skysight-inc/HackerNews huggingface dataset:
Its impressive in the sense that say, replacing a Honda Insight's engine and power bank with a lawnmower engine would be. It's not incredibly useful, but its a cool hack; with some conceivable utility if you squint at it right.
True enough, provided you also apply a 40% discount to marginal salary increases.
Password is the cause like a gun is the cause of a shooting.

Networks are targets - both because their assets make them attractive to attack, and because a network is inherently vulnerable (since it is a set of connected nodes).

So the cause is the network and the solution is to eliminate the network. Securely identified, properly authenticated, least privileged access, app-specific, ephemeral connections. Can such a connection still be breached? Of course. But it will be more difficult and it will be isolated, micro-segmented by definition, and unable to be leveraged to attack laterally.

That said, networks makes things simple. And complexity is insecure. As soon as we can make the paradigm listed above as simple as networking, we will see a massive shift. We need it.
When I lived in Denver a few months back, the mass-vaccination site of Coors Field was right behind my condo. I love to skateboard and OneWheel that lot (Coors Field lot C) and just rolled up in my OneWheel and a nurse asked if I was there for a vaccination. I said I wasn’t but that I also hadn’t been vaccinated. She directed me to the line and said “Well, go get yours”. At this time CO hadn’t opened up vaccines for everyone 18+ (they did two weeks later). While I understand the frustrations some people have with the fact their state has waiting lists and eligibility requirements still, I also believe we should be happy people are getting vaxed. No input on the drama here but I’m glad you made the decision to get vaxed and Paul should do his part to make sure he gets vaxed. Internet outrage isn’t a sustainable community builder unless you’re into conspiracies or cancel culture. Calling out others for doing their part (whether ethically or not) is missing the point. Get vaxed. So we can all move forward.
The entrepreneur who spent $69m on a NFT
It was a typo. I meant to type “new product innovation”. Basically marketing, manufacturing, and the research people come up with a new idea and make a small run. Then on the tech side we help with getting it in front of customers online and then figuring out who buys it.
That is not a thing. There is no free lunch; the company could have sold those shares and raised money that way for the same dilution.
Fun historical tidbit: Tim Paterson, the author of 86-DOS (which went on to become Microsoft's famous MS-DOS), did his early 8086 development on a CP/M machine. He wrote an 8086 cross-assembler and also an 8080-to-8086 translator. Eventually, once 86-DOS was up and running, he used the translator to translate his assembler and translator to 8086/DOS code and his OS became self-hosting. The resulting ASM.ASM [1] and TRANS.ASM [2] sources are now finally available thanks to Microsoft's release of the early MS-DOS source code.

[1] https://github.com/microsoft/MS-DOS/blob/master/v1.25/source...

[2] https://github.com/Microsoft/MS-DOS/blob/master/v1.25/source...
Sure, penalties for negligent companies might help, but if someone leaves the front door open and gets robbed, you still go after the thieves too. Although the idea that the east coast pipeline infrastructure could be taken down by the rough equivalent of keeping the door open it pretty terrifying in its own right.
AliExpress and Alibaba

Dell/HP driver download sites
Why downvote? A few days ago was the 14th anniversary of that. It seems people are downvoting a legitimate difference in experience.
That, and obfuscation is also relative. You could call the 589 lines obfuscated as well.
Figuring out what to do with it! :)

https://twitter.com/gfodor/status/1400670444533936128
I had the same thing, and I ended up growing out of it in my early 20's. The gag reflex is so tough to get around, I think I gradually got past it around the same time. I'll never be an adventurous eater, but I've become a huge fan of asparagus, spinach and green capsicums (bell peppers).
This was not the case back in March.
we'll get to work :)
The standard setup I’ve seen is MFA on VPN, with critical systems available only via VPN (like SSH), then all other services (email, GitHub, Slack, etc) are available only through SSO with its own MFA.
The technical work that a lot of us are involved in is deeply intertwined with the venture capital business. This is a glimpse of how things operate inside of that business.
I would, it's pretty trivial (I have done it for multiple organizations of different sizes/technical competencies). Especially for something like a VPN; at this point if you use a VPN solution which doesn't support MFA it almost certainly has other security issues as well.
Duo is another option for a nice OpenVPN MFA option.

https://duo.com/docs/openvpn
It's under the desk, hidden away.
Does that imply that "the market" would rise if Tether was eliminated? Why not do it?
And all the remote devices connected by VPN. With everyone working from home, that's a pretty high number too.
people seriously underestimate dotnet.

It’s the most malleable language on the market right now.
Governments are inextricably involved in the energy sector.

Would you demonstrate the falsifiability of your claim by describing a different energy investor that has not sought to benefit on the backs of state and local governments? It would certainly help me to understand your point.
I have a family member who had a very junior role at a big finance company 15 years ago and they used hardware keys. Seems like national infrastructure should require similar levels of security.
My first software job many years ago was manual software testing. I had a script I'd follow. Create a thing. Link it to a thing. The company paid me to do this.

Now that I'm a dev, I could write a cypress test that would run through that entire script as part of CI, which means the mistakes would get caught before code is merged. How is that not preferable?
One word: xroach
Not lately, they are not ridiculing it. They are treating it as a credible theory. CNN used to actually run news, too.
The startup founders' guide to software delivery
Do they honestly expect people to believe that?

My theory:

Microsoft’s goal was to hide the tank man images, and only the tank man images, from the other image results.

But an engineer, in an act of defiance, made it so that all results would be hidden, making Microsoft’s agenda stupidly obvious, but making it seem like the engineer did it “on accident”.
{ blacklist, unBlacklist, updateBlacklister (add), isBlacklist }

Looks like a full API to manage a blacklist and an authorization scheme for adding blacklist administrators.
I find a good human tester is a kind of "expert user" - someone with intimate knowledge of the domain, and knows how a product could help someone solve a problem. Arguably, this is the role of product management. They SHOULD be people from the domain regularly dogfooding the product. Unfortunately, a lot of product management really has become what used to be called "project management": planning, budget etc. It can be less about what the product should do, depending on the specific product manager.
How is this breaking news? I though Reuters was one of the last sort of boring “just news” orgs.
Now that you have kids you need to make money in order to keep them fed, clothed, and (if you live in the USA) ensure they donpt go to a shithouse school.

Find meaningful work if you can get it. But prioritize money first. At least until the revolution comes and a living can be provided for all.
> There are a number of 'special' vaccination sites in the USA which are indeed vaccinating first come, first served people without going through any special qualifications/eligibility check.

As well as entire states in certain parts of the USA.

For example, Texas, where you only have to be at least 12 years old[0]. In many cities in Texas, they're at more than 50% and running out of arms to stick them in, and definitely very short or no lines. No idea why California has those requirements instead of just opening up more jab spots.

0. https://dshs.texas.gov/covidvaccine/
Password, bad.

Password, allowing access to something with a very large 'blast radius', horrible.

Systematic failure of compartmentalization and roles/access control within the organization's network.

I do not agree that eliminating the network is the solution. Properly securing the network is. I could go into a 30 page essay on what might be considered within the category of 'proper', but suffice to say that organizations of this importance should have a serious infosec/netsec department.
So just so everyone has the full context: Oakland opened up its vaccination sites to more people on a shorter timeline than the rest of the state, in certain ZIP codes with disproportionately poor residents, in order to get vaccines to those disproportionately poor residents. I know this because this is how several of my friends who live in West Oakland got vaccinated ahead of the eligibility opening up in the rest of the state.

Your post suggests that the result of your post on the YC message board is that people who did not live in those zip codes came to Oakland to take advantage of a program that was not meant for them (and please correct me if I’m wrong, but that’s what I’m seeing here).

I think if you really want to exonerate yourself here, you should probably come clean about what kinds of objections were raised to your original post, because it is very plain to me how the kind of thing you’re describing could be seen by a reasonable person as unethical.
This is correct, with one subtlety.

YUV to RGB conversion (and vice-versa) requires use of conversion coefficients (BT.470, BT.709, etc): https://en.wikipedia.org/wiki/YUV

Different apps/algorithms can choose their own coefficients, so you get a slightly different RGB colors. If you converted RGB back to YUV with a different set of coefficients, you would get a different result.
> not immediately clear which laws

Yes it is, theft of trade secrets [1].

[1] https://www.justice.gov/opa/pr/former-dow-research-scientist...
EDIT: HN's contact email is working fine; the evidence presented was known to be invalid before it was posted and used in bad faith to bait the conversation.

It worked fine when I emailed them yesterday using a non-Gmail email client and server. You’re suggesting that all email for YCombinator is down (or, worse, some/all of Google Apps) so that seems worth proving out. I checked and there aren’t any posts today about Gmail or Gapps being down. Diagnostic superpowers, activate!

Are you getting a bounce/timeout from a real email client through a real SMTP server? I know some mail servers I used to operate would reject your telnet test as shown, so I’m not really surprised it failed at a Google SMTP endpoint.

Are you attempting to email them using Gmail, using a third-party commercial service, via a cloud/datacenter-hosted personal SMTP server, or a home internet connection SMTP server?

If the SMTP server is under your control, is TLS correctly configured on it to modern standards? Do your server’s A/PTR records match the hostname it’s configured to use?
I don't follow you as gymnastics in China is way more popular than gymnastics in the US. America has always been based on following role models and all was good until the Kardashians and gangster rap singers become those. Given she competes in the artistic gymnastics field, being artistic is a key component of the sport - it's sport, but it is an art, too. Rhythmic gymnastics is way more artistic, I agree, but it also is much more complicated than simple athletic routines and it's dominated by Eastern Europeans mostly due to the focus of beauty, grace, and clockwork coordination. Again, not sure what boundaries she's pushing in this breakneck act - there's no human, who can push the boundaries beyond those set by animals.
Priced in how and to what? Definitely not to tether
You can write JavaScript outside the web browser using nodejs. You absolutely have file system access.

For whatever warts the language may or may not have, command line scripting in JS is a pleasure. Often you don't care about or need the benefits of those other languages. You can write CLIs, web servers, wrangle data or even just replace shell scripting.
He’s probably just jealous of your whale fuckbot or whatever the hell it is you say you’re working on.
Scale problems are very fun to attack and solve.
Oh, definitely! I haven’t worked on anything targetting a console past the PS3 generation and it completely slipped my mind that the latest gen consoles are architected specifically for streaming compressed data.

On the Windows/Mac/Linux title I’m working on now, I definitely measure a sizeable improvement to performance when loading from an uncompressed zip rather than from a compressed one. But even that could be down to the particular set of libraries I’m using to handle it.
I was hoping someone would validate my suspicion that all of the people commenting without seeing any evidence were indulging in outrage porn.
Remote Controlling a Nintendo Switch for Fun and Profit
Not all. NY hasn't yet expanded eligibility to international residents, unlike some states like PA (other than Philadelphia) and TX which are okay vaccinating anyone of the right age regardless of country of residence.

Source:
https://covid19vaccine.health.ny.gov/ "All individuals 12 years of age and older that reside in the United States are eligible to receive the vaccine."
https://www1.nyc.gov/site/doh/covid/covid-19-vaccine-eligibi... used to mention this requirement but still links to the NY State COVID-19 Vaccine Form (seemingly hosted on S3!) https://forms.ny.gov/s3/vaccine that includes an attestation that the vaccine recipient "presently reside[s] in the United States".

They aren't just excluding international tourists, either - lots of non-tourist international residents are still excluded from vaccination in NY. I'm an American citizen who currently lives outside the US, but I've spent most of my life living in NYC and am preparing to move back there with my wife once she gets her US immigrant visa. We recently visited my fully vaccinated parents, primarily as a family visit and
mental health break, and with tourism kept to a minimum for safety reasons.

When we got our first shots in late April, the rules were "NY residents only", so we each got our two doses in a relatively nearby, rural, and somewhat politically purplish part of PA that had plenty of spare shots and that didn't mind ID documents showing foreign residency. Even now we wouldn't qualify for getting our first dose in NYC, despite having a lot stronger ties to the area than tourists.

I hope NY removes this last restriction some time soon: maybe together with its so-called "full reopening" on July 1, maybe when the Canada-US land border reopens to travelers who aren't fully vaccinated, or maybe when the geographical travel restrictions get dropped for foreigners coming from the EU/UK/China.
The Disappearing Plane: A Case of Time Travel, or Something Else? (2017)
This was actually fake news, Yakima fema site had the same eligibility as elsewhere in the state

https://www.seattletimes.com/seattle-news/health/washingtoni...

A good example of how confusing and micro managed the eligibility charade was.
Sounds like it is in Australia, there are some sites that are vaccinating only those based on an eligbility criteria, and there are mass vaccination sites for anyone who wants the vaccination.

Some people are getting upset about people skipping the elegibility criteria.

Its a story about poor Governement communication to the masses.
If so, wouldn't that be vulnerable to an attack where we make submissions enumerating claims and observe which ones get modified? :)
> "Let them track me, I've got nothing to hide."

Interestingly, this attitude used to be default even here on Hacker News ~5 years ago. I am so glad to see it's changing. Why I'm finding this interesting? Because this audience always knew what's going on even without layman articles like this, but did not care for some reason. This shows how just knowing isn't enough sometimes. Public sentiment matters.
> Much as I'd love to, it's not my place to say why the original title was inaccurate, so I'll just remind you all that there are two or more sides to every story and not everything on Twitter is true.

This reads a bit like "not to be that guy, but...". You won't say why for some reason, but clearly it's not to stay out of it because you're letting innuendo do the job.

Alternative suggestion: "That is inaccurate but it's not my place to elaborate." It would still express the point but avoid reinforcing the circle the wagons/"blue wall of silence"ness of this situation.
The same comments were made here on HN...
I believe what are being thought of and judged by some (not you necessarily) as hard rules are actually just guidelines as you mentioned.

And individual sites are encouraged to use their discretion in giving out available doses, when extra doses are available, to people who would otherwise not fit the guidelines. Because having doses go to waste is not desirable. So, people passing judgement may be being overly harsh.

It’s hard to speak generally about it though because rules and guidelines vary from place to place.
It’d likely count as a non-computer system you hacked.
HN is blocked in China.
All the mealy UFO chatter (months of it!) makes me wonder if its just a big PR campaign to convince military people to actually report oddities. Maybe they [military] don't want to be seen as dumb for seeing something they can't explain, so they don't report possible foreign spy drones enough. So now the gov has to literally to psyop everyone into caring so the troops finally report sightings they can't explain.

Imagine the latest US military drone tech testing their drones by sending them over other US bases and doing weird stuff, flashing lights, making crazy patterns, etc, hoping for a funny report. But then: The base never reports anything. So the drone team has to go "oh crap, what else don't they notice?"

So to save face the gov launches a huge PR campaign saying "GUYS UFOS ARE REAL AND WE TAKE THEM VERY SERIOUSLY [so if you're in the air force please report when you see a weird light, thanks]"

(I have absolutely no evidence that this is remotely true)
I don't know how you missed the many comments saying the opposite.
It's only been 12 years! I'm sure someone will come up with the killer blockchain app soon.
Are people just forgetting the existence of Dai?
In practice people care about what happens off chain as long as it affects the exchange value.
And the article is talking about the alleged Tether manipulation of Bitcoin's exchange value.
Because we'd have to change bookmarked websites apparently.
FDA approves new injectable weight loss drug
Its interesting to watch things self-destruct in real-time. As is often the case, the companies involved almost act on auto-pilot seemingly compelled to keep digging their own grave.
This BYTE (June 1982) article compares the register/instruction substitutions of a few translators, including the MS-DOS one (acquired from SCP) and XLT86 (mentioned in the README as the source of 8088ify's translation): https://tech-insider.org/personal-computers/research/acrobat...

I'd not read that Tim Paterson story before. I have read the reverse: he built the filesystem for the Japanese 8-bit MSX computers under a Z80 emulator on MS-DOS, using IBM's BIOS for actual disk I/O. https://www.msx.org/wiki/The_History_of_MSX-DOS
It is unclear what the tweet is discussing. I don't see any clear statement from Paul as to what exactly he is alleging was done.

One the the people who Paul is posting these allegations about did reply here and notes that they informed the staff they qere not CA eligible, waited 4 hours, then got the shot.

It was not explicitly stated that these were shots that would have been wasted, but the 4 hour wait (if true) would seem to imply that.
I am split on that. Waiting in line behind all those having prioritized appointments in order to catch surplus doses, fine. Lying to get such an appointment? Not cool. Generally, we shouldn't make such a fuss vaccination on social media, either way.
I remember a few slightly-more-recent examples, though I don't remember where I read them! I _think_ Seveneves had one instance, but that's not specifically what I'm remembering.
1. Be a consultant in a specialized domain

2. Notice a problem everyone is having in your domain (a problem you're tired of solving over and over)

2. Go from 40 hrs billable -> X hrs a week billable. Spend 40-X hrs on product to solve problem

3. Tell your clients about your product that solves the problem you see they're having. Use their feedback to make it better.

4. If clients stay engaged and love it, then you invest deeper into it

5. If you're known in your domain, you probably have the beginnings of some marketing channels to share your product.

6. Talk about the _problem_ not your solution per-se. Make a lot of content marketing about the problem people are having. Seed Google and adwords with this content.

7. If (6) draws people in AND you can convert them to try out your tool, you have the start of a marketing/sales funnel

8. You can decide if you try to convert (7) into consulting clients or SaaS sales. If the SaaS sales is working out, and they pay a price that makes it worth your effort, then you're, and your marketing funnel continues to be strong, THEN and only then you might be on a path to profitability
I’d feel guilty, but it’s hard for me to get upset about other people skipping the line for the vaccine. Sure there are higher risks for certain people, and in a perfect world. But it’s hard for people to not be self-interested in their health.

And in public policy, the long game is always the important one. People will always cheat, and you have to decide what level of enforcement generates the most social good. Too much enforcement of welfare fraud leaves children hungry; too little enforcement gives out-of-state prisoners free money.

So here, since everyone needed to be vaccinated eventually, we really only needed the appearance of enforcement. Honestly, having rich people cheat only made vaccines more desirable, which in the long term may lead to a higher overall vaccination rate. I mean, if politicians and VCs and the elite all want it ASAP, maybe it’s safe for almost everyone?
If the picture this article paints is true, there is an interesting number of threads yet to be followed/pulled in the Epstein saga. It seems that anyone with a $100 million+ and pretensions to techno/utopic thought is snared in this.
Accomplishment is more than accomplishing something. Go to PubMed and you will find a lot more role models to follow and heroes to admire than all the circus clowns cheered in the MSM. A scientist may not get all the fame and cheering a clown gets, but they do accomplish a lot more in the grand scheme of things.
Van Buren violated policy. He should have been terminated. Van Buren was prosecuted for a criminal act not narrowly reflected by the law he was prosecuted against. The SC majority opinion mentioned exactly this.

> Am I missing something? To me, this ruling means that if a person is granted technical access to a computer system, then that person cannot be held criminally liable for anything they do with access to that system, even if the owner explicitly prohibits it.

Yes, you are confusing a policy violation for something more grand. I suspect most people are confused on this matter due to a selection bias favoring criminality for a violation of public trust.
C# is really an amazing language. The open dotnet core ecosystem still feels in it's infancy - more web hosts need to have built-in support for asp.net core and etc.
Not even the first preauth VSphere RCE this year: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2197...