skysight-inc/HackerNews huggingface dataset:
I worked for two years on a session system for an institution that cared deeply about security.

We had to trace, kill, kill all for single or multiple sessions, users, or organizations. Do this for entire IP ranges, client versions, or client ids. Rate limit all "session-mutating" (unidirectional state machine) actions, time out, model session confidence, restrict session scopes (subset authz), associate with any entity written or touched, monitor lists of compromised emails and passwords, require 2fa...

Your opinions might work where money and privacy aren't involved. But I wouldn't trust your posture with my bank info, emails, or personal messages.

What happens if your signing key leaks? Or you accidentally log session JWTs? Or someone's device goes missing, or someone steals a password, or an account manager has their info posted openly?

We're not worried about just our entire database. We're worried about any ATO, undesired action, or data leak, however small. Even one impacted person is too many.

Security really fucking matters. Take it seriously or don't touch it.
The Indian act needs to go away, as it's a racist, sexist and discriminatory document with a terrible history of much worse genocidal things, but it needs to be dismantled in a structured way that doesn't also erode the current rights of First Nations.

I have no doubt that indigenous persons you've talked to have expressed that the Indian Act needs to be removed and I expect they're speaking to the awful and discriminatory reasons I've mentioned.

The big problem is that there's another group of people that will similarly express that the Indian Act needs to be repealed, and that group contains racists and people that don't care at all about First Nations rights.

They express a desire to end the Indian Act so that the indigenous persons in this country will lose all rights, will be assimilated, and the Canadian government will then no longer need to spend any more money and time on this issue. While the white paper was from decades ago, the colonial assimilationist sentiment behind it has lingered around.

So the statement that the Indian Act needs to be repealed while generally true in a very high level sense, can be an inflammatory statement depending on the context.
QUIC at Snapchat
Its an && statement, not an or

You must be an officer with greater than or equal than 10%
There was an intro to digital logic class for first year students at Caltech in the '80s that included doing a project to design and build something. The traditional thing people built was a digital clock.

One friend of mine took the class as a senior.

At Caltech then there were two math classes, AMa 95 and Ma 108, that were generally taken in your junior year, and were either prerequisites to or had to be taken simultaneously with nearly every junior and senior class in your major. AMa 95 for engineering and physical science majors, Ma 108 for math majors. These were both a noticeable step up in difficulty compared to the two prior years of math, and if you saw a junior who was tired and in a daze it was probably due to 95 or 108.

My friend took Ma 108.

108 had a way of then haunting you even after you got through it. You'd start noticing that number all over the place. You'd need to go to some office, and it would be room 108. You look at your watch after a leisurely lunch to see if it is time to get back to work, and it is 1:08 pm.

My friend had had enough of that, so when she built her digital clock she made it so it held 1:07 for two minutes and then went straight to 1:09.
EAC seems to cause lots of problems even on Windows, unless you have clean install. The thing is very sensitive to any 3rd party programs installed and requires drivers to be up-to-date, breaks some programs by patching system apis etc...
Backdoor Roths are a thing. The income limits don't matter in practice. The trick is getting appreciable money into the necessary accounts in the first place.
This analysis overlooks the significant impact of appropriation of assets from colonists. A society with small GDP is not necessarily poor. E.g. if there's plenty of resources, available as communal, then that would change the view and sense of prosperity within these communities.
Wow. Back door accounts are just totally inexcusable these days - manufacturers should be held to account if their back doors end up getting exploited by threat actors. (Granted, you could argue it’s hard to distinguish between a really terrible bug and a back door, sometimes, but “intent” should cover this difference…)

Would you happen to have a write up/article about this series of events that isn’t a sanitized series of security bulletins? Sounds like it’d make for good reading.
They're wrong you must satisfy both conditions

The IRS enforces this and they enforce both conditions. Director && >= 10%
Read this, then checked my old My Book Live.
Sure enough... everything's gone.

I just used it for continuous laptop backups over my LAN, so unless one of them crashes tonight, I should be good. But, this will certainly give me pause when considering WD products, and this type of product in particular.

This is very bad, WD! Are your other products also vulnerable in this way? Why should anyone ever again trust your company to keep their data safe?
Win8 re-design was completely unrequested, most people hailed Win7 as the best Win UI iteration. Win 8 was a desperate, unguided attempt to make the Win UI fit on tablets, which failed, hence the full-screen "Start screen"
He was 3.5% shareholder when it was sold to eBay in 2002, he was likely under 10% at the time the IRA made the purchase or shortly thereafter

Director && % must be satisfied simultaneously

The IRS enforces this and thats what they look for

Nobody else is able to interpret that part of the law to cause an action
The whole point of DCH iirc was to decouple the rendering and display engine driver from the User/Control/Config interface.

This would basically allow Dell/Hp/Surface to use the same latest Intel/Nvidia/AMD drivers but have their differentiation and config apps updated on their own schedule while the OS takes care of the actual driver components.

so that's a feature not a bug.
> Considering you rarely write on the pod

Isn't Backblaze's workload nearly exclusively writes? People back up far, far more often than they restore.
Per the article (1200 hospitalizations, 150 deaths) 12.5% is the death rate among vaccinated people who were hospitalized for COVID, not who got COVID. So you're missing an extra probability multiplication to account for what percentage of vaccinated people who do catch COVID go on to have a severe enough case to be hospitalized. That should be a big difference.
Also - age is of zero relevance to internet connected linux devices?

I rely on many "8-10 year old device that hadn’t received a security update in 6+ years". My coffee machine. My fridge. My hifi. All my motorcycles. None of them run linux and are directly connected to the internet.
> From the government itself

There is no government possible without incomes that support it. You got this exactly the other way around.
No it wasn't. The Wuhan strain pretty much died in last April.
I've worked on some legacy code in my time but debugging this thing has gotta be completely nuts.
Not sure what that guy is talking about, but some people are frustrated that WSL2 is basically a linux VM, and F# has been little more than an experimental playground for .net features. I don't care about either project, but these are the complaints I hear the most.
The biggest barrier to this for people outside the US and Canada is phones. People need "real phone" functionality (voice+txt+mms) on one device, and Google Voice and Twilio don't do that for a sizeable percentage of the global population outside of the USD and Canada, so people either use one phone for everything or they have 2 phones. The BYOD and MDM around that is a security nightmare.

That's why I created BenkoPhone (currently Australia only :)

[1] http://www.benkophone.com/
> a guy building a business he knew would be irrelevant in 10 years

To be fair, almost any software based business could be irrelevant in 10 years.
Do you know how cookies and tracking works? Go to Reddit, click an imgur link, go to YouTube, they almost certainly have data about you now.

(By the way, this is why Firefox containers are so awesome. Doesn’t remove all the issues, but really limited their ability to build profiles on you.)
I don't see any difference between the "incorrect" and "correct" examples
> It's not even a matter of if you believe he did or didn't do all of these, that he seemed to constantly find himself in these situations around the world is telling.

This makes the false assumption that the system is correct and railing against it is crazy.

> Seems to match the understanding I gave in my comment not anything new

This implies "unhinged" and "lunatic" are used in ways that describe specific and precise conditions rather than as insults, which is, frankly, horseshit.

As for the rest of your comments, they are unrelated, irrelevant, and don't characterize him in a way that is much different from the average American, even if true.
I thought I'd be safe and boot into an os on an external ssd for non work related activities on my work hardware, but somehow it not boots to grub by default even without the ssd plugged in. :(
Even for streaming of video files? I thought you had to use Cloudflares other product for that.
I think you missed a key part. The way Thiel (and others) got so much in the Roth IRA -- when contributions are limited, at that time to 2K/year -- is by under-valuing the non-publicly-traded stock they had insider access to.

Although yes, the main thrust of the reporting is that the tax laws are set up to hugely benefit the rich and allow them to avoid paying taxes, not that the rich are breaking the laws. With these IRAs in particular though, there does seem to be something very dodgy and possibly illegal about the way the rich are getting around the contribution limits by under-valuing non-publicly-traded stocks.

> Thiel’s unusual stock purchase risked running afoul of rules designed to prevent IRAs from becoming illegal tax shelters. Investors aren’t allowed to buy assets for less than their true value through an IRA. The practice is sometimes known as “stuffing” because it gets around the strict limits imposed by Congress on how much money can be put in a Roth.

> PayPal later disclosed details about the early history of the company in an SEC filing before its initial public offering. The filing reveals that Thiel’s founders’ shares were among those the company sold to employees at “below fair value.”

> Victor Fleischer, a tax law professor at the University of California, Irvine who has written about the valuation of founders’ shares, read the PayPal filings at ProPublica’s request. Buying startup shares at a discounted $0.001 price with a Roth, he asserts, would be indefensible.

> “That’s a huge scandal,” Fleischer said, adding, “How greedy can you get?”

> Warren Baker, a Seattle tax attorney who specializes in IRAs, said he would advise clients who are top executives working at a startup not to purchase founders’ shares with a Roth to avoid accusations by the IRS that they got a special deal and undervalued the shares. Baker was speaking generally, not about Thiel.

> “I would be concerned about the fact that you can’t support the valuation number as being reasonable,” he said.
Are you saying the employer can take control of the device without ever having physical access to it?

That sounds like a massive privacy and security issue. Do you have more information?
What's the point of having phones thinner than razor blades, if not to facilitate carrying two of them? I think I could stack 5 or more phones and they'd still easily fit in my pocket.
Not sure what your "feelings of shame" lines are about.

Also, I agree that any bathroom won't accommodate everyone. But no current bathroom does that either.

For unisex purposes it depends on the bathroom design surely.

People have this idea you have some semi-public space because people might see each other in a state of undress.

But almost all westernised bathrooms contain a bunch of toilet stalls.

If everyone is going into a toilet stall to do their business - standing or sitting - then the only shared space is for washing hands or preening in front of a mirror. And if that's an issue, optionally put that in the stall too.

If security is a problem - many toilet stalls have limited doors/walls around them - then make it secure. This effort would benefit everyone.

Then humans - whatever their persuasion - could simply do their business in peace and get on with their life.
Your 0.6% is pretty sensitive to the actual efficacy against death, which is probably higher than 95%.
Putting in a lot of work to your own projects without answering to a boss or freelance clients wouldn't be too grim.
I'm the opposite. I can't believe that Finder is the best Apple can do for a file explorer. It is an absolute abomination and after 4 years of using my MBP I still hate it passionately every time I have to use it.

I agree that preview is nice, as is Spotlight. But for me, OSX is getting too locked down at this point as a "power user". The sandbox makes apps take obscenely long to open like as if I've been teleported to the 90s with spinning disk laptop hard drives. A bunch of useful preview extensions all broke with Catalina's latest efforts to lock things down more and more. I hate how many hoops you are forced to jump through to get any non appstore app to get installed.

I thought OSX + MBP would be a solid and stable experience but I've been plagued by a well known kernel panic based error very frequently when I plug into a dock, resulting in hard reboots.

I'm definitely going to switch back to Windows with my next laptop. I'm sure there will be things I will miss, but OSX hasn't lived up to my expectations. I do most of my work on an Ubuntu box via VNC/SSH, and the lack of CUDA support makes the MBP kinda useless for prototyping ML/DL stuff as well.
Exactly , without context I suspect this comment section to devolve into discussion about US copyright law which, while fun to read, should be steered towards Japanese Copyright law. The context being in the title would absolutely help that.
That’s always the reasoning. I’m sure doing your own telecommunications is also cost-prohibitive.
Not at all. Plenty of people get to the point where:

- they've just had enough and can't be bothered

- they know the business needs investment of money and/or time to go to the next level

- they've identified some more lucrative business elsewhere and want to concentrate on that.
That said, the primary problem with distributed authentication and distributed revocation is either it slows down your processing as you wait for confirmation of new entries on the list, or you have a risk that actions might be allowed when another part of the system has tried to block them. We generally think of distributing authorization data asynchronously in the positive: adding a new user permission, rolling the list out to every authz server. But when you’re trying to block access immediately, it can be difficult.

Not to be negative—if your JWT expires after 15 minutes and your list updates every 10 seconds, you’ve improved your reaction time quite a bit for revocations.

Also, you can have an eventually consistent session store if you don’t mind that sometimes users might see a 403 they shouldn’t, if your app can cover it up such as by requesting content from a different region or waiting a bit. Similar to the idea of using a load balancer to pin sessions to particular servers.
Please not Canonical. OG Steam OS was Debian, which was a wiser choice.
It can be the consequence of the hardware someone owns. As an example: my desktop is from 2012 and its performance does not justify its replacement.
they're migrating things to Settings over time. do people not know this?
Have you had the unfortunate necessity to use the IRS web site? It's actually fantastic. Getting logged in and authenticated is pretty weird, because you have to put in a credit card number or a loan number, but it's pretty good authentication for the audience.

The web site itself is snappy, well written, and I could do everything using Firefox on Linux. No "IE only" bullshit. Downloads are fast.

I'd give the IRS 10/10, except for the fact that I owe them money.
Saying "instantly" is under selling it. It literally happens before you are fired. IT will have disabled you ability to access files before you have been informed it is happening.
I feel the same. The two levels of “variableness”, and the prohibition of mixing them, must have something to do with lazy vs eager evaluation, right?
If it is indeed already outputting multiple code snippets... it would be awesome if you just write the function stub and a couple test cases and it returns only the functions that pass your tests.
uhh... 64-bit hardware can run 32-bit software just fine.

that old software will run fine and so will any connected hardware.
Try this:

https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=450...
I’m about 3/4 certain that it’s between those times, and never at the top of the hour.

Getting the exact panic would unfortunately mean to have to get it down from the shelf where it lives, and plugging it into a monitor to replicate. It doesn’t make it out of low-res text mode when it does.

Most of the time, I’m usually in a rush to get it back up as my family wants lights and Plex to work normally.

I do my best not to reboot to keep the peace!
> The church was operating these schools as a charity because the government had neither the resources not inclination to do it themselves.

The first CA residential schools were a Christian effort. The first was started in 1820 by missionary John West in the Red River colony, with funding from the (British) Church Mission Society.

By 1901, though, "In Canada, the Indian residential school ... network was funded by the Canadian government's Department of Indian Affairs and administered by Christian churches." [https://en.wikipedia.org/wiki/Canadian_Indian_residential_sc...] The compulsory schooling of children between 7 and 16 was the result of 1894 amendments to Canada's 1876 Indian Act ... often mentioned by the First Nations.

Edit: Adding a link to a very good article posted after Kamloops, called "Why so many children died at Indian Residential Schools". It also quickly details the scope of the operations and conditions across Canada.

https://nationalpost.com/news/canada/newly-discovered-b-c-gr...
Personally I don’t see the difference between a local MacOS system doing it and a system phoned by MacOS doing it
No only owning shares in their IRA of the company they're directly an officer in. It's limited in scope to essentially people with significant control in a corporation.
> The CEOs of both companies, which also are listed on the New York Stock Exchange, were early investors in LTSE with financial stakes of less than 1.5%.

So the CEOs of Twilio and Asana invested in this exchange then convinced their board to list on it. I'm sure they're not just interested for personal gain though.
the "49-state legal" one is empty inside, its a legal scam. Works because those 49 states dont actually test for CO, HC or NOx. They merely use ODB computer checking for

- check engine light

- fault codes

- readiness monitors

its a legislative joke.

In EU even a 20 year old bmw e36 cat still goes for ~$1K, because we actually test emissions.
They had to partner with Amazon or no one. Amazon already has an android marketplace, and there's no way Google, who has a "competing" OS, is going to facilitate users using apps on windows. Google especially isn't going to combine the play store with the microsoft store and let MS call it the microsoft store.
Ask HN: Best resource for Angular 2 templates/libraries?
Is there a central place that details what are the best imports to use? I've seen some stuff about ng-bootstrap vs ngx-bootstrap. But there are sooo many others. I'd like to learn the imports that are most commonly used and are the most feature rich. I feel like otherwise I will end up using a hodge podge of imports because they came up first in the search.
A better question is why do you feel the need to “stay on top of slack” during your non work hours?

Having entirely separate devices is BY FAR the best thing I have done for my mental health and productivity. Same as other posters here.
This has been seen in a mainstream lisp before! (sort of)

Wolfram Language uses almost this exact syntax—function application looks like f[x,y], but in all other respects, it works like a LISP would.
Real question is where are all the old Win2K dialogs and menus hiding
> 150 died out of 1200 who got COVID after vaccination

You’re misinterpreting a key stat from the article: those 1200 were hospitalized for Covid, not simply infected.

> This would suggest that the main benefit of a vaccine is in not getting infected in the first place, because you are worse off once you do.

Replace “infected” with “hospitalized” and your point is valid. As is though, it’s off by several orders of magnitude.
> That said, the statute of limitations means you can often get away with things if they go unreported for long enough.

What I find most interesting in regards to this is that by the time there was any reportable gain (2002 sale), and thus any reason it would even be looked at, the 3 year statute of limitations would be up on the initial prohibited transaction. Which is... interesting.
why do you guys think you can't move the start button? of course you can. you can put it right back in the lower left corner on Win 11 if you want....

I swear people just GO OFF with half the story and assume they have the full story.
I used to do data protection for large enterprises.

I had to explain, at length, to supposedly smart people that there are no time machines.

I've had people state with a straight face that they'll deploy the backup system if they lose some data. As in: afterwards.
>>"And that's not even to mention that the assets in a Roth IRA are essentially worthless to him"

Not at all, he can withdraw and pay a 10% penalty. He probably will never needed to since, I bet, he has other assets and it makes no sense to pay the penalty. Few people in the world get that option. A characteristic of a Roth IRA is that withdraws are tax free. 5 billion plus decades of tax free growth, wow!

The idea of taxes is for everyone to contribute to the common infrastructure we all need to live in society. It's very unfair for someone to acquire such wealth with out contributing to the system that made it happen.

True it was 100% legal but that's a loophole that needs to be reviewed since it's not a one time case. Other high worth individuals have done the same thing so it's not an out of the ordinary case. As it stands now roth ira's have no upper limit.
I knew that guy who auto-forwarded personal mail to his work mail. Then once he went on leave he setup an auto-forward from his work email to his personal email. Problem was he forgot to turn-off his private email forwarded and created a fine infinite loop of forwards that effectively crashed the email server.
> access cannot possibly be revoked instantly

Not according to the comment I was replying to.
I assume at that pricepoint, there's little scope for extensive due diligence. Take the seller at their word and fly under the radar. I've started many small projects over the years in which a lawyer/accountant has had zero involvement. If I were buying at that level, I would expect little more than some code review and historical analytics/revenue info.
I agree that the start menu isn't an issue, but switching between apps can be. I'm personally not a fan of alt-tab because it requires more thought which breaks flow compared to clicking on an icon which is generally in a fixed position.
This thread is essentially a dupe of your other thread here[0]. Schneier doesn't even say anything in this blog post, he just quotes from the file in your other thread.

[0] https://news.ycombinator.com/item?id=27626217