skysight-inc/HackerNews huggingface dataset:
"No private information was publicly visible, but teacher Social Security numbers were contained in HTML source code of the pages."

They definitely have a different definition of "publicly visible"
I'd recommend trying one of the big three. If you value performance, FreeBSD. If you like a really well-documented, simple, coherent system, OpenBSD. If you've got a real tinkerer mindset, NetBSD--like, kernel extensions in Lua, run it on anything you can find with a processor in it.

They're all good. I wouldn't over-complicate it. Just look at the one with known strengths that most match what you most value and dip in. A lot of the knowledge crosses over if you want to try other ones anyway, they're all related.
Not so much about being unique as about being credible. Specific claims are more credible than general claims.

I feel “experienced engineering team player” does not sound credible. We know this about ourselves so we don’t question it. But from the outside in, there is no value in this.

On the second point, Acme Games was an example. If you say, Software developer at Uber, that has immediate credibility. People assume things about you.

I am surprised when I see resumes where people go on and on about how experienced they are and list programming languages and modules in their resume summary but don’t mentioned where they went to school or where they worked until much later in the resume.
The Battle for God by Karen Armstrong has been a huge influence in how I view and interact with folks who are resistant to change. While the book itself is about religious fundamentalism, the primary thesis - that fundamentalism is a repeatable, observable reaction of those who feel modernization has been forced upon them and those folks inevitably go on to create something entirely new and unique as a response in their efforts to preserve "the old ways" - is shockingly applicable in a wide range of cases. I've thought about this both while responding to RFPs and chatting with neighbors, for example.

From the preface (or maybe chapter 1, I forget and gave away my copy so I can't check):

Modernization has always been a painful process. People
feel alienated and lost when fundamental changes in
their society make the world strange and unrecognizable.
... Fundamentalists feel that they are battling against
forces that threaten their most sacred values. ... Those
of us — myself included — who relish the freedoms and
achievements of modernity find it hard to comprehend the
distress these cause religious fundamentalists. Yet
modernization is often experienced not as a liberation
but as an aggressive assault.

https://en.wikipedia.org/wiki/The_Battle_for_God
Canvas Launches New Self-Serve EMR and Payments Platform for Healthcare Devs
I don’t expect that it is sufficient, but it probably gives the IT person something to tell their boss in the short term: “We’ll verify, but he says he only accessed X”.
Gotcha, like "I do solemnly swear". I see, I did get that wrong.
"That's just not how lenses work, fundamentally."

Go to the wikipedia page on depth of field and see how it is calculated.

"Cheap macro lenses in 2021 are typically around 24mm"

You claimed they were the norm. Now it's that they simply exist.

"Focus stacking is needed"

Focus stacking is needed when the depth of field is so small that the resulting photo would be unpleasant. This is the case for almost all macro photographs shot on SLRs. It's interesting that someone else claimed this is a fixed issue and posted a photo that looks like it was taken with one of those terrible lens adapter kits. If that is one's standard for "fixed", then sure, but most of us have higher standards.
This is exactly what happened to weev. He found that information that was intended to be private was made publicly available by AT&T.

Weev went to prison for typing in URLs that he should not have. They were criminal URLs, just loke thess.
Speak with Warmth and Openness, with this font
Transporting and setting up 1,600-ton, 400-foot-tall cranes
How to Unthink Epigenetics (2015)
> It is, by and large, crap and incomparable to the kind of journalism that dedicated professionals used to provide before cable TV ratings and algorithms destroyed the incentives.

Print media consolidation and cost-cutting did that before cable news rose to prominence (people were complaining about it at least as far back as the 1980s), much less online media and its algorithms (which, anyway, optimize for exactly the same thing ad-supported media has always optimized for.)
I already agreed that this doesn’t warrant unkindness.
Interview process sucks, you aren't FAANGM
Do you think that photo demonstrates that it's a fixed issue? You seem to have around 3mm of depth actually in focus, and even with a very, very shallow subject, parts are unpleasantly out of focus.

I don't think that is the demonstration you think it is. Most macro photographers would not rack that up as a successful photo.

And again, focus stacking is what everyone does to compensate for the DoF weakness.
How to Use Hydra as Your Deployment Source of Truth
I think the governor ought to resign. He’s taking something that is, ultimately, HIS fault and trying to pin it of course on “the media”. The SSN numbers were in the page; they were in the source code. “View source” is not decrypting a webpage. God, I know he just has no technical understanding but even then he should be smart enough to get the details and realize they weren’t “hacked”. This person clearly doesn’t understand what a free press is —- they could have legally ran the story without even alerting the state agency, but they did the right thing and this idiot governor is still trying to deflect blame.
Most people are strongly emotionally attached to their home country. Not sure why you would expect the breakup to be low-stress and unemotional.
I think they are just going after the "easier" [1] prey first. Give it time and enough existing victories to use as precedent to fight the harder battles. XBox and Playstation will be next if they manage to win in appeal against Apple and win against Google.

I think Microsoft is actually scared that they are on exactly that warpath with some of the things they've been saying about Fortnite and the big exceptions they seem to be making already in advance to Fortnite IAPs in the Microsoft Store, at least on the PC. Still remains to be seen if they plan to make similar gestures on the Xbox itself which for now is relatively a stronghold.

[1] One of the obvious reasons it is "easier": Given the average age of a US Federal Judge they are far more likely to know and use a mobile phone than to know and use an Xbox or Playstation. So less to explain to Judges.
Revisiting BetterTLS: Certificate Path Building
This morning on the newspaper there was the story of a local artist who has auctioned his latest artwork for the equivalent of $30K. The great work of art is a magnificent invisible statue. Not a word in the article about how strange a transaction where a signed piece of paper representing nothing tangible is sold for a relevant amount of money. Perfectly normal.

Invisible artwork, I don't get it. As I can't understand NFTs in general. Scam? I don't know. Money laundering? Yes.
Blender Secrets is also very good.

One-minute tutorials about a tool, a certain specific way to achieve X and alike.

https://www.youtube.com/c/BlenderSecrets
Well for starters you'd be eating nothing but canned vegetables and jerked meat for most of the winter if you live far enough north to regularly get snow.
This comment has a blindered, dogmatic smell.

If the only tool you have is a hammer…
Funnily enough, WW2 is taught in a very sanitized way. Its more along the lines of "we had disagreement, we had a war, we were all somewhat wrong. let's move on and be peaceful". People take offense if you prod along the topic further. They don't want to talk about it anymore.
>if the person letting you in wasn't expecting you and didn't want you there.

Then they shouldn't have let you in. How are you completely absolving them of responsibility when all they had to do was say "Who the hell are you? No, you can't come in."
Pretty much all fatal single-car accidents are suicides, IIRC. Cops play nice with the grieving family so they can get their life insurance benefits.
I see this all the time, with people not understanding where files are or that there is some kind of hierarchical filesystem lurking behind the covers. Thanks for the link.
Spinoza’s God: Einstein believed in it, but what was it?
Because it would be a privacy issue. But that assumes they're looking at your information on purpose, and not just some price tags.
That’s the point - to highlight that weather isn’t climate. Average temp up 2 deg Celsius means 100F weird weather in the polar circle in the summer.
Litmus | Remote (USA, UK) | Full time | https://litmus.com

Litmus' goal is to help email marketing teams send better email. To do that, we've built a suite of tools to help with the building process, allow performing QA with device/client screenshots, enable collaboration on designs with teammates, and analyze email performance post-send.

We're looking to hire two Rails developers to help add/improve features and build new products. Day to day, you can expect to write Ruby and JavaScript (vanilla, Vue.js, Ember). We practice CI/CD with great test coverage, are sincerely good about work/life balance, and have some exceptional benefits (e.g. 28 days of PTO + stat holidays).

Please see the listing for all of the details:

https://grnh.se/3445d0254us
To install any apps on an iPhone at all, you must give Apple your billing information. Even if you install apps from the Google Play store, you do not need to give up that much privacy.
Right click.

View Page Source.

That's 2 steps. Hence, multi-step.
Your article is too old.

https://www.businessinsider.com/sweden-covid-no-lockdown-str...
I use Linux distributions since 1995, starting with Slackware 2.0, there is always someone that tells that.

Hence why I mostly run Linux on VMs nowadays, and Android/Linux.
> I think the analogy would be going up to the desk and saying: my id number is X (when its really Y), can i have my file.

Not at all because what you describe involves impersonating someone else.

In the OP case, they were authenticated in the session as themselves and always acted under the truthful identity and asked for a document and access was granted.

So the analogy would be going up to the desk and saying: I'm John Doe, my id number is X (truthful value), could I see file ABC? And the attendant checks that id==X does have access to document ABC, and thus hands it over.
> ... and you shouldn't expect a warm welcome from the security team.

The appropriate response from the security team (after verification) is to pull the site down or immediately patch the vulnerability, if possible. Making an outbound call to a third-party is pointless and irresponsible.
"deceit, falsehood or other fraudulent means" => editing the URL is neither of those. Forgig a cookie for access is, just like randomly trying passwords and usernames.

The closest real life example I can think of would be along the lines of:
- your car is in a public parking space and someone look inside vs
- the same car is in the garrage and someone breaks the door to look inside your car
I have an insider's info about the airline shortages, I suspect trucking is the same way.

When the pandemic was going on and everything was shut down many of the older staff decided to just retire. You cannot quickly spawn up new pilots or ATCs. Some small percentage of workers are facing a medical mandate they may be unwilling to comply with and so are using any sick days that they may lose after being fired when the mandate hits. The ones that remain are so overworked they are exhausted and unable to work more and/or are getting sick due to stress and exhaustion.
Yes. Most online discourse about politics will eventually have someone claim fascism or make a Hilter reference.

If you aren't among one of the two sides it can be humorous to watch at times.
Blender won, in a few years it will kill every and all competition. It is a great example of open source disrupting markets that have been traditionally entirely dominated by proprietary software.
From the extremists, yes, it is common. The "other" side's elected officials are nearly always labelled "fascists". However, the majority of the electorate is smart enough to recognize that it's just a failed appeal to emotion, and nothing more. (except maybe exhausting)
> you may need to be an accredited investor, sure, but you can still take on risk and invest in whatever you want

How is this not a contradictory statement? Are you claiming that anybody can become an accredited investor? That's incorrect, you need to be pretty damn close to the 1% to qualify.
Recently?

https://www.sec.gov/enforce/selected-division-enforcement-ac...

Facebook, Tesla, Nissan, GE, Wells Fargo, Rio Tinto...
Firefox actually had both, you could always search with the "main" bar. That's why having two has been so infuriating over the years, if I ever had to use Firefox, I've removed the search bar immediately.

However, one thing that Firefox failed to fix over dozens of versions have been one-word-searches, which Chrome handled correctly while Firefox tried to resolve that one word as a domain and didn't even fall back to search if that failed. That single thing has brought me back to Chrome within minutes every time I've wanted to try Firefox again.
"In a press release Wednesday, the Office of Administration Information Technology Services Division said that through a multi-step process, a “hacker took the records of at least three educators, decoded the HTML source code, and viewed the social security number of those specific educators.” Ha, or summarized a user clicked "View Source" in their browser. Well I guess the first of the multi-set process is open said browser.
That's just a conspiracy theory. I mean, yes, Protection of Entrenched Interests is a real thing, Regulatory Capture is a real thing. There are real issues to discuss there.

But to argue that the purpose behind the SEC et. al. is to ensure "the elite can stay in power" or that "common folks are restricted" is just ridiculous tinfoil hattery, sorry.

Outrageous scams in crypto are a real and significant threat. Everyone can see that. That they aren't traditional finance is quite clearly because of the regulatory regimes that control them.
Exactly. Thank you nosy media. This anti-press stuff started with Trump. Terrifying how authoritarian the right has become.

Reporters, please continue “embarrassing” all states. The sane leaders and citizens will be thanking you.
The NY Times, Wall Street Journal, and Washington Post have all adopted partisan baiting techniques to draw in subscribers. (IMO, they've done so in that order, with Washington Post the most extreme, and NY Times bringing up the rear but quickly closing the gap as they've cycled out their older reporters with younger ones the past few years.) Their actual news reporting has suffered considerably, though they're such large organizations with enough veteran journalists that they do still put out some good pieces somewhat regularly, especially relative to newer media and smaller media.
Obviously this person from the IT department has very little understanding of how computers work, and I'm not saying they should.

Each time a breach like this or in the original post happens, it makes me feel that our tools are just not there yet. If there were simple tools that caught vulnerabilities like this we would improve the standard of security.
This is not typically the default setting in zsh (it is if it’s acting like ksh.) Your distributor has probably “helpfully” set it up this way. man zshoptions and look for “SHARE_HISTORY”.
Umm, this seems to imply that these security vulnerabilities are intentional, which doesn't seem like what is happening. In your mayor example, you wouldn't go to the mayor because you know he is intentionally trying to break the law, so going to him doesn't make sense.

Incompetence is very different than malfeasance.
The CDU party no longer holds the majority :-)
I did that once a long, long time ago with the organization that monitors maritime piracy around the world. They have a mailing list which I accidentally stumbled on that included I assume since I only saw the one page of email addresses that ended in top level domains like un.org and navy.mil thousands of email addresses. I contacted through email the people running the organization that I accidentally stumbled on the page and they should probably hide it which they responded thank you. If you have ever been to Washington DC you would know the amount of money military contractors spend to show the latest navy vessel to everyone at the Foggy Bottom metro station and other places where such ads seem unlikely. That was the mother of all B2B email lists for militaries and shipping companies around the world. I didn't want to play any games with it.

EDIT: Remembering it now, there were also email addresses with the Iranian navy as they coordinate with other navies to fight piracy too. Perhaps instead of sending a Rickroll I could have sent a mass email with Lennon's "Give Peace a Chance."
When did Facebook say only criminals have something to hide?
I really appreciated this, thanks.
Here's a nod back.
Even if the absolute number is wrong (which it isn't, necessarily), the relative trend is dramatically upward, and the biases you describe wouldn't appear to account for such a trend.

> The results show a record-high 415 children killed themselves in the year through March. That's up nearly 100 from the previous school year.

I believe this is mirrored in other countries. The pandemic really hasn't been great for a lot of middle/high school kids.

Also: please be mindful that generally if some "obvious fault" occurs to you, it probably occurs to the people for whom this is their professional area of expertise or even life's work, their work has likely been reviewed by a number of their peers, etc. Internet discussion forum commenters are highly unlikely to be the first person to think of some flaw in their work.

I'm not saying they always will do said correction, but that if you're going to be skeptical, check to see if the correction was made instead of just dismissing or discounting the data, and be especially careful about your personal biases.

Note that such corrections might only get a passing mention because corrections for under-reporting is so common in epidemology.
I know, right? By that logic, I've just decoded your comment by reading it.
British Conservatism != American Conservatism.

Not even close.
Enforcing expiry of root certificates on a device which no longer gets root certificate store updates is essentially creating “planned obsolescence”. I know it's not the most comfortable thing, but for the sake of avoiding things becoming e-waste too early, it's important that devices allow ignoring root cert expiration.
It is amazing how much truth they stuffed in to that show
GitLab has features in the Enterprise edition that aren’t in the Community edition don’t they?
Well they are not wrong. Lumber price was sky high. Change the time scale to 10 years and that peak was still unprecedentedly high. Inflation was and is still high. The mainstream media are reporting the truth, as far as I can tell.
> In one sentence, what is your primary source of revenue expected to be (aside from VC funding if any)?

Freemium model: advertisement based, with a subscription fee for some extra content personalization.

> Do you intend to sell or operate personalized advertisements?

Not "personalized" the way that you are intending. At the moment we do fall back to programmatic bidding ads like AdMob by default, but the general idea is local based ads. Since its local news, and we know your locale, we sell to local businesses -- it's essentially the same "targeting" that your local newspaper has been doing for the last 100 years.

> Do you intend to sell anonymized (or not) customer data as a revenue source?

No.
Some discussion here[1] already.

1: https://news.ycombinator.com/item?id=28864458
Dockworkers being poorly paid is definitely not true. It's been a while since I lived in Long Beach, but these were among the most desirable jobs you can get. Any time the union announced it was hiring, they needed to do a lottery to even get the opportunity to apply. Whatever the reason it is that not enough people have this job, it isn't that they don't want it or that it doesn't pay enough.

Trucking pays pretty well, too, but comes with a different set of challenges. You have to be willing to live on the road, sleeping at truck stops or in your own cabin, never seeing your family if you even have one, sitting for 8-12 hours a day and destroying your spine orthopedically. It takes a special kind of person to want that job no matter how well it pays.
>The reason mobile devices aren't taken seriously as "computers" is because they're locked down and they're still treated as second class by most services.

100% agree with that.

My point is that there's very little work that doesn't in some way touch mobile devices. Most people use them for communicating about work all day every day. And yet still, like you said, they're treated like second class devices. Despite clearly being the largest form factor in use!

I think this is the legacy of my generation I'm trying to put my finger on here.

As long as us millennials create services, they'll be desktop first. Because that's how we're used to thinking.
But when gen Zs create new tools, I would be surprised if they weren't mobile first.
Yeah the role of marketing in influencing public opinion should not be discounted.
Is this only for the solidity part, or can you work on the FE (react?) part at the same time?

Is this a good on-ramp to full-stack[0] web3 development?

[0] By which I mean including browser code, not just smart contract code
But GitLab is the same concept...
Isn't that issue mostly raising inequality rather then elite overproduction?
Who browses the web with Dev Tools exposed by default? Why do you feel the need to "fix" every web page you look at?
The Incident Response Lifecycle
You didn't invalidate either of those two quotes with anything of substance, other than assuming they are wrong. That's bad faith reasoning.

You fabricated the term "super sustainable", which is claimed nowhere. The claim instead refers to the relatively high percentage of renewables compared to several other industries, whom often score in the 10-20% renewables range only. As to whether 56% is accurate, I don't know. Yet if you don't know, you can't be confident in it being wrong. You simply don't know.

The second quote isn't even a claim, it's what factually has happened. China shut down almost all Bitcoin mining overnight yet it did nothing to Bitcoin. The network self heals by means of a difficulty adjustment and miners moving elsewhere. A super power shut down the entire thing and months later the hash rate is right back where it was. That's extreme resiliency.
Actually the US has many ways to hide your assets (just looks at the South Dakota trust system). Look at the pandora papers and you'll see a lot of people hiding their assets in the uSA.
The first NFT project that will allow you to create art from your voice
A closer analogy would be that you keep the name as your name, but change the # of the document you're requesting. It's the IRS's job to ensure you're allowed to retrieve that doc.
The usefulness of having state legislators from a variety of backgrounds:

Republican state Rep. Tony Lovasco, who according to his legislative biography has worked in software deployment and maintenance, tweeted Thursday that “it’s clear the Governor’s Office has a fundamental misunderstanding of both web technology and industry standard procedures for reporting security vulnerabilities.

“Journalists responsibly sounding an alarm on data privacy is not criminal hacking,” he said.