skysight-inc/HackerNews huggingface dataset:
The problem is the same as it is in IT. Risk management and disaster prevention requires money, which people rarely want to spend. Boards for condos are elected, and they try to keep costs low. No one is going to elect someone who says the building should spend millions to prevent a collapse that they feel is theoretical.
> It’s also a problematic argument, because it’s highly regressive, extremely annoying or intrusive in practice (do I swipe my credit card every time I step into a park or call the fire department?

It's a parody of libertarianism, but that's exactly how Ferengi society worked in Star Trek, e.g. https://www.youtube.com/watch?v=bVa8NaYTMIQ, https://www.youtube.com/watch?v=fNCX6InQ3ZQ. There was one five minute scene I remember as a kid where Quark literally was dropping money in a box a couple times a minute to get his questions answered somewhere.
Thanks IT
What drove her to this worldview? I happen to have a friend who has a husband (well, not legally for soon to be obvious reasons) who has a very similar worldview to this.

He doesn't pay taxes. Says he'll pay if he gets pursued by the IRS because it'll be too difficult to fight - but also refuses to participate in fiat currency. (Big on crypto - has the wife do all the fiat handling) Doesn't believe in taxation for the most part. Similar arguments about violence. I didn't really get deep into it - the wife was already pretty out there for a while. (They're both really nice and good people btw - they just have this unusual commitment to their worldview) Interestingly, I think he went even deeper on the views and she decided to reel it back a bit for herself. Suddenly she's not as hyper-capitalist anymore...

It's one of those views that makes ya wonder how you get there and how you decide to go that deep. Admittedly, he's fiendishly rich now thanks to crypto so he can live the fantasy a little bit but it is something that I cannot see someone doing if they weren't rich already.
No, it means what it says. Florida's Constitution has a similar bit* which would have sufficed just fine, by the way.

* http://www.leg.state.fl.us/Statutes/index.cfm?Mode=Constitut...
Internal devices are typically isolation from the world though, unless you have NAT punch a hole through it. It doesn't matter (as much) if the router has security holes if a hacker can't get to it from outside the network. I don't recall hearing of any hacks that have pushed through the ISP's modems, down to the router, and into local devices without ports punched through NAT to the outside world.
This is not simply the policy of a single DA in SF. For example:

Dallas

https://dfw.cbslocal.com/2019/04/11/dallas-county-district-a...

Los Angeles

https://abc7.com/george-gascon-los-angeles-district-attorney...

Seattle

https://www.city-journal.org/seattle-policymakers-untouchabl...
Yes you can. It just come from your lifetime gift tax exemption.

https://smartasset.com/retirement/gift-tax-limits
If we outlaw money no one will rob people don’t you know?
I don't believe you. Give me an example of a company spending 100's of millions as a result of a breach. Companies understand it costs them nothing and if there is a cost it's trivial. When there is no penalty or the fine is a pittance, no company is going to spend 10's to 100's of millions. It makes no business sense first of all and secondly they can blame a foreign actor to mask their own incompetence.
How has anything from Wikileaks massively improved the lot of collective humanity? I genuinely don’t know - it seems like he released a bunch of stuff that revealed bad behavior, but how has that improved anyone’s welfare in a material sense?
Please point out some 10Q/10K filings that go into detail about these enormous expenditures related to security breaches.

The SEC EDGAR database [0] is where you can find public quarterly financial statements and forward guidance from management (which will definitely mention the security breach related expenses), for every US-listed publicly traded company. Good luck!

[0] https://www.sec.gov/edgar/searchedgar/companysearch.html
Tom Wolfe Reflects on the American Idea
RWaaS. It should come with indemnity against other ransomware hackers where your RWaaS provider will either provide you with backups &/or go after (negotiate, hack, or physically assault) the other hackers.
Web sites should adopt the zine business model, and have their readers send a quarter and an sase, or their own zine in trade. And stickers. Gotta have stickers. But I suppose now you have to just pretend to have your friend at Kinko’s run off your copies on the night shift.
Two more things to consider:

- Can you articulate specific reasons to buy anything beyond the default windows defender?

- If anyone went to an actual war with the US, would the source of your antivirus software get even close to top 5000 things you care about at that point...
I have been using this plugin for a while now and it is pretty solid. Most vscode plugins and vim plugins can work together nicely. For LSP you should just use the one built into vscode.
There are some useful ideas here that can be applied, but overall the analogy is deeply flawed.

Most programmers rarely spend the majority of their time on things that they have created before. Instead, most of the energy goes into understanding problems.

Cooking is just not very much like programming. The chef can see exactly what the ingredients are at all times and exactly what the state is. He is making the same dishes night in and night out. If he makes a mistake and overcooks something, it is a significant time waster. Its as much a performance as anything else.

Treating programming as if it were an exercise in extreme efficiency points to a misguided mindset. Like a feature mill with a clueless manager happily spewing out Jira tickets as fast as he can think of them, and some overworked outsourced staff in a sweaty room on the other side of the world cranking out features as quickly as possible with boilerplate-based code generation.
Then it's no longer just your data. Someone else now also has a copy. How do you know they don't leak it or provide it to someone? There's value in hhavingyour data only local with some off-site arrangement.
My unbreakable first love intellectually is psychology. I think this is Civilization and its Discontents vs psych 101 though.

It is not a scientific category of inquiry by itself though the way a theory of nodes does make sense outside of graph theory.
A lot of these companies are actually huge enterprises with dozens if not hundred(s) of cybersecurity consultants and engineers. All of them are CISSPs and GICSPs(I do put my CISSP in the signature when working in those places too though).

I go through security reviews all the time with them, they have so many security processes that you get dizzy and on paper everything looks fine. They create security zones with massive risk reviews, but for some reason those security zones then share subnets with the entire LAN.

They also have a default configuration which makes everything access the standard intranet directory once its deemed secure. Enterprise security tools like Cyberark are deemed more secure than say yubikey HSMs, which may result in root ssh being enabled in a lot of settings. They have system configurations that are done with massive Excel sheets. Their cloud VPCs basically only have one risk profile and once its deemed secure it gets access to things in the intranet. They also vehemently refuse to do threat modelling when designing anything.

These people can tell you so much about the theory of security by heart that it will make you dizzy but then won't actually understand the underlying problems.

And the offenders are always the same, advised by Accenture, Infosys etc.
This is exactly what happened with Champlain Towers. After that assessment, they got a repair estimate and then the board and residents argued with each other about the price of fixing it for 3 years... all the way up to the moment it collapsed.

https://www.washingtonpost.com/investigations/majority-of-fl...
You have to work on the emotional feedback loops. People are suggesting to take pride in what you do. That's a great idea. You get an emotional buzz finishing something you're proud of. If you find yourself frustrated by your work place because you can't do things to the best of your abilities, then move on. That will strangle your ability to work hard and put in 100%.
The battery was dead and bulging open. I powered the paperweight from a power supply.
KeyDB (YC S20) | C++ Developer | Full Time | Open Source | On-Site Toronto (Canada)

KeyDB is a high performance database that pushes the limits of what’s possible with current technology. In this role you will become part of our core dev team and have the opportunity to leave your mark on a project that serves hundreds of thousands of applications. We are currently fully remote due to Covid but will operate out of Toronto.

Link to Job Post: https://www.ycombinator.com/companies/keydb/jobs/6FbseqY3y-c...

If you think you would be a good fit, please send your resume to ben@keydb.dev
I was not rich when I started believing this. My pipeline was Ron Paul then I read everything I could on Mises.org website, a lot of with were the writings of Murray Rothbard. But I listen to a lot of audiobooks from all kinds of authors about philosophy and politics. I do pay taxes, though, out of fear.
Looking for a Developer
Any badass developers here perhaps willing to join me as a co-founder and want to take on Instagram? I’m building a social network community for shoppers and monetization for content creators.
Another serious gap in coverage, and response to the revelations, is any hint of discipline for the FBI agents and prosecutors who spun the tissue of lies, or even questions about why there isn't any.
RMM is absolutely vital to securing systems. This is as ridiculous as suggesting we should just get rid of firewalls because there are vulnerabilities found in them. RMMs are how enterprise scale networks close off every other security hole on a network.

That being said, RMM tools have plenty of examples that they need to beef up their security practices or get replaced.
Have an surprisingly excellent article in the new republic while you're here:

https://newrepublic.com/article/162689/bats-covid-19-lab-lea...
There is that barebone, weird and non-pretentious, especially the feeling that "I don't do this for money and growth!!" of old internet that modern corporate-y site cannot replicate (hell, and I'm just 35)

Also, all those too much flairs and awards and stuffs somehow push me out of Reddit instead of bring me in. Maybe it's fun for younger generation though... I knew Reddit just about 5 years ago, and it feels more fun back then...
“After the Equifax breach, everyone learned that until there are actual repercussions for cyber attacks (like fines and people going to jail for negligence), if you can weather the storm, over the course of a year or two, there is effectively zero impact to your bottom line.”

It’s even worse than just weathering a storm. Lax security has been incentivized. The Equifax CEO, Richard Smith, stepped down shortly after the public became aware of the breach, with a $90m severance package.

https://fortune.com/2017/09/26/equifax-ceo-richard-smith-net...
Microplastic chemicals are bad
please upvote me
I think you've nailed why copilot is so exciting, so irresponsible, yet so not novel. The other comment in this thread who compares it to tab complete gets it too — tab complete is a dialogue as well, as is every "utterance" in the feedback loop between you and your computer.

The first half of this essay I wrote last year also develops the dialogic nature of computing, using some of the ideas from Soviet philosopher Mikhail Bakhtin: https://blog.jse.li/posts/software/
One could hope but I doubt it. CFO's gonna CFO and it's "cheaper" to outsource IT. I had one of these vendors really pushing me to "take a call" or "let them show me how they could cut costs". It was ALL about the costs. And I eventually called the CEO and said we would consider it if the company would take out a $100M bond that we could call on to repair any damage that occurred as a result of their managing our IT systems. He thought that was ridiculous of course and thought poorly of me. Since that time at least two of his customers have been the victims of breaches that IT either directly facilitated or indirectly made possible by providing additional attack surface that was required for their business to work.

But not every person who has executive oversight of operations thinks like I do, and all of them are represented in the company's finances as a 'cost center' that is second only to Payroll in terms of how juicy a 'cost reduction' target it presents.

So when the going gets tough, the company cuts back its IT budget.
I went to a GnuRadio conference a few years ago where a lot of presentations were on directional tracking of signals. One huge issue is that truckers are using GPS jammers that plug into the cigarette lighter socket to block the truck tracking systems from knowing that they are driving outside of their legal time limits. One trucker has left his jammer plugged in for a day or two. The nearby port was entirely shutdown until authorities found the jammer because the massive ships couldn't navigate the tight quarters of the port without GPS. One project was using cameras along with multiple antennas to attempt to track who was driving past a particular overpass with a jammer turned on. A cigarette lighter socket has the potential to put out tens of watts out RF power which can almost certainly jam anyone that can't use the military anti-jam GPS channels.
> it would be Apple or Google Play codes

I don't think Apple or Google credits would be effective for large-scale ransomware. Not anonymous, could be stopped by a slightly-motivated central authority. It works for preying on individuals, however, because they don't have enough clout to force the issue.
Literally the first company I pulled up, Capital One, has this in the 2020 10-K:

>During the year ended December 31, 2020, we incurred $66 million of incremental expenses related to the remediation of and response to the Cybersecurity Incident, offset by $39 million of insurance recoveries. To date, we have incurred $138 million of incremental expenses, offset by $73 million of insurance recoveries pursuant to the cyber risk insurance coverage we carry. These expenses mainly consist of customer notifications, credit monitoring, technology costs, and professional and legal support.

Go look at Equifax's 2018 10-K and it has pages upon pages talking about the impact, including:

>
During the year ended December 31, 2018, the Company recorded $401.2 million of pre-tax expenses related to the 2017 cybersecurity incident and insurance recoveries of $75.0 million for net expenses of $326.2 million. Costs related to the 2017 cybersecurity incident are defined as incremental costs to transform our information technology infrastructure and data security; legal fees and professional services costs to investigate the 2017 cybersecurity incident and respond to legal, government and regulatory claims; as well as costs to provide the free product and related support to the consumer.

For Equifax, there is also an additional $112 million (net, after insurance recovery) in breach-related expenditures in the 2017 10-K.
Is an RSS full article extractor hard to implement? I'm using elfeed in Emacs and I would love to have this functionality.
It's a repackaging of the trivium method (inputs, processing, outputs) where order of operations is key to success in manifesting the desired and ideal result. It applies to nearly all subjects.
It is almost proof we can't collectively think statistically.

I get it at a pretty deep level individually but even knowing this I make enormous mistakes.
The consensus between experts is that it will create a fire hurricane.
Why not? What's to prevent e.g. the U.S. Government from outlawing the use of exchanges, and/or outlawing the payment of cryptocurrency ransoms, just as it forbids globally the payment of bribes?
Here's a much better article that lays out the argument I'm trying to make pretty much exactly:

"The Case Against the Covid-19 Lab Leak Theory":

https://newrepublic.com/article/162689/bats-covid-19-lab-lea...
But if you have massive corruption, do you really need the fires?
I've never understood this brain size correlates with intelligence idea. I keep seeing it and it just makes me think "what? really? still?"

There's dozens of easy non-intelligence hypothesis that can be readily tested: Maybe the skull was larger because it helped balance the weight better for swinging through trees, maybe it was more protective against impact. We can sit around and make up lots of stories to explain this.

Besides, human brains are about the same weight as walruses. If size = intelligence, I'd expect to be chatting with walruses on the phone, working with them at the office... Or what about elephants? Their brains are 4 times bigger!

There's no way it makes sense upon any cursory analysis. It's just a carryover from phrenology.
Petite-Vue – 5kb subset of Vue optimized for progressive enhancement
You’re missing the “While the executives walk away and do it somewhere else”.
i fail to see any medical system collapse happening anywhere these days and lockdowns have hardly shown any effectiveness as people still gather anyway and nothing is really enforced. Look at LA lockdowns and good luck trying to see where they started and ended if you look at the number of infections over time.
which-key.nvim too, plus more features. Really useful for remembering/learning new plugin mappings.

https://github.com/folke/which-key.nvim
See: https://news.ycombinator.com/item?id=27719281
He says he's going to write his own mail server. I use SQLite all the time, and I'm going to try Fossil when I get a bit of time to dig into it. I will definitely give his mail system a look when it's out.
please show me your sources.
I remember in the 1990s reading about expeditions to try to confirm the natural reservoir of Ebola. Apparently we're still trying to figure it out [0, 1]. Covid is subtler and thus harder to track. Definitive proof of origin seems unlikely to arrive quickly or even at all, regardless of who is or isn't acting in good faith.

[0] https://www.cdc.gov/ncezid/stories-features/global-stories/e...

[1] https://www.nature.com/articles/s41598-020-71226-0
No, RMM is the magic beans someone wants you to trade your cows for. All OS and networking vendors have better tools, but people pay for RMMs because they make a lot of promises and charge less money. People who use them will invariably get burned.
She was at the BSL4 lab. This is different than the BSL2 lab that was speculated to have leaked covid.
>And restricting speech is not speech itself and does not deserve protection, anymore than me gagging your mouth is an expression of the freedom of speech.

Social media companies don't restrict your speech, because you were never entitled to use their services in the first place. If you compel them to distribute your message, you are violating their rights. You don't even seem to understand the issue at hand here.

As for the rest of your vacuous comment, it's like a high school sophomore trying to appear deep.
NYC is so lucky to have several major parks with relatively many trees, and to keep them from being built over for so long.

Not real forests, though.
>Dude, if you look at Equifaxes and Solarwinds EBITDA/earnings statements following their respective breaches, you will clearly see that there has been no major impact to their bottom line.

I'm looking at Equifax's 2018 statements right now. With Operating Revenue of $3.4 billion and profits of $850 million, they had $400 million of expenses related to the breach. "No major impact" my ass.
Your intuition is correct: raising and teaching children is a difficult skill to master, much easier said than done.

But if you have patience and determination the difficulties will be manageable. The love one feels for ones child is a deep well to draw from during frustrating or difficult times.
I see what you’re getting at, but wouldn’t the same pressure to reduce head size also inhibit the heads from getting big in the first place?
I don't have a source to link, but I've also been told this by someone who works at Google. Is copy-pasting stuff verbatim from SO really that much of a thing? I use SO plenty, but have never considered taking anything verbatim.
I'm pretty sure scrolling through social media raises my blood pressure.
> Why is it more reasonable to believe that ability in different cognitive activities can be abstracted into a single component called "intelligence" than it is to believe that performance in unrelated cognitive tasks would be unrelated?

Presumably because both hypotheses can be tested and one of them came out ahead?
I saw a really thin building in the opening credits of a movie.

I found it was 432 Park Avenue.

Wow, even thinner than a thin cigarette...

https://en.wikipedia.org/wiki/432_Park_Avenue
My mind went there as well. Say I'm an affluent oligarch shorting major companies. I'd paying the ransom group to massively attack the company or various companies. Then cash out during the chaos.
Digital Ad Opportunities and Capital Spur Investor Interest in Ad Tech
It's certainly fair to balance/decide between performance and local reasoning. But one should be clear then that they give up one for the other and not claim that both is possible. Because from my understanding from what you said, local reasoning isn't possible anymore, even though reasoning is still easier compared to when you don't have struct semantics. But that's still two different things.
My bad. I took “accurate” to mean “correct from my perspective” and “inadequate” to mean “incorrect from my perspective.”

Clearly you meant something else, I apologize.
The interesting part about last year's incidents of solarwinds, fireeye and fortinet is that there's a switch away from actually targeting the hosts after the first line of defense.

Redteams / hackers now target the infastructure, because it's way easier and they're more outdated in regards of code, stability and used libraries.

Most enterprise-grade VPN solutions still use OpenSSL from decades ago, and most of their fixes (even if they react to CVEs) are always too late.

As SOCs need VPN access because they are usually not on-site, especially at larger corporations...the result is when you exploit the VPN gateway, you are the new administrator because you have a large time window until the SOC team arrives on-site. These couple hours are usually everything you need as a time window to raid the place, install and run ransomware, and clean up afterwards.

From a cybersec perspective I cannot even begin to write how stupid it is to put literally all your company's value in the hands of a single security company - which is legally not responsible for anything by contract. Security through obscurity never worked, why should it do in this case?

Last year showed that we desperately need an open source OpenVPN based graphical and scalable alternative that uses a standard TOTP based token generation mechanism and not some proprietary crap for authentication.
Exactly. And clearly there was pressure to downsize heads! But the tradeoff was that we lost brains, and until 40k years ago, that wasn't worth it.

But with the advent of proto-civilization, the calculus changed...
Sounds like work-from-home readjustment... I wonder how the "overpriced cities" will readjust. Will everyone just move back, or will new employees take over?

Must be a good time to be a real estate agent.
Two fields which claim some degree of scientific approach which are probably (IMO) worse than psychology: political science and anthropology.

I of course exempt my own field, linguistics, which is the most scientific of all. (Yes, that is a joke.)