skysight-inc/HackerNews huggingface dataset:
As far as I can tell, this is just using EL3 as another hypervisor level with a new, lightweight memory assignment/protection scheme, and (apparently single-key?) memory encryption.

In the end, you still have to trust the root domain, which means you still need to trust system firmware and the secure boot chain. I don't see how this is any different from the existing TrustZone stuff other than having more flexible memory management.

In other words, it just makes it viable to run random third-party code in "secure" mode, but it doesn't do much to increase trust. You still need to trust the device manufacturer and boot chain. You could achieve a similar level of trust on any system with a regular hypervisor part of the device firmware, and which has standard memory encryption (which we should all be using for everything by now, it's a travesty we aren't).

So e.g. if you're thinking of using this to run VMs in the cloud without having to trust the provider, you have to trust that the device manufacturer has implemented all this properly in the root monitor code, and that they have working secure boot, and that the person who physically owns the machine can't break this security.

Personally, I think this is a dead-end model. Real secure compute in the cloud isn't going to happen. If someone else owns the machine, they own the machine. For non-general-compute use cases, like securing portable devices against theft or seizure, or DRM, the solution is to put the secure stuff in a separate CPU. There's a reason Apple is using a dedicated Secure Enclave Processor to implement all the critical device security stuff, and why every game console DRM scheme has a security coprocessor handling the crypto.
Legalization puts barriers in place for sex workers, especially vulnerable ones and creates the illegal tier / market. Full decriminalization is the safest option for workers as they are all equal under the law regardless if they have registered.
Cherry MX silent reds are very light, there should be no problem with chording.
Do they really have to create an ad to tell the obvious :)
Nobody "is" anything. People do things. He did some good things, worth praising. He's also allegedly done some despicable things that we should condemn.
To be a bit pedantic, testimony is evidence. But I agree he was not very credible.
Just want to yes and you.

In general, put everything in private subnets, and make the only way any traffic can get to a server is through a load balancer. There are very few reasons to have a server itself have its own public IP address, and using your load balancer as a chokepoint, means you can set up layers and layers of redundancy to prevent traffic from ever being able to reach a database under your control.

This holds true whether we're talking RDS DBs, something you've spun in a K8 cluster, or something you're running on a vanilla compute box.

Assume you will screw up at some point and open up a port that shouldn't be. Ask yourself, "what's the impact here?" If you're OK, even with a fat fingered port, great.

Assume you will have a dev deploy a DB without a password. "What's the impact here?" If you're ok, even without a password, great!

That isn't to say that the above two scenarios are something you should tolerate, but automation can help detect these sorts of issues and make it easy for you to resolve them. While that automation is running, you want to make sure you're not going to get owned.

Kudos to the OP for sharing their story. Always lots to learn on this front, and we can always get better at our cloud operations.
I was disappointed at first by the lack of building too. After a while I still enjoyed it a bit for what it was; it was a fun game.
I'm not sure I understand the distinction you're making between "slur" and "epithet", but I suspect you're reading too much into that choice of word.

The point I was making is that when you say "The protestors are framed as crazy"... it's not just framing. They sent a picture of a gun to a speaker--that IS crazy. If you can't even quote an entire sentence about the people you're defending, it's you that's doing the framing here.

And yes, the author clearly has a bias. But if you refuse to read anyone who has a bias, you'd better just give up reading. You certainly showed a bit of bias in your selection of which parts of that sentence to quote. It seems like your real complaint is that you don't agree with the author--if that's the case, then this is your opportunity to say why you think the author is wrong. That's how you have a discussion with people you disagree with: you don't accuse them of bias, you don't try to shut them up, and you definitely don't send them pictures of guns.

The truth has power. If what you're saying is actually true, you can get people to recognize it without making inane accusations, silencing naysayers, or making death threats.

To be clear: I think it's perfectly fine to call someone a TERF if the accusation is true, and it's bad to be a TERF. But sending pictures of guns to people has no place in a civilized discussion, and we shouldn't be tolerating that behavior or covering it up.
> "That's not really what I was getting at, what I was getting at is that creating an environment where people refuse to use proper pronouns or provide even basic accommodation for trans kids is going to make them more interested in medically transitioning, not less."

I don't care about legalism and I'm not going to get into gotcha debates about, "well technically you said".

My intent behind that statement would be more accurate to say: non-affirming environments force children and young-adults to make extreme decisions without the benefit of experimentation or counseling over those decisions. In that environment, it is more likely that they will regret the choices they make, because they will never get an opportunity to try out those choices in a limited capacity beforehand. This seems to me to be an obviously logical, reasonable statement: people who have less experience living as a trans person are less equipped to make weighty decisions about their future life. People who have less experience in any area of their life are less equipped to make weighty decisions about that area.

If that seems like a different argument to you than what I said before, then I apologize for being confusing, clumsy, and imprecise, and I'll happily concede one internet-point. But beyond that I'm not really interested in those kinds of fights.

> The answer is that I care whether my kid will come to have regrets. I don't actually care whether they are trans. I care about whether they are happy.

In which case, the only studies that will be helpful are the ones that measure regret, not rate of surgeries. Unfortunately those studies are limited. Bear in mind that post-puberty regret and regret over waiting on transitioning are also possible outcomes here. Both medically transitioning and waiting to transition or avoiding puberty blockers/hormones can have negative outcomes, which is why I emphasize kids being able to get more life experience being trans before they make that choice.

While long-term studies on transitioning are limited, there is at least pretty strong evidence that affirmative care reduces suicide rates in trans youth[0], so it does seem to have some measurable positive outcomes.

[0]: https://www.thetrevorproject.org/2020/01/29/research-brief-g...
(Opinions are my own. I know nothing about this program.)

Using StackOverflow's [0] aggregated statistics of pay based on experience + location we can get some rough estimates

Over a 5 to 10 year span as a developer at Google you'd probably touch: Java, Golang, C++, Python, and some part of GCP (or very similar tech). Pay is also different from market location so if we look only at the USA we can look at SF and Manhattan.

5 years:

- NYC 25% 96k, 50% 126k, 75% 166k
- SF 25% 113k, 50% 149k, 75% 197k

10 years:

- NYC 25% 107k, 50% 141k, 75% 186k
- SF 25% 126k, 50% 166k, 75% 219k

This is also ignoring the FAANG bump that you get from being Xoogler. Also, if you don't get a promotion or are unhappy with your compensation Facebook's levels are an approximate 1:1 mapping to Google and from what I've heard going from Google to Facebook and back to Google is quite common. Some people have joked that there are people that are on a 2 year rotation back and forth.

Some more data can be gleamed from here: https://www.levels.fyi/

500k+ is L6+, while very difficult to obtain, seems doable if you are determined, know your stuff, know how to find the "right" projects, and are also an inspiring leader.

[0] - https://stackoverflow.com/jobs/salary
This is not how people outside of the HN/Reddit/Twitter bubble view Amazon. They're generally a highly trusted company and the American populace views people who work there fairly positively.

Amazon have one of the most trusted brands in America, rivaling Google in how people view them.

It's your life, so you're welcome to feel as you will, but if it's on inaccuracies then you're just hurting yourself.
All internal services should be protected, even on your home network.

If you have 100 devices on a network where everything is unprotected, that’s 100 different ways someone can try to get full access to 99 other devices.
I like that idea, but why the green light then?
Demographic and Finance control is one example. If one chooses a life of Hedonism over a traditional path, they may be frivolous; e.g. a single person household that is not as efficient and pays for everything themselves. Just one example.
It's bold to assume that the Google interview process accepts all qualified applicants.
Mongo is so insecure that it's commonplace to not bother with usernames and passwords and just firewall the hell out of it instead. Plus that's one more plaintext password you'll end up storing all over the place. Its default configuration requires no authentication.

Not saying it's a good practice but it's a common pattern I've seen.
Is Haarp Firing Up? FAA Issues Warning About “Electromagnetic Radiation”
I would say that this is the expected behavior. Also, I don't think one should rely on firewalls in this way.
There shouldn't be a cherry pick involved, and my protip would be that you don't actually need to make a local branch for small changes; quite often I'll just do `git checkout origin/master`, make the fix, commit, and `git push mine HEAD:refs/heads/quickfix`. But yeah, it would be nice to have a way to just commit a diff at a different point in history without having to check it out.
Nation States, Corporations, Moguls that that have no moral compass and use control matrices to sway minds. E.G. did you know that Snapchat is biggest peddler of child porn? Or how about Only fans being a legal pimp for narcissists and their enablers?
Yeah, my setup is: private network + whitelist + password.
At least they have the option to sell the property, take their profit on the increased equity, and move on to the next venture or just get a normal job.
Pathogenic gut bacteria linked to weight loss from low-calorie diet
> You'd be surprised at how many people actually like Jira, mainly because of how customizable it is.

Are there any numbers of how many of the users like it, compared to how many users struggle with it? I can't imagine that a majority of Jira users likes it, as that's not my experience. I have met very few people (mainly project managers) so far, which believe that Jira (and other Atlassian products as well) are great products.
It was created that way because of the extreme consequences of criminal conviction. Civil suits, which deal in money or injunctive relief, have a much lower standard of proof. Social opprobrium rightly has a standard lower than that.
That doesn't protect against a file already being generated in a broken fashion. Or that it's content is not compatible to the newest schema you are using for deserialization.

For serialization in a distributed system you always want to have a parser which can detect invalid data and has means to support forward and backward compatibility.
> TERFs primarily don't focus on trans men because they see them as misguided women.

Not well versed in feminist theory, but I’m curious whether anyone has formally documented in the scientific literature these sorts of psychological attitudes.

Probably a cross-disciplinary masters thesis worthy topic if no one has done that research yet.
Well said. You know your stuff.
Shameless self promotion: Did a video recently that explores how various image formats look as they load https://youtu.be/-7k3H2GxE5E.

Includes adam7 PNG (used here), but covers other browser image formats + JPEG-XL.
Yeah, configure `ufw default deny incoming` and Docker will sneakily bypass that and gives the internet unfettered access to your ElasticSearch and MongoDB and whatever. And somehow, that's apparently "not a bug". It's one of the biggest footguns I know of, and could not believe it was expected behavior when I first encountered it.

We have a strict policy that servers must not have a routable IP address at all, and must have an external firewall applied. It's a good idea in any case, but turns out it's absolutely necessary with Docker.
Stratechery's Moat Map (can someone explain the internal vs. externalization?)
https://github.com/iamadamdev/bypass-paywalls-chrome/
Ha nice, surprised Vancouver, WA isn’t on here
The issue isn't the users, it's the developers. Apple represents 50% of American mobile market share, developers can't just "choose Android" because they'll lose access to half their customer-base.
Defaults don't matter as long as they are overridden in the official Docker image. And because of the way network works in Docker, they can't listen on anything else than 0.0.0.0 in their image.
Guilty, no. I mean, it's your employers and managers who should feel guilt.

Worried? Maybe. Deliberately positioning oneself as a C- (bare minimum) performer might work OK in a time of plenty.

What happens when your skills and endurance have atrophied, but the pressure is actually on?

I call folks like you "the expendables". It's a job with a purpose and I appreciate your sacrifice.
While I agree with the larger sentiment, there is a rather substantial amount of diet and nutrition science with the core being quite an agreed upon set of foundational principles.

If I were to summarize:

1. We derive energy from three major macronutrients (protein, fat and carbohydrates)

2. Our body has certain macronutrients it cannot synthesize and NEEDS for healthy functioning (essential fatty acids and essential amino acids)

3. Our bodies are largely energy efficient (by which I mean the processes to produce energy are readily actionable with average hormone levels of insulin/ghrelin/leptin etc.) when consuming carbohydrates, but can turn to other nutrient sources when they are not to be found.

4. Our body composition can be manipulated by manipulating our energy expenditure either via manipulating the caloric content of food or via the preferential production of body tissue from horomonal influence (this is why muscle mass increases when using testosterone even if caloric intake is kept constant but above a certain macronutrient threshold).

5.There are a certain set of micronutrients we need on a continuous basis (the exact amounts of which are up for debate but the ranges seem to be reasonably agreed upon).

6. Our diet influences our gut fauna and this further influences how much nutritional value we get from our diet, it is quite a symbiotic cycle.

7. Barring certain specific horomonal imbalance diseases, everyone's body largely abides by the above principles, (i.e as special as everyone thinks they are, they're probably more average than not when it comes their metabolism).
fwiw, you can do network throttling entirely on the client, but unfortunately only Chrome implements the required APIs.

Anyway, here's a tool for loading images at 2g speeds https://static-misc-3.glitch.me/slow-img-load/
You would definitely hear it at 100ft and 100mph. I race drones and they are LOUD. If it's some DoD tech then maybe they figured out how to make it near silent but it'd have to be some real state of the art prop design.
> how is this bad?

The argument on crypto has happened on HN countless times - no point in rehashing it. Obviously I hold a negative opinion. My point is that young people do stupid shit.
Exactly. If the site doesn’t work in Safari, I don’t need it. If you are designing a site for my consumption, you damn well better be designing it to be usable on my devices. Especially my iOS and iPadOS devices which account for about 70% of my tech use.
Here I think IT more likely means Intuitionistic Type Theory.
Using your numbers, it adds up to 44%. Dismissing my point because 44% is less than 50% is unwarranted.
Four Habits of People Leaders
Violent Language
A lot of people here are nostalgic about iPods but I'm nostalgic for that era when most people ripped CDs, and shared files with their friends, and it's all offline. I remember as a kid recording the radio onto cassettes so I could listen again later. Now it's all encrypted, DRM'd, and ephemeral.

With music downloads peaking in 2012, I'm still clinging to audio files myself and will still buy albums on Bandcamp.
TSMC’s dominance poses risks to the global economy
Relying on firewalls to do what firewalls do and have done and continue to do seems perfectly acceptable. Yes, your database should have authentication enabled too, but expecting ports to not be unexpectedly open is the entire point of firewalls.
If the issue is that it’s dangerous for women, then why do the lawmakers write laws that make sex work even more dangerous. It’s hypocritical nonsense pushed by religious groups.
I think what you've said here is great, and clearly this conversation is controversial.

My own opinions on this and many other topics are almost all controversial.

That said, the flagging here seems to have killed the conversion entirely. I was kinda excited to discuss the topic. Maybe it will rekindle. Idk...
I still don't care how it started. Until it's gone, the world needs to spend their cycles on getting past it. There will be time to point fingers and blame later.

It's like being in the middle of a house fire, looking for a way past the burning hallway to the door, and then someone else in there with you arguing "Don't worry about how to get out. What's really important is who started the fire!"
What's the most significant hack in history?
Is 3 hours a large time for an open server to be discovered? Do the attackers just have a giant list of ips that they constantly scan and can instantly know if it’s suddenly open to traffic?
It is more precise to say you can fit all of existing mathematics that you can actually check.

A number whose only classification is that it is real is a nonphysical entity. In constructive systems it can not be reasoned about because it can not exist. Something very close to real numbers exists, but situationally. Pi exists because I can describe a procedure to construct it, same for Euler's number.
If you're going to cherry-pick, at least recognize some of the other cherries:

> If someone refused to use a preferred pronoun — and it was determined to constitute discrimination or harassment — could that potentially result in jail time?

> It is possible, Brown says, through a process that would start with a complaint and progress to a proceeding before a human rights tribunal.

Sure sounds like "potential" to me, no matter how unlikely its proponents claim that will be.

And any talk of tribunals always makes my ears perk up, as it should anyone who values representative democracy.
Pulling GitHub into the Kernel Process
> John gets straight As, and aces his SATs, and comes up with a novel theorum by age 25

OK but who decides those are the right measures of "merit"?
DRF is a nightmare
It's worth noting that these are cups, the imperial unit of measurement, not cups, the vessels you drink from. Five cups of coffee is two large coffees at most coffee shops.

The confusion the "cup" measurement causes to Americans trying to understand food guidelines is possibly the worst harm caused by our failure to adopt the metric system.
The kids blame the teachers:

https://www.youtube.com/watch?v=-YWuD9RwJD4

The problem is in the education system, I don't think denying it helps anyone.
The docker part bit me in the behind as well, had absolutely no idea it would circumvent ufw by design.

Angry at myself for not reading the docs carefully but who has time for that? :/
The "James demore event" was a guy arguing that some of his coworkers were less-than-qualified because they were women.

This is wrong and actual misogyny, and does not get a pass because he framed it as a debate.
bold? as long as there is no discrimination going on they can do what they want. the problem is, there is plenty of discrimination going on. maybe you don’t care because you work there. good for you. sooner or later, it will matter to you.
What does this have to do with race?
> criticizing the measures of merit

Yes, that is the core of the criticisms of meritocracy. Who decides what's worth merit? The ones who have already accomplished certain ends decide that those ends are meritorious.
Sounds like you might have a View Model.

One option would be to define this View Model that takes your Model in the constructor, then make this view model object available in the template context.
Understood. I think the reason why such a scenario would not likely play out in my vicinity is that being gay is such an accepted thing here that the large majority of the people would not bat an eye. The Amsterdam gay pride draws crowds from all over Europe each year.

Unfortunately, that doesn't mean there isn't any bigotry and associated violence against gays, lesbians, trans people etc. I wished that were true, alas here too we have our share of people who simply won't recognize reality. But I'm fairly sure that the people who are at risk of such violence here have their own ways of ensuring the chances of encountering people who are prone to acting on their bigotry in non-safe settings are reduced to a minimum, it's out in public where the risk is largest, and that increases as you get away from the larger population centers.

The bigger issue in 'coming out' here is to deal with such people in a family setting, that's where bigotry can and still does cause significant hardship.
Why is a nuke plant an ideal conduit for graft versus any other government contractor project? Is there evidence for this?
> Most boys have studied Latin and French for a couple of years before they arrive at the school.

The curriculum at elite schools speaks to the investments made for these children outside school. Not just tutoring, but parental support for homework, etc.

At the end of the day, neither Latin nor French is, per se, likely to matter one iota regarding aggregate success. People don't get wealthy by graduating with a degree in Classics or French Literature. What matters is what these things reflect.
That was a default judgement, which means he automatically lost because he didn't show up to court, not on the merit of the suit.
Thank you, I stand corrected. That is a lot of coffee!
do you really think Pelosi and other lifetime democrats are any less corrupt than republicans?
True, OpenLayers and Leaflet have some support for vector tiles. However, you cannot rely on it because the performance is not there to render a normal map. Alternatively, you can use maplibre-gl-leaflet to integrate the two but it's experimental with some significant caveats.
Yeah, the proposed mechanism with cryptochromes works in the bird's retina, but it's unknown if it affects the normal visual field or is separate. There's some cool visualizations of it here: http://www.ks.uiuc.edu/Research/cryptochrome/ (from this paper: https://pubmed.ncbi.nlm.nih.gov/20655831/)
Oh if Charlie is right about CCA enclaves sharing the same key AND there's no launch control to stop other enclaves from spawning, that's a devastating oversight indeed...
Software development is a creative process; not a paint by numbers