skysight-inc/HackerNews huggingface dataset:
I don’t think that’s right about DARPA and commercialization.

I worked on a few programs and commercialization came up regularly. The PMs wanted to know your plans for regulatory testing/approval, if you had met with the relevant agencies, were you filing patents, etc. This literally started at the day 1, the proposers’ day, and the end goal was very clearly to have an off-the-shelf option that the DoD could buy en masse. They have other organizations, like In-Q-Tel that are also clearly meant to push this along.
The crisis of blogs and rise of newsletters
> It does strike me as weird that there is seemingly no POSIX-compliant way to get your public Internet address, from my readings.

Because traditionally if you're doing things right, you're not using NAT, which is against IP specs and a nonstandard kludge. So you just take your socket and query its local endpoint address using getsockname and voila.
I love this guy's YouTube channel. The thing I admire most about him is his ability to explain something complex our counterintuitive in a way that empowers you instead of belittles you. It's something I try to do, but goddamn it is hard.
They mark you forever. They can do a background check and find out why you were fired.

I requested a copy of a job background check from TransUnion and it was creepy the amount of info that had been collected on me.

There are big brother lists to track you.
> I'm struggling to see how someone could hold 'different' maps because they become one map in your head. Rationalists are perfectly comfortable with there being multiple possible scenarios leading to an outcome.

A street map and a subway map both describe the connectivity within a city, but even when a human internalizes them both, they don't get subsumed into a single map exactly, rather the human mode-switches between them at various points to stich together a route.

If you doubt this, try visualizing exactly which streets and landmarks are going by overhead as you travel between stations. It is rather hard to do, and as a result people often treat stations more like portals into a parallel wormhole network.

This of course uses literal maps as an exemplar, but similar ones are 'code switching' back and forth between dialects rather than blending them, and visual illusions that can be seen as one image or another, but not both at once.
Too bad the “free world” today is closer to NK than we’d like to think.
>Your opinion is the minority, a sizeable one but obviously the minority. The opinion of the person you're replying to is the majority.

As someone who's apparently in the minority, what's the evidence of this? Is this just your self-assessment?
This is dangerous advice that assists abusers and others from being called out regarding their behavior, because those who witness / are victimized / etc feel that they should “keep a low profile” and avoid getting involved. I know, because I used to believe this sort of thing and didn’t act when watching abusers operate in a variety of scenes, including Silicon Valley. Luckily, large groups of angry women have vocalized the before-hidden consequences of this sort of thing, so I’ve gotten wiser.

Hollywood producers and shadowy finance guys used to “keep their identity small.” We have learned quite a bit about them in recent years (and there’s obviously so much more we don’t know). As we live in a time when there is a crisis of trust across institutions — politics, religion, corporate, whatever — you’re much better off being transparent.

The thing that’s missing, of course, is that people aren’t “iterating on their beliefs” and people aren’t also accepting of the fact that people who had beliefs that were wrong or problematic in the past are able to iterate and change. This is a future area of improvement for human social development.

All of this “every human in the world is connected” stuff is very new. There aren’t really any absolute truths or rules yet. It’s going to take a lot longer than 30 years to sort out.

Edit: I would also say that there are binary opinions (ex: people shouldn’t harm kids) and what I call “spectrum” opinions (ex: the existence of America is a net positive to the world). We have to get better about engaging people on spectrum opinions and allowing differences to exist, without going to war as we would with a binary opinion that probably has only one right answer for any decent human. Again, things to be done in the future.
Secrets of São Paulo Uncovered by Outdoor Advertising Ban (2016)
"If people can't think clearly about anything that has become part of their identity, then all other things being equal, the best plan is to let as few things into your identity as possible."
I think it’s a good post, but I do wonder if it’s the British Army telling the Americans to fight with more class (line up like us, we’ll shoot, fair and square). Your identity should define your perspective.

The problem is, our society condones false identities. A true fifth column of lost souls.
Note: HTTPS://Techpcs
I mean, we solved the problem in the context of reference cycles during garbage collection.
Only if it came at the right time. I had to watch several anti-union videos when I started working at a grocery store. I'd already watched other training videos that day and the anti-union arguments in the video were insulting to my intelligence. I'd rather have been stocking shelves than listen to that garbage but I'm sure there were times where I'd been working a long shift (side note: 32 hours was the longest shift I ever worked) and would have been fine with watching some random HR video, insulting or not.
Because you’re not paying them enough? Supply and demand.
XUL (aka Firefox) is complex enough for me.
>But don’t they have ... pay rent?

Not until this month, there are lots of bets on what's going to happen to the housing market but I'm glad I don't own a house.
Everyone who wants the vaccine can get the vaccine. If you get the vaccine, you have a minuscule, almost zero chance of having a bad response the virus. If you don't have the vaccine and you get the virus you have a small chance (if you're healthy) of having a terminal response to the virus, but if you do, it's on you, you chose to not get vaccinated. I believe it's safe to say we can back off the panic phase of the virus.
> For me, after spending two hours listening to an interview with a woman who escaped North Korea, it might as well be.

I think I listened to the same interview a few days ago. Most likely the Jordan Peterson interview with Yeonmi Park. Very interesting and well worth the time imo: https://www.youtube.com/watch?v=8yqa-SdJtT4
> promote you right out of software development and into management

At good companies, these two jobs run parallel, not one on top of the other. Management should be viewed as a sidegrade, not a promotion.
The IETF has been trying to light a fire under organizations to deploy DNSSEC since 2008. You can take any list of popular domains --- last time I did this, I used the "Moz 500", whatever that is --- and write a simple shell loop around `host -t ds ${domain}" to see how many of those domains are signed. You'll see some! But they're overwhelmingly affiliated either with academia or with the US government, which, until 2017, mandated DNSSEC, but later rescinded the mandate.

DNSSEC has virtually no real-world commercial deployment. There have been years, I believe, when US deployment went down. It's dead. Let it lie.
> Won't work. Customers are generally not going to figure out your UI, and even when they do a special case is going to come up once every five or so checkouts that requires employee intervention.

It does work. Every new McDonalds in Australia (where wages start at $22/h) is designed around using these screens for ordering. American consumers will adapt, they aren't special.

> This is a better idea. They should include e.g. 50¢ in the price of every Big Mac that will be donated to the workers who cooked and served it.

Barely palatable burgers are elastic goods (unless one has been drinking).
Not an expert, but maybe because there's more fish in coastal (shallow) waters?
That was true several years ago, when Firefox was essentially the only player and optimization seemed a concept unheard of in web browsers. Then came Chrome, which in its earlier versions was really fast compared to Firefox, this paired with pervasive advertising by Google made many users jump ship to Chrome (including myself, for a brief while before caring about privacy became more important than speed). Years passed with Chrome totally deserving the prize for speed, although it was just like today a nightmare privacy-wise, but hey, it comes from the #1 targeted advertising company in the world, what should I expect?
Fast forward a few years (iirc it was roughly in 2018) and Mozilla devs show they learned the lessons: the next Firefox release runs on par with Chrome, then following versions get some further improvements in speed too. So yeah, Chrome was indeed faster than Firefox, but that is a thing of the past.
Speaking personally here, but I value privacy a lot more than bells and whistles or speed, so Chrome is a no-no here regardless of its performance.
> America is intentionally setup NOT to give you anything, but to make as many opportunities as possible open to you.

How did you come to this conclusion? Is it the lack of social safety net that opens opportunities? Does the lack of parental leave open up opportunities for mothers to breastfeed? Or having to work multiple jobs open up opportunities to spend time with one’s family and participate in the community?
The links are utterly invisible on a (monochrome) e-ink device.

Who's responsible for the styling, the author or Substack itself?
In my experience I’ve never found an instance where you would use Brier scores over cross entropy/Bernoulli/Binomial log likelihoods. Does anybody know a concrete example when you would prefer Brier??
CaptfEncoder: Extensible cross platform network security tool suite
You don't really hear complaints from them because they are actually doing things and even if it was effective it would still waste too much time. You know the old saying about business models, "winners innovate, losers litigate"? Replace innovate with "adapt to supply and demand in all areas" and litigate with "write whinging articles not realizing they are admitting to the world that they suck at their job".
They have an airforce and Exocet anti ship missiles. They sank British multiple Uk warships during the Falkland wars.
It's always easy to impose sacrifices on others to further one's own agenda.
While I'm generally a fan of the Sqreen checklist that this is built on, looking over it with fresh eyes I have quite a few quibbles:

"Require 2FA wherever possible" - Given the target audience, it would be nice if this was explicit about the reason to use hardware keys (including those builtin to TouchID + chromebooks).

"Accustom your team to locking their computers" - This is good advice, but I'd recommend configuring locking on inactivity a higher leverage effort

"Hire your first security engineer" - "do we have a security roadmap? do we manage to deliver on it?" is not a good heuristic for whether you need a security hire. I'd argue that most startups will lack a formal security roadmap when they don't have dedicated security staff. For example, the linked First Round article [1] has a more actionable recommendation, with justification: "Onboard your first, full-time security hire between 30-100 employees."

"Set up a bug bounty program (NEXT)" and "Monitor your user’s suspicious activities (NEXT)" being placed before "Have a security incident response plan (LATER)"

[1] https://review.firstround.com/how-early-stage-startups-can-e...
How is this in any way a "racist conspiracy theory"? Literally all the facts are there for this to be a relevant question, you are just apparently to ignorant to look at them.

Simply follow the political donations for the DAs, and look at the corresponding prosecution rates (and overall crime statistics).
It's great to see that the community support of this project is paying off.
This looks like a semantic/identity disagreement. What you call cancel culture is the most extreme minority of cases of what I call cancel culture. It's common to serve one's biases by using a well heard label to refer only to the cases in some ideological context that are "doing it right", or, on the opposite end, to refer to the worst version of cases in that ideological context. Hopefully we're both trying not to fall toward the edges.
Tara Reid anxiously awaits your octocrow script
> Now Ellsberg, who recently turned 90, is calling on the U.S. government to prosecute him under the 1917 Espionage Act.

> The government, Ellsberg plausibly believes, “is not anxious” to prosecute him. But he hopes to force the issue, in an attempt to bring the case to the Supreme Court and have the Espionage Act declared unconstitutional — a long-held goal of First Amendment advocates.

https://theintercept.com/2021/06/01/daniel-ellsberg-china-at...
I think social media culture has a lot to do with it. It is a cultural thing, after all.

Political culture of the last few years also has something to do with it. Almost everything can be associated with a political faction now, 5G, vaccines, celebrity squabbles, ocean acidification, early human migration theories... Political culture bleeds out.
Which is such a bad experience that the stores tend to tweak it to improve it.

I remember when grocery store checkout lines used to flag weight mismatches because the front door was open and it was a windy day. That particular chain has dialed them -way- back on their sensitivity; I think I need to flag an attendant down 1/100 times I use one?

But either way, that's handling payment of goods that aren't determined. A far harder problem than an order kiosk at McDonald's. -Those- are great, and yeah, I've never had a problem, even ordering very customized meals that many servers aren't even aware are possible (i.e., getting a burger lettuce wrapped).
I don't understand the connection between this and abusers. The advice is to avoid attaching your identity to any particular ideology. What does that have to do with enabling abusers?
Awareness is half the battle.
Maybe some of the items in this list are beyond the scope of what’s reasonable for a given organisation at a particular size or with limited resources, but being able to identify them early and plan them into your roadmap so you can begin to address them as your product and company matures is very useful. It’s all about assessing the risk you can afford to address now and in the future against the cost of implementation and whether that’s the right balance.
> another downside with auto-type is that not all websites put their full names in the browser title bar so auto-type won't show you your related passwords in some cases. to fix that you can install a browser extension that puts the full web url in titlebar https://github.com/erichgoldman/add-url-to-window-title

Instead of modifying the browser title, I use AutoTypeSearch plugin for Keepass, that opens a dialog allowing me to suggest entries in case of no matches.

There is also another plugin that allows search using both URL and title -- "WebAutoType".

These two plugins together make the Keepass experience almost seamless.
I'm raising in Canada. Can you share some of what you have seen? My info is in my bio. Thanks.
The ACLU has struggled for a really long time.

They've been accused of being racist and sexist for quite a few years. [1] is one example.

[1] https://www.latimes.com/california/story/2020-06-11/black-at...
ffmpeg is available under lgpl, so his project doesn't need to be open source, although the wasm version of ffmpeg itself should be.
a similar open source tool kit is definitely missing in the general video content creation landscape

I've found that the open source AviDemux (and Handbrake) meets most of my basic video editing needs. I also use FFMpeg to automate some tasks (like adding subtitles and metadata to many videos). OBS Studio is another open source software used by many YouTubers and streamers.
I love this idea; you could use software to automatically auction your various skills and time to create bidding wars.

You wake up and have no idea what job you are doing in the morning versus the afternoon, and you could see stats on what skills are making the most money to find training or shadowing opportunities.
You can acknowledge your preferences without making them your identity, though. E.g. you can admit to yourself that you are attracted to a variety of genders without thinking of yourself as being queer.
Ok, but your existence precedes both your ability to speak and your ability to fight for your right to speak. Inalienable or no, both rights can be taken from you, but only one is a requirement for you to have the other. Existence is therefore a fundamental requirement for freedom of speech to exist. People who don't exist can neither speak nor fight for the right to speak.
While it's certainly possible to cook unhealthily for yourself, it's a lot harder to do - making huge amounts of butter and sugar work in a food is actually pretty difficult - but more importantly, you have to actually be adding it yourself. Raw ingredients generally don't start out that way.
pg is certainly religious about lisp . . .

http://paulgraham.com/diff.html

http://www.paulgraham.com/quotes.html
It was the lack laws preventing you from charging whatever you wanted for your own labor, and the lack of laws that forced you to give away a significant portion of that wage.
'Same people' - citation needed.

UX has always been given short shrift when you can train someone to use it. When making it so trivial anyone can figure it out leads to reduced employee costs, you suddenly have a lot more incentive to get it right.
you could be behind NAT or reverse proxies or any number of virtual or physical network components. This service helps account for all of that.
Get outta here with your logic!
Unless they're rapidly editing this based on the thread you missed the mention. I currently see "Ensure that your domain names are protected" under "Your company." It doesn't really mention spoofing controls and deliverability, but does talk about registration and hijack prevention!
The description definitely matches Columbus, Ohio.

https://u.osu.edu/strive/research/dam-removal/

https://www.sciotomile.com/about/
Yes that's true, but besides the point. My point is that obviously relevant (to a human) results like icanhazip don't show up anywhere just because the domain name is... creative. This happens to more verticals than this one, where the top results happen to be websites with some SEO tricks like having a domain name that matches the search term.
If you want to learn more, just watch the movie Dr. Strangelove. It was marketed as a comedy, but people in the know consider it to be non-fiction:

https://en.wikipedia.org/wiki/Dr._Strangelove

General MacArthur was dismissed during the Korean War because the White House weren't sure if he was going to use nukes or not (like the movie.) The policy was that the US was ready (bombers with nukes were positioned in Japan), but President Truman wanted to give final advance approval to commanders, yet MacArthur was issuing his own policy.

https://en.wikipedia.org/wiki/Douglas_MacArthur

(It turns out that MacArthur was right about basically everything he ever said, and continued to advise Presidents.)
QWERTY or Dvorak?
https://en.m.wikipedia.org/wiki/Little_Falls_Dam_(Potomac_Ri...
BMC: Memcached Accelerated by eBPF
https://en.wikipedia.org/wiki/Argentine_Navy
Figma's Interactive Components Were Not Designed for This
And how does that foisting happen?
Fun realization I made over the past 18 months or so after 6 years living in USA continuously: When you're white, you can't be an immigrant.

This whole time I thought I was a plucky immigrant seeking a better life (economically). Turns out I was and am just white. Still grappling with this.

Learning your identity was wrong is very discombobulating. On some level it feels like maybe I've been here long enough that I've become accepted? Nobody ever asks "Where are you from?" anymore ... guess working on my accent finally paid off.

Friends have repeatedly told me I'm not allowed to complain or comment because "I can pass". Feels like if that were true I wouldn't need to pass, but when I ask that question it's like their brain gets a blue screen.

Anyway, just sharing one person's experience. This is not commentary, a value judgement, or anything like that.
https://labs.bishopfox.com/tech-blog/2017/05/how-we-can-stop... is a pretty good primer on spoofing (SPF, DKIM, DMARC)
On the security engineer item, I think this piece falls into a common trap. It regards security work as mostly technical work, to be handed to an IC who can also handle technical questions.

As the company will probably lack a decent security roadmap and be poorly positioned to develop one, the right move is generally to hire someone equipped to do so. Which is to say a Director of Security. They will need that rank for the inevitable political battles with Product and Marketing / Sales. Those early political fights will do more than you think to shape the culture for years to come.
You surely wouldn't call

In my view, this is the basis of any philosophy – the confidence that some conception is (and must be) defined like you do it out of habit. Philosophy is psychology under cover. Ask a psycho what is a table and they will easily point at a heap of flesh and bones, or at their t-shirt. Table is a word. All philosophy does is an iterative pseudoagreement between human minds, which were randomly trained at verbalizing inputs. Sometimes it finds similar sounds, but that’s it.
They also had delivery convenience and even the expenses are VCs trying to make up for negative profits on margins. I wouldn't take that bet as a resturant given the sheer power of convenience on sales.
I don’t understand why people are so surprised... socialism doesn’t really accept the premise of private property, private land ownership, etc. Why are we surprised when they ignore international views of land, sea and intellectual property rights?
"Let the chips fall where they may" is exactly how we got here. You can't just "retrain" millions of people to be software engineers.

Again with the utopianism.
But the overall rate of GA fatalities is much higher than for motorcycling.
using portmaster does the same thing, runs all the configs up front.

portmaster is a big quality-of-life improvement, that's almost always one of the first things that I build on a clean install
There's also a talk on the USENIX channel[0]

What surprised me (enough to post this to HN) was the fact that BMC actually outperformed a kernel bypass approach (Seastar). I guess this means that Seastar has a bunch more work to do, or eBPF really is just that well designed of an abstraction!

[EDIT] Check out the USENIX channel[1], it's an amazing resource.

[0]: https://www.youtube.com/watch?v=VKHIcTLoryk

[1]: https://www.youtube.com/channel/UC4-GrpQBx6WCGwmwozP744Q
Because I believe it is most likely true.
Perhaps an ohio class sub can be leased (crew and all) to the ROC and under direct command of the civilian leadership…

Of course none of this has to be made public with the proper FISA authorizations…

In such a scenario the PRC is the one starting ww3, but perhaps not if the ROC goes public and states that its simply defending itself… if NK can get away with it, I don't see why any other nation state cannot pursue the same strategy…

PRC would know something like this is in place when the ROC no longer decides to scramble the fighters as much :P
It makes sense (to me) that ransomware isn't mentioned, as this is a checklist of controls - not of threats. Many of these controls do help in preventing ransomware: 2FA, "Backup, test your backups, then backup again", "Isolate assets at the network level", etc.