sure what had happened.
All that followed was disbelief and mild shock about my surroundings not coming to the same conclusions, or lets say suspicions and not hearing the sound of alarm bells.

I lost a lot of faith in the common sense of people through the pandemic.
I’d say the best part of education is familiarizing yourself with the domain. You may forget the details but the familiarity and know how about what a Sobel edge filter is useful the next time you encounter such a thing in professional life.

Analytical thinking and pattern recognition is indeed also a key benefit of education.
Indeed most CS graduates will forget the content after the exams, but after the process of working through the courses, they are much faster in picking up the knowledge when needed later in their career (and they are also more confident and comfortable about the subject compared to those who are never exposed before)
>> There's a whole different side of this your comment isn't really addressing, which is how these laws apply to poor communities.

> Poor communities? Really? People are oppressing others “right” to drink now? Where’s your evidence for any of this? In my “rich” neighborhood cops stop people all the time for drinks in the park or glass bottles on the beach.

I often trick myself into thinking that things that I have learned are well understood by society. But maybe not.

Example: I was stopped for non-working taillights when I was a late teen. I was let go with a warning. I was also a white kid driving an unsuspecting handmedown car in the “wealthier” part of town.

It’s easy to imagine a similar stop being leveraged to search a car and fish for drugs or other “criminal behavior” if I was a different race in a rough neighborhood with a lot of street crime.

Spoiler: I had a joint in the biblebelt and it was ~1999-2000. I could have been arrested for sure.
When someone demonstrably lies constantly, it's not unreasonable to assume that the truth is most likely the opposite of what they say.
I agree with this, but that cop, in that specific case, should have gone to jail.
Generally - heterosexual men are attached to the female form. This attraction could very well have a biological component in that a species needs children to continue.

Given these predicates, it's natural to expect that heterosexual men are more likely to be attracted to two females (twice the female forms) and not two men (no female forms).
For static notes paper and pencil is the simplest and best technology. Smartphone app might come into picture if you want the notes to be dynamic or have personalized content.
How does that conflict in any way with what I wrote?
The infrastructure wasn’t impacted. It was shut down because the billing system was.

It’s also easy to assume that everyone is incompetent. That doesn’t make it true. Like any hostile situation, a defensive position can always be overcome, you have to have an active offense as well.
DNSSEC + SSHFP is a simple, scalable, accessible solution.

Root CAs are just a bit of a bummer; I hope to be a part of the transition away from them.
Showed deference? The standard practice was to go against what he said.

https://www.npr.org/sections/health-shots/2020/01/31/8016865...

Months after this came out, the media was proclaiming that the virus was no worse than the flu.
Sure, the people who aren't proposing to outlaw mathematics are the confused ones...
I ran Jenkins at 2 companies for probably a total of 13 years.

I will do everything in my lower to never use it again as I feel that I wasted so much time fighting it.

Plugins, dependency hell, slow UI and so many other terrible things about it. Having to back the entire thing up on every change because you may never get it back into a usable state if you change something. That even happens if you have scripts in git to set the whole thing up. What a waste of time.

In contrast, I had just as good of a system running in Gitlab in a week and more importantly the other developers are able to pick it up and extend as they wish.
This reminds me. A friend who's a traveling nurse told me that a lot of guys get ingrown hairs, and infections in their groin area. So she looks at a lot of balls every week.

A few months later, she sent me a photo of her holding up two melons to her breasts she picked from her garden. I replied with a photo of two tomatoes next to my crotch I picked in my garden. She got super offended! She's still mad at me. Who was in the wrong?
Building an MVP in Southeast Asia
If you haven't looked in a while, it's probably not running, or if it is, it's seven incompatible plugin upgrades away from actually working.
Except that it was a Trump theory.

That doesn't mean it cannot be true. It does mean that after 3 years and several thousand fully documented outright lies, the presumption of truth was no longer being granted.
They did manage to grow the UFO community to the largest it's ever been, while installing their own people as authority figures in its new wave of "the phenomenon." Now DIA has a captive audience they can manipulate for the next four years.
There was an episode of TWIV last year where they mocked anyone taking the lab leak hypothesis seriously
Really? I don’t think this is at all similar to a car safety recall. That’s more like trying to issue a recall for a car because people can smash it’s windows and break in.
Different paper but yeah it's basically the same thing.
Yeah, from personal experience any time I or anybody else tries to argue that supporting IE isn’t worth it any more, a PM will pull out traffic statistics and say ‘see, x% is still on IE, we can’t not support them’
Other pertinent data point, how many epidemics have been positively traced to a lab leak since virology has been widely studied? The Wuhan lab was founded in the 1950s. You can say the likelihood that a virus would one day escape from one of these labs is pretty high. The likelihood that a given virus would be from a lab is very low. All of which brings us back to where we were at the start. It's plausible and possible but not really likely.
From what I see on that page. It costs $500,000 to exploit chrome and your attack only lasts for a few days and then google pushes out a fix to all chrome users. This is so much better than the IE era where a teenager with some free time and skill could make something up and there would still be exploitable machines years later for the same bug.
Reminds me of Apocalypse Now.

Q: Why do all you guys sit on your helmets?

A: So we don't get our balls blown off.
Hong Kong media say organizer of Tiananmen vigil arrested
There are many standards out there such as SOC-2. But that’s not particularly meaningful against dedicated professional hackers. It’s a totally asymmetric game.
Let me make this clear: I don't know for certain what happened. But after updating my priors, I believe it's highly probable that the outbreak came from human error.

Also, I never once mentioned engineering. There's a lab 280m away from the market that has one of the largest bat virus samples in the world.

I would have no problem revising my priors, but for the moment I still consider the lab leak human error hypothesis still the most reasonable explanation.
I feel the same way. Much better to encode the complexity of what you're modeling in types instead of ignoring the inherent complexity. By precisely encoding the shape of the data in types you are forced to engage with the values it can represent which leads to better understanding and better code in my experience, similar to how writing tests can lead to better code, except it's much faster to get feedback.
Fine. The problem is they dismissed alternate theories out of hand and they castigated any dissident. It was more akin to dogma.

You gotta remember they had time to "debunk" this theory. So apparently they had time to do something, except critical thinking.
Isn't this partially backwards looking at 10000+ shitposts and marveling at the X number that were right?
That's true. It's also true you can make almost any desktop environment and theming with it which I dig quite a lot but never have time for.

IMO desktop Linux has a future -- and I am saying this as a vocal critic of it. But there are some obstacles that haven't been overcome yet.
Some industries (government, hospitality, health care, some travel) have proportionally more IE users unfortunately than the general population
> I guess we have very different priors about how easy it is to pull off massive conspiracies.

Is it that difficult when you manipulate the media and control the narrative? This is why the principles of free speech are as important as the law itself.
"My Elixir was Scala"
"I would not recommend Elixir or Scala"

It's not entirely clear whether your experience is only with Scala or whether you've used both. If it's the former then I'd suggest that others try Elixir for themselves rather than take a recommendation based on experience with another language.
The EFF has been arguing for limiting the scope of the vague CFAA for two decades already, I'm happy to see some progress on this issue.
That depends. Are you a senator?
4chan flocks to doom and gloom predictions, because that's the most "fun." When they always predict a global disaster, we shouldn't be surprised when they predicted something that actually was a global disaster. Broken clocks are right twice a day.