skysight-inc/HackerNews huggingface dataset:
When I ran a cloud provider, we used a hardware security module on storage systems which had public/private key pair which could be used to decrypt the header on the disk which contained a copy of the symmetric cipher key. Each header had the symmetric cipher key encrypted with multiple different public keys, including a fallback whose private key only existed in on paper in a vault.

Each system could reach out to other storage systems to ask them to use their private key to decrypt the header (for example if their hardware security module had failed), but in some configurations this would require an operator to intervene to enter in passphrase to unlock the hardware security module to authorize the action.

This means that:

1. The symmetric cipher key could always be recovered, even from paper backup

2. Having physical access to a disk or any set of disks did not allow you to read the data

3. Having physical access to a disk and a hardware security module did not allow you to read the disk (unless you knew the passphrase, which was always present, and user set)

4. Having physical access to disks, servers, and hardware security module may not allow you to read the data (in the more secure configuration where passphrases were not cached on disk -- but this meant that rebooting required an operator to manually enter the password at boot)

5. The set of valid public keys could be changed frequently (this was indeed automated and only the set of currently active hardware security modules could decrypt the current disk header)

Of course you could always short circuit this by making a copy of the symmetric key when you did have access (e.g., `dmsetup table --showkeys`) but without putting some more hardware in the fast/hot path that was unavoidable. The symmetric key could not easily be changed, without rewriting the entire disk (though since it was a storage system designed to accommodate multiple failures, this wasn't that hard, but we didn't do it automatically)

The hardware security modules we used were FIPS 140-2 validated and physically connected to the racks (though it would be possible to cut them away). It would also be possible to spy on the APDUs sent to the modules to capture the decrypted data, since there was not mutual authentication (it was in the works though).
Yes but many experts take "never been shown to" to mean that we ought to act as if it doesn't for now. That's an important and useful social mechanism in the laborious process of constructing a solid edifice of truth from the crooked timber of humanity. But it's unwise when considering public health responses.
@crazy_horse, what do you have in mind when you say "we can do much better than downvotes"?

In my opinion, stackoverflow-style downvotes are a good solution. Downvotes cost reputation points to cast, and can only be cast once you are at a certain trust level. SO has other issues, but I think they got downvoting right.
"asl", or alternatively "A/S/L", was short for "Age/Sex/Location". This was a pretty common way of kicking off a 1-on-1 conversation on IRC back in the day.
Why do they really need it? Except satisfying your teaching ambitions :)

Good answer to this question is a half-way to reliable result.
Seems like a bad long term investment, since there's a plan for them to be worthless eventually. Economically speaking, if the market is rational, the price should tend down over time.

Of course the market may not be rational (it's obviously not super liquid, either), and it's very plausible the price creeps up over time before eventually crashing, or that we never get to widespread IPv6 adoption after all. Maybe you have some insight that they are underpriced at the moment and IPv6 adoption is further away than the market thinks. But I wouldn't contemplate this as an investment unless I had some plan to collect rent for the assets to make up for the expected eventual depreciation.
Leakers or thiefs? The title is a clickbait
Samsung phones can indeed do that. It's called DeX (https://www.samsung.com/us/explore/dex/) and nobody cares.
I’d also much prefer to work in such a team than one where people keep their cameras off.
Personally I think you're taking things too seriously, even though you're right. I enjoyed "The Great Online Game"[1] recently (1 comment), which stages this engagement as play. Although I would like to see my karma go up faster, that's not the point of the play for me. Unfortunately a lot of ludicrous, non-contributing, downvoting schmoes are part of the game. It's ok, it's still- for me- for fun, and I don't feel the need to adjust myself or my strategy of play because of the directed, biased negativity about.

To me, the missing part of the equation is that down-voters don't have any stake in their downvotes (in many systems: Reddit, HN). De-anonymizing these behaviors, is, to me, how we begin to form an awareness of each other, is how we ought to stake ourselves in when we go about saying something is not valueable. We should be able to orient ourselves better online, understand each other, and build our own defensive & observatory systems. The web should be rich in information, & growingly interlinked, and from this we ought to be able to emerge, slowly, over decades, interesting webs of trust, and identifying the negative forces, the downvoters, is a key piece of understanding this web ought be able to encompass.

[1] https://news.ycombinator.com/item?id=27955488
So you’re ok with Toyota spreading FUD as long as it’s legal. Got it.

As for Tesla’s government money, ev credits are available to all manufacturers, it’s not Tesla’s fault others can’t make compelling electric vehicles. All other government loans have been paid back in full.

Maybe you should read more than just headlines
It's not new; it's a variant of the 60s feminist activists' pronouncement that "the personal is political" or "the private is political".
Why even bother with terrorism? It sounds like a potentially gruesome and sadistic weapon with which to use against a particularly bitter foe- the terror is only incidental. Maybe it's akin to using a dirty bomb.
I am informed by my personal experiences. I had an core i5 laptop from 2019 vs r4800 from 2020 and the experience was night and day running arch linux. Just smoother running everything on the AMD. And my power usage was objectively less and my fans turned on way less subjectively.

A single browser tab is single threaded, but you REGUARLY are forced to run several electron apps, and have many tabs open. Each requiring processes and threads and ryzen blows it out of the water in responsiveness. It was not uncommon for some language-server running to lag out because some chrome shit was blowing up my cpu/memory, which drove me away from vscode again.

The intel is maybe better for gaming or other inherently single program stuff. But at the cost of using WAY more energy and sucking for everything else I do regularly.

Further the m1 macs make them both look fairly power hungry and laggy.
"Engage" is not euphemistic. I'm surprised you're unfamiliar with the word. It means receiving interest or attention.
I'm definitely not saying you have to go the FAANG route (I certainly didn't & I'm the author of this article), but I do think when a potential employer sees that on your resume it gives you instant credibility that you've been vetted by one of these giants. You can earn that credibility in other ways for sure. For better or worse tech is that elitist IMHO.
Serious question should I be avoiding traveling to the UK over this??
Several university laboratories are still actively researching biochar and provide snapshots of the current thinking regarding its usefulness:

https://whitmanlab.soils.wisc.edu/faqs/

http://www.css.cornell.edu/faculty/lehmann/research/biochar/...
Clearance rate for rape: 34.5% (65.5% unsolved)

Source: https://ucr.fbi.gov/crime-in-the-u.s/2017/crime-in-the-u.s.-...
I'm not sold that this has been established yet: technology moves in mysterious ways.

For example EVs don't have an answer to long distance transportation yet (it should be trains, that are easily automated, but I'm not god emperor). You could imagine a future where greening that industry necessitates a storable, pumpable fuel and suddenly hydrogen infrastructure is a thing that personal vehicles could be built against.
I would say a cat murdered a mouse, in particular because cats seem to kill a lot of small animals for no practical reason (as opposed to hunger, for example).

If you're suggesting there's a valid moral code where murder is ok (for humans), well, I guess that's a matter of opinion, but I expect many people will disagree with you.
At this point just write a small program that does what you want and invoke it from bash
beermonster has it right.

For a very recent example of this, see the NSO Pegasus scandal from the past couple of weeks.

A reboot "unloads" the malware (until the adversary sends another payload, anyway.)
I know little about the specifics of farm machinery and it might very well work with schematics etc. so that stuff can be fixed by anyone reasonably skilled (and having access to the right parts and tools).

However, for some machinery (might not be in farming) it will need real training so even with schematics, docs etc. we do not want untrained people to fix it. These people might not work for the manufacturer, but repairing is "gated" in a sense (repairing commercial aircraft, for example). As far as onsite vs. shipping is concerned, I think with really heavy equipment most maintenance will be onsite as shipping makes no sense at some point/transport is next to impossible.
I had no idea what GymKit was after burning months on my life on it!

I said what I said.

An in-home fitness service using Gymkit to provide deep integration with streamed workouts.

Their non-equipment workouts work with Healthkit, but to have parity you need Gymkit too since Apple Fitness is not just about equipment-less workouts:

https://www.apple.com/apple-fitness-plus/equipment/

To that end it's more deeply integrated than Apple Fitness since Apple Fitness streaming content needs to target any Gymkit enabled (or really any hardware period) hardware of a given type with all the variation that entails.

This company is customizing the stream for a handful of Gymkit enabled devices which gives them more control over the workout experience
No quarantine for fully jabbed US and EU travellers to England
Yeah Toyota literally did not offer Apple CarPlay on any trim level of any vehicle until the 2020 model year, it was insane.
Factors to Hire Accounting Services in Sydenham
Accounting has become more than a requirement for organizations over the last few years. You might even be required to hire an accounting firm in Sydenham to manage your accounts. How your costs, receivables, taxes, and audits are managed makes a big distinction between your wealth and the management of wealth.
When I went to college in the mid 90's, we had a similar setup. All public IP, no firewalls, 10 megabit ethernet jacks in each dorm room. The entire school was on a single T1, however.
The unknown features of Python's `operator` module
People running VMs aren't trying to play games on them though, are they? Seems like the best reason for VMs and refreshing back to start each time is perfect for freedom fighters and others web surfers that don't want their host system polluted by bullshit developer's and their internet games.
everything is within "walking distance", it's approx 2 miles long.

Photos from Tory Island: https://www.google.com/maps/place/Tory+Island,+Co.+Donegal,+...
What is the expression in Dutch?
So forget breakthrough infections for a second.

Covid has both pre-sympomatic AND asymptomatic transmission. This has been proven.

In many places, a negative PCR test means you do not have/carry the disease and can participate in risky activities. The NFL, and the NBA, did this. Movie studios did this. Australia and New Zealand did it as a whole country.

To do that, you need a very sensitive test, not something that only confirms symptomatic infection.

Of course, a very sensitive test has more false positives. But you have to weigh that with the possibility of an outbreak among those who tested negative. Imagine what would have happened if NBA had an outbreak after PCR tests--"The Tests Are USELESS!" the media would say.

How many false positives? Look at how many players sat out during the NBA bubble.

Now back to breakthrough infections. The CDC's thought is that vaccines protect well against existing strains, and their guidelines follow that assumption. Nothing in their guidelines accounted for the Delta, though they are changing their stance now, but slowly.
What’s the frame? Asking because it could make a good NFT display
Is this always true? The iPhone seems like a pretty clear argument to the contrary. As far as cars go, Tesla is a clear outlier pushing innovation. I mean sure you can argue that eventually the rest of the field will catch up, but there are many advantages to being a first mover.
> prion escape and becoming common in populations would be a large disaster.

IIRC, all known prion diseases are only transmissible by ingestion of infectious particles - meaning, eating from infected parts of a carcass, urine/feces and blood.
Oh, my first contact with Exchange was discovering that the recently updated server couldn't read any of the backups on the proprietary format of the pre-update version of it. It seemed to be a common enough occurrence, because the email people just shrugged and started hacking the backup. I don't think that group was ever capable of restoring any Exchange backup, normally because of Exchange's problems.

But that was a long time ago. From what I hear, things are different now.
And avoid being in the same room with someone that’s been infected:

In a 2011 paper, his team reported that prions can spread through aerosols
From 2013, but still highly relevant and something all adults should be aware of.
The last thing you need is more bureaucracy. If you want the rules to be followed, you punish the people who don't. That's it. It doesn't take 3 months. It doesn't take any audits or committees. If there is a rule following problem, you enforce the rules. People will find a way to comply if they know they will pay the price if they don't.
Not really. Look at how Darwins theory of evolution was published in 1859, while the mechanism wasn't really clear until at earliest 1928, and in some ways it's still not fully understood.
At the minimum, some new safety protocols might be needed.
Does any POSIX-like shells do arrays nicely?

Fish has "string split":

$ string split ", " "Paris, France, Europe"
Paris
France
Europe

Murex has "jsplit":

» echo "Paris, France, Europe" -> jsplit ", "
[
"Paris",
"France",
"Europe"
]

But neither are really Bash compatible. Is zsh any better?
On the flip side, going all EV puts 2.5x more pressure on the supply chain to remove battery production and capacity as a constraint, which might be optimal long term.
But the series of tubes that enable them /should/ be though
> The CEO said recovering the disk helped the authorities to advance their investigations into the heist, and meant the company felt able to publicly disclose the theft.

Aka they could no longer sweep it under the rug.
Man, a personal hosted VPN for all my junk is my dream. Can't wait to get something selfhosted, tail-scail-like setup. Something i can get into from anywhere and work from anything. I'm tempted to order a bluetooth keyboard like this post just to have it in the car and be able to work from my iPad/iPhone in a pinch (assuming internet).

For someone wanting an easy, at home VPN for setups just like in the blog - is anything on the market competitive with Tailscale's UX? Ideally there would be no proxy, no VPN hosted on DigitalOcean that i fear being a weak point.. Instead, i'd like:

1. A redirect hosted on DigitalOcean, acting as a self hosted DynIP. No security issue here i'd think?

2. After hitting my real IP, connect to a VPN on a predetermined port.

3. Get access to bells and whistles now on the priveledged network. Bonus points if i could assign DNS entries like `ssh me@workmachine.fake` or `http(s?)://videostreaming.fake`

Tailscale makes me a bit nervous, as cool as they are i'd prefer entirely self hosted. Though i may give them a try just to experience this UX.

edit: https://blog.tonari.no/introducing-innernet innernet might be what i'm looking for
The thermal issue is also something a lot of laptops run afoul of, to be fair
Unfortunately even in Chicago I found the commute to be exhausting when I lived right next to a train. It was still 40+ minutes if you got there right as the train was leaving, and most offices are still 10-20 minute walk from the stations. Living closer was possible but then you'll be paying significantly more on rent for less space (a problem for families)
So you just inject them into the food supply?
Things generally don't stay on the front page for long. Your claim sounds pretty paranoid.
My love of my partner and my nephews and nieces. My enjoyment of art. My appreciation of the natural world. You can do a political analysis of those things, but they are not intrinsically political. Of course, some on the left believe that there is nothing that isn't political. But I don't think they're correct.
Well, it's Vice.
It is on a perpetual loop for me on Desktop Safari. I have NextDNS and AdGuard turned on.
I loath this normally, but this is one case where we really need the government to set standards. Everybody is better of on IPV6:

1. Mandate that all ISPs have a fully functional IPv6 assigned for each IPv4 given to customers. It must route just as their IPv4 does. If a customer doesn't have an IPv4 number, they must assign as many IPv6 as if the customer had one IPv4.
1. Mandate that all servers and all services accessible over IPv4 be accessible over IPv6
1. Institute sufficient fines for businesses that don't follow these requirements.
Unfortunately my favorite game right now, Vermintide 2, uses Easy Anti Cheat which does not work with Proton. I've had to set up a VM with pass-through to play it.
tl;dr This link should work for you:

https://www.techdirt.com/articles/20210726/09441047251/techd...

Same here, with Adguard.

The problem is with the title part of the url, since the title contains the word "ads".

I did an experiment: If you remove the words after "-google" in the url, it still works. You could probably remove the entire title of the url and it will still work by article id... So here's a link that will work with Adguard enabled:

https://www.techdirt.com/articles/20210726/09441047251/techd...
DevOps Is Dead, Long Live AppOps
Most of those things are just natural evolutions of existing technologies. None of those things (barring the internet) are things which scifi from the 1950's didn't predict.

My point is that we don't have those mind blowing inventions that were hard to predict or see coming. Smartphones are the natural evolution of computer chips. Machine learning was already an active discipline in the 60's. In the 60s they were already seeing computing power increase at very fast rates. Internet things is, again, just an extension of general communication. And ecommerce is a real natural extension of the internet.

Compare that to a refrigerator. Before the refrigerator there was an entire industry of ice distribution. It was not a natural extension of really anything.

Same for the microwave. You MIGHT be able to argue that it was somewhat the natural extension of radio, just finally recognized but that's a stretch to think anyone would leap from radio waves to microwave ovens.

As for patent numbers and scientific publications, that doesn't really seem to indicate actual innovation. Rather, it points to population growth and more participation in those programs. Patents, in particular, are issued more out of defense than actual innovation.

What we aren't seeing is massively disruptive technologies. We've not see the power generation which makes fossil fuels obsolete. We aren't seeing the breakthrough in rockets that allow for space vacations. We aren't seeing flying cars. Instead, we are seeing cars getting gradually more efficient, batteries getting gradually better, and computing power getting gradually better.

Actual, honest to goodness, life changing innovation has just stopped.

That's not really all bad, but it does point to "we probably won't be like the gods" any time soon. Just like life got better in the new world from the 1600s to the 1800s (for the most part), I expect life to get better from here on out, but not so mindbogglingly better that 100 years from now it will be completely different from what we experience today. The only major difference in life in 100 years is going to the the impacts of climate change.
Point of terrorism is achieving a political change through terror. Terror is not the end in itself.

From this point of view, mailing of anthrax in 2001 was very inefficient.
It's not trivial when it comes to a server. Sure, you can tick that checkbox you'll enable encryption, but when you reboot you realize that you can't actually SSH in it, as it's waiting for a key to be entered on the physical console.

Entering (and managing) that key is the hard part.
What things are named and what they are don't necessarily coincide. E.g.: native americans are called "indians".
They're not automatically turning on if you're "turning them off" from Control Center. Those buttons just temporarily disable them (and state that clearly when you do so). The only way to actually turn off Wifi and Bluetooth is to go into Settings and turn them off there.
Exactly true. It’s the fact that people think top comment means something is more accurate when all it means is it was most voted. That’s like saying Trump is always right because he got the most votes in 2016. Every website is the same, likes or upvotes are literally a popularity contest and what is popular, usually the first couple comments and the comment that mostly closely meets already widely held expectations. Anyone who is an expert or knowledgeable in any field can attest that often, but not always, the top comment on a topic is wrong and the best comment sits 4 replies deep with almost no upvotes.
But _why_ does it feel kind of grating? Why does it frustate you? Again -- votes don't matter. I absolutely love the parent post for making it so plain.

Moreover, why do you only care about the downvotes? Why don't upvotes bother you? Something to think about :)
700k lines of code, 20 years, and one developer: How Dwarf Fortress is built
If you can't separate "separating emotional well being from the truth" and "acknowledging you have emotions" you should go and take a vacation.
Deep Genomics Raises 180M for AI Drug Discovery
It's not a nitpick, it's just wrong. Bad things happening is a cost which is both negative and external. The use of the term "negative externality" works here.
My most painful data loss was when I tried a Windows "alternative" called "Lindows" [0]. Touted as "Linux, but easy like Windows!."

So I put the disk in, and it says something like "Do you want to install Lindows?" with no options, no warnings or anything. So I hit Yes/Okay/whatever the single button on the screen was, and without zero warning, it proceeded to wipe my entire hard drive.

It's been 17 years and it still hurts :)

[0] https://en.wikipedia.org/wiki/Linspire
Bank transfer fees are quite rapacious across the subcontinent, and alternatives to expensive instant wire transfers are rather archaic.

Invoicing people on paper, keeping track of all of it, and having to repeatedly call your account manager on the phone to check arrival of transfers feels so out of this world in 2021.
It also works with `..` to suggest ranges. eg

echo {one,two,three}{A..C}{0..4}
Blender, Firefox and OpenOffice have, from the top of my head.