skysight-inc/HackerNews huggingface dataset:
I've seen the pinephone in action and while I'd love to contribute to it, there is an immense amount of work that still needs to be done. Even the basic text editor they have for it takes a while to load up. The phone call app barely worked as well. I mean, the idea is awesome and I want it to succeed. But in order for me to put a dime up for it, phone calls have to work without question, I need a text editor of virtually any kind, a web browser that doesn't take ages to start, a calendar app that works, and the ability to simply listen to mp3's. The phone hardly has any of those features working in a remotely feasible state right now.

I really do admire the project, but it's far from ready. It needs financing I know, but I don't like funding things for a subpar experience. I certainly do have excess cash to devote to these projects, but I have no recourse that they will get at the state I want it in in a reasonable time frame.

That all being said, I can't wait until this gets better.
Apple Is Said to Have Turned over Data on Trump’s White House Counsel in 2018
This thread got over 1100 comments, many of which are based in personal experience and are thoughtful. Others, alas, are flamewar dreck, but I hope everyone reading a forum like this knows how to step over stuff like that.

HN threads are still paginated, so if you want to read them all you'll need to click More at the bottom of the page, or like this:

https://news.ycombinator.com/item?id=27473199&p=1

https://news.ycombinator.com/item?id=27473199&p=2

https://news.ycombinator.com/item?id=27473199&p=3

https://news.ycombinator.com/item?id=27473199&p=4

https://news.ycombinator.com/item?id=27473199&p=5

(Comments like this will go away when we turn off pagination. Sorry for the annoyance.)
So you think there is absolutely no difference in the kind of collaboration that can be done online vs. IRL?

People should get to pick a role where they work from wherever they want, but they should be realistic about both up- and downsides of their preferred location.

FWIW, I'm mostly pro-office - even after all this time - but I'm making a career change because I don't want to deal with living in the West anymore.

Maybe pushing for remote work would've worked, but I find it to be an overwhelmingly anti-social experience that sucks all fun out of being at work and I have no intention of continuing with that.
I am much the same way....but it would also make my day if someone reached out like that. Go for it! (I should too!)
Using a low power phone for everyday use, for a year now. I would say the "convergence" of the android and iOS devices is creating a device that is tuned to suck you into the marketing and advertising of google, apple, etc.

Android and iOS devices are tools and platforms to gather data and use the consumer as a product more than anything else.

Break the slab like form factor and my addictive habits dropped, drastically. Break the app stores, and marketing and I got a lot more time back in my life.

I have a separate hotspot for internet, a tablet for internet access, a phone only simple communication with a 2GB plan and an offline GPS. The convergence of these is an optimized tool to farm the consumers.
>If I were starting an IRC channel for a free software project now, I would put it on OFTC, which has a real governance model with elections and - mysteriously - also manages to be drama-free.

I'm not sure if it's completely drama-free. During the community meeting on the future of FSF's presence on IRC[1], someone shared these logs:

https://irclogs.thegrebs.com/oftc/2021/05/01

https://irclogs.thegrebs.com/oftc/2021/05/03

https://irclogs.thegrebs.com/oftc/2021/03/30

I don't know anything about the context of these exchanges, but nevertheless they make me worry about their moderation policies.

[1] - https://www.fsf.org/events/community-meeting-on-the-future-o...
^ this is a troll post
> they used ffmpeg to stitch 2 videos with a different aspect ratio together, so it crashes chromium.

Do you have link to that video? It sounds more (read: at all) interesting than the one you linked.
It seems like there are cool fitness apps, no? I've been really tempted by some VR ping pong, boxing, and I just saw an interesting sword fighting game, "Until you fall." Once light headsets come out, VR/AR fitness and highly physical apps might be seriously awesome? Maybe instead of full VR, AR fitness games could help you avoid thrashing not only that virtual Viking but also your house...
There is specifically a version of Linux Mint Cinnamon which is based on Debian and not Ubuntu

https://www.linuxmint.com/download_lmde.php

Still though, I have to imagine there is a lot of work / knowledge required to maintain Cinnamon on Debian proper.
Have you ever lurked wallstreetbets? It seems (or seemed, before the Gamestop stuff brought many new people in) like a sorting function for the now-older SA/4chan demographic, and they're the most consistently hilarious people I've ever seen on the Internet (still toxic af, of course, but less-so than in the old days, like tastefully mellowed with age).
> If an alien species came to Earth, and they were FAR more emotionally sensitive than we were, and could suffer MUCH more as a result, would that make your suffering when they start to enslave you any less meaningful?

But perhaps they would do so in a way that is appropriate for our level of consciousness. Perhaps we'd not even be aware that someone was experimenting on us, just like animals have no idea that this is what is happening to them. Etc.
Especially if they took a maths course on graph theory.
Just use GNOME, it’s developed by professionals and it shows.
If you can draw convincing enough text with a paint brush the OCR should pick it up.

But yeah next level would be drawing a square inside of a rectangle to generate “class Square extends Rectangle”
The mounting cost of stale ad blocking rules (2018)
Companies don't, managers often do.
I like the objective of this article and most of what's in it but I think it leaves itself open to criticism.

I have doubts about the benefit of even implying a sense of objectivity to these so-called requirements because infosec is such a wide field and people from all over can and do never deal with a lot of these things.

A lot of folks in the industry would say that this lacks mention of LDAP, SAML, and other key protocols. Many folks would say that this is a very *NIX-centric list of utilities, or will work an entire career and never even see SPF or DNSSEC. Many pentesters would say that your understanding of security is only as good as your knowledge of how to break it, and insist on many more vulnerability types and tools as "core competencies" to this list. There's plenty of work being done in securing smart contracts and other cryptocurrency systems, so it's clearly opinion to insist on people avoiding it. Personally speaking, I think the insistence that there are tons of cryptocurrency people that don't know what cryptography is melodramatic and at some level not really possible. The idea of said people not knowing even what cryptography is while evangelizing about it is a contradiction. At this point most folks' beliefs on it are heavily correlated to personal politics, from people condemning or proclaiming it. That's a whole other topic, which is another reason why any binding opinions on it are not something I would include in an infosec core competencies list.

All this being said, I think getting to a consensus on what to learn is a good idea, and there are plenty of things that I personally agree with in this list, many or most of them even. The author is clear and up-front about it being based on his experience, but it appears pretty heavily so. It's still good, but I think this list would be better as a Git repository than a blog post.
Good.

I intend to find a fully remote role and then move back to a cheaper city.

Not everyone needs to live in San Francisco
Perhaps this should be clear in the main page. Something like:

> 11 Jun 2021 - Interesting Things #8 — Meta-/beta-stability (available only for subscriber until ??/??)

> 4 Jun 2021 - Interesting Things #7 — Don't read everything

> 28 May 2021 - Interesting Things #6 — Esoteric languages and sleep sort

I guess most people click in the first link and if it doesn't work assume that all the other will not work.
There's Linux Mint Debian Edition, basically Linux Mint you know but based on Debian, with some tiny quirks. It's maintained by Linux Mint folk themselves, who are the makers of Cinnamon itself.
Even Linux desktop suffers from a lack of contributors. Even many core-infrastructure projects are shockingly dependent on 1–2 devs who have been unsuccessful in attracting more contributions.

One example of where the manpower just isn’t there for both Linux desktop and the PinePhone is a solid maps app. All solutions are little more than tech demos compared to OSMAnd on Android. Yes, OSMAnd itself has grown through contributions from the community, but it basically soaked up already what little manpower there is. There are other examples where running Android apps on the PinePhone under a compatibility layer is seen as a necessity to get around the PinePhone's lack of manpower.
>Microsoft has had superb documentation for decades. They put a lot of emphasis on it and the results show.

I remember somewhere between 2006-2009 they did a reorganization / reimplementation of their online documentation which meant that the menu was always far too long to load and sometimes killed the browser I was on. Whatever point it was at was the point when I stopped using MS technologies as I figured the open source was just as well, and if not as well documented, at least trying to read the documentation seemed a lot safer.
The ability to toggle gsettings for location-mode from path-bar (those button folder) defaults to filename-entry (the location bar you type in) is what really bothers me. It means I can't paste filepaths into a just opened File dialog (it errors out unless you first type ctrl-l, ., `, or /).

Additionally, the old type-ahead complete was removed from filename-entry. Arch at least has a patch set to put this back, but the location-mode thing is resistant to fixing. I changed the default initialization with a simple patch to gtkfilechooserwidget.c but it only works for the first time I File->Open in a gtk3 application. The second reverts back to pathbar.
You think David Cicilline knows a thing or two about shaking down businesses? Why, that's a repugnant attack against Italian-Americans!
It's never too late to start.
At the beginning you should really focus on trying some things that keep your attention.

(For me that was programming games - incredibly crufty ones, but seeing thing move on my screen got me really excited and got me to understand)

Personally, that was javascript for me - mostly because you can do stuff with it in any browser you want.
Lua[0] is also a great language for beginners, and I'm still using it for game development[1] and general scripting/fun stuff.

I just don't want to turn this into a hella long comment, so I'll wrap it up; but I could talk about the first steps you could take for hours :)

If you want to ask me anything on how to get started, just shoot me a mail under info@(my username here).com
I'd be super happy to help :)

[0]https://www.lua.org/
[1]https://love2d.org/
Fidenza
I think you're misunderstanding and reading too much from my argument. The thrust of it is that I sincerely believe modern society (by which I mean Western, US culture 2020s) places a heavy emphasis on consumption and reaping of pleasure as much as possible and that this culture is oppressive and coerces people to do the same lest they be labeled "old-fashioned, cultist" or worse, "religious" (which in itself carries a bad connotation nowadays).

The fact that the story is strange to you goes straight to my point. Throughout history, monks, wisemen and religious figures have retreated from the world to seek spiritual peace. There's extensive literature and history that shows this to be valid path for a person to take, if they so wish and are in the disposition to do so.
That seems to be colonial/Christian interpretation of dharma.

You should perhaps watch some videos of what actual Hindu gurus say.
So far, I only know:

* Doesnt want to go back to work because of fear of infection
* Wants to go back to work because she cant stand the kids and her husband anymore

I havent heard any other stories so far. Maybe because I am not allowed to stay very long at the office...
I wonder if after the current Tik-Tok/YouTube Shorts/other version of video settles down we’ll start to see videos that don’t need to be long utilize this format and that will get pushed into search results.
The main thing to know for newbies is as long as you don’t force push to a remote branch, it is safe. You are creating new state only, not destroying. All errors are
Recoverable.
Pelias Geocoder – a modular, open-source search engine for our world
Would there be much interest in a large pubnix system? A high-trust social network of a sort, with the big system as a base?
Breaking Study Sheds Light on Whether an RNA Vaccine Can Permanently Alter DNA
Defence Expenditure of NATO Countries (2014-2021)
When it comes to ATT&CK I have personally seen people go 50/50 on it, with most support coming from those in large enterprises. It's a pretty good resource for pentesting or red-team engagements, but probably could use less evangelizing.
I remember the site UI change, but I was mostly grumbling because it looked even more 1990's post-redesign. I didn't realize that cause people to leave en masse. I'm surprised UI was more important than discussion, esp. when the UI change wasn't really that dramatic, IMHO.
Sony’s media group has been an absolute cancer to the device group. To this day they make some of the best hardware on the market. To this day I won’t buy any of it beyond the PlayStation because of how horribly they screw it up with DRM and associated restrictions.
Personally, I love that I can open a web site in the browser from say the Reddit app and back will bring me back to the Reddit app. Guess I'll miss this behavior.
And don’t expect the command details to make sense. What you want to do is some simple thing in terms of a graph of states, and just google the command if you aren’t sure it it is origin/branch or origin space branch.
> In your situation it seems like a non-technical person in charge of technical decisions. Those decisions are by definition poor quality.

The client is to blame. The client let go of all the people who knew the technical side of the product and has hired an architect to re-architect everything. And the client is in a hurry.
Despite a lot people leaving the workforce permanently, the stock market keeps going up, GDP forecasts are very strong, and so are corporate profits. It goes to show the remarkable ability of companies to adapt in the face of adversity, and also the resiliency of the US consumer ,especially the high-end consumer. "If 50% of employees quit, fine, we'll just boost the productivity by 100% of the 50% who remain using cloud, zoom, and other services"
I don't think they will add settings back for that, but someone should be able to create an external file chooser that behaves differently.
Mobile banking apps will probably be the hardest challenge in the long term. In my cases, for social media and communication, it's easy. I don't use whatsapp and facebook messengers on Android, and for Telegram there is a native client that works well enough (and Tok[1]), for Matrix I wrote NeoChat[2], for mastodon, I'm writing Tokodon[3], there is also some activity around a QML Signal client and implementing other open protocols is doable.

But for banking there is absolutely nothing and bank in the EU requires a mobile phone app to unlock the account. I fear that the only way to solve that is at a political level but this probably also means something unreachable for now. This sucks.

[1]: https://invent.kde.org/network/tok
[2]: https://invent.kde.org/network/neochat
[3]: https://invent.kde.org/network/tokodon
In my years of office work across a variety of “innovative” companies, tech megacorps and unicorn startups alike, I have found the moments of truly productive whiteboard collaboration rare and far between. It’s fun when it happens but I just don’t see it warranting the daily commute. Of course, that is my own opinion and personal preference.

But yes, I agree that it’s a no-brainer to let employees choose the work style that suits them best.
Well hacking a bank doesn't give legal value to your transfer order, a simple employee could revert by calling the target bank on the phone under threat of pursuit if no reversal.

Bank account are not protected by cryptography, they're protected by law. What you want is bitcoin to have the same, not say that since a banks' https website could be hacked, let's do nothing about the main weakness of crypto.

But anyway the point is moot: it's certain developers would upgrade the network with time as new events unfold.
What is with the downvotes? My answer is correct.
Even back in 2019 I was suggesting everybody to read API development design patterns from the Microsoft documentation. It was clean, neutral (not .net focused) and easy to understand.

Microsoft under the new management has really turned around and become a “good” tech company (relative to google and Facebook).
For the more knowledgeable on Git. What is the current status of the transition from SHA-1 ?
Safety of people matters a lot, but I keep thinking about the following observation - in drug trials we routinely see many drugs that work in vitro, work in mice but don't work in humans, and many drugs that seem safe for mice but have bad side-effects for humans. Shouldn't this cut both ways symmetrically? Does that imply that we have a bunch of drugs developed for as-yet-uncured diseases that work in vitro and would actually work for humans but just won't work on mice, so we never tried them on humans and will never know because it's unethical to try?
>>It's reasonable to ask just how useful

It's totally reasonable to ask how useful something is for you. However, other people might have other answers to that question. For instance, if existing solutions suited everyone - why are zelle and venmo so popular? Hell, I zelle money between MY OWN accounts at different banks just cause its faster, cheaper and easier then the alternative ACH/Wire transfers.

Edit: Hmm - if I could zelle to my brokerage account I probably wouldn't have missed out on that AMAT I'm salty about. :-P
I also don't understand quite why there's disagreement here, so perhaps it's best to just end it here. From my perspective what the oversight board says is simple: Trump was banned, but not because he broke any actual rule, as evidenced by the fact that everyone else on the platform can do the same things and not be banned.

Perhaps you're interpreting it differently as: he broke a rule, which happens to only be enforced against people named Donald Trump. Well, most people wouldn't recognize such things as genuine rules, which is probably why the oversight board had such difficulty with it.
Designing Analog Chips by Hans Camenzind
I wish someone made the opposite lecture to John Cleese on creativity; I'm stuck in open mode, an endless supply of ideas, struggling to turn off the faucet and actually make something.
Nope, not alone. I would go with an oldschool mobile, but I need navigation and modern, encrypted internet-based communication. Tethering, calls, SMS, mail, Signal, GPS, OSMand, calendar. Maybe a good camera and payment stuff, but that’s probably too much niche then. But no web, no social networks, no games, no music/podcasts/video. Can be thick as a can of sardines for all I care, but please be operational with a single average hand (not just men’s average hand).

Minimalism/down-sizing is a lasting trend, I think quite a few people are fed up with being hooked to modernity’s love bombing and are up for making the phone a tool again.
Netanyahu is out as new Israeli government survives confidence vote
I spent from 2005 until ~last year running pentest engagements, for what it's worth.
Huh, I have a different impression. Take this doc, that I was staring at the other day: https://docs.microsoft.com/en-us/rest/api/containerregistry/... ; it is for listing manifests in an ACR repo.

The "orderby" query parameter is documented as "orderby query parameter". It is secretly an enum; the values are things like "time_asc" and "time_desc".

Later, take the response. "lastUpdateTime" is documented as "Last update time". It's documented as a string, which while technically correct (at the JSON level, yes, it is a string, ish), is wrong. It's an RFC 3339 datetime — I think¹ — but it's also wrong because it is — bizarrely — optional. I actually don't know what sets it, and I have no examples of it being set and the docs don't help.

I could also refer one to their documentation about the various performance characteristics of various Azure VM types. Some VM types just aren't listed, so if you're curious about those, good luck, I guess? Run them yourself?

We've also hit things like various tri-bools. IIRC, whether you're on a paid SKU for AKS is a weird tribool of sorts. The field has two values, represented by three values: "Free" (meaning free), "Paid" (meaning paid) and the field simply not being present at all, meaning the same as "Free". Not only is the chosen representation terrible, that it is this way is undocumented.

¹I don't have a counter example yet, at least…
Is your thesis that spending time analyzing and decomposing TTPs in the framework a waste of time? If it were, I would agree. My assertion is that it is not.

As far as embedding the TTPs in every marketing white paper out there, yeah, agree that’s dumb.
Pretty much like you said imo, i.e. useless in the industry unless you're looking for some sort of work that requires them for compliance reasons.

To be fair, I did recommend a cispp course (on linkedin learnings) to a junior member of my old team, mostly to complement the knowledge from the day to day work in appsec with other topics, e.g. network.

Personally, I studied math & crypto (with my own passion for programming) and I entered the industry doing appsec, no certifications asked.
> Something is wrong when we expect high quality libraries for free.

Expecting free libraries is natural because the world is built on free libraries and free software. There's models to be paid within this of course (the largest by establishing expertise and then selling support). On the contrary, expecting everyone to pay for libraries is a model proven to have a much more limited lifespan (which also has implications on the developer's career).
> Nothing concrete has changed

There was one concrete change[0] just three days ago:

> Application reviews are backlogged and new applications are temporarily suspended

[0] https://fosshost.org/news/applications-temporarily-suspended
I think you’re right, and I think those complaints are a little ridiculous for a protocol primarily designed for publishing text. I have a tiny Gemini site because it’s fun to play with, even if its audience is tiny. My average file size is about 2KB. There’s practically zero benefit for caching or compression here, and much detriment toward making the protocol more complicated to support them (again, given the context of primarily moving small text files around).
There is a nice plasma mobile replacement for newpipe: https://apps.kde.org/plasmatube/ For telegram the official client works, but you could also use Tok (https://invent.kde.org/network/tok), but yeah for the rest there is no real solution yet :(
Agree with this assessment. I don’t care what anybody says, zoom and slack cannot replace sitting next to your teammmates.
The whole point of a market is that if you think its wrong you can profit by correcting it. If you think prices will fall, have you shorted it? If they're going up I assume you're long?