skysight-inc/HackerNews huggingface dataset:
> it also wouldn't have been a big deal for them to show something attacker controlled for a little while

This is understating the risk. If an attacker obtains control over a website for even a brief period of time, they can go to a certificate authority and obtain a domain validation for the domain (including all subdomains) that's valid for one year. At the end of that year, they can use the domain validation to obtain an SSL certificate that's valid for up to one year, even if they no longer control the website. This means that following a brief takeover, the domain continues to be vulnerable to attack for two years, which would be a problem if a parked domain is transitioned to active use during that time.
> One-to-one messaging is not "amplification".

Tell that to the dozens of SMS I receive on a regular basis trying to scam me I guess?
What distinction are you drawing between multiple cores and "MIMD"?
Bruh, men commit 97% of murders worldwide...

Unless the women really just aren't getting caught, I don't think they're the problem.
a very kind soul.. grateful i got to opportunity to shake this mans hand during a concert in chicago about a year and a half ago. Rest in peace my friend
I'm very fine with command soup; the plan was to generate it with a script and run it directly. The input files are in a lossy format so I'd rather avoid having intermediate WAVs or double-encoding or something like that.
Why — though in the early days of interlace's internetted teleputers that operated off largely the same fiber-digital grid as the phone companies, the advent of video-telephoning (a.k.a. 'videophony') enjoyed an interval of huge consumer popularity — callers thrilled at the idea of phone-interfacing both aurally and facially (the little first-generation phone-video cameras being too crude and narrow-apertured for anything much more than facial close-ups) on first- generation teleputers that at that time were little more than high-tech tv sets, though of course they had that little 'intelligent-agent' homuncular icon that would appear at the lower-right of a broadcast/cable program and tell you the time and temperature outside or remind you to take your blood-pressure medication or alert you to a particularly compelling entertainment-option now coming up on channel like 491 or something, or of course now alerting you to an incoming video-phone call and then tap-dancing with a little iconic straw boater and cane just under a menu of possible options for response, and callers did love their little homuncular icons — but Why, within like 16 months or 5 sales quarters, the tumescent demand curve for 'videophony' suddenly collapsed like a kicked tent, so that, by the year of the depend adult undergarment, fewer than 10% of all private telephone communications utilized any video-image-fiber data-transfers or coincident products and services, the average u.s. phone-user deciding that s/he actually preferred the retrograde old low-tech bell-era voice-only telephonic interface after all, a preferential about-face that cost a good many precipitant video-telephony-related entrepreneurs their shirts, plus destabilizing two highly respected mutual funds that had ground-floored heavily in video-phone technology, andvery nearly wiping out the maryland state employees' retirement system's freddie-mac fund, a fund whose administrator's mistress's brother had been an almost manically precipitant video-phone-technology entrepreneur . . . and but so why the abrupt consumer retreat back to good old voice-only telephoning?

The answer, in a kind of trivalent nutshell, is: (1) emotional stress, (2) physical vanity, (3) a certain queer kind of self- obliterating logic in the microeconomics of consumer high-tech.
Indeed. The initial exodus was strong, but lots of places were taking a "sit back and let this blow over, then evaluate" approach that could easily have lead to many staying on Freenode, but if you don't know if you have your channels anymore the next morning and see how new staff are behaving, many jumped or were forced to jump quicker. (E.g. the FSF, despite all the earlier "We defend Free Software!!!!" branding)
Running Windows 11 with TPM on LXD
No

This company never created the S3 buckets at all but set them in the CNAME, for domains that were purchased but never used

They can change the CNAME at any time, it’s a pretty dumb but inconsequential exploit. Potentially some purchaser didn’t use generally free and default whois privacy and could be associated with offbrand content.

Potentially someone observant can earn a bunch of ad dollars on a popular domain.
That's still not code first. It's always product-first, just with different timelines. If you're working on a system that need to last, you should still optimize for the product, but over a longer time span. The code is just the means to the end.
It is boring now. At some point c++ and Java were exciting and revolutionary. The basic premise holds, choose technology that has widespread adoption and, to be really effective, that you’re already familiar with.
Yeah the post was getting a bit long, there are a bunch of similar games to the ones listed, I just used one of each to exemplify each strategy.

Core is very similar to Roblox in that the creation tools are rather involved, it tends more to a platform with distinct creator/consumer roles.

There's also the PS4 game Dreams, as well as other integrated-modding initiatives like in Krunker.
Ivermectin used in a single-drug treatment regime has not shown significant benefits in a number of RCTs. However there is promising evidence of significant benefits when Ivermectin is used as part of a multi-drug treatment regime [1].

Since the beginning of the pandemic many front-line doctors have been combining multi-drug treatment regimes with early (in the symptomatic phase) treatment to successfully reduce hospitalization and death [2][3][4][5][6].

[1] Ivermectin in combination with doxycycline for treating COVID-19 symptoms: a randomized trial
https://pubmed.ncbi.nlm.nih.gov/33983065/

[2] Multifaceted highly targeted sequential multidrug treatment of early ambulatory high-risk SARS-CoV-2 infection (COVID-19)
https://scholarlycommons.henryford.com/cgi/viewcontent.cgi?a...

[3] Timing of Antiviral Treatment Initiation is Critical to Reduce SARS-CoV-2 Viral Load
https://ascpt.onlinelibrary.wiley.com/doi/pdf/10.1002/psp4.1...

[4] Clinical outcomes after early ambulatory multidrug therapy for high-risk SARS-CoV-2 (COVID-19) infection
https://rcm.imrpress.com/EN/article/downloadArticleFile.do?a...

[5] Early multidrug treatment of SARS-CoV-2 infection (COVID-19) and reduced mortality among nursing home (or outpatient/ambulatory) residents
https://www.sciencedirect.com/science/article/abs/pii/S03069...

[6] Multidrug treatment for COVID-19
https://www.jstage.jst.go.jp/article/ddt/advpub/0/advpub_202...
How? They now have a cert for that domain but the domain owner can point the domain to any IP address he wants. The article mentions this, but I don’t see the vuln. Can you explain?
Maybe they meant "defenestrate"?
This is part of what makes consulting such an attractive early profession: you sample a lot of problems and work cultures.
How has the developer experience on it been overall? I downloaded the flutter app from github on my machine and it's pretty extensive! I'm kind of surprised you don't have a web target just for convenience sakes, but I see your using some stuff that is more mobile focused for background task management.
Nowadays a bit lessened by CT logs, so you (or MM) can at least notice and cause the cert to be revoked.
I've always thought that Wikipedia edit wars, would be an amazing example of attempts to apply formalisms with objective criteria, to matters of opinion.

Turns out many formalisms grounded in english language, are open to interpretation.

(hoping somebody responds with citation required)
> Fortunes are to be found on the intersection of almost any two skills, if you can add more to the pile you are adding more chances for capturing that value.

Do you have some anecdotes to share regarding this?
I don't believe a ballistic nuclear missile submarine has ever killed anyone intentionally, and I think everyone hopes one never will.
Is there any reason to prefer Darktile over Alacritty?
I think that Emacs solved a lot of important problems before others did. The rest of the world decided to reinvent and rename things, and they popularized some of these things. Emacs held its ground, so now people who transition to Emacs from a different background might be confused. Emacs documents everything thoroughly, so it might take a whole weekend of reading to catch up and be productive. I think that Emacs is worth this extra time. The real number of confusing terminologies or technologies are probably only a dozen or two. And then there are hundreds of common concepts with a powerful implementation in Emacs. And some things that you still can’t do as cleanly with other tools. Especially things you’d need in cutting edge research.
There have been so many of these, and yet we, DL practitioners, are still SOL trying to find NVIDIA cards for less than 3x MSRP. Not even gonna bother with this until I can buy it.
Or as happened here, bob points the site to S3 because he plans to put something there later, and Eve beats him to it.
Imperfect, incomplete, yet useful measures I take including building with some of Clang's sanitizers and running the program through a bubblewrap wrapper for filesystem sandboxing paired with a seccomp filter that allows a limited list of safer syscalls (including some W^X enforcement).
This looks very interesting. Are there any advantages to using it as opposed to neovim in a terminal?

I guess my question can be posed to any gui text editor. Still, nice project!
MIMD comes as one instructions stream with one instruction counter. Multiple cores have different (independent) instruction counters.
I think the takeaway from you experience and the article should actually be recognize what your personal priorities are, the team's priorities, and make decisions with that in mind.
Because otherwise he might decide that Apple’s share price doesn’t matter to him and then Apple shareholders would be sad or mad when it doesn’t go up. Aligning interests is a best way to get the outcome you want from any person.

Berkshire Hathaway owns a massive amount of Apple and they help appoint/vote members to Apple’s Board of Directors who influence the CEO. Warren Buffett is likely a very happy man with the way Apple performed and I doubt he is concerned about another man becoming super wealthy as long as they become wealthy together <3. I’m sure that’s the whole point.
The security of a terminal emulator? Did you post on the wrong article, perhaps?
Does anyone know how it performs on termbench? https://github.com/cmuratori/termbench
People are good and bad at different times and from different perspectives. So in a way, you're right, if badness is what you're focused on.
I suppose a bad actor could log keystrokes or terminal output and phone home. I can't think of anything more ring 0 than one's terminal. If you're especially evil you could register a domain that looks like an apt repo url and drop your payload during updates, so anybody inspecting traffic would probably miss it.
Yes, although the attacker can defer logging the certificate to CT until the moment before the certificate is used in an attack, so you would not have much time to respond.
A Screeching Voice of the Minority
The designer dongle bag upsell will have the antenna. Think smart-casual remote adventurer.
I blame that more on the people who "explain" it. Bad explanations of relativity or quantum mechanics have nothing on countersteering - everyone who talks about it does it as "woo, this super mysterious thing".

In particular people say you can't turn left without first turning right and vice versa, which is obviously nonsense - if that were true as stated then it would be impossible to ever turn at all.
Fuck em, don't let them in the hospitals. Some states now go so far as to pay you to get vaccinated but if a drunk driver t-bones me I potentially can't get life saving care?

This is below the level of "mentally handicapped". At what point does society stop bending over to accommodate their stupidity? Sorry I'm not too excited about the prospect of investing in their future instead of Johnny-Got-T-Boned.
I used to think this until I really took the time to dig into Rust. Rust has completely snapped me out of this depressing, "pragmatist" learned helplessness that people seem so keen to try to cram down everyone's throats these days.
> the DRM opened the HDD as a raw device

Why does [insert random program here] need admin rights? Now you know!
How? The CA submits records (precertificates) to the logs before it signs the cert.
One of David Foster Wallace’s many prescient musings. It’s a snippet from Infinite Jest, for those curious. Truly a fantastic novel. Clearly I’ve read his books too often though, because even without the telltale reference to interlace I would have picked that up as his writing in a sentence or two.
Nope. Both will probably fail when gl rendering is not available for whatever reason.

Just tried to run alacritty:

https://megous.com/dl/tmp/4af49886c7c9854d.png

Personally, I'd want something that keeps working even if I don't reboot immediately after a system update, especially for something as key as a terminal emulator.
Trying to cram fact patterns like described in TFA into the same bucket as violent rape is a great way to make sure neither is treated appropriately.
A head's up to anyone who decides to use this source: The translation and commentary in Bhagawat Gita As It Is are from ISKCON's particular interpretation of the Gaudiya Vaishna perspective. While they get a disproportionate amount of press relative to their size, they are not representative of mainstream Hinduism.
I have been a Twilio customer for years. Now I need to enable SMS. They should know me, not a threat.
> not built with me in mind

Fairo

> on top of NextCloud

Not that I know of. Could have a look through the nextcloud marketplace for something or another. Tbh, I don't see any open platforms having Google/Apple photos kind of functionality for at least a little bit. Google and Apple trained their algorithms on the people using their free tiers for years. Google especially had access to so much information on the user using Google Photos that it was able to build the algorithms it has today. For an open platform to have this functionality, it would need to wait for an open source model/algorithm to exist, else it would need to build it itself by using user data (no E2EE then).

Unless Google open sourced whatever models it uses in Google Photos today, don't expect this level of searchability yet. Actually even if Google did, it would probably be so tied to Google user information and be incompatible with E2EE.
https://thedailywtf.com/articles/The-Biggest-BoonDongle-in-t...
Knowing about a solution but not implementing it is pretty darn near close intentionally rendering the product undesirable if not exactly that.
In one of my first jobs at Fortune 20 company, they had on-call escalation procedure, longer you take to fix an issue, more and more people get called. It was something like on-call developer > team lead > whole team and manager > director > senior director > VP... Usually, after an hour, we had to get manager and whole team online. Manager would be freaking out and driving us hard to fix outage with whatever means necessary and not let it escalate further. They would make it sound like our whole team will suffer if director got on the call. Of course, they said that we can create issues and fix them and of course, there were always more important issues.

My team quickly and informally learned if you want to take care of technical debt, let the higher ups feel the pain. Even when nginx/some process died and just need to restart, we would wait and really try to let those calls escalate to director. And anytime director had to join bridge, those issues would become highest priorities and fixed permanently.

It also became a game where manager would keep asking to do simple things to fix and we would be stalling or looking at unimportant things. Pretending like slow internet connection, dropped calls, locking ourselves out from the box, etc.

And in our team we were all PS3 gamers, so we would get on GTA4, and start having fun. A few times we even yelled at each other for messing up in the game while unmuted.

These days depending on company's culture I may fix issue quickly or I may let it escalate to right level where we will get support for fixing the issue for good.
Sadly, no. I don't rewrite communication stacks for fun. And someone who pays me to do so generally sees it as a competitive advantage.

The complication is that the "event loop" is atomized. This means that initialization, teardown, and iteration are now in your hands. You're responsible for making sure that the "iteration" function is called often enough (ie. both because of timers and incoming packets), not the stack. Of course, because time is an input, you can clearly identify "Oops. I didn't call this often enough."

The advantage is that your "event loops" can now compose. Quite often, it's very hard to get different communication stacks to cooperate because they all want to be the "primary event loop". (A good example of this failure is "async" frameworks--"How do I wait on a screen refresh, a tcp socket, and a character device descriptor simultaneously?"--if your async executor doesn't take all of those into account you're gonna have a bad time) Since the event loops are atomized, you can interleave the "iteration" calls and wait/sleep however you like.

As for open source, to be honest, I probably wouldn't release anything open source these days unless I got a very significant personal benefit somehow. It's not enough to simply create something and put it out there--everybody expects you to be a maintainer and have some infinite well of tactfulness in the face of idiots who deserve to be slapped silly.

For me, the grief from the whiny, entitled contingent is far too high to make producing open source worthwhile nowadays. I respect the people who do it but have no desire to join them.
I would not take much to acknowledge them, just a "fastest RISC-V chip in many core workloads" would a long way.

I personally think those chips would be an absolute monster for solving MILP problems as they tend to have enormous parallelism and a lot of linear algebra (in particular simplex iterations).

However there is no hype for funding in Mixed-Integer Linear Programming so machine learning it is.
Archive.org respects the original sites takedown. archive.is does not.
Is this something NNs could do? The output might just be a probability field of orbits, which would not tell you anything more than known analytical methods would.
Mac OSX support?
Just take the vaccine already.
I have a block of tungsten about the size of my fist. Got it at a missile test range. When the explosives are replaced by the telemetry unit, empty space is packed with tungsten to make up the weight difference. The target area was filthy with tungsten blocks.
I read the article and you're simply wrong. The critiques remain valid. Nuclear deterrent patrols last months, not weeks. And they need to make fairly fast transits to and from the patrol area.

The National Interest is basically a site written by dilettantes for fanboys. It's not a reliable source for deep analysis of defense procurement policy.
Was there ever expectation that classroom practice derived from any kind of science? It evolved as a practice that pretty reliably generates tuition and employment of educators. Any success in actually educating has always been secondary as an evolutionary measure of fitness.

I guess you could say that astrology developed by a similar process, optimized to produce people willing to pay for it, with little demand for other objective result. Objectivity is rejected pre-emptively.
Your driver was brainwashed by propaganda. No response necessary.
Thanks. I hadn’t seen that when I checked the news before posting.
Another thing to keep in mind with this kind of software is tracking data loss, corruption and deletion. I've used photo management services before, and have had data loss that I can't explain from this year or that year. Did I delete it? Did I do a migration wrong? Did the software silently delete it? I'm not quite sure. What is even worse is you cannot get 'another copy' of these photos from elsewhere, because they're all unique.

Having a 'recycle bin' and an ability to see the history of photo deletion, modifications and imports can be useful in tracking down what causes data loss. Also having masters accessible in a simple plain directory is essential in being able to audit that the software is working correctly, can be backed up in a simple manner and if your service goes belly up, is easy to migrate from.

Another issue is bitrot. Your desktop can bitrot modify a photo, and then your photo management software detects this as the 'new version' and destroys the original good version. You have to make sure you mitigate this by storing a hash on import and restoring to the original hashed version.
Clinicians have a moral obligation not to judge their patients' decisions as a standard of the profession, and I respect that.

I am not a clinician.

Anti-vaxxers can suck it.
Google provides several options for site verification. They provide a string you must place on your website using one of the following ways:

- DNS TXT record

- HTML meta tag

- Upload a file with a randomized name to your site root
I find it a bit amusing, and a bit tiring, how our body language and emotive faces have instantly reacted to network drops and lags; at your next meeting watch how vigorously your teammates nod, and how wide they smile, and how much teeth they show, so that the faintest smirk will be remembered.
A lot of people try to do stuff that doesn't actually make sense when it comes to groups. Like selecting a column which isn't contained in the group by. And they are confused by the error but when you talk them through it "What did you actually want to see? There are multiple values for this column now" it starts to become clear to them.
Precertificates are optional. Alternatively, the CA can skip creating a precertificate. The certificate would not contain any embedded SCTs. Instead, the certificate is logged using the add-chain endpoint[1], and the returned SCTs are delivered via an extension to the TLS handshake or an extension in a stapled OCSP response[2]

[1] https://datatracker.ietf.org/doc/html/rfc6962#section-4.1

[2] https://datatracker.ietf.org/doc/html/rfc6962#section-3.3
If you think young people won't use forums, you clearly haven't seen Scratch's. (https://scratch.mit.edu/discuss/)
Could you elaborate a bit? I'm curious precisely what you mean, though I can make some guesses.
Designing to fit requirements is easy.

Making it scale economically is where all the math gets involved.
There seems to be some focus on tiling window managers, but it is not obvious to me (as a user of sway) what benefit this offers over any other terminal emulator.

Perhaps the focus on tiling wms is a justification for not having tabbing/splitting support built in.

Also, given xorg-dev dependency I assume that if one is on wayland, they are better off using alacritty.
It is possible to find isolated instances of fintech in other languages.
Yeah, take home is always lower. The 6.5-7.5 minimum is before taxes and all that other stuff, take home would be even lower.
I LOVE this! Have family members who have been renting offices at wework for their kids to do this.
I have never worked somewhere that has a dedicated database person. The SQL goes in the application code so it is the developers job to commit stuff which is performant and safe.

There is no point having developers write sql at all if someone else has to come in and redo it after.
Ah, for some reason I thought the 14 pays was for everyone.