skysight-inc/HackerNews huggingface dataset:
People lie. All the time. The Karen’s of the world. If you deceived in order to get vaxed and someone who desperately needs the vax couldn’t get one, I understand the anger. I’ve lost friends to covid. What I will say is life isn’t fair, crying about it after the fact doesn’t do anyone any justice. Focus on you and just go get vaxed. If you need to make an appointment, do it. If you need to walk up to a clinic, do it. The sooner we can get everyone vaxed the sooner we can return to normal. I’m not downplaying the issue, I’m simply redirecting energy into more positive outcomes. I have no say on the drama of whether they lied to get bumped to the front of the line or not. People lie to jump lines all the time. Hell, some people just cut them. Does it anger me personally, yes. Will it change the overall outcome, no. Get vaxed. Call your congressperson if you must, but get vaxed.
(Just curious) is there something about this that lacks substance? Sure, a CVE rated 8.6 vs a CVE 9.8 may or may not be worse than the other, but is there a better mechanism to communicate severity other than this, or something like "Medium", "High", "Critical", struggling to see your point.
Yep, Germany screwed up the whole supply management. Just saw a projection that Germany will reach 80% first vaccinations in July. Which was kind of expected, initial orders as of January were enough to get that in June/July. I guess we will one month behind everyone else in the EU, so I think July won't be that far off. In August we will see headlines complaining about all the over ordering of vaccines and what to do with it.

I'd love to write a case study about that one day. Or maybe not.
Interim secret clearances are routine, but not so much for TS. Unsurprisingly, it comes down to urgency of need and not anything else like seniority or authority. That explains why certain nobodies in the military can easily attain an interim but not senior officials working on presidential staff.
Apple employees push back against returning to the office in internal letter
Another option is htmx.org. It's similarly small and unobtrusive, and I've found it easy to incorporate into Django templates.
> I’d feel guilty, but it’s hard for me to get upset about other people skipping the line

Same. I’m not upset, just wanted to walk through what goes through my head personally.

> And in public policy, the long game is always the important one

This is a key point. The policy did its job. Old and weakened people got their shots, line skippers are a blip on the radar. But maybe it worked because most people played their role and held back tiny personal infractions for the greater good.

> I mean, if politicians and VCs and the elite all want it ASAP, maybe it’s safe for almost everyone?

I think that is very theoretical psychoanalysis, but if it’s what people tell themselves to get that early jab, sure. In the end, this is an unprecedented global crisis and people are either going to fall in line or act in ways that help them cope with uncertainty and anxiety.
It's a great point about the broader process. Specifically, including people who aren't your immediate family (do you want them to see you refuse something?) and investing in the prior-to-plate portion (sunk cost fallacy!).
i've been seeing FF freezes on arch too, though thankfully just the browser (which i need to xkill) rather than the entire desktop
As I look (01:18 4-June-2021 GMT) at https://duckduckgo.com/?t=lm&q=tank+man&iax=images&ia=images it is the tenth result
Given that consent can be manufactured, I have a theory on where most of the truly smart people are, they are the ruling rich oligarchs. 'Democracy' is a charade to keep the mobs pacified and given them an illusion of electing the leaders they desire.
Uhh... Yea. we do (and I wouldn't even bucket my organization as one that is good at engineering/systems). VPN, email, slack, ssh are all behind multifactor.

> Bucketing MFA into one broad concept is as disingenuous as calling out security headers as being as benign as CORS. Does your org have MFA on SSH? On email? On the code repo? On the Slack login? On the VPN(s)? Etc. Etc.

I have been doing security for 15+ years and your mindset of "omg its so hard, so we can't do anything" is the exact sort of thing that got the Colonial Pipeline into the situation they are in.

> I have yet to see a single org that had MFA on everything and blaming a lack of MFA on the VPN misses the point. If they'd had it there, the attackers would have hit elsewhere. Most developers install random software and browser toolbars that they'll never have time to check and connect directly to their companies servers, repos, and communication tools. Pretending like MFA on a VPN would have magically solved everything is a pipedream. There are too many ways in, and every time someone gets in the response from the software community is always "oh why didn't they do X" while ignoring the larger truth: There are too many threat vectors and getting them all right, at all times, is nigh on impossible.

Well, we should just give up and do nothing, right?

You probably need to see more organizations, I am really not trying to be a dick, but I truly hope you aren't in a position of authority or in charge of security for any sizable organization.

I have seen about 30-40 medium-large organizations breached by account takeovers (ATOs) over the last 5 years or so. At this point if you don't have SSO backed by MFA on everything (email, vpn, slack, git/vcs, salesforce, marketing sites, etc.) you are playing with fire. With things like Okta, Duo and Yubikey, there are just no excuses.
I'm exclusively back on my bullshit about CVSS being a debacle, and hoping that if I whine about it enough, people will stop putting CVSS scores in headlines, because they're meaningless. "Critical" does a fine job.
These were more topic-specific forums (people who did the thing hung on the forum), so it might be a bit different with HN.

As you note, why would they stay where they don't feel welcome?
I don't know if your analysis about either front line workers needing to be first in line or the impracticality of triaging anyone after that is correct, but your analysis seems just as valid as any coming from California's political class. So yeah, dude probably does shame people for bluffing at poker. Probably drinks appletinis too.
Luck (and nepotism) play far too great a role in success for meritocracy to exist.

https://youtu.be/3LopI4YeC4I

Then of course there's the whole "the guy who first coined term considered it a joke." Too many people missed the satire and took it way too seriously.

https://en.wikipedia.org/wiki/The_Rise_of_the_Meritocracy
Both because someone could stole your money or authorize unwanted action.

What other way of preventing that do you propose? Fingerprint? I will will send the data of fingerprint. Facial recognition? I will just grab your profile picture. What kind of method do you envise that could prove you are you and not somebody malicious?
Likely, but it wouldn't self-host on CP/M or DOS then.
Isn't the DoD a civilian institution?
" if you're coming up with sensational explanations in breathless excitement, it's almost certainly untrue."

Spoil the fun...fun at some one else's expense... Your expense, sigh. Spoil away
And public sentiment is not the same everywhere - for instance, the US tends to be more suspicious of government than of (large, public) corporations whereas elsewhere it's the complete opposite.
Was the tweet directed at the CEO of ycombinator?
It’s “Wildcat Banks,” with additional regulatory risk. Crypto in the form of Bitcoin is not systemically risky. Crypto in the form of “stable coins,” which are actually shadow banks, is risky.
MFA for both VPN (code repos, servers) and MFA/SSO for web application access at my employer. My wife's employer is similar. I work in software; she's in finance.

I amazed this isn't the norm across all industries.
Quantum holds the key to secure conference calls
Meaningful freedoms always include the possibility of abusing those freedoms. People will use the free exchange of ideas to advocate for falsehoods, start cults, and create political movements with terrible consequences. But they also use it to make the world a better place. New ideas that have advanced us as a civilization have generally started out as subversive and the freedom that allows them to grow to widespread acceptance is important. While the abuses are awful, and we can try to make the specifically abusive aspects illegal, it's hard to fully separate the good from the evil. In the end, the freedom to change to world for good always entails the freedom to change it for evil, too. But at least in this area, historically, the big wins wipe out the big losses -- and even if they didn't, I still want the wins.

This principle is true in almost every area of life. Strong encryption, for example, does help terrorists and cybercriminals, but it also helps revolutionaries and businessmen and ordinary citizens. I don't want to give too many examples because these things tend to be politically hot topics, and I don't want to distract from the central principle: meaningful freedoms can be abused, but are worth it because they also change the world.

I would say this is the case with cryptocurrencies as well. It is true that they enable certain criminal economies. Perhaps some of those economies would still function without cryptocurrencies, and perhaps some -- as the article suggests -- would no longer be viable. But cryptocurriencies enable people to build any economy they like without the approval or supervision of a state. There are places where the government does sort of a terrible job managing its money, where this is a major benefit to people. There are people doing things unpopular with some company or some government, who can still do them practically because of the economies enabled by cryptocurrencies. These people are by nature pretty subversive, and a lot of them are doing things I do not like -- but some are doing things I am very glad they are still able to do. Freedom's like that. Some people use it for evil. Some people use it for good. And the difficulties we have in all agreeing on what's good and evil (and the particular difficulties big governments and corporations have in getting the answer to that question right!) are why I'll almost always side broadly with freedom. When people use bitcoin to do criminal things, I'm all for prosecuting them for the crimes -- but leave bitcoin alone. The ability of people to run an economy without the government's permission is something I really like them to have.
Honestly, we can't let basic security turn into an arms race.

It's getting harder and harder to maintain good password practice. Part of good security also needs to involve proactively going after the criminals.

Anyone willing to break a window can break into my home. Internet security needs to be the same way: Secure enough to keep the honest people honest, and government agencies need to track down the hackers and imprison them. We can't expect normal people to perfectly implement complicated security procedures all the time, nor can we have pervasive technology and only run it with the world's smartest and most perfect people.
Interesting statistic. Do you have a citation?
> but compare that to 0.5% earned at Goldman Sachs or traditional FDIC insured bank accounts

Why on earth would you compare it to those rather than an index tracker?
My search bubble on Google (which I hardly use) has the first seven results for image search of Tank Man" being Tank Man.

Interesting. I blame the aliens
Compared to Wireguard with MFA? as far as I can tell Wireguard doesn't support MFA at all. Pure key auth is not acceptable in these contexts because of stolen keys and devices.
I had completely forgotten that Bing existed till this news hit. Could this lead to a variant of the Streisand effect where Bing gets more coverage and usage?
That wasn't the original plan though.
Learn JavaScript in Correct Way
Learn js in correct way
Any notion that we live in anything remotely resembling a meritocracy should already be thoroughly debunked if for no other reason than the results of the 2016 elections.
If you use all Apple products (phone and laptop), you can set up Apple MDM on all of them.

https://support.apple.com/en-us/HT204142

https://developer.apple.com/documentation/devicemanagement

https://www.apple.com/mx/business-docs/DEP_Guide.pdf [PDF]
The US DoD includes civilian agencies and all of the US armed forces.

https://en.wikipedia.org/wiki/United_States_Department_of_De...
Man I kept reading that whole thing looking for a definition of what Ultra Processed Food even means, and didn't see it. It has been such a pet peeve of mine that we use "processed foods" as a category that is bad. There are lots of different foods that get processed, they get processed in many ways! Is oatmeal made from steel cut oats processed? Is steamed broccoli processed? You steamed it. Is bread a processed food? Cooked meat?

It is just this vauge idea, "no you know what I mean by processed foods, the bad stuff, stuff in a package". Raw carrots come in a package, are they bad? "no the bad stuff".... so bad food is bad, ok.
>not everything on Twitter is true

>I'm sure you have a good point. I'm just not sure how to do it better.

Probably without the allusion that the tweeter isn't telling the truth, to be blunt.
It prevents you from using someone else's credentials to access the system.

It prevents a whole bunch of other sophisticated attacks as well, but let's be honest, people just giving out their password or using a really weak password is the most likely scenario.
How's it possible that the economy is consolidated in a few companies where all the jobs are automated and that not creating a shortage of jobs?
It isn't a question of whether eating only burgers, fries, and soda is a common problem or not. It is a question of a paper going on about Ultra Processed Foods as if that is a well defined thing, when it should have said "eating only a burger, fries, and soda causes rats problems"
I haven't read the article, but the fact that it's published on some random website instead of "legitimate" media makes me skeptical. Looking up the author, https://www.wikispooks.com/wiki/Whitney_Webb it seems her interests are "the deep state", and "the VIP pedophile ring". She also got kicked off Patreon because they consider her posts contradictory to Covid wisdon. Well, maybe she knows the truth about the world, but when I get around to reading the article I'm going to ask (if just to myself) "You got proof for that?" for everything she claims.
Facebook suspends Trump accounts for two years
I am not a Trumpist, but i dont think Facebook has a right to decide. Do u agree? why?
A friend of mine flew out from Zurich to CA to get a shot.

They gave him one without checking anything. His response? “America has the best vaccine program on the planet. They have so many rules in Zurich that the confusion is holding things back. They’d rather throw away vaccines than break minor rules”.

Vaccination should be easy, bureaucracy free and straightforward; especially now. I can understand age restrictions from Dec-Mar.

This is not like standing in the line at DMV. The entire country needs to be vaccinated and if we put too many rules around this, we all lose and that’s unethical. I urge everyone to be reasonable and flexible. This does not mean you should go and cut lines, push elderly and others aside. The goal for everyone should be efficient distribution of vaccines.
Agreed, hover over it if you have a mouse and the tooltip should show the full name.
WordNet Search (2007)
Since I just learned the hard way that "XVideo" can produce unrelated results if you put it into a search engine, here's a direct Wikipedia link for those who want to know more about it: https://en.wikipedia.org/wiki/X_video_extension
Tether imploding isn't at all like a public company closing shop, because public companies are Real Things and have public data about sales, revenue, employees, business relationships, etc. And even the ones that implode go through bankruptcy court where their assets are doled out to debtors and shareholders.

Tether imploding would be more like a bank run, where you can see YOUR MONEY as a number on the screen then when you go to cash out, you simply can no longer access your money. Or maybe you can withdraw $100 a day, but no more. If and when that happens (or threatens to happen), everyone freaks out and tries to get their money at once - which is exactly why the banking system in the U.S. is backed by the federal government so this doesn't happen.

The higher risk is that a good swath of crypto investment is done on leverage, which can increase with the more money you have. So with $100MM and a bit of lying you can go invest 10x your money in crypto and get some fat returns - lets say you go all-in and put $1B in Tether and get an 8% return on your money - thanks to leverage you are actually making 80% return on your $100M (sample #s, but you get the idea). This works great until things blow up, because you don't just lose your $100M, the BANKS that gave you leverage ("margin") lose $900M too, so one idiot taking this gamble can have a massive impact on the banking system as a whole.

This isn't just theory either, something akin to this happened about a month ago: https://www.thestandard.com.hk/breaking-news/section/2/16880...

And that wasn't even fallout from a Ponzi scheme, but simply from: bad risk management + leverage + minimal oversight + lying. The real stupidity is that these banks have continued to provide margin loans at very low rates with loose oversight, which should remind you of "race-to-the-bottom" mortgage market that blew up housing around 15 years ago. Except now we are talking about hedge funds and billionaires and a billions of dollars being thrown into shitcoins and NFTs. So when this implodes there won't be any collateral at all to rely on.
Big discussion a couple of days ago: https://news.ycombinator.com/item?id=27370026
Small-C was the best one with open source, but there were many others. This one was my favorite: https://www.bdsoft.com/resources/bdsc.html
I think the idea is to penalize companies for not taking security seriously. This is not mutually exclusive with going after the hackers.

Colonial pipeline is not normal people, and this is effectively a result of negligence on their part
In my mind there are only two factors that matter: the accessibility of the attack vector and the extent of the blast area if the target is compromised.
I have a friend who is in his 40s, never eats veggies, and is one of the fastest bike racers in town. As much as people go on about veggies it isn't as if you can't live without them. The nutrients exist in other things too.
FWIW, I think that was probably because your comment was unsubstantive enough that it was unclear what you meant, which probably put it in a worst-case situation. Also, unsubstantiveness attracts downvotes in its own right, especially when it contains traces of snark. Also, your account has quite a history of posting unsubstantive comments—could you please not do that? We're trying for something different here.

https://news.ycombinator.com/newsguidelines.html
Most dark markets are indeed shifting towards Monero
> Hacker News is a special place

This is not a place.
YUV was the standard in PAL, NTSC used something called YIQ.
Several posters in this reddit discussion [1] about that vaccination site corroborate dasickis' claims.

It's still not clear why they were not sticking to whatever the current phase California was in at the time. I've seen a couple claims on that, both of which are believable.

1. The site was participating in a Federal vaccination program, not a state vaccination program. The state rollout phases only applied to state programs.

2. They didn't get enough people making appointments to use up their vaccine allotment. When that happened (or when people made but didn't keep appointments) sites were allowed to give the leftover vaccine out first come first served to anyone who met the requirements of the FDA emergency authorization for the vaccine they were using.

[1] https://www.reddit.com/r/oakland/comments/m4bqx9/a_west_oakl...
First instinct is they have reason to believe an accomplice of the suspect viewed the article immediately after the incident and they are trying to find the accomplice.
lol imagine believing this
You’re crazy if you don’t start in the cloud; you’re crazy if you stay on it.

[a16z] show that across 50 of the top public software companies currently utilizing cloud infrastructure, an estimated $100B of market value is being lost among them due to cloud impact on margins — relative to running the infrastructure themselves

If you’re operating at scale, the cost of cloud can at least double your infrastructure bill.

Repatriation results in one-third to one-half the cost of running equivalent workloads in the cloud.
I worked briefly at VMware. An exploit like this doesn't surprise me one bit.

We had a company mailing list that people used to email jokes back and forth all the time.

One rather ignorant programmer put a rule on his email where he would get an alert whenever anybody emailed him with a particular word in the subject line. That word happened to get into a rather popular email thread, and in the middle of the thread we started getting complaints from him asking us to change the subject line because his pager was beeping off the hook.

Career limiting move! He took a lot of heat for making poor assumptions.
Before cryptocurrency, ransomware was tiny and pretty easily trackable if it grew too large. It was so tiny, barely anyone knew about it. Now it's multi-million dollar business for each of multiple ransomware groups. You can't launder that much money through gift cards, and definitely not from a single entity.

Pre-crypto ransomware was just dabbling in the idea and flying well below the radar of real enforcement. I really don't mind reclassifying that as proto-ransomware and not a real thing we experience these days.
Company 360
All of the energy going into this should instead be directed toward "how do we vaccinate most efficiently in future?"

I think it makes a lot of sense to vary eligibility criteria by vaccination site, and allow for anyone to be vaccinated at some of the sites. That way, anyone who meets special criteria can go to a site where the wait will be shorter, and anyone who doesn't meet any particular criteria still have a place where they can go to get it provided they are willing to endure the potentially long wait. As the rollout progresses, if some of the "special criteria" sites are not too busy, they can change to become "anyone" sites.

Overall, the problem of "too many people want the vaccine ASAP" is a great problem to have.
Like on Hackernews
That tweet from the official account of the City of New York says otherwise: “With State authorization, we can get vaccines to tourists and make sure they have a built in souvenir to bring home with them.”
> She chose to describe “herself as an ‘internet operator’” during this period

Interesting considering the theory she was the reddit power mod /u/maxwellhill who became inactive after her arrest

https://old.reddit.com/r/conspiracy/comments/hnfx0r/not_conf...
I feel like you're being intentionally obtuse and contrary.

If I state "processed foods" I typically mean anything factory made that contains seed oils (cotton seed, sunflower, soybean, canola, etc)

I would throw most sweets into this as well.

Its essentially middle aisle food at the grocery store that is more recognizable as a brand name on a box rather than a plant, animal or dairy product.
This is historical, there are no limitations in CA now. I believe that’s true for the whole country since April 15th. Bay Area removed requirements a few days before that due to higher than anticipated supply.