skysight-inc/HackerNews huggingface dataset:
I agree on the Apple, but not on Google. AT&T, Comcast, Verizon, Deutschetelekom, British Telecom, NTT, etc. Have spent the last 15 to 20 years being absolutely deskilled by people leaving for better jobs in the hyperscalers. If you’re worried about any telecom carrier looking at your traffic then all you need to do is make sure that encrypted client hello and DNS over HTTPS are used by the devices that you have. The products that they use to do deep packet inspection are all falling apart at this point and since they have no internal technologist they are busy asking vendors to fix it for them, and the vendors can’t fix it either.

Worrying about the carriers was really hot for a while especially post Snowden, but it’s really not a genuine threat.
Users May Now Search for Stickers in the Latest WhatsApp Beta
SEC pursued junk bond pioneer Michael Milken in the 1980s, Ivan Boesky before that… unsure of specifics of SEC personnel getting to “high office” because of that but seems obvious that high profile successful prosecutions would be career-making

(Granted those examples are from the 80s but i would think there are more recent examples…)

Milken was prosecuted by Rudy Giuliani which didn’t hurt Giuliani’s career, but Rudy was a US district attorney or something, not SEC

Agree with your sentiment generally though, seems like a boatload of people could have been put away after the financial crisis but they instead profited from bailouts
By this reasoning, you must be a Google shill since the GDPR has been great for their market share: https://globaldatareview.com/competitionantitrust/study-gdpr...
I think this debate is too often a false dichotomy. There's a huge range of choices between never letting kids leave your sight until they're 18, and letting them ride a subway by themselves at age 9. Parents are currently leaning on the cautious side, there may be downsides, but I don't think it's some great tragedy.
It's more comparable to people taking a shortcut down a switchback or through a garden. If a few people do it, no big deal, if everyone does it the whole thing falls apart. When I hear about insider trading I don't care one way or the other about the people who did it- but I do lose some faith in the market.
I think the popular opinion nowadays is to have either parents equally likely to stay home and raise the kids, with a negative bias against that being the female's responsibility, where historically there's been a strong positive bias for that.

People should do whatever works for them and their partners, but I think the underlying point is that raising children requires more than just a single parent.
Some snapins can connect to multiple servers/computers at once, such as the DHCP MMC snapin. Others can't, like Event Viewer.

IMHO Microsoft went all-in on the object-oriented paradigm and tuned the operating system to work with C++ ABIs and expecting administrators to use tools that use Microsoft or vendor provided DLLs.
It doesn't encrypt SMS. It's over the air encryption for packet data (not calls or SMS) like WEP or WPA on WiFi. On GSM networks SMS was transmitted in leftover signaling space on voice circuits.
Keep in mind, however, that you will end up enabling all the "Please enable Javascript to view our website (even though our website works well enough for your casual visit without it)" banners, that are enabled in the HTML by default and hidden by JS :)

For example, one particular maroon-headwear-related Linux distro's bug tracker has a particularly egregious blinking bright red banner, asking you to enable JS for the website to "function correctly", even though reading bugs on said tracker works fine without it.
"What does he describe upon setting foot in this solemn space, a site dedicated to the very subject of his book? Himself."

I think that sums it up. There is little point in reading anything written by Malcolm Gladwell.
I tend to think that in most cases, in the US, there’s a mix of poor character / ethics / whatever-you-want-to-call-it and circumstances that lead to people committing crimes. I think it’s rare that it’s entirely society’s fault (accepting that framing for the sake of the discussion).
Now that you say it... Yeah there seems to be a lot of "Your government is lying and hiding something from you, you can't trust it!" that they can conveniently extrapolate to cover other subjects, like "election fraud", or "lab leak theory".
Better place to start is a review article from Lina Khan wrote that explains the new New Brandeis Movement.

The New Brandeis Movement: America’s Antimonopoly Debate by Lina Khan https://academic.oup.com/jeclap/article/9/3/131/4915966

(US moved into Borkian antitrust principles in the Reagan era, New Braindeis Movement moves is correction to more conventional view of antitrust)
Much as we are finding about obesity being caused by the "food environment", there's an unhealthy "kid environment" in many places these days. I have a 12 year old, and he barely would go run around our neighborhood growing up because there weren't any other kids doing it. We tried to get him to do it, but none of his friends would join him. Other neighborhoods achieve a critical mass and have tons of kids that run around playing.

It bums me out a bit, but I've compensated by getting him involved in lots of camps and activities, which I think are more interesting anyway. Growing up, sure we ran around and did some things, but it was usually pretty boring. My son would get to spend summers fishing, learning different sports, kayaking, running through different parks, and many other activities that I never go to experience.

It's a difficult balance, and just excruciating during the pandemic to figure out.

And now that my son is 12 and vaccinated, it turns out most of his friends think playing outside is a "dumb little kids thing". And there are hardly any camps, and the few that exist filled up instantly. So I'm acting as a bit of a camp counselor this summer and working more in the evenings so I can bring him places with friends.
Show HN: Our VR fitness game HitMotion: Reloaded just launched for Oculus Quest
Well, do you really care if your web application or mobile application runs on an 80386?

But, to get more practical: The wider your compatibility surface is, the harder and more time consuming your software is to write.

I once worked on a C# desktop product in the early 2010s where we had a requirement to support Windows XP. This prevented us from using newer features in C#, like the task API, which added a lot of complexity to our UI code. (It's much easier to write UI code in C# when you can "await" in one line instead of dealing with callbacks.)

Another drawback (of remaining compatible with Windows XP) was that we had to stick with an old version of .Net, which had bugs. Specifically, we were making a XAML UI, but XAML support in .Net for Windows XP was buggy.

Furthermore, we had to test our product on Windows XP, in addition to both 32-bit and 64-bit versions of Vista, 7, and 8.

Eventually product management realized that it cost more to support Windows XP than the additional sales it would make, so they dropped the requirement.

So, yes, "Who cases if it doesn't run on XYZ." Supporting "everything" often has real consequences and real costs.
Wayfinder – a relaxing 'art game' in the browser
Yes, they aren't. The ISP game is over.
If you run syncthing on android you lose its power management. Also it's a horrible OS for long running services for other reasons, one of the largest being how huge apps are and how it quickly kills things when memory gets low.
It's striking to me that the extreme end of 'freedom' here is letting a 9 year old ride a train alone. I must be getting old.

I realize it's relevant because Skenazy wrote and talked about doing so, but it's also just so non-extreme.
> > the single important binary

> This is also such a weird thing to throw out there. I like a good Go program myself, but most companies are not only deploying single-binary statically linked applications. Most companies are also deploying some kind of Ruby, Python, or Java application... none of which are likely to be a single file in practice.

Sure, but usual practice with containers is to put each thing in its own, unless they are very tightly coupled. Web-app with a SQL database and a memory cache? Three containers. You can do otherwise, but that's typical. Usually each container ends up with one main, important running process, and not much else.

[EDIT]

> As someone responsible for deploying an application to production, what is the story around FreeBSD Jails for deploying across a cluster? Is there a Kubernetes-equivalent that can manage the allocation of resources, blue-green deployments, and manage the lifecycle of my FreeBSD Jails?

> As someone responsible for deploying an application to production, do any of the major clouds support FreeBSD Jails? With Docker images, I can deploy those straight to ECS Fargate, Google Cloud Run, and half a dozen other services. Then I don't even have to think about my own infrastructure unless I need some really specialized hardware for a specific application.

These are exactly the kinds of things I was thinking of when I noted that the OS itself has been seriously diminished in importance, for modern workflows. I agree that most commercial or high-profile open-source "cloud" tools and platforms are built around LXC/Docker.
I can’t firewall systemd from making network socket calls. So, YEET!

Artix and Devuan, it is.
Even in "tech", they only focus on consumer tech. In healthcare, Epic has done so many things to drive up the cost of healthcare and prevent innovation:

https://www.politico.com/news/2020/01/15/health-care-data-sh...

https://www.cnbc.com/2020/01/22/epic-ceo-sends-letter-urging...
Best Lessons Learned
I'm sure plenty here are aware. This looks like a game because it is, they're pretending not to see their collective bias because they know it's being weaponized to make crypto illegal, as a means to protect their entrenched investments in the current corrupt system.
Society converging more and more into a "global" culture. Maybe we're just in a transitional phase, or maybe trust doesn't scale. Probably both.
lol, this is not true. The American Jobs Act introduced by Biden explicitly calls out the ISP issue and tries to allow co-ops, municipalities and utilities to compete with local ISPs.

https://www.whitehouse.gov/briefing-room/statements-releases...

even if they were not, it's still irrelevant to the issue of Big Tech. people can resolve issues sequentially.
I never ceased to be amazed at how awful we all are with statistics. I struggled in school with that class and I think that made me more sensitive to this phenomenon.

You can't move anyone to action with conversations about failure percentages or probabilities. The light bulbs only ever click on when you rephrase in terms of interval between incidents. If I tell you that you have a high chance of being pre-empted today to deal with operational bullshit, people don't like that. But as a fraction it just isn't compelling to most people.

Be it servers or deployments or CI issues, one negative event per day can be a very small proportion as you scale up. One substantial event per week is an even lower probability. People also don't get that 'all the time' means 'once a week and three times in a row while I was in a bad mood'. So even if your incidence isn't that bad, statistical clustering will earn you enemies in other departments or among your customers, so your perceived rate of failure is much worse than your actual.
If the ordinance recipient was defended or was unintended was a war crime committed?

https://en.wikipedia.org/wiki/Hague_Conventions_of_1899_and_...
I think you're mixing up a number of valid concerns which have different threat models: for example, the mass surveillance risks tend to involve things like carriers doing network traffic analysis or location monitoring, and things like open protocols or crypto don't really change the situation there since it doesn't depend on breaking encrypted traffic (unlike in the pre-TLS era when traffic wasn't encrypted).

Similarly, you can develop and document a crypto system but unless you're publicly funding a lot of adversarial research that doesn't prevent something like Dual_EC_DRBG being submitted in bad faith. I haven't seen any indication that the NIST team thought they were developing open standards — it's not like they sent a pull request from nsa/add-secret-backdoorz — and the level of effort needed to uncover these things can be substantial, requiring highly-specialized reviewers. That also hits all of the usual concerns about whether the cryptographic algorithm is secure but used in an unsafe manner, which can be even harder to detect.

The biggest win has simply been that these issues get a lot more public discussion and review now than they used to, and the industry has collectively agreed not to trust the infrastructure. Switching to things like TLS has done more to protect privacy than all of the lower level standards work and that's nice because e.g. a Signal or FaceTime user is still protected even if their traffic never touches a cellular network.
Police officers will often happily close roads for church or impromptu protests for the public's safety.

The bickering that's going on means someone has a hidden agenda, got their ego bruised or maybe the laws are just outdated and needs corrections.

Either way, people aren't great with change. Changes to the law takes a lot of time and often your request just gets ignored unless you literally force them to look at your issue.

Well, that's what they're doing. I have no problem with it, no one gets harmed, people are safer, laws will improve, it's just wins everywhere.
What often happens is a shadow development environment is setup on a machine (often personal) that isn't bound by the security restrictions, which makes the situation even worse.
At first I thought this was going to be like google lens. It's instead a way to probabilistically Identify things in strings. I have wished for this to exist, and made my own dumbed down version of it before. This could be very useful for less fragile screen scraping.
It doesn't help against the local authorities. But it will help against criminals and foreign authorities. E.g. most of the worlds capitals are packed with IMSI-catchers and passive eavesdropping devices operated from embassies. This spying on foreign soil would be impossible if mobile phones were any good with regards to security.

And signal isn't really very helpful in this scenario, because it doesn't properly protect against MitM attacks.
Probably coz theyre not growing as fast.
If technically best in the container space mattered, Illumos would be everywhere...
> Nuanced and rigorous history requires careful and objective study to truly understand.

It seems like the most objective account of history one can create is merely a recollection of all facts, with no room for editorialization. I've read some books by historians and I find it hard to follow when reading in the 20 minute increments my free time is divided into. Maybe that's just my problem, but it makes me understand why some people reach for pop history.
>This is not a legitimate question to be answered and therefore has no scientific or research merit, so stop dragging biologists into it.

Stop dragging biologists when a biologist was attached to the research study I sent you? Makes no sense.

>Your linked article asks the questions about the genetic origins of homosexuality, which has fuckall to do with your own invented concept of “normal” or “disorder”.

All conceptions of the terms "disorder" and "normal" are invented concepts and highly opinionated. Humanity at one point called Homosexuality a disease and at another time they called it normal. That is simply a choice of definition.

Regardless of the semantic pedantry you're trying to bring up here, you know what I fuckall mean by the terms. If homosexuality is proven to have no genetic basis and is only a recent phenomenon, then it is not biologically normal. Simple.

>Your whole premise is bollocks. You’re convinced that you have some enlightened thought exercise here but you really need to get your head out of your own ass. We get what you’re trying to say - but it’s too stupid to argue against.

You know it's actually not MY premise. It's well established that this is inconclusive in academia.

Why the hell do you think the genetic origins of homosexuality was researched at all if it was definitively considered to be normal and genetic? The problem is INCONCLUSIVE hence the research study.

You need to realize you are not arguing with me. You are arguing with established opinions in academia.

The fact that you're a doctor makes me question the scientific neutrality of doctors in the field. Are all of them as biased and emotional as you?
To expand upon that, the hard part is that every agency has a unique IT infrastructure (sometimes multiple infrastructures in a single organization) and budgets that vary wildly. It's not a one size fits all approach across the whole government.

The important part of the EO is the section 3.d.i, which says that every 60 days, until MFA is fully adopted, the agencies will report to DHS their plan and progress for implementing MFA. So basically, they can take longer then 180 days, but they need to be transparent about their plan and the roadblocks they are hitting in doing so.
What I don't get is we are getting NEW password rotation requirements on existing systems as part of the cyber protection pushes.

We are way down the stack of course but just a basic approach like

1) Allow for cut and paste passwords

2) Reduce rotation requirements (even annually would be better).

3) 2FA if logging in from a new device (with no SMS)

Would I'm sure get tons of protection without the insanity we have now. Some folks are asking for 16 character passwords but allow reset with a text message or email? Or a phone call to an overwhelmed help desk who barely verifies anything.

That said, I've seen worse. I once tried to go as high as I could on the chain to get something even worse fixed (we were required to hand out a form for a program that had been out of existence for 5 years so form did nothing). They would not budge, I even got legal in on it.

Because someone somewhere had ordered the form be distributed, the order had not been revoked, we still had to hand it out even though everyone agreed the form and program were no longer in existence. After I kept on escalating they threatened to prosecute or violate contract if form was not distributed an I kept pursuing the issue. So thousands of people filled out a form that just went no where.
I agree that they are most effective for newcomers. I'd also agree that with few exceptions they aren't the most efficient learning process, but as a person that had the luxury of spending about $35k in leftover GI bill benefits on 6 SANS certifications I did get some value out of most of the classes, even when I was an intermediate DFIR analyst. They weren't life changing or anything, but some of them were useful.

>these things all have a much higher payoff than certification does, and any time you spend pursuing a certification is coming at the expense of those other things.

Those are all good suggestions. I think from the perspective of newbies a lot of them (research/ctfs/open source dev) seem really intimidating and/or they might assume (rightly or wrongly) that they have a high barrier to entry. When you combine that with the tendency for a lot of security guys to be super shy introverts for a lot of us its a big deal to socialize or reach out to people for help. Having static, structured forms of training like books, certification programs, online courses, etc, can help people like this get started even if its not the most efficient way to learn. Getting just a little bit of experience can give the boost of confidence they need to start contributing socially.

I guess my point is while I do agree that passion is usually the biggest indicator of success in this industry (and many others), I wouldn't be ready to rule out that a person has that passion just because they have a slow start, aren't confident and don't really know where to start or where to look.
It's in his book "How to think seriously about the planet: a case for environmental conservatism"

The book itself is worth the read on its own. He has a very specific meaning of conservatism that doesn't map well to political landscapes. The book doesn't dispute climate change, and seems to basically accept it, but creates a framework for dealing with it from a grassroots bottom up perspective rather than an international top down perspective.
> Ultimately, I believe products that sit on endpoints will be more popular than ones that sit in between. In some ways, this is part of the trend of “shift left” and “shift right,” trying to focus on the ends rather than the middle.

What are examples of products that sit on the endpoints themselves? One thing I have seen is that because an organization does not always control every asset (like an AWS Aurora instance), they can't simply install some agent on the resource itself to check for access. Also has many more failure modes in that individual agents going down means people don't have access. I might be missing something here though so I wanted to ask.
By this logic our computer operating systems would not improve, ever. Web browsers, built-in networking, music players, image editors, mail programs, even Solitare - all things that at one time were separate market segments.
It's what the holiday has been called for 150+ years, and a bunch of (likely) white politicians deciding to rename something the black community created seems antithetical to the idea of the holiday.

Reflect on why you dislike this holiday and the difference between its name and "Christmas". Language is fluid and will survive. It's fine. This is a bad take.
Yes, she wrote a virally-popular law school review article in 2017. It aligned with a ton of political interests, which no doubt helped buoy it as high as went.

She then got invited to do some fellowships, advisory roles, etc... while stepping from law student to associate law school prof. None of that exposes you to the inner workings of industry.

Surely, she's a very smart and capable person. But there's a lot you don't learn in academic settings.

Regulating trillions of dollars worth of industry with only a theoretical understanding of the market, acquired only from a regulatory perspective, does not inspire confidence.
The article has somewhat of a clickbait title. The bug was actually in polkit, which is available on every single one of those distributions you mentioned, and is a dependency of a bunch of other low-level daemons. It happens to be an optional compile-time dependency of systemd, but a distro can ship a version with polkit disabled and just use sudo, if that's what was wanted.

WSL is probably very similar to other containerized Linux scenarios, where you might want a small init to function as a sub-reaper within the container. I don't think that is much of a specialized case at all, as far as inits go anyway.
Oh, that seems interesting - like a companion book to the more flamboyant one, Extraordinary Popular Delusions; sounds like it is more statements of facts and unbiased accounts, as opposed to entertainment?
Yes that's right. The halting problem does not actually exist in the financial world.
Absolutely abysmal.
Why don't we apply Darwinism to the financial world? The fittest survive. If you can make friends with people who have insider info, you should be rewarded with your networking prowess. It's quite an underrated skill. That's how startup investing works anyway.

Separately, announce earnings with some injected noise. Keep announcing corrections in the following several days so that it eventually converges to the correct value. That would be fun! I'd absolutely love to see the Wall Street suit-and-tie hedgehog fund people writhing in anguish while the retail investors don't take a shit.
https://www.fbijobs.gov/
Federal Reserve Now Projects Rate Increases in 2023 as Economy Heals