skysight-inc/HackerNews huggingface dataset:
1) on Windows entails a significant security downgrade, as you cannot just pick custom kernel extension only, with validation by the user. That might however not be important, depending on your threat model.

For 2), it’s borderline impossible to get a driver signing cert for macOS nowadays for individuals, it’s easier on Windows.
Kotlin is still run by the company that makes the best Java ide, no? I don't expect kotlin to get pushed out so easily.
Download Firmware Samsung Galaxy A10 (SM-A105FN)
Bitcoin is a bounty designed to force the government to reveal which algorithms are secure: https://news.ycombinator.com/item?id=28860239
I like to hear about other people's failure. For one, it makes me less critical of my own failures. Then I can also learn and improve for the future.

I have two Android apps. Neither bring in money. One I intentionally did not monetize. The other I tried to. I targeted the wrong audience and my UI could have been more flashy.

I've had ideas for other projects, but they're usually already patented or they're too niche to really make money (involves some hardware).
Right, the SSNs were in plaintext in the html code, and the reporter is a "hacker" for looking at in the browser, reporting the problem to the state, and then to the public. I wonder if browser makers are complicit for including the source view feature.
> I assume they allow some driving on the old road for emergency vehicles and moving trucks?

Usually there are, although they are shared by pedestrians, bicycles and cars/trucks alike.[0] There has been some valid criticism with regards to shared spaces, although in my opinion a lot of that criticism comes from not being used to the concept.

> I guess there would be a lot of resistance in the US if it relies on public transit.

I wouldn't be surprised. Most US cities have been built or rebuilt around cars and car ownership. That's a lot of entrenchment and I don't think it will be easy to move to a different model. I'm convinced that one first needs an established public (mass) transport before you can start transitioning to a model with less cars on the streets. That however is only really possible by a public enterprise and that I don't see happening for the next few decades anywhere near a noticeable rate in the US.

[0] https://en.wikipedia.org/wiki/Shared_space
Really interesting! It's common to see s/groins/groynes/[0] installed on many UK beaches, which helps when the shore is also small rock/pebble. But this seems more dynamic and natural, I hope it works in the long term!

[0] https://www.seawallprosfl.com/wp-content/uploads/2017/04/max... and https://www.seawallprosfl.com/ways-to-prevent-beach-erosion/
Zio is pretty much what you want. No need to understand category theory, no over-reliance on implicit resolution, ...

That said you don't need to understand that much to use high-level libraries in the Typelevel ecosystem. And when I do need to reach for low-level constructs, I find nice that everything is built upon clean and composable abstractions.

You mention Akka, it's kind of its own beast. The inner workings go definitely way beyond "better Java", yet Lightbend needs to provide a surface API that plays nice with Java interop. It's not an ecosystem easy to navigate in my opinion.
My entire childhood just flashed before my eyes. What a great video. Non-stop nostalgia. Thanks!
You aren't addressing the question. The poster asked what specifically tech workers could do. You are giving examples of things _anyone_ could so to help fix the situation, aside from "just stop working for them".
Didn't the kiwamijapan youtube guy figure out how to do this years ago? Really even then, it's not a new concept. Inmates in prisons turn toilet paper into daggers and I'm sure there are antiquities of sharp objects made from wood and other materials. I don't really understand the significance or newsworthiness of this.
So what's the use case for having Firefox installed at all if Chrome is installed? What can Firefox do that Chrome can't?
>In order to act on a claim (inaction is also an action; "avoid committing oneself to accepting" is just ornate wording for choosing inaction) one must evaluate the "probability of truth" of said claim.

There is no requirement to evaluate the truth value of an ill defined, nonsensical or self-contradictory claim. In fact, a claim of that nature may as well be regarded as being meaningless. On those grounds, it makes no sense even to speak of probability in regard to such a claim.

>Honest answer: Then I invite you to attend a consensus conference

A 'consensus conference' may do one of two things:

1) It may dedicate itself to the evaluation of rational argument and evidence, in which case it is the argument and evidence that matters, and the consensus is irrelevant.

2) Some other means may be used to arrive at consensus, in which case it may be irrational, or at the very best, unscientific.

Note that the position that OP advanced, and which you appear to be defending is that the bare fact of the existence of a consensus should be treated as primary evidence on its own. At best, a consensus is secondary evidence, a pointer to the real crux of discussion, and treating it as primary evidence is a category error which is only compounded by the air of authority implied by a consensus which adds psychological coercion into the mix.
@dang This comment is negative, and doesn't contribute anything productive to the conversation. Please remove
> So yes, you can install GNU/Linux, but it’s far from an easy experience. All thanks to Microsoft. And to the companies writing those buggy firmwares.

Has he even tried installing Linux on it before publishing this rant?

It works OOB on pretty much all machines, even with secure boot turned on. Worst case scenario, you can just turn secure boot off.

I seriously don’t get why people are still making a big deal out of this, 10 years or more since this was first arriving as a concern.

As it turned out, there’s still nobody preventing us from installing Linux on our PCs. Instead we only have one extra option if we want to improve the security of our boot process.
I can see where you are going with it but the justice system is like a delegated validator with a mandate and specifications on how to apply “fairness”. I guess I am arguing they specialized in kicking people out of the community with the mandate to rehabilitate so the rejoin the community. In no way am I making the argument that that’s what actually happens.
It depends on what your threat model is. If its individuals, local law enforcement, or even national law enforcement (context dependent) you are trying to hide from, you can obtain phones with cash and make it very difficult to link them to you (use a sim card bought with cash and never give out that number, use a VOIP service for your primary number, use an OS that doesn't send back much telemetry, turn off location, never use the phone near your home, etc).

If your threat model includes targeted attack by a major intelligence agency, just accept that you are likely screwed.
I disagree - they are correct because once collected, the data is fed into a blackbox, and a user has no way of knowing if the data collected is - by your definition - spyware or telemetry. The beat way to treat this Schrodinger's telemetry, is to assume it's spyware.
Your example alludes to why there will always be a rift between UTC and local representations. Unless your system can understand "one hour after I end work for the day" correctly, any representation of that time will be subject to not just local timezones changes, but local work conditions for one or a few people (otherwise it can't be assumed a single time instance).

One is a a representation stripped of most ornamentation to be universally agreed upon, the other is a representation with many additional layers of context so it's locally understood.

There will likely always be a trade off between these, as a universal time is useful in all cases for only a small group of people, while a local time quickly loses relevance out of a local context.
The first two generations had a ring of buttons around the wheel rather than a touchwheel; menu at the top, play/pause at the bottom and skip backwards and forwards on the left and right. The third gen moved these buttons to between the wheel and the screen. Fourth was clicky wheel, I believe.
A proper bug bounty program facilitates that, however, it seems that Apple has mismanaged theirs to the effect that it drives frustrated researchers to not report their findings to Apple.

E.g. https://news.ycombinator.com/item?id=28469193 and https://news.ycombinator.com/item?id=27564236
Lol, dude, you're missing the entire point. I understand it hurts to learn that a company you've been paying turned out not to be what it claims to be, but no one is "tossing around" wikipedia links other than you. And you're doing it sort of badly, the link you tossed is equivalent to just throwing: https://en.wikipedia.org/wiki/Security in an argument.
That being said, from a taxonomic standpoint, Thai basil, lemon basil, and western Sweet Basil are both varieties of Ocimum basilicum, while Holy Basil or tulsi is a separate species Ocimum tenuiflorum
Being Scottish, Barr's Irn Bru (full fat) was my go-to as a pick-me-up after a night on the sauce. Sadly now ruined by artificial sweeteners replacing some of the sugar due to government sugar taxes on pop.
Love the 90s nostalgia. Could also add something like…

<blink>&#x1f3d7; This page is under construction. &#x1F6A7;</blink>
I can't get behind bifurcation of job market based on what political side you belong to. This seems destructive at best, dangerous at worse. It's like the classic Palantir vs Google argument.

I won't hire anyone if they show any sort of activism at work.
This is an item in the 911 operator game. The description of the call is https://911-operator.fandom.com/wiki/Undercover_pizza

An example of the gameplay with that call is https://youtu.be/tEpyboLQ7bk?t=360

And an actual dispatcher call https://youtu.be/ZJL_8kNFmTI
Do code names have to be sexy?

I think they were riffing off 'Have Blue'.

https://en.wikipedia.org/wiki/Lockheed_Have_Blue
Agreed. But Hunter's only qualification for his role was who his dad was. It smells funny to me.

What gets conveniently overlooked by those pushing this story is the fact that the only interest was in the story itself, as an attack angle. To hell with that.
I’m not sure why you’ve got such a chip on your shoulder for terrible ideas such as this, or why you feel it’s appropriate to post comments with that tone. It makes you sound less intelligent than you clearly think you are.

Linking directly to a resource is a good thing. Nobody is saying it’s impossible to emulate linking with a single text file, I’m saying its a bad idea and a very, very poor user experience for regularly updated linear content like a blog.

Go ahead, publish your blog as as a giant text file. Or go ahead and print it on one giant continuous bit of paper and throw it out your window, if your aim is to disseminate your writing to an audience both are equally as effective.
Most likely to Flutter. When Google will be ready to ditch Android API.
I would love to self study with more vigor. I studied Mechanical engineering, but I find Math to be so beautiful. I think I chose the right education for the work I find meaningful in the world, but I wish I had more time to learn math that isn't directly relevant to what I am doing.

I'll certainly check out your site and save it for when the world is more peaceful.
Thanks! I am without kids so would have overlooked or never encountered this, but this is still solid intel for the future.
The easiest way to transition is to transfer internally in a company you already work for. However that doesn't seem like something available to you.

Try maybe looking for roles labelled "software security engineer" - those might be more likely to take a pure software background.

> I’m currently trying to get a CompTIS Security+ certificate.

Certs are not respected in the security industry, especially the easier ones like security+, to the point wherr its almost considered negative signal on a resume. Some of the harder ones like cssip are controversial in that it depends where you're applying whether or not its worth anything.

As a general rule, i would not bother with certs, but they can be useful as a general study guide sometimes, if you're not sure where to start.
Yes, I agree and just made the reference off hand.

We do!

[Looks over at Apple //e and IBM XT]

We need another open effort. Soon.
He does not refuse, but needs to look at bigger picture.

Some features are low hanging fruit, some are proposed small changes that actually should be defined a bit differently to be better and they will take more effort.

But even small hanging fruits means that they need to chose which ones to do. Should they delay pattern matching by 6 months to get elvis operator? I wouldn't like it, pattern matching is more important.

Basically they have limited resources and have to chose what to work on.
"Do they expect you to be in the same chair/desk/location everyday? I don't care to do #vanlife, but I want the flexibility to work from a hotel/other location from time to time."

Huh. It literally never even crossed my mind until you said that to care about where you are if you are remote. As long as you're doing the job, what does it matter where the "not here" you are?
To give a partial retort of OP:s assertion.
?? I spent 3 months studying there a while back. To me, Barcelona felt safer there than most large American cities that I’ve lived in. One “problem” was petty crime that seemed to mostly target tourists—-vigilance was indeed the solution… but more of “mind your surroundings” than “war zone.”
Can recommend Carptenter Brut's remix of this also.
https://www.youtube.com/watch?v=qr7Lt3sP9QI

If you want a pretty solid intro to this genre and music like it I would suggest the Night Ride FM mixes. You can find them on youtube https://www.youtube.com/watch?v=s0tKnpDwTio
I made the transition from software to security over a decade ago.

I took the academic route, and did a Master's degree in Information Security. I tried to get more security experience in my work.

Wasn't a fast transition for me, but I was fascinated by the subject, and wanted to really study it.

There's other and probably faster routes, but it really depends what interests you. It's a broad subject.

Offensive security can be good to learn, maybe look at doing something like OSCP.
You can turn on WebMidi by setting dom.webmidi.enabled to true in about:config, though that isn't a default so it's still a very valid criticism sadly.
A Digital Native Education
I don't remember Lucozade being anything _but_ a drink for recovery from illness. (Remember the yellow cellophane wrapped bottles?!) I have no idea how it attained this reputation.

These days, Lucozade Sport (in multiple flavours) has taken over, but being "isotonic", presumably has various salts.
The surprising (or not so surprising) thing about VW was that anyone who works in ECU tuning can tell you that a)the emissions cheating has been going on for decades and b)everyone has been doing it. They can pop open the assembly language for the ECU and said "and here's where it detects a signal from the ABS controller that only two wheels are being driven, and here's the data table of mixture and timing values it switches to."

It was also pretty absurd given that the US used to exempt "trucks" (including SUVs and even "crossovers") from passenger car emissions standards. This was (decades ago) to make things easier for farmers, supposedly, by sparing them the cost of emissions control equipment on their farm trucks. But the auto industry sold the government on the concept that what amounted to a jacked up station wagon car on bigger tires somehow didn't need to meet the same emissions standards as a passenger car, so they got to make more powerful engines with less emissions controls, and this is part of the reason we have SUVs everywhere.

I've been told by multiple Ford superduty owners that they rip out the urea injection and diesel particulate filter systems because "they're unreliable" and "it's such a pain keeping the DPF fluid topped off" and "it hurts performance." You can buy DPF in damn near any gas station that sells diesel, any auto parts store, any big-box retailer, any truck stop...and you get a warning well before the tank runs dry.
Is there something similar for Python? They are releasing new Python standards with a crazy fast speed. Would be really helpful for me.
esr seems to have a pretty big ego, just based on his writings. (e.g. at one point he declared that he can tell if someone is smart or not just by looking at them)
> But chrome's security and performance is miles better than firefox.

Not really. Maybe ~6 years ago but they've made insane progress. Full site isolation is rolling out now and the performance is great. Definitely faster than Chrome on my laptop.
This matches SF/Bay Area data. The official ICU usage was 10% - 15% occupied for corona cases for 2020, with a spike during delta.

The reason doctors and nurses were laid off from hospitals nationwide is that elective surgeries were post-poned during the pandemic.

The reason we're seeing disconnects between reality and the data are:

1) CDC found that infected population was 5x more than initially estimated

2) Fauci lied on a daily basis. The Stanford epidemiologists were suppressed (their advice paper has been signed by over 60,000 doctors.) Nobody can explain Fauci's behavior yet, though the NIH just published a document contradicting his Senate testimony on GoF research - he lied to Dr. Rand Paul repeatedly during a Congress commission, and refused oversight while spending one of the largest US government budgets. It was surreal to watch.
For the nerds here ...

You may understand the various licenses and their limitations, if even fuzzily.

But whenever I talk to business owners, they're shocked at the terms in GPL and AGPL. I don't mean surprised, I mean shocked - they thought the code was "free" with no attribution or distribution requirements, and are deeply upset. Typically they say, "Why didn't anybody tell me? How did this happen?"

And it becomes a big deal when told they need to distribute any of their code.

At Apple, their policy for decades was to not use GPL software. When they bought other companies, the first thing they did was to rewrite any software even touching the GPL.

Note that MySQL is used everywhere across Apple now, so that's one exception that I can think of, but they can get a license from Oracle (Apple has a close contractual relationship with Oracle, from decades of Oracle Enterprise porting, and internal distribution, and MRP products.)

Note that MySQL AB re-licensed their client library from a permissive license to GPL to drive revenue from their dual licensing strategy. There is an old fork available.

Source: ex-Apple.
> expelled from your home because your neighbors dislike you

The cause of being expelled, would be that everybody thinks you should be expelled - not that no one 'likes' you.
Framing the judgement as resting on private preferences, on likeability, diminishes common humanity which should be generally at large and is crucial to the persistence of any group. A viable community group will include members with tolerance and good judgement who would deny a consensus to expel without good cause. If such qualities are absent (completely so! to enable bad consensus) no amount of individual rights will make up for their absence.
If the customer covers the insurance then I'm not sure what is being accomplished. Seems pretty much like the existing situation.

I think the main problem with lolc's idea is setting the baseline at perfection rather than the baseline at the average driver. Penalties for vehicles causing more accidents per mile being accompanied with rewards for vehicles causing fewer accidents per mile would make more sense. But there are a lot of factors to consider in actually implementing that, not sure if it'd be feasible in practice.

Also, to clarify, from what I've seen I don't think Tesla's "Full Self-Driving" Beta is currently safer than a human driver. Used a hypothetical example of a super-safe autonomous vehicle to criticize the fact that it'd still get punished, when really it should be heavily encouraged.
Yes, and claims still require evidence. I'm quite anti-Google but I'm not going to just start believing in random theorizing of evil things they could conceivably be doing without evidence.
This is not a political argument. If you willingly participate in the construction and deployment of technological systems that are designed to be used to monitor, suppress and ultimately threaten the physical security of people who are non-violently opposed to the current group of people in power, you have essentially declared yourself an enemy of mankind, and I choose to personally act accordingly.
I’ve had 3 so far. All upgrades the wifi from 5 to 6e and had no issues with ubuntu, manjaro, or windows with changing between Realtek?, killer, and ONK. Tho all are supporting amd/intel and windows/linux. Some Brand’s are intel only.
I believe there was also prior art for slave owners branding or tattooing slaves with their initials[0], so it is quite logical for the Book of Revelation to describe a Beast doing this to people who were enslaved to it.

Using a numeric hash of the name instead of the text form also makes sense, just like the way TLS certificates use hashes of the domain name (and other details).

I guess I just don't see the funny side because what is described in Revelation is reminiscent of both terrible abuses of the past and modern day infringements of rights.

[0] https://imperiumromanum.pl/en/article/tattoos-in-roman-world...
That’s insane!