skysight-inc/HackerNews huggingface dataset:
Unfortunately, Anbox isn’t a longterm solution for non-libre Android apps. The problem is that more and more Android apps require passing SafetyNet. It started with banking apps, then spread to games, and Google may one day simply encourage every app to require it. Even Android ROMs stripped of Google services like LineageOS are finding it a challenge to pass SafetyNet, let alone Anbox.
> I simply view this as a free speech issue. Anyone can object to anything for any reason and that’s OK.

As long as they do so by just generally exercising their free speech, sure. I got the impression the problem with the German Greens is that they go beyond this.

> It’s only going to be obstructionist when they have a point.

No, it's far more obstructionist when they don't have a point, and still protest not only in a general participating-in-the-debate fashion but by lodging formal complaints in various municipal and regional environmental-protection processes, over shit they know (or should have known) is irrelevant / insignificant / impossible. "Gumming up the works" for no real reason. And that's the impression I got from comments up-threads of what (at least many of) the German Greens are doing.
"Do you feel like saying "ein Ex-Freund von mir" still carries this boyfriend connotation"

Native-speaker, but I honestly cannot make my mind up about this.

"The latter is clear to me, but I could see myself saying the former and thereby mistakenly suggesting a past relationship. (Non-native speaker.)
On the other hand, it's clear that "eine Ex-Freundin von mir" means ex-girlfriend.
Maybe I'll stick to "ehemaliger Freund" or just use "Kumpel" instead of Freund(-in) altogether. Otherwise people will think I've dated everyone I know."

Hits the nail on the head. Your feeling of the language is excellent.
I suppose both, assuming size of real numbers is indeed larger.
As an EU-citizen, it's sufficient for me if the EU forces them, but I think there's also the Steam vs Apple case in the USA
Haha, yes, direct emails for folks in xbox is very useful, the xfest advice is very solid.

I actually went from working at a first party studio inside Microsoft to an indie company, so luckily I have my network to fall back on. Now I just need to work out how to do the same for Sony and Nintendo...
Right, but if I have 9 nuclear warheads and you have a net worth of $90b, who is the more powerful?

(Assume a spherical warhead, with market value of $4m.)
Great question. This probably isn't the answer, but it feels to me that I've had the same desktop hardware since the earth cooled, but a new phone comes out every 2 weeks.
So was the Madagascar Plan really on the table or not. Please answer only that, is this complete misinformation because my internet filter bubble got distorted by some weird searches years ago? Or do the records genuinely exist and compete with our understanding of the outcome.
The usual problems apply: identity, authentication, authorization, roots of trust.

Imagine your enclave is a separate server on the network: how do you define which processes get access to which secrets under which circumstances? How do processes prove who they are to the enclave?
Original paper (it's open access)

New insights into early medieval Islamic cuisine: Organic residue analysis of pottery from rural and urban Sicily.

https://journals.plos.org/plosone/article?id=10.1371/journal...
I've used touchscreen kiosks at Taco Bell and McDonald's and Subway. TBH, none of them are great experiences for simple orders.

Order ahead is available from the app, but I wouldn't be surprised if regular audio is actually faster in most cases.
So true and so worth the extra knowledge to understand your tools. You should also read about the various knobs on your compiler or interpreter from time to time. I used to reread gcc manual every five years, and now I search on the env variables that affect
python runtime. Getting ready to that for go build chain now I have 3 or 4 production go things. Similar for my editor and libc and language stblib and kernel APIs, tho they are more diffuse than the gcc manual.
I mean we survived before online commerce, I remember it vividly even. Can bitcoin survive without crypto ?

There was even a time, believe it or not, where electricity didn't exist and people/society still kinda worked...

When classical crypto is reverse (when, not if), then we'll simply have all our past secrets revealed. What you want is gradual increase in complexity so that the decyphered past only impact dead people.

Crypto currency will ofc do that too, don't forget bitcoin can change everything, even its 21M limit, as long as the majority of the network follows.
> They were more afraid of the red army than 2 nuclear bombings...

Not according to them[1]:

"More than ever before, the historical record confirms what those soldiers knew in their gut: Hiroshima and Nagasaki, hideous as they were, shortened the war that Japan had begun and saved an immensity of lives. Far from considering itself essentially defeated, the Japanese military was preparing for an Allied assault with a massive buildup in the south. It was only the shock of the atomic blasts that enabled Japanese leaders who wanted to stop the fighting to successfully press for a surrender.

"'We of the peace party were assisted by the atomic bomb in our endeavor to end the war,' Kido Koichi, one of Emperor Hirohito's closest aides, later recalled. Hisatsune Sakomizu, the chief Cabinet secretary, called the bomb 'a golden opportunity given by heaven for Japan to end the war.'"

[1] http://archive.boston.com/news/globe/editorial_opinion/oped/...
48 year old. Still coding every day! Use C and C++ in my job. Generally kernel mode stuff. Have done good work in Golang and Microservices too!
High level clearance is more valuable.
The more useful ones are those where the final test is "hack these systems".

Those also happen to be more technical. I think because more managerial stuff is harder to teach.
This is never not funny.
Nothing springs up overnight, it requires transfer of knowledge and industry from a more sophisticated society.

And a breakthrough or political condition that favors a change.

You are seeing that today with China and the US.
Yes, as you get deeper in the industry, you will be expected to have the basic validation certs, CISSP, CISA, CISA, CISM, etc.
Nope. They've always had a lot of documentation. It's often been crap. I've been developing for MS platforms off and on since Win3.1, and have constantly dealt with cycles of "knowing API function A requires you understand what an X is, linked to function B, which only discusses X in terms of function A.". They write a lot, but it's not good. It's like a Hollywood western set where your at just the fronts of buildings. Lots of them, no depth.

You always have to get a 3rd party book to figure this crap out... if you can find one. And if you're off and on, then you're constantly playing this game every few years.

Frankly the X11 books out of O'Reilly are my standard for "good."
Did you? In the example section, there are four statements, repeated with an additional three, along with an introductory statement - about three paragraphs in all. There's an additional paragraph later on (the third one under "What have you taken for granted?") laying out some possible assumptions.

This out of approximately forty to fifty paragraphs dealing with the larger topic. None of the "key points" deal with veganism. None of the links or books at the end do. The topic wasn't even mentioned until a quarter of the way through the piece, and wasn't mentioned again in the last half of the piece after the assumptions bit.

Advocating for something is very different than using it as an example. The author could have laid out some premises supporting the January 6th insurrection - would you assume the author does support insurrection? Such an example might be useful specifically to set up how important it is to think in a structured way and to challenge your own thinking, so that you don't support the wrong things.
I suspect that most of the drive to get back to the office is coming from the middle manager. You just can’t do ass sniffing at home at it’s essential for their carrier advancement in the megacorps.
Google Admits to Censoring the World Socialist Web Site

https://www.wsws.org/en/articles/2020/11/04/goog-n04.html

Facebook Purges Left-Wing Pages and Individuals

https://www.wsws.org/en/articles/2021/01/23/pers-j23.html
It certainly isn't viable to make a living selling software to those customers, hence why most app vendors never care and rather target Android.
I treat "doing nothing" as failure. It's normal to be bored, confused, tired sometimes, but you should have a goal & move forward, always.
Lots of different valid opinions, here. I've worked about half my career remote. In terms of team cohesion, socialization, and communication, I've seen remote outperform in-person and vice-versa.
Why does this matter? It's an unpredictable short term problem that is going away. If you can build an AI that can predict the increased demand during the pandemic then the market won't need the rest of the AI.
I want to see this working in python - good luck reading whitespace in OCR...
I noticed that too. I read the language to imply that momentarily touching it would be enough to classify any business as a covered platform (assuming the other 2 tests are met also).

"... at the time of the Commission’s or the Department of Justice’s designation under section 2(d) or any of the two years preceding that time, or at any time in the 2 years preceding the filing of a complaint for an alleged violation of this Act..."
DoorDash and Pizza Arbitrage
sharing this not because I agree with the article but because the German Justice Ministry is demanding the platform "make itself accessible to the authorities ... delete criminal content promptly and … actively pass on user data to investigators."
Thanks! Yes, me too before.
But I have decided to build an offline tool. First, because I tired of search it all the time and want keep it locally. Second, that free online tools sometimes do bad things... Here is an article about some bad seo injection, but I always wonder what else they can do with data we paste and copy all the time.

https://casparwre.de/blog/seo-scam/
I don't love the term "TTP", but I'm not an IR person.

I don't think cataloguing things is intrinsically a waste of time.

I do think that a unified theory of how networks and computers are compromised is a pipe dream that doesn't reward the effort put into building or studying it.

Mostly, I think ATT&CK has done far more good for vendors as the basis for feature/function/benefit breakdowns than it has for practitioners.

Like I said, there are no "good" lists.
The Door into Summer by Heinlein

Has a kooky invention, lots of great cat stuff, talk of money, founder disputes and sci-fi. 10/10.
Non-proprietary only because IBM failed to sink Compaq reverse engineering efforts, and weren't able to drive the PC industry into MCA, PS/2 architecture.
But the caveat should be that we can't extrapolate from a unique event like emerging from an 18-month quarantine, which is the context of this entire phenomenon. I think that at least part of the original commenter's point is that the article shouldn't try to frame what may well be a temporary correction as a revolutionary shift, which I agree is what it's trying to do.
> https://jobs.freenode.net/ - a Hacker News clone, just exclusively with job postings

Hacker News has "jobs"[0] too ;)

[0] https://news.ycombinator.com/jobs
I feel very empowered by WFH as a manager. I get gamed much less by the developers I manage. For instance I assign a duty or task as you mention, and I can now clearly see if anytime was spent on it or not. So during my progress reviews if a developer says he is still working on it, been a bit more complex than he expected, yet I can clear see when he was active on the system, and due to proprietary nature of our software, you can’t really spend much time that is useful outside our system, so if I see only 1-2 hours actively working, my activity data is second granularity, and I have statistical reports and graphs written up in R, so I know with absolute precision, but they don’t know. I now know clearly who lies and who doesn’t. I don’t tell the ones who lie that I know. Instead I just focus on the technical issues on their task, sometimes I just do it for them, to humiliate them.
"Breaking up big tech" or "throwing monkey wrenches into their gears" is related enough that it might be worth paying attention to the OP's overall point - we're applying these rules only to American companies which will automatically a) help Chinese companies like Tik Tok compete against Facebook and Snap, and b) disincentivize them from opening US offices. Why isn't there a 6th bill saying something like: "because we cannot control Chinese companies directly, we'll control them indirectly through American app stores or what have you." I know it's a pipe dream, but we better dream quickly or those companies will get so big that we'll be all using a Chinese OS soon enough and then that last ability to control any aspect of their business model will be gone.

EDIT: someone posted that these bills will equally affect American and international companies. I don't see how that's possible. Eg:

> The “Platform Competition and Opportunity Act” prohibits acquisitions of competitive threats by dominant platforms

Who is going to prevent ByteDance from acquiring every competitive Chinese company? Once they start doing that and we see some massive consolidation in China, ByteDance will go from being the most profitable private company worth $140B to being close to Facebook's $1T market cap. This is not some fiction scenario, it's literally how American companies got big as well. While I wish the American consolidation never happened, I am not sure if the right solution is to just prevent it domestically.
No, I don't remember when 100-line services were the "best practice" because I don't elevate every stupid idea that some inexperienced kid blogs about to "best practice". I know 1000s of people in the industry and exactly none who would agree that is a best practice. Successful large-scale systems are built around much larger services, like "deliver this e-mail message" or "store this blob of data".
I picked up the "run 1mi/day" challenge almost 4y ago now and it's my go-to sport/recharge/problem solve activity.

Sport more in general I find very recharging. Right now I'm spending a month in Sicily to learn kite surfing.
https://news.ycombinator.com/item?id=23110664
Sorry. No, certifications are not useful in infosec.
Interestingly enough the main sponsor for one of the bills (Jayapal) represents pretty much all the tech workers that work at Amazon in Seattle.

Wonder how they will feel knowing their representative is proposing legislation will likely hurt their financial well-being.

Edit: Why the downvotes? I think it’s an interesting dynamic between constituents and their representative.
Are you thinking of something like Literate Programming? [https://en.wikipedia.org/wiki/Literate_programming]
> "They" is []a bit[] unfair here.

Was going to disagree that it's unfair, but I suppose it arguably is exactly one bit (or ~0.3 orders of magnitude) unfair, since the parties at fault are Google and advertisers jointly, and the parent mentions one out of the two. Not sure how to rigorize that measurement, though.
To me their worth is at best questionable and a lot of the time just a scam. I don't like to spend time on any, and there are definitely better ways to spend the time it would take to acquire many.

CEH is a bad cert, and I have my doubts about the rest. I think whether they're useful is extremely dependent on your own circumstances, which should already inspire some doubts. College degrees don't exactly have that problem.

If you're switching careers they can be a great thing to point to on a resume, but I definitely don't think of them personally as hugely reflective of someone's skill. It's better to support it with something else.

The only one that I would break this assumption on right now is OSCP, but the exam is grueling and not something that I think people should be subjected to just to get a stamp of approval in the industry. I would say that someone who has it knows offensive security pretty well, something that I could not as definitively say about something like Sec+. I can't personally speak to Cisco certs.
Way above 40 —- I started programming as a job 40 years ago. Now I freelance, busier than ever. I don’t usually work surrounded by younger programmers. I lead and mentor a small number of younger programmers but generally they have a decade or more experience.

I mainly do web app development (I would call myself “full stack” if that meant anything, I do front/back/database) and a lot of system admin, mainly cloud deployments these days. I don’t jump on the fad bandwagons but I do keep up with new things.

I stay motivated getting paid well. Sometimes I find the work interesting and fun, though rarely especially challenging. I like working with people and helping businesses solve real problems (as opposed to “tech” problems created by programmers).
No it isn't. Trump decided that Americans harvest and mill their own lumber with the trade wars. That's all there is to it. When you suddenly cut imports then it will take time for your domestic companies to catch up. It's that simple.
Is this also true of all startups that take funding and then fail? That would be one reasonable definition of "scam" I think, but personally I think it is more useful to have different terminology for speculative high risk ventures that make a good faith effort but fail vs. malicious schemes designed only to take money and run. I think there are lots of both things in this cryptocurrency space, but I think it's reductive to throw your hands up and say they're all the same.
The pine64 position on binary drivers is not as hard as the purism one (perhaps they try to balance more with cost), but there are still projects to reverse-engineer and replace some non-free firmware, such as the modem firmware: https://github.com/Biktorgj/pinephone_modem_sdk.

I agree that Fuchsia will become a problem going forwards, even if Fuchsia drivers can be reverse-engineered. It's also possible that phone hardware is commodified enough that google will be unable to lock us out, or that google abandons or delays the Fuchsia project.
1. People want to take metformin. They will cite various sources they extract from Pubmed, but the truth is that they got the impression that metformin was good for them while reading pop-sci articles and Facebook threads.

2. They then proceed to ask their doc for metformin, since it's a prescription drug. Unless the doc wants to commit career-seppuku or the patient has a reason for taking metformin according to current guidelines based on years of clinical use and research, the doc will refuse even when presented said Pubmed evidence.

Conclusion: people who want to take metformin will look into alternate sources, because they built a preconceived belief and nothing a sensible professional says will change their mind. People then proceed with metformin and if a change in indication occurs in the future that agrees with their belief, they will feel vindicated while in fact they are just lucky fools.
People appear to have been suggesting the possibility for this for some time now.

https://sciencewithdrdoug.com/2020/11/27/will-an-rna-vaccine...
No, you won't. Some people have them, the best people often don't. There are some jobs that will performatively demand them, and those are all terrible jobs that will sap status and retard your career.
Don’t you think we will see more general computing ARM chips with the M1’s success? Aren’t we approaching a world where your phone, tablet (hopefully eating the laptop…), desktop and server all run more or less the same chip?
https://en.m.wikipedia.org/wiki/Sony_BMG_copy_protection_roo...

Don’t forget about this! The CD rootkit thing was what really soured my opinion of Sony.
I agree wholeheartedly, it's the evaporation of genuineness. You know behind most stuff you see now, there's a monetization attempt eyeing at the corner, and since people think web is for mass scale of low hanging fruits .. that's what we get.
> There are religions, there are ideologies, and there are tribalisms. Tribalism is the underlying cause of most of humanity's bad behavior. And unfortunately, it creeps into religions and ideologies more often than not.

I think one needs to go a bit deeper. Tribalism is ~~the~~ an underlying cause, but I believe an even deeper cause lies at the root (or a deeper root at least), one that enables tribalism and all other things higher in the stack: the nature of human consciousness. Consciousness presents us with an illusion (estimation, simulation, perspective, opinion, etc) of reality, and we mistake this for reality itself. What's even stranger about the situation is that we already know this. And yet despite this, we continue on living our lives (our real time behavior) as if this is not actually true.

Worse, I believe that this illusion has been encoded/embedded within portions of the ~fabric of reality. As just one example, look at our language (very simplistic compared to the reality we use it to describe), but more so how we use it (on a real time, day to day basis). Take the word "is", which means "to be". "1 + 1 is 2" is (almost certainly) an objectively and comprehensively true statement. But then take "Tribalism is the underlying cause of most of humanity's bad behavior"...is this almost certainly an objectively and comprehensively true statement? I suspect not. And yet, we use the very same word. And this is an extremely simple, fairly innocuous statement compared to many other examples (say, journalism) where we use this word in a way that implies (is perceived as) being of the "1+1=2" variety, but is actually of the estimation/opinion type (in turn, increasing the magnitude of illusion further, creating an even more powerful coordinated/synchronized illusion).

Now, I'm quite confident that you were speaking casually and can understand the complex nuance in play if you put your mind to it...but what of third parties who ingest information in threads like this, adding portions of it to their model of reality, perhaps even repeating the "truths" they have learned to others? While it's true that many people are able to switch their mind into extreme pedantry mode (for short periods of time with some degree of skill) and pick nits along with me, what is actually happening (in the real world as it is) when they are not in this mode, and are interacting in a complex system with billions of other people who are also not in this mode the vast majority of the time, if ever?

Imagine you have a giant computing cluster with 7 billion nodes, and the software running on every single node is utterly riddled with bugs, a complete mess of continuous errors in computation - might the output of this cluster be suboptimal relative to one that has less bugs?
The git plumbing and plumbing commands are straightforward and easy enough to understand once you read about them a bit (I recommend the free Pro Git book online).

The original git porcelain commands - git branch, git reset, git pull - are execrable. They’re filled with implementation details (index/cache vs staging), weird and suggestive syntax that seems like it should be extensible and widely applicable but isn’t (localbranch:remotebranch), and nuclear-powered self-destruct functionality hidden amongst playthings (git reset vs git reset —hard).