skysight-inc/HackerNews huggingface dataset:
Title should be adjusted to the actual title of the blog post: (Technical) Infosec Core Competencies

InfoSec is a management practice. These technical skills are nice to have, but with the exception of #1 (understanding CVEs, CWEs, and CVSSs), you do not need the skills on this list in order to acquire and be productive in an InfoSec job. Someone with these technical skills is cut out to be a security researcher, part of a Red Team, working on the detection side of a SOC, or similar. Those are great and valuable roles, but not quite InfoSec. For an InfoSec job, give me someone who knows security management frameworks, can read security guidance, who can lead on processes we use to manage IT security, who can generate (and optionally build) security status reports, who gets the organizational chain of command for how IT security work gets done.
This is silly. You have alternatives, but you still are dismissing them. You could similarly say that if "McDonald mistreats me, where I'm going to go? Wendy? or Burger King? no one is going there"

Also your argument with electric company doesn't make sense, in this you could maybe compare it to an ISP, which I agree should be treated as an utility.

YouTube is just one of many services available. Your only argument about competitors is that not many creators are there, well, how do you think that will change? Are you expecting court to move some of YouTube users to Vimeo?
English isn't my first language so I dread any kind of voice-based systems, and automatic recognition is just the worst. Calling a help line where you have to say what you're calling about to an AI first is just futile. If that's the only way to order at McDonald's then I'll just stop eating at McDonald's.
Slashdot tried to solve this problem by making mod points limited and requiring you to give a reason for moderating a comment. Then there was a metamoderation system where you decided if the moderation someone gave was fair or not. If someone consistently doesn't use the moderation system correctly (and the metamoderation system is successful in identifying this), they don't get mod points anymore.

It didn't work perfectly (obviously the site is still highly opinionated in favor of certain things, like Linux and free software), but it also wasn't the smooth-brained hivemind that Reddit comments sections are. I can't think of another site that's even tried to come up with a better moderation system than simple up/down votes. At best, there are some behind-the-scenes algorithms that decide how exactly to prioritize comments based on the voting, but that's derived from popularity as well. An immeasurable side effect of this is that many heterodox comments simply aren't posted at all since people know they're going to be downvoted to oblivion anyway.
I was once crossing the Golden Gate Bridge on foot and about halfway across the view of the bay was so beautiful that I had to stop and drink it in. (Have you heard the phrase "arresting beauty" or "arrested by beauty"? That's how it was: I was captivated. It was just so beautiful!)

Anyway, after maybe ten minutes a bicycle police officer came up and started talking to me. It took me a moment to realize that he was sounding me out for emotional distress, checking to see if I was suicidal. I gave him my best smile (easy enough as I was still in the thrall of beauty) and reassured him emphatically that I was okay, and thanked him for doing his (IMO very important) job and apologized for making him come out and check on me (no good reason not to be extra nice in the circs, eh?) and went on my way.

I'm not blaming the OP for getting, uh, overbearing and unneeded help. I'm pointing out that our society has developed mechanisms to try to prevent suicide in the obvious places: GGB and BART (the "subway" in Berkeley.)

> The Golden Gate Bridge is the most used suicide site in the world.

> After years of debate and an estimated more than 1,500 deaths, suicide barriers, consisting of a stainless steel net extending 20 feet from the bridge and supported by structural steel 20 feet under the walkway, began to be installed in April 2017.

https://en.wikipedia.org/wiki/Golden_Gate_Bridge#Suicides
I'm sure that the culture is very privacy/tech savvy, but Freenode even couldn't be bothered to enforce TLS on all connections. There's no need for overt collaboration at that point since communication is just wide-open for spying.

It appeals primarily to a subset of Web 1.0 enthusiasts.
Firearms related channels was a big one. Even education based firearms channels such as forgotten weapons had problems.
Footage:

https://media-cldnry.s-nbcnews.com/image/upload/t_fit-1120w,...

https://media-cldnry.s-nbcnews.com/image/upload/t_fit-1120w,...

NASA:

https://old.reddit.com/r/aliens/comments/nrecrg/nasa_adminis...

Barack Obama:

https://old.reddit.com/r/aliens/comments/nfrtr7/former_us_pr...

Excerpt:

Later this month, the Pentagon is expected to deliver a report to Congress from a task force it established last year to collect information about what officials now call "unexplained aerial phenomena," or UAPs, from across the government after pilots came forward with captivating videos that appear to show objects moving in ways that defy known laws of physics.
It's hilarious to see libertarians whining about being oppressed by corporations. Like, dude, isn't your whole philosophy that corporations should be allowed to do whatever they want without regard for anybody else? Go start your own YouTube. It's what Galt would have done.
The reducing cross-AZ data transfer savings on one service resulted in a low 6 figure per year savings. Its something we overlooked during initial setup and now its something I check for when dealing with AWS networking.
> You can rest assured right now many MDs are prescribing off-label meds, diagnostics tests, making non-protocol judgement calls etc all around the world. And I am glad they are doing that, because front-line medicine is more engineering than science and their job is ultimately to heal, not being protocol-only automatons.

Well, yeah. One important point about health policy is that it's designed with the knowledge — the assumption — of some level of non-compliance.

Health policy design is game-theoretic, like overbidding in a negotiation: rather than choosing rules that are logically correct, you pick optimal rules to get your own population — a portfolio of people with different feelings toward authority — to on average do the thing you want them to do, or a set of different useful things you want them to do.

When regulating doctors, that means that you take into account that the doctor "on the ground" always has more knowledge than the regulator, and so you can phrase the regulations as absolutes to not do X, Y, or Z, knowing that the doctor will still do X/Y/Z anyway if they have information you don't that leads them to know better in a specific situation.

This is very different from actually making a recommendation to do X/Y/Z in those situations, because such a recommendation can be interpreted out-of-context to imply that doing X/Y/Z might be helpful, and may mislead some doctors into doing X/Y/Z in situations where it wouldn't be helpful — especially in situations where they don't have enough information, but are just falling ever downward on a flowchart of things-to-try.

Basically, when the regulations say "don't do X/Y/Z", what they mean is "if you do do X/Y/Z, we consider you to be taking a heterodox-to-the-medical-establishment position and will discourage others from giving you a platform to promote doing X/Y/Z, lest others not-as-informed as you hear from you and try X/Y/Z themselves without the same justified niche situation. But you can go ahead and keep doing X/Y/Z yourself; we'll turn a blind eye to that. Just do it quietly."
I’m guessing the “/s” stands for “straw man” in this case.
I really agree with your sentiment to a point, but the problem as I've written elsewhere (ad nauseam) is that software isn't free. Software, particularly easy to use software, is extremely labor intensive. If FOSS is about developers writing themselves out of the equation, it means nobody can make a living making it. If nobody can make a living making it, that puts a pretty huge limit on how much resources can be put toward making FOSS better.

Closed silos don't have that constraint so they will win by sheer muscle power.

The BSL (our current license) sort of sucks, and I look at it as a stopgap until we can come up with something better. I have some ideas, but they need to be developed and so far I have not had time to develop them further since coding and running a company are fairly demanding.

They deserve a blog post at least.

Outstanding reply BTW.
If this causes problems, the disease causes the same problems.
Venmo isn't instant. Send yourself more than 15k. If that goes through, try to send it back.

Sure, the row in the database is instant though.

I agree it is a feature for a bank to be able to undo mistakes. The problem happens when a bank commits the mistakes and refuses to acknowledge it.

This is akin to all of us submitting to google and gmail, its great unless our account gets flagged by an algorithm by mistake. No mistake, i would be screwed.
I detected a hint of sarcasm
Yes. If someone manages to gain a foothold on the machine running the process they would not instantly be able to elevate privileges. Of course the happier scenario includes no hackers on your machines, but why dig yourself a deeper hole?
from an ethical perspective, why wouldn’t you want to live in such a way that minimizes suffering?
There are a lot of WFH options now and more every day. Many, if not most new startups will never have an office.

I’d be far more worried about being saddled with a huge mortgage to live close to an office. In a downturn, it’s not like there will be office jobs either. Yet you could still easily get stuck paying 1M+ for housing that would cost <300k in locations where you could wfh.
By your argument Facebook is self-hosted because they host it themselves.
YouTube is not a monopoly and you do not have any right to any kind of creators or audience at all.

If McDonald's mistreats you, and every other restaurant tastes like garbage to you: tough titty, but that doesn't provide grounds for the govt. to regulate McDonald's.
Thanks, 'r' → 't' is a very easy to make typo :)
I'd just like to interject for a moment. What you're referring to as IRC, is in fact, IRC/Freenode, or as I've recently taken to calling it, Leenode. IRC is not a complete social network unto itself, but rather another free component of a fully functioning royal fiefdom system made useful by the chit server, the integrated bouncer and vital bulletin board servers comprising a full network kingdom as defined by Tower of Chats.

Many IRC users connect to a modified version of Leenode every day, without realizing it. Through a peculiar turn of events, the version of Leenode which is widely used today is often called "IRC", and many of its users are not aware that it is basically the Leenode network, develope^Wpurchased by Andrew "rasengan" Lee.

There really is an IRC, and these people are using it, but it is just a part of the system they use. IRC is the protocol: the part of the system providing network connectivity between the users accessing it. The protocol is an essential part of a network, but useless by itself; it can only function in the context of a complete networking system. IRC is normally used in combination with Leenode: the whole system is basically Leenode connected via IRC, or IRC/Leenode. All the so-called "IRC" servers are really servers of IRC/Leenode.
I don't know the precise history, but the corporate decision to work on these self contained computers was the reason why Steve Wozniak left HP to found Apple Computer with Steve Jobs.

Still, paging through Byte Magazine and looking at all of the things that I couldn't afford at the time, the HP computers definitely seemed pretty cool to me, and I'm sure the quality of HP calculators lent to the appeal.
To me, I really look forward to the higher order effects of not being forced into terrible jobs. I look forward very very much to seeing what emerges, what is innate in us, what we opt do for our own sake, when a little bit of laziness is a possibility. It's incredibly exciting to me to think of a society that has some time and space and safety for people to figure out what are good worthwhile ways to engage themselves.

Oh yes, a lot of the people will waste away their time, wrap themselves around being gabbing social animals at each other 100%. I don't mind this. Especially after the domination of work culture I think this will be a bit prevalent, as escape finally becomes an option. But I expect a lot of people will be able to, for the first time, think about what they want to do, what might be meaningful or valuable to them, will try to contribute to society, culturally or with labor. I think we'll re-socialize "value" & our sense of human worth with incredible, vast diversification. There will emerge all manners of new role models, of new ways to engage the world, and especially over time, we'll see so much incredible value arise, such a better sense of what real, meaningful effort & work are, & that we'll grow enormously. Only because we decided to stop our pernicious economic exploitation of the poor. Because we made life no longer a perpetual ongoing terrifying crisis.
Jesus. As someone who used freenode a lot and still humps on it sometimes, it really hurts to see communities "burn" like this.

It's immoral.
I'm sorry, please don't assume bad faith, I'm not refusing. I just don't understand how opening a configuration dialog and doing a couple clicks to install an extension that changes the panels, is different from opening another configuration dialog and making a few clicks to change the panels. It seems exactly the same to me. I don't have any preference towards either of these, I'm just interested to hear why it doesn't work for you.
Calls have been working on both Pinephone and Librem 5 for a long time already.
There's a company called MindMed that's doing clinical trials with Psilocybin/LSD/MDMA and finding that micro-dosing has really positive benefits on human disorders linked to the brain (depression, PTSD, etc). Could be huge to harness the power of these drugs for the benefit of humanity.
A weird thing I learned while working on my own YouTube channel is that saying "Like and subscribe" actually does work. As in, you get more likes and subscribers by saying it compared to not saying it. It's like people need to be reminded that they can or should click those buttons.

I could never bring myself to say it at the start of a YouTube video but I added it at the end and saw improvements in the analytics from videos that had the reminder versus not.
If you used your electricity to kill people by electrocution, what would the authorities do?
So if you suggest weak/indecisive/unknowledgeable people avoid vaccination for measles/smallpox/covid/polio are you sugesting they kill themselves? Should the authorities take action?
A parent whose child dies from one of these diseases might differ. Measles has a 2% death risk, smallpox 30%, covid 0.5%, polio ~~25% paralysis of symptomatic cases.
Back when Columbus came here, measles had a 50% death rate as there was near zero herd immunity, now we have it and death and severe stuff is~2%
For me the (rather strong) trips from mushrooms showed me how some part of the brain (not sure which one though) is very good at interpolating bits and pieces of reality when there is no longer strong coming in via our senses. Its a blurry picture of reality, but the blur isn't the loss of detail but rather its fractalization (which in the end is the opposite of it).

The harder the trip the less real-world signal and more brains's interpolation. We all have highly unique brains so although the principles are the same (fractals in visual and in mind, strange colors, mixing senses etc.) we all have such a unique take on it.

And since the same brain is just guessing and smoothing input, and the one processing the guesses, its guesses are so 'self-compatible' that it can literally make its own feedback loops (I had it multiple times, when tripping with closed eyes I began wandering further and further away on a very consistent interconnected trip).

Its so strange. I can remember those trips so well, but the 'enhanced' version of it is simply too vast for my normal brain to grok. Just partial projections like 3d into 2d that don't give full picture or don't make much sense.
I have never had an insurance company flat out deny a claim. The only back and forth i generally have is on how much as they try to pay as little as is allowed.
What did you do next? :)
"I prefer to advance humanity, even minimally." - Part of advancing humanity is expanding our moral circle. Pointlessly hurting animals is not an "advanced" society.
We can spend that money directly on our military.

There's no need to funnel it through Israel, which gains more of the benefit than we do.
> How can it be all about English Nationalism when a third of Scots voted that way too?

When did I ever say it was all about English nationalism? I think I only said that in your head.
Youtube is owned by a private entity that regularly exerts influence on the government, but it is not the government itself. The favoritism afforded to companies like Youtube is due to changing antitrust laws, and the rise of free market fundamentalism in the US, more than anything else.

The notion that the state is is favorable to Youtube because it wants exert some kind of control over people is true; the nature of that control, however, is fundamentally oligarchical, rather than cultural or whatever is being implied here.
https://netsplit.de/networks/top10.php

For a more historical view
Right Angle Brackets (2005)
The weak willed company management is weakened because of the mob. It's a full circle. Company management would be on the chopping block of they try to disagree with the mob. It would destroy the company into absolute dust. So, they comply.
Yeah maybe... it's just exhausting. It feels like there are so many presumptions about how someone is because of what they make or where they live that you don't even have a chance to befriend people who might be in a different economic class. Once you start tying those economic presumptions to race as well, "never eat alone" feels like an impossibility.
Ivermectin is not a newly-discovered drug. There were hundereds of millions of courses administered world wide (it even got a Nobel prize). It has been used for decades. [1]

The only unknown right now is the long term effect of ivermectin in patients with covid. It seems to me that it's the same unknown as with the vaccines. You don't have a clinical trial for effects of the vaccines after 5 years, do you? Why don't we wait for it, just to make sure? And it's even worse for the mRNA vaccines, which have not been around for decades and only got the emergency authorization.

Btw the emergency authorization can only be granted by the FDA if there are no alternatives. [2]

> For FDA to issue an EUA, there must be no adequate, approved, and available alternative to the candidate product for diagnosing, preventing, or treating the disease or condition.

I'm not sure if "approved" (as a treatment for covid) would have applied to Ivermectin at the time the EUA was granted but it's not like there were trials to decide that.

[1] https://en.wikipedia.org/wiki/Ivermectin#Cost
[2] https://www.fda.gov/regulatory-information/search-fda-guidan...
His PhD is from Harvard.
Perhaps you can change the title to "We" so it's clear that it's a collaborative project.

Who is tstewart161? Is tstewart161 another person?
You mean it's difficult to open the specs? Open-source community will develop the drivers themselves (it's happening with Pinephone).
So. GRC or security? It’s a rhetorical question.

Is GRC security? Not exactly, but if you can’t demonstrate security, no one knows if you have security or not. GRC is the ability to quantify/qualify security.

For true security, as in secure-by-design, etc, you need subject matter experts in that field. Since there is no security knowledge qualifying body for (most) platforms, the credentials don’t really matter much. But for GRC, they are essential.

The question is also difficult to answer because there is no one thing that is security. You can manage vulnerabilities or provide incident response, both security topics but with wildly different skill requirements, for example.

Security engineering, security management, security testing, security reporting, etc, etc. All very different things.
Unfortunately, the privacy model of an IRC private channel is only as private as the privacy precautions taken by members of the private channel.

Someone could run a ZNC bouncer on their own server, and have it connect to Freenode. Then, they could connect to their own bouncer using the IRCCloud web client - effectively gaining access to Freenode via IRCCloud, and Freenode would never 'know' IRCCloud is 'listening' in on the channel.
I like schadenfreude as much as the next guy, but some of these graphs are just plain awful. The registered channels for freenode shows them plummeting, while the actual difference is about 0.5%.
Lilium – Becoming the Uber of Skies
> YouTube is just one of many services available.

With around 75% market share. Yes, competitor Vimeo exists. Without the aid of the Internet, name a second alternative.
I connected to freenode as a tourist because of all this stuff and left myself logged in. Otherwise I haven’t been on for years. I doubt I’m the only one who is just there to see what happens long-term who will drop off at some point soon.
Even when using the web, some of the banks' websites require a step that involves your phone.

The phone app is effectively used as a hardware security token.
That can be seen in the volume numbers. Libera seems to already have a lot more chat volume even though it still has only 2/3 of the users.
No, It's $500 + $6,450 so $580 a month plus an unspecified employer contribution. Because it is a HDHP with an HSA though they are incentivized to keep their costs in check and anything they don't spend of the $6k gets rolled over to the next year and once you hit retirement if you have a surplus at retirement age you can use the money like an IRA.
If all someone can come up with are "standard stances" in their capacity as a scientist, they are a worse-than-useless scientist.
Freenode has more cultural cachet than that. It's more like burning a library.
I’ve never been able to contribute to an IRA.

But realistically for me the only change is I’ll owe instead of getting a refund on account of the withholding. Considering I don’t keep much in cash I’ll need to make some changes in a year.
Purism puts a lot of effort in FLOSS development for Librem 5 (compatible with Pinephone). They are also working on the maps.
Yep, Hollywood is just a bunch of propaganda. Why would they have changed now?
There is a big, big difference between “we survived before online commerce” and “you’re going back to a pre 1990s economy tomorrow”.
The Swiss reject key climate change measures
It's a sad but apocryphal reality that direct democracy is often the rule of the minority...