skysight-inc/HackerNews huggingface dataset:
Oddly explosive headline, considering:

> It is not clear what specific companies have been affected - a Kaseya representative contacted by the BBC declined to give details.

So why "colossal"?

> "This is a colossal and devastating supply chain attack," Huntress Labs' senior security researcher John Hammond said in an email to Reuters news agency.

The BBC is going with "colossal" in their headline simply because the guy who discovered the incident said so?
I recall they provided multiple payment options back when crypto was too hard for victims to obtain / figure out.

e.g. this 2013 article from a quick web search, where the payment method dropdown contains Bitcoin and MoneyPak payment cards: https://arstechnica.com/information-technology/2013/10/youre...
I'm not sure which number to use, but Capital One had either 2.4 or 5 Billion in income... .066 billion on cybersecurity remediation isn't an existential threat.
Firefox dropping RSS is one of their many stupid decisions (it's not like RSS changes a lot and takes a lot of maintenance)... I'm seriously thinking about switching to Otter (installed it today)
So you want to pay higher taxes? You are in the minority.
I think it's a trade-off. By enforcing type-checking you now prevent people from altering the language in a way that could be both helpful and still safe even when not type-checking. (just because code doesn't type-check doesn't mean it will or could fail)
No, corporate consolidation in America isn’t just a coincidence but it is irrelevant to this discussion. Comcast only bought NBCUniversal in 2009.

Roger Ailes, longtime chairman of Fox News, was president of CNBC in the early nineties and is credited with making the network successful. I don’t think it’s possible to watch CNBC hosts (and guests) praise Bush-era economic policies for a decade and come away thinking they’re Democratic mouthpieces.
What a lovely treat — and how fascinating to learn about the hidden role that DO—178B has played in this most ubiquitous of programs!
>Income taxes are no more voluntary than consumption taxes.

Yes, that was my point. Replacing income taxes with corporate and consumption taxes in a voluntary taxation system doesn't make sense, as there's no incentive to volunteer to pay any of that.

>130 countries have already backed a global corporation tax rate.

130 governments may have backed a global corporation tax rate, but that's still coercion of taxes by threat of violence. No corporations have voluntarily agreed to anything of the sort.

>A gallon of gas is $1.8 in Malaysia, $3.5 in America, and over $8 in the Netherlands.

Those prices are set by gas companies and taxation, consumers didn't agree to those prices, and they certainly didn't agree to the taxes. I never signed a contract agreeing to gas for $3.50 a gallon.

>The good/service one is purchasing is the incentive itself.

But the government isn't providing either, a private business is. And as the tax is voluntary, that business has no incentive to deny customers who opt out because those taxes doesn't affect revenue. Rather, any business that would deny service for that reason would find itself quickly devoid of customers.

Give people a choice, and they'll only pay for what benefits them personally. People won't pay for schools to educate other people's children, or schools that teach a curriculum with which they disagree. They won't pay for libraries whose books they don't read, or for parks, because homeless people hang out there. People will just buy smoke detectors and not fund the fire department. People won't fund the police, they'll just buy insurance or keep a gun under their pillow. They won't pay to fix the roads unless they're inconvenienced by a pothole. And welfare and other social programs would just vanish altogether. Most people would refuse to pay any taxes at all to a government run by a political party they didn't vote for.

There's a reason taxes are collected at the point of a gun - you can't trust public altruism to fund a modern state.
> Within the tech industry, the correct proportion of minorities should be representative of your hiring pool

How do you know all your hiring pools should produce evenly like that? There’s a lot of factors (cultural, genetic) that need to be understood. It would be very strange for interest in any industry to be even across racial groups.
Yes, I can see from your comment that you are interested in public health.

The over focus on origin is clearly a proxy for something else.
An annoying and more complicated (but perhaps not less accurate) heuristic is that the revenue of the company is related to the sum of prior work. For a product company, the number of features drives use more than the rate of new features being added.

Under that model taken as-is there are some interesting features:

- The company could fire all the engineers and coast if the product is "done". Mostly reasonable, though products are never done.

- More "solve for the equilibrium", engineers are paid for the present value of their contributions rather than some proportion of current revenues. Depends on the company either being well-funded, paying in stock, or being able to take on debt. Again, rings true-ish? Hard to measure so obviously expected present value will differ greatly from the actual value.
I understand you might 'fear' microplastic, but there's no reason to. Cow like to eat it for instance -

Bacteria in cow’s stomach can break down plastic -https://www.theguardian.com/environment/2021/jul/02/study-su...

Out there theory, extra fibre in our diets is good, it seems to reduce cancer. Inert fibre like micro plastics should be good.

The only problem is in reality we are getting none. We possibly should introduce it. I'm not saying to actually do it yet. But it should be studied at least.
Right.

One other thing that people say is that they will have kids and leave part of themselves. Ha. Ha, I say.

Your children have half, or .5, of your genetic code. Grandchildren have 1/4 or .25. Great-grandchildren have .125 of your DNA. You see where this is going.

In 15 generations, or 450 years from now in 2471 AD(or, 450 years ago is 1571 AD), your DNA in your 15-great-grandchild will be 0.0030517578125%. Your 30th progeny in 900 years from now in 2921 AD (or in 1121 AD), your DNA in your 30-great-grandchildren will be 0.00000009313225746155%.

Of course, this is assuming that all of your line does not go extinct, which is a distinct possibility. You're not Genghis Khan, after all.
I’d love it if Dr Hipp created a client/server db. He could call it SQLMajor instead of SQLite :)
This is unreal. Evan is a true visionary. My money is on Vue long-term over the other popular frameworks. Most JavaScript developers are probably fond of most frameworks, but I like them all for different reasons. Vue is the one I personally enjoy the most.

This is an exciting. It reminds me of when he released Vite.
There is also allegedly a reciprocal agreement to allow extradition and prosecution for cyber attacks. So we'll see if that comes to pass or if it's just a little fake glad handing until you actually try to take them up on it.
If you're not going to argue with his specific points about Chavez, then you shouldn't, in my opinion, throw it out for the mere purposes of smear-by-association.

In other threads, I've seen people attack him for his parents, which also is really wrong, both in terms of blaming him for his parents' actions and in terms of letting people make wrong assumptions about what they were.

In order to find out who Boudin is, I read the Wikipedia page at:

https://en.wikipedia.org/wiki/Chesa_Boudin

I can see how people can disagree with some of the things he's done and blame him for various things.

But it's also clear from reading it that he's been honestly trying to reform things, and many of the things he's done don't at all require you to be some sort of extremist, Marxist, whatever, to think they are reasonable. Some of the reforms have been echoed in other places recently, too.
Maybe I used legos different than everyone else as a child, but this would have ruined the experience for me. I don't a device to tell me what to build I want to imagine the things myself.

From a technology perspective its very cool, but it doesn't appeal to my childhood love of legos
The real lesson is they aren't a software company.
"everywhere" = "in the USA"...
Bizarre, listening to the episode and then open this here!
Reeder and net news wire are both pretty good imho
Only $182k for a 2br condo. What a steal.
I haven't played the game in years but the more obvious affect would be in ingress as fields come down as captured assets decay or are taken over. Ingress fields can be transcontinental.
Have you tried taking a complete set and laying it all out for view, then seeing if it matches the set correctly?

I don’t have a single complete set anymore … but I do have happy nieces, which I vastly prefer :)
I don't think so. Here's an example: https://docs.racket-lang.org/ts-guide/typed-untyped-interact...

What that means is: I might call a function that tells me it will give me type X but instead it blows up. It's good that it blows up btw - that is the best thing a language with gradual typing can do for these cases. But it's not something I would be satisfied with.

Now, you can say that "blowing up" is part of any function anyways, but then my response would be that this severely hurts my ability to reason about how code will behave when run, so I'm giving up a huge benefit of a static type-system in general.
Electric vehicles are the future for everyone – except disabled people
Documents about Trump were and are irrelevant because we have ironclad proof, in volume, that no amount of what would for others be damning information has any effect on Trump support.

The only way we have discovered to counter him is to get more of the people not committed to him to come to the polls, or to vote by mail.

Thus, we see efforts in numerous states to curb access to polls. Successful efforts.
> They are not designed against adversarial attacks

> Now, this does leave a somewhat fragile system

Thank you for reiterating my point. If such a system is not designed to stop adversarial attacks, and is a fragile system, something needs to change.

I appreciate you trying to explain why it's fragile, but it doesn't negate the risk.
Grants – National Assistance Network
I wonder if concentrating solar cells should have similar nomenclature.
There's no case, just facts. Gates is helping Monsanto. Monsanto is super evil (links above show that). Parent should add that stuff to his consideration for BG.
I do not choose this. How can I opt-out? I want to return to a law abiding society.
To add on to this. Code generators are only good if you don’t have to maintain the generated code and if they can be relied on to produce good code. Copilot fails both of these tests: when I use it to generate some code, I can’t commit only the comment and run copilot in CI, because the outputs are non-deterministic. Additionally, I have to read the code it generates and verify that it handles the edge-cases correctly: and I have to do this review without having recently gone through the mental work of thinking through the implementation of a spec.
But the risks to everyone won't go up. Before anyone gets the vaccine, the risks of covid are relatively low. That risk won't go up. It may not go down, but it won't go up.
The Flavian Amphitheater is already ruined. It has been a ruin for a very long time.
Interestingly, the DCI-P3 demo is working in Chrome on Mac now. (It didn't used to-- Safari/Webkit was the only browser that handled DCI-P3 images on Mac for a while.)
Anecdotal too, but I've been QA lead on a team for a 9 figure project in aviation, concerns and complexity very significant, and it was very successful.
Kuwait is not really popular to headquarter your company (the UAE is), and they have lots of oil. I think it'll be hard to convince them otherwise.
> You disabled that redundancy to prevent accidents

Damn, this sounds like a huge risk. Kinda like the risk I mentioned in my first comment.
>He will go in every morning and tweak the routes that the AI designs so that they can finish their 10 hour route in 8 hours, he still pays them for the full 10.

Amazon definitely wouldn't like to optimize that away.
do that too. Tests for new features also include regression testing, as does integration tests and automation CI/CD tests.

In our working agile environments, you know the team's velocity. Managers know the team's velocity. Points per story include QA work. If they want something faster in this sprint, something else has to be taken out. Firm but fair, and it works very well.
I remember a car sinking (sink hole) at a gas station near my home in Florida... but in this case, sink holes were not the problem... and the owner knew about structural and draining problems (they just did nothing about it)
Sure, people should double check the code I don’t disagree, but a proprietary code suggestion tool shouldn’t be suggesting licensed code at all; let alone GPLd code unless they can somehow verify the code base they are suggesting it become part of is GPL. That is the problem here and I don’t see how you can disagree with that.
Cities tend to devote a large portion of their real estate to cars. Get rid of that and you have plenty of room for trees.
Interested to hear what someone else knows about this.

I would have expected move like this to aim to appease or cause conflict with the parties (gov & Murdoch) from the previous legislation. But I don’t immediately see it.

This is a list of some of the publications under CPA: https://www.regionalmediaconnect.com.au/print/
But... one sometimes has to ask -whether- it would have happened if they didn't sell it off.

I feel like any deal involving IBM at that level would involve some absurd amount of bureaucracy, even back then.
Iphone is a fraction of the price, among other reasons.
I think there is a social reason. It only takes a small number of people acting destructively to create chaos, even if the vast majority of people are law abiding. When society refuses to deal with people acting destructively, that is a social reason for the chaos we are witnessing.
Also the cost of understanding the problem more fully. And the cost of discovering a better way to do it.
Roughly 10% of revenue is something, but not that big of a deal, especially since their overall revenue is up.

Don’t you think stronger consequences than that should happen when a company unintentionally discloses tens of millions of people’s personally identifiable information that has been collected without any particularly explicit permission given by those people?

Credit agencies hold a special place in the US economy, and when they messed up this badly, the team threat of some near-going-out-of-business level consequences seem like the only way to truly get other companies to take this seriously. Especially considering that there are other credit agencies in the country - they don’t have a monopoly on this.
Both are correct. Most humans are honorable, but the damage done by the few who are not is so disproportionate in scale to their numerical strength that a society is lost if it does not aggressively bring its worst impulses to heel.
I use mdbook as my personal wiki
Hmm Right that makes sense but you have to give some width/height to the container right?

I guess you can set it something absurdly large.
Genuine question: are there any concrete proofs that the intervention reduced terrorism? Not that their absence would prove the opposite of course, but do we have any hard data or something?
I'd be willing to wager that most of the junkies and mentally disturbed people looting stores in SF don't vote at all.
> The difficulty with TSP is that you have to return to the start

That is not the difficulty with TSP. The problem doesn't get any easier if you can end wherever you please.
I think the costs of taking it seriously before the disaster and after the disaster would be similar. The difference is that before the disaster, the budget seems discretionary and afterwords feels mandatory. Also, after the disaster, many people are dead.

I'd say we could trade away the feeling that we could spend the money elsewhere for the lives of all the people who were killed.
I own a Synology, but I'm still not opening it up to the internet. I use a Wireguard VPN on a RPI to access it.

It's a minor inconvenience, but I can sleep sound at night knowing my NAS isn't being wiped by a zero day.
You seem to be assuming that in order to have reliable infrastructure, we have to pay for all the things we pay for now, plus reliable infrastructure.

I'd like to pay lower taxes, and have them spent on different things. Such as reliable infrastructure instead of 20-year wars. (And a pony.)
Rulers always do this.

In the case of Western European nobility, they fill their castles with ancestral portraits to justify their reign as a continuation from back in time.

In China, rulers seek "the mandate of heaven", supernatural signs, to legitimize their rule. What's interesting is that Xi has had multiple natural signs against him during the 2020 floods, including water reaching the big buddha and an ancient bridge failing.

https://www.thoughtco.com/the-mandate-of-heaven-195113

In Nazi Germany, they emphasized racial purity to such an extent that maidens had to prove their lineage before marriage - some women said it was the hardest thing they ever did. Because Turkey was an ally of Germany, it was decreed they were Aryan.

Ironically, Taiwan maintains traditional Chinese culture, no longer the mainland, so Taiwan must be destroyed.
Trump saying something should have no bearing on whether it is true or whether it deserves consideration by the public. I see this as the media over-reacting to Trump (and to Tom Cotton) and now they have egg on their faces.
California real estate only goes up. Once you have bought it, do not sell it, ever.
No, of course not. However, they could easily be used to exchange for access to data exfiltrated in the post exploitation phase. Or just money orders held in escrow a'la 1990's Ebay.

The workflow is:

Target->Crack->Retrieve->Store->Sell on hackforums

Maybe there is a way to automate this old school method, but nobody developed it because why bother.
Hurting who?
God that website is just hot garbage now.
You shouldn’t attack someone for their parents but how they react to their parents. Boudin has always claimed that his murderer parents are the ones who were somehow wronged. Whereas other children of much worse parents, like Adolf Eichmann, have fully repudiated the acts of their parents.
Friend, this park is awesome. It's got loads of env features. Meadow, forest, beach, the pond trail rocks. And Carkeek is amazing too. I love parks - it's why I wanted another one :)
"Code other people who are not me have written and frameworks I didn't pick"

(I jest. A bit cynical but that's often how it comes out in practice).
Ozuna – Este Loko (Video Oficial)
You said in another comment (https://news.ycombinator.com/item?id=27718636) that you don't oppose his reforms. I really can't understand your viewpoint at all.
If you compare year over year, many of the things they attribute to the breach are actually just IT/overhead costs they were able to shift to a loss. If you look at their EBITDA, everything is essentially static. In the grand scheme of things, it really isn't a huge impact to them.

Lets say you are a CEO: If you underspend on technology/security by ~50-100m/year, for 5 or 10 years... then have a bad breach, which costs you 400m, what do you get?

A: A Ferrari, because you saved the company 500m dollars and got a cyber insurer to pay for your technology/security program.

I'm not even joking you, I have been in meetings with a CEO, CIO and CISO, where they literally joked around that they should have more breaches because they actually made money on the intrusion and that they were able to upgrade a bunch of stuff they were planning on upgrading next year anyways.
I'm trying to reply but the website makes me wait between comments, probably because I have a new account.

There are lots of ways to raise money that don't involve throwing people in jail or confiscating their property for not paying. Pay per service is one, but not the only one. One should be able to cancel their subscription to government services and not have to pay. The Amish already do this for payroll taxes, do they are exempt because they have a mutual aid society that takes care of their medical and retirement needs.

We already live under a regressive tax system, especially for local governments which rely on sales and property taxes. Our current tax system is not convenient, and we pay a lot for poor service.

It would be silly to make a fuss over someone using a park if they don't pay taxes, but it could be dealt with like any other trespassing. My local park is paid for by the HOA, not the government, and it's not that big of a deal. We already have a system in place for paying for the roads. We pay the gas tax, and we have a system where you have to have a driver's license and insurance, and in many places you have to pay property taxes and/or sales tax on your car, and pay registration fees. It would be a simple matter to suspend someone's license for not paying taxes. Or you could decide to allow non-tax-payers to drive as long as they pay the gas tax when they fuel up.

I'm not saying that the government shouldn't necessarily do those things, but people should have the option to get their needs met by different organizations and not have to pay if they wish. For social needs like healthcare, education, welfare, that is very easy to do, just like the Amish do. Subscribe to a different organization that takes care of those things, and they will probably have a tithe or fee requirement, and rules, and that's fine as long as the person agrees to it. The only problem with the government system we have now is that we have no way of consenting or not consenting, and if we disobey, even if we are being peaceful and aren't violating anyone else's rights, we can be thrown in jail or have our property confiscated. It would really be quite simple to fix the flaw in the system. The only reason we haven't is because we're going off of a system made by people who were thinking outside of the box by rejecting monarchy. We then rejected slavery, gave rights to women, etc. We are still figuring out how to be moral.
Look I'm not anti vaxer here but to Bret's points, entries into the physician's VAERS database as well as the UK's equivalent already show it's the deadliest vaccine in history. Even v chief of medicine at Baylor is warning the same thing that the membrane spike proteins (and lipid nano particles) are unexpectedly breaking off, circulating, and triggering immune reactions throughout the body. The fact groups about adverse reactions have been removed from FB and that data is not being collected in any systemic way by public health authorities, it's not a stretch to conclude there might be problems with the vaccine and our approach to monitoring.
Another good introduction to wide gamut and HDR is this talk about HDR in Krita from LGM 2019: https://www.youtube.com/watch?v=5MrocfwJd4k

There, the main focus is on very bright shades (whiter than white), but highly saturated colors are in scope as well.

I definitely appreciate the work to enable this, but honestly remain skeptical how important it is. I mean, sRGB #FF0000 is a pretty bright red. When do you really need more than that?
Speaking as someone who only dabbles in HTML rarely, and JavaScript even more rarely, it's not so irrational to think I could ask my computer, maybe even using voice, to generate a simple HTML interface for something I'm working on.

Certainly a lot less tedious than typing a bunch of angle brackets and trying to recall which tag is used for text input fields.
Nothing. Also nothing prevents the US government from outlawing drugs. Likely with the same effectiveness.

BTW are most of these hackers transferring to fiat through U.S. exchanges? I can't imagine that's the case but maybe it is.