skysight-inc/HackerNews huggingface dataset:
We have a few different strategies for this. You can read through the "levels" here[0]. (We need to expand on this doc still)

Level 1: There are no grants.

Level 2: Access requires a "shared secret" in order to authenticate to the Tokenizer. If you have the secret, get API access to the Tokenizer, and you have a copy of a token, then you can create a grant. In order to use the grant, you also need a valid session for the front-end, but if you have RCE on the back-end then you can get this pretty easily.

Level 3: Creating grants also requires presenting a JWT that's signed by an upstream "Auth Provider" that also proxies traffic. This JWT is only able to create grants that are scoped to a specific session (which is identified using a "session id" inside of the JWT).

You can still create a grant every token you have access to, but you need to get a valid session to do so. In this design, the proxy strips the cookies from the request and only forwards the JWT, which adds another step to the attack (you have to be able to login to on a browser).

This requires that you put your "Root of Trust" into your authentication provider, so you would want to "split" out your authentication/session creation into another service. We have an example app + tutorial explaining this that we'll publish soon.

Level 4: You write a separate function,called a "Secure Authorizer", that accepts a session JWT and a Token in order to "authorize" that a grant can be created for a given user.

This function is deployed in a hardened container and is difficult to attack (a network restricted Lambda).

By adding this layer, you now require that an attacker is able to generate sessions for any user that they want to leak data from. Or you require them to attack the "Secure Authorizer". It's a much more painful attack for an attacker to pull off once you've integrated all of these layers.

Does that answer your question? I'll make sure go add this explanation into that levels page.

Oh, and thanks for reading the docs! :)

0: https://www.lunasec.io/docs/pages/overview/security/levels/
Why? What were the major downsides to Equifax?
According to the authorities the museum was spreading "misinformation".

There's that word again.

What do you do when all the authorities, and all the news-sources, and everybody you know calls it "misinformation"?

Who's the bad guy here?

It's enough to make you crazy.

I mean have you met the average person? He believes whatever he's told. And with great enthusiasm.

And he hates whoever he's told to hate.

Crazy.
99% of hospitalized are unvaccinated:

https://www.google.com/amp/s/www.foxnews.com/health/covid-19...

this from fox news.
How would they even do that? Music artists are free to make their own endorsements without having to pay their label.
Without greater taxes on the beneficiaries of Amazon's profits (shareholders and people whose salaries are dependent on company performance like the CEO), UBI is itself a subsidy to those beneficiaries.
Vaccination likely reduces the chance of transmission in any single interaction. However even with a high level of vaccination all of us can expect to be occasionally exposed to the virus no matter what steps we take. The benefits of vaccination are really more about protecting yourself from severe symptoms, and preventing demand spikes on the healthcare system.

https://www.businessinsider.com/delta-variant-made-herd-immu...
If half are catholic, and half are athiest, they're polar opposites.
With Australian Telstra phones, if you called someone and they didn't pick up after a number of rings, a carrier tone would happen. If you whistled a handshake, the reciever would PICK UP and yes you literally turned it into a hot mic.

Since I no longer have a landline, I can't confirm it works now.
I deleted my Facebook because it now requires a phone number.

No thanks.
I don't wanna know how much books the classification of finite complex groups is gonna take.
A gentleman did something like that in NYC and a filmmaker made a documentary about it. https://en.m.wikipedia.org/wiki/The_World_Before_Your_Feet
Wow! Great work on an alternative.
Hackers breached U.N. computer networks earlier this year
No, using the normal term does not demonstrate that.
Hysterical! Although my wife just banned me from telling her jokes for a month.

Makes me think of Life of Brian - https://youtu.be/0lczHvB3Y9s
I'll be open sourcing one I'm building for openApi at work in a few months, in the meantime, I have compile-time generated jsonschema validators here:

https://hexdocs.pm/exonerate/Exonerate.html

In elixir parlance checking the schemas for REST (or in the case of asyncAPI, ws) transactions will happen based on a "plug" which injects the validation into the processing pipeline.
Trust me, you are most definitely not alone. Most are like you - quietly going about your business, keeping a low profile.
Free and open source: https://www.lazarus-ide.org/index.php

Other 30+ cross-platform GUI toolkits / frameworks: https://www.slant.co/topics/983/~best-cross-platform-gui-too...
The difference in license only matters because of a broad interpretation of virality. The easy way to show this is to mentally replace GPL with LGPL and notice that the problem disappears.
Because the study is wrong.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7872858/

> The benefits of mask mandates are apparent, especially when mandates were issued within a month. The impact of school closing and stay at home orders were less clear.
Leaders in the former Soviet Union learned the easiest way to erase an historical event was to remove all public record of it.

For those who do not remember they would arrest a member of say the Politburo and then all pictures of him with other leaders would be airbrushed out, sometimes even in library books. It was as if he was no longer ever born.
Health care workers here must get vaccinated against COVID-19. What happened is LOTS of nurses and so forth quitting their job. Not enough nurses was already a huge issue, now it is way worse.
China was never a member of the Warsaw Pact.
> A land war against China over Hong Kong would be ridiculous.

Indeed. It's a complete non-starter.

If the West wants to beat China they must be more subtle and crafty than a direct military invasion: the 2nd Cold War will be mainly fought using diplomacy, trade, economics, technology and spying. Not direct military conflict, apart from maybe a few proxy wars.
> The US unlikely to be enormously bothered about violating treaties if it finds doing so in its interest.

The US cares greatly about the NPT because it wants a world in which only a small number of countries have nuclear weapons, not a world in which dozens of them do.

NPT limits nuclear weapons to 5 countries only - China, France, Russia, UK, US. Four nuclear states refuse to give up their weapons as the treaty demands (and hence refuse to join it) - India, Israel, North Korea, Pakistan. But a world with 9 nuclear weapons states is preferable to one with 90

> What exactly is China going to do?

Attack Taiwan? China would likely try to call the US nuclear bluff with a massive conventional attack. The ensuing loss of human life and economic damage would be enormous.
There is no scientific evidence that it will be possible to get the growth factor below 1.0.

https://www.businessinsider.com/delta-variant-made-herd-immu...
Not sure what 80 languages are supported (couldn't find a list anywhere), but I guess Russian wasn't one of them

Tried to OCR some russian text from an image and got absolute nonsense.
> Not all fallacious arguments are trolling, as people can simply be wrong.

There's factually wrong, there's logically fallacious argument, and there's "I don't agree with you, so I will say you're wrong, and be condescending to impute your reasoning, but actually, I'm not the teacher, or the font of wisdom" wrong.

Yes, people can simply be wrong. Lincoln didn't write internet jokes online. But, oftentimes, "wrong" is actually "I don't agree with you, but saying you're wrong is more win"

I tend to all three (factually, logical reasoning error, and opinion) wrongs. So I'm used to seeing all three flung back at me. There. Flung. thats emotive. Probably casts (ha) things in to a specific mode of reasoning...
Is the Internet Fast
> The vulnerability was fixed [...] by adding size checks for the name and value lengths.

Would it make sense in this case to review the entire codebase for valid size checks? Genuinely curious. Not interested in debating one language VS another this time, merely, the best practices for the language specific to this codebase.
Janet Yellen warns US Treasury risks running out of cash in October
I will say that in the most part I agree with you. It is better to live in a civilisation, pay tax, have the litter collected, the roads paved, rather than trying to roll your own.

However, being able to, to varying degree, opt out of said civilisation when it runs counter to your ideals or becomes to authoritarian or means that existing within it could compromise what you believe in, is important. The cloud is great, but we must strive to have the skills to be self reliant so it is truly a choice to participate in it to the extent that we do.
We were aware of that as a possibility, but as I said in the post over several years of doing this we never lost more than the cost of a money order.
https://archive.is/NgU8g
Here's how it should be done by the pros: https://www.youtube.com/watch?v=dz7CI-Cyk2s

Only joking off course, but how portable could this sort of equipment actually be?
> when a dev tells me "two weeks" I smile and say "I believe you meant SIX weeks, right?"

Wanted to chime in and say _thank you_ for giving me the prompt that this is an "OK" thing to do. (as a technique for trying to encourage/help devs build in good buffer)

As another dev-converted-to-manger, who was also somewhat taken back by that same perception of the malicious manager (I certainly had that perception from time to time as an eng, so it's not entirely foreign although I am surprised by how widespread it seems to have become) what you've written really resonates with me; One consequence is that I've become way more forgiving (in terms of trying to proactively improve it) for what I used to perceive as "bad management" as I struggle to improve my own techniques :P

> This "Us vs Them" thing is bollox - we're all on the same team as far as I am concerned!

I swear I want to scream this from the rooftops in many of the ragging-on-management threads I see but I know it's not the dev's fault for feeling miffed, a bad manager can _wreck_ your life, but I wish I had a magic password I could tell devs to let them know "I'm here to make you/your work successful, not the other way around, and if I'm ever failing at that I _want to fix it_."

(As sister responses point out, this is something earned, and fully agree, it can just often be an uphill battle, potentially rationally from what devs have experienced prior; again just trying to give everyone in the picture the benefit of the doubt as I'd hope they would me.)

> what would I know, I'm just a dumb-ass manager

You're in good company :)
Taiwan did seek to preserve the heritage of China after the communist takeover on the mainland, which sought to pretty much destroy said heritage in a cultural revolution.
Golang Front End Components
Maybe that's what they want. Then they can blame those who haven't taken the shots for the labor shortage crisis that currently is being blamed mainly on government unemployment benefits and other assistance programs.
I'm not very knowledgeable of physics, but my intuition is that a fractional type should just be a type that falls between the characteristics of two integer types. So if A is the electromagnetic force and B is the strong nuclear force, A.5 should be some interaction that exhibits characteristics of both, is fully described by neither, yet exhibits no properties which can't be typified by some combination of the integer endpoints.

Of course that raises the question of "shouldn't A.5 then just be considered its own type?" at which point I suppose we'd have to refer to how these "types" are constructed, which seems more like a mathematical/computational (ontological?) question than a purely physics question. Then, I suppose, the question further resolves to: which assumption makes our equations easier to work with?

Please correct me if I'm entirely off-base.
In most counties in the west, reserve requirements don't constrain lending. For example, Canada, the UK, and Australia have a reserve requirement of zero. Fractional reserve banking doesn't really exist anymore outside of economics textbooks.

Capital requirements are what constrain lending in the west (I think the Chinese government does try to control lending in part via a reserve requirement). For example, the "Core Tier 1 Capital Ratio" [0] is extremely important in this regard.

https://www.investopedia.com/terms/t/tier-1-capital-ratio.as...
Maybe because their handelers are forbidding them to fix it until they are done with it... maybe I'm paranoid.
You personally know two people with maybe side effects, meanwhile we know of over 600k dead Americans from the virus.

We also know 99% of hospitalizations are now from unvaccinated people.

The math is not in favor of your logic.
"Let us never forget this fundamental truth: the State has no source of money other than money which people earn themselves. If the State wishes to spend more it can do so only by borrowing your savings or by taxing you more. It is no good thinking that someone else will pay-that "someone else" is you. There is no such thing as public money; there is only taxpayers' money."

https://web.archive.org/web/20110606031420/http://www.margar...

In England, sometimes we need to explain to us where money comes from, just in case anyone forgets. :)
> That would be an interesting tradeoff conversation if true.

While no-one can predict the future, we can have a good guess what a democratic China would be like, because one exists. It's called Taiwan. Which is richer per capita and arguably more stable than the PRC.
> If there were sizable numbers of US troops on Taiwan, I don't think they'd attack. They don't want a major confrontation, at least not yet.

There's a decent chance at this point that all those troops would do is hold the airport for a rushed evacuation mission.
VCL on Delphi and LCL on Lazarus ( https://www.lazarus-ide.org ) are pretty neat and feature rich wrappers.

It's not the rendering that's the issue - it's the work involved in making them conformant to the different OS guidelines, and dealing with the intricacies and quirks of each OS. It's more practical to extend and enhance what is lacking, rather than rebuild the whole thing again in 4 (Windows, macOS, Linux, FreeBSD) different ways.
This is the kind of comment that make me really hope that we can kill energy intensive coins before that happens.

I mean if we 10x the waste heat that could be produced by asics solely for the purpose of mining coins, it could be enough to create a mini climate.
> regular people hearing "NGO" interprete it as shady-leftist-organisation

https://en.wikipedia.org/wiki/Propaganda
What the article says is that to lend out more than $900k it has to increase it reserves (maybe borrowing from other banks). Not that it can lend out $10m with just $1m in deposits.

“By attracting new deposits, the bank can increase its lending without running down its reserves, as shown in the third row of Figure 2. Alternatively, a bank can borrow from other banks or attract other forms of liabilities, at least temporarily. But whether through deposits or other liabilities, the bank would need to make sure it was attracting and retaining some kind of funds in order to keep expanding lending.”
Anecdotally I can report myself having an enormous excess of free time but only because I'm in a tough financial and mental situation, I have no job, but I'm also living a very frugal lifestyle to compensate. This frugality leads to few possibilities to meaningfully go forward. For the last year and until next month or so I'm having basically unlimited free time, but I'm not happy about it.
> You are free to make your own choices within the bounds government policy.

You are free to make your own choices in your prison cell.

> Even if vaccination did not reduce transmission rate, it increases survival rate in the event of infection

Taking away ones livelihood is a great way to increase survival and improve health.

> I am exhausted

Authoritarianism, fascism, and doublespeak are all very exhausting indeed.
SDF 2D fields are fun though.

Give you can create them from any cubic curve and it gives you offsets from it.

https://www.iquilezles.org/www/articles/distfunctions2d/dist...

If you offset in both direction from a curve, you can pick a start and end threshold to fill an outline. This only gives you rounded outline strokes. If you had separable tangential versus normal SDFs you could vary your end cap types.

Now how do you handle an arbitrary set of knots/control points in one shader? That is a separate problems for which there are a bunch of solutions.
Battle Droid Galactica
because the science is evolving so we shouldn't have to mandate those who already have natural immunity. Will coercing someone who has natural immunity to take a shot or lose their job be truly that much more beneficial to justify? I don't think so and it's ethically wrong.
Overall it is, but the more fine-grained closure captures and the enabling of array.into_iter are both pretty nice improvements.
Calling that a fault shows bias. You could just as well call it a choice.
https://www.quantamagazine.org/fractons-the-weirdest-matter-...

I'm not conversant enough with physics to do more with this article than say "wow, that's cool!" and let my mind run into all sorts of fun science-fictional speculation... but wow! Fractals are cool, and fractals in _physics_ are _very_ cool!
I generally agree with your take, although professional sports players have unions that seem to work well for them despite being skilled workers with large differences in talent.

I guess there's no hard requirement that unions get involved in pay negotiations, and that's the only one I know of that seems to have workers' pay in-line with actual market factors. It's not like Tom Brady has to get paid the same amount as a lesser-performing quarterback just because they've been doing it the same amount of years.
My argument is that mining is not meritocratic.

In the same way first ever land ownership is definitely not meritocratic. (See violence over land or enclosure acts stealing land from the commons)

We need universal basic income to distribute wealth. Any new currency suffers from the landed wealth problem where a group of people is designated the aristocracy through landed wealth. That is, it's not democratic, universal or voted.
I didn’t think there were people who still believe herd immunity is possible at this point. Maybe that’s not what you’re saying?
Seems to me that Lisp weenies have been outsmugged by Haskell weenies.
Clojure ecosystem really need something similar. The ability to not have to deal with Clojuscript and to pack-ship an app with desktop UI easily.

With the work you did on Skija we have high hope! Good luck and keep us updated
Yes, the UK (with US help) stole Hong Kong from China to help in its effort to turn Chinese people into drug addicts during the Opium wars. It's why they killed Chinese in Hong Kong in 1967 protesting the UK occupation (a few years later the UK gunned down unarmed protestors in Derry marching against British internment camps).

Watched the liberation of Kabul from foreign imperialists last month and have to laugh at the pious western liberal imperial impotent ramblings I see here.
Right, but there was a source of knowledge (the two older employees) to obtain information from. If one of those older employees is irreplaceable, and they leave, it's going to seriously impact production systems.
You don’t understand hyperinflation if you think you can print your way into it. Hyperinflation has only ever occurred due to real problems in the country, a total breakdown of normal operation.
It's just wild to me to see American politicians gamble so much with their golden goose. Risk of a default is very low I think, but even a few administrative missteps could destabilize the US dollar as a reserve currency.
Airplane: A New Approach to Internal Tools
Yeah, exactly.

If you're running on AWS (EC2, Lambda, ECS, EKS, etc), for example, you can query `http://169.254.169.254/latest/meta-data/` and it'll return a valid AWS access token. (That's how attaching IAM permissions to an EC2 box works.)

That's being replaced with v2[0] but, at the time when I was building these SSRF proxies, that didn't exist.

Beyond that case, it's also pretty common to have sidecar processes running on the same machine in modern Kubernetes deployments. Having an additional firewall proxy is too expensive for certain high performance environments, so it's commonly assumed that traffic to sidecars is trusted. (Mutual TLS is being used more frequently now, but that's non-trivial to deploy because key management is a PITA)

[0]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configur...
> very reasonably relabels SaaSS (Service as a Software Substitute)

Heck no. "as a" already means that. Rewriting the acronym is far more petty than reasonable.
IMHO this is all wrong.

We already have a framework for physical networking services that does this: Common Carrier. It doesn’t and shouldn’t apply to companies other than “dumb pipe” utilities. No company which can or does do any moderation of content should be governed by CC laws.

You seem to think forcing all companies on the internet to maximize democratic values is somehow either possible or a good idea. I can’t see how that could be implemented without destroying every company’s ability to build a brand, to enforce their own contractual terms.

Example: you local church/temple website that accepts with user-generated comments would be forced to allow and keep every comment submitted, no matter how offensive to the members or the faith the church practices. Non-believers would be able to deface the service in a way that trespassing laws prevent IRL. This compelled democratic values maximization concept doesn’t exist in the offline world so you would have to build the logical/rational foundations for doing it from scratch. Obviously the church/temple example is contrived and those are far from Big Tech companies, but if you assert that some services are required to retain all offensive content and others aren’t, then you need to develop a litmus test, which I argue is futile.

And from where I stand, demanding a civic process is really strange considering most civic processes in the USA are deteriorating while Big Tech is doing the opposite.
Depend on the company’s
Most companies I keep my mouth shut.

And I mostly just want a balanced budget.
This has become harder as more places are requiring active participation in woke mentality.
except a lot of doctors will be unwilling to give out medical exemptions because they are afraid to lose their license (even though they agree with the patient). It's happening here in Canada.
> Oh god damn it. This space is severely under-served. It's only filled by Xamarin Forms, React Native (kinda), Flutter and web. They all kind of suck for desktop apps

This might prove the OPs point, that trying to target both creates a mediocre middle ground? And could explain why you're unsatisfied with approaches that chose to do that.
I wouldn't call Instagram influencers the "little guy", many are millionaires (either off the back of social media or old school Kardashian style). They milk their fans through unregulated advertising and get richer.

With the attitude that regulation disproportionately effects start-ups or small businesses no regulation would ever end up law, which seems to be the point of this style of comment.