skysight-inc/HackerNews huggingface dataset:
This wasn't a typical "someone clicked a link they shouldn't have" attack.

There was a vulnerability in the RMM server software that allowed remote code execution. The attackers used the RCE to push the ransomware out to all of the endpoints connected to the RMM server.

The attack is still being researched but it looks like there were two vulnerabilities. The first was an authentication bypass that allowed the attacker to authenticate as if it were an authorised client. That was used to upload the payload. There was as a RCE vulnerability that allowed the attacker to executed the uploaded file. The payload itself modified the SQL database of the RMM software to create a task on the remote endpoints that executed the ransomware.
WaPo is propaganda for Bezos, but even then he tries to pretend that there is some editorial independence.

WaPo would only be pro-Democrats as long as it benefited Bezos, or if individual journalists leaned that way.

I really doubt there is a quid pro quo of a $10bn contract for what limited sway Bezos has over WaPo.

If anything, the fact that Oracle did not receive the original contract shows how limited political contributions were in affecting the outcome of this contract. Larry Ellison was a big financier of the last administration.
Linux isn't an OS and every one of them relies on it for mission-critical infrastructure.
Lots to unpack here, and I'm a huge fan of memory safe languages, but honestly it's quite misguided to assume that security can ever be number 1;

Security isn't boolean, and the closer to "security = 1" you get the more non-functional the system.

It's always going to be a tradeoff between doing useful things and being secure. I would agree that we need to shift the bar closer to 1, but absolute security is impossible without the world closing down.

w.r.t unsafe languages: it's not even possible to instrument and operate hardware in a "safe" way, even rust which is rather low level needs to be wrapped in unsafe in order to interact with hardware.

I believe we need to be better at: Detection, mitigation, response -- all things traditionally sysadmins dealt with.

But our industry assumes that sysadmins need not apply.
How and When UAT Is Performed in Agile Methodology?
Stripe is the first thing that comes to mind
As climate warms, a rearrangement of world’s plant life looms
Tesla’s Fall from Grace in China
It's a mechanism that uses market to let the economy and its participants know what actual costs of co2 emissions are instead letting them operate on assumption that they cost zero.

I wouldn't mind if sugar manufacturers would have to buy 'sugar credits' for emitting sugar into the human population.
yep pretty much. I'm saddened by this, and I wonder how many people are accepting of HN take and not DYOR enough to realise there's real opportunity there. I mean there are kids becoming mil/billionaires on blockchain dApps overnight, building real value. But HN is dead set on ignoring them.
Tell HN: Instead of bitching about SF just move to Texas and STFU
You really are not welcome.
How to build a small town in Texas
I agree, and the next step would be to argue if there's _any_ options that pass arrosenberg's 'bad' filter, and I feel it gets awkward from there: I can't tell you what passes your filter. I respect your opinion and often say as much myself, but the argumentation is weak in several areas
>way to stay classy greenpeace.

That's a legitimate strategy by activist organizations.

>there’s the PETA Principle: the more controversial something is, the more it gets talked about.

>A rape that obviously happened? Shove it in people’s face and they’ll admit it’s an outrage, just as they’ll admit factory farming is an outrage. But they’re not going to talk about it much. There are a zillion outrages every day, you’re going to need more than that to draw people out of their shells.

https://slatestarcodex.com/2014/12/17/the-toxoplasma-of-rage...
Eden Health (https://www.edenhealth.com/) | Engineering Manager | Full-Time | REMOTE (US only)

Eden Health is a nationally recognized medical practice on a mission to create a world where every person has a relationship with a trusted healthcare provider. Working with employers across the country, Eden Health offers employees 24/7 digital care, same-day in-person primary care, mental health services, physical therapy, and benefits navigation. The Eden Health team is driven by a patient-centric approach, delivering relationship-based collaborative care. With this model, our clients have healthier workforces, increased productivity, and reduced healthcare costs. We are committed to diversity, equity, and integrity, and our teams reflect this. Our hope at Eden Health is to create an environment where each person can do the best and most important work in their careers.

*We’re language agnostic however, our tech stack is: React (React Native) on Typescript, Python, Clojure, Postgres, AWS

Full JD: https://jobs.lever.co/edenhealth/707a1a1e-7f74-41f1-8826-f83...

If interested, apply directly via the JD linked above or reach out to Lana Herzig (Senior Talent Partner, Technical) at lherzig at edenhealth.com
Did you consider that there's a reason why it's talked about a lot?
Yes, and in that case I’d like it of Copilot erased/replaced any string over (say) 15 or 20 characters unless they are [0..9]+.

Obviously any string is a potential number in some encoding so the only encoding to exclude would be decimal.
I didn't say you're completely wrong, either. :) (In fact, I stressed that both equations are of elliptic type, so solutions might look similar.)

One can make a similar heuristic argument, though, as to why the surface you observed should follow the minimal-surface equation.

EDIT, as you've updated your comment:

> Isn't Poisson's equation basically describing a minimal surface for small z?

Small changes in z, I think.
It reminds me of the thread about the Quake 3 bots, who left alone for several years, figured out that the best approach was to not kill each other.

https://i.imgur.com/dx7sVXj.jpg
We actually do have a "Tell HN" I posted an hour or so again. Looks like it's on the front page now! :)

https://news.ycombinator.com/item?id=27750298

Glad you appreciate this; I think it's an important problem to solve!
Where does this myth that Bezos is giant Democratic Party supporter come from? Amazon and it’s subsidiaries donate to both major political parties and many members of the Democratic Party are very vocally against Bezos.
Even places that use Adobe's InDesign for typesetting tend to work from Word files. I asked because I'm wondering if that has started to change.
> TPM 2.0 module requirement of Windows 11 acting as hardware-level DRM

well, seems like someone didn't understand, what a TPM module can actually do and what it's used for.
This assessment can go both ways. The fact that he would think these "brags" are going to make him look good shows how bad the intentions here are.

Whether or not these are things he has done, they are things he (and the company) are trying to do.
...even worse.
I wonder what impact Graviton had on this decision. Seems like self designed chips would be attractive from a cyber defense perspective.
80% of people simply use Windows and don't complain that much. The other 10%+ are simply brainwashed by Apple marketing. If somebody believes there is another fitting explanation, I'd like to hear it.
Unless its on second or later downs also too.
I think that is red hat specific. I have seen it on fedora but not arch or gentoo.
I don't think that the mere existence of a "working group" or grant funded research positions for verifying rustc or a subset thereof is the same as having a verified compiler. That's certainly not a strong argument to against using rustc for safety over one of the many verified compilers that actually exist. At least, I didn't see in the "rustbelt" list of papers anything which appeared to indicate that a verified compiler or language subset do in fact exist. Furthermore, that the proposed patches rely on the nightly compiler and a special variant of rust's core, which can only be enforced by special feature tags seems to suggest that Rust-Linux is not being written in this hypothetical, future compiler.
The examples are about heat transfer, because it is an intuitive concept for most people, but as the article explains Poisson's Equation and these methods can be applied to a broad range of problems.
It sounds like there must be a standard of privacy for certain apps.

I work with UL a lot and they have lists of standards and specifications that help us meet the safety requirements of electronic devices. These standards are then used to meet the customers demand for a high level of safety. Customers in my field do not even consider products that don’t have UL. This strategy is good to better inform the consumer while standards are kept by an independent firm whose incentives are aligned to maintain their credibility.

I am not deep in the software field but I can imagine that groups like the EFF or similar orgs have a standard. The issue is that the consumers of these products don’t seem to care about this outside of the privacy advocate world.
i dont even understand the question you're making tbh.
Of course, you may always ask anything. But I won't promise to always answer.

In this case the answer is that I live in Drammen.

May I ask why you want to know, and what you will do with this information?
I'd just like to point out that enormous numbers of people doing basic, physical, labor today would be considered highly educated and worldly were they dropped into anywhere in the world up to about the end of the 15th century. Worse, many of the facts they just know from pre-school or watching Sesame Street would be considered heretical and dangerous and land them in trouble in short order.

Brainy is completely relative.
I can appreciate there is a huge amount of skill and knowledge making a knife/bonsai but I do believe there is more required of both such attributes to be an astrophysicist.
Wind resistance should slow down the larger person more.
This is a common mistake w/r/t Proof of Work. It doesn't prevent Sybil attacks. The Bitcoin whitepaper performs slight of hand to say "instead of identities, we'll use CPUs" which are obviously what Sybil attacks are in the first place. One person can own lots of CPUs... (Thus mining operations.)

What it does do is make Sybilers larger and larger shareholders in the network to make it so that the more you Sybil the network the less you'd want to try to damage it.
Re: downvotes: is there good reason to believe this interpretation is definitely wrong? I wasn't able to find any details on where this number came from, and while I'd like to give Israel's public health officials enough credit that they wouldn't make this mistake, I'm hesitant to actually do that without more than a few mystery meat "percent effectiveness" numbers.
I also concur on the bad take re: Lynch. He's definitely an acquired taste, but reading beyond the "text" (screen?) a bit into his creative process has helped me appreciate his works and inspires my own creativity.
Seems like a case of local maximum.

Tho it is interesting how people in China related the broken rules of the game (that lead the ai to commit suicide) to the broken rules of their lives in a crushingly oppressive authoritarian nation.
About one third of the country did not participate in the election. Of the two third that did about 40% did not vote for the party that is in power. So it is oversold that the party has universal endorsement.

Even if it did, that in no way prevents crony governance. The way modern democracies work, once in power governments have little interest in representing those they purportedly represent. Most of the time they are making good of the 5 years they have to enrich themselves and their party.
The traffic patterns they have access to are apple’s backend usage, not users.
> As I understand it, Christianity was a kind of rebellious liberalizing movement

A religion popular with slaves which promised a better life after death. As described by Nietzsche ad nauseum.
It still is irrelevant, if you use it offline, or you opt out of the analytics. Yes, an adult will probably have to set it up that way for them, but this has always been the case with any internet-enabled computer: it falls on the parents (or the school, childcare service, etc) to set up parental controls and oversee the child's online activity.
They do. The government controls all sugar production in the U.S. They control how much can be grown, imported, and exported. It is a very unique commodity in that sense. I've worked in the industry for 10 years now.
The average user with 2TB of quota probably isn't using anywhere near that much. It is more likely to be closer to the previous smallest level of quota.
There's nothing in the program or community that's directed towards people of a specific age! We don't collect demographic information, but based on my interactions with the community we definitely have lots of 50+ entrepreneurs on the platform.
The "who's looking for a co-founder" thread today was pretty great as an alternative. I hope that tradition continues.

https://news.ycombinator.com/item?id=27748680
If I'm wrong list some movies, please. I will watch them. I've seen enough foreign films to see many of the techniques used between films and between directors.
The article never explains why ∇2 means "average of neighbors". It's the divergence of the gradient, which is (one kind of) n-dimensional 2nd derivative.

In a one-dimensional function, the second derivative is 0 when there is no curvature, aka a straight line (of any slope), and any point on a line is equal to the average of its neighborhood. A plane also has this property, but in 2+ dimensions you can also make other shapes (like saddles), that are made up of lines (like a plane) but the lines are twisted relative to each other in interesting ways (like "string art"). You can also visualize (aka impose a coordinate system for) these surfaces as having positive curvature (concave up) in one direction, and exactly opposite negative curvature (convex up, or concave down) in the orthogonal direction, summing to 0.
A claim that is correct is voted down because it has no warrant? A better way is to ask for a warrant rather then voting based off of your gut and assumptions as people are doing now.

People don't like being told they are wrong.

Why don't read most of the threads here. Most claims are unwarranted. People vote based off there gut and whether they agree with it, it has nothing to do with substantiated evidence.

Most people here don't know how bad the concept of null is so they voted based off of that, never knowing that the inventor of null dislikes the concept himself.

Also keep in mind, Tony's claim itself has no evidence. He never lists why null is bad. His claim is unwarranted, but his reputation precedes him. You as others do vote based off of emotion and are unable to admit it.
An Early Look at Windows 11 WSL2 Performance Against Ubuntu Linux
I can only offer counter-anecdata, but whenever I see a kid wearing Star Wars merchandise, it is from the original trilogy. I think the last trilogy will have even less cultural impact than episodes 1-3.
From my perspective, a major issue with DNT was that it wasn't very clear to websites what a DNT request was asking for. The specification explicitly doesn't handle this: "This specification does not define requirements on what a recipient needs to do to comply with a user's expressed tracking preference" https://www.w3.org/TR/tracking-dnt/
haha.

the article does not shy away insinuating that govt planted it with out any evidence. Having watched maoists for the last 20 years, i doubt they are the good guys in this story.
Hmm, interesting. Will look into that! In the meantime, I assume if you edit your profile to add something to the last name field, it fixes the issue?
Then fork and maintain the feature, dude. It's open source.

Everyone here wants someone else to do the work but they don't want to do any work.
I don't understand what point you are making?

1) Superbad was sleeper hit - it did well in the theatres but far better in the long run. It launched a bunch of careers into the mainstream. It's also a broad comedy.

It was no more or less 'Hollywood' than the films you listed.

2) The films you listed are mostly Oscar Winners - which get a massive, global boost from that kind of exposure. They're also 100% 'artsy' kind of comedies made by highly respected auteurs - they're not broad comedies like Airplane or Animal House (or Superbad).

3) They're also mostly from the 2000's era, in which the general point is being made about 'challenging to make comedies' these days.

4) I don't think the box office differential rally helps that much as conceivably Superbad is going to naturally appeal a little bit more to North American audiences for the reasons you stated.

Here is a Hollywood reporter take on it [1] the decline of comedy is not a controversial idea.

"It’s been a decade since any comedy launched a blockbuster franchise. "

"The studios have backed away from comedies, just as they have mid-budget dramas, perceiving both as far harder to sell than tentpoles. "

"Even a comedy superstar like Will Ferrell has had trouble getting movies made. “It’s becoming a little finicky,” he told the podcast Armchair Expert in early June. “I’ve recently come across things where I thought, ‘Boy, what a great idea,’ and went around town and everyone just went, ‘Nope.’ “"

...

[1] https://www.hollywoodreporter.com/news/general-news/comedy-b...
>Outside of software, an engineer is a professional - a member of a professional body, licensed to undertake specified design and construction work, and required to take regular training and re-licensing

Software engineering got its roots from electrical engineering and this isn't true for most electrical engineers. You only need to be licensed in a few subsets of electrical engineering (i.e. power production and distribution). All other areas don't require a license.

There is a difference between software engineers and programmers. I had it explained to me like this. If you spend more than 50% of your time programming, you can't call yourself a software engineer. A software engineer is supposed to spend most of their time designing and architecting a solution, testing assumptions, documenting the design process and conducting design reviews. This process is slow and tedious but if done correctly will save you a lot of headaches in the future.
Developers who ship spyware are even less likely to switch to an opt-in model than they are to support a unified system that makes it easy to opt-out.
I often feel the same way about robocallers. It would only take a few to make anyone doing it question their choices
Otherwise it should be named SITH
Literally. He called it his own billion dollar mistake. But if I say the exact same thing. People vote me down. It's an example of human psychology at play here.

People don't vote based off of correctness. They vote based off of emotion. Emotion tells them I don't have the authority to say negative things about Tony. Even though I said nothing negative, Tony agrees with what I said.
So you are obviously lying. Why are people on the internet so desperate for attention they have to create fake stories about cyberbullying, Jesus Christ.
These two things are totally unconnected.

It’s literally innuendo and conspiracy thinking to suggest they are.
You are extrapolating your situation > global situation. Millions if not billions of people don't have access to the credit opportunities you describe. Certainly I don't, living in the country in europe I live in.
It IS a good article, but the audience of the article is fairly specific yet left unspecified.
As a general principal in technical writing it is advisable to start with a "why you should care" statement because this naturally informs the reader about the context.
I feel like the TL;DR here is "I'm too smart for films now and also PC culture ruined comedy"

The first part is clearly not true. There are film critics that have worked for decades and don't start to hate films suddenly. There is more than one critic because films are not something you consume objectively but that can move you personally.

Also comedy films are not self-censored! Sensibilities have changed and the target audience has become larger, wich results in films that are gradually less sexist, racist, homophobe or have flat gross-out humor. Turns out you can be funny without using these as a comedic device!
Schopenhauer: World as representation.
I spent a few hours playing with RISC OS on my pi 400, and it is a pretty complete system. The image download was less than 200MB.
I'm against both, it's just harder to avoid the results of Microsoft's decisions.
> Uber drivers auctioning their time is not one of them, because Uber drivers do want a benefit that's only possible with centralization: vetting/banning of passengers.

I'm nearly certain that there are quite a lot of drivers out there who would be willing to forgo this if it meant taking home the huge share of their revenue that's currently going to Uber.
You want to air gap the cloud solution?
Uhm ok 2010 called

Its not important which specific service shares what when they all use the same concepts or an analytics package they added happens to be doing that without the developer/executive’s specific knowledge
Damn straight, it's even worse than that though.

Blue teams are behind from the start due to the nature of the security landscape. They are further hindered by misguided application of the "move fast and break things" method. You aren't supposed to break your C.I.A. and expose customers and everybody else to huge liabilities.

Security needs to be baked into the infrastructure and IT management practices from the start. This requires enforcement, jail, and civil suits.

Office of Personnel Management, Ashley Madison, Target and countless other retaikers, Dams and Pipelines and Water, Maersk, Linkedin, all these supply chain hacks and schools and hospitals across the country and the world.

This has been going on for decades now, with no accountability at all. It just doesn't seem to be a priority.

What in the hell are we doing? Why do MMORPGs have better security than the hospital??
Ode to a world-saving idea: Fundamental Attribution Error
Yeah, it seems suborbital is really only good for tourism and getting good rocketry practice. At least they're on the path to orbital: New Glenn appears to be late 2022 with some customers booked in 2023.
Right, until you analyze it, it won't look encrypted. But pretending or wrapping it in backdoored E2E doesn't change that. If I labeled it "plain text" it also wouldn't look encrypted until the results are analyzed. If the authorities want to read it (either as an individual message or scanning all messages) either they can or you're a criminal. The only difference your "hiding" has is how many CPU cycles it takes them to check.
There are tons of things blockchain doesn't make any sense. However dApps are real and there are real-world use cases being used right now by millions of users. HN seems to be ignorant of that, weirdly.
How to Setup and Use Amazon’s Elastic Container Registry